From 67089c2135d318942fb310be7bcded2c87652dc6 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Tue, 15 Sep 2026 16:02:44 -0300
Subject: [PATCH 001/183] SH-281: group vendor directory by company (#115)

* feat(vendors): group directory by company

* style(vendors): format company directory query

* fix(vendors): preserve technician list contract
---
 .../VendorControllerTests.cs                  | 173 ++++-
 .../VendorDataServiceTests.cs                 | 153 +++++
 .../VendorServiceTests.cs                     | 109 ++-
 .../Controllers/VendorController.cs           |  74 +-
 .../Implementation/VendorDataService.cs       | 632 ++++++++++++++++--
 .../Interfaces/IVendorDataService.cs          |  25 +-
 .../Models/VendorDirectoryReadModels.cs       | 108 +++
 SeaHaven.Services/DTOs/VendorDTOs.cs          |  23 +-
 .../Implementation/VendorService.cs           |  74 +-
 .../Interfaces/IVendorService.cs              |  18 +-
 10 files changed, 1329 insertions(+), 60 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/VendorControllerTests.cs b/Api.SeaHavenIndustries.Tests/VendorControllerTests.cs
index e0df2a9..99b7d1d 100644
--- a/Api.SeaHavenIndustries.Tests/VendorControllerTests.cs
+++ b/Api.SeaHavenIndustries.Tests/VendorControllerTests.cs
@@ -39,7 +39,7 @@ public class VendorControllerTests
         var service = new Mock<IVendorService>();
         using var cancellation = new CancellationTokenSource();
         var token = cancellation.Token;
-        service.Setup(x => x.GetVendorDirectoryPagedAsync(
+        service.Setup(x => x.GetVendorTechnicianDirectoryPagedAsync(
                 1,
                 10,
                 "clayton",
@@ -53,7 +53,7 @@ public class VendorControllerTests
 
         await NewController(service).GetVendorList(search: "clayton", cancellationToken: token);
 
-        service.Verify(x => x.GetVendorDirectoryPagedAsync(
+        service.Verify(x => x.GetVendorTechnicianDirectoryPagedAsync(
             1,
             10,
             "clayton",
@@ -63,6 +63,175 @@ public class VendorControllerTests
             It.IsAny<IReadOnlyCollection<string>?>(),
             It.IsAny<IReadOnlyCollection<string>?>(),
             token), Times.Once);
+        service.Verify(x => x.GetVendorCompanyDirectoryPagedAsync(
+            It.IsAny<int>(),
+            It.IsAny<int>(),
+            It.IsAny<string?>(),
+            It.IsAny<bool?>(),
+            It.IsAny<IReadOnlyCollection<string>?>(),
+            It.IsAny<IReadOnlyCollection<string>?>(),
+            It.IsAny<IReadOnlyCollection<string>?>(),
+            It.IsAny<IReadOnlyCollection<string>?>(),
+            It.IsAny<CancellationToken>()), Times.Never);
+    }
+
+    [Fact]
+    public async Task GetVendorList_ReturnsIndividualTechnicianRowsWithoutGroupedTechnicians()
+    {
+        var service = new Mock<IVendorService>();
+        service.Setup(x => x.GetVendorTechnicianDirectoryPagedAsync(
+                It.IsAny<int>(),
+                It.IsAny<int>(),
+                It.IsAny<string?>(),
+                It.IsAny<bool?>(),
+                It.IsAny<IReadOnlyCollection<string>?>(),
+                It.IsAny<IReadOnlyCollection<string>?>(),
+                It.IsAny<IReadOnlyCollection<string>?>(),
+                It.IsAny<IReadOnlyCollection<string>?>(),
+                It.IsAny<CancellationToken>()))
+            .ReturnsAsync(new PagedResult<VendorDirectoryItemDTO>
+            {
+                Items = new List<VendorDirectoryItemDTO>
+                {
+                    new() { Id = 7, CompanyId = 3, CompanyName = "Gateway Plumbing", ContactName = "Tech A" },
+                    new() { Id = 9, CompanyId = 3, CompanyName = "Gateway Plumbing", ContactName = "Tech B" }
+                },
+                TotalCount = 2,
+                Page = 1,
+                PageSize = 10
+            });
+
+        var result = await NewController(service).GetVendorList();
+
+        var ok = result.Should().BeOfType<OkObjectResult>().Subject;
+        var paged = ok.Value.Should().BeOfType<Pagination_DTO>().Subject;
+        var rows = ((System.Collections.IEnumerable)paged.Data!).Cast<object>().ToList();
+
+        // Legacy contract: same-company technicians stay as distinct top-level rows
+        // carrying their own vendor ids, and the response shape has no grouped
+        // Technicians property.
+        rows.Should().HaveCount(2);
+        rows.Select(r => r.GetType().GetProperty("Id")!.GetValue(r)).Should().BeEquivalentTo(new[] { 7, 9 });
+        rows.Should().OnlyContain(r => r.GetType().GetProperty("Technicians") == null);
+    }
+
+    [Fact]
+    public async Task GetVendorList_PreservesLegacyPageSizeAboveGroupedDirectoryBound()
+    {
+        var service = new Mock<IVendorService>();
+        service.Setup(x => x.GetVendorTechnicianDirectoryPagedAsync(
+                1,
+                500,
+                It.IsAny<string?>(),
+                It.IsAny<bool?>(),
+                It.IsAny<IReadOnlyCollection<string>?>(),
+                It.IsAny<IReadOnlyCollection<string>?>(),
+                It.IsAny<IReadOnlyCollection<string>?>(),
+                It.IsAny<IReadOnlyCollection<string>?>(),
+                It.IsAny<CancellationToken>()))
+            .ReturnsAsync(new PagedResult<VendorDirectoryItemDTO> { TotalCount = 420, Page = 1, PageSize = 500 });
+
+        var result = await NewController(service).GetVendorList(page: 1, pageSize: 500);
+
+        var ok = result.Should().BeOfType<OkObjectResult>().Subject;
+        var paged = ok.Value.Should().BeOfType<Pagination_DTO>().Subject;
+        paged.PageSize.Should().Be(500);
+        paged.TotalPages.Should().Be(1);
+        service.VerifyAll();
+    }
+
+    [Fact]
+    public async Task GetVendorDirectoryList_DelegatesToCompanyDirectoryServiceWithNestedTechnicians()
+    {
+        var service = new Mock<IVendorService>();
+        using var cancellation = new CancellationTokenSource();
+        var token = cancellation.Token;
+        service.Setup(x => x.GetVendorCompanyDirectoryPagedAsync(
+                1,
+                10,
+                "clayton",
+                true,
+                It.IsAny<IReadOnlyCollection<string>?>(),
+                It.IsAny<IReadOnlyCollection<string>?>(),
+                It.IsAny<IReadOnlyCollection<string>?>(),
+                It.IsAny<IReadOnlyCollection<string>?>(),
+                token))
+            .ReturnsAsync(new PagedResult<VendorDirectoryItemDTO>
+            {
+                Items = new List<VendorDirectoryItemDTO>
+                {
+                    new()
+                    {
+                        Id = 9,
+                        CompanyId = 3,
+                        CompanyName = "Gateway Plumbing",
+                        Email = "company@gatewayplumbing.example",
+                        TotalJobs = 6,
+                        Technicians = new List<VendorDirectoryTechnicianDTO>
+                        {
+                            new() { Id = 7, ContactName = "Tech A", Email = "tech.a@example.com" },
+                            new() { Id = 9, ContactName = "Tech B", Email = "tech.b@example.com" }
+                        }
+                    }
+                },
+                TotalCount = 1,
+                Page = 1,
+                PageSize = 10
+            });
+
+        var result = await NewController(service).GetVendorDirectoryList(search: "clayton", cancellationToken: token);
+
+        var ok = result.Should().BeOfType<OkObjectResult>().Subject;
+        var paged = ok.Value.Should().BeOfType<Pagination_DTO>().Subject;
+        var company = ((System.Collections.IEnumerable)paged.Data!).Cast<object>().Single();
+
+        // SH-281: company row with nested technicians; top-level Email stays the
+        // company email while technician emails stay on the nested rows.
+        company.GetType().GetProperty("Email")!.GetValue(company).Should().Be("company@gatewayplumbing.example");
+        var technicians = (System.Collections.IEnumerable)company.GetType().GetProperty("Technicians")!.GetValue(company)!;
+        technicians.Cast<object>().Select(t => t.GetType().GetProperty("Id")!.GetValue(t))
+            .Should().BeEquivalentTo(new[] { 7, 9 });
+        technicians.Cast<object>().Select(t => t.GetType().GetProperty("Email")!.GetValue(t))
+            .Should().BeEquivalentTo(new[] { "tech.a@example.com", "tech.b@example.com" });
+
+        service.Verify(x => x.GetVendorCompanyDirectoryPagedAsync(
+            1,
+            10,
+            "clayton",
+            true,
+            It.IsAny<IReadOnlyCollection<string>?>(),
+            It.IsAny<IReadOnlyCollection<string>?>(),
+            It.IsAny<IReadOnlyCollection<string>?>(),
+            It.IsAny<IReadOnlyCollection<string>?>(),
+            token), Times.Once);
+        service.Verify(x => x.GetVendorTechnicianDirectoryPagedAsync(
+            It.IsAny<int>(),
+            It.IsAny<int>(),
+            It.IsAny<string?>(),
+            It.IsAny<bool?>(),
+            It.IsAny<IReadOnlyCollection<string>?>(),
+            It.IsAny<IReadOnlyCollection<string>?>(),
+            It.IsAny<IReadOnlyCollection<string>?>(),
+            It.IsAny<IReadOnlyCollection<string>?>(),
+            It.IsAny<CancellationToken>()), Times.Never);
+    }
+
+    [Fact]
+    public void VendorDirectoryEndpoints_AdvertiseDistinctCompatibilityAndCompanyRoutes()
+    {
+        var legacyRoutes = typeof(VendorController)
+            .GetMethod(nameof(VendorController.GetVendorList))!
+            .GetCustomAttributes(typeof(HttpGetAttribute), inherit: false)
+            .Cast<HttpGetAttribute>()
+            .Select(attribute => attribute.Template);
+        var companyRoutes = typeof(VendorController)
+            .GetMethod(nameof(VendorController.GetVendorDirectoryList))!
+            .GetCustomAttributes(typeof(HttpGetAttribute), inherit: false)
+            .Cast<HttpGetAttribute>()
+            .Select(attribute => attribute.Template);
+
+        legacyRoutes.Should().BeEquivalentTo("GetVendorList");
+        companyRoutes.Should().BeEquivalentTo("GetVendorDirectoryList");
     }
 
     [Fact]
diff --git a/Api.SeaHavenIndustries.Tests/VendorDataServiceTests.cs b/Api.SeaHavenIndustries.Tests/VendorDataServiceTests.cs
index 3473085..7e7716a 100644
--- a/Api.SeaHavenIndustries.Tests/VendorDataServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/VendorDataServiceTests.cs
@@ -4,6 +4,7 @@ using FluentAssertions;
 using Microsoft.EntityFrameworkCore;
 using SeaHaven.DataServices.Implementation;
 using SeaHaven.DataServices.Models;
+using System.Text.RegularExpressions;
 using Xunit;
 
 namespace Api.SeaHavenIndustries.Tests;
@@ -327,6 +328,158 @@ public class VendorDataServiceTests
         result.Select(x => x.WorkOrderId).Should().OnlyHaveUniqueItems();
     }
 
