Tour Studio

This is the pivot out of a multi-tenant architecture that had stopped scaling. In the older platform, tenant identity was baked in at compile time: adding a customer meant editing a config file, committing, redeploying, and provisioning separate hosting. Six properties meant six deployments and six sets of credentials. Tour Studio replaces that with one application and many projects, where a project is created at runtime, lives in its own space, and shares nothing with any other. Nothing about a project is known at build time — that is the entire change.

It is a deliberate no-backend POC. Panoramas live in IndexedDB as Blobs via Dexie; there is no server and no account. What makes that a POC decision rather than a rewrite risk is a single enforced seam: only `lib/storage/repo.ts` knows the data is in IndexedDB, every feature calls the repo, and swapping that one module for a fetch client leaves everything above it untouched. Dependencies point one way — `routes → features → lib` — and a feature may never import another feature, a rule that forced image probing down into `lib/images/` the moment the demo seeder needed the same validation.

The schema carries the domain insight. Structure and placement are stored separately: a `Link` knows it leads to the dining room but not which way to look, and the yaw/pitch that aims the marker lives in a `Placement` row keyed by id. Re-aiming a marker never touches structure, and "what has been calibrated" is one query. Angles are optional and must stay optional — no defaulting to zero, no computed fallback — because on the previous project uncalibrated markers were auto-spread around the horizon, which drew an identical ring in every room and read to users as though the last room's markers were following them. Those placeholder angles then exported as real, so tooling reported a half-finished tour as complete. The repo's `docs/lessons-inherited.md` catalogues thirteen such bugs, each paid for once already.

The workflow is four steps — Photos, Rooms, Calibrate, Publish. Upload enforces 2:1 equirectangular with a plain-words refusal and decodes sequentially to survive large batches. Rooms names panoramas, assigns floors, declares one-way doorways (a door is not always visible from both sides) and reports isolated and unreachable rooms from the declared graph. Calibrate runs four stages per room in dependency order — dot on the plan, north offset against a live compass cone, arrival view, then arm-and-click every doorway and item — where placing one marker arms the next, making a room roughly one click per marker. Publish zips `tour.json` plus every asset with JSZip behind a preflight that omits and counts unplaced markers rather than inventing angles for them, and requires dead ends to be acknowledged by hand before the download unlocks. The bundle ships its own player: a second Vite build produces a standalone viewer that `scripts/inline-viewer.mjs` folds into one HTML file, and the exporter injects the tour JSON into it — escaping every `<` so a room named `</script>` cannot break out of the tag.