@arcforgelabs/flow 2026.11.1 → 2026.11.3

package/server/core/line-mapping.js

@@ -24,8 +24,10 @@ import { FlowError, notFound } from './errors.js';
 //
 // A mapped line keeps the work system's amount and tax flag; the price item
 // gives its code, its text and, when the work system gave none, its price and
-// tax. With `linePrice: 'list'` the price item's price wins instead. A line
-// no step answers keeps no code, so the ledger holds the job.
+// tax. A closest-name guess cannot supply missing source tax; it needs an
+// explicit tax flag before mapping. With `linePrice: 'list'` the price item's
+// price wins instead. A line no step answers keeps no code, so the ledger
+// holds the job.
 
 export const STEPS = Object.freeze([
   'same_code', 'account', 'saved', 'catalog_name', 'price_alias', 'catalog_name_price', 'catalog_score', 'alias',
@@ -207,7 +209,9 @@ export function mapLine(line, context) {
         break;
       }
       case 'catalog_score': {
-        if (price === null) break;
+        // A guessed item would also supply its tax here (or in the ledger).
+        // Leave unknown tax for an exact match or a person's saved choice.
+        if (price === null || line.taxCode == null) break;
         const scored = (context.byPrice.get(price) ?? [])
           .map((item) => ({ item, score: nameScore(item, { exact, lookup, original: lineText(original) }) }))
           .sort((a, b) => b.score - a.score || a.item.name.localeCompare(b.item.name) || a.item.code.localeCompare(b.item.code));

package/server/core/pipeline.js

@@ -342,6 +342,10 @@ export function rankCandidates(obligation, invoices, { prior = null, rivals = []
 
 const amountsAgree = (obligation, invoice) => totalsFor(obligation).has(invoice.totalCents);
 const withoutReissue = (ref) => String(ref).replace(/R$/i, '');
+// A voided or deleted accounting invoice bills nothing: it never links a job
+// by itself. A lab that reissued work voids the first invoice, and that one
+// keeps the work system's number.
+const live = (invoice) => !['voided', 'deleted'].includes(invoice.state);
 
 async function saveSuggestions(db, organisationId, obligationId, system, ranked) {
   const keep = ranked.slice(0, 5);
@@ -392,14 +396,14 @@ export async function matchJob(db, organisationId, obligation, {
   });
   if (prior) {
     const [invoice] = await find({ invoiceIds: [prior.externalId] });
-    if (invoice && !rejected.has(invoice.id) && (prior.matchedBy === 'person' || amountsAgree(obligation, invoice))) {
+    if (invoice && live(invoice) && !rejected.has(invoice.id) && (prior.matchedBy === 'person' || amountsAgree(obligation, invoice))) {
       return exact(invoice, 'prior_link');
     }
   }
   if (obligation.sourceInvoiceRef) {
     const numbers = [obligation.sourceInvoiceRef, withoutReissue(obligation.sourceInvoiceRef)];
     const same = (await find({ numbers }))
-      .filter((i) => !rejected.has(i.id) && (!xeroContactId || i.contactId === xeroContactId));
+      .filter((i) => live(i) && !rejected.has(i.id) && (!xeroContactId || i.contactId === xeroContactId));
     if (same.length === 1) return exact(same[0], 'source_invoice_ref');
   }
   // Without the customer's accounting contact there is nothing to compare.

package/server/core/sending.js

@@ -1,6 +1,6 @@
 import { randomUUID } from 'node:crypto';
 import { and, asc, desc, eq, inArray, sql } from 'drizzle-orm';
-import { billingObligations, contacts, invoiceLines, invoices } from '../db/schema.js';
+import { billingObligations, contacts, invoiceLines, invoices, people } from '../db/schema.js';
 import { FlowError } from './errors.js';
 import { listRules, ruleNonChargeable, rulePending, ruleSkip } from './invoice-rules.js';
 import { customerBillingByContact, effectiveSettings, readInvoicingSettings } from './invoicing-rules.js';
@@ -50,20 +50,24 @@ const REFUSAL_CODE = /^[a-z0-9_]{1,64}$/i;
 const SENT = new Set(['created', 'reconciled', 'existing', 'already_in_xero']);
 
 // `short` is the few words the Invoices list shows; `message` says how to fix
-// it. `extra` adds `fields` (the invoice fields to fix) and `line`.
-const problem = (code, message, short = null, extra = {}) => ({ code, message, ...(short ? { short } : {}), ...extra });
+// it. Draft warnings must name their resolution UI at the owner, not in a
+// separate warning-code inventory. The invoice page dispatches this intent.
+const problem = (code, message, short, resolution, extra = {}) => {
+  if (typeof resolution?.kind !== 'string' || !resolution.kind) throw new FlowError('warning_resolution_required', `Draft warning ${code} needs a resolution UI.`);
+  return { code, message, ...(short ? { short } : {}), ...extra, resolution };
+};
 
 // An issued invoice the accounting system refused. A refusal stored without
 // its few words (before 2026-10-28) shows "Not sent"; its message stays.
-const refusal = (sendError) => (sendError ? { short: 'Not sent', ...sendError } : problem('send_failed', 'Sending failed.', 'Not sent'));
+const refusal = (sendError) => (sendError ? { short: 'Not sent', ...sendError } : { code: 'send_failed', message: 'Sending failed.', short: 'Not sent' });
 