+    [Fact]
+    public async Task GetCompanyDirectoryPagedAsync_GroupsCompaniesAndKeepsLegacyRowsDistinct()
+    {
+        await using var context = NewContext();
+        var linkedCompany = new VendorCompany
+        {
+            Name = "Linked Co",
+            NormalizedName = "linked co",
+            Email = "dispatch@linked.example",
+            CompanyPhone = "555-0100",
+            Address = "100 Company Way",
+            City = "Chicago",
+            State = "IL"
+        };
+        var companyOnly = new VendorCompany { Name = "Company Only", NormalizedName = "company only" };
+        context.VendorCompanies.AddRange(linkedCompany, companyOnly);
+        context.Vendors.AddRange(
+            new Vendor
+            {
+                Company = linkedCompany,
+                CompanyName = "Stale Linked Name",
+                ContactName = "Older Tech",
+                Email = "older@linked.example",
+                Phone = "555-0101",
+                TradeSpecialties = "Plumbing",
+                IsActive = true,
+                IsDeleted = false,
+                Dispatches = new List<Dispatch> { new() { WorkOrderId = 101 } }
+            },
+            new Vendor
+            {
+                Company = linkedCompany,
+                CompanyName = "Another Stale Name",
+                ContactName = "Newer Tech",
+                Email = "newer@linked.example",
+                Phone = "555-0102",
+                TradeSpecialties = "HVAC, plumbing",
+                IsActive = true,
+                IsDeleted = false,
+                Dispatches = new List<Dispatch> { new() { WorkOrderId = 102 } }
+            },
+            new Vendor { CompanyName = " Legacy Co ", ContactName = "Legacy One", IsActive = true, IsDeleted = false },
+            new Vendor { CompanyName = "legacy co", ContactName = "Legacy Two", IsActive = true, IsDeleted = false },
+            new Vendor { CompanyName = " ", ContactName = "Unnamed One", IsActive = true, IsDeleted = false },
+            new Vendor { CompanyName = null, ContactName = "Unnamed Two", IsActive = true, IsDeleted = false });
+        await context.SaveChangesAsync();
+
+        var service = new VendorDataService(context);
+        var (items, totalCount) = await service.GetCompanyDirectoryPagedAsync(1, 50, isActive: true);
+
+        totalCount.Should().Be(5);
+        var linked = items.Single(item => item.CompanyId == linkedCompany.Id);
+        linked.CompanyName.Should().Be("Linked Co");
+        linked.Email.Should().Be("dispatch@linked.example");
+        linked.ContactName.Should().Be("Newer Tech");
+        linked.Technicians.Should().HaveCount(2);
+        linked.TotalJobs.Should().Be(2);
+        linked.TradeSpecialties.Should().Be("HVAC, plumbing");
+
+        var canonicalSearch = await service.GetCompanyDirectoryPagedAsync(
+            1, 50, search: "Linked Co", isActive: true);
+        canonicalSearch.Items.Should().ContainSingle(item => item.CompanyId == linkedCompany.Id);
+
+        var canonicalCompanyFilter = await service.GetCompanyDirectoryPagedAsync(
+            1, 50, isActive: true, companies: new[] { "Linked Co" });
+        canonicalCompanyFilter.Items.Should().ContainSingle(item => item.CompanyId == linkedCompany.Id);
+
+        var legacy = items.Single(item =>
+            item.Technicians.Any(tech => tech.ContactName == "Legacy One"));
+        legacy.Technicians.Select(tech => tech.ContactName)
+            .Should().BeEquivalentTo("Legacy One", "Legacy Two");
+        items.Count(item => item.Technicians.Count == 1 &&
+            item.Technicians.Single().ContactName?.StartsWith("Unnamed") == true).Should().Be(2);
+        items.Single(item => item.CompanyId == companyOnly.Id).Technicians.Should().BeEmpty();
+    }
+
+    [Fact]
+    public async Task GetCompanyDirectoryPagedAsync_FilterSelectsGroupAndSearchPromotesMatchingTechnician()
+    {
+        await using var context = NewContext();
+        var company = new VendorCompany { Name = "Search Co", NormalizedName = "search co" };
+        context.VendorCompanies.Add(company);
+        var older = new Vendor
+        {
+            Company = company,
+            CompanyName = company.Name,
+            ContactName = "Alice Plumber",
+            TradeSpecialties = "Plumbing",
+            IsActive = true,
+            IsDeleted = false,
+            Dispatches = new List<Dispatch> { new() { WorkOrderId = 201 } }
+        };
+        var newer = new Vendor
+        {
+            Company = company,
+            CompanyName = company.Name,
+            ContactName = "Zed HVAC",
+            TradeSpecialties = "HVAC",
+            IsActive = true,
+            IsDeleted = false,
+            Dispatches = new List<Dispatch> { new() { WorkOrderId = 202 } }
+        };
+        var inactive = new Vendor
+        {
+            Company = company,
+            CompanyName = company.Name,
+            ContactName = "Inactive Tech",
+            TradeSpecialties = "Roofing",
+            IsActive = false,
+            IsDeleted = false,
+            Dispatches = new List<Dispatch> { new() { WorkOrderId = 203 } }
+        };
+        context.Vendors.AddRange(older, newer, inactive);
+        await context.SaveChangesAsync();
+
+        var service = new VendorDataService(context);
+        var search = await service.GetCompanyDirectoryPagedAsync(1, 10, search: "Alice", isActive: true);
+        var trade = await service.GetCompanyDirectoryPagedAsync(
+            1, 10, isActive: true, trades: new[] { "Plumbing" });
+
+        search.TotalCount.Should().Be(1);
+        search.Items.Single().Id.Should().Be(older.Id);
+        search.Items.Single().ContactName.Should().Be("Alice Plumber");
+        search.Items.Single().Technicians.Should().HaveCount(2);
+        search.Items.Single().TotalJobs.Should().Be(2);
+
+        trade.TotalCount.Should().Be(1);
+        trade.Items.Single().Id.Should().Be(newer.Id);
+        trade.Items.Single().Technicians.Should().HaveCount(2);
+        trade.Items.Single().Technicians.Should().NotContain(tech => tech.Id == inactive.Id);
+    }
+
+    [Fact]
+    public void BuildCompanyDirectoryKeysQuery_TranslatesGroupingAndFacetFiltersToSqlServer()
+    {
+        using var context = NewSqlServerContext();
+        var service = new VendorDataService(context);
+
+        var sql = service.BuildCompanyDirectoryKeysQuery(
+            search: "alice",
+            trades: new[] { "Plumbing" },
+            locations: new[] { "Chicago, IL" },
+            jobBuckets: new[] { "under-50" }).ToQueryString();
+
+        sql.Should().Contain("GROUP BY");
+        sql.Should().Contain("LEFT JOIN");
+        sql.Should().Contain("TradeSpecialties");
+        sql.Should().Contain("TotalJobs");
+        Regex.IsMatch(sql, @"SUM\s*\(\s*\(\s*SELECT", RegexOptions.IgnoreCase)
+            .Should().BeFalse("company totals must sum pre-aggregated scalar job counts");
+    }
+
     [Fact]
     public async Task GetDirectoryPagedAsync_IncludesCompanyOnlyRowsAndPreservesTechnicianRows()
     {
diff --git a/Api.SeaHavenIndustries.Tests/VendorServiceTests.cs b/Api.SeaHavenIndustries.Tests/VendorServiceTests.cs
index 42c22bf..a8e996d 100644
--- a/Api.SeaHavenIndustries.Tests/VendorServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/VendorServiceTests.cs
@@ -152,12 +152,12 @@ public class VendorServiceTests
     }
 
     [Fact]
-    public async Task GetVendorDirectoryPaged_ForwardsCancellationToken()
+    public async Task GetVendorCompanyDirectoryPaged_ForwardsCancellationTokenAndMapsNestedTechnicians()
     {
         var data = new Mock<IVendorDataService>();
         using var cancellation = new CancellationTokenSource();
         var token = cancellation.Token;
-        data.Setup(x => x.GetDirectoryPagedAsync(
+        data.Setup(x => x.GetCompanyDirectoryPagedAsync(
                 1,
                 12,
                 "clayton",
@@ -167,16 +167,43 @@ public class VendorServiceTests
                 It.IsAny<IReadOnlyCollection<string>?>(),
                 It.IsAny<IReadOnlyCollection<string>?>(),
                 token))
-            .ReturnsAsync((Array.Empty<VendorDirectoryRow>(), 0));
+            .ReturnsAsync((new[]
+            {
+                new VendorCompanyGroup
+                {
+                    Id = 7,
+                    CompanyId = 3,
+                    CompanyName = "Gateway Plumbing",
+                    ContactName = "Primary Tech",
+                    Email = "company@gatewayplumbing.example",
+                    TotalJobs = 4,
+                    Technicians = new[]
+                    {
+                        new VendorCompanyGroupTechnician
+                        {
+                            Id = 7,
+                            ContactName = "Primary Tech",
+                            Email = "primary@example.com",
+                            TotalJobs = 4,
+                            IsActive = true
+                        }
+                    }
+                }
+            }.AsEnumerable().ToList(), 1));
 
-        await NewService(data).GetVendorDirectoryPagedAsync(
+        var result = await NewService(data).GetVendorCompanyDirectoryPagedAsync(
             1,
             12,
             "clayton",
             true,
             cancellationToken: token);
 
-        data.Verify(x => x.GetDirectoryPagedAsync(
+        var group = result.Items.Single();
+        group.Email.Should().Be("company@gatewayplumbing.example");
+        group.Technicians.Should().ContainSingle()
+            .Which.Email.Should().Be("primary@example.com");
+
+        data.Verify(x => x.GetCompanyDirectoryPagedAsync(
             1,
             12,
             "clayton",
@@ -188,6 +215,78 @@ public class VendorServiceTests
             token), Times.Once);
     }
 
+    [Fact]
+    public async Task GetVendorCompanyDirectoryPaged_BoundsPageInputsBeforeBuildingTheGroupKeyPredicate()
+    {
+        var data = new Mock<IVendorDataService>();
+        data.Setup(x => x.GetCompanyDirectoryPagedAsync(
+                1,
+                100,
+                null,
+                true,
+                It.IsAny<IReadOnlyCollection<string>?>(),
+                It.IsAny<IReadOnlyCollection<string>?>(),
+                It.IsAny<IReadOnlyCollection<string>?>(),
+                It.IsAny<IReadOnlyCollection<string>?>(),
+                It.IsAny<CancellationToken>()))
+            .ReturnsAsync((new List<VendorCompanyGroup>(), 0));
+
+        var result = await NewService(data).GetVendorCompanyDirectoryPagedAsync(0, 500);
+
+        result.Page.Should().Be(1);
+        result.PageSize.Should().Be(100);
+        data.VerifyAll();
+    }
+
+    [Fact]
+    public async Task GetVendorTechnicianDirectoryPaged_ForwardsRawPaginationAndCancellationToken()
+    {
+        var data = new Mock<IVendorDataService>();
+        using var cancellation = new CancellationTokenSource();
+        var token = cancellation.Token;
+        data.Setup(x => x.GetDirectoryPagedAsync(
+                2,
+                500,
+                "clayton",
+                true,
+                It.IsAny<IReadOnlyCollection<string>?>(),
+                It.IsAny<IReadOnlyCollection<string>?>(),
+                It.IsAny<IReadOnlyCollection<string>?>(),
+                It.IsAny<IReadOnlyCollection<string>?>(),
+                token))
+            .ReturnsAsync((new[]
+            {
+                new VendorDirectoryRow { VendorId = 7, CompanyId = 3, CompanyName = "Gateway Plumbing", ContactName = "Tech A" },
+                new VendorDirectoryRow { VendorId = 9, CompanyId = 3, CompanyName = "Gateway Plumbing", ContactName = "Tech B" }
+            }.AsEnumerable().ToList(), 2));
+
+        var result = await NewService(data).GetVendorTechnicianDirectoryPagedAsync(
+            2,
+            500,
+            "clayton",
+            true,
+            cancellationToken: token);
+
+        // Legacy pagination semantics: page and pageSize (including 500) pass through
+        // unclamped, and same-company technicians stay as distinct rows.
+        result.Page.Should().Be(2);
+        result.PageSize.Should().Be(500);
+        result.Items.Should().HaveCount(2);
+        result.Items.Select(v => v.Id).Should().BeEquivalentTo(new[] { 7, 9 });
+        result.Items.Should().OnlyContain(v => v.Technicians.Count == 0);
+
+        data.Verify(x => x.GetDirectoryPagedAsync(
+            2,
+            500,
+            "clayton",
+            true,
+            It.IsAny<IReadOnlyCollection<string>?>(),
+            It.IsAny<IReadOnlyCollection<string>?>(),
+            It.IsAny<IReadOnlyCollection<string>?>(),
+            It.IsAny<IReadOnlyCollection<string>?>(),
+            token), Times.Once);
+    }
+
     [Fact]
     public async Task GetVendorById_CountsDistinctHistoricalWorkOrders()
     {
diff --git a/Api.SeaHavenIndustries/Controllers/VendorController.cs b/Api.SeaHavenIndustries/Controllers/VendorController.cs
index 1051fcf..fc42b88 100644
--- a/Api.SeaHavenIndustries/Controllers/VendorController.cs
+++ b/Api.SeaHavenIndustries/Controllers/VendorController.cs
@@ -26,6 +26,9 @@ namespace Api.SeaHavenIndustries.Controllers
             _logger = logger;
         }
 
+        // SH-198 legacy per-technician directory contract. Existing consumers depend
+        // on one row per technician (no grouped Technicians) and on raw pagination
+        // semantics, including pageSize values above the grouped-directory bound.
         [HttpGet("GetVendorList")]
         public async Task<IActionResult> GetVendorList(
             string? search = "",
@@ -38,7 +41,7 @@ namespace Api.SeaHavenIndustries.Controllers
             [FromQuery] string[]? jobBuckets = null,
             CancellationToken cancellationToken = default)
         {
-            var pagedResult = await _vendorService.GetVendorDirectoryPagedAsync(
+            var pagedResult = await _vendorService.GetVendorTechnicianDirectoryPagedAsync(
                 page,
                 pageSize,
                 search,
@@ -80,6 +83,75 @@ namespace Api.SeaHavenIndustries.Controllers
             });
         }
 
+        // SH-281 company-grouped directory: one row per company with the full
+        // status-eligible technician roster nested under Technicians and bounded
+        // page sizes. Top-level Email is the company email; technician emails stay
+        // on the nested rows.
+        [HttpGet("GetVendorDirectoryList")]
+        public async Task<IActionResult> GetVendorDirectoryList(
+            string? search = "",
+            int page = 1,
+            int pageSize = 10,
+            bool? isActive = true,
+            [FromQuery] string[]? companies = null,
+            [FromQuery] string[]? trades = null,
+            [FromQuery] string[]? locations = null,
+            [FromQuery] string[]? jobBuckets = null,
+            CancellationToken cancellationToken = default)
+        {
+            var pagedResult = await _vendorService.GetVendorCompanyDirectoryPagedAsync(
+                page,
+                pageSize,
+                search,
+                isActive,
+                companies,
+                trades,
+                locations,
+                jobBuckets,
+                cancellationToken);
+
+            var data = pagedResult.Items.Select(v => new
+            {
+                v.Id,
+                CompanyName = v.CompanyName,
+                v.CompanyId,
+                v.ContactName,
+                v.Email,
+                v.Phone,
+                v.CompanyPhone,
+                v.PreferredContact,
+                v.Address,
+                v.City,
+                v.State,
+                Zip = v.Zipcode,
+                v.TradeSpecialties,
+                v.GoogleMapsUrl,
+                v.Notes,
+                v.IsActive,
+                v.TotalJobs,
+                Technicians = v.Technicians.Select(t => new
+                {
+                    t.Id,
+                    t.ContactName,
+                    t.Email,
+                    t.Phone,
+                    t.PreferredContact,
+                    t.TradeSpecialties,
+                    t.IsActive,
+                    t.TotalJobs
+                })
+            });
+
+            return Ok(new Pagination_DTO
+            {
+                Data = data,
+                PageNumber = pagedResult.Page,
+                PageSize = pagedResult.PageSize,
+                TotalCount = pagedResult.TotalCount,
+                TotalPages = (int)Math.Ceiling(pagedResult.TotalCount / (double)pagedResult.PageSize)
+            });
+        }
+
         [HttpGet("{id}")]
         [HttpGet("GetById")]
         public async Task<IActionResult> GetVendorById([FromRoute] int? id, [FromQuery(Name = "id")] int? queryId)
diff --git a/SeaHaven.DataServices/Implementation/VendorDataService.cs b/SeaHaven.DataServices/Implementation/VendorDataService.cs
index ca6eed2..3c5e70a 100644
--- a/SeaHaven.DataServices/Implementation/VendorDataService.cs
+++ b/SeaHaven.DataServices/Implementation/VendorDataService.cs
@@ -168,7 +168,188 @@ namespace SeaHaven.DataServices.Implementation
             return (items, totalCount);
         }
 
