Staff: box returns are recorded at /boxes/return and the box list is at /boxes/inventory. Both need the staff code.