); };
const Inp = ({ k, placeholder, type }) => { const { settings, set } = React.useContext(SettingsCtx); return set(k, e.target.value)} placeholder={placeholder} className="w-full text-sm px-2.5 py-2 outline-none" style={inSty} />; };
/* ---------- cost basis method (server-backed, NOT a saved preference) ----------
Every other control on this screen writes the shared `settings` object the
browser persists. This one does not, and must not: it decides how the
ledger prices every future sale, so it lives on the legal entity in the
book and only a manager may change it. Reading and writing it here keeps
the switch and the number it moves in the same place. */
function CostMethodRow() {
const [status, setStatus] = useState('loading'); // loading | ready | offline
const [setting, setSetting] = useState(null);
const [busy, setBusy] = useState(false);
const [err, setErr] = useState('');
/* Through Backend, never a bare fetch. Every ledger route decides which
till it is answering for from x-workspace-id, and the header is the
Backend client's job — a raw fetch omits it, so on any branch with more
than one till the server refuses the scope and this row would have sat
there reading "unavailable" with nothing wrong with the desk. */
const api = window.CDOS && window.CDOS.Backend;
useEffect(() => {
if (!api || typeof fetch !== 'function' || window.location.protocol === 'file:') { setStatus('offline'); return; }
let alive = true;
api.loadCostMethod()
.then(j => { if (alive) { setSetting(j); setStatus('ready'); } })
.catch(() => { if (alive) setStatus('offline'); });
return () => { alive = false; };
}, []);
const fifo = !!setting && setting.method === 'fifo';
const flip = async () => {
if (busy || status !== 'ready') return;
setBusy(true); setErr('');
try {
setSetting(await api.setCostMethod(fifo ? 'weighted_average' : 'fifo'));
} catch (e) {
setErr(e && e.status === 403
? 'Only an owner or manager can change how stock is costed.'
: e && e.code === 'NETWORK_ERROR'
? 'Could not reach the desk — nothing was changed.'
: 'Could not save that — nothing was changed.');
}
finally { setBusy(false); }
};
const tip = ();
return (
Cost stock first-in, first-out {tip}}
desc="Off, the desk costs a sale at the average of everything you paid. On, it costs it against your oldest cash. Changes reported profit, so the change is recorded in the audit trail."
>
{status === 'ready'
?
: {status === 'loading' ? 'reading…' : 'unavailable'}}
{status === 'ready' && setting.entityChoice === null && (
Following your jurisdiction's suggestion ({setting.packDefault === 'fifo' ? 'first in, first out' : 'weighted average'}) until you choose.
)}
{status === 'offline' && (
Available on the hosted desk, where the ledger keeps the books.
)}
{err &&
{err}
}
);
}
/* ---------- the desk's compliance thresholds (server-backed) ----------
These four rows used to write the browser's saved settings and stop
there. Which meant the reporting line an owner set at sign-up lived in
one browser profile; the second till at the same desk held its own
copy; a cleared browser held none; and the ledger — which REFUSES a
deal when the customer has not been identified — could not see any of
it and compared against a hardcoded 3,000 instead.
So they go to the ledger, the same way CostMethodRow does and for the
same reason: through window.CDOS.Backend, never a bare fetch, because
every ledger route decides which till it is answering for from a
header only the Backend client sets.
The pack proposes and the desk decides. Each row shows what the desk
operates at, what its regulator requires, and — the part the owner
asked for — where the first stands against the second, live, as the
number changes. Tighter than the mandate is a decision, said plainly.
Looser is a compliance failure and looks like one.
They are ALSO mirrored back into the saved settings on success. Not
as a second source of truth — reportingLimit() prefers the server's
answer — but so the standalone build, which has no ledger to ask,
keeps working from the last number this desk actually chose. */
const THRESHOLD_MIRROR = {
reportThreshold: 'threshold',
idThreshold: 'idRequiredOver',
aggregationHours: 'aggHours',
retentionYears: 'retentionYears',
};
/* Where one line stands against the mandate. The whole point of the
component: "stricter" is a sentence, not a warning. It gets no colour,
no icon and no bell, because a desk that identifies at 1,000 where its
regulator asks 3,000 has done something deliberate and usually because
its bank asked. "Looser" gets all three, because that desk is failing
to report what it is legally obliged to report. */
function PostureNote({ p }) {
if (!p) return null;
if (p.standing === 'looser') return (
);
}
/* A money field that only commits when the owner has finished typing.