-        internal IQueryable<VendorDirectoryRow> BuildDirectoryUnionQuery(
+        public async Task<(IReadOnlyList<VendorCompanyGroup> Items, int TotalCount)> GetCompanyDirectoryPagedAsync(
+            int page,
+            int pageSize,
+            string? search = null,
+            bool? isActive = true,
+            IReadOnlyCollection<string>? companies = null,
+            IReadOnlyCollection<string>? trades = null,
+            IReadOnlyCollection<string>? locations = null,
+            IReadOnlyCollection<string>? jobBuckets = null,
+            CancellationToken cancellationToken = default)
+        {
+            // Phase 1: select and paginate bounded company group keys in SQL.
+            var keyQuery = BuildCompanyDirectoryKeysQuery(
+                search,
+                isActive,
+                companies,
+                trades,
+                locations,
+                jobBuckets);
+
+            var totalCount = await keyQuery.CountAsync(cancellationToken);
+
+            var pageKeys = await keyQuery
+                .OrderByDescending(key => key.MaxVendorId ?? -1)
+                .ThenByDescending(key => key.CompanyId)
+                .ThenBy(key => key.NameKey)
+                .ThenBy(key => key.VendorKey)
+                .Skip((page - 1) * pageSize)
+                .Take(pageSize)
+                .ToListAsync(cancellationToken);
+
+            if (pageKeys.Count == 0)
+                return (Array.Empty<VendorCompanyGroup>(), totalCount);
+
+            // Phase 2: fetch the full status-eligible roster only for the page keys,
+            // without reapplying search/trade/location filters.
+            var rosterRows = await BuildCompanyDirectoryRosterQuery(isActive, pageKeys)
+                .ToListAsync(cancellationToken);
+
+            var rosterByKey = rosterRows
+                .GroupBy(row => (CompanyId: row.CompanyId ?? 0, row.NameKey, row.VendorKey))
+                .ToDictionary(group => group.Key, group => group.OrderByDescending(row => row.VendorId).ToList());
+
+            var missingCompanyIds = pageKeys
+                .Where(key => key.CompanyId != 0)
+                .Where(key => !rosterByKey.ContainsKey((key.CompanyId, key.NameKey, key.VendorKey)))
+                .Select(key => key.CompanyId)
+                .Distinct()
+                .ToList();
+
+            var companiesById = missingCompanyIds.Count == 0
+                ? new Dictionary<int, VendorCompany>()
+                : await _context.VendorCompanies
+                    .AsNoTracking()
+                    .Where(c => missingCompanyIds.Contains(c.Id))
+                    .ToDictionaryAsync(c => c.Id, cancellationToken);
+
+            // Assemble groups in the page key order so the response preserves the
+            // SQL-selected page order.
+            var groups = new List<VendorCompanyGroup>(pageKeys.Count);
+            foreach (var key in pageKeys)
+            {
+                if (rosterByKey.TryGetValue((key.CompanyId, key.NameKey, key.VendorKey), out var technicians))
+                {
+                    groups.Add(BuildTechnicianGroup(technicians, search));
+                }
+                else if (companiesById.TryGetValue(key.CompanyId, out var company))
+                {
+                    groups.Add(BuildCompanyOnlyGroup(company));
+                }
+            }
+
+            return (groups, totalCount);
+        }
+
+        private static VendorCompanyGroup BuildTechnicianGroup(
+            IReadOnlyList<VendorDirectoryRosterRow> techniciansNewestFirst,
+            string? search)
+        {
+            var primary = techniciansNewestFirst[0];
+
+            // Primary is the newest VendorId by default; a nonblank search that matches
+            // a non-primary technician's ContactName, email, Phone, or
+            // TradeSpecialties promotes the newest matching technician. Company-level
+            // matches (e.g. company name or location) never reorder.
+            if (!string.IsNullOrWhiteSpace(search))
+            {
+                var normalizedSearch = search.ToLower();
+                primary = techniciansNewestFirst.FirstOrDefault(row =>
+                        ((row.ContactName ?? "").ToLower().Contains(normalizedSearch)) ||
+                        ((row.Email ?? "").ToLower().Contains(normalizedSearch)) ||
+                        ((row.Phone ?? "").ToLower().Contains(normalizedSearch)) ||
+                        ((row.TradeSpecialties ?? "").ToLower().Contains(normalizedSearch)))
+                    ?? techniciansNewestFirst[0];
+            }
+
+            var linked = primary.CompanyId != null;
+            var hasCompanyLocation = linked && (
+                !string.IsNullOrWhiteSpace(primary.CompanyCity) ||
+                !string.IsNullOrWhiteSpace(primary.CompanyState) ||
+                !string.IsNullOrWhiteSpace(primary.CompanyAddress));
+
+            return new VendorCompanyGroup
+            {
+                Id = primary.VendorId,
+                CompanyId = primary.CompanyId,
+                CompanyName = linked ? primary.CanonicalCompanyName : primary.CompanyName,
+                ContactName = primary.ContactName,
+                Email = linked ? primary.CompanyEmail : primary.Email,
+                Phone = primary.Phone,
+                CompanyPhone = linked && !string.IsNullOrWhiteSpace(primary.CompanyPhone)
+                    ? primary.CompanyPhone
+                    : primary.VendorCompanyPhone,
+                PreferredContact = primary.PreferredContact,
+                Address = linked && !string.IsNullOrWhiteSpace(primary.CompanyAddress)
+                    ? primary.CompanyAddress
+                    : primary.Address,
+                City = hasCompanyLocation ? primary.CompanyCity : primary.City,
+                State = hasCompanyLocation ? primary.CompanyState : primary.State,
+                Zip = primary.Zip,
+                TradeSpecialties = AggregateTradeTokens(techniciansNewestFirst),
+                GoogleMapsUrl = primary.GoogleMapsUrl,
+                Notes = linked ? primary.CompanyNotes : null,
+                IsActive = primary.IsActive,
+                TotalJobs = techniciansNewestFirst.Sum(row => row.TotalJobs),
+                Technicians = techniciansNewestFirst.Select(row => new VendorCompanyGroupTechnician
+                {
+                    Id = row.VendorId,
+                    ContactName = row.ContactName,
+                    Email = row.Email,
+                    Phone = row.Phone,
+                    PreferredContact = row.PreferredContact,
+                    TradeSpecialties = row.TradeSpecialties,
+                    IsActive = row.IsActive,
+                    TotalJobs = row.TotalJobs
+                }).ToList()
+            };
+        }
+
+        // Distinct trade CSV tokens case-insensitively, preserving the first displayed
+        // spelling and order (technicians are listed newest VendorId first).
+        private static string? AggregateTradeTokens(IEnumerable<VendorDirectoryRosterRow> techniciansNewestFirst)
+        {
+            var seen = new HashSet<string>(StringComparer.OrdinalIgnoreCase);
+            var tokens = new List<string>();
+            foreach (var row in techniciansNewestFirst)
+            {
+                if (string.IsNullOrWhiteSpace(row.TradeSpecialties))
+                    continue;
+                foreach (var token in row.TradeSpecialties.Split(',', StringSplitOptions.TrimEntries | StringSplitOptions.RemoveEmptyEntries))
+                {
+                    if (seen.Add(token))
+                        tokens.Add(token);
+                }
+            }
+
+            return tokens.Count == 0 ? null : string.Join(", ", tokens);
+        }
+
+        private static VendorCompanyGroup BuildCompanyOnlyGroup(VendorCompany company) => new()
+        {
+            Id = null,
+            CompanyId = company.Id,
+            CompanyName = company.Name,
+            ContactName = null,
+            Email = company.Email,
+            Phone = null,
+            CompanyPhone = company.CompanyPhone,
+            PreferredContact = null,
+            Address = company.Address,
+            City = company.City,
+            State = company.State,
+            Zip = company.Zip,
+            TradeSpecialties = null,
+            GoogleMapsUrl = company.GoogleMapsUrl,
+            Notes = company.Notes,
+            IsActive = true,
+            TotalJobs = 0,
+            Technicians = Array.Empty<VendorCompanyGroupTechnician>()
+        };
+
+        internal IQueryable<VendorCompanyGroupKeyRow> BuildCompanyDirectoryKeysQuery(
             string? search = null,
             bool? isActive = true,
             IReadOnlyCollection<string>? companies = null,
@@ -176,52 +357,195 @@ namespace SeaHaven.DataServices.Implementation
             IReadOnlyCollection<string>? locations = null,
             IReadOnlyCollection<string>? jobBuckets = null)
         {
-            // Arm A: existing per-technician rows (every non-deleted vendor, including
-            // those with no company). Notes come from the linked VendorCompany.
-            var perTechnician = _context.Vendors
+            var sourceRows = BuildDirectoryUnionBaseQuery(isActive)
+                .Select(BuildGroupSourceRowSelector(search, companies, trades, locations));
+
+            var grouped = sourceRows
+                .GroupBy(row => new { row.CompanyId, row.NameKey, row.VendorKey })
+                .Select(group => new VendorCompanyGroupKeyRow
+                {
+                    CompanyId = group.Key.CompanyId,
+                    NameKey = group.Key.NameKey,
+                    VendorKey = group.Key.VendorKey,
+                    MaxVendorId = group.Max(row => row.VendorId),
+                    TotalJobs = group.Sum(row => row.TotalJobs),
+                    SearchMatch = group.Max(row => row.SearchFlag),
+                    CompanyMatch = group.Max(row => row.CompanyFlag),
+                    TradeMatch = group.Max(row => row.TradeFlag),
+                    LocationMatch = group.Max(row => row.LocationFlag)
+                });
+
+            // Each facet selects the group when any status-eligible row matches it
+            // (OR within a facet, AND across facets); job buckets apply to the summed
+            // per-technician TotalJobs of the whole company.
+            if (!string.IsNullOrWhiteSpace(search))
+                grouped = grouped.Where(key => key.SearchMatch == 1);
+
+            var selectedCompanies = companies?
+                .Where(value => !string.IsNullOrWhiteSpace(value))
+                .Select(value => value.Trim().ToLower())
+                .Distinct()
+                .ToArray();
+            if (selectedCompanies is { Length: > 0 })
+                grouped = grouped.Where(key => key.CompanyMatch == 1);
+
+            var selectedTrades = trades?
+                .Where(value => !string.IsNullOrWhiteSpace(value))
+                .Select(value => value.Trim().ToLower())
+                .Distinct()
+                .ToArray();
+            if (selectedTrades is { Length: > 0 })
+                grouped = grouped.Where(key => key.TradeMatch == 1);
+
+            var selectedLocations = locations?
+                .Where(value => !string.IsNullOrWhiteSpace(value))
+                .Select(value => value.Trim().ToLower())
+                .Distinct()
+                .ToArray();
+            if (selectedLocations is { Length: > 0 })
+                grouped = grouped.Where(key => key.LocationMatch == 1);
+
+            var selectedJobBuckets = jobBuckets?
+                .Where(value => !string.IsNullOrWhiteSpace(value))
+                .Select(value => value.Trim().ToLower())
+                .Distinct()
+                .ToArray();
+            if (selectedJobBuckets is not { Length: > 0 })
+                return grouped;
+
+            var under50 = selectedJobBuckets.Contains("under-50");
+            var from50To99 = selectedJobBuckets.Contains("50-99");
+            var from100To149 = selectedJobBuckets.Contains("100-149");
+            var from150 = selectedJobBuckets.Contains("150-plus");
+
+            return grouped.Where(key =>
+                (under50 && key.TotalJobs < 50) ||
+                (from50To99 && key.TotalJobs >= 50 && key.TotalJobs <= 99) ||
+                (from100To149 && key.TotalJobs >= 100 && key.TotalJobs <= 149) ||
+                (from150 && key.TotalJobs >= 150));
+        }
+
+        private static Expression<Func<VendorDirectoryRow, VendorDirectoryGroupSourceRow>> BuildGroupSourceRowSelector(
+            string? search,
+            IReadOnlyCollection<string>? companies,
+            IReadOnlyCollection<string>? trades,
+            IReadOnlyCollection<string>? locations)
+        {
+            var row = Expression.Parameter(typeof(VendorDirectoryRow), "row");
+
+            var selectedCompanies = companies?
+                .Where(value => !string.IsNullOrWhiteSpace(value))
+                .Select(value => value.Trim().ToLower())
+                .Distinct()
+                .ToArray();
+            var selectedTrades = trades?
+                .Where(value => !string.IsNullOrWhiteSpace(value))
+                .Select(value => value.Trim().ToLower())
+                .Distinct()
+                .ToArray();
+            var selectedLocations = locations?
+                .Where(value => !string.IsNullOrWhiteSpace(value))
+                .Select(value => value.Trim().ToLower())
+                .Distinct()
+                .ToArray();
+
+            static Expression Flag(Expression? matchBody) =>
+                matchBody is null
+                    ? Expression.Constant(1)
+                    : Expression.Condition(matchBody, Expression.Constant(1), Expression.Constant(0));
+
+            var searchBody = string.IsNullOrWhiteSpace(search)
+                ? null
+                : BuildSearchMatchBody(row, search.ToLower());
+            var companyBody = selectedCompanies is { Length: > 0 }
+                ? BuildCompanyNameMatchBody(row, selectedCompanies)
+                : null;
+            var tradeBody = selectedTrades is { Length: > 0 }
+                ? BuildTradeMatchBody<VendorDirectoryRow>(row, selectedTrades)
+                : null;
+            var locationBody = selectedLocations is { Length: > 0 }
+                ? BuildLocationMatchBody<VendorDirectoryRow>(row, selectedLocations)
+                : null;
+
+            var nameKey = Expression.Condition(
+                Expression.NotEqual(
+                    Expression.Property(row, nameof(VendorDirectoryRow.CompanyId)),
+                    Expression.Constant(0)),
+                Expression.Constant(string.Empty),
+                LowerTrimmed(row, nameof(VendorDirectoryRow.CompanyName)));
+
+            var nameMissing = Expression.Equal(
+                Expression.Call(
+                    CoalescedOrEmpty(row, nameof(VendorDirectoryRow.CompanyName)),
+                    nameof(string.Trim),
+                    Type.EmptyTypes),
+                Expression.Constant(string.Empty));
+            var vendorKey = Expression.Condition(
+                Expression.AndAlso(
+                    Expression.Equal(
+                        Expression.Property(row, nameof(VendorDirectoryRow.CompanyId)),
+                        Expression.Constant(0)),
+                    nameMissing),
+                Expression.Coalesce(
+                    Expression.Property(row, nameof(VendorDirectoryRow.VendorId)),
+                    Expression.Constant(0)),
+                Expression.Constant(0));
+
+            MemberBinding Bind(string target, Expression value) =>
+                Expression.Bind(typeof(VendorDirectoryGroupSourceRow).GetProperty(target)!, value);
+
+            return Expression.Lambda<Func<VendorDirectoryRow, VendorDirectoryGroupSourceRow>>(
+                Expression.MemberInit(
+                    Expression.New(typeof(VendorDirectoryGroupSourceRow)),
+                    Bind(nameof(VendorDirectoryGroupSourceRow.VendorId),
+                        Expression.Property(row, nameof(VendorDirectoryRow.VendorId))),
+                    Bind(nameof(VendorDirectoryGroupSourceRow.CompanyId),
+                        Expression.Property(row, nameof(VendorDirectoryRow.CompanyId))),
+                    Bind(nameof(VendorDirectoryGroupSourceRow.NameKey), nameKey),
+                    Bind(nameof(VendorDirectoryGroupSourceRow.VendorKey), vendorKey),
+                    Bind(nameof(VendorDirectoryGroupSourceRow.TotalJobs),
+                        Expression.Property(row, nameof(VendorDirectoryRow.TotalJobs))),
+                    Bind(nameof(VendorDirectoryGroupSourceRow.SearchFlag), Flag(searchBody)),
+                    Bind(nameof(VendorDirectoryGroupSourceRow.CompanyFlag), Flag(companyBody)),
+                    Bind(nameof(VendorDirectoryGroupSourceRow.TradeFlag), Flag(tradeBody)),
+                    Bind(nameof(VendorDirectoryGroupSourceRow.LocationFlag), Flag(locationBody))),
+                row);
+        }
+
+        internal IQueryable<VendorDirectoryRosterRow> BuildCompanyDirectoryRosterQuery(
+            bool? isActive,
+            IReadOnlyList<VendorCompanyGroupKeyRow> keys)
+        {
+            var vendors = _context.Vendors
                 .AsNoTracking()
                 .Where(v => v.IsDeleted == null || v.IsDeleted == false);
 
             if (isActive.HasValue)
-                perTechnician = perTechnician.Where(v => v.IsActive == isActive.Value);
+                vendors = vendors.Where(v => v.IsActive == isActive.Value);
 