 // Flow's own checks of one draft. `lines` are its invoice lines.
 export function draftProblems(invoice, lines) {
   const problems = [];
-  if (!lines.length) problems.push(problem('no_lines', 'The invoice has no lines.', 'No lines'));
-  else if (invoice.totalCents <= 0) problems.push(problem('no_amount', 'The total is $0.00 or less.', 'Total $0'));
+  if (!lines.length) problems.push(problem('no_lines', 'The invoice has no lines.', 'No lines', { kind: 'invoice_edit' }));
+  else if (invoice.totalCents <= 0) problems.push(problem('no_amount', 'The total is $0.00 or less.', 'Total $0', { kind: 'invoice_edit' }));
   for (const line of lines) {
-    if (!line.priceItemId && !line.accountCode) problems.push(problem('line_no_item', `Line ${line.position} has no price item.`, `Line ${line.position}: no item`, { fields: ['line_item'], line: line.position }));
+    if (!line.priceItemId && !line.accountCode) problems.push(problem('line_no_item', `Line ${line.position} has no price item.`, `Line ${line.position}: no item`, { kind: 'invoice_edit' }, { fields: ['line_item'], line: line.position }));
   }
   return problems;
 }
@@ -118,14 +122,16 @@ async function checkDrafts(db, organisationId, drafts, accounting) {
   // draft was made, or the work system deleted it) waits for a person.
   for (const { obligation } of jobs) {
     for (const reason of sourceBillingProblems(obligation)) {
-      const found = problem('job_review', 'Check the source invoice: ' + reason + '.', 'Source tax');
+      const found = { ...problem('job_review', 'Check the source invoice: ' + reason + '.', 'Source tax', { kind: 'job_review' }), sourceBilling: true };
       problems.set(obligation.invoiceId, [...(problems.get(obligation.invoiceId) ?? []), found]);
     }
   }
   const reviewed = jobs.map((j) => j.obligation).filter((o) => o.holdState === 'review');
   for (const obligation of reviewed) {
     const { invoiceId, holdReason: reason } = obligation;
-    const found = problem('job_review', `The job needs a look before this invoice goes: ${reason ?? 'it was sent to review'}.`, reviewShort(obligation));
+    const resolution = reason === CHANGED_REASON ? { kind: 'job_review' }
+      : { kind: 'job_hold', reason: reason ?? 'the job is review' };
+    const found = problem('job_review', `The job needs a look before this invoice goes: ${reason ?? 'it was sent to review'}.`, reviewShort(obligation), resolution);
     problems.set(invoiceId, [...(problems.get(invoiceId) ?? []), found]);
   }
   if (accounting) {
@@ -424,6 +430,11 @@ export function refusalReport(result) {
   return `[sending] the accounting system refused ${count} ${word}${detail ? `: ${detail}` : ''}`;
 }
 
+async function requesterActive(db, personId) {
+  const [row] = await db.select({ status: people.status }).from(people).where(eq(people.id, personId));
+  return row?.status === 'active';
+}
+
 // One pass of the send worker: up to `limit` queued invoices, oldest first.
 export async function sendQueued(db, organisationId, { accounting, limit = WORKER_BATCH }) {
   const rows = await db.select({ id: invoices.id, number: invoices.number, by: invoices.sendRequestedBy }).from(invoices)
@@ -433,6 +444,17 @@ export async function sendQueued(db, organisationId, { accounting, limit = WORKE
   const summary = { sent: 0, failed: 0, waiting: 0 };
   for (const [by, group] of Map.groupBy(rows, (r) => r.by ?? null)) {
     const known = new Map(group.map((row) => [row.id, row]));
+    // A send waits in the queue. The person who asked for it must still be
+    // active when it goes, so turning a person (or an assistant's key) off
+    // also stops what they queued.
+    if (by && !(await requesterActive(db, by))) {
+      for (const row of group) {
+        await settle(db, organisationId, row.id, { sendState: 'failed', sendError: { code: 'requester_disabled', message: 'The person who asked to send this is turned off. Send it again.' } });
+        summary.failed += 1;
+      }
+      summary.refused = [...new Set([...(summary.refused ?? []), 'requester_disabled'])];
+      continue;
+    }
     const { invoices: results } = await accounting.capabilities.pushInvoices({
       organisationId, invoiceIds: group.map((r) => r.id), pushedBy: by,
     });

package/server/integrations/seazona/index.js

@@ -53,6 +53,7 @@ export const SEAZONA_SETUP = {
     { name: 'SEAZONA_API_CLIENT_SECRET', label: 'Client secret', secret: true, help: 'Stored encrypted. Flow never shows it again.' },
     { name: 'SEAZONA_ORDER_URL', label: 'Order address', kind: 'url', help: 'Optional. Open any order in Seazona and paste its address here, or write {ref} where the order id goes. Stage moves on the Jobs board and Open in Seazona use it.' },
     { name: 'SEAZONA_KEEP_PATIENT_REFERENCE', label: 'Keep patient names', kind: 'onoff', help: 'On: Flow keeps the patient name of each job for the invoice Reference.' },
+    { name: 'SEAZONA_API_READ_HIDE_PATIENT', label: 'Hide patient details', kind: 'onoff', help: 'On: an AI assistant reading Seazona through Flow gets no patient, note, file or clinical fields.' },
   ],
 };
 