Committed on blur and on Enter rather than per keystroke, because
every commit is a round trip and an audit row — typing "10000" one
digit at a time would file five changes to the desk's reporting line,
four of them nonsense. */
function ThresholdInput({ value, currency, width, disabled, onCommit }) {
const [text, setText] = useState(value == null ? '' : String(value));
useEffect(() => { setText(value == null ? '' : String(value)); }, [value]);
const commit = () => {
const clean = String(text).trim().replace(/,/g, '');
if (!clean || !/^\d+(\.\d{1,2})?$/.test(clean) || +clean <= 0) {
setText(value == null ? '' : String(value)); // put it back; say nothing
return;
}
if (value != null && +clean === +value) return;
onCommit(clean);
};
return (
);
}
function DeskThresholdRows() {
const { settings, setSettings, log } = React.useContext(SettingsCtx);
const [status, setStatus] = useState('loading'); // loading | ready | offline
const [desk, setDesk] = useState(null);
const [busy, setBusy] = useState('');
const [err, setErr] = useState('');
const api = window.CDOS && window.CDOS.Backend;
useEffect(() => {
if (!api || typeof fetch !== 'function' || window.location.protocol === 'file:') { setStatus('offline'); return; }
let alive = true;
api.loadDeskThresholds()
.then(j => {
if (!alive) return;
setDesk(j);
/* Everything else on the desk reads reportingLimit(), which reads
this cache. Publishing the answer here as well as on first
render means the Ledger and the Dashboard pick up a change the
moment it is made, rather than on their next mount. */
if (window.CDOS.setDeskThresholds) window.CDOS.setDeskThresholds(j);
setStatus('ready');
})
.catch(() => { if (alive) setStatus('offline'); });
return () => { alive = false; };
}, []);
const save = async (field, value, note) => {
if (busy) return;
setBusy(field); setErr('');
try {
const answer = await api.setDeskThresholds({ [field]: value });
setDesk(answer);
if (window.CDOS.setDeskThresholds) window.CDOS.setDeskThresholds(answer);
const mirror = THRESHOLD_MIRROR[field];
const landed = answer[field] && answer[field].effective;
if (mirror && landed != null) setSettings(s => ({ ...s, [mirror]: +landed }));
log('Compliance threshold changed', note);
} catch (e) {
setErr(e && e.status === 403
? 'Only the owner can move a reporting line — it is the standing policy of the registered business, not a branch setting.'
: e && e.code === 'NETWORK_ERROR'
? 'Could not reach the desk — nothing was changed.'
: 'Could not save that — nothing was changed.');
} finally { setBusy(''); }
};
const posture = window.CDOS.jurisdictionPosture ? window.CDOS.jurisdictionPosture(settings) : [];
const standingOf = (settingsField) => posture.find(p => p.field === settingsField) || null;
const line = (field) => (desk && desk[field]) || null;
const currency = (desk && desk.currency) || settings.baseCurrency || 'CAD';
const authority = (desk && desk.regulator) || 'your regulator';
const disabled = status !== 'ready' || !!busy;
/* Hand a line back to the pack. Offered only where the desk has taken
one, because "follow the regulator" is not a change a desk already
following the regulator can make. */
const Release = ({ field, label }) => (line(field) && line(field).deskChoice != null && status === 'ready')
?
: null;
const unavailable = (
{status === 'loading' ? 'reading…' : 'unavailable'}
);
const reportTip = ();
return (
Large cash / reportable threshold {reportTip}}
desc={`Deals at or above this are reportable, and this is the figure every screen and every report on this desk uses. Kept on the ledger, not in this browser — so every till agrees, and so a change is recorded in the audit trail.`}>
{status === 'ready'
? save('reportThreshold', v, `reporting threshold ${fmt(+v, currency)}`)} />
: unavailable}
{status === 'ready'
? save('idThreshold', v, `identification threshold ${fmt(+v, currency)}`)} />
: unavailable}
{status === 'ready'
? save('aggregationHours', +v, `aggregation window ${v}h`)}
opts={[['12', '12h'], ['24', '24h'], ['48', '48h'], ['72', '72h']]} />
: unavailable}
{status === 'ready'
?
: unavailable}
{status === 'offline' && (
Available on the hosted desk, where the ledger keeps the books and enforces these lines.
)}
{err &&
{err}
}
);
}
/* ---------- the currencies this desk deals in (server-backed) ----------
There was no such setting, and there did not need to be, because the
answer was a literal in five places: `z.enum(["CAD","USD","EUR","GBP"])`
on every money route, with a matching list in the browser that was
checked BEFORE the server was even called. A shop whose whole trade
is the Philippine corridor was told by its own screen that "PHP is
not carried by the server ledger yet".
The ledger carries it. What it needed was for somebody to be able to
say so — see migration 020 and server/src/ledger/currency-control.ts.
Two states, and the difference matters. NO SET STATED is the normal
one and it is not a gap to be filled: the desk may deal in anything
the ledger carries. A STATED SET is a deliberate narrowing, and the
refusal a teller then meets at the counter names it. Clearing the
field returns to the first, which is why "Any currency" is a real
choice on this panel and not an empty text box.