-            var armA = perTechnician.Select(v => new VendorDirectoryRow
+            var rows = vendors.Select(v => new VendorDirectoryRosterRow
             {
                 VendorId = v.Id,
-                CompanyId = v.CompanyId ?? 0,
-                CompanyName = v.CompanyName,
+                CompanyId = v.CompanyId,
+                CompanyName = v.Company != null ? v.Company.Name : v.CompanyName,
+                CanonicalCompanyName = v.Company != null ? v.Company.Name : null,
+                CompanyEmail = v.Company != null ? v.Company.Email : null,
+                CompanyPhone = v.Company != null ? v.Company.CompanyPhone : null,
+                CompanyAddress = v.Company != null ? v.Company.Address : null,
+                CompanyCity = v.Company != null ? v.Company.City : null,
+                CompanyState = v.Company != null ? v.Company.State : null,
+                CompanyNotes = v.Company != null ? v.Company.Notes : null,
                 ContactName = v.ContactName,
-                Email = v.Email != null && v.Email.Trim() != ""
-                    ? v.Email
-                    : v.Company != null
-                        ? v.Company.Email
-                        : v.Email,
+                Email = v.Email,
                 Phone = v.Phone,
-                CompanyPhone = v.Company != null &&
-                    v.Company.CompanyPhone != null && v.Company.CompanyPhone.Trim() != ""
-                    ? v.Company.CompanyPhone
-                    : v.CompanyPhone,
                 PreferredContact = v.PreferredContact,
-                Address = v.Company != null &&
-                    v.Company.Address != null && v.Company.Address.Trim() != ""
-                    ? v.Company.Address
-                    : v.Address,
-                City = v.Company != null &&
-                    ((v.Company.City != null && v.Company.City.Trim() != "") ||
-                     (v.Company.State != null && v.Company.State.Trim() != "") ||
-                     (v.Company.Address != null && v.Company.Address.Trim() != ""))
-                    ? v.Company.City
-                    : v.City,
-                State = v.Company != null &&
-                    ((v.Company.City != null && v.Company.City.Trim() != "") ||
-                     (v.Company.State != null && v.Company.State.Trim() != "") ||
-                     (v.Company.Address != null && v.Company.Address.Trim() != ""))
-                    ? v.Company.State
-                    : v.State,
+                VendorCompanyPhone = v.CompanyPhone,
+                Address = v.Address,
+                City = v.City,
+                State = v.State,
                 Zip = v.Zip,
                 TradeSpecialties = v.TradeSpecialties,
                 GoogleMapsUrl = v.GoogleMapsUrl,
-                Notes = v.Company != null ? v.Company.Notes : null,
                 IsActive = v.IsActive,
                 TotalJobs = _context.Dispatches
                     .Where(dispatch =>
@@ -232,9 +556,156 @@ namespace SeaHaven.DataServices.Implementation
                         _context.DispatchWorkOrders
                             .Where(link => link.Dispatch != null && link.Dispatch.VendorId == v.Id)
                             .Select(link => link.WorkOrderId))
-                    .Count()
+                    .Count(),
+                NameKey = v.CompanyId != null
+                    ? ""
+                    : (v.CompanyName ?? "").Trim().ToLower(),
+                VendorKey = v.CompanyId == null && (v.CompanyName ?? "").Trim() == ""
+                    ? v.Id
+                    : 0
             });
 
+            return rows.Where(BuildRosterKeyPredicate(keys));
+        }
+
+        private static Expression<Func<VendorDirectoryRosterRow, bool>> BuildRosterKeyPredicate(
+            IReadOnlyList<VendorCompanyGroupKeyRow> keys)
+        {
+            var row = Expression.Parameter(typeof(VendorDirectoryRosterRow), "row");
+
+            Expression? body = null;
+            foreach (var key in keys)
+            {
+                Expression keyMatch;
+                if (key.CompanyId != 0)
+                {
+                    keyMatch = Expression.Equal(
+                        Expression.Property(row, nameof(VendorDirectoryRosterRow.CompanyId)),
+                        Expression.Constant(key.CompanyId, typeof(int?)));
+                }
+                else if (key.NameKey.Length > 0)
+                {
+                    keyMatch = Expression.AndAlso(
+                        Expression.Equal(
+                            Expression.Property(row, nameof(VendorDirectoryRosterRow.CompanyId)),
+                            Expression.Constant(null, typeof(int?))),
+                        Expression.Equal(
+                            Expression.Property(row, nameof(VendorDirectoryRosterRow.NameKey)),
+                            Expression.Constant(key.NameKey)));
+                }
+                else
+                {
+                    keyMatch = Expression.Equal(
+                        Expression.Property(row, nameof(VendorDirectoryRosterRow.VendorId)),
+                        Expression.Constant(key.VendorKey));
+                }
+
+                body = OrElse(body, keyMatch);
+            }
+
+            return Expression.Lambda<Func<VendorDirectoryRosterRow, bool>>(
+                body ?? Expression.Constant(false),
+                row);
+        }
+
+        internal IQueryable<VendorDirectoryRow> BuildDirectoryUnionQuery(
+            string? search = null,
+            bool? isActive = true,
+            IReadOnlyCollection<string>? companies = null,
+            IReadOnlyCollection<string>? trades = null,
+            IReadOnlyCollection<string>? locations = null,
+            IReadOnlyCollection<string>? jobBuckets = null) =>
+            ApplyDirectoryRowFilters(
+                BuildDirectoryUnionBaseQuery(isActive),
+                search,
+                companies,
+                trades,
+                locations,
+                jobBuckets);
+
+        private IQueryable<VendorDirectoryRow> BuildDirectoryUnionBaseQuery(bool? isActive = true)
+        {
+            // Arm A: existing per-technician rows (every non-deleted vendor, including
+            // those with no company). Notes come from the linked VendorCompany.
+            var perTechnician = _context.Vendors
+                .AsNoTracking()
+                .Where(v => v.IsDeleted == null || v.IsDeleted == false);
+
+            if (isActive.HasValue)
+                perTechnician = perTechnician.Where(v => v.IsActive == isActive.Value);
+
+            // Pre-aggregate distinct work-order assignments per technician before
+            // grouping companies. This keeps the outer company SUM over a plain
+            // joined scalar instead of SUM(COUNT(correlated subquery)), which SQL
+            // Server rejects at execution time.
+            var directWorkOrders = _context.Dispatches
+                .Where(dispatch => dispatch.WorkOrderId.HasValue)
+                .Select(dispatch => new
+                {
+                    dispatch.VendorId,
+                    WorkOrderId = dispatch.WorkOrderId!.Value
+                });
+            var linkedWorkOrders = _context.DispatchWorkOrders
+                .Where(link => link.Dispatch != null)
+                .Select(link => new
+                {
+                    VendorId = link.Dispatch!.VendorId,
+                    link.WorkOrderId
+                });
+            var jobCounts = directWorkOrders
+                .Union(linkedWorkOrders)
+                .GroupBy(assignment => assignment.VendorId)
+                .Select(group => new
+                {
+                    VendorId = group.Key,
+                    TotalJobs = group.Count()
+                });
+
+            var armA =
+                from v in perTechnician
+                join jobCount in jobCounts on v.Id equals jobCount.VendorId into vendorJobCounts
+                from jobCount in vendorJobCounts.DefaultIfEmpty()
+                select new VendorDirectoryRow
+                {
+                    VendorId = v.Id,
+                    CompanyId = v.CompanyId ?? 0,
+                    CompanyName = v.Company != null ? v.Company.Name : v.CompanyName,
+                    ContactName = v.ContactName,
+                    Email = v.Email != null && v.Email.Trim() != ""
+                    ? v.Email
+                    : v.Company != null
+                        ? v.Company.Email
+                        : v.Email,
+                    Phone = v.Phone,
+                    CompanyPhone = v.Company != null &&
+                    v.Company.CompanyPhone != null && v.Company.CompanyPhone.Trim() != ""
+                    ? v.Company.CompanyPhone
+                    : v.CompanyPhone,
+                    PreferredContact = v.PreferredContact,
+                    Address = v.Company != null &&
+                    v.Company.Address != null && v.Company.Address.Trim() != ""
+                    ? v.Company.Address
+                    : v.Address,
+                    City = v.Company != null &&
+                    ((v.Company.City != null && v.Company.City.Trim() != "") ||
+                     (v.Company.State != null && v.Company.State.Trim() != "") ||
+                     (v.Company.Address != null && v.Company.Address.Trim() != ""))
+                    ? v.Company.City
+                    : v.City,
+                    State = v.Company != null &&
+                    ((v.Company.City != null && v.Company.City.Trim() != "") ||
+                     (v.Company.State != null && v.Company.State.Trim() != "") ||
+                     (v.Company.Address != null && v.Company.Address.Trim() != ""))
+                    ? v.Company.State
+                    : v.State,
+                    Zip = v.Zip,
+                    TradeSpecialties = v.TradeSpecialties,
+                    GoogleMapsUrl = v.GoogleMapsUrl,
+                    Notes = v.Company != null ? v.Company.Notes : null,
+                    IsActive = v.IsActive,
+                    TotalJobs = (int?)jobCount.TotalJobs ?? 0
+                };
+
             // Arm B: company-only rows for companies with zero non-deleted technicians.
             // These carry a null VendorId and a populated CompanyId. A company has no
             // active/inactive flag of its own, so it is shown unless the caller explicitly
@@ -272,15 +743,70 @@ namespace SeaHaven.DataServices.Implementation
                 union = armA.Concat(armB);
             }
 
-            return ApplyDirectoryRowFilters(
-                union,
-                search,
-                companies,
-                trades,
-                locations,
-                jobBuckets);
+            return union;
         }
 
+        // Same matching rules the directory has always applied to a projected row:
+        // company name, contact name, email, trades, canonical city/state, the
+        // canonical address only when city/state are both absent, and zip.
+        private static Expression BuildSearchMatchBody(ParameterExpression row, string normalizedSearch)
+        {
+            Expression ContainsLower(string propertyName)
+            {
+                var lowered = Expression.Call(
+                    CoalescedOrEmpty(row, propertyName),
+                    nameof(string.ToLower),
+                    Type.EmptyTypes);
+                return Contains(lowered, Expression.Constant(normalizedSearch));
+            }
+
+            var cityBlank = IsBlank(Expression.Property(row, nameof(VendorDirectoryRow.City)));
+            var stateBlank = IsBlank(Expression.Property(row, nameof(VendorDirectoryRow.State)));
+
+            Expression? body = null;
+            body = OrElse(body, ContainsLower(nameof(VendorDirectoryRow.CompanyName)));
+            body = OrElse(body, ContainsLower(nameof(VendorDirectoryRow.ContactName)));
+            body = OrElse(body, ContainsLower(nameof(VendorDirectoryRow.Email)));
+            body = OrElse(body, ContainsLower(nameof(VendorDirectoryRow.TradeSpecialties)));
+            body = OrElse(body, ContainsLower(nameof(VendorDirectoryRow.City)));
+            body = OrElse(body, ContainsLower(nameof(VendorDirectoryRow.State)));
+            body = OrElse(body, Expression.AndAlso(
+                Expression.AndAlso(cityBlank, stateBlank),
+                ContainsLower(nameof(VendorDirectoryRow.Address))));
+            body = OrElse(body, ContainsLower(nameof(VendorDirectoryRow.Zip)));
+            return body!;
+        }
+
+        private static Expression BuildCompanyNameMatchBody(
+            ParameterExpression row,
+            IReadOnlyCollection<string> selectedCompanies)
+        {
+            var lowered = Expression.Call(
+                CoalescedOrEmpty(row, nameof(VendorDirectoryRow.CompanyName)),
+                nameof(string.ToLower),
+                Type.EmptyTypes);
+            return Expression.Call(
+                typeof(Enumerable),
+                nameof(Enumerable.Contains),
+                new[] { typeof(string) },
+                Expression.Constant(selectedCompanies),
+                lowered);
+        }
+
+        private static Expression CoalescedOrEmpty(ParameterExpression row, string propertyName) =>
+            Expression.Coalesce(
+                Expression.Property(row, propertyName),
+                Expression.Constant(string.Empty));
+
+        private static Expression LowerTrimmed(ParameterExpression row, string propertyName) =>
+            Expression.Call(
+                Expression.Call(
+                    CoalescedOrEmpty(row, propertyName),
+                    nameof(string.Trim),
+                    Type.EmptyTypes),
+                nameof(string.ToLower),
+                Type.EmptyTypes);
+
         private static IQueryable<VendorDirectoryRow> ApplyDirectoryRowFilters(
             IQueryable<VendorDirectoryRow> query,
             string? search,
@@ -463,6 +989,15 @@ namespace SeaHaven.DataServices.Implementation
             IReadOnlyCollection<string> selectedTrades)
         {
             var vendor = Expression.Parameter(typeof(T), "vendor");
+            return Expression.Lambda<Func<T, bool>>(
+                BuildTradeMatchBody<T>(vendor, selectedTrades),
+                vendor);
+        }
+
+        private static Expression BuildTradeMatchBody<T>(
+            ParameterExpression vendor,
+            IReadOnlyCollection<string> selectedTrades)
+        {
             var specialties = Expression.Coalesce(
                 Expression.Property(vendor, nameof(Vendor.TradeSpecialties)),
                 Expression.Constant(string.Empty));
@@ -490,13 +1025,22 @@ namespace SeaHaven.DataServices.Implementation
                 }
             }
 
-            return Expression.Lambda<Func<T, bool>>(body ?? Expression.Constant(false), vendor);
+            return body ?? Expression.Constant(false);
         }
 
         private static Expression<Func<T, bool>> BuildLocationPredicate<T>(
             IReadOnlyCollection<string> selectedLocations)
         {
             var vendor = Expression.Parameter(typeof(T), "vendor");
+            return Expression.Lambda<Func<T, bool>>(
+                BuildLocationMatchBody<T>(vendor, selectedLocations),
+                vendor);
+        }
+
+        private static Expression BuildLocationMatchBody<T>(
+            ParameterExpression vendor,
+            IReadOnlyCollection<string> selectedLocations)
+        {
             var label = BuildLocationLabelBody(vendor);
             var lowered = Expression.Call(label, nameof(string.ToLower), Type.EmptyTypes);
 
@@ -504,7 +1048,7 @@ namespace SeaHaven.DataServices.Implementation
             foreach (var location in selectedLocations)
                 body = OrElse(body, Expression.Equal(lowered, Expression.Constant(location)));
 
-            return Expression.Lambda<Func<T, bool>>(body ?? Expression.Constant(false), vendor);
+            return body ?? Expression.Constant(false);
         }
 
         private static Expression BuildLocationLabelBody(ParameterExpression vendor)
diff --git a/SeaHaven.DataServices/Interfaces/IVendorDataService.cs b/SeaHaven.DataServices/Interfaces/IVendorDataService.cs
index 069519a..2e08912 100644
--- a/SeaHaven.DataServices/Interfaces/IVendorDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IVendorDataService.cs
@@ -35,9 +35,9 @@ namespace SeaHaven.DataServices.Interfaces
             IReadOnlyCollection<string>? locations = null,
             IReadOnlyCollection<string>? jobBuckets = null);
 
