@pylonsync/create-pylon 0.19.1 → 0.20.0

package/templates/crm/functions/seedWorkspace.ts

@@ -1,15 +1,19 @@
 import { mutation } from "@pylonsync/functions";
-import { shapeSeed } from "../lib/seed";
+import { SEED_TEAM, shapeSeed } from "../lib/seed";
+import { ensureDemoUser } from "../lib/demo-team";
 
 /**
  * Fill a brand-new workspace with a realistic pipeline, once.
  *
- * An empty CRM demonstrates nothing — no board, no forecast, no sense of what
- * the app is for. The client calls this after sign-in; it returns immediately
- * if any company already exists, so it is safe to call on every load and can
- * never duplicate the fixtures or touch real data.
+ * The client calls this after sign-in. It returns immediately if any company
+ * already exists, so it is safe to call on every load and never duplicates the
+ * fixtures or touches real data. An advisory lock stops two first loads from
+ * seeding twice.
  *
- * Delete this function and lib/seed.ts once the workspace has real customers.
+ * Deals are spread across the person who signed in and four demo teammates
+ * (see SEED_TEAM and lib/demo-team.ts). Delete this function,
+ * lib/seed.ts, and the `seedWorkspace` call in app/workspace.tsx once the
+ * workspace has real customers, then delete the demo users.
  */
 export default mutation<Record<string, never>, { seeded: boolean }>({
   auth: "user",
@@ -17,44 +21,55 @@ export default mutation<Record<string, never>, { seeded: boolean }>({
   async handler(ctx) {
     // The guard is "has anything at all", not "has the seed", so a workspace
     // whose demo rows were deleted on purpose stays deleted.
-    const existing = await ctx.db.query("Company", { $limit: 1 });
-    if (existing.length > 0) return { seeded: false };
+    if ((await ctx.db.query("Company", { $limit: 1 })).length > 0) return { seeded: false };
+    await ctx.db.advisoryLock("crm_seed_workspace");
+    if ((await ctx.db.query("Company", { $limit: 1 })).length > 0) return { seeded: false };
 
     const seed = shapeSeed();
-    const owner = ctx.auth.userId;
+    const me = ctx.auth.userId;
+
+    // Position 0 is the person who signed in; SEED_TEAM follows.
+    const owners: Array<string | null> = [me];
+    for (const person of SEED_TEAM) owners.push(await ensureDemoUser(ctx.db, person));
 
     const companyIds = new Map<string, string>();
-    for (const company of seed.companies) {
-      const id = await ctx.db.insert("Company", { ...company.row, ownerId: owner });
+    for (const [index, company] of seed.companies.entries()) {
+      const id = await ctx.db.insert("Company", {
+        ...company.row,
+        ownerId: owners[index % owners.length],
+      });
       companyIds.set(company.key, id as string);
     }
 
     const contactIds = new Map<string, string>();
-    for (const contact of seed.contacts) {
+    for (const [index, contact] of seed.contacts.entries()) {
       const id = await ctx.db.insert("Contact", {
         ...contact.row,
         companyId: companyIds.get(contact.company) ?? null,
-        ownerId: owner,
+        ownerId: owners[index % owners.length],
       });
       contactIds.set(String(contact.row.name), id as string);
     }
 
-    const dealIds = new Map<string, string>();
+    const dealIds = new Map<string, { id: string; owner: string | null }>();
     for (const deal of seed.deals) {
+      const owner = owners[deal.owner] ?? me;
       const id = await ctx.db.insert("Deal", {
         ...deal.row,
         companyId: companyIds.get(deal.company) ?? null,
         contactId: contactIds.get(deal.contact) ?? null,
         ownerId: owner,
       });
-      dealIds.set(deal.title, id as string);
+      dealIds.set(deal.title, { id: id as string, owner });
     }
 