Owner-only, on the same permission as the reporting line, and every
change is an audit row — including which currencies are still SITTING
IN THE DRAWERS after being dropped from the set. */
function DeskCurrencyRows() {
const { log } = React.useContext(SettingsCtx);
const [status, setStatus] = useState('loading'); // loading | ready | offline
const [desk, setDesk] = useState(null);
const [draft, setDraft] = useState('');
const [busy, setBusy] = useState(false);
const [err, setErr] = useState('');
const api = window.CDOS && window.CDOS.Backend;
/* No local role check. The ledger holds the permission and returns
403, and the error lands in `err` where the person who tried can
read it. A second copy of the rule here would be a second thing to
get out of step with the server's answer. */
useEffect(() => {
if (!api || typeof fetch !== 'function' || window.location.protocol === 'file:') { setStatus('offline'); return; }
let alive = true;
api.loadDeskCurrencies()
.then(answer => {
if (!alive) return;
setDesk(answer);
setDraft((answer.stated || []).filter(c => c !== answer.home).join(', '));
setStatus('ready');
})
.catch(() => { if (alive) setStatus('offline'); });
return () => { alive = false; };
}, []);
const commit = async (codes) => {
if (busy) return;
setBusy(true); setErr('');
try {
const answer = await api.setDeskCurrencies(codes);
setDesk(answer);
setDraft((answer.stated || []).filter(c => c !== answer.home).join(', '));
/* Published so the rest of the desk stops offering — and stops
refusing — the moment this changes, rather than on next mount. */
if (window.CDOS.refreshJurisdiction) window.CDOS.refreshJurisdiction();
log && log('Currencies changed', answer.stated ? answer.stated.join(', ') : 'any the ledger carries');
} catch (error) {
setErr(error.message || 'The ledger did not accept that.');
}
setBusy(false);
};
const save = () => {
const codes = String(draft).split(/[\s,]+/).map(x => x.trim().toUpperCase()).filter(Boolean);
commit(codes.length ? codes : null);
};
const unavailable = —;
const restricted = !!(desk && desk.stated);
return (
{restricted
? <>Trading {desk.stated.join(', ')}. Anything else is refused at the counter. Clear the field to deal in any currency the ledger carries.
: <>No set stated — this desk may deal in any currency the ledger carries. Its board quotes {(desk.suggested || []).join(', ')}.}
)}
{status === 'ready' && desk && Object.keys(desk.minorUnits || {}).length > 0 && (
/* The currencies that are NOT paid to two decimal places. Said out
loud because a teller quoting ¥1,234.56 is quoting money that
does not exist, and nobody would think to ask. */
{Object.entries(desk.minorUnits).map(([code, places]) =>
`${code} is counted in whole units`).join(' · ')}.
)}
{status === 'offline' && (
Available on the hosted desk, where the ledger keeps the books and enforces this.
)}
{err &&
{err}
}
);
}
// default cards on the account (until the owner edits them); helpers for card display
const seedCards = (settings) => (settings.cards) || [
{ id: 'card_visa', num: '4242 4242 4242 4242', exp: '04/27', name: (settings.billingName || 'Jordan Masri'), postal: 'M5V 2T6', role: 'primary' },
{ id: 'card_mc', num: '5555 5555 5555 4444', exp: '09/26', name: 'York FX Holdings Inc.', postal: 'M5V 2T6', role: 'backup' },
];
const cardBrand = (num) => { const r = String(num || '').replace(/\D/g, ''); return r[0] === '4' ? 'VISA' : r[0] === '5' ? 'MASTERCARD' : r[0] === '3' ? 'AMEX' : r[0] === '6' ? 'DISCOVER' : 'CARD'; };
const cardLast4 = (num) => String(num || '').replace(/\D/g, '').slice(-4);
const CARD_GRAD = { VISA: 'linear-gradient(135deg,#1a3a6b 0%,#264f8f 60%,#3a6fb0 100%)', MASTERCARD: 'linear-gradient(135deg,#3a2a1a 0%,#5c4326 55%,#8a5a1f 100%)', AMEX: 'linear-gradient(135deg,#16505a 0%,#1f7a86 100%)', DISCOVER: 'linear-gradient(135deg,#5a3a16 0%,var(--cd-amber) 100%)', CARD: 'linear-gradient(135deg,#34302a 0%,#4a4034 60%,#5c4a2e 100%)' };
// ---- identity verification cadence — a compact, always-live picture of the
// recheck / reverify line the VerificationNudge engine runs on (cdos-kyc.jsx).
// Built from flex + dashed rules so it can never fall out of sync with the
// numbers below it — not a static diagram. #2B50E2 is the one sanctioned literal
// (BRAND.md) for the KYC recommendation accent.
const KYC_BLUE = '#2B50E2';
function CadenceLadder({ recheckDays, reverifyDays, escalate }) {
const Stop = ({ tone, bg, icon, label }) => (
{label}
);
const Link = ({ label }) => (
{label}
);
return (
{escalate ? 'High-risk clients skip straight to Verified Plus at any point on this line.' : 'High-risk escalation is off \u2014 high-risk clients follow this same line.'}
);
}
// 4-digit transaction PIN. Changing it verifies the current PIN first, then
// takes the new PIN twice — the standard change-PIN flow.