@@ -85,7 +86,11 @@ export function createSeazonaAdapter({ env = null, fetchImpl = null, now = Date.
     schema: seazonaSchema,
     setup: SEAZONA_SETUP,
     // The history import's routes (routes.js), under /api/seazona.
-    routes: ({ db, personAuth, log }) => createSeazonaRouter({ db: runtime?.db ?? db, personAuth, settings: current().settings, log }),
+    routes: ({ db, personAuth, log }) => createSeazonaRouter({
+      db: runtime?.db ?? db, personAuth, settings: current().settings, log,
+      read: (path, query) => current().client.get(path, query),
+      hidePatientFields: () => Boolean(current().settings.sync.hidePatientFields),
+    }),
     // Every Seazona call goes through this call guard, inside the rate
     // governor (governor.js; docs/INTEGRATIONS.md, "Outbound calls").
     callGuard: SEAZONA_CALL_GUARD,

package/server/integrations/seazona/routes.js

@@ -36,7 +36,16 @@ import { readBackfill, startBackfill, stopBackfill } from './history/backfill.js
 //                                         (state: one state, or needs_person)
 //   POST /history/ledger/:obligationId/release   owner or admin: the job may draft
 //
-// None of these call Seazona.
+// None of these call Seazona, except one read:
+//
+//   GET  /api/<resource>[/<id>]?<query>   owner or admin: one GET to the
+//                                         Seazona REST API, through Flow's
+//                                         rate governor, answered as
+//                                         { ok, data }. resource is invoices,
+//                                         orders, clients, products or users.
+//                                         It never writes to Seazona. It is how
+//                                         an AI assistant reads Seazona with its
+//                                         Flow key (docs/AGENT_ACCESS.md).
 
 export const MAX_UPLOAD = '25mb';
 
@@ -56,7 +65,40 @@ const handle = (log, fn) => async (req, res) => {
   }
 };
 
-export function createSeazonaRouter({ db, personAuth, settings, log = console }) {
+const API_RESOURCES = ['invoices', 'orders', 'clients', 'products', 'users'];
+
+// With "Hide patient details" on (SEAZONA_API_READ_HIDE_PATIENT), any field
+// whose name says patient, note, file, prescription and the like is dropped
+// from the read, at any depth. Off by default.
+const PRIVATE_FIELD = /patient|note|comment|instruction|remark|file|attach|image|photo|prescri|shade|clinical|medical|birth|dob/i;
+// The value is parsed JSON, so it has no cycles.
+export function withoutPrivateFields(value) {
+  if (Array.isArray(value)) return value.map(withoutPrivateFields);
+  if (!value || typeof value !== 'object') return value;
+  return Object.fromEntries(Object.entries(value)
+    .filter(([key]) => !PRIVATE_FIELD.test(key))
+    .map(([key, item]) => [key, withoutPrivateFields(item)]));
+}
+// A list read must carry the filter Flow's own sync uses. Seazona answers a
+// list without it with an error, and every error counts against the call
+// guard that also protects Flow's sync, so Flow refuses it before the call.
+const SEAZONA_TIME = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}$/;
+const LIST_FILTERS = {
+  orders: { key: 'ordered', hint: 'ordered=2026-11-11T00:00:00 (one day)' },
+  invoices: { key: 'lastModified', hint: 'lastModified=2026-11-01T00:00:00' },
+  clients: { key: 'lastModified', hint: 'lastModified=2026-11-01T00:00:00' },
+};
+export function listQueryProblem(resource, query) {
+  const filter = LIST_FILTERS[resource];
+  if (filter && !SEAZONA_TIME.test(query[filter.key] ?? '')) return `A ${resource} list needs ${filter.hint}.`;
+  for (const key of ['page', 'pageSize']) {
+    if (key in query && !/^[1-9]\d{0,2}$/.test(query[key])) return `${key} must be a whole number from 1 to 999.`;
+  }
+  return null;
+}
+const API_PATH = new RegExp(`^/api/(${API_RESOURCES.join('|')})(?:/([A-Za-z0-9-]{1,64}))?/?$`);
+
+export function createSeazonaRouter({ db, personAuth, settings, read = null, hidePatientFields = () => false, log = console }) {
   const router = express.Router();
   // Sign-in off: every route answers 503, as the Xero routes do.
   const signedIn = personAuth
@@ -72,6 +114,27 @@ export function createSeazonaRouter({ db, personAuth, settings, log = console })
     return router;
   }
 