+    // Activity on a deal is logged by the deal's owner.
     for (const activity of seed.activities) {
+      const deal = dealIds.get(activity.deal);
       await ctx.db.insert("Activity", {
         ...activity.row,
-        dealId: dealIds.get(activity.deal) ?? null,
-        ownerId: owner,
+        dealId: deal?.id ?? null,
+        ownerId: deal?.owner ?? me,
       });
     }
 

package/templates/crm/lib/brand.ts

@@ -0,0 +1,9 @@
+// The product name, in one place. The sidebar, the sign-in screen, the page
+// title, and the drawer on phones all read it. Rename the product here; the
+// mark is in components/brand-mark.tsx and the favicon is app/icon.svg.
+
+export const BRAND = {
+  name: "Dealbook",
+  /** One line on the sign-in screen: what the app holds and who sees it. */
+  description: "Your team's pipeline, companies, and contacts. Everyone on the team sees the same board.",
+} as const;

package/templates/crm/lib/demo-team.ts

@@ -0,0 +1,51 @@
+// Creates the demo teammates the seed spreads records across. Each is a User
+// row with a `@demo.invalid` address and no password. Outside dev mode nobody
+// can sign in as one: the address can't receive a sign-in or reset email.
+// In dev mode (`PYLON_DEV_MODE=true`) the auth API returns sign-in codes
+// directly, so anyone can sign in as a demo teammate there.
+
+import type { DbWriter } from "@pylonsync/functions";
+
+export interface DemoPerson {
+  name: string;
+  email: string;
+}
+
+/**
+ * The address to try on `attempt` (0, 1, 2, …): the person's own address
+ * first, then `local+2@demo.invalid`, `local+3@…`, and so on.
+ */
+export function demoEmail(email: string, attempt: number): string {
+  if (attempt === 0) return email;
+  const at = email.indexOf("@");
+  return `${email.slice(0, at)}+${attempt + 1}${email.slice(at)}`;
+}
+
+/**
+ * A User row the seed may reuse: one it created itself on an earlier run.
+ * A row with a password or a verified email belongs to someone who
+ * registered that address, so the seed never assigns demo records to it.
+ */
+export function isDemoRow(row: Record<string, unknown>): boolean {
+  return !row.passwordHash && !row.emailVerified;
+}
+
+/** Returns the id of a demo User row for `person`, creating it if needed. */
+export async function ensureDemoUser(db: DbWriter, person: DemoPerson): Promise<string> {
+  for (let attempt = 0; attempt < 20; attempt += 1) {
+    const email = demoEmail(person.email, attempt);
+    // Users are written by auth, and their policy denies client inserts, so
+    // demo rows go through the server-trust surface. The read sees
+    // passwordHash, which is how a registered account is told apart.
+    const [existing] = await db.unsafe.query("User", { email, $limit: 1 });
+    if (!existing) {
+      return db.unsafe.insert("User", {
+        email,
+        displayName: person.name,
+        createdAt: new Date(Date.now() - 200 * 86_400_000).toISOString(),
+      });
+    }
+    if (isDemoRow(existing)) return existing.id as string;
+  }
+  throw new Error(`No free demo address for ${person.email}`);
+}

