@withpotter/lib 0.13.0-next.101

package/dist/site-address.d.ts

@@ -0,0 +1,14 @@
+/**
+ * What a business address may be, as the person typing it sees it.
+ *
+ * Mirrors the API's rules (`shared/tenant-slug.ts`), so most mistakes are
+ * caught before a request is made. The API stays the authority: a slug this
+ * accepts can still be taken or reserved, which only the server can say.
+ */
+export declare const ADDRESS_MIN_LENGTH = 3;
+export declare const ADDRESS_MAX_LENGTH = 50;
+export type AddressProblem = 'too-short' | 'too-long' | 'format';
+export declare const ADDRESS_PROBLEM_MESSAGES: Record<AddressProblem | 'reserved' | 'taken', string>;
+/** What a person types, tidied the way the API will read it. */
+export declare function normalizeAddress(input: string): string;
+export declare function addressProblem(input: string): AddressProblem | null;

package/dist/site-address.js

@@ -0,0 +1,28 @@
+const ADDRESS_MIN_LENGTH = 3;
+const ADDRESS_MAX_LENGTH = 50;
+const FORMAT = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+const ADDRESS_PROBLEM_MESSAGES = {
+  "too-short": `Use at least ${ADDRESS_MIN_LENGTH} characters.`,
+  "too-long": `Use at most ${ADDRESS_MAX_LENGTH} characters.`,
+  format: "Use only lowercase letters, numbers and hyphens, with no hyphen at the start or end.",
+  reserved: "That address is reserved. Try another.",
+  taken: "That address is already taken."
+};
+function normalizeAddress(input) {
+  return input.trim().toLowerCase();
+}
+function addressProblem(input) {
+  const slug = normalizeAddress(input);
+  if (slug.length < ADDRESS_MIN_LENGTH) return "too-short";
+  if (slug.length > ADDRESS_MAX_LENGTH) return "too-long";
+  if (!FORMAT.test(slug)) return "format";
+  return null;
+}
+export {
+  ADDRESS_MAX_LENGTH,
+  ADDRESS_MIN_LENGTH,
+  ADDRESS_PROBLEM_MESSAGES,
+  addressProblem,
+  normalizeAddress
+};
+//# sourceMappingURL=site-address.js.map

package/dist/site-address.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/site-address.ts"],"sourcesContent":["/**\n * What a business address may be, as the person typing it sees it.\n *\n * Mirrors the API's rules (`shared/tenant-slug.ts`), so most mistakes are\n * caught before a request is made. The API stays the authority: a slug this\n * accepts can still be taken or reserved, which only the server can say.\n */\nexport const ADDRESS_MIN_LENGTH = 3;\nexport const ADDRESS_MAX_LENGTH = 50;\n\nconst FORMAT = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;\n\nexport type AddressProblem = 'too-short' | 'too-long' | 'format';\n\nexport const ADDRESS_PROBLEM_MESSAGES: Record<\n  AddressProblem | 'reserved' | 'taken',\n  string\n> = {\n  'too-short': `Use at least ${ADDRESS_MIN_LENGTH} characters.`,\n  'too-long': `Use at most ${ADDRESS_MAX_LENGTH} characters.`,\n  format:\n    'Use only lowercase letters, numbers and hyphens, with no hyphen at the start or end.',\n  reserved: 'That address is reserved. Try another.',\n  taken: 'That address is already taken.',\n};\n\n/** What a person types, tidied the way the API will read it. */\nexport function normalizeAddress(input: string): string {\n  return input.trim().toLowerCase();\n}\n\nexport function addressProblem(input: string): AddressProblem | null {\n  const slug = normalizeAddress(input);\n  if (slug.length < ADDRESS_MIN_LENGTH) return 'too-short';\n  if (slug.length > ADDRESS_MAX_LENGTH) return 'too-long';\n  if (!FORMAT.test(slug)) return 'format';\n  return null;\n}\n"],"mappings":"AAOO,MAAM,qBAAqB;AAC3B,MAAM,qBAAqB;AAElC,MAAM,SAAS;AAIR,MAAM,2BAGT;AAAA,EACF,aAAa,gBAAgB,kBAAkB;AAAA,EAC/C,YAAY,eAAe,kBAAkB;AAAA,EAC7C,QACE;AAAA,EACF,UAAU;AAAA,EACV,OAAO;AACT;AAGO,SAAS,iBAAiB,OAAuB;AACtD,SAAO,MAAM,KAAK,EAAE,YAAY;AAClC;AAEO,SAAS,eAAe,OAAsC;AACnE,QAAM,OAAO,iBAAiB,KAAK;AACnC,MAAI,KAAK,SAAS,mBAAoB,QAAO;AAC7C,MAAI,KAAK,SAAS,mBAAoB,QAAO;AAC7C,MAAI,CAAC,OAAO,KAAK,IAAI,EAAG,QAAO;AAC/B,SAAO;AACT;","names":[]}

package/dist/slug.d.ts

@@ -0,0 +1,26 @@
+/**
+ * The business address, derived from a business name.
+ *
+ * Moved out of `step-name` when that file crossed the 500-line rule, and the
+ * seam is a real one: none of this knows anything about the screen. It is the
+ * rule for turning a name people actually type into an address a URL can
+ * carry, and the two callers of `sanitizeSlug` — deriving and hand-editing —
+ * need the same answer or the field disagrees with itself.
+ */
+/**
+ * ACCENTS ARE FOLDED, NOT DROPPED.
+ *
+ * This used to lowercase and then delete everything outside `a-z0-9`, which on
+ * the names this product is actually for takes the letter with the mark on it:
+ * "Ìlera Courts" derived `lera-courts`, "Ẹ̀gbẹ́ Nights" loses its first letter
+ * too, and "Ụlọma" comes out as `ma`. A Nigerian business typing its own name
+ * in its own orthography got an address with the front of the word missing,
+ * and nothing on the screen said why.
+ *
+ * `NFD` splits a marked letter into the base letter plus its combining mark, so
+ * stripping the marks leaves the letter behind: Ì → I + ` → i. The dotted-below
+ * vowels of Yoruba and Igbo (ẹ, ọ, ụ) decompose the same way.
+ */
+export declare function slugify(input: string): string;
+export declare function sanitizeSlug(input: string): string;
+export declare function isValidSlug(s: string): boolean;

package/dist/slug.js

@@ -0,0 +1,15 @@
+function slugify(input) {
+  return input.normalize("NFD").replace(/[\u0300-\u036f]/g, "").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 40);
+}
+function sanitizeSlug(input) {
+  return input.toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/-{2,}/g, "-").slice(0, 40);
+}
+function isValidSlug(s) {
+  return s.length >= 3 && s.length <= 40 && /^[a-z0-9-]+$/.test(s) && !s.startsWith("-") && !s.endsWith("-");
+}
+export {
+  isValidSlug,
+  sanitizeSlug,
+  slugify
+};
+//# sourceMappingURL=slug.js.map

package/dist/slug.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/slug.ts"],"sourcesContent":["/**\n * The business address, derived from a business name.\n *\n * Moved out of `step-name` when that file crossed the 500-line rule, and the\n * seam is a real one: none of this knows anything about the screen. It is the\n * rule for turning a name people actually type into an address a URL can\n * carry, and the two callers of `sanitizeSlug` — deriving and hand-editing —\n * need the same answer or the field disagrees with itself.\n */\n\n/**\n * ACCENTS ARE FOLDED, NOT DROPPED.\n *\n * This used to lowercase and then delete everything outside `a-z0-9`, which on\n * the names this product is actually for takes the letter with the mark on it:\n * \"Ìlera Courts\" derived `lera-courts`, \"Ẹ̀gbẹ́ Nights\" loses its first letter\n * too, and \"Ụlọma\" comes out as `ma`. A Nigerian business typing its own name\n * in its own orthography got an address with the front of the word missing,\n * and nothing on the screen said why.\n *\n * `NFD` splits a marked letter into the base letter plus its combining mark, so\n * stripping the marks leaves the letter behind: Ì → I + ` → i. The dotted-below\n * vowels of Yoruba and Igbo (ẹ, ọ, ụ) decompose the same way.\n */\nexport function slugify(input: string): string {\n  return input\n    .normalize('NFD')\n    .replace(/[\\u0300-\\u036f]/g, '')\n    .toLowerCase()\n    .replace(/[^a-z0-9]+/g, '-')\n    .replace(/^-+|-+$/g, '')\n    .slice(0, 40);\n}\nexport function sanitizeSlug(input: string): string {\n  return input\n    .toLowerCase()\n    .replace(/[^a-z0-9-]+/g, '-')\n    .replace(/-{2,}/g, '-')\n    .slice(0, 40);\n}\nexport function isValidSlug(s: string): boolean {\n  return (\n    s.length >= 3 &&\n    s.length <= 40 &&\n    /^[a-z0-9-]+$/.test(s) &&\n    !s.startsWith('-') &&\n    !s.endsWith('-')\n  );\n}\n"],"mappings":"AAwBO,SAAS,QAAQ,OAAuB;AAC7C,SAAO,MACJ,UAAU,KAAK,EACf,QAAQ,oBAAoB,EAAE,EAC9B,YAAY,EACZ,QAAQ,eAAe,GAAG,EAC1B,QAAQ,YAAY,EAAE,EACtB,MAAM,GAAG,EAAE;AAChB;AACO,SAAS,aAAa,OAAuB;AAClD,SAAO,MACJ,YAAY,EACZ,QAAQ,gBAAgB,GAAG,EAC3B,QAAQ,UAAU,GAAG,EACrB,MAAM,GAAG,EAAE;AAChB;AACO,SAAS,YAAY,GAAoB;AAC9C,SACE,EAAE,UAAU,KACZ,EAAE,UAAU,MACZ,eAAe,KAAK,CAAC,KACrB,CAAC,EAAE,WAAW,GAAG,KACjB,CAAC,EAAE,SAAS,GAAG;AAEnB;","names":[]}

