Service Requests Inbox

All customer form submissions appear here. Each request shows the customer's name, requested service type, and submission date. From the request detail you can:

Action	How
Review + edit contact info / services / notes	Click the Edit (pencil) icon on a request — an inline form opens with labelled fields and a Save button
Convert to client	Click "Convert to Client" — pre-fills name, email, phone
Schedule appointment	After converting, go to Appointments → New
Delete a request	Click Delete on the request detail — removes it from the inbox

Service Types

The public request wizard offers these options (configurable in Settings): Airport Transport, Home Watch Visit, Property Check, Call Back, Other. For Airport Transport, the form collects flight number and arrival date. Click the flight number badge in any request to open FlightAware.

Clients

Full CRUD — name, email, phone, service address, emergency contact, notes. Clients can be created manually or promoted from a service request. Each client shows their appointment and invoice history.

Mobile behaviour: On phones, tapping a client name opens their detail as a full-screen overlay with a ← Back to Clients button at the top. This avoids the detail appending to the bottom of the list and requiring excessive scrolling.

Contact strip: Phone and email in the client contact strip display on separate rows so long addresses are never truncated.

🔒 Secure Notes

Each client has an encrypted Secure Notes field for sensitive information (alarm codes, key-lockbox combinations, gate PINs). Notes are encrypted with AES-256-GCM in the Cloudflare Worker before being stored in D1 — the database never holds plaintext.

To view or edit a client's secure note:

1. Open the client detail.
2. Click 🔒 View / Edit Secure Note.
3. Enter the admin password when prompted — this re-authenticates before decrypting.
4. The note appears in an editable text area. Make changes and click Save Note.
5. The note is re-encrypted and saved. Close the panel when done.

Appointments

Schedule any type of visit with a client. Fields include: client, appointment type (Airport Drop-off, Airport Pickup, Home Watch Visit, Property Check, Call Back, Other), date, start time, notes, and status (Scheduled / Completed / Cancelled). For airport types, you can also record airline, flight number, departure/arrival date and time, and client pickup time.

Auto-switch: If the Edit form is open for one appointment and you click Edit on another, the form automatically switches to the new appointment — no need to click Cancel first.

The Calendar view shows all upcoming appointments in a monthly list. You can add new appointments, edit, and delete directly from the calendar without switching views.

Invoices

Create invoices with line items (description, quantity, unit price). Invoice number auto-increments from settings. Status workflow: Draft → Sent → Paid. Use the Print button for a browser-print-ready view.

Deleting invoices: A Delete button appears on any Draft or Sent invoice. Clicking it asks for confirmation, then permanently removes the invoice and all its line items. Paid invoices cannot be deleted — the button is hidden and the API enforces this with a 403 response.

Settings Page

Editable without code changes: Business name, phone, email, address, service types (JSON array), task checklist, invoice footer text, invoice next-number, admin password change.

Changing the Admin Password

Settings → Change Password. Requires current password. New password is hashed with PBKDF2-SHA256 and saved to D1 — no restart needed.

Password requirements: minimum 8 characters with at least one letter, one number, and one special character. A strength hint is shown below the New Password field. The Save button remains disabled until both the new password meets requirements and the confirmation matches — a live mismatch error appears if they differ. Use the 👁 toggle on each field to reveal what you typed.

Default Password Warning Banner

After the first login with the default password, an amber banner appears at the top of every admin page:

The banner disappears permanently once the password has been changed via Settings → Change Password. Clicking Change Password in the banner navigates directly to the Settings page.

Security Tips

• Change the default password immediately on first login — the amber banner reminds you until it is done.
• Use a password that is unique to this portal and not shared with other services.
• Sign out when using a shared or public device.
• Store alarm codes, lock combinations, and access PINs in Secure Notes — not in the plain Notes field.
• If you ever suspect your password has been compromised, change it immediately in Settings and contact SONAN DIGITAL.