+  // One read from the Seazona API (above). Only plain query values pass on.
+  router.get(API_PATH, ...manager, handle(log, async (req, res) => {
+    if (!read) throw Object.assign(new FlowError('seazona_off', 'Seazona is not connected'), { status: 503 });
+    const [, resource, id] = API_PATH.exec(req.path);
+    const query = {};
+    for (const [key, value] of Object.entries(req.query)) {
+      if (typeof value === 'string' && /^[A-Za-z][A-Za-z0-9_]{0,40}$/.test(key)) query[key] = value.slice(0, 200);
+    }
+    const problem = id ? null : listQueryProblem(resource, query);
+    if (problem) return res.status(400).json({ ok: false, code: 'invalid', error: problem });
+    try {
+      const data = await read(id ? `${resource}/${id}` : `${resource}/`, query);
+      log.info?.(`[seazona] api read ${resource}${id ? '/:id' : ''} by ${actor(req)}`);
+      res.json({ ok: true, data: hidePatientFields() ? withoutPrivateFields(data) : data });
+    } catch (error) {
+      if (error?.name !== 'SeazonaApiError' && error?.name !== 'SeazonaCallsStopped') throw error;
+      const status = error.statusCode === 404 ? 404 : error.statusCode === 400 ? 400 : error.name === 'SeazonaCallsStopped' || error.statusCode === 429 || error.kind === 'governor_timeout' ? 429 : 502;
+      res.status(status).json({ ok: false, code: 'seazona_read_failed', error: error.message });
+    }
+  }));
+
   router.get('/history', ...signedIn, handle(log, async (req, res) => {
     res.json({ ok: true, history: await historySummary(db), backfill: await readBackfill(db), batches: await listBatches(db) });
   }));

package/server/integrations/seazona/settings.js

@@ -187,6 +187,9 @@ export function resolveSeazonaSettings(env = process.env) {
     // print one. Off by default; on, orders and invoices keep Seazona's
     // patient field as the reference.
     keepPatientReference: ['1', 'true', 'on', 'yes'].includes(text(env.SEAZONA_KEEP_PATIENT_REFERENCE).toLowerCase()),
+    // Off by default: the Seazona read (routes.js) answers what Seazona gives.
+    // On, it drops patient, note, file and clinical fields first.
+    hidePatientFields: ['1', 'true', 'on', 'yes'].includes(text(env.SEAZONA_API_READ_HIDE_PATIENT).toLowerCase()),
   };
 
   const settings = {

package/server/integrations/xero/ledger.js

@@ -119,7 +119,11 @@ export async function checkInvoice(db, runtime, client, organisationId, obligati
   // 3. The work system's own invoice number, as Xero's number or reference.
   if (obligation.sourceInvoiceRef) {
     const byId = new Map();
-    for (const inv of sales(await client.findInvoicesByNumber(obligation.sourceInvoiceRef))) byId.set(inv.InvoiceID, inv);
+    // Its reissue too (a trailing R): a lab that reissued the work voided the
+    // first invoice and bills the R one. One call: Xero takes a list.
+    const base = obligation.sourceInvoiceRef.replace(/R$/i, '');
+    const numbers = [...new Set([obligation.sourceInvoiceRef, base, `${base}R`])].join(',');
+    for (const inv of sales(await client.findInvoicesByNumber(numbers))) byId.set(inv.InvoiceID, inv);
     for (const inv of sales(await client.findInvoicesByReference(obligation.sourceInvoiceRef))) byId.set(inv.InvoiceID, inv);
     const found = [...byId.values()];
     if (found.length === 1) return evidenceFor(runtime, client, found[0], 'source_invoice_ref', checkedAt);

package/server/ui/app-page.js

@@ -51,7 +51,7 @@ const BODY = `<div class="fx-app">
   <div id="toasts" class="fx-toasts" aria-live="polite"></div>
 </div>`;
 
-export const APP_PATHS = ['/sign-in', '/jobs', '/captures', '/invoices', '/invoices/:id', '/contacts', '/contacts/:id', '/reconcile', '/reconcile/:id', '/xero-import', '/people', '/integrations', '/integrations/:id', '/account', '/appearance', '/invoicing-settings', '/invoicing-settings/:id', '/automations', '/price-list', '/price-list/:id', '/custom-fields'];
+export const APP_PATHS = ['/sign-in', '/home', '/jobs', '/captures', '/invoices', '/invoices/:id', '/contacts', '/contacts/:id', '/reconcile', '/reconcile/:id', '/xero-import', '/people', '/integrations', '/integrations/:id', '/account', '/appearance', '/invoicing-settings', '/invoicing-settings/:id', '/automations', '/price-list', '/price-list/:id', '/custom-fields'];
 
 export function appPage({ defaultFamily }) {
   return renderPage({

package/server/ui/app.js

@@ -18,6 +18,7 @@ import { renderPriceList } from '/assets/ui/price-list.js';
 import { renderPriceReconcile } from '/assets/ui/price-reconcile.js';
 import { renderCustomFields } from '/assets/ui/custom-fields.js';
 import { renderJobs } from '/assets/ui/jobs.js';
+import { renderHome } from '/assets/ui/home.js';
 import { renderReconcile } from '/assets/ui/reconcile.js';
 import { renderXeroImport } from '/assets/ui/xero-import.js';
 import { syncStatus } from '/assets/ui/sync-status.js';
@@ -27,7 +28,7 @@ import { isSearchKey, openSearch } from '/assets/ui/search.js';
 import { alertStrip } from '/assets/ui/alerts.js';
 import { initialsOf, personLabel } from '/assets/ui/person.js';
 import { startTips } from '/assets/ui/tip.js';
-import { crumbs, dialog, edgeFade, fieldError, h, holdButton, iconPicker, linksOpenWith, listFrame, listHead, notice, pageHeader, pickOne, rowMenu, sectionTitle, settingRow, tileCard, tileSection, toast } from '/assets/ui/kit.js';
+import { cardRows, crumbs, dialog, edgeFade, fieldError, h, holdButton, iconPicker, linksOpenWith, listFrame, listHead, notice, pageHeader, pickOne, rowMenu, sectionTitle, settingRow, tileCard, tileSection, toast } from '/assets/ui/kit.js';
 import { NAV_DEFAULT, NAV_LOCKED } from '/assets/ui/nav-pins.js';
 