-        // SH-198 vendor directory: per-technician rows UNION company-only rows
-        // (companies with zero non-deleted technicians). Company-only rows carry a
-        // null VendorId and a populated CompanyId. Notes come from VendorCompany.Notes.
+        // Compatibility path for existing per-technician consumers (GetVendorList)
+        // and behavior tests. GetVendorDirectoryList uses the company-grouped path
+        // below.
         Task<(IReadOnlyList<VendorDirectoryRow> Items, int TotalCount)> GetDirectoryPagedAsync(
             int page,
             int pageSize,
@@ -48,6 +48,25 @@ namespace SeaHaven.DataServices.Interfaces
             IReadOnlyCollection<string>? locations = null,
             IReadOnlyCollection<string>? jobBuckets = null,
             CancellationToken cancellationToken = default);
+
+        // SH-281 company directory: linked vendors group by real CompanyId; unlinked
+        // legacy vendors group by trimmed case-insensitive CompanyName (missing names
+        // isolated by vendor identity); company-only groups remain. Facet filters
+        // select a group when any status-eligible row matches; job buckets apply to
+        // the summed per-technician TotalJobs. Bounded group keys are selected and
+        // paginated in SQL, then the full status-eligible roster is fetched only for
+        // those keys (search/trade/location are not reapplied). TotalCount counts
+        // company groups.
+        Task<(IReadOnlyList<VendorCompanyGroup> Items, int TotalCount)> GetCompanyDirectoryPagedAsync(
+            int page,
+            int pageSize,
+            string? search = null,
+            bool? isActive = true,
+            IReadOnlyCollection<string>? companies = null,
+            IReadOnlyCollection<string>? trades = null,
+            IReadOnlyCollection<string>? locations = null,
+            IReadOnlyCollection<string>? jobBuckets = null,
+            CancellationToken cancellationToken = default);
         Task<Vendor> AddAsync(Vendor vendor);
         Task UpdateAsync(Vendor vendor);
         Task DeleteAsync(int id);
diff --git a/SeaHaven.DataServices/Models/VendorDirectoryReadModels.cs b/SeaHaven.DataServices/Models/VendorDirectoryReadModels.cs
index 763f020..dff7be9 100644
--- a/SeaHaven.DataServices/Models/VendorDirectoryReadModels.cs
+++ b/SeaHaven.DataServices/Models/VendorDirectoryReadModels.cs
@@ -20,4 +20,112 @@ namespace SeaHaven.DataServices.Models
         public bool IsActive { get; set; }
         public int TotalJobs { get; set; }
     }
+
+    // SH-281 company directory: per-row source for the grouped key query. Carries the
+    // company group key parts (CompanyId 0 = unlinked; NameKey groups unlinked legacy
+    // vendors by trimmed case-insensitive CompanyName; VendorKey isolates vendors with
+    // a missing name by vendor identity) plus one 0/1 match flag per facet filter so a
+    // group can be selected when any status-eligible row matches that facet.
+    internal sealed class VendorDirectoryGroupSourceRow
+    {
+        public int? VendorId { get; set; }
+        public int CompanyId { get; set; }
+        public string NameKey { get; set; } = string.Empty;
+        public int VendorKey { get; set; }
+        public int TotalJobs { get; set; }
+        public int SearchFlag { get; set; }
+        public int CompanyFlag { get; set; }
+        public int TradeFlag { get; set; }
+        public int LocationFlag { get; set; }
+    }
+
+    // SH-281: one row per company group after SQL grouping — the bounded key page.
+    internal sealed class VendorCompanyGroupKeyRow
+    {
+        public int CompanyId { get; set; }
+        public string NameKey { get; set; } = string.Empty;
+        public int VendorKey { get; set; }
+        public int? MaxVendorId { get; set; }
+        public int TotalJobs { get; set; }
+        public int SearchMatch { get; set; }
+        public int CompanyMatch { get; set; }
+        public int TradeMatch { get; set; }
+        public int LocationMatch { get; set; }
+    }
+
+    // SH-281: full status-eligible roster row (phase 2) carrying both the vendor's own
+    // technician fields and the linked VendorCompany canonical fields, so group
+    // assembly can apply the existing company-canonical projections in memory without
+    // reapplying search/trade/location filters.
+    internal sealed class VendorDirectoryRosterRow
+    {
+        public int VendorId { get; set; }
+        public int? CompanyId { get; set; }
+        public string? CompanyName { get; set; }
+        public string? CanonicalCompanyName { get; set; }
+        public string? CompanyEmail { get; set; }
+        public string? CompanyPhone { get; set; }
+        public string? CompanyAddress { get; set; }
+        public string? CompanyCity { get; set; }
+        public string? CompanyState { get; set; }
+        public string? CompanyNotes { get; set; }
+        public string? ContactName { get; set; }
+        public string? Email { get; set; }
+        public string? Phone { get; set; }
+        public string? PreferredContact { get; set; }
+        public string? VendorCompanyPhone { get; set; }
+        public string? Address { get; set; }
+        public string? City { get; set; }
+        public string? State { get; set; }
+        public string? Zip { get; set; }
+        public string? TradeSpecialties { get; set; }
+        public string? GoogleMapsUrl { get; set; }
+        public bool IsActive { get; set; }
+        public int TotalJobs { get; set; }
+        public string NameKey { get; set; } = string.Empty;
+        public int VendorKey { get; set; }
+    }
+
+    // SH-281: one technician inside a company group.
+    public sealed class VendorCompanyGroupTechnician
+    {
+        public int Id { get; set; }
+        public string? ContactName { get; set; }
+        public string? Email { get; set; }
+        public string? Phone { get; set; }
+        public string? PreferredContact { get; set; }
+        public string? TradeSpecialties { get; set; }
+        public bool IsActive { get; set; }
+        public int TotalJobs { get; set; }
+    }
+
+    // SH-281 company directory group: linked vendors collapse by real CompanyId;
+    // unlinked legacy vendors group by trimmed case-insensitive CompanyName (vendors
+    // with a missing name stay isolated by vendor identity); companies with zero
+    // non-deleted technicians remain as company-only groups. Top-level technician
+    // fields come from the primary technician (newest VendorId, promoted when a
+    // nonblank search matches a non-primary technician); company fields are
+    // company-canonical as the existing projections intend; TotalJobs is the sum of
+    // every status-eligible technician's distinct work-order count.
+    public sealed class VendorCompanyGroup
+    {
+        public int? Id { get; set; }
+        public int? CompanyId { get; set; }
+        public string? CompanyName { get; set; }
+        public string? ContactName { get; set; }
+        public string? Email { get; set; }
+        public string? Phone { get; set; }
+        public string? CompanyPhone { get; set; }
+        public string? PreferredContact { get; set; }
+        public string? Address { get; set; }
+        public string? City { get; set; }
+        public string? State { get; set; }
+        public string? Zip { get; set; }
+        public string? TradeSpecialties { get; set; }
+        public string? GoogleMapsUrl { get; set; }
+        public string? Notes { get; set; }
+        public bool IsActive { get; set; }
+        public int TotalJobs { get; set; }
+        public IReadOnlyList<VendorCompanyGroupTechnician> Technicians { get; set; } = Array.Empty<VendorCompanyGroupTechnician>();
+    }
 }
diff --git a/SeaHaven.Services/DTOs/VendorDTOs.cs b/SeaHaven.Services/DTOs/VendorDTOs.cs
index bf30e27..12fb5b8 100644
--- a/SeaHaven.Services/DTOs/VendorDTOs.cs
+++ b/SeaHaven.Services/DTOs/VendorDTOs.cs
@@ -21,8 +21,13 @@ namespace SeaHaven.Services.DTOs
         public bool IsActive { get; set; }
     }
 
-    // SH-198 vendor directory row. Id is the nullable vendor id (null for company-only
-    // rows that have zero technicians); CompanyId is always populated.
+    // Shared directory row. On the SH-198 legacy per-technician path (GetVendorList)
+    // Id is the technician's own vendor id and Technicians stays empty — the legacy
+    // response shape does not project it. On the SH-281 company-grouped path
+    // (GetVendorDirectoryList) Id is the primary technician's vendor id (null for
+    // company-only groups that have zero technicians); CompanyId is populated for
+    // linked and company-only groups. Technicians carries the full status-eligible
+    // roster of the company group.
     public class VendorDirectoryItemDTO
     {
         public int? Id { get; set; }
@@ -42,6 +47,20 @@ namespace SeaHaven.Services.DTOs
         public string? Notes { get; set; }
         public int TotalJobs { get; set; }
         public bool IsActive { get; set; }
+        public List<VendorDirectoryTechnicianDTO> Technicians { get; set; } = new();
+    }
+
+    // SH-281: one technician inside a company group; Email/Phone stay technician-owned.
+    public class VendorDirectoryTechnicianDTO
+    {
+        public int Id { get; set; }
+        public string? ContactName { get; set; }
+        public string? Email { get; set; }
+        public string? Phone { get; set; }
+        public string? PreferredContact { get; set; }
+        public string? TradeSpecialties { get; set; }
+        public bool IsActive { get; set; }
+        public int TotalJobs { get; set; }
     }
 
     public class CreateVendorDTO
diff --git a/SeaHaven.Services/Implementation/VendorService.cs b/SeaHaven.Services/Implementation/VendorService.cs
index c2ac206..5e4ce40 100644
--- a/SeaHaven.Services/Implementation/VendorService.cs
+++ b/SeaHaven.Services/Implementation/VendorService.cs
@@ -16,6 +16,7 @@ namespace SeaHaven.Services.Implementation
 {
     public class VendorService : IVendorService
     {
+        private const int MaxDirectoryPageSize = 100;
         private static readonly string[] TerminalLegacyStatuses =
             { "completed", "cancelled", "canceled" };
 
@@ -94,7 +95,10 @@ namespace SeaHaven.Services.Implementation
             };
         }
 
-        public async Task<PagedResult<VendorDirectoryItemDTO>> GetVendorDirectoryPagedAsync(
+        // SH-198 legacy per-technician directory contract (GetVendorList): raw
+        // pagination semantics are part of the compatibility surface, so pageSize
+        // is forwarded unclamped.
+        public async Task<PagedResult<VendorDirectoryItemDTO>> GetVendorTechnicianDirectoryPagedAsync(
             int page,
             int pageSize,
             string? search = null,
@@ -146,6 +150,74 @@ namespace SeaHaven.Services.Implementation
             TotalJobs = row.TotalJobs
         };
 
+        // SH-281 company-grouped directory (GetVendorDirectoryList).
+        public async Task<PagedResult<VendorDirectoryItemDTO>> GetVendorCompanyDirectoryPagedAsync(
+            int page,
+            int pageSize,
+            string? search = null,
+            bool? isActive = true,
+            IReadOnlyCollection<string>? companies = null,
+            IReadOnlyCollection<string>? trades = null,
+            IReadOnlyCollection<string>? locations = null,
+            IReadOnlyCollection<string>? jobBuckets = null,
+            CancellationToken cancellationToken = default)
+        {
+            var normalizedPage = Math.Max(1, page);
+            var normalizedPageSize = Math.Clamp(pageSize, 1, MaxDirectoryPageSize);
+            var (items, totalCount) = await _vendorDataService.GetCompanyDirectoryPagedAsync(
+                normalizedPage,
+                normalizedPageSize,
+                search,
+                isActive,
+                companies,
+                trades,
+                locations,
+                jobBuckets,
+                cancellationToken);
+
+            return new PagedResult<VendorDirectoryItemDTO>
+            {
+                Items = items.Select(MapToCompanyGroup).ToList(),
+                TotalCount = totalCount,
+                Page = normalizedPage,
+                PageSize = normalizedPageSize
+            };
+        }
+
+        private static VendorDirectoryItemDTO MapToCompanyGroup(VendorCompanyGroup group) => new()
+        {
+            Id = group.Id,
+            CompanyId = group.CompanyId,
+            CompanyName = group.CompanyName,
+            ContactName = group.ContactName,
+            Email = group.Email,
+            Phone = group.Phone,
+            CompanyPhone = group.CompanyPhone,
+            PreferredContact = group.PreferredContact,
+            Address = group.Address,
+            City = group.City,
+            State = group.State,
+            Zipcode = group.Zip,
+            TradeSpecialties = group.TradeSpecialties,
+            GoogleMapsUrl = group.GoogleMapsUrl,
+            Notes = group.Notes,
+            IsActive = group.IsActive,
+            TotalJobs = group.TotalJobs,
+            Technicians = group.Technicians.Select(MapToTechnician).ToList()
+        };
+
+        private static VendorDirectoryTechnicianDTO MapToTechnician(VendorCompanyGroupTechnician technician) => new()
+        {
+            Id = technician.Id,
+            ContactName = technician.ContactName,
+            Email = technician.Email,
+            Phone = technician.Phone,
+            PreferredContact = technician.PreferredContact,
+            TradeSpecialties = technician.TradeSpecialties,
+            IsActive = technician.IsActive,
+            TotalJobs = technician.TotalJobs
+        };
+
         public async Task<VendorDTO> CreateVendorAsync(CreateVendorDTO dto, string userId)
         {
             NormalizePhoneFields(dto);
diff --git a/SeaHaven.Services/Interfaces/IVendorService.cs b/SeaHaven.Services/Interfaces/IVendorService.cs
index 68e8ae9..74782af 100644
--- a/SeaHaven.Services/Interfaces/IVendorService.cs
+++ b/SeaHaven.Services/Interfaces/IVendorService.cs
@@ -17,8 +17,22 @@ namespace SeaHaven.Services.Interfaces
             IReadOnlyCollection<string>? locations = null,
             IReadOnlyCollection<string>? jobBuckets = null);
 
-        // SH-198 vendor directory: per-technician rows UNION company-only rows.
-        Task<PagedResult<VendorDirectoryItemDTO>> GetVendorDirectoryPagedAsync(
+        // SH-198 legacy vendor directory contract backing GetVendorList: one row per
+        // technician (per-technician rows UNION company-only rows), raw pagination.
+        Task<PagedResult<VendorDirectoryItemDTO>> GetVendorTechnicianDirectoryPagedAsync(
+            int page,
+            int pageSize,
+            string? search = null,
+            bool? isActive = true,
+            IReadOnlyCollection<string>? companies = null,
+            IReadOnlyCollection<string>? trades = null,
+            IReadOnlyCollection<string>? locations = null,
+            IReadOnlyCollection<string>? jobBuckets = null,
+            CancellationToken cancellationToken = default);
+
+        // SH-281 company directory backing GetVendorDirectoryList: company-grouped
+        // rows with nested technicians and bounded page sizes.
+        Task<PagedResult<VendorDirectoryItemDTO>> GetVendorCompanyDirectoryPagedAsync(
             int page,
             int pageSize,
             string? search = null,

From 3a4af64a64be6f3506d5c12927c4412f95ea38b4 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Tue, 15 Sep 2026 16:08:14 -0300
Subject: [PATCH 002/183] fix(observability): preserve backend release identity
 (#114)