package/templates/crm/lib/pipeline.ts

@@ -17,6 +17,7 @@ export const PIPELINE: Stage[] = [
   { id: "lead", label: "Lead", probability: 0.1 },
   { id: "qualified", label: "Qualified", probability: 0.3 },
   { id: "proposal", label: "Proposal", probability: 0.6 },
+  { id: "negotiation", label: "Negotiation", probability: 0.8 },
   { id: "won", label: "Won", closed: "won", probability: 1 },
   { id: "lost", label: "Lost", closed: "lost", probability: 0 },
 ];
@@ -219,3 +220,39 @@ export function daysUntil(
   };
   return Math.round((startOfDay(then) - startOfDay(now)) / 86_400_000);
 }
+
+export type CloseDue =
+  | { tone: "overdue"; days: number; label: string }
+  | { tone: "soon"; days: number; label: string };
+
+/**
+ * The close-date warning for a deal card: "3d overdue", "Today", or "5d".
+ *
+ * Only open deals get one. A won or lost deal has closed, so its expected
+ * close date is history, not a deadline. Beyond a week out there is nothing
+ * to act on yet, so that returns null too.
+ */
+export function closeDue(
+  deal: { stage: string; closeDate?: string | null },
+  now: number = Date.now(),
+): CloseDue | null {
+  if (!isOpen(deal)) return null;
+  const days = daysUntil(deal.closeDate, now);
+  if (days === null || days > 7) return null;
+  if (days < 0) return { tone: "overdue", days, label: `${Math.abs(days)}d overdue` };
+  return { tone: "soon", days, label: days === 0 ? "Today" : `${days}d` };
+}
+
+/** "Mar 3" for this year, "Mar 3, 2027" otherwise. */
+export function shortDate(iso: string | null | undefined, now: number = Date.now()): string {
+  if (!iso) return "";
+  const then = Date.parse(iso);
+  if (!Number.isFinite(then)) return "";
+  const date = new Date(then);
+  const sameYear = date.getFullYear() === new Date(now).getFullYear();
+  return date.toLocaleDateString("en-US", {
+    month: "short",
+    day: "numeric",
+    ...(sameYear ? {} : { year: "numeric" }),
+  });
+}

package/templates/crm/lib/search.ts

@@ -1,15 +1,16 @@
 // Client-side search powering the ⌘K palette.
 //
-// A small team's CRM fits in the synced replica, so search runs locally against
+// A small team's workspace fits in the synced replica, so search runs locally against
 // data already in memory: results appear as you type, with no request per
 // keystroke. Swap in `db.useSearch` (Pylon's FTS) when a workspace outgrows
 // that — the component boundary doesn't change, only this file.
 
 export interface SearchItem {
   id: string;
-  type: "deal" | "company" | "contact";
+  /** The record kind, such as "deal". The palette picks its icon from this. */
+  type: string;
   title: string;
-  /** Second line: the company for a contact, the domain for a company. */
+  /** Shown on the right of the row: the company for a contact, say. */
   subtitle?: string;
   href: string;
   /** Extra text matched but not displayed — an email, say. */

package/templates/crm/lib/seed.ts

@@ -7,6 +7,37 @@
 // Pure data + pure shaping, so the seeding function stays a thin wrapper and
 // this file can be edited (or emptied) without reading any server code.
 
+/**
+ * The demo sales team. Each becomes a User row with no
+ * password (see lib/demo-team.ts); they exist so deals have realistic owners.
+ */
+export interface SeedTeammate {
+  name: string;
+  email: string;
+}
+
+export const SEED_TEAM: SeedTeammate[] = [
+  { name: "Maya Castillo", email: "maya.castillo@demo.invalid" },
+  { name: "Jordan Ellis", email: "jordan.ellis@demo.invalid" },
+  { name: "Aisha Karim", email: "aisha.karim@demo.invalid" },
+  { name: "Noah Brandt", email: "noah.brandt@demo.invalid" },
+];
+
+/**
+ * Who owns the seeded deal at `index`, as a position in `[you, ...SEED_TEAM]`.
+ * Stepping by 3 through a team of 5 spreads every stage across everyone,
+ * including the person who signed up.
+ */
+export function seedOwner(index: number, teamSize: number = SEED_TEAM.length + 1): number {
+  return (index * 3 + 1) % teamSize;
+}
+
+/** A fictional US number in the 555-01xx range reserved for fiction. */
+export function seedPhone(index: number): string {
+  const area = [212, 312, 415, 512, 617, 720][index % 6];
+  return `+1 (${area}) 555-01${String(index % 100).padStart(2, "0")}`;
+}
+
 export interface SeedCompany {
   key: string;
   name: string;
@@ -131,14 +162,14 @@ export const SEED_DEALS: SeedDeal[] = [
   { company: "vantage", contact: "Anita Rao", title: "Installer scheduling", value: 26500, stage: "qualified", closeInDays: 38, age: 14 },
   { company: "tidewater", contact: "Sarah Lindqvist", title: "Shop floor work orders", value: 41000, stage: "qualified", closeInDays: 33, age: 19 },
 