 const $ = (id) => document.getElementById(id);
@@ -153,6 +154,7 @@ let me = null;
 // menu. `sidebar: false`: opened by a link or Search only. Jobs and Invoices
 // cannot be unpinned (nav-pins.js).
 const VIEWS = {
+  home: { label: 'Home', icon: 'home', render: (main) => renderHome(main, ui()) },
   jobs: { label: 'Jobs', icon: 'jobs', render: (main) => renderJobs(main, ui()) },
   captures: { label: 'Capture', icon: 'camera', render: (main) => renderCaptures(main, ui()) },
   invoices: { label: 'Invoices', icon: 'invoices', render: (main, id) => (id ? renderInvoice(main, ui(), id) : renderInvoiceList(main, ui())) },
@@ -174,6 +176,7 @@ const VIEWS = {
 
 // Line icons for the sidebar, drawn on a 24-unit grid in the text colour.
 const ICON_PATHS = {
+  home: '<path d="M3 11l9-7 9 7"/><path d="M5 10v10h14V10"/><path d="M10 20v-6h4v6"/>',
   jobs: '<rect x="3" y="4" width="5" height="16" rx="1"/><rect x="10" y="4" width="5" height="11" rx="1"/><rect x="17" y="4" width="4" height="14" rx="1"/>',
   invoices: '<path d="M6 3h9l4 4v14H6z"/><path d="M14 3v5h5M9 13h7M9 17h5"/>',
   contacts: '<rect x="3" y="4" width="18" height="16" rx="2"/><circle cx="9" cy="10" r="2"/><path d="M6 16c.4-1.6 1.5-2.4 3-2.4s2.6.8 3 2.4M14 9h5M14 13h4"/>',
@@ -293,9 +296,9 @@ function reportMenuItem(openReport) {
   return accountMenuItem('Report a problem', 'flag', () => { openReport().catch((error) => toast(error.message, 'danger')); });
 }
 
-// The page a person lands on after sign-in, and for / or an unknown path.
-// Invoices opens on its Ready tab. A home page can take this over later.
-const START_VIEW = 'invoices';
+// The page a person lands on after sign-in, and for / or an unknown path:
+// Home, with the invoices ready to send and one Send.
+const START_VIEW = 'home';
 
 // The view and, for one record, its id: /invoices/<id> is ['invoices', '<id>'].
 function currentView() {
@@ -336,7 +339,7 @@ function navigate(event) {
 // The shared pieces a view module (invoicing.js) builds with. Its `go`
 // takes a path, or a link's click event.
 const ui = () => ({
-  h, flow, toast, notice, fieldError, pageHeader, listHead, listFrame, edgeFade, sectionTitle, settingRow, dialog, pickOne, iconPicker, me, holdButton, tileCard, tileSection, crumbs,
+  h, flow, toast, notice, cardRows, fieldError, pageHeader, listHead, listFrame, edgeFade, sectionTitle, settingRow, dialog, pickOne, iconPicker, me, holdButton, tileCard, tileSection, crumbs,
   go: (target, options) => (typeof target === 'string' ? go(target, options) : navigate(target)),
 });
 
@@ -369,7 +372,7 @@ function sidebarViews() {
   return Object.entries(VIEWS).filter(([, view]) => view.sidebar !== false && view.place !== 'account' && (!view.ownerOnly || me?.person.role === 'owner'));
 }
 
-// Null until the shell reads the account. Jobs and Invoices are always in it.
+// Null until the shell reads the account. Home, Jobs and Invoices are always in it.
 let pinned = null;
 let pinEpoch = 0;
 let pinWrite = Promise.resolve();