package/dist/sound.d.ts

@@ -0,0 +1,14 @@
+export type PotterSound = 'record-start' | 'record-stop' | 'potter' | 'send' | 'commit' | 'refuse';
+export declare function soundEnabled(): boolean;
+export declare function setSoundEnabled(on: boolean): void;
+/**
+ * For a control that shows the current setting.
+ *
+ * Pair with `useSyncExternalStore`: the preference lives in localStorage, which
+ * is not React state and does not exist during a server render, and this is the
+ * shape React provides for exactly that. Reading it into `useState` inside an
+ * effect would work and would also render the switch in the wrong position for
+ * one frame on every visit.
+ */
+export declare function subscribeSound(onChange: () => void): () => void;
+export declare function playSound(sound: PotterSound): void;

package/dist/sound.js

@@ -0,0 +1,166 @@
+"use client";
+const STORAGE_KEY = "potter-sound";
+let ctx = null;
+let noise = null;
+function audioContext() {
+  if (typeof window === "undefined") return null;
+  const Ctor = window.AudioContext ?? window.webkitAudioContext;
+  if (!Ctor) return null;
+  if (!ctx) ctx = new Ctor();
+  if (ctx.state === "suspended") void ctx.resume();
+  return ctx;
+}
+function noiseBuffer(ac) {
+  if (noise) return noise;
+  const frames = Math.floor(ac.sampleRate * 0.4);
+  const buf = ac.createBuffer(1, frames, ac.sampleRate);
+  const data = buf.getChannelData(0);
+  for (let i = 0; i < frames; i++) data[i] = Math.random() * 2 - 1;
+  noise = buf;
+  return buf;
+}
+function soundEnabled() {
+  if (typeof window === "undefined") return false;
+  try {
+    return window.localStorage.getItem(STORAGE_KEY) !== "off";
+  } catch {
+    return false;
+  }
+}
+const CHANGED = "potter:sound-changed";
+function setSoundEnabled(on) {
+  try {
+    window.localStorage.setItem(STORAGE_KEY, on ? "on" : "off");
+  } catch {
+  }
+  window.dispatchEvent(new Event(CHANGED));
+}
+function subscribeSound(onChange) {
+  window.addEventListener(CHANGED, onChange);
+  window.addEventListener("storage", onChange);
+  return () => {
+    window.removeEventListener(CHANGED, onChange);
+    window.removeEventListener("storage", onChange);
+  };
+}
+function knock(ac, at, freq, peak) {
+  const src = ac.createBufferSource();
+  src.buffer = noiseBuffer(ac);
+  const band = ac.createBiquadFilter();
+  band.type = "bandpass";
+  band.frequency.setValueAtTime(freq, at);
+  band.Q.setValueAtTime(8, at);
+  const gain = ac.createGain();
+  gain.gain.setValueAtTime(0, at);
+  gain.gain.linearRampToValueAtTime(peak, at + 2e-3);
+  gain.gain.exponentialRampToValueAtTime(1e-4, at + 0.03);
+  src.connect(band).connect(gain).connect(ac.destination);
+  src.start(at);
+  src.stop(at + 0.06);
+}
+function settle(ac, at, from, to, duration, peak) {
+  const osc = ac.createOscillator();
+  osc.type = "triangle";
+  osc.frequency.setValueAtTime(from, at);
+  osc.frequency.exponentialRampToValueAtTime(to, at + duration * 0.35);
+  const lp = ac.createBiquadFilter();
+  lp.type = "lowpass";
+  lp.frequency.setValueAtTime(1800, at);
+  const gain = ac.createGain();
+  gain.gain.setValueAtTime(0, at);
+  gain.gain.linearRampToValueAtTime(peak, at + 8e-3);
+  gain.gain.exponentialRampToValueAtTime(1e-4, at + duration);
+  osc.connect(lp).connect(gain).connect(ac.destination);
+  osc.start(at);
+  osc.stop(at + duration + 0.02);
+}
+function breath(ac, at, duration, peak) {
+  const src = ac.createBufferSource();
+  src.buffer = noiseBuffer(ac);
+  src.loop = true;
+  const lp = ac.createBiquadFilter();
+  lp.type = "lowpass";
+  lp.frequency.setValueAtTime(220, at);
+  lp.frequency.exponentialRampToValueAtTime(2400, at + duration * 0.45);
+  lp.frequency.exponentialRampToValueAtTime(500, at + duration);
+  lp.Q.setValueAtTime(2, at);
+  const gain = ac.createGain();
+  gain.gain.setValueAtTime(0, at);
+  gain.gain.linearRampToValueAtTime(peak, at + duration * 0.3);
+  gain.gain.exponentialRampToValueAtTime(1e-4, at + duration);
+  src.connect(lp).connect(gain).connect(ac.destination);
+  src.start(at);
+  src.stop(at + duration + 0.05);
+}
+function thud(ac, at, freq, peak) {
+  const src = ac.createBufferSource();
+  src.buffer = noiseBuffer(ac);
+  const band = ac.createBiquadFilter();
+  band.type = "bandpass";
+  band.frequency.setValueAtTime(freq, at);
+  band.Q.setValueAtTime(1.6, at);
+  const gain = ac.createGain();
+  gain.gain.setValueAtTime(0, at);
+  gain.gain.linearRampToValueAtTime(peak, at + 4e-3);
+  gain.gain.exponentialRampToValueAtTime(1e-4, at + 0.12);
+  src.connect(band).connect(gain).connect(ac.destination);
+  src.start(at);
+  src.stop(at + 0.16);
+}
+const HAPTICS = {
+  "record-start": 12,
+  "record-stop": 8,
+  send: 6,
+  // Land, then seat. The gap is the sound's own gap.
+  commit: [12, 60, 18],
+  refuse: 28
+};
+function feel(sound) {
+  const pattern = HAPTICS[sound];
+  if (pattern === void 0) return;
+  try {
+    navigator.vibrate?.(pattern);
+  } catch {
+  }
+}
+function playSound(sound) {
+  if (!soundEnabled()) return;
+  feel(sound);
+  const ac = audioContext();
+  if (!ac) return;
+  const now = ac.currentTime;
+  switch (sound) {
+    case "record-start":
+      knock(ac, now, 900, 0.05);
+      settle(ac, now + 0.012, 220, 330, 0.26, 0.05);
+      break;
+    case "record-stop":
+      knock(ac, now, 620, 0.04);
+      settle(ac, now + 0.012, 330, 210, 0.2, 0.04);
+      break;
+    case "send":
+      knock(ac, now, 1500, 0.035);
+      settle(ac, now + 8e-3, 520, 360, 0.16, 0.035);
+      break;
+    case "commit":
+      knock(ac, now, 1100, 0.045);
+      knock(ac, now + 0.07, 520, 0.05);
+      settle(ac, now + 0.012, 200, 300, 0.38, 0.045);
+      break;
+    case "refuse":
+      thud(ac, now, 260, 0.055);
+      settle(ac, now + 0.01, 200, 120, 0.22, 0.042);
+      break;
+    case "potter":
+      breath(ac, now, 0.55, 0.045);
+      settle(ac, now + 0.06, 160, 240, 0.5, 0.03);
+      break;
+  }
+}
+export {
+  playSound,
+  setSoundEnabled,
+  soundEnabled,
+  subscribeSound
+};
+//# sourceMappingURL=sound.js.map