-  // Proposal
+  // Proposal and negotiation
   { company: "northwind", contact: "Dana Whitfield", title: "Fleet dispatch rollout", value: 48000, stage: "proposal", closeInDays: 12, age: 34 },
   { company: "riverbed", contact: "Tom Alvarez", title: "Multi-store inventory", value: 22000, stage: "proposal", closeInDays: 5, age: 29 },
-  { company: "meridian", contact: "Rachel Stone", title: "Customer tracking portal", value: 88000, stage: "proposal", closeInDays: 9, age: 41 },
+  { company: "meridian", contact: "Rachel Stone", title: "Customer tracking portal", value: 88000, stage: "negotiation", closeInDays: 9, age: 41 },
   { company: "bluefin", contact: "Elena Vasquez", title: "Embedded reporting module", value: 36000, stage: "proposal", closeInDays: 14, age: 27 },
-  { company: "harbor", contact: "Robert Chen", title: "Guest messaging platform", value: 67000, stage: "proposal", closeInDays: 7, age: 38 },
-  { company: "halcyon", contact: "Margaret O'Neill", title: "Care plan tracking", value: 52000, stage: "proposal", closeInDays: 16, age: 31 },
-  { company: "summit", contact: "Greg Holloway", title: "Security review tooling", value: 18000, stage: "proposal", closeInDays: 3, age: 24 },
+  { company: "harbor", contact: "Robert Chen", title: "Guest messaging platform", value: 67000, stage: "negotiation", closeInDays: 6, age: 38 },
+  { company: "halcyon", contact: "Margaret O'Neill", title: "Care plan tracking", value: 52000, stage: "negotiation", closeInDays: 13, age: 31 },
+  { company: "summit", contact: "Greg Holloway", title: "Security review tooling", value: 18000, stage: "negotiation", closeInDays: -2, age: 24 },
   { company: "sable", contact: "Isabel Moreau", title: "Loyalty programme", value: 11200, stage: "proposal", closeInDays: 10, age: 26 },
 
   // Won
@@ -208,7 +239,14 @@ export const SEED_ACTIVITIES: SeedActivity[] = [
 export interface ShapedSeed {
   companies: Array<{ key: string; row: Record<string, unknown> }>;
   contacts: Array<{ company: string; row: Record<string, unknown> }>;
-  deals: Array<{ company: string; contact: string; title: string; row: Record<string, unknown> }>;
+  /** `owner` is a position in `[you, ...SEED_TEAM]`; see seedOwner. */
+  deals: Array<{
+    company: string;
+    contact: string;
+    title: string;
+    owner: number;
+    row: Record<string, unknown>;
+  }>;
   activities: Array<{ deal: string; row: Record<string, unknown> }>;
 }
 
@@ -239,12 +277,19 @@ export function shapeSeed(now: number = Date.now()): ShapedSeed {
     })),
     contacts: SEED_CONTACTS.map((c, index) => ({
       company: c.company,
-      row: { name: c.name, email: c.email, title: c.title, createdAt: at(-110 + index * 2) },
+      row: {
+        name: c.name,
+        email: c.email,
+        title: c.title,
+        phone: seedPhone(index),
+        createdAt: at(-110 + index * 2),
+      },
     })),
-    deals: SEED_DEALS.map((d) => ({
+    deals: SEED_DEALS.map((d, index) => ({
       company: d.company,
       contact: d.contact,
       title: d.title,
+      owner: seedOwner(index),
       row: {
         title: d.title,
         value: d.value,