---
 .../SentryObservabilityTests.cs               | 70 ++++++++++++++++++-
 .../Observability/SentryObservability.cs      | 43 +++++++++---
 docs/adr/0002-sentry-observability.md         |  7 +-
 scripts/package-elastic-beanstalk.sh          |  1 +
 4 files changed, 108 insertions(+), 13 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/SentryObservabilityTests.cs b/Api.SeaHavenIndustries.Tests/SentryObservabilityTests.cs
index cb760e8..4b83b8d 100644
--- a/Api.SeaHavenIndustries.Tests/SentryObservabilityTests.cs
+++ b/Api.SeaHavenIndustries.Tests/SentryObservabilityTests.cs
@@ -1,3 +1,4 @@
+using System.Reflection;
 using System.Security.Claims;
 using Api.SeaHavenIndustries.Observability;
 using FluentAssertions;
@@ -14,6 +15,7 @@ namespace Api.SeaHavenIndustries.Tests;
 public class SentryObservabilityTests
 {
     private static readonly string ValidSha = new string('a', 40);
+    private static readonly string UpperSha = "ABCDEF0123456789ABCDEF0123456789ABCDEF01";
 
     [Fact]
     public void ResolveRelease_Accepts_ServicePrefixed40HexCommit()
@@ -23,15 +25,57 @@ public class SentryObservabilityTests
     }
 
     [Theory]
+    [InlineData(null)]
     [InlineData("1.0.0")]
     [InlineData("shoc-backend@abc")]
     [InlineData("shoc-backend@not-a-sha-at-all")]
-    [InlineData("other-service@" + "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa")]
+    [InlineData("other-service@aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa")]
+    [InlineData("SHOC-BACKEND@aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa")]
     [InlineData("")]
-    public void ResolveRelease_FallsBackToLocalDevelopment_ForNonReleaseVersion(string version)
+    [InlineData("shoc-backend@aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa")]
+    [InlineData("shoc-backend@aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa")]
+    [InlineData("shoc-backend@aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa+bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb")]
+    [InlineData("shoc-backend@aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa+dirty")]
+    [InlineData("shoc-backend@aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa+")]
+    [InlineData("shoc-backend@aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa++")]
+    [InlineData("shoc-backend@aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa+aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa+extra")]
+    public void ResolveRelease_FallsBackToLocalDevelopment_ForNonReleaseVersion(string? version)
     {
         SentryObservability.ResolveRelease(version)
             .Should().Be(SentryObservability.LocalDevelopmentRelease);
+        SentryObservability.ResolveCommitSha(version)
+            .Should().BeNull();
+    }
+
+    [Fact]
+    public void ResolveRelease_Accepts_SdkAppendedMatchingSourceRevisionSuffix()
+    {
+        var informationalVersion = "shoc-backend@" + ValidSha + "+" + ValidSha;
+
+        SentryObservability.ResolveRelease(informationalVersion)
+            .Should().Be("shoc-backend@" + ValidSha);
+        SentryObservability.ResolveCommitSha(informationalVersion)
+            .Should().Be(ValidSha);
+    }
+
+    [Fact]
+    public void ResolveRelease_Accepts_SuffixDifferingOnlyInCase_FromTheCommitSha()
+    {
+        var canonicalSha = UpperSha.ToLowerInvariant();
+
+        SentryObservability.ResolveRelease("shoc-backend@" + UpperSha + "+" + canonicalSha)
+            .Should().Be("shoc-backend@" + canonicalSha);
+    }
+
+    [Fact]
+    public void ResolveRelease_NormalizesUppercaseCommitShaToLowercase()
+    {
+        var canonicalSha = UpperSha.ToLowerInvariant();
+
+        SentryObservability.ResolveRelease("shoc-backend@" + UpperSha)
+            .Should().Be("shoc-backend@" + canonicalSha);
+        SentryObservability.ResolveCommitSha("shoc-backend@" + UpperSha)
+            .Should().Be(canonicalSha);
     }
 
     [Fact]
@@ -39,6 +83,28 @@ public class SentryObservabilityTests
     {
         var release = SentryObservability.ResolveRelease("shoc-backend@" + ValidSha);
         release[(SentryObservability.ServiceName.Length + 1)..].Should().Be(ValidSha);
+        SentryObservability.ResolveCommitSha("shoc-backend@" + ValidSha)
+            .Should().Be(ValidSha);
+    }
+
+    [Fact]
+    public void ResolveRelease_AndCommitSha_FromNonReleaseAssembly_FallBackSafely()
+    {
+        var assembly = typeof(SentryObservabilityTests).Assembly;
+
+        SentryObservability.ResolveRelease(assembly)
+            .Should().Be(SentryObservability.LocalDevelopmentRelease);
+        SentryObservability.ResolveCommitSha(assembly)
+            .Should().BeNull();
+    }
+
+    [Fact]
+    public void ResolveRelease_AndCommitSha_FromNullAssembly_FallBackSafely()
+    {
+        SentryObservability.ResolveRelease((Assembly?)null)
+            .Should().Be(SentryObservability.LocalDevelopmentRelease);
+        SentryObservability.ResolveCommitSha((Assembly?)null)
+            .Should().BeNull();
     }
 
     [Fact]
diff --git a/Api.SeaHavenIndustries/Observability/SentryObservability.cs b/Api.SeaHavenIndustries/Observability/SentryObservability.cs
index 0a1ec56..f58f8f7 100644
--- a/Api.SeaHavenIndustries/Observability/SentryObservability.cs
+++ b/Api.SeaHavenIndustries/Observability/SentryObservability.cs
@@ -29,21 +29,46 @@ public static class SentryObservability
             .GetCustomAttribute<AssemblyInformationalVersionAttribute>()?
             .InformationalVersion;
 
-        return IsReleaseInformationalVersion(informationalVersion)
-            ? informationalVersion![ReleasePrefix.Length..]
-            : null;
+        return ResolveCommitSha(informationalVersion);
     }
 
     public static string ResolveRelease(string? informationalVersion) =>
-        IsReleaseInformationalVersion(informationalVersion)
-            ? informationalVersion!
+        TryResolveCommitSha(informationalVersion, out var commitSha)
+            ? ReleasePrefix + commitSha
             : LocalDevelopmentRelease;
 
+    public static string? ResolveCommitSha(string? informationalVersion) =>
+        TryResolveCommitSha(informationalVersion, out var commitSha)
+            ? commitSha
+            : null;
+
     public static bool IsReleaseInformationalVersion(string? value) =>
-        value is not null
-        && value.StartsWith(ReleasePrefix, StringComparison.Ordinal)
-        && value.Length == ReleasePrefix.Length + CommitShaLength
-        && value[ReleasePrefix.Length..].All(c => c is >= '0' and <= '9' or >= 'a' and <= 'f' or >= 'A' and <= 'F');
+        TryResolveCommitSha(value, out _);
+
+    private static bool TryResolveCommitSha(string? value, out string? commitSha)
+    {
+        commitSha = null;
+
+        if (value is null || !value.StartsWith(ReleasePrefix, StringComparison.Ordinal))
+            return false;
+
+        var body = value[ReleasePrefix.Length..];
+        var suffixSeparatorIndex = body.IndexOf('+');
+        var sha = suffixSeparatorIndex < 0 ? body : body[..suffixSeparatorIndex];
+
+        if (sha.Length != CommitShaLength || !sha.All(IsCommitShaHexDigit))
+            return false;
+
+        if (suffixSeparatorIndex >= 0
+            && !string.Equals(body[(suffixSeparatorIndex + 1)..], sha, StringComparison.OrdinalIgnoreCase))
+            return false;
+
+        commitSha = sha.ToLowerInvariant();
+        return true;
+    }
+
+    private static bool IsCommitShaHexDigit(char c) =>
+        c is >= '0' and <= '9' or >= 'a' and <= 'f' or >= 'A' and <= 'F';
 
     public static void ConfigureRequest(IHub hub, HttpContext context)
     {
diff --git a/docs/adr/0002-sentry-observability.md b/docs/adr/0002-sentry-observability.md
index 6bf7c52..37a2a78 100644
--- a/docs/adr/0002-sentry-observability.md
+++ b/docs/adr/0002-sentry-observability.md
@@ -14,11 +14,14 @@ route values, query strings, or identity claims.
 ## Decision
 
 1. **Release identity.** `SentryObservability.ResolveRelease(Assembly)` accepts an
-   informational version shaped `shoc-backend@<40 hex commit sha>` and otherwise
-   resolves to `local-development`. `scripts/package-elastic-beanstalk.sh` resolves
+   informational version shaped `shoc-backend@<40 hex commit sha>`, tolerates the
+   .NET SDK's matching `+<same sha>` suffix for compatibility, canonicalizes the
+   result to lowercase, and otherwise resolves to `local-development`.
+   `scripts/package-elastic-beanstalk.sh` resolves
    the commit from `APP_COMMIT_SHA` → `GITHUB_SHA` → `git rev-parse HEAD`, fails
    when `CI=true` cannot produce a valid 40-hex sha, and publishes with
    `-p:SourceRevisionId`, `-p:InformationalVersion=shoc-backend@<sha>`,
+   `-p:IncludeSourceRevisionInInformationalVersion=false`,
    `-p:DebugType=portable`, `-p:DebugSymbols=true`.
 2. **Default tags.** `service=shoc-backend` and `app.commit=<sha | local-development>`
    on `SentryOptions.DefaultTags`. All events use the same commit-addressed
diff --git a/scripts/package-elastic-beanstalk.sh b/scripts/package-elastic-beanstalk.sh
index 27e1288..bef20cf 100755
--- a/scripts/package-elastic-beanstalk.sh
+++ b/scripts/package-elastic-beanstalk.sh
@@ -112,6 +112,7 @@ log "publish $API_PROJECT (Release, self-contained, $RUNTIME)"
   -p:UseAppHost=true \
   -p:SourceRevisionId="$COMMIT_SHA" \
   -p:InformationalVersion="shoc-backend@$COMMIT_SHA" \
+  -p:IncludeSourceRevisionInInformationalVersion=false \
   -p:DebugType=portable \
   -p:DebugSymbols=true
 

From 1a6edd255a1d67c06b602258540c6b0111d3501d Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Tue, 15 Sep 2026 16:32:30 -0300
Subject: [PATCH 003/183] feat(locations): filter sites by state (#117)

---
 .../LocationControllerTests.cs                | 42 ++++++++-
 .../LocationDataServiceTests.cs               | 89 +++++++++++++++++++
 .../LocationServiceTests.cs                   | 89 ++++++++++++++++++-
 .../Controllers/LocationController.cs         | 64 +++++++------
 .../Implementation/LocationDataService.cs     |  6 ++
 .../Interfaces/ILocationDataService.cs        |  2 +-
 SeaHaven.Services/Helpers/UsStateCodes.cs     | 68 ++++++++++++++
 .../Implementation/LocationService.cs         | 33 ++++++-
 .../Interfaces/ILocationService.cs            |  2 +-
 .../WorkOrderAccountScopeTests.cs             |  4 +-
 10 files changed, 362 insertions(+), 37 deletions(-)
 create mode 100644 Api.SeaHavenIndustries.Tests/LocationDataServiceTests.cs
 create mode 100644 SeaHaven.Services/Helpers/UsStateCodes.cs

diff --git a/Api.SeaHavenIndustries.Tests/LocationControllerTests.cs b/Api.SeaHavenIndustries.Tests/LocationControllerTests.cs
index f8f3487..47e53dd 100644
--- a/Api.SeaHavenIndustries.Tests/LocationControllerTests.cs
+++ b/Api.SeaHavenIndustries.Tests/LocationControllerTests.cs
@@ -4,6 +4,7 @@ using Api.SeaHavenIndustries.DTOs;
 using Data.SeaHavenIndustries;
 using FluentAssertions;
 using FluentValidation;
+using FluentValidation.Results;
 using Microsoft.AspNetCore.Mvc;
 using Microsoft.Extensions.Logging;
 using Moq;
@@ -25,7 +26,7 @@ public class LocationControllerTests
     public async Task GetLocationList_ReturnsPaginationEnvelopeWithServiceData()
     {
         var service = new Mock<ILocationService>();
-        service.Setup(s => s.GetLocationListPagedAsync(1, 10, "a", It.IsAny<CancellationToken>()))
+        service.Setup(s => s.GetLocationListPagedAsync(1, 10, "a", null, It.IsAny<CancellationToken>()))
                .ReturnsAsync(new PagedResult<LocationDTO>
                {
                    Items = new List<LocationDTO> { new() { Id = 1, Name = "Site" } },
@@ -34,7 +35,7 @@ public class LocationControllerTests
                    PageSize = 10
                });
 
-        var result = await NewController(service).GetLocationList("a", 1, 10, CancellationToken.None);
+        var result = await NewController(service).GetLocationList("a", 1, 10, cancellationToken: CancellationToken.None);
 
         var ok = result.Should().BeOfType<OkObjectResult>().Subject;
         var envelope = ok.Value.Should().BeOfType<Pagination_DTO>().Subject;
@@ -44,6 +45,43 @@ public class LocationControllerTests
         envelope.TotalPages.Should().Be(1);
     }
 