package/dist/sound.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sound.ts"],"sourcesContent":["'use client';\n\n/**\n * Box's voice, as six sounds and five vibrations.\n *\n * THE FIRST VERSION OF THIS WAS A BEEP, and it is worth saying why so it does\n * not come back. It played two sine tones a perfect fifth apart and justified\n * itself with the mark — two interlocking blocks, a 3:2 ratio, small whole\n * numbers. The reasoning was fine and the sound was a notification chime,\n * because what makes a chime a chime is not which NOTES it plays, it is that a\n * clean sine with a soft decay is the timbre of a bell. Changing the interval\n * changes nothing. The timbre is the identity.\n *\n * SO THESE ARE MECHANISMS, NOT NOTES. Every sound here starts with a short\n * burst of band-passed noise — a knock, the sound of something with mass\n * meeting something else — and only then lets a pitched element move. Noise is\n * what physical events have and what synthesised notification sounds never do,\n * which is why a UI can have a hundred chimes that all sound alike and no two\n * doors that do.\n *\n * The pitched half BENDS rather than holding. A tone that slides into place and\n * stops is a latch engaging; a tone that holds a steady frequency is an\n * instrument being played. We want the former — the mark is blocks that\n * interlock, and the sound of interlocking is a knock and a settle.\n *\n *   record on    knock, then a tone bending UP into place, and staying\n *   record off   knock, then the same tone bending DOWN and letting go\n *   potter       breath — noise opening through a filter, no knock at all,\n *                because arriving is not a mechanism closing\n *   send         a light knock and a short tone falling away, with nothing\n *                after it: something left your hand and is gone\n *   commit       TWO knocks, the second lower and a beat behind the first,\n *                with a tone settling across both — a latch dropping into a\n *                slot. It is the only sound in the set with two impacts,\n *                because finishing is the only event that has two parts:\n *                the thing arriving and the thing holding\n *   refuse       one dull knock, damped, with a tone bending DOWN and dying\n *                early — a part that does not fit. No second knock: nothing\n *                landed\n *\n * WHY EVERY SOUND HAS A BODY. Each begins with band-passed noise, and the noise\n * is not decoration — it is the mass. Two objects meeting make a broadband\n * transient first and a pitch second; skip the transient and you have a\n * notification, no matter what interval follows. A phone that goes \"ding\" tells\n * you the software noticed something. A drawer that goes \"thunk\" tells you\n * something happened. Box is the second kind.\n *\n * Rising for on is the one part that is not a choice: it is the direction every\n * listener already reads, and inverting it to be clever would make the app's\n * two most common sounds mean the wrong thing.\n *\n * IT IS QUIET AND IT CAN BE TURNED OFF. Peak gain is 0.06 — audible in a room,\n * ignorable in an office, never the loudest thing on a call. The preference is\n * read from localStorage on every play rather than cached, so muting takes\n * effect on the next sound rather than the next reload.\n */\n\nconst STORAGE_KEY = 'potter-sound';\n\nexport type PotterSound =\n  | 'record-start'\n  | 'record-stop'\n  | 'potter'\n  | 'send'\n  | 'commit'\n  | 'refuse';\n\n/**\n * One context for the page, made on first use.\n *\n * Browsers refuse to start an AudioContext without a user gesture, and every\n * caller here is inside a click, so the first one succeeds. It is reused\n * because a context per sound leaks audio threads — and resumed each time,\n * because the browser suspends it when the tab goes to the background.\n */\nlet ctx: AudioContext | null = null;\n/** The noise bed, made once. Regenerating it per sound is pure waste. */\nlet noise: AudioBuffer | null = null;\n\nfunction audioContext(): AudioContext | null {\n  if (typeof window === 'undefined') return null;\n  const Ctor =\n    window.AudioContext ??\n    (window as unknown as { webkitAudioContext?: typeof AudioContext })\n      .webkitAudioContext;\n  if (!Ctor) return null;\n  if (!ctx) ctx = new Ctor();\n  if (ctx.state === 'suspended') void ctx.resume();\n  return ctx;\n}\n\nfunction noiseBuffer(ac: AudioContext): AudioBuffer {\n  if (noise) return noise;\n  const frames = Math.floor(ac.sampleRate * 0.4);\n  const buf = ac.createBuffer(1, frames, ac.sampleRate);\n  const data = buf.getChannelData(0);\n  for (let i = 0; i < frames; i++) data[i] = Math.random() * 2 - 1;\n  noise = buf;\n  return buf;\n}\n\nexport function soundEnabled(): boolean {\n  if (typeof window === 'undefined') return false;\n  try {\n    // Default ON, so the sound design is what people meet; the key only ever\n    // records a decision to turn it off.\n    return window.localStorage.getItem(STORAGE_KEY) !== 'off';\n  } catch {\n    return false;\n  }\n}\n\nconst CHANGED = 'potter:sound-changed';\n\nexport function setSoundEnabled(on: boolean) {\n  try {\n    window.localStorage.setItem(STORAGE_KEY, on ? 'on' : 'off');\n  } catch {\n    /* private mode: the sound simply stays as it was */\n  }\n  // So a switch anywhere re-reads rather than holding its own copy of the\n  // answer. `storage` fires only in OTHER tabs, which is exactly backwards for\n  // the tab doing the switching.\n  window.dispatchEvent(new Event(CHANGED));\n}\n\n/**\n * For a control that shows the current setting.\n *\n * Pair with `useSyncExternalStore`: the preference lives in localStorage, which\n * is not React state and does not exist during a server render, and this is the\n * shape React provides for exactly that. Reading it into `useState` inside an\n * effect would work and would also render the switch in the wrong position for\n * one frame on every visit.\n */\nexport function subscribeSound(onChange: () => void): () => void {\n  window.addEventListener(CHANGED, onChange);\n  window.addEventListener('storage', onChange);\n  return () => {\n    window.removeEventListener(CHANGED, onChange);\n    window.removeEventListener('storage', onChange);\n  };\n}\n\n/**\n * The knock. Band-passed noise, 30ms, gone before you can hear it as noise.