/* Your own till PIN. The old version compared your current PIN against a
copy sitting in the browser — so the check could be skipped and the PIN
read. It is set on the server now: this screen only collects digits and
reports what the server says. */
function PinSetter({ hasPin: hasPinProp, onSave }) {
const [open, setOpen] = useState(false);
const [cur, setCur] = useState('');
const [a, setA] = useState('');
const [b, setB] = useState('');
const [err, setErr] = useState('');
const [done, setDone] = useState(false);
const [busy, setBusy] = useState(false);
const [hasPin, setHasPin] = useState(!!hasPinProp);
const [mustChange, setMustChange] = useState(false);
// forgotten it: prove yourself with your sign-in password instead of the
// PIN you can't remember, so nobody has to be told a new one
const [forgot, setForgot] = useState(false);
const [pw, setPw] = useState('');
const load = () => fetch('/api/staff/pin', { credentials: 'same-origin' })
.then(r => r.ok ? r.json() : null)
.then(r => { if (r) { setHasPin(!!r.hasPin); setMustChange(!!r.mustChange); } })
.catch(() => {});
useEffect(() => { let alive = true; load().then(() => { if (!alive) return; }); return () => { alive = false; }; }, []);
const clean = (v) => (v || '').replace(/\D/g, '').slice(0, 4);
const close = () => { setOpen(false); setForgot(false); setCur(''); setPw(''); setA(''); setB(''); setErr(''); };
const save = async () => {
if (a.length !== 4) { setErr('New PIN must be 4 digits.'); return; }
if (a !== b) { setErr('The two new PINs don’t match.'); return; }
if (hasPin && !forgot && cur.length !== 4) { setErr('Enter your current PIN.'); return; }
if (hasPin && forgot && !pw) { setErr('Enter your sign-in password.'); return; }
setBusy(true); setErr('');
try {
const res = await fetch(forgot ? '/api/staff/pin/reset' : '/api/staff/pin', {
method: 'POST', headers: { 'content-type': 'application/json' }, credentials: 'same-origin',
body: JSON.stringify(forgot ? { pin: a, password: pw } : (hasPin ? { pin: a, currentPin: cur } : { pin: a })),
});
if (!res.ok) {
setBusy(false);
if (res.status === 401) { setErr(forgot ? 'That’s not your sign-in password.' : 'Your current PIN isn’t right.'); return; }
if (res.status === 429) { setErr('Too many wrong tries — wait a few minutes.'); return; }
setErr('That didn’t save. Try again.'); return;
}
} catch (e) { setBusy(false); setErr('No connection — the PIN was not changed.'); return; }
setBusy(false); setHasPin(true); setMustChange(false);
onSave && onSave();
close();
setDone(true); setTimeout(() => setDone(false), 1800);
};
const fld = { border: `1px solid ${CD.line}`, background: 'var(--cd-panel)', borderRadius: 8, width: 128, letterSpacing: '0.4em', textAlign: 'center', fontFamily: 'Space Mono, monospace', fontSize: 15, padding: '8px 10px', outline: 'none' };
if (!open) {
/* A PIN somebody else issued is a way back in, not an identity — say so
plainly until they've picked their own. */
const tone = done ? CD.green : mustChange ? CD.amber : hasPin ? CD.green : CD.mute;
const label = done ? 'PIN updated' : mustChange ? 'Issued to you — pick your own' : hasPin ? 'PIN set' : 'No PIN yet';
return (
{label}
);
}
return (
{forgot ? 'Reset your PIN' : hasPin ? 'Change your PIN' : 'Set your PIN'}
{forgot &&
Your sign-in password proves it’s you. The new PIN is yours alone — nobody here is told it.
}
{hasPin && !forgot && }
{hasPin && forgot && }
{err &&
{err}
}
{hasPin && }
);
}
function SettingsView({ perms, setPerms, settings, setSettings, me, log, tickerCfg, setTicker, branches, setBranches, branchMoves, setBranchMoves, jump, rows, setRows, clients, setClients, onOpenLedger, askPin, reqPin, pinOf }) {
const canSys = me.role === 'Owner' || perms.Teller.canSettings;
const [tab, setTab] = useState(canSys ? 'business' : 'account');
const [addingLoc, setAddingLoc] = useState(false); // enterprise Add-location modal (shared with Branch Network's rail)
const [importing, setImporting] = useState(false);
const [expOpts, setExpOpts] = useState({ range: 'all', includeVoid: false, cols: 'all' });
const [exported, setExported] = useState(false);
// nav search — filters the settings rail by label + per-tab keywords
const [navQ, setNavQ] = useState('');
const [empSel, setEmpSel] = useState(null); // selected employee id — master/detail view
// a PIN the owner has just issued, shown once so it can be read out
const [newPin, setNewPin] = useState({}); // employee id → { pin } | { err }
// ---- server sign-in accounts (per-employee credentials) ----
const [srvStaff, setSrvStaff] = useState(null); // staffId → server account
const [srvState, setSrvState] = useState('loading'); // loading | ok | offline | forbidden
const [srvPw, setSrvPw] = useState(''); // temp-password draft in the open profile
const [srvMsg, setSrvMsg] = useState('');
const [srvBusy, setSrvBusy] = useState(false);
const [pwForm, setPwForm] = useState(null); // my own password change {cur,a,b,msg,busy}
const SRV_ROLE = { 'Owner': 'administrator', 'Manager': 'branch_manager', 'Senior teller': 'supervisor', 'Cashier': 'teller', 'Trainee': 'teller' };
const srvReload = () => {
if (typeof fetch !== 'function' || window.location.protocol === 'file:') { setSrvState('offline'); return; }
fetch('/api/staff', { credentials: 'same-origin' })
.then(r => { if (r.status === 401 || r.status === 403) { setSrvState('forbidden'); return null; } if (!r.ok) { setSrvState('offline'); return null; } return r.json(); })
.then(d => { if (!d) return; const m = {}; (d.staff || []).forEach(a => { m[a.staffId] = a; }); setSrvStaff(m); setSrvState('ok'); })
.catch(() => setSrvState('offline'));
};
useEffect(() => { srvReload(); }, []);
useEffect(() => { setSrvPw(''); setSrvMsg(''); setSrvBusy(false); }, [empSel]);
const srvCall = async (method, url, body) => {
const res = await fetch(url, { method, headers: { 'content-type': 'application/json' }, credentials: 'same-origin', body: body ? JSON.stringify(body) : undefined });
const d = await res.json().catch(() => null);
if (!res.ok) throw new Error((d && (d.detail || d.error)) || ('HTTP ' + res.status));
return d;
};
// blocking or removing a person locally also shuts their server sign-in
const srvSetActive = (code, active) => {
const sid = (code || '').trim(); if (!sid || !srvStaff || !srvStaff[sid]) return;
srvCall('PATCH', '/api/staff/' + encodeURIComponent(sid), { active }).then(srvReload).catch(() => {});
};
const [planMsg, setPlanMsg] = useState('');
// Stripe is the commercial system of record. Card details never touch
// CurrencyDesk; selecting a plan opens Stripe-hosted Checkout instead.
