Phase 2

Base app architecture:

    Route groups for customer, staff and owner.
* Reusable design system with around 20 UI components.
* Complete Prisma schema.
* Authentication with email/password and Google.
* Role and permission model.
* Protected routes.
* Clean separation between features, services, components and shared utilities.

src/app/(owner)/layout.tsx

@@ -0,0 +1,30 @@
+import { redirect } from "next/navigation";
+import { auth } from "@/auth";
+import { BottomNav } from "@/components/navigation/bottom-nav";
+import { STAFF_NAV_ITEMS } from "@/lib/navigation/staff-nav-items";
+import { hasPermission } from "@/lib/auth/permissions";
+import { Permission } from "@/generated/prisma/enums";
+
+/**
+ * Owner is a permission on a staff account, not a separate account type
+ * (see docs/implementation-plan.md §3, §11) — this layout reuses the exact
+ * same shell/nav as (staff), and only adds a permission check on top.
+ */
+export default async function OwnerLayout({ children }: { children: React.ReactNode }) {
+  const session = await auth();
+  if (!session?.user) {
+    redirect("/sign-in?callbackUrl=/owner");
+  }
+
+  const canManageStaff = await hasPermission(session.user.id, Permission.MANAGE_STAFF);
+  if (!canManageStaff) {
+    redirect("/staff");
+  }
+
+  return (
+    <div className="min-h-screen bg-stone pb-24">
+      {children}
+      <BottomNav items={STAFF_NAV_ITEMS} variant="staff" />
+    </div>
+  );
+}