\n *\n * This is the whole difference between a mechanism and a chime. `Q` is high so\n * the band is narrow — wide-band noise is a hiss, a narrow band is a body\n * resonating at one frequency, which is what a knock on an object actually is.\n */\nfunction knock(ac: AudioContext, at: number, freq: number, peak: number) {\n  const src = ac.createBufferSource();\n  src.buffer = noiseBuffer(ac);\n\n  const band = ac.createBiquadFilter();\n  band.type = 'bandpass';\n  band.frequency.setValueAtTime(freq, at);\n  band.Q.setValueAtTime(8, at);\n\n  const gain = ac.createGain();\n  gain.gain.setValueAtTime(0, at);\n  gain.gain.linearRampToValueAtTime(peak, at + 0.002);\n  gain.gain.exponentialRampToValueAtTime(0.0001, at + 0.03);\n\n  src.connect(band).connect(gain).connect(ac.destination);\n  src.start(at);\n  src.stop(at + 0.06);\n}\n\n/**\n * The settle. A tone that arrives at its pitch instead of starting on it.\n *\n * `from` and `to` are the bend. A fifth of a semitone would be a tuning error;\n * these are wide enough to hear as movement and short enough that nothing ever\n * sounds out of tune, because it does not hold long enough to be judged.\n */\nfunction settle(\n  ac: AudioContext,\n  at: number,\n  from: number,\n  to: number,\n  duration: number,\n  peak: number,\n) {\n  const osc = ac.createOscillator();\n  osc.type = 'triangle';\n  osc.frequency.setValueAtTime(from, at);\n  osc.frequency.exponentialRampToValueAtTime(to, at + duration * 0.35);\n\n  // Rolls the top off so it reads as wooden rather than electronic. A raw\n  // triangle is bright enough to sound like a synth patch.\n  const lp = ac.createBiquadFilter();\n  lp.type = 'lowpass';\n  lp.frequency.setValueAtTime(1800, at);\n\n  const gain = ac.createGain();\n  gain.gain.setValueAtTime(0, at);\n  gain.gain.linearRampToValueAtTime(peak, at + 0.008);\n  gain.gain.exponentialRampToValueAtTime(0.0001, at + duration);\n\n  osc.connect(lp).connect(gain).connect(ac.destination);\n  osc.start(at);\n  osc.stop(at + duration + 0.02);\n}\n\n/**\n * The breath. Noise opening through a filter that sweeps up, then closes.\n *\n * No knock and no fundamental: nothing is latching, something is arriving. The\n * sweep is what carries it — a static filter would be a hiss, and it is the\n * MOVEMENT of the cutoff that the ear reads as something opening.\n */\nfunction breath(ac: AudioContext, at: number, duration: number, peak: number) {\n  const src = ac.createBufferSource();\n  src.buffer = noiseBuffer(ac);\n  src.loop = true;\n\n  const lp = ac.createBiquadFilter();\n  lp.type = 'lowpass';\n  lp.frequency.setValueAtTime(220, at);\n  lp.frequency.exponentialRampToValueAtTime(2400, at + duration * 0.45);\n  lp.frequency.exponentialRampToValueAtTime(500, at + duration);\n  lp.Q.setValueAtTime(2, at);\n\n  const gain = ac.createGain();\n  gain.gain.setValueAtTime(0, at);\n  gain.gain.linearRampToValueAtTime(peak, at + duration * 0.3);\n  gain.gain.exponentialRampToValueAtTime(0.0001, at + duration);\n\n  src.connect(lp).connect(gain).connect(ac.destination);\n  src.start(at);\n  src.stop(at + duration + 0.05);\n}\n\n/**\n * The dull one. A knock with the resonance choked out of it.\n *\n * `Q` low and the band low, so instead of a body ringing at one frequency you\n * get the sound of a body that cannot ring — a part that does not fit, damped\n * by the hand still holding it. It is the same gesture as `knock` with its\n * voice taken away, which is what makes the pair read as related rather than\n * as two different sounds.\n */\nfunction thud(ac: AudioContext, at: number, freq: number, peak: number) {\n  const src = ac.createBufferSource();\n  src.buffer = noiseBuffer(ac);\n\n  const band = ac.createBiquadFilter();\n  band.type = 'bandpass';\n  band.frequency.setValueAtTime(freq, at);\n  band.Q.setValueAtTime(1.6, at);\n\n  const gain = ac.createGain();\n  gain.gain.setValueAtTime(0, at);\n  gain.gain.linearRampToValueAtTime(peak, at + 0.004);\n  // 120ms of decay rather than 70. Rendered and measured, the old one was the\n  // shortest sound in the set at 0.10s — the briefest, dullest thing in the\n  // product marking the one event a merchant must not miss. Weight, not\n  // volume: a heavier body that takes longer to stop moving reads as\n  // consequence, where a louder click just reads as louder.\n  gain.gain.exponentialRampToValueAtTime(0.0001, at + 0.12);\n\n  src.connect(band).connect(gain).connect(ac.destination);\n  src.start(at);\n  src.stop(at + 0.16);\n}\n\n/**\n * The same events, felt rather than heard.\n *\n * HAPTICS FOLLOW IMPACTS, NOT BREATH. Every pattern here is the shape of its\n * own cue: `commit` is two taps 60ms apart because the sound is two knocks\n * 70ms apart, `refuse` is one long dull buzz because the sound is one damped\n * thud, and `potter` has no entry at all — a breath has no impact, and a\n * vibration under it would be the phone claiming something landed when\n * nothing did.\n *\n * They are SHORT. 6–30ms is a tick you feel in the finger rather than a buzz\n * that travels up the arm; anything longer reads as a notification, which is\n * the thing the whole sound design exists not to be.\n *\n * ANDROID ONLY, AND THAT IS NOT A BUG WE CAN FIX. iOS Safari does not\n * implement `navigator.vibrate` at all — there is no web API for the Taptic\n * Engine, only tricks involving hidden switch inputs that Apple has broken\n * before and will again. So this is a no-op on iPhone, deliberately, rather\n * than a hack that works until it does not. Android is most of these\n * merchants' phones anyway.\n */\nconst HAPTICS: Partial<Record<PotterSound, number | number[]>> = {\n  'record-start': 12,\n  'record-stop': 8,\n  send: 6,\n  // Land, then seat. The gap is the sound's own gap.\n  commit: [12, 60, 18],\n  refuse: 28,\n};\n\nfunction feel(sound: PotterSound) {\n  const pattern = HAPTICS[sound];\n  if (pattern === undefined) return;\n  try {\n    navigator.vibrate?.(pattern);\n  } catch {\n    /* a browser that refuses to buzz is not a reason to fail a click */\n  }\n}\n\nexport function playSound(sound: PotterSound) {\n  if (!soundEnabled()) return;\n  // Felt before heard, and outside the audio guard: a phone on silent still\n  // has a motor, and a merchant who muted the app's chirps in a shop did not\n  // ask to lose the confirmation in their hand. It rides the same preference,\n  // because both answer the same question — should this app make itself felt.