const pickPlan = async (id) => {
if ((settings.billingPlan || 'premium') === id) return;
setPlanMsg('');
if (typeof fetch !== 'function' || window.location.protocol === 'file:') { setPlanMsg('Billing is available in the hosted CurrencyDesk app.'); return; }
try {
const res = await fetch('/api/billing/checkout', { method: 'POST', headers: { 'content-type': 'application/json' }, credentials: 'same-origin', body: JSON.stringify({ plan: id, cycle: (settings.billingCycle || 'monthly'), idempotencyKey: crypto.randomUUID() }) });
const data = await res.json().catch(() => null);
if (!res.ok || !data || !data.url) throw new Error((data && (data.detail || data.error)) || ('HTTP ' + res.status));
window.location.assign(data.url);
} catch (err) {
setPlanMsg(err && err.message === 'billing_not_configured'
? 'Billing is being configured. Please contact CurrencyDesk support to change plans.'
: 'Could not open secure checkout. Please try again or contact CurrencyDesk support.');
}
};
const openBillingPortal = async () => {
setPlanMsg('');
try {
const res = await fetch('/api/billing/portal', { method: 'POST', credentials: 'same-origin' });
const data = await res.json().catch(() => null);
if (!res.ok || !data || !data.url) throw new Error((data && (data.detail || data.error)) || ('HTTP ' + res.status));
window.location.assign(data.url);
} catch (err) {
setPlanMsg(err && err.message === 'no_billing_customer'
? 'Choose a plan first to begin secure billing setup.'
: 'Could not open the secure billing portal. Please try again or contact CurrencyDesk support.');
}
};
// ---- hosted public site (server-side tenant: slug + custom domain) ----
const [siteInfo, setSiteInfo] = useState(null); // { siteSlug, siteDomain } | null = unavailable
const [siteDraft, setSiteDraft] = useState('');
const [siteMsg, setSiteMsg] = useState('');
const [siteBusy, setSiteBusy] = useState(false);
const [pubMsg, setPubMsg] = useState('');
const [pubBusy, setPubBusy] = useState(false);
useEffect(() => {
if (typeof fetch !== 'function' || window.location.protocol === 'file:') return;
fetch('/api/tenant', { credentials: 'same-origin' })
.then(r => r.ok ? r.json() : null)
.then(d => {
if (!d || !d.tenant) return;
setSiteInfo(d.tenant);
setSiteDraft(d.tenant.siteDomain || '');
// adopt whatever this tenant already published so switching shops
// (York FX this week, another next week) shows THEIR live details,
// not a stale local copy. Only fill blanks \u2014 never clobber unsaved edits.
const cfg = d.tenant.siteConfig;
if (cfg) setSettings(s => {
const patch = {};
['phone:bizPhone', 'email:bizEmail', 'address:bizAddress', 'city:bizCity', 'region:bizRegion', 'postal:bizPostal'].forEach(pair => {
const [src, dst] = pair.split(':');
if (cfg[src] && !s[dst]) patch[dst] = cfg[src];
});
if (Array.isArray(cfg.hours) && cfg.hours.length && !(Array.isArray(s.hours) && s.hours.length)) patch.hours = cfg.hours;
return Object.keys(patch).length ? { ...s, ...patch } : s;
});
})
.catch(() => {});
}, []);
// business hours: a template until the shop edits them; the editor and the
// publisher both read this fallback so a fresh shop still ships sane hours
const HOURS_SEED = [{ days: 'Mon–Fri', hours: '9:30am–6:00pm' }, { days: 'Sat–Sun & holidays', hours: '10:00am–5:00pm' }];
const hoursList = Array.isArray(settings.hours) && settings.hours.length ? settings.hours : HOURS_SEED;
const setHours = (next) => setSettings(s => ({ ...s, hours: next }));
// one source of truth: the same phone/email/address/hours the desk shows
// are what the public site publishes
const publishSiteConfig = () => {
setPubBusy(true); setPubMsg('');
const body = { siteConfig: {
phone: settings.bizPhone || '', email: settings.bizEmail || '',
address: settings.bizAddress || '', city: settings.bizCity || '', region: settings.bizRegion || '', postal: settings.bizPostal || '',
hours: hoursList.filter(h => h && String(h.days).trim() && String(h.hours).trim()),
} };
fetch('/api/tenant', { method: 'PATCH', headers: { 'content-type': 'application/json' }, credentials: 'same-origin', body: JSON.stringify(body) })
.then(async r => {
const d = await r.json().catch(() => null);
if (r.ok) { setSiteInfo(d.tenant ? { ...siteInfo, ...d.tenant } : siteInfo); setPubMsg('Published \u2014 the site shows this now.'); log('Public site', 'contact & hours published'); }
else if (r.status === 401 || r.status === 403) setPubMsg('Only a manager or the owner can publish site details.');
else setPubMsg((d && d.detail) || 'Couldn\u2019t publish (' + r.status + ').');
})
.catch(() => setPubMsg('Server unreachable \u2014 publish from the live desk.'))