+    [Fact]
+    public async Task GetLocationList_PassesStatesFilterToService()
+    {
+        var service = new Mock<ILocationService>();
+        service.Setup(s => s.GetLocationListPagedAsync(1, 10, null, "tx, mo", It.IsAny<CancellationToken>()))
+               .ReturnsAsync(new PagedResult<LocationDTO>
+               {
+                   Items = new List<LocationDTO>(),
+                   TotalCount = 0,
+                   Page = 1,
+                   PageSize = 10
+               });
+
+        var result = await NewController(service).GetLocationList(null, 1, 10, "tx, mo", CancellationToken.None);
+
+        result.Should().BeOfType<OkObjectResult>();
+        service.VerifyAll();
+    }
+
+    [Fact]
+    public async Task GetLocationList_WhenStatesInvalid_ReturnsExistingValidationErrorShape()
+    {
+        var service = new Mock<ILocationService>();
+        service.Setup(s => s.GetLocationListPagedAsync(It.IsAny<int>(), It.IsAny<int>(), It.IsAny<string?>(), It.IsAny<string?>(), It.IsAny<CancellationToken>()))
+               .ThrowsAsync(new ValidationException(new[]
+               {
+                   new ValidationFailure("states", "states must be valid US postal abbreviations: ZZ.")
+               }));
+
+        var result = await NewController(service).GetLocationList(null, 1, 10, "ZZ", CancellationToken.None);
+
+        var bad = result.Should().BeOfType<BadRequestObjectResult>().Subject;
+        var response = bad.Value.Should().BeOfType<Response>().Subject;
+        response.Status.Should().Be("Validation Error");
+        response.Message.Should().Contain("ZZ");
+    }
+
     [Fact]
     public async Task GetLocationById_WhenMissing_ReturnsNotFoundAndDoesNotLeakEntity()
     {
diff --git a/Api.SeaHavenIndustries.Tests/LocationDataServiceTests.cs b/Api.SeaHavenIndustries.Tests/LocationDataServiceTests.cs
new file mode 100644
index 0000000..0dafeaf
--- /dev/null
+++ b/Api.SeaHavenIndustries.Tests/LocationDataServiceTests.cs
@@ -0,0 +1,89 @@
+using Data.SeaHavenIndustries;
+using FluentAssertions;
+using Microsoft.EntityFrameworkCore;
+using SeaHaven.DataServices.Implementation;
+using Xunit;
+
+namespace Api.SeaHavenIndustries.Tests;
+
+public class LocationDataServiceTests
+{
+    private static ApplicationDbContext NewContext()
+    {
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseInMemoryDatabase(Guid.NewGuid().ToString())
+            .Options;
+        return new ApplicationDbContext(options);
+    }
+
+    private static async Task SeedAsync(ApplicationDbContext ctx)
+    {
+        ctx.Locations.AddRange(
+            new Locations { Id = 1, Name = "Alpha Site", City = "Austin", State = "TX" },
+            new Locations { Id = 2, Name = "Beta Site", City = "Dallas", State = "TX" },
+            new Locations { Id = 3, Name = "Gamma Yard", City = "Kansas City", State = "MO" },
+            new Locations { Id = 4, Name = "Delta Hub", City = "Indianapolis", State = "indiana" },
+            new Locations { Id = 5, Name = "Epsilon Depot", City = "Houston", State = "TX" },
+            new Locations { Id = 6, Name = "Zeta Lot", City = "Nowhere", State = null });
+        await ctx.SaveChangesAsync();
+    }
+
+    [Fact]
+    public async Task GetListPagedAsync_WithoutStates_ReturnsAllRows()
+    {
+        await using var ctx = NewContext();
+        await SeedAsync(ctx);
+
+        var (items, totalCount) = await new LocationDataService(ctx)
+            .GetListPagedAsync(1, 10, null, null, CancellationToken.None);
+
+        totalCount.Should().Be(6);
+        items.Should().HaveCount(6);
+    }
+
+    [Fact]
+    public async Task GetListPagedAsync_AppliesStatesFilterBeforeCountAndPaging()
+    {
+        await using var ctx = NewContext();
+        await SeedAsync(ctx);
+
+        var (page1, totalCount) = await new LocationDataService(ctx)
+            .GetListPagedAsync(1, 2, null, new[] { "TX" }, CancellationToken.None);
+
+        totalCount.Should().Be(3, "count must reflect the state filter, not the whole table");
+        page1.Should().HaveCount(2);
+        page1.Select(l => l.Name).Should().ContainInOrder("Alpha Site", "Beta Site");
+
+        var (page2, totalCountAgain) = await new LocationDataService(ctx)
+            .GetListPagedAsync(2, 2, null, new[] { "TX" }, CancellationToken.None);
+
+        totalCountAgain.Should().Be(3);
+        page2.Select(l => l.Name).Should().ContainSingle("Epsilon Depot");
+    }
+
+    [Fact]
+    public async Task GetListPagedAsync_MultipleStates_KeepSearchFilter()
+    {
+        await using var ctx = NewContext();
+        await SeedAsync(ctx);
+
+        var (items, totalCount) = await new LocationDataService(ctx)
+            .GetListPagedAsync(1, 10, "Dallas", new[] { "TX", "MO" }, CancellationToken.None);
+
+        totalCount.Should().Be(1);
+        items.Should().ContainSingle().Which.Name.Should().Be("Beta Site");
+    }
+
+    [Fact]
+    public async Task GetListPagedAsync_StatesFilter_ExcludesNullAndNonMatchingStates()
+    {
+        await using var ctx = NewContext();
+        await SeedAsync(ctx);
+
+        var (items, totalCount) = await new LocationDataService(ctx)
+            .GetListPagedAsync(1, 10, null, new[] { "IN", "INDIANA", "MO", "MISSOURI" }, CancellationToken.None);
+
+        totalCount.Should().Be(2);
+        items.Select(l => l.State).Should().BeEquivalentTo("indiana", "MO");
+    }
+}
diff --git a/Api.SeaHavenIndustries.Tests/LocationServiceTests.cs b/Api.SeaHavenIndustries.Tests/LocationServiceTests.cs
index 838526d..c8986b6 100644
--- a/Api.SeaHavenIndustries.Tests/LocationServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/LocationServiceTests.cs
@@ -118,7 +118,7 @@ public class LocationServiceTests
         SeedLocation(ctx, "Beta Site", "Dallas");
         SeedLocation(ctx, "Gamma Yard", "Austin");
 
-        var page = await NewService(ctx).GetLocationListPagedAsync(1, 10, "Austin", CancellationToken.None);
+        var page = await NewService(ctx).GetLocationListPagedAsync(1, 10, "Austin", cancellationToken: CancellationToken.None);
 
         page.Items.Should().HaveCount(2);
         page.TotalCount.Should().Be(2);
@@ -126,6 +126,93 @@ public class LocationServiceTests
         page.Items.Select(l => l.Name).Should().NotBeNull();
     }
 
+    [Fact]
+    public async Task GetLocationListPagedAsync_NormalizesStates_CaseWhitespaceAndDuplicates()
+    {
+        var data = new Mock<ILocationDataService>();
+        IReadOnlyCollection<string>? captured = default;
+        data.Setup(d => d.GetListPagedAsync(1, 10, null, It.IsAny<IReadOnlyCollection<string>?>(), It.IsAny<CancellationToken>()))
+            .Callback<int, int, string?, IReadOnlyCollection<string>?, CancellationToken>((_, _, _, states, _) => captured = states)
+            .ReturnsAsync((new List<Locations>(), 0));
+
+        await NewServiceWithSpy(data.Object).GetLocationListPagedAsync(1, 10, null, " tx , Mo ,,TX,  ", CancellationToken.None);
+
+        captured.Should().NotBeNull();
+        captured.Should().BeEquivalentTo(new[] { "TX", "TEXAS", "MO", "MISSOURI" });
+        captured.Should().HaveCount(4);
+    }
+
+    [Fact]
+    public async Task GetLocationListPagedAsync_EmptyOrWhitespaceStates_PassesNoStateFilter()
+    {
+        foreach (var states in new[] { null, "", "   ", " , , " })
+        {
+            var data = new Mock<ILocationDataService>();
+            IReadOnlyCollection<string>? captured = default;
+            data.Setup(d => d.GetListPagedAsync(It.IsAny<int>(), It.IsAny<int>(), It.IsAny<string?>(), It.IsAny<IReadOnlyCollection<string>?>(), It.IsAny<CancellationToken>()))
+                .Callback<int, int, string?, IReadOnlyCollection<string>?, CancellationToken>((_, _, _, stateFilter, _) => captured = stateFilter)
+                .ReturnsAsync((new List<Locations>(), 0));
+
+            var page = await NewServiceWithSpy(data.Object).GetLocationListPagedAsync(1, 10, "search", states, CancellationToken.None);
+
+            captured.Should().BeNull($"states input '{states}' must mean no filter");
+            page.Should().NotBeNull();
+        }
+    }
+
+    [Fact]
+    public async Task GetLocationListPagedAsync_InvalidStates_ThrowsValidationAndNeverQueries()
+    {
+        var data = new Mock<ILocationDataService>();
+
+        var act = () => NewServiceWithSpy(data.Object).GetLocationListPagedAsync(1, 10, null, "TX, zz, QQ", CancellationToken.None);
+
+        (await act.Should().ThrowAsync<FluentValidation.ValidationException>())
+            .Which.Errors.Should().ContainSingle(e =>
+                e.PropertyName == "states"
+                && e.ErrorMessage.Contains("ZZ")
+                && e.ErrorMessage.Contains("QQ")
+                && !e.ErrorMessage.Contains("TX"));
+        data.Verify(d => d.GetListPagedAsync(It.IsAny<int>(), It.IsAny<int>(), It.IsAny<string?>(), It.IsAny<IReadOnlyCollection<string>?>(), It.IsAny<CancellationToken>()), Times.Never);
+    }
+
+    [Fact]
+    public async Task GetLocationListPagedAsync_AcceptsAllFiftyStateCodes()
+    {
+        var data = new Mock<ILocationDataService>();
+        data.Setup(d => d.GetListPagedAsync(It.IsAny<int>(), It.IsAny<int>(), It.IsAny<string?>(), It.IsAny<IReadOnlyCollection<string>?>(), It.IsAny<CancellationToken>()))
+            .ReturnsAsync((new List<Locations>(), 0));
+
+        var allStates = string.Join(",", SeaHaven.Services.Helpers.UsStateCodes.All);
+
+        var act = () => NewServiceWithSpy(data.Object).GetLocationListPagedAsync(1, 10, null, allStates, CancellationToken.None);
+
+        await act.Should().NotThrowAsync();
+    }
+
+    [Fact]
+    public async Task GetLocationListPagedAsync_AppliesNormalizedStatesThroughDataService()
+    {
+        using var ctx = NewContext();
+        SeedLocation(ctx, "Alpha Site", "Austin").State = "TX";
+        SeedLocation(ctx, "Beta Site", "Dallas").State = "TX";
+        SeedLocation(ctx, "Gamma Yard", "Kansas City").State = "MO";
+        SeedLocation(ctx, "Delta Hub", "Indianapolis").State = "IN";
+        await ctx.SaveChangesAsync();
+
+        var page = await NewService(ctx).GetLocationListPagedAsync(1, 10, null, " mo , tx ", CancellationToken.None);
+
+        page.TotalCount.Should().Be(3);
+        page.Items.Select(l => l.Name).Should().BeEquivalentTo("Alpha Site", "Beta Site", "Gamma Yard");
+    }
+
+    private static LocationService NewServiceWithSpy(ILocationDataService dataService) =>
+        new(
+            dataService,
+            Mock.Of<IAccountDataService>(),
+            new CreateLocationValidation(),
+            new UpdateLocationValidation());
+
     [Fact]
     public async Task GetLocationDetailAsync_ReturnsMappedDtoOrNull()
     {
diff --git a/Api.SeaHavenIndustries/Controllers/LocationController.cs b/Api.SeaHavenIndustries/Controllers/LocationController.cs
index 5c8bb30..4c11ff7 100644
--- a/Api.SeaHavenIndustries/Controllers/LocationController.cs
+++ b/Api.SeaHavenIndustries/Controllers/LocationController.cs
@@ -36,38 +36,46 @@ namespace Api.SeaHavenIndustries.Controllers
         }
 
         [HttpGet("GetLocationList")]
-        public async Task<IActionResult> GetLocationList(string? search = "", int page = 1, int pageSize = 10, CancellationToken cancellationToken = default)
+        public async Task<IActionResult> GetLocationList(string? search = "", int page = 1, int pageSize = 10, string? states = null, CancellationToken cancellationToken = default)
         {
-            var pagedResult = await _locationService.GetLocationListPagedAsync(page, pageSize, search, cancellationToken);
-
-            var data = pagedResult.Items.Select(l => new
+            try
             {
-                Id = l.Id,
-                Name = l.Name,
-                Title = l.Title,
-                Address = l.Address1,
-                Address1 = l.Address1,
-                Address2 = l.Address2,
-                City = l.City,
-                State = l.State,
-                ZipCode = l.Zip,
-                Phone = l.PhoneNumber,
-                Contact = (string?)null,
-                ContactEmail = l.Email,
-                Status = l.Status,
-                AccountId = l.AccountId
-            });
+                var pagedResult = await _locationService.GetLocationListPagedAsync(page, pageSize, search, states, cancellationToken);
 
-            var viewModel = new Pagination_DTO
+                var data = pagedResult.Items.Select(l => new
+                {
+                    Id = l.Id,
+                    Name = l.Name,
+                    Title = l.Title,
+                    Address = l.Address1,
+                    Address1 = l.Address1,
+                    Address2 = l.Address2,
+                    City = l.City,
+                    State = l.State,
+                    ZipCode = l.Zip,
+                    Phone = l.PhoneNumber,
+                    Contact = (string?)null,
+                    ContactEmail = l.Email,
+                    Status = l.Status,
+                    AccountId = l.AccountId
+                });
+
+                var viewModel = new Pagination_DTO
+                {
+                    Data = data,
+                    PageNumber = page,
+                    PageSize = pageSize,
+                    TotalCount = pagedResult.TotalCount,
+                    TotalPages = (int)Math.Ceiling(pagedResult.TotalCount / (double)pageSize)
+                };
+
+                return Ok(viewModel);
+            }
+            catch (ValidationException vex)
             {
-                Data = data,
-                PageNumber = page,
-                PageSize = pageSize,
-                TotalCount = pagedResult.TotalCount,
-                TotalPages = (int)Math.Ceiling(pagedResult.TotalCount / (double)pageSize)
-            };
-
-            return Ok(viewModel);
+                var errors = string.Join(", ", vex.Errors.Select(e => e.ErrorMessage));
+                return BadRequest(new Response { Status = "Validation Error", Message = errors });
+            }
         }
 
         [HttpGet("{id}")]
diff --git a/SeaHaven.DataServices/Implementation/LocationDataService.cs b/SeaHaven.DataServices/Implementation/LocationDataService.cs
index 7a589e7..5ea6983 100644
--- a/SeaHaven.DataServices/Implementation/LocationDataService.cs
+++ b/SeaHaven.DataServices/Implementation/LocationDataService.cs
@@ -135,6 +135,7 @@ namespace SeaHaven.DataServices.Implementation
             int page,
             int pageSize,
             string? search,
+            IReadOnlyCollection<string>? states,
             CancellationToken cancellationToken)
         {
             var query = _context.Locations.AsNoTracking();
@@ -146,6 +147,11 @@ namespace SeaHaven.DataServices.Implementation
                     l.City!.Contains(search));
             }
 
+            if (states is { Count: > 0 })
+            {
+                query = query.Where(l => l.State != null && states.Contains(l.State.Trim().ToUpper()));
+            }
+
             var totalCount = await query.CountAsync(cancellationToken);
             var items = await query
                 .OrderBy(l => l.Name)
diff --git a/SeaHaven.DataServices/Interfaces/ILocationDataService.cs b/SeaHaven.DataServices/Interfaces/ILocationDataService.cs
index 8e7a51a..a2cbf6b 100644
--- a/SeaHaven.DataServices/Interfaces/ILocationDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/ILocationDataService.cs
@@ -34,7 +34,7 @@ namespace SeaHaven.DataServices.Interfaces
         Task<bool> ExistsAsync(int id);
         Task<int> CountAsync();
 
