1. Admin adds the user in Settings → Access Management (username + display name).
2. Admin clicks 🔗 Link next to the user — the server generates a secure UUID token and copies the personal login URL to clipboard.
3. Admin sends the URL to the user via email, WhatsApp, etc.
4. User opens the URL → sees the Google Authenticator QR code setup screen → scans it → enters the 6-digit code → logged in.
5. From that point on, the URL is never needed again. Next visit asks for the TOTP code directly (username is remembered in the browser).

• Shows real-time position of all active field salespeople as colored dots on OpenStreetMap.
• Click a device card in the left sidebar to center the map and open a popup with address and speed.
• The route polyline draws today's GPS path. Historical days (−1/−2/−3) load from the server.
• Time slider (07:00–19:00) — drag to replay the route hour by hour. Start Day / End Day buttons snap it to those events.
• Center FAB (bottom-right) — re-enables auto-follow mode after manual map pan.
• Green dot on device card = pinged within 30 min. Red = inactive.
• Team tags (🏷 TeamName) — click to open a popup listing all team members with live/offline status. Click a member to fly to them on the map.

• Opens automatically to today's data when you navigate to this tab.
• Select a device and date to view that salesperson's complete GPS route for the day.
• Addresses shown per ping (street, number, city) — filled by a background geocoding worker.
• Export CSV — downloads raw coordinates and timestamps.
• SQL viewer — shows the exact query executed, useful for debugging.

• Logs every action the APK posts to the server: Start Day, End Day, Check-in, Check-out, Tracking On, Tracking Off.
• Color-coded badges: green ▶ = tracking on, gray ⏹ = tracking off, blue = check-in, orange = check-out.
• Filter by device, date range, and event type.
• Check-in rows show customer name and memo entered by the salesperson.

• Shows total GPS pings per salesperson for the selected date range.
• Filter by team, individual worker, and date. Quick buttons: Today, −1, −2, −3.
• Useful for checking who was actively tracking on a given day.

• Salesperson submits a price approval request from the APK (customer name, item, requested price).
• Manager sees it here and approves or rejects with a note.
• Filter by date range, salesperson, and status (Pending / Approved / Rejected).
• Quick date buttons: Today, −1, −2, −3, All.

• History of server health alert emails — shows when the server went down and when it recovered.
• Email recipients are configured in Settings → Alerts.

• Enable/disable maintenance mode — shows a banner in the APK.
• Lock Now — requires PIN 2242 to re-open settings.
• Full Sign Out — clears browser session and remembered username (for testing first-time login).

• Add or edit field salespeople — name, username, device ID.
• Approve pending devices (new APK installs appear here awaiting approval).
• Set permissions: can_settings, is_admin, can_delete.
• Assign worker to a team via team_name. Mark as team leader with is_team_leader.

• Manage web dashboard login accounts (separate from APK workers).
• 🔗 Link — generates a personal login URL for first-time 2FA setup.
• 📲 QR — show the Google Authenticator QR code for the user.
• Disable/Enable — temporarily revoke access without deleting the account.

• Manage location categories shown in the APK (e.g. לקוח חדש, מתחרים).
• Manage team names.

• Configure email recipients for server down/up notifications.

• Upload new APK release files — salespersons receive an in-app update prompt.
• Set the version name and code shown in the update dialog.

• Database statistics, record counts, and backup status.

• Node.js server status and restart button.
• SQL Server Express and SQL Browser service status with start/stop controls.

• List of devices awaiting approval — approve or reject new APK installs.

• IPs blocked by the login enumeration guard (after 5 failed username/token attempts in 15 min).
• Unblock button to manually release a blocked IP.

• Press ▶ Play to start GPS tracking (green dot = active, sends pings every 60 s).
• Press ⏹ Stop to pause tracking (red dot = offline).
• Route shown on OpenStreetMap — no API key or data charges.
• Start Day / End Day buttons — log start/end events and override the 07:00–19:00 GPS gate.
• Save Location — pins your current GPS position as a special location.

• נכנסתי ללקוח — check in to a customer visit (enter customer name + memo).
• יצאתי מהלקוח — check out from the visit.
• Live HH:MM:SS timer shows duration of the current visit.
• Today's visit history shown at the bottom (loaded from server on open).
• Recent customer names are remembered (up to 20) for quick re-entry.

• Special locations pinned from the Live tab map.
• Tap any location to open it in Google Maps or Waze.
• Categories with color-coded pins: לקוח חדש = green, מתחרים = red, שימור = blue, אחר = orange.
• Photos can be attached to each location.

• Tasks assigned by managers from the web dashboard.
• Tap a task to view details and mark it as complete with optional notes.
• Tasks with GPS coordinates show your distance from the target location.

• Set your display name and avatar icon shown on the dashboard.

• Protected by admin PIN 2242.
• Change the server URL (production: fieldlink1.saasdevapps.com).

• Runs on the admin PC — polls the production server every 60 seconds.
• Server Health card — CPU%, RAM%, Disk C%, pings today, connected devices, last ping time.
• CPU bar in header — green <50%, amber 50–79%, red ≥80%.
• Email alerts — sends notification when server goes down or recovers.
• Build APK — compiles a new release and streams the build log.
• Promote to production — copies test server files to production and restarts the prod service.
• Maintenance toggle — shows/hides the maintenance banner in the APK without opening the dashboard.