.then(() => setPubBusy(false));
};
const saveSiteDomain = () => {
const domain = siteDraft.trim().toLowerCase() || null;
setSiteBusy(true); setSiteMsg('');
fetch('/api/tenant', { method: 'PATCH', headers: { 'content-type': 'application/json' }, credentials: 'same-origin', body: JSON.stringify({ siteDomain: domain }) })
.then(async r => {
const d = await r.json().catch(() => null);
if (r.ok) { setSiteInfo(d.tenant); setSiteDraft(d.tenant.siteDomain || ''); setSiteMsg(d.tenant.siteDomain ? 'Saved — point your DNS and the site answers on it.' : 'Domain disconnected.'); log('Public site', d.tenant.siteDomain ? 'domain ' + d.tenant.siteDomain : 'domain disconnected'); }
else if (r.status === 401 || r.status === 403) setSiteMsg('Only the owner account can change the site domain.');
else setSiteMsg((d && d.detail) || 'Couldn\u2019t save (' + r.status + ').');
})
.catch(() => setSiteMsg('Server unreachable \u2014 try again on the live desk.'))
.then(() => setSiteBusy(false));
};
const changeMyPassword = async () => {
if (!pwForm) return;
if (pwForm.a.length < 8) { setPwForm(f => ({ ...f, msg: 'New password needs at least 8 characters.' })); return; }
if (pwForm.a !== pwForm.b) { setPwForm(f => ({ ...f, msg: 'The two new entries don\u2019t match.' })); return; }
setPwForm(f => ({ ...f, busy: true, msg: 'Saving\u2026' }));
try {
const res = await fetch('/api/auth/change-password', { method: 'POST', headers: { 'content-type': 'application/json' }, credentials: 'same-origin', body: JSON.stringify({ currentPassword: pwForm.cur, newPassword: pwForm.a }) });
if (res.status === 401) { setPwForm(f => ({ ...f, busy: false, msg: 'Current password is wrong.' })); return; }
if (!res.ok) { setPwForm(f => ({ ...f, busy: false, msg: 'Couldn\u2019t save (' + res.status + ') \u2014 try again.' })); return; }
} catch (e2) { setPwForm(f => ({ ...f, busy: false, msg: 'Server unreachable \u2014 password changes need the live desk.' })); return; }
log('Password changed', 'sign-in password');
setPwForm({ cur: '', a: '', b: '', msg: 'Password changed.', busy: false });
setTimeout(() => setPwForm(null), 1600);
};
const NAV_KEYWORDS = { business: 'logo msb fintrac reporting entity name address', locations: 'branch till teller station', localization: 'currency timezone date time format region', compliance: 'kyc verification threshold lctr aggregation structuring sanctions retention nudge quick check reverify escalate jurisdiction fintrac fincen partner code', billing: 'plan subscription invoice provider kyc partner code seats', payment: 'card visa mastercard billing email', ledger: 'import csv excel duplicate', till: 'cash drawer count denomination variance tolerance reconcile blind handoff close day float', transfers: 'remittance corridor beneficiary eft eftr threshold cross-border reporting settlement purpose', cheques: 'cheque check clearing hold fee schedule nsf risk minimum days', clients: 'kyc risk id expiry email phone contact', rates: 'spread margin fee floor rounding rate lock provider commission', vault: 'cash floor reserve stock low valuation cost', receipts: 'print header footer disclaimer logo', tagged: 'auto tag follow-up review', ticker: 'tape scroll speed flags', employees: 'staff team seats accounts apps roles', permissions: 'roles presets teller handoff drawer count' };
const navMatch = (id, label) => { const q = navQ.trim().toLowerCase(); if (!q) return true; return (label + ' ' + (NAV_KEYWORDS[id] || '')).toLowerCase().includes(q); };
/* "Reset demo data" IS GONE, and it is worth saying why rather than
leaving a gap somebody fills back in.
It cleared every cdos_ key and called location.reload(). The reload
fires beforeunload, and the persistence bridge flushes on
beforeunload with keepalive:true — so the now-empty snapshot raced
the navigation to the server. One of two things happened, decided by
a race nobody could see: the flush landed and the tenant's server
document was erased — clients, filings, settings, all of it,
permanently — or the flush lost and the button appeared to do
nothing at all.
So it was a non-deterministic wipe of real customer data behind a
word that said "demo". And there is no demo data left to reset: the
seeded book, clients, baseline and shifts were deleted when the
screens moved onto the ledger.