package/server/ui/flow.css

@@ -230,6 +230,9 @@ body:is([data-state="off"], [data-state="error"], [data-state="no-access"]) .fx-
   background: var(--t-danger-bg); color: var(--t-text); font-size: 14px;
 }
 .fx-change p { margin: 0; }
+.fx-change__steps { display: grid; gap: 10px; min-width: 0; overflow-wrap: anywhere; }
+.fx-change__steps ol { display: grid; gap: 8px; margin: 0; padding-left: 20px; }
+.fx-change__steps summary { cursor: pointer; }
 .fx-change strong { color: var(--t-danger); }
 .fx-change__head { display: flex; flex-wrap: wrap; align-items: center; justify-content: space-between; gap: 10px 16px; }
 .fx-change__acts { display: flex; flex-wrap: wrap; gap: 8px; }
@@ -356,11 +359,78 @@ a.fx-link:hover, a.fx-link:focus-visible { border-color: var(--t-strong); }
   background: #fff; box-shadow: inset 0 0 0 1px var(--fx-line);
 }
 .fx-logo--icon { background: var(--t-accent-bg); color: var(--t-accent); box-shadow: none; }
+/* Home: the invoices ready to send and one Send, then the way an invoice
+   goes after Send, drawn as one line of steps (a column on a phone). */
+.fx-home { display: grid; gap: 20px; max-width: 880px; }
+.fx-home__send {
+  position: relative; overflow: hidden;
+  display: grid; justify-items: start; gap: 6px; padding: 32px;
+  border: 1px solid var(--fx-line); border-radius: var(--t-radius-lg);
+  background:
+    radial-gradient(120% 140% at 100% 0%, color-mix(in srgb, var(--t-primary) 10%, transparent), transparent 60%),
+    var(--t-paper);
+}
+.fx-home__send[data-done] {
+  grid-template-columns: auto 1fr; align-items: center; column-gap: 16px;
+  background:
+    radial-gradient(120% 140% at 100% 0%, color-mix(in srgb, var(--t-success) 12%, transparent), transparent 60%),
+    var(--t-paper);
+}
+.fx-home__send[data-done] > :not(.fx-home__done) { grid-column: 2; }
+.fx-home__done {
+  grid-row: span 2; display: grid; place-items: center; width: 52px; height: 52px; border-radius: 50%;
+  background: var(--t-success-bg); color: var(--t-success);
+}
+.fx-home__done .fx-lucide { width: 26px; height: 26px; }
+.fx-home__count {
+  display: flex; align-items: baseline; flex-wrap: wrap; gap: 4px 12px;
+  color: var(--t-strong); font: 700 72px/1 var(--t-body); font-variant-numeric: tabular-nums; letter-spacing: -0.02em;
+}
+.fx-home__count span { font: 600 20px/1.2 var(--t-body); letter-spacing: 0; color: var(--t-text); }
+.fx-home__send[data-done] .fx-home__count span { font-size: 22px; color: var(--t-strong); }
+.fx-home__sum { color: var(--t-dim); font-size: 16px; font-variant-numeric: tabular-nums; }
+.fx-home__btn { min-height: 56px; min-width: 200px; margin-top: 14px; padding: 0 32px; font-size: 17px; border-radius: 999px; }
+.fx-home__btn .fx-lucide { width: 20px; height: 20px; }
+.fx-home__note { color: var(--t-dim); font-size: 13.5px; }
+
+/* Needs you: at most three rows beside Send; each opens its page. */
+.fx-home__needs { display: grid; align-content: start; gap: 10px; }
+.fx-home__needs h2 { margin: 0; }
+.fx-home__needs ul { display: grid; gap: 8px; margin: 0; padding: 0; list-style: none; }
+.fx-home__needs a {
+  display: grid; grid-template-columns: auto 1fr auto; align-items: center; gap: 12px;
+  min-height: 64px; padding: 10px 16px; border: 1px solid var(--fx-line); border-radius: var(--t-radius-lg);
+  background: var(--t-paper); color: var(--t-text); text-decoration: none;
+  transition: border-color 140ms var(--fx-ease), transform 140ms var(--fx-ease);
+}
+.fx-home__needs a:hover, .fx-home__needs a:focus-visible { border-color: var(--t-control); transform: translateY(-1px); }
+.fx-home__dot { display: grid; place-items: center; width: 36px; height: 36px; border-radius: 50%; background: var(--fx-hover); color: var(--t-dim); }
+.fx-home__dot .fx-lucide { width: 18px; height: 18px; }
+.fx-home__needs [data-tone="danger"] .fx-home__dot { background: var(--t-danger-bg); color: var(--t-danger); }
+.fx-home__needs [data-tone="warn"] .fx-home__dot { background: var(--t-warn-bg); color: var(--t-warn); }
+.fx-home__needs [data-tone="info"] .fx-home__dot { background: var(--t-accent-bg); color: var(--t-accent); }
+.fx-home__needs [data-tone="clear"] .fx-home__dot { background: var(--t-success-bg); color: var(--t-success); }
+.fx-home__what { display: grid; font-weight: 600; color: var(--t-strong); }
+.fx-home__what small { color: var(--t-dim); font-weight: 400; font-size: 13px; font-variant-numeric: tabular-nums; }