package/templates/crm/tests/components.test.tsx

@@ -31,7 +31,7 @@ describe("PipelineBoard", () => {
         onOpen={() => {}}
       />,
     );
-    for (const label of ["Lead", "Qualified", "Proposal", "Won"]) {
+    for (const label of ["Lead", "Qualified", "Proposal", "Negotiation", "Won"]) {
       expect(screen.getByLabelText(label)).toBeDefined();
     }
     // Lost is real in the model but deliberately not a column.
@@ -181,7 +181,7 @@ describe("CommandPalette", () => {
     render(
       <CommandPalette open items={items} onClose={() => {}} onSelect={() => {}} />,
     );
-    fireEvent.change(screen.getByLabelText(/search deals/i), {
+    fireEvent.change(screen.getByLabelText(/^search/i), {
       target: { value: "acme" },
     });
     expect(screen.getByText("Acme Inc")).toBeDefined();
@@ -201,7 +201,7 @@ describe("CommandPalette", () => {
         onSelect={(item) => selected.push(item.id)}
       />,
     );
-    const input = screen.getByLabelText(/search deals/i);
+    const input = screen.getByLabelText(/^search/i);
     fireEvent.change(input, { target: { value: "fleet" } });
     fireEvent.keyDown(input, { key: "Enter" });
     expect(selected).toEqual(["1"]);
@@ -221,7 +221,7 @@ describe("CommandPalette", () => {
         onSelect={(item) => selected.push(item.id)}
       />,
     );
-    fireEvent.keyDown(screen.getByLabelText(/search deals/i), { key: "Escape" });
+    fireEvent.keyDown(screen.getByLabelText(/^search/i), { key: "Escape" });
     expect(closed).toBe(true);
     expect(selected).toEqual([]);
   });
@@ -237,7 +237,7 @@ describe("CommandPalette", () => {
       />,
     );
     expect(screen.getByText("New deal")).toBeDefined();
-    fireEvent.change(screen.getByLabelText(/search deals/i), {
+    fireEvent.change(screen.getByLabelText(/^search/i), {
       target: { value: "acme" },
     });
     expect(screen.queryByText("New deal")).toBeNull();

package/templates/crm/tests/demo-team.test.ts

@@ -0,0 +1,18 @@
+import { describe, expect, test } from "bun:test";
+import { demoEmail, isDemoRow } from "../lib/demo-team";
+
+describe("demo teammates", () => {
+  test("the first address is the person's own, then numbered aliases", () => {
+    expect(demoEmail("maya.castillo@demo.invalid", 0)).toBe("maya.castillo@demo.invalid");
+    expect(demoEmail("maya.castillo@demo.invalid", 1)).toBe("maya.castillo+2@demo.invalid");
+    expect(demoEmail("maya.castillo@demo.invalid", 2)).toBe("maya.castillo+3@demo.invalid");
+  });
+
+  test("a registered account is never reused as a demo teammate", () => {
+    // Someone who registered a demo address first must not be handed the
+    // seeded records.
+    expect(isDemoRow({ email: "x@demo.invalid", passwordHash: "argon2id$..." })).toBe(false);
+    expect(isDemoRow({ email: "x@demo.invalid", emailVerified: "2026-07-01T00:00:00Z" })).toBe(false);
+    expect(isDemoRow({ email: "x@demo.invalid", displayName: "Maya Castillo" })).toBe(true);
+  });
+});

package/templates/crm/tests/pipeline.test.ts

@@ -3,6 +3,7 @@ import {
   BOARD_STAGES,
   PIPELINE,
   accentIndex,
+  closeDue,
   daysUntil,
   groupByStage,
   initials,
@@ -17,6 +18,7 @@ import {
   sumValue,
   type Deal,
 } from "../lib/pipeline";
+import { SEED_TEAM, shapeSeed } from "../lib/seed";
 