A desk that genuinely wants a shop full of believable data for a
sales demo needs a DEMO TENANT — provisioned server-side, with real
ledger rows somebody can post against and void — not a button that
stuffs fiction into a real desk's browser and calls the difference a
reset. That is a feature, and it belongs to whoever runs the
platform, not to a shop's Settings screen. */
// appearance (light / dark / auto) — persisted per device by the theme controller
const [appearance, setAppearance] = useState(() => (window.CDOS.theme ? window.CDOS.theme.get() : 'light'));
const pickAppearance = (v) => { if (window.CDOS.theme) window.CDOS.theme.set(v); setAppearance(v); log('Appearance changed', v === 'auto' ? 'auto (follow system)' : v + ' mode'); };
const [addingCard, setAddingCard] = useState(false);
const [cardDraft, setCardDraft] = useState({ num: '', exp: '', cvc: '', name: '', postal: '' });
const [icfg, setIcfg] = useState(() => (window.CDOS.importCfg ? window.CDOS.importCfg.load() : {}));
const setIc = (patch, note) => { const next = window.CDOS.importCfg ? window.CDOS.importCfg.save(patch) : Object.assign({}, icfg, patch); setIcfg(next); if (note) log('Import setting changed', note); };
useEffect(() => { if (jump && jump.t) setTab(jump.t); }, [jump && jump.n]);
// jurisdiction follows Localization: when the operating country resolves to exactly
// one regulator pack, apply it automatically so the picker, threshold and codes agree.
useEffect(() => {
const REG = ((window.CDOS._compliance || {}).REGIMES) || {};
const mc = settings.bizCountry || 'Canada';
const match = Object.values(REG).filter(r => r.country === mc);
if (match.length === 1 && settings.regime !== match[0].id) {
const r = match[0];
setSettings(s => ({ ...s, regime: r.id, threshold: r.threshold, baseCurrency: r.currency, idRequiredOver: r.idAt, aggHours: r.aggHours }));
}
}, [settings.bizCountry]);
// ---- ledger export (moved out of the Ledger toolbar; full-book download with options) ----
const cadOfX = (a, c) => c === 'CAD' ? (+a || 0) : (+a || 0) / (crossRate('CAD', c) || 1);
const expList = (() => { const list = rows || []; const today = new Date().toISOString().slice(0, 10); const ym = today.slice(0, 7), yy = today.slice(0, 4); let l = expOpts.range === 'month' ? list.filter(r => String(r.date || '').slice(0, 7) === ym) : expOpts.range === 'year' ? list.filter(r => String(r.date || '').slice(0, 4) === yy) : list.slice(); if (!expOpts.includeVoid) l = l.filter(r => r.status !== 'void'); return l; })();
const exportLedger = () => {
const esc = (v) => { const s = String(v == null ? '' : v); return /[",\n]/.test(s) ? '"' + s.replace(/"/g, '""') + '"' : s; };
const full = expOpts.cols === 'all';
const head = full ? ['Ref', 'Date', 'Time', 'Customer', 'Type', 'InCcy', 'InAmt', 'Rate', 'OutCcy', 'OutAmt', 'Fee', 'CAD value', 'Teller', 'Status', 'Filed', 'Notes'] : ['Ref', 'Date', 'Customer', 'Type', 'Pay-in', 'Pay-out', 'Fee', 'CAD value'];
const lines = expList.map(x => { const cad = cadOfX(x.inAmt, x.inCcy).toFixed(2); return (full
? [x.ref, x.date, x.time, x.customer, x.type, x.inCcy, x.inAmt, x.rate, x.outCcy, x.outAmt, x.fee, cad, x.teller, x.status, x.filed ? (x.filedInfo && x.filedInfo.ref || 'yes') : '', x.notes]
: [x.ref, x.date, x.customer, x.type, (x.inAmt + ' ' + x.inCcy), (x.outAmt + ' ' + x.outCcy), x.fee, cad]).map(esc).join(','); });
const blob = new Blob([[head.join(','), ...lines].join('\n')], { type: 'text/csv' });
const a = document.createElement('a'); a.href = URL.createObjectURL(blob); a.download = 'ledger-' + new Date().toISOString().slice(0, 10) + '.csv'; a.click();
log && log('Ledger exported', expList.length + ' rows · ' + expOpts.range + (expOpts.includeVoid ? ' · incl. voided' : ''));
setExported(true); setTimeout(() => setExported(false), 1800);
};
// exporting the whole book is a sensitive action — gate it behind the operator's PIN
const exportLedgerGated = () => {
const need = askPin && (!reqPin || reqPin(me.name));
if (need) askPin({ title: 'Confirm export', sub: 'Enter your PIN to download the ledger', name: me.name, expected: pinOf ? pinOf(me.name) : '0000', onOk: exportLedger });
else exportLedger();
};
const inits = (n) => (n || '?').split(/[ .]+/).filter(Boolean).map(x => x[0]).join('').slice(0, 2).toUpperCase();
// a staff member can ALWAYS manage their own profile; system + app settings need canSettings
const myProf = (settings.staff && settings.staff[me.name]) || {};
const setProf = (k, v) => setSettings(s => ({ ...s, staff: { ...(s.staff || {}), [me.name]: { ...((s.staff || {})[me.name] || {}), [k]: v } } }));
// the signed-in user's own account record — holds their transaction PIN