\n  feel(sound);\n  const ac = audioContext();\n  if (!ac) return;\n  const now = ac.currentTime;\n\n  switch (sound) {\n    case 'record-start':\n      // Knock, then a tone bending UP and staying: the latch has closed and\n      // something is now open.\n      knock(ac, now, 900, 0.05);\n      settle(ac, now + 0.012, 220, 330, 0.26, 0.05);\n      break;\n    case 'record-stop':\n      // The same knock, lower and duller, and the tone lets go downward.\n      // Shorter overall — stopping needs confirming, not announcing.\n      knock(ac, now, 620, 0.04);\n      settle(ac, now + 0.012, 330, 210, 0.2, 0.04);\n      break;\n    case 'send':\n      // Lighter and higher than the record knock, and the tone falls away with\n      // nothing under it. Sending is a release, not an engagement: the hand\n      // opens and the thing is somewhere else.\n      knock(ac, now, 1500, 0.035);\n      settle(ac, now + 0.008, 520, 360, 0.16, 0.035);\n      break;\n    case 'commit':\n      // Two impacts, 70ms apart, the second lower — the sound of a thing\n      // landing and then seating. The tone crosses both so they read as one\n      // event rather than two clicks, and it bends UP because what just\n      // happened is a thing being held rather than let go.\n      knock(ac, now, 1100, 0.045);\n      knock(ac, now + 0.07, 520, 0.05);\n      settle(ac, now + 0.012, 200, 300, 0.38, 0.045);\n      break;\n    case 'refuse':\n      // ONE impact still — nothing landed, so nothing seats, and the second\n      // knock that `commit` has would say the opposite of what happened. What\n      // changed is its weight: a lower body (260 rather than 320) decaying\n      // over 120ms, with the tone sinking further and slower under it.\n      // Still the shortest of the pitched cues, because an error should be\n      // over before you have finished reading the message it belongs to — but\n      // no longer so brief it reads as a tick.\n      thud(ac, now, 260, 0.055);\n      settle(ac, now + 0.01, 200, 120, 0.22, 0.042);\n      break;\n    case 'potter':\n      // No knock. Nothing is engaging; something is waking up.\n      breath(ac, now, 0.55, 0.045);\n      // One quiet tone under it so the breath has a floor to open over —\n      // without it the sweep reads as a sample loading rather than as a voice.\n      settle(ac, now + 0.06, 160, 240, 0.5, 0.03);\n      break;\n  }\n}\n"],"mappings":";AAyDA,MAAM,cAAc;AAkBpB,IAAI,MAA2B;AAE/B,IAAI,QAA4B;AAEhC,SAAS,eAAoC;AAC3C,MAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,QAAM,OACJ,OAAO,gBACN,OACE;AACL,MAAI,CAAC,KAAM,QAAO;AAClB,MAAI,CAAC,IAAK,OAAM,IAAI,KAAK;AACzB,MAAI,IAAI,UAAU,YAAa,MAAK,IAAI,OAAO;AAC/C,SAAO;AACT;AAEA,SAAS,YAAY,IAA+B;AAClD,MAAI,MAAO,QAAO;AAClB,QAAM,SAAS,KAAK,MAAM,GAAG,aAAa,GAAG;AAC7C,QAAM,MAAM,GAAG,aAAa,GAAG,QAAQ,GAAG,UAAU;AACpD,QAAM,OAAO,IAAI,eAAe,CAAC;AACjC,WAAS,IAAI,GAAG,IAAI,QAAQ,IAAK,MAAK,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI;AAC/D,UAAQ;AACR,SAAO;AACT;AAEO,SAAS,eAAwB;AACtC,MAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,MAAI;AAGF,WAAO,OAAO,aAAa,QAAQ,WAAW,MAAM;AAAA,EACtD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,MAAM,UAAU;AAET,SAAS,gBAAgB,IAAa;AAC3C,MAAI;AACF,WAAO,aAAa,QAAQ,aAAa,KAAK,OAAO,KAAK;AAAA,EAC5D,QAAQ;AAAA,EAER;AAIA,SAAO,cAAc,IAAI,MAAM,OAAO,CAAC;AACzC;AAWO,SAAS,eAAe,UAAkC;AAC/D,SAAO,iBAAiB,SAAS,QAAQ;AACzC,SAAO,iBAAiB,WAAW,QAAQ;AAC3C,SAAO,MAAM;AACX,WAAO,oBAAoB,SAAS,QAAQ;AAC5C,WAAO,oBAAoB,WAAW,QAAQ;AAAA,EAChD;AACF;AASA,SAAS,MAAM,IAAkB,IAAY,MAAc,MAAc;AACvE,QAAM,MAAM,GAAG,mBAAmB;AAClC,MAAI,SAAS,YAAY,EAAE;AAE3B,QAAM,OAAO,GAAG,mBAAmB;AACnC,OAAK,OAAO;AACZ,OAAK,UAAU,eAAe,MAAM,EAAE;AACtC,OAAK,EAAE,eAAe,GAAG,EAAE;AAE3B,QAAM,OAAO,GAAG,WAAW;AAC3B,OAAK,KAAK,eAAe,GAAG,EAAE;AAC9B,OAAK,KAAK,wBAAwB,MAAM,KAAK,IAAK;AAClD,OAAK,KAAK,6BAA6B,MAAQ,KAAK,IAAI;AAExD,MAAI,QAAQ,IAAI,EAAE,QAAQ,IAAI,EAAE,QAAQ,GAAG,WAAW;AACtD,MAAI,MAAM,EAAE;AACZ,MAAI,KAAK,KAAK,IAAI;AACpB;AASA,SAAS,OACP,IACA,IACA,MACA,IACA,UACA,MACA;AACA,QAAM,MAAM,GAAG,iBAAiB;AAChC,MAAI,OAAO;AACX,MAAI,UAAU,eAAe,MAAM,EAAE;AACrC,MAAI,UAAU,6BAA6B,IAAI,KAAK,WAAW,IAAI;AAInE,QAAM,KAAK,GAAG,mBAAmB;AACjC,KAAG,OAAO;AACV,KAAG,UAAU,eAAe,MAAM,EAAE;AAEpC,QAAM,OAAO,GAAG,WAAW;AAC3B,OAAK,KAAK,eAAe,GAAG,EAAE;AAC9B,OAAK,KAAK,wBAAwB,MAAM,KAAK,IAAK;AAClD,OAAK,KAAK,6BAA6B,MAAQ,KAAK,QAAQ;AAE5D,MAAI,QAAQ,EAAE,EAAE,QAAQ,IAAI,EAAE,QAAQ,GAAG,WAAW;AACpD,MAAI,MAAM,EAAE;AACZ,MAAI,KAAK,KAAK,WAAW,IAAI;AAC/B;AASA,SAAS,OAAO,IAAkB,IAAY,UAAkB,MAAc;AAC5E,QAAM,MAAM,GAAG,mBAAmB;AAClC,MAAI,SAAS,YAAY,EAAE;AAC3B,MAAI,OAAO;AAEX,QAAM,KAAK,GAAG,mBAAmB;AACjC,KAAG,OAAO;AACV,KAAG,UAAU,eAAe,KAAK,EAAE;AACnC,KAAG,UAAU,6BAA6B,MAAM,KAAK,WAAW,IAAI;AACpE,KAAG,UAAU,6BAA6B,KAAK,KAAK,QAAQ;AAC5D,KAAG,EAAE,eAAe,GAAG,EAAE;AAEzB,QAAM,OAAO,GAAG,WAAW;AAC3B,OAAK,KAAK,eAAe,GAAG,EAAE;AAC9B,OAAK,KAAK,wBAAwB,MAAM,KAAK,WAAW,GAAG;AAC3D,OAAK,KAAK,6BAA6B,MAAQ,KAAK,QAAQ;AAE5D,MAAI,QAAQ,EAAE,EAAE,QAAQ,IAAI,EAAE,QAAQ,GAAG,WAAW;AACpD,MAAI,MAAM,EAAE;AACZ,MAAI,KAAK,KAAK,WAAW,IAAI;AAC/B;AAWA,SAAS,KAAK,IAAkB,IAAY,MAAc,MAAc;AACtE,QAAM,MAAM,GAAG,mBAAmB;AAClC,MAAI,SAAS,YAAY,EAAE;AAE3B,QAAM,OAAO,GAAG,mBAAmB;AACnC,OAAK,OAAO;AACZ,OAAK,UAAU,eAAe,MAAM,EAAE;AACtC,OAAK,EAAE,eAAe,KAAK,EAAE;AAE7B,QAAM,OAAO,GAAG,WAAW;AAC3B,OAAK,KAAK,eAAe,GAAG,EAAE;AAC9B,OAAK,KAAK,wBAAwB,MAAM,KAAK,IAAK;AAMlD,OAAK,KAAK,6BAA6B,MAAQ,KAAK,IAAI;AAExD,MAAI,QAAQ,IAAI,EAAE,QAAQ,IAAI,EAAE,QAAQ,GAAG,WAAW;AACtD,MAAI,MAAM,EAAE;AACZ,MAAI,KAAK,KAAK,IAAI;AACpB;AAuBA,MAAM,UAA2D;AAAA,EAC/D,gBAAgB;AAAA,EAChB,eAAe;AAAA,EACf,MAAM;AAAA;AAAA,EAEN,QAAQ,CAAC,IAAI,IAAI,EAAE;AAAA,EACnB,QAAQ;AACV;AAEA,SAAS,KAAK,OAAoB;AAChC,QAAM,UAAU,QAAQ,KAAK;AAC7B,MAAI,YAAY,OAAW;AAC3B,MAAI;AACF,cAAU,UAAU,OAAO;AAAA,EAC7B,QAAQ;AAAA,EAER;AACF;AAEO,SAAS,UAAU,OAAoB;AAC5C,MAAI,CAAC,aAAa,EAAG;AAKrB,OAAK,KAAK;AACV,QAAM,KAAK,aAAa;AACxB,MAAI,CAAC,GAAI;AACT,QAAM,MAAM,GAAG;AAEf,UAAQ,OAAO;AAAA,IACb,KAAK;AAGH,YAAM,IAAI,KAAK,KAAK,IAAI;AACxB,aAAO,IAAI,MAAM,OAAO,KAAK,KAAK,MAAM,IAAI;AAC5C;AAAA,IACF,KAAK;AAGH,YAAM,IAAI,KAAK,KAAK,IAAI;AACxB,aAAO,IAAI,MAAM,OAAO,KAAK,KAAK,KAAK,IAAI;AAC3C;AAAA,IACF,KAAK;AAIH,YAAM,IAAI,KAAK,MAAM,KAAK;AAC1B,aAAO,IAAI,MAAM,MAAO,KAAK,KAAK,MAAM,KAAK;AAC7C;AAAA,IACF,KAAK;AAKH,YAAM,IAAI,KAAK,MAAM,KAAK;AAC1B,YAAM,IAAI,MAAM,MAAM,KAAK,IAAI;AAC/B,aAAO,IAAI,MAAM,OAAO,KAAK,KAAK,MAAM,KAAK;AAC7C;AAAA,IACF,KAAK;AAQH,WAAK,IAAI,KAAK,KAAK,KAAK;AACxB,aAAO,IAAI,MAAM,MAAM,KAAK,KAAK,MAAM,KAAK;AAC5C;AAAA,IACF,KAAK;AAEH,aAAO,IAAI,KAAK,MAAM,KAAK;AAG3B,aAAO,IAAI,MAAM,MAAM,KAAK,KAAK,KAAK,IAAI;AAC1C;AAAA,EACJ;AACF;","names":[]}