+.fx-home__needs [data-tone="clear"] .fx-home__what { color: var(--t-dim); font-weight: 500; }
+.fx-home__n { color: var(--t-strong); font: 700 22px/1 var(--t-body); font-variant-numeric: tabular-nums; }
+.fx-home__needs [data-tone="clear"] .fx-home__n { color: var(--t-dim); font-weight: 500; }
+
+@media (min-width: 1024px) {
+  .fx-home { grid-template-columns: minmax(0, 3fr) minmax(260px, 2fr); align-items: stretch; max-width: 1040px; }
+  .fx-home__send { align-content: center; }
+}
+@media (max-width: 639px) {
+  .fx-home__send { padding: 24px 20px; }
+  .fx-home__count { font-size: 60px; }
+  .fx-home__btn { width: 100%; }
+}
+
 .fx-tiles { display: grid; gap: 12px; }
 .fx-tiles + .fx-tiles { margin-top: 16px; }
 .fx-tiles__head { display: flex; align-items: center; justify-content: space-between; gap: 12px; }
 .fx-tiles__head h2 { color: var(--t-strong); font: 600 15px/1.3 var(--t-body); }
-.fx-tiles__more { display: inline-flex; align-items: center; gap: 4px; color: var(--t-dim); font-size: 13.5px; text-decoration: none; }
+.fx-tiles__more { display: inline-flex; align-items: center; gap: 4px; min-height: 44px; color: var(--t-dim); font-size: 13.5px; text-decoration: none; }
 .fx-tiles__more:hover, .fx-tiles__more:focus-visible { color: var(--t-strong); }
 .fx-tiles__more .fx-lucide { width: 15px; height: 15px; }
 .fx-tiles__grid { display: grid; grid-template-columns: repeat(auto-fill, minmax(min(100%, 300px), 1fr)); gap: 12px; }
@@ -838,7 +908,7 @@ th:hover > .fx-th-grip::after { background: var(--t-brd-hi); }
    each lane scrolls inside itself (jobs.js sets fx-main--board while the
    board shows). */
 .fx-board { --fx-lane: min(85vw, 272px); display: grid; grid-auto-flow: column; grid-auto-columns: var(--fx-lane); justify-content: start; gap: 12px; align-items: start; overflow-x: auto; overscroll-behavior-x: contain; scrollbar-width: thin; padding-bottom: 4px; }
-.fx-board__col { display: flex; flex-direction: column; gap: 8px; min-width: 0; min-height: 0; padding: 10px 6px 6px 8px; border-radius: var(--t-radius-lg); background: var(--t-s1); }
+.fx-board__col { display: flex; flex-direction: column; gap: 8px; min-width: 0; min-height: 0; padding: 10px 6px 6px 8px; border-radius: var(--t-radius-lg); background: transparent; }
 .fx-board__head { display: flex; flex: none; align-items: center; gap: 8px; min-width: 0; padding: 2px 4px 4px 2px; }
 .fx-board__sum { flex: none; margin-left: auto; color: var(--t-dim); font-size: 12px; font-variant-numeric: tabular-nums; }
 .fx-board__cards { display: grid; gap: 8px; align-content: start; min-height: 0; max-height: 70vh; padding-right: 2px; overflow-y: auto; scrollbar-width: thin; }
@@ -860,7 +930,7 @@ th:hover > .fx-th-grip::after { background: var(--t-brd-hi); }
 .fx-fade[data-edge="right"] { inset: 0 0 0 auto; width: 24px; background: linear-gradient(to left, var(--fx-fade), transparent); }
 .fx-fades[data-fade~="top"] > .fx-fade[data-edge="top"], .fx-fades[data-fade~="bottom"] > .fx-fade[data-edge="bottom"],
 .fx-fades[data-fade~="left"] > .fx-fade[data-edge="left"], .fx-fades[data-fade~="right"] > .fx-fade[data-edge="right"] { opacity: 1; }
-.fx-main--board .fx-frame__view { --fx-fade: var(--t-bg); }
+.fx-main--board .fx-frame__view { --fx-fade: var(--t-s1); }
 .fx-board__col.fx-fades { --fx-fade: var(--t-s1); }
 .fx-board__col > .fx-fade[data-edge="bottom"] { border-radius: 0 0 var(--t-radius-lg) var(--t-radius-lg); }
 .fx-frame__body .fx-panel { border: 0; border-radius: 0; box-shadow: none; overflow: visible; }
@@ -869,7 +939,8 @@ th:hover > .fx-th-grip::after { background: var(--t-brd-hi); }
 .fx-frame thead th { position: sticky; top: 0; z-index: 2; }
 .fx-frame__foot { display: flex; flex: none; align-items: center; justify-content: space-between; gap: 12px; min-height: 44px; padding: 6px 12px; border-top: 1px solid var(--fx-line); color: var(--t-dim); font-size: 13px; font-variant-numeric: tabular-nums; }
 .fx-frame__tools { display: flex; align-items: center; gap: 8px; }
-.fx-main--board .fx-frame__body { padding: 12px; background: var(--t-bg); }
+/* One work surface runs through the lanes, gaps and unused board space. */
+.fx-main--board .fx-frame__body { padding: 12px; background: var(--t-s1); }
 @media (min-width: 821px) and (min-height: 560px) {
   .fx-main--frame { height: 100vh; height: 100dvh; padding-bottom: 16px; display: flex; flex-direction: column; }
   .fx-main--frame > * { flex: none; }