const myEmp = (settings.employees || []).find(e => e.name === me.name) || null;
// the PIN itself is set on the server; this only writes the line in the log
const setMyPin = () => log('Transaction PIN', 'PIN set');
const set = (k, v, note) => { setSettings(s => ({ ...s, [k]: v })); if (note) log('Setting changed', note); };
const toggleSet = (k, label) => { setSettings(s => ({ ...s, [k]: !s[k] })); log('Setting changed', `${label} · ${!settings[k] ? 'on' : 'off'}`); };
const togglePerm = (k) => { setPerms(p => ({ ...p, Teller: { ...p.Teller, [k]: !p.Teller[k] } })); log('Permission changed', `Teller · ${k}`); };
const base = settings.baseCurrency || 'CAD';
/* The logo goes on every receipt and into the desk's saved state on
every write, so a full-resolution upload is a second standing
contributor to the four-megabyte ceiling after ID scans. Same
intake, same refusal. */
const [logoErr, setLogoErr] = useState('');
const uploadLogo = async (file) => {
const taken = await window.CDOS.intakeIdImage(file);
if (!taken.ok) { setLogoErr(taken.why); return; }
setLogoErr(''); set('logo', taken.dataUrl, 'business logo');
};
// ---- locations / tills / people setup (single source: branches) ----
const setBranchF = (id, patch) => setBranches && setBranches(list => list.map(b => b.id === id ? { ...b, ...patch } : b));
const removeBranchF = (id) => setBranches && setBranches(list => list.length > 1 ? list.filter(b => b.id !== id) : list);
const addBranchF = () => setBranches && setBranches(list => [...list, { id: 'b' + Date.now(), name: 'New location', code: 'LOC-' + ((list ? list.length : 0) + 1), city: '', status: 'open', dealsToday: 0, volToday: 0, tills: [{ id: 't' + Date.now(), name: 'Till 1', teller: '', status: 'open', cash: { CAD: 0 } }] }]);
const setTillF = (bId, tId, patch) => setBranches && setBranches(list => list.map(b => b.id === bId ? { ...b, tills: (b.tills || []).map(t => t.id === tId ? { ...t, ...patch } : t) } : b));
const removeTillF = (bId, tId) => setBranches && setBranches(list => list.map(b => b.id === bId ? { ...b, tills: (b.tills || []).length > 1 ? b.tills.filter(t => t.id !== tId) : b.tills } : b));
const addTillF = (bId) => setBranches && setBranches(list => list.map(b => { if (b.id !== bId) return b; const n = (b.tills || []).length + 1; return { ...b, tills: [...(b.tills || []), { id: 't' + Date.now(), name: 'Till ' + n, teller: '', status: 'open', cash: { CAD: 0 } }] }; }));
/* shared controls live at module scope (stable identity → inputs keep
focus). Value-bearing ones read this via SettingsCtx, provided below. */
/* `setSettings` and `log` ride along for DeskThresholdRows, which
writes the LEDGER and only mirrors the result here — see its
header. Everything else in the context is unchanged. */
const ctxVal = { settings, set, base, setSettings, log };
const CAPS = [['canDelete', 'Void transactions', 'Reverse a posted record (with a reason).'], ['canExport', 'Export & generate reports', 'CSV export and printable reports.'], ['canViewReports', 'View Dashboard, Reports & Vault', 'Access aggregated figures.'], ['canCloseDay', 'Close out the day', 'Reconcile the drawers and lock / open the trading day.'], ['canEditKYC', 'Edit clients & KYC', 'Create contacts and edit ID details.'], ['canSettings', 'Open Settings', 'Change this configuration.']];
const FXC = (typeof CUR !== 'undefined' ? CUR : []).filter(c => c.code !== 'CAD');
const hidden = tickerCfg.hidden || [];
const setT = (patch, note) => { setTicker(t => ({ ...t, ...patch })); if (note) log('Ticker updated', note); };
const toggleCcy = (code) => setT({ hidden: hidden.includes(code) ? hidden.filter(c => c !== code) : [...hidden, code] }, code);
const NAV_GROUPS = canSys ? [
['Business', [
['business', 'Business profile', 'building'],
['locations', 'Locations & tills', 'wallet'],
['employees', 'Employees', 'users'],
['localization', 'Localization', 'globe'],
['compliance', 'Compliance & jurisdiction', 'shield'],
['billing', 'Billing & plan', 'coins'],
['payment', 'Payment methods', 'card'],
]],
['App settings', [
['texts', 'Texts · SMS', 'smartphone'],
['ledger', 'Ledger', 'scroll'],
['clients', 'Clients · KYC', 'users'],
['till', 'Cash drawer', 'wallet'],
['vault', 'Cash on hand · Vault', 'building'],
['transfers', 'Transfers', 'globe'],
['cheques', 'Cheques', 'receipt'],
['rates', 'Rates & fees', 'percent'],
['receipts', 'Receipts', 'receipt'],
['tagged', 'Tagged', 'bookmark'],
['ticker', 'Ticker tape', 'bars'],
]],
['Access', [
['permissions', 'Role presets', 'id'],
]],
] : [];
return (
How CurrencyDesk looks on this workstation. Applies to the whole desk, including the lock screen — receipts and filed reports always print on paper white. Auto follows your system setting.