Jeppe BandJeppe Bundgaard
b7859d4ede
## Summary - add chauffeur/subuser password recovery by SMS and authenticated password changes - add a read-only pre-authorized access-request preview with explicit approve/deny actions - replace duplicate customer grants with one deduplicated Buefy dropdown - show colored vehicle, toolbox, calendar, order, and driver permission indicators - add localized copy across all supported locale sources and generated catalogs ## Verification - ESLint passed - grant deduplication/icon unit tests: 2 passed - authentication Playwright coverage: 3 passed - authorized subuser management Playwright coverage: 1 passed - mocked direct approval browser flow passed - i18n source/runtime checks passed - production build passed (2,034 modules transformed) - `git diff --check` passed ## Paired delivery Paired API PR: https://github.com/copenhagentruckwash/api/pull/325 ## Visual change previews ### View: Forgot-password account selection **Description:** Visitors can now choose customer or chauffeur recovery; chauffeur recovery requests the country code and phone number used for the SMS reset link. #### Mobile (390 x 844) **Before:**  **After:**  #### Tablet (768 x 1024) **Before:**  **After:**  #### Desktop (1440 x 900) **Before:**  **After:**  ### View: Pre-authorized customer access decision **Description:** The SMS destination now previews the exact chauffeur and customer request and requires an explicit approve or deny action before mutating access. #### Mobile (390 x 844) **Before:**  **After:**  #### Tablet (768 x 1024) **Before:**  **After:**  #### Desktop (1440 x 900) **Before:**  **After:**  --------- Co-authored-by: Jeppe Bundgaard <jb@truckwash.dk>
Customer and subuser lifecycle visual comparisons
Forgot-password account selection
The reset page previously accepted only a customer number. It now lets the visitor choose a customer or chauffeur account. Chauffeur recovery uses the country code and phone number and sends the one-time reset link by SMS.
Pre-authorized customer access decision
The SMS link previously had no destination view. It now opens a read-only request preview, identifies the chauffeur and customer, and requires an explicit approve or deny action before the one-time token mutates access.
The related signed-in profile and customer grant selector use the same responsive components. The selector is deduplicated by customer number and uses colored permission indicators for vehicles, tools, calendar, orders, and driver access.