- Scanning a vehicle QR (its register code, e.g. TLB04) books diesel from the main
tank; litres, optional odometer and a required meter photo (stored protected,
viewable from the Booked out table)
- Settings: users are Full or Clock-app-only; clock-only users are confined to /clock
- Clock app: tapped tab highlights at once plus a loading screen; remove the
"scanned on this device" list
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Add PocketBase login, first-sign-in password changes, account settings,
and user activation, reactivation and deletion with self-removal guards.
Protect application pages and APIs and keep private pages out of PWA
caches.
Resolve plant locations from site assignments and improve map controls,
profit chart views, navigation and mobile table layouts.
Validation: production build and TypeScript passed; 28 unit tests passed.
Backend access integration tests and mobile verification are documented.