package/dist/staff-arrival.d.ts

@@ -0,0 +1,3 @@
+export declare const flagStaffArrival: () => void;
+export declare const takeStaffArrival: () => boolean;
+export declare const endStaffArrival: () => void;

package/dist/staff-arrival.js

@@ -0,0 +1,11 @@
+import { makeArrival } from "./arrival";
+const staffArrival = makeArrival("pb_staff_arrival");
+const flagStaffArrival = staffArrival.flag;
+const takeStaffArrival = staffArrival.take;
+const endStaffArrival = staffArrival.end;
+export {
+  endStaffArrival,
+  flagStaffArrival,
+  takeStaffArrival
+};
+//# sourceMappingURL=staff-arrival.js.map

package/dist/staff-arrival.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/staff-arrival.ts"],"sourcesContent":["/**\n * Remembering that somebody has just joined, so they can be welcomed once.\n *\n * The accept screen redirects and that is the end of it. Twenty seconds earlier\n * this person committed to a job; a moment later they are looking at a work\n * queue with no acknowledgement that anything happened. It is the highest-stakes\n * moment anyone spends in Box and it currently ends in a page load.\n *\n * Stored rather than derived. `joinedAt` looks like the obvious source, but it\n * would greet somebody every time they signed in on their first day — and on a\n * shared counter phone, greet whoever opened it next. A flag written by the\n * accept screen and cleared on read fires exactly once, for the person who was\n * actually there.\n *\n * A plain flag rather than a workspace slug. Accepting clears the stored\n * workspace and does a full reload, so the very next dashboard load IS the\n * business they just joined — carrying a slug would mean adding a field to the\n * peek response to say something the flow already guarantees.\n *\n * sessionStorage, not local: a welcome should not survive into a new tab\n * opened tomorrow.\n */\nimport { makeArrival } from './arrival';\n\n/**\n * The mechanism is `arrival`; this file is only which flag and who reads it.\n * A plain flag rather than a workspace slug: accepting clears the stored\n * workspace and does a full reload, so the very next dashboard load IS the\n * business they just joined.\n */\nconst staffArrival = makeArrival('pb_staff_arrival');\n\nexport const flagStaffArrival = staffArrival.flag;\nexport const takeStaffArrival = staffArrival.take;\nexport const endStaffArrival = staffArrival.end;\n"],"mappings":"AAsBA,SAAS,mBAAmB;AAQ5B,MAAM,eAAe,YAAY,kBAAkB;AAE5C,MAAM,mBAAmB,aAAa;AACtC,MAAM,mBAAmB,aAAa;AACtC,MAAM,kBAAkB,aAAa;","names":[]}

package/dist/staff-home.d.ts

@@ -0,0 +1,58 @@
+import type { PermissionKey } from './use-permissions';
+/**
+ * Where a person who is not the owner should land.
+ *
+ * Resolved from PERMISSIONS, deliberately, and not from the job-role preset
+ * they were invited with. The preset is expanded into a permission map at invite
+ * time — `permissionsForRole` in `team-roles.ts` — and the preset id itself is
+ * not what the api stores. Reading permissions instead means this also works for
+ * a role somebody hand-edited in the roles manager, which no preset id describes.
+ *
+ * The order is the claim: earlier entries are more specific statements about
+ * what a person's shift starts with. Front desk and Fulfillment both hold the
+ * orders grant, so what separates them is the business — a bookable business's
+ * order queue IS its arrivals list, and Today is the screen for it.
+ *
+ * Two rules run through the whole list, and they are the same rule twice:
+ *
+ *   A grant held in order to do the job is not the job. Content & site carries
+ *   `canViewProducts` to reference a product while editing a page; Support
+ *   carries `canViewOrders` to answer "where is my order". Neither of them
+ *   works a product list or an order queue, and ranking on the grant alone
+ *   sent both of them to somebody else's screen.
+ *
+ *   Reading is not staffing. Every doing-screen here asks for `canManageOrders`
+ *   rather than either orders grant, because a person who can only look at the
+ *   queue is not the person working it.
+ */
+export interface StaffHomeCandidate {
+    href: string;
+    /** Any-of. Empty is never used; the fallback is explicit at the bottom. */
+    needs: PermissionKey[];
+    /** Any-of. Omitted means the destination suits any business. */
+    behaviors?: string[];
+    /**
+     * Any-of, and disqualifying. A candidate can be right for a job and wrong for
+     * the business running it, which `behaviors` alone cannot say: "billable"
+     * describes both a firm whose product is the invoice and a shop that
+     * occasionally bills someone, and only the first one starts its day there.
+     */
+    unless?: {
+        behaviors?: string[];
+    };
+}
+export declare const STAFF_HOME_CANDIDATES: StaffHomeCandidate[];
+/** The home every owner gets, and the floor for anyone the list cannot place. */
+export declare const DEFAULT_HOME = "/dashboard";
+/**
+ * The first destination this person can actually use.
+ *
+ * Returns `DEFAULT_HOME` when nothing matches rather than throwing or returning
+ * null: a member with an empty permission map is a real state (an invite whose
+ * role was later stripped), and the honest response is the ordinary home, which
+ * will show them an empty shell rather than a broken route.
+ */
+export declare function resolveStaffHome({ can, behaviors, }: {
+    can: (permission: PermissionKey) => boolean;
+    behaviors: readonly string[];
+}): string;

package/dist/staff-home.js

@@ -0,0 +1,90 @@
+const STAFF_HOME_CANDIDATES = [
+  // The day, for a business whose work arrives at a time. Managing, not
+  // viewing: Today is a screen you do things on — check people in, take the
+  // payment — and somebody who can only read the queue is not running the door.
+  {
+    // The day board, which is a view of the queue rather than a screen beside
+    // it now. Managing, not viewing: this is where people are checked in and
+    // paid for, and somebody who can only read the queue is not running the
+    // door.
+    href: "/dashboard/bookings?view=today",
+    needs: ["canManageOrders"],
+    behaviors: ["bookable", "rentable"]
+  },
+  // A shipping business's orders list IS a pack queue, but only once it is
+  // narrowed. Unnarrowed it is every order the business has ever taken, which
+  // is the owner's list wearing a packer's name.
+  {
+    href: "/dashboard/orders?fulfillment=unfulfilled",
+    needs: ["canManageOrders"],
+    behaviors: ["shippable"]
+  },
+  // For a firm whose product IS the invoice, this is the order queue — the
+  // thing they write, send, chase and get paid for. The archetype already
+  // points its own Billing nav row here rather than at the Payments hub.
+  //
+  // Excluded the moment the business sells anything else: then an invoice is a
+  // stage of the money pipeline rather than the work, the order list is the
+  // work, and the Payments hub is where the stage belongs. Note this reaches
+  // people without `canViewFinance` on purpose — chasing what a customer owes
+  // is an amount, not the state of the business's money.
+  {
+    href: "/dashboard/invoices",
+    needs: ["canManageOrders"],
+    behaviors: ["billable"],
+    unless: {
+      behaviors: ["sellable", "shippable", "bookable", "rentable", "ticketed"]
+    }
+  },
+  // Otherwise the queue of things to do.
+  { href: "/dashboard/orders", needs: ["canManageOrders"] },
+  // Nobody with only the messages grant should be dropped on an order list —
+  // and neither should Support, whose whole job is this screen and who holds
+  // the orders grant only so an answer can cite the order.
+  {
+    href: "/dashboard/inbox",
+    needs: ["canViewCommunications", "canManageCommunications"]
+  },
+  {
+    href: "/dashboard/customers",
+    needs: ["canViewMembers", "canManageMembers"]
+  },
+  // Above the catalog on purpose. The Content & site preset carries
+  // `canViewProducts` so it can reference products while editing a page, and
+  // ranking the catalog first sent someone whose whole job is the website to a
+  // product list they are not allowed to change.
+  {
+    href: "/dashboard/business",
+    needs: ["canManageEditor", "canManageBusinessProfile", "canManageBlog"]
+  },
+  {
+    href: "/dashboard/catalog",
+    needs: ["canViewProducts", "canManageProducts"]
+  },
+  // Last, and view-only. Somebody whose entire grant is reading orders has one
+  // screen, and it is this one; every candidate above wanted a job they cannot
+  // do. Reached only after the doing-screens and the answering-screens have
+  // all declined, so it never intercepts a person with a real desk.
+  { href: "/dashboard/orders", needs: ["canViewOrders"] }
+];
+const DEFAULT_HOME = "/dashboard";
+function resolveStaffHome({
+  can,
+  behaviors
+}) {
+  const enabled = new Set(behaviors);
+  for (const candidate of STAFF_HOME_CANDIDATES) {
+    if (candidate.behaviors && !candidate.behaviors.some((b) => enabled.has(b)))
+      continue;
+    if (candidate.unless?.behaviors?.some((b) => enabled.has(b))) continue;
+    if (candidate.needs.some((permission) => can(permission)))
+      return candidate.href;
+  }
+  return DEFAULT_HOME;
+}
+export {
+  DEFAULT_HOME,
+  STAFF_HOME_CANDIDATES,
+  resolveStaffHome
+};
+//# sourceMappingURL=staff-home.js.map

