CounterPOS

Staff login

Staff-only areas like POS, kitchen, cash and dashboard are protected. Customers use phone login from the loyalty page.

PIN modal placeholder: manager approvals will verify `pin_hash` server-side. Raw PINs are never stored.