Navigation
Web uses a protected application shell with persistent navigation. Mobile uses role-aware tabs: Sell, Orders, Shift, Insights, Inventory, Operations, and Menu. Owner and manager tools are guarded by the same entitlement model as the API.
Navigation rules
- An unauthenticated user lands on Login.
- Owner web login confirms the resolved counter before Dashboard.
- Cashier PIN login is available on Android; owner and manager email/password login are available on both surfaces.
- Back navigation must preserve valid entered data and must not duplicate financial actions.
- A permission-denied screen explains the restriction instead of exposing a non-functional control.
See role and capability matrix before documenting a role-specific action.