package/dist/staff-home.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/staff-home.ts"],"sourcesContent":["import type { PermissionKey } from './use-permissions';\n\n/**\n * Where a person who is not the owner should land.\n *\n * Resolved from PERMISSIONS, deliberately, and not from the job-role preset\n * they were invited with. The preset is expanded into a permission map at invite\n * time — `permissionsForRole` in `team-roles.ts` — and the preset id itself is\n * not what the api stores. Reading permissions instead means this also works for\n * a role somebody hand-edited in the roles manager, which no preset id describes.\n *\n * The order is the claim: earlier entries are more specific statements about\n * what a person's shift starts with. Front desk and Fulfillment both hold the\n * orders grant, so what separates them is the business — a bookable business's\n * order queue IS its arrivals list, and Today is the screen for it.\n *\n * Two rules run through the whole list, and they are the same rule twice:\n *\n *   A grant held in order to do the job is not the job. Content & site carries\n *   `canViewProducts` to reference a product while editing a page; Support\n *   carries `canViewOrders` to answer \"where is my order\". Neither of them\n *   works a product list or an order queue, and ranking on the grant alone\n *   sent both of them to somebody else's screen.\n *\n *   Reading is not staffing. Every doing-screen here asks for `canManageOrders`\n *   rather than either orders grant, because a person who can only look at the\n *   queue is not the person working it.\n */\nexport interface StaffHomeCandidate {\n  href: string;\n  /** Any-of. Empty is never used; the fallback is explicit at the bottom. */\n  needs: PermissionKey[];\n  /** Any-of. Omitted means the destination suits any business. */\n  behaviors?: string[];\n  /**\n   * Any-of, and disqualifying. A candidate can be right for a job and wrong for\n   * the business running it, which `behaviors` alone cannot say: \"billable\"\n   * describes both a firm whose product is the invoice and a shop that\n   * occasionally bills someone, and only the first one starts its day there.\n   */\n  unless?: { behaviors?: string[] };\n}\n\nexport const STAFF_HOME_CANDIDATES: StaffHomeCandidate[] = [\n  // The day, for a business whose work arrives at a time. Managing, not\n  // viewing: Today is a screen you do things on — check people in, take the\n  // payment — and somebody who can only read the queue is not running the door.\n  {\n    // The day board, which is a view of the queue rather than a screen beside\n    // it now. Managing, not viewing: this is where people are checked in and\n    // paid for, and somebody who can only read the queue is not running the\n    // door.\n    href: '/dashboard/bookings?view=today',\n    needs: ['canManageOrders'],\n    behaviors: ['bookable', 'rentable'],\n  },\n  // A shipping business's orders list IS a pack queue, but only once it is\n  // narrowed. Unnarrowed it is every order the business has ever taken, which\n  // is the owner's list wearing a packer's name.\n  {\n    href: '/dashboard/orders?fulfillment=unfulfilled',\n    needs: ['canManageOrders'],\n    behaviors: ['shippable'],\n  },\n  // For a firm whose product IS the invoice, this is the order queue — the\n  // thing they write, send, chase and get paid for. The archetype already\n  // points its own Billing nav row here rather than at the Payments hub.\n  //\n  // Excluded the moment the business sells anything else: then an invoice is a\n  // stage of the money pipeline rather than the work, the order list is the\n  // work, and the Payments hub is where the stage belongs. Note this reaches\n  // people without `canViewFinance` on purpose — chasing what a customer owes\n  // is an amount, not the state of the business's money.\n  {\n    href: '/dashboard/invoices',\n    needs: ['canManageOrders'],\n    behaviors: ['billable'],\n    unless: {\n      behaviors: ['sellable', 'shippable', 'bookable', 'rentable', 'ticketed'],\n    },\n  },\n  // Otherwise the queue of things to do.\n  { href: '/dashboard/orders', needs: ['canManageOrders'] },\n  // Nobody with only the messages grant should be dropped on an order list —\n  // and neither should Support, whose whole job is this screen and who holds\n  // the orders grant only so an answer can cite the order.\n  {\n    href: '/dashboard/inbox',\n    needs: ['canViewCommunications', 'canManageCommunications'],\n  },\n  {\n    href: '/dashboard/customers',\n    needs: ['canViewMembers', 'canManageMembers'],\n  },\n  // Above the catalog on purpose. The Content & site preset carries\n  // `canViewProducts` so it can reference products while editing a page, and\n  // ranking the catalog first sent someone whose whole job is the website to a\n  // product list they are not allowed to change.\n  {\n    href: '/dashboard/business',\n    needs: ['canManageEditor', 'canManageBusinessProfile', 'canManageBlog'],\n  },\n  {\n    href: '/dashboard/catalog',\n    needs: ['canViewProducts', 'canManageProducts'],\n  },\n  // Last, and view-only. Somebody whose entire grant is reading orders has one\n  // screen, and it is this one; every candidate above wanted a job they cannot\n  // do. Reached only after the doing-screens and the answering-screens have\n  // all declined, so it never intercepts a person with a real desk.\n  { href: '/dashboard/orders', needs: ['canViewOrders'] },\n];\n\n/** The home every owner gets, and the floor for anyone the list cannot place. */\nexport const DEFAULT_HOME = '/dashboard';\n\n/**\n * The first destination this person can actually use.\n *\n * Returns `DEFAULT_HOME` when nothing matches rather than throwing or returning\n * null: a member with an empty permission map is a real state (an invite whose\n * role was later stripped), and the honest response is the ordinary home, which\n * will show them an empty shell rather than a broken route.\n */\nexport function resolveStaffHome({\n  can,\n  behaviors,\n}: {\n  can: (permission: PermissionKey) => boolean;\n  behaviors: readonly string[];\n}): string {\n  const enabled = new Set(behaviors);\n\n  for (const candidate of STAFF_HOME_CANDIDATES) {\n    if (candidate.behaviors && !candidate.behaviors.some((b) => enabled.has(b)))\n      continue;\n    if (candidate.unless?.behaviors?.some((b) => enabled.has(b))) continue;\n    if (candidate.needs.some((permission) => can(permission)))\n      return candidate.href;\n  }\n\n  return DEFAULT_HOME;\n}\n"],"mappings":"AA2CO,MAAM,wBAA8C;AAAA;AAAA;AAAA;AAAA,EAIzD;AAAA;AAAA;AAAA;AAAA;AAAA,IAKE,MAAM;AAAA,IACN,OAAO,CAAC,iBAAiB;AAAA,IACzB,WAAW,CAAC,YAAY,UAAU;AAAA,EACpC;AAAA;AAAA;AAAA;AAAA,EAIA;AAAA,IACE,MAAM;AAAA,IACN,OAAO,CAAC,iBAAiB;AAAA,IACzB,WAAW,CAAC,WAAW;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA;AAAA,IACE,MAAM;AAAA,IACN,OAAO,CAAC,iBAAiB;AAAA,IACzB,WAAW,CAAC,UAAU;AAAA,IACtB,QAAQ;AAAA,MACN,WAAW,CAAC,YAAY,aAAa,YAAY,YAAY,UAAU;AAAA,IACzE;AAAA,EACF;AAAA;AAAA,EAEA,EAAE,MAAM,qBAAqB,OAAO,CAAC,iBAAiB,EAAE;AAAA;AAAA;AAAA;AAAA,EAIxD;AAAA,IACE,MAAM;AAAA,IACN,OAAO,CAAC,yBAAyB,yBAAyB;AAAA,EAC5D;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO,CAAC,kBAAkB,kBAAkB;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA;AAAA,EAKA;AAAA,IACE,MAAM;AAAA,IACN,OAAO,CAAC,mBAAmB,4BAA4B,eAAe;AAAA,EACxE;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO,CAAC,mBAAmB,mBAAmB;AAAA,EAChD;AAAA;AAAA;AAAA;AAAA;AAAA,EAKA,EAAE,MAAM,qBAAqB,OAAO,CAAC,eAAe,EAAE;AACxD;AAGO,MAAM,eAAe;AAUrB,SAAS,iBAAiB;AAAA,EAC/B;AAAA,EACA;AACF,GAGW;AACT,QAAM,UAAU,IAAI,IAAI,SAAS;AAEjC,aAAW,aAAa,uBAAuB;AAC7C,QAAI,UAAU,aAAa,CAAC,UAAU,UAAU,KAAK,CAAC,MAAM,QAAQ,IAAI,CAAC,CAAC;AACxE;AACF,QAAI,UAAU,QAAQ,WAAW,KAAK,CAAC,MAAM,QAAQ,IAAI,CAAC,CAAC,EAAG;AAC9D,QAAI,UAAU,MAAM,KAAK,CAAC,eAAe,IAAI,UAAU,CAAC;AACtD,aAAO,UAAU;AAAA,EACrB;AAEA,SAAO;AACT;","names":[]}