 const deal = (over: Partial<Deal> = {}): Deal => ({
   id: "d1",
@@ -34,6 +36,7 @@ describe("stages", () => {
       "lead",
       "qualified",
       "proposal",
+      "negotiation",
       "won",
     ]);
     expect(PIPELINE.some((s) => s.id === "lost")).toBe(true);
@@ -47,7 +50,8 @@ describe("stages", () => {
 
   test("advance and retreat stop at the ends", () => {
     expect(nextStage("lead")).toBe("qualified");
-    expect(nextStage("proposal")).toBe("won");
+    expect(nextStage("proposal")).toBe("negotiation");
+    expect(nextStage("negotiation")).toBe("won");
     expect(nextStage("won")).toBeNull();
     expect(previousStage("qualified")).toBe("lead");
     expect(previousStage("lead")).toBeNull();
@@ -56,7 +60,8 @@ describe("stages", () => {
   test("an unknown stage is rejected, not coerced", () => {
     expect(isValidStage("proposal")).toBe(true);
     expect(isValidStage("Proposal")).toBe(false);
-    expect(isValidStage("negotiation")).toBe(false);
+    expect(isValidStage("Negotiation")).toBe(false);
+    expect(isValidStage("closing")).toBe(false);
     expect(nextStage("nonsense")).toBeNull();
   });
 });
@@ -83,7 +88,7 @@ describe("groupByStage", () => {
 
   test("a deal with an unknown stage is dropped, not filed under Lead", () => {
     // Silently reclassifying it would hide a typo behind a plausible board.
-    const columns = groupByStage([deal({ stage: "negotiation" })]);
+    const columns = groupByStage([deal({ stage: "closing" })]);
     expect(columns.every((c) => c.deals.length === 0)).toBe(true);
   });
 
@@ -217,3 +222,54 @@ describe("daysUntil", () => {
     expect(daysUntil("nope", now)).toBeNull();
   });
 });
+
+describe("closeDue", () => {
+  const now = Date.parse("2026-07-27T18:00:00Z");
+  const past = "2026-07-20T12:00:00Z";
+
+  test("an open deal past its close date is overdue", () => {
+    expect(closeDue({ stage: "proposal", closeDate: past }, now)).toEqual({
+      tone: "overdue",
+      days: -7,
+      label: "7d overdue",
+    });
+  });
+
+  test("a won or lost deal is never overdue", () => {
+    // Won deals used to show "Nd overdue" in red on the board.
+    expect(closeDue({ stage: "won", closeDate: past }, now)).toBeNull();
+    expect(closeDue({ stage: "lost", closeDate: past }, now)).toBeNull();
+  });
+
+  test("inside a week reads as days left, today as Today", () => {
+    expect(closeDue({ stage: "lead", closeDate: "2026-07-30T12:00:00Z" }, now)?.label).toBe("3d");
+    expect(closeDue({ stage: "lead", closeDate: "2026-07-27T20:00:00Z" }, now)?.label).toBe("Today");
+  });
+
+  test("nothing to flag beyond a week or without a date", () => {
+    expect(closeDue({ stage: "lead", closeDate: "2026-08-20T12:00:00Z" }, now)).toBeNull();
+    expect(closeDue({ stage: "lead", closeDate: null }, now)).toBeNull();
+  });
+});
+
+describe("seed", () => {
+  test("every teammate, and the person who signed up, owns open deals", () => {
+    const seed = shapeSeed(Date.parse("2026-07-27T18:00:00Z"));
+    const owners = new Set(
+      seed.deals.filter((d) => isOpen({ stage: String(d.row.stage) })).map((d) => d.owner),
+    );
+    expect([...owners].sort()).toEqual(
+      Array.from({ length: SEED_TEAM.length + 1 }, (_, i) => i),
+    );
+  });
+
+  test("every seeded stage is a real stage", () => {
+    for (const deal of shapeSeed().deals) {
+      expect(isValidStage(String(deal.row.stage))).toBe(true);
+    }
+  });
+
+  test("demo teammates use a domain that can't receive mail", () => {
+    for (const person of SEED_TEAM) expect(person.email.endsWith("@demo.invalid")).toBe(true);
+  });
+});