package/server/ui/home.js

@@ -0,0 +1,120 @@
+// Home: the page a person lands on. One job first: send the invoices that
+// are ready. The big number is the Ready tab's count, and Send sends them
+// all with the same step as the Invoices page (POST /invoices/send-ready).
+// Beside it, at most three things that need a person most days: invoices
+// that need a look, jobs and invoices to match (Reconcile), and form photos
+// to check (Capture). Each opens its page. No calls of its own to other
+// systems: every number is its page's own.
+import { formatCents, localDate } from '/assets/ui/invoicing.js';
+import { sendModeNote } from '/assets/ui/invoice-notes.js';
+import { lucide } from '/assets/ui/custom-fields.js';
+
+const plural = (n, one, many) => `${n} ${n === 1 ? one : many}`;
+
+function greeting(person, now = new Date()) {
+  const hour = now.getHours();
+  const part = hour < 12 ? 'Good morning' : hour < 18 ? 'Good afternoon' : 'Good evening';
+  const first = String(person?.name ?? '').trim().split(/\s+/)[0];
+  return first ? `${part}, ${first}` : part;
+}
+
+export async function renderHome(main, ui) {
+  const { h, flow, toast, notice, pageHeader, dialog, go, me } = ui;
+  const host = h('div', { class: 'fx-home' });
+  main.append(pageHeader(greeting(me?.person)), host);
+  const tabQuery = (tab) => `/api/invoicing/invoices?${new URLSearchParams({ status: tab, limit: '1' })}`;
+
+  async function load() {
+    let context;
+    let body;
+    let pending;
+    let toMatch;
+    let forms;
+    try {
+      [context, body, pending, toMatch, forms] = await Promise.all([
+        flow('/api/invoicing/context'),
+        flow(tabQuery('ready')),
+        flow(tabQuery('pending')),
+        // The two below are extras: Home still shows without them.
+        flow('/api/invoicing/reconcile').catch(() => null),
+        flow('/api/captures').catch(() => null),
+      ]);
+    } catch (error) {
+      host.replaceChildren(notice(error.message, 'danger', 'Flow could not load your invoices.'));
+      return;
+    }
+    if (!host.isConnected) return;
+    draw(context, body, [
+      { href: '/invoices?tab=pending', icon: 'circle-alert', label: 'Need a look', tone: 'danger', count: pending.total, sum: pending.totalCents },
+      toMatch && { href: '/reconcile', icon: 'link', label: 'To match', tone: 'warn', count: (toMatch.jobs?.length ?? 0) + (toMatch.invoices?.length ?? 0) },
+      forms && { href: '/captures', icon: 'camera', label: 'Forms to check', tone: 'info', count: forms.captures.filter((c) => c.state === 'ready').length },
+    ].filter(Boolean));
+  }
+
+  function draw(context, body, items) {
+    const to = body.sendsTo;
+    const counts = body.counts ?? {};
+    const ready = counts.ready ?? 0;
+    const blocked = to && body.sendMode && (!body.sendMode.connected || !body.sendMode.writesAllowed);
+    const canSend = context.canIssue && !blocked;
+
+    const hero = ready
+      ? h('section', { class: 'fx-home__send', 'aria-labelledby': 'home-ready' },
+        h('p', { class: 'fx-home__count', id: 'home-ready' }, String(ready),
+          h('span', {}, ready === 1 ? 'invoice ready' : 'invoices ready')),
+        h('p', { class: 'fx-home__sum' }, formatCents(body.totalCents)),
+        h('button', {
+          class: 'fx-btn fx-btn--primary fx-home__btn', type: 'button', disabled: !canSend,
+          onclick: (event) => send(to, ready, body.sendMode, event.currentTarget),
+        }, lucide(h, 'send'), h('span', {}, 'Send')),
+        context.canIssue ? null : h('p', { class: 'fx-home__note' }, 'An owner or admin sends.'),
+        blocked ? h('p', { class: 'fx-home__note' }, sendModeNote(to, body.sendMode)) : null)
+      : h('section', { class: 'fx-home__send', 'data-done': '', 'aria-labelledby': 'home-ready' },
+        h('span', { class: 'fx-home__done', 'aria-hidden': 'true' }, lucide(h, 'check')),
+        h('p', { class: 'fx-home__count', id: 'home-ready' }, h('span', {}, 'All caught up')),
+        h('p', { class: 'fx-home__sum' }, 'Nothing waits to be sent.'));
+
+    const needs = h('section', { class: 'fx-home__needs', 'aria-labelledby': 'home-needs' },
+      h('h2', { class: 'fx-label', id: 'home-needs' }, 'Needs you'),
+      h('ul', {}, items.map((item) => h('li', {},
+        h('a', { href: item.href, onclick: open, 'data-tone': item.count ? item.tone : 'clear' },
+          h('span', { class: 'fx-home__dot', 'aria-hidden': 'true' }, lucide(h, item.count ? item.icon : 'check')),
+          h('span', { class: 'fx-home__what' }, item.label,
+            item.count && item.sum ? h('small', {}, formatCents(item.sum)) : null),
+          h('span', { class: 'fx-home__n' }, String(item.count)))))));
+
+    host.replaceChildren(hero, needs);
+  }
+
+  function open(event) {
+    if (event.metaKey || event.ctrlKey || event.shiftKey || event.button !== 0) return;
+    event.preventDefault();
+    go(event.currentTarget.getAttribute('href'));
+  }
+
+  async function send(to, ready, sendMode, button) {
+    const ok = await dialog({
+      title: `Send ${plural(ready, 'invoice', 'invoices')}?`,
+      body: h('p', {}, to ? sendModeNote(to, sendMode, 'each one') : 'Each one gets the next number and is locked.'),
+      confirm: 'Send',
+    });
+    if (!ok) return;
+    button.disabled = true;
+    button.lastChild.textContent = 'Sending';
+    try {
+      const res = await flow('/api/invoicing/invoices/send-ready', { method: 'POST', body: JSON.stringify({ issueDate: localDate() }) });
+      const notes = [
+        to ? `${res.issued} on the way to ${to}.` : `${res.issued} approved.`,
+        res.held ? `${res.held} need a look.` : '',
+        res.waiting ? `${res.waiting} could not be checked with the work system yet: press Send again.` : '',
+        res.remaining ? `${res.remaining} more are ready: press Send again.` : '',
+      ].filter(Boolean);
+      toast(notes.join(' '), res.held || res.waiting || res.remaining ? 'info' : 'success', { stay: Boolean(res.held || res.waiting) });
+    } catch (error) {
+      toast(error.message, 'danger', { stay: true });
+    }
+    await load();
+  }
+
+  await load();
+}