package/dist/staff-landing.d.ts

@@ -0,0 +1 @@
+export declare function shouldSendStaffHome(): boolean;

package/dist/staff-landing.js

@@ -0,0 +1,15 @@
+const KEY = "pb_staff_landed";
+function shouldSendStaffHome() {
+  if (typeof window === "undefined") return false;
+  try {
+    if (window.sessionStorage.getItem(KEY) === "1") return false;
+    window.sessionStorage.setItem(KEY, "1");
+    return true;
+  } catch {
+    return false;
+  }
+}
+export {
+  shouldSendStaffHome
+};
+//# sourceMappingURL=staff-landing.js.map

package/dist/staff-landing.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/staff-landing.ts"],"sourcesContent":["/**\n * Sending somebody to their own screen once, rather than every time.\n *\n * The home redirects a non-owner to the surface their permissions describe,\n * which is right on arrival — nobody should be dropped on \"how is the business\n * doing\" as their first frame. It was wrong every time after that: the sidebar\n * offers Home, a staff member clicks it, and the page bounces them straight\n * back to Orders. A row that cannot be opened is a row that should not be\n * there, and the answer is not to take Home away from staff; it is to stop\n * treating a deliberate click as an arrival.\n *\n * One send per tab. A new tab is a new arrival, which is the honest reading:\n * they opened Box, they have not chosen anything yet.\n *\n * sessionStorage, and consumed on read — the same shape as the staff-arrival\n * welcome, for the same reason. Storage that throws (private mode) resolves to\n * \"already sent\", so the failure mode is a merchant seeing the home rather than\n * a redirect they cannot escape.\n */\nconst KEY = 'pb_staff_landed';\n\nexport function shouldSendStaffHome(): boolean {\n  if (typeof window === 'undefined') return false;\n  try {\n    if (window.sessionStorage.getItem(KEY) === '1') return false;\n    window.sessionStorage.setItem(KEY, '1');\n    return true;\n  } catch {\n    return false;\n  }\n}\n"],"mappings":"AAmBA,MAAM,MAAM;AAEL,SAAS,sBAA+B;AAC7C,MAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,MAAI;AACF,QAAI,OAAO,eAAe,QAAQ,GAAG,MAAM,IAAK,QAAO;AACvD,WAAO,eAAe,QAAQ,KAAK,GAAG;AACtC,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;","names":[]}

package/dist/stat-card-types.d.ts

@@ -0,0 +1,19 @@
+import type { LucideIcon } from 'lucide-react';
+/**
+ * Canonical stat-card type contract, owned by @withpotter/lib so intent/config code
+ * can reference it without depending on the @withpotter/ui-kit component. The StatCard
+ * component (in @withpotter/ui-kit) implements these props and maps each IconVariant to
+ * its theme classes.
+ */
+export type IconVariant = 'default' | 'success' | 'error' | 'warning' | 'info' | 'accent' | 'muted';
+export interface StatCardProps {
+    label: string;
+    value: string | number;
+    subtext?: string;
+    icon?: LucideIcon | React.ElementType;
+    iconVariant?: IconVariant;
+    href?: string;
+    /** Percentage change — positive = green ↑, negative = red ↓ */
+    change?: number | null;
+    className?: string;
+}

package/dist/stat-card-types.js

@@ -0,0 +1 @@
+//# sourceMappingURL=stat-card-types.js.map

package/dist/stat-card-types.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/stock-levels.d.ts

@@ -0,0 +1,32 @@
+/**
+ * What "low on stock" means, in one place.
+ *
+ * Three screens had their own copy of the arithmetic and they did not agree.
+ * The catalogue and the product record both required `trackInventory`, both
+ * subtracted `reserved`, and both treated sold-out as a different state. The
+ * home's copy required none of it — so a business that does not track stock at
+ * all counted every catalogue row as low, because `lowStockThreshold` defaults
+ * to 5 and an untracked item sits at quantity 0.
+ *
+ * The visible result: a spa opened Box to a permanent red blocker reading
+ * "10 services low on stock — Restock before it sells out", over services that
+ * have no stock to run out of and no way to clear the alert.
+ */
+export interface StockLevel {
+    quantity?: number | null;
+    reserved?: number | null;
+    lowStockThreshold?: number | null;
+    trackInventory?: boolean | null;
+}
+/** On hand minus what is already promised to an order. */
+export declare function availableStock(item: StockLevel): number;
+/**
+ * Running low, but not yet out.
+ *
+ * Untracked items are never low: an inventory question asked of something that
+ * keeps no inventory has no true answer, and answering it anyway is how the
+ * blocker above got written.
+ */
+export declare function isLowStock(item: StockLevel): boolean;
+/** Tracked, and there is none left. */
+export declare function isOutOfStock(item: StockLevel): boolean;

package/dist/stock-levels.js

@@ -0,0 +1,17 @@
+function availableStock(item) {
+  return (item.quantity || 0) - (item.reserved || 0);
+}
+function isLowStock(item) {
+  if (!item.trackInventory) return false;
+  const available = availableStock(item);
+  return available > 0 && available <= (item.lowStockThreshold || 5);
+}
+function isOutOfStock(item) {
+  return Boolean(item.trackInventory) && availableStock(item) <= 0;
+}
+export {
+  availableStock,
+  isLowStock,
+  isOutOfStock
+};
+//# sourceMappingURL=stock-levels.js.map

package/dist/stock-levels.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/stock-levels.ts"],"sourcesContent":["/**\n * What \"low on stock\" means, in one place.\n *\n * Three screens had their own copy of the arithmetic and they did not agree.\n * The catalogue and the product record both required `trackInventory`, both\n * subtracted `reserved`, and both treated sold-out as a different state. The\n * home's copy required none of it — so a business that does not track stock at\n * all counted every catalogue row as low, because `lowStockThreshold` defaults\n * to 5 and an untracked item sits at quantity 0.\n *\n * The visible result: a spa opened Box to a permanent red blocker reading\n * \"10 services low on stock — Restock before it sells out\", over services that\n * have no stock to run out of and no way to clear the alert.\n */\n\nexport interface StockLevel {\n  quantity?: number | null;\n  reserved?: number | null;\n  lowStockThreshold?: number | null;\n  trackInventory?: boolean | null;\n}\n\n/** On hand minus what is already promised to an order. */\nexport function availableStock(item: StockLevel): number {\n  return (item.quantity || 0) - (item.reserved || 0);\n}\n\n/**\n * Running low, but not yet out.\n *\n * Untracked items are never low: an inventory question asked of something that\n * keeps no inventory has no true answer, and answering it anyway is how the\n * blocker above got written.\n */\nexport function isLowStock(item: StockLevel): boolean {\n  if (!item.trackInventory) return false;\n  const available = availableStock(item);\n  return available > 0 && available <= (item.lowStockThreshold || 5);\n}\n\n/** Tracked, and there is none left. */\nexport function isOutOfStock(item: StockLevel): boolean {\n  return Boolean(item.trackInventory) && availableStock(item) <= 0;\n}\n"],"mappings":"AAuBO,SAAS,eAAe,MAA0B;AACvD,UAAQ,KAAK,YAAY,MAAM,KAAK,YAAY;AAClD;AASO,SAAS,WAAW,MAA2B;AACpD,MAAI,CAAC,KAAK,eAAgB,QAAO;AACjC,QAAM,YAAY,eAAe,IAAI;AACrC,SAAO,YAAY,KAAK,cAAc,KAAK,qBAAqB;AAClE;AAGO,SAAS,aAAa,MAA2B;AACtD,SAAO,QAAQ,KAAK,cAAc,KAAK,eAAe,IAAI,KAAK;AACjE;","names":[]}

package/dist/stored-token.d.ts

@@ -0,0 +1 @@
+export declare function removeLegacyToken(): void;