package/templates/directory/.env.example

@@ -10,3 +10,10 @@ PYLON_OWNER_EMAIL=you@yourdirectory.com
 # ── Site URL (optional) ──────────────────────────────────────────────────────
 # Used by robots.txt + sitemap.xml. Point it at your real domain in production.
 # SITE_URL=https://yourdirectory.com
+
+# ── Demo data ────────────────────────────────────────────────────────────────
+# `pylon dev` fills an empty review queue with fictional submissions. Seeding
+# runs only under `pylon dev` (it checks PYLON_DEV_MODE and
+# PYLON_DEV_WATCH_DIR), so `pylon start`, Docker, and Pylon Cloud deploys never
+# seed. Set 0 to start empty in development. Never set 1 on a deploy.
+# PYLON_DEMO_DATA=0

package/templates/directory/README.md

@@ -45,25 +45,44 @@ details), Approve / Reject, and a live count of published listings.
 Set `PYLON_OWNER_EMAIL` in `.env` (see `.env.example`) to the email you'll sign
 in with, then create that account at `/login`.
 
+## Demo data
+
+The curator's first dashboard load in `pylon dev` fills an empty review queue
+with fictional submissions (`functions/seedDemo.ts`, `lib/demo.ts`). Seeding
+runs only for the owner, only when `PYLON_DEMO_DATA` is on or when it is unset and the app runs under `pylon dev`, and only while the `Submission` table is empty. `pylon start`, Docker, and Pylon Cloud deploys do not seed, because only `pylon dev` sets `PYLON_DEV_WATCH_DIR`. Set `PYLON_DEMO_DATA=0` to start
+empty in development.
+
+The starter listings seed in every environment (`functions/seedListings.ts`),
+because they are your directory's own content from `lib/site.config.ts`. Their
+names are made up; replace them with real entries. Each listing shows a
+monogram mark (`monogram` in `lib/directory.ts`) until you add logos.
+
 ## Rebrand it
 
 Brand, colors, hero copy, categories, starter listings, and submission copy
 live in **`lib/site.config.ts`**. Editing that file updates the directory, and
 a fresh database seeds from its starter listings.
 
+The tab icon is `app/icon.svg` (with `public/favicon.ico` for browsers that
+request `/favicon.ico`). Both carry this brand's letter and colors; replace
+them when you rename the brand.
+
 ## Layout
 
 ```
 app.ts                          Listing (public, FTS) + Submission (PII) + User
 lib/site.config.ts              ALL copy + brand + categories + seed listings
 functions/seedListings.ts       idempotent seed from config
+functions/seedDemo.ts           dev-only demo review queue (see Demo data)
+lib/directory.ts                shared types, tags, monogram marks
+lib/demo.ts                     demo submissions + the dev-only gate
 functions/submitListing.ts      public mutation: write a pending Submission (PII)
 functions/upvote.ts             public mutation: bump Listing.votes (live)
 functions/submissionsForOwner.ts  owner-only query: queue + submitter PII
 functions/{approve,reject}Submission.ts  owner-only moderation
-app/page.tsx                    hero + browse island
-app/directory-browse.tsx        client island: live db.useSearch + facets + votes
-app/submit/page.tsx, submit-form.tsx  the submit flow
+app/(marketing)/page.tsx        headline + browse island
+app/(marketing)/directory-browse.tsx        client island: live db.useSearch + facets + votes
+app/(marketing)/submit/page.tsx, submit-form.tsx  the submit flow
 app/dashboard/                  curator moderation queue (auth-gated, live)
 ```