-        Task<(List<Locations> Items, int TotalCount)> GetListPagedAsync(int page, int pageSize, string? search, CancellationToken cancellationToken);
+        Task<(List<Locations> Items, int TotalCount)> GetListPagedAsync(int page, int pageSize, string? search, IReadOnlyCollection<string>? states, CancellationToken cancellationToken);
         Task<Locations?> GetDetailByIdAsync(int id, CancellationToken cancellationToken);
         Task<Locations?> GetByIdForUpdateAsync(int id, CancellationToken cancellationToken);
         Task<Locations> AddAsync(Locations location, CancellationToken cancellationToken);
diff --git a/SeaHaven.Services/Helpers/UsStateCodes.cs b/SeaHaven.Services/Helpers/UsStateCodes.cs
new file mode 100644
index 0000000..9d64a1a
--- /dev/null
+++ b/SeaHaven.Services/Helpers/UsStateCodes.cs
@@ -0,0 +1,68 @@
+namespace SeaHaven.Services.Helpers
+{
+    public static class UsStateCodes
+    {
+        private static readonly IReadOnlyDictionary<string, string> Names = new Dictionary<string, string>(StringComparer.Ordinal)
+        {
+            ["AL"] = "ALABAMA",
+            ["AK"] = "ALASKA",
+            ["AZ"] = "ARIZONA",
+            ["AR"] = "ARKANSAS",
+            ["CA"] = "CALIFORNIA",
+            ["CO"] = "COLORADO",
+            ["CT"] = "CONNECTICUT",
+            ["DE"] = "DELAWARE",
+            ["FL"] = "FLORIDA",
+            ["GA"] = "GEORGIA",
+            ["HI"] = "HAWAII",
+            ["ID"] = "IDAHO",
+            ["IL"] = "ILLINOIS",
+            ["IN"] = "INDIANA",
+            ["IA"] = "IOWA",
+            ["KS"] = "KANSAS",
+            ["KY"] = "KENTUCKY",
+            ["LA"] = "LOUISIANA",
+            ["ME"] = "MAINE",
+            ["MD"] = "MARYLAND",
+            ["MA"] = "MASSACHUSETTS",
+            ["MI"] = "MICHIGAN",
+            ["MN"] = "MINNESOTA",
+            ["MS"] = "MISSISSIPPI",
+            ["MO"] = "MISSOURI",
+            ["MT"] = "MONTANA",
+            ["NE"] = "NEBRASKA",
+            ["NV"] = "NEVADA",
+            ["NH"] = "NEW HAMPSHIRE",
+            ["NJ"] = "NEW JERSEY",
+            ["NM"] = "NEW MEXICO",
+            ["NY"] = "NEW YORK",
+            ["NC"] = "NORTH CAROLINA",
+            ["ND"] = "NORTH DAKOTA",
+            ["OH"] = "OHIO",
+            ["OK"] = "OKLAHOMA",
+            ["OR"] = "OREGON",
+            ["PA"] = "PENNSYLVANIA",
+            ["RI"] = "RHODE ISLAND",
+            ["SC"] = "SOUTH CAROLINA",
+            ["SD"] = "SOUTH DAKOTA",
+            ["TN"] = "TENNESSEE",
+            ["TX"] = "TEXAS",
+            ["UT"] = "UTAH",
+            ["VT"] = "VERMONT",
+            ["VA"] = "VIRGINIA",
+            ["WA"] = "WASHINGTON",
+            ["WV"] = "WEST VIRGINIA",
+            ["WI"] = "WISCONSIN",
+            ["WY"] = "WYOMING"
+        };
+
+        public static IReadOnlySet<string> All { get; } = new HashSet<string>(Names.Keys, StringComparer.Ordinal);
+
+        public static IReadOnlyCollection<string> ExpandStorageValues(IEnumerable<string> codes)
+        {
+            return codes
+                .SelectMany(code => new[] { code, Names[code] })
+                .ToArray();
+        }
+    }
+}
diff --git a/SeaHaven.Services/Implementation/LocationService.cs b/SeaHaven.Services/Implementation/LocationService.cs
index 1b301af..9c938aa 100644
--- a/SeaHaven.Services/Implementation/LocationService.cs
+++ b/SeaHaven.Services/Implementation/LocationService.cs
@@ -165,9 +165,12 @@ namespace SeaHaven.Services.Implementation
             int page,
             int pageSize,
             string? search,
-            CancellationToken cancellationToken)
+            string? states = null,
+            CancellationToken cancellationToken = default)
         {
-            var (items, totalCount) = await _locationDataService.GetListPagedAsync(page, pageSize, search, cancellationToken);
+            var stateFilter = NormalizeStateFilter(states);
+            var storageStateFilter = stateFilter == null ? null : UsStateCodes.ExpandStorageValues(stateFilter);
+            var (items, totalCount) = await _locationDataService.GetListPagedAsync(page, pageSize, search, storageStateFilter, cancellationToken);
             return new PagedResult<LocationDTO>
             {
                 Items = items.Select(MapToDTO).ToList(),
@@ -177,6 +180,32 @@ namespace SeaHaven.Services.Implementation
             };
         }
 
+        internal static IReadOnlyCollection<string>? NormalizeStateFilter(string? states)
+        {
+            if (string.IsNullOrWhiteSpace(states))
+                return null;
+
+            var normalized = states
+                .Split(',', StringSplitOptions.RemoveEmptyEntries | StringSplitOptions.TrimEntries)
+                .Select(code => code.ToUpperInvariant())
+                .Distinct(StringComparer.Ordinal)
+                .ToList();
+
+            if (normalized.Count == 0)
+                return null;
+
+            var invalid = normalized.Where(code => !UsStateCodes.All.Contains(code)).ToList();
+            if (invalid.Count > 0)
+            {
+                throw new ValidationException(new[]
+                {
+                    new ValidationFailure("states", $"states must be valid US postal abbreviations: {string.Join(", ", invalid)}.")
+                });
+            }
+
+            return normalized;
+        }
+
         public async Task<LocationDTO?> GetLocationDetailAsync(int id, CancellationToken cancellationToken)
         {
             var location = await _locationDataService.GetDetailByIdAsync(id, cancellationToken);
diff --git a/SeaHaven.Services/Interfaces/ILocationService.cs b/SeaHaven.Services/Interfaces/ILocationService.cs
index c13ec65..661adde 100644
--- a/SeaHaven.Services/Interfaces/ILocationService.cs
+++ b/SeaHaven.Services/Interfaces/ILocationService.cs
@@ -19,7 +19,7 @@ namespace SeaHaven.Services.Interfaces
         Task<bool> LocationExistsAsync(int id);
         Task<int> GetTotalLocationCountAsync();
 
-        Task<PagedResult<LocationDTO>> GetLocationListPagedAsync(int page, int pageSize, string? search, CancellationToken cancellationToken);
+        Task<PagedResult<LocationDTO>> GetLocationListPagedAsync(int page, int pageSize, string? search, string? states = null, CancellationToken cancellationToken = default);
         Task<LocationDTO?> GetLocationDetailAsync(int id, CancellationToken cancellationToken);
         Task CreateLocationFromRequestAsync(LocationCreateRequestDTO request, ClaimsPrincipal user, CancellationToken cancellationToken);
         Task UpdateLocationFromRequestAsync(int id, LocationUpdateRequestDTO request, ClaimsPrincipal user, CancellationToken cancellationToken);
diff --git a/SeaHavenIndustries.Tests/WorkOrderAccountScopeTests.cs b/SeaHavenIndustries.Tests/WorkOrderAccountScopeTests.cs
index 820fde2..a081f75 100644
--- a/SeaHavenIndustries.Tests/WorkOrderAccountScopeTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderAccountScopeTests.cs
@@ -835,8 +835,8 @@ public class WorkOrderAccountScopeTests
         public Task<bool> ExistsAsync(int id) => _inner.ExistsAsync(id);
         public Task<int> CountAsync() => _inner.CountAsync();
         public Task<(List<Locations> Items, int TotalCount)> GetListPagedAsync(
-            int page, int pageSize, string? search, CancellationToken cancellationToken)
-            => _inner.GetListPagedAsync(page, pageSize, search, cancellationToken);
+            int page, int pageSize, string? search, IReadOnlyCollection<string>? states, CancellationToken cancellationToken)
+            => _inner.GetListPagedAsync(page, pageSize, search, states, cancellationToken);
         public Task<Locations?> GetDetailByIdAsync(int id, CancellationToken cancellationToken)
             => _inner.GetDetailByIdAsync(id, cancellationToken);
         public Task<Locations?> GetByIdForUpdateAsync(int id, CancellationToken cancellationToken)

From 13ce4b7e883b18e99558d44b8cb32c046053790c Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Tue, 15 Sep 2026 16:39:49 -0300
Subject: [PATCH 004/183] docs: add complete dev Postman API collection (#119)

* docs: add dev Postman starter collection

* docs: generate complete dev Postman API collection
---
 postman/README.md                             |    65 +
 postman/SeaHaven-Dev.postman_collection.json  | 19314 ++++++++++++++++
 postman/SeaHaven-Dev.postman_environment.json |    30 +
 scripts/generate-postman-collection.mjs       |   375 +
 4 files changed, 19784 insertions(+)
 create mode 100644 postman/README.md
 create mode 100644 postman/SeaHaven-Dev.postman_collection.json
 create mode 100644 postman/SeaHaven-Dev.postman_environment.json
 create mode 100644 scripts/generate-postman-collection.mjs

diff --git a/postman/README.md b/postman/README.md
new file mode 100644
index 0000000..4782b7c
--- /dev/null
+++ b/postman/README.md
@@ -0,0 +1,65 @@
+# SeaHaven Dev Postman collection
+
+This directory contains the complete SeaHaven backend **dev** API collection,
+generated from the live OpenAPI contract. The generated collection currently
+contains every operation in the contract (368 operations across 330 paths),
+including all documented parameters, request bodies, schemas, and response
+codes.
+
+## Files
+
+| File | Purpose |
+| --- | --- |
+| `SeaHaven-Dev.postman_collection.json` | Complete OpenAPI-derived Postman v2.1 collection, grouped by API tag |
+| `SeaHaven-Dev.postman_environment.json` | Dev authentication environment with secret username, password, and reusable bearer token |
+| `../scripts/generate-postman-collection.mjs` | Deterministic generator and coverage checker |
+
+## Getting started
+
+1. Import `SeaHaven-Dev.postman_collection.json` into Postman.
+2. Import `SeaHaven-Dev.postman_environment.json` and select **SeaHaven - Dev**.
+3. Enter the dev test account's `username` and `password` in the environment.
+   They are empty and secret by default; never commit or share populated values.
+4. Run **Setup → Authentication - Login**. The pre-request script clears any
+   stale token, skips the request when either credential is missing, and never
+   logs credentials. A successful response stores only its non-empty `token`
+   field in the environment's `token` variable.
+5. All generated API requests inherit collection-level `Bearer {{token}}`
+   authentication. They reuse the captured token automatically.
+
+## Generated requests and examples
+
+Every OpenAPI operation is included under its first alphabetically sorted tag.
+Path, query, and header parameters retain their required/optional status,
+schema hint, and description. JSON request bodies use recursively generated
+illustrative placeholders from local OpenAPI schemas; multipart requests use
+form-data fields and mark binary fields as files. These examples are not live
+records: replace placeholder values with a valid dev fixture before sending.
+No response bodies, credentials, tokens, or other dev data are stored in this
+repository.
+
+The generated test script only checks that the response status is one of the
+codes documented by OpenAPI. It does not assume every operation returns `200`.
+
+## Regenerate or check coverage
+
+From the backend repository root:
+
+```bash
+node scripts/generate-postman-collection.mjs
+node scripts/generate-postman-collection.mjs --check
+```
+
+The generator fetches `https://api.dev.seahaven.com/swagger/v1/swagger.json`,
+fails on a non-JSON/non-success response, and rewrites the collection and the
+empty-credential environment deterministically. `--check` compares the checked
+in collection with the current contract and verifies operation count, unique
+operation keys, request-body coverage, Bearer inheritance, and the explicit
+no-auth login exception.
+
+## Safety
+
+This collection is **dev-only**. Do not point it at staging or production. Keep
+`username`, `password`, and `token` local to your Postman workspace; never mark
+them shared, export them, or commit them. Review every illustrative body and
+parameter before running a mutating request.
diff --git a/postman/SeaHaven-Dev.postman_collection.json b/postman/SeaHaven-Dev.postman_collection.json
new file mode 100644
index 0000000..7d2eb8e
--- /dev/null
+++ b/postman/SeaHaven-Dev.postman_collection.json
@@ -0,0 +1,19314 @@
+{
+  "info": {
+    "name": "SeaHaven - Dev API (OpenAPI generated)",
+    "_postman_id": "a1f0514a-5e9f-41bd-a145-7163671b94db",
+    "description": "Complete Postman collection generated from https://api.dev.seahaven.com/swagger/v1/swagger.json. It contains every OpenAPI operation in the published dev contract. Dev only. Replace illustrative placeholders before sending requests.",
+    "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json"
+  },
+  "auth": {
+    "type": "bearer",
+    "bearer": [
+      {
+        "key": "token",
+        "value": "{{token}}",
+        "type": "string"
+      }
+    ]
+  },
+  "variable": [
+    {
+      "key": "baseUrl",
+      "value": "https://api.dev.seahaven.com",
+      "type": "string"
+    }
+  ],
+  "item": [
+    {
+      "name": "Setup",
+      "item": [
+        {
+          "name": "Swagger - OpenAPI document",
+          "request": {
+            "auth": {
+              "type": "noauth"
+            },
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/swagger/v1/swagger.json",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "swagger",
+                "v1",
+                "swagger.json"
+              ]
+            },
+            "description": "Live OpenAPI contract for dev (https://api.dev.seahaven.com/swagger/v1/swagger.json). Import this URL when you need the latest server surface. No auth required."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "pm.test(\"OpenAPI document responded 200\", function () { pm.response.to.have.status(200); });",
+                  "pm.test(\"OpenAPI document is JSON\", function () { pm.expect(pm.response.headers.get(\"Content-Type\")).to.include(\"application/json\"); });",
+                  "pm.test(\"OpenAPI document has paths\", function () { pm.expect(pm.response.json()).to.have.property(\"paths\"); });"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "Authentication - Login",
+          "request": {
+            "auth": {
+              "type": "noauth"
+            },
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"username\": \"{{username}}\",\n  \"password\": \"{{password}}\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Credentials are read from the selected secret environment and are never logged."
+            },
+            "url": {
+              "raw": "{{baseUrl}}/api/Authentication/login",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Authentication",
+                "login"
+              ]
+            },
+            "description": "Authentication login from https://api.dev.seahaven.com/swagger/v1/swagger.json. A successful response stores only the non-empty token in the selected environment. Schema: #/components/schemas/LoginModel."
+          },
+          "event": [
+            {
+              "listen": "prerequest",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "pm.environment.set(\"token\", \"\");",
+                  "const username = pm.environment.get(\"username\");",
+                  "const password = pm.environment.get(\"password\");",
+                  "if (!username || !password) {",
+                  "    pm.execution.skipRequest();",
+                  "    throw new Error(\"Select the SeaHaven - Dev environment and set username and password before logging in.\");",
+                  "}"
+                ]
+              }
+            },
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "pm.test(\"Login responded 200\", function () { pm.response.to.have.status(200); });",
+                  "let body;",
+                  "pm.test(\"Login responded with JSON\", function () { pm.expect(pm.response.headers.get(\"Content-Type\")).to.include(\"application/json\"); body = pm.response.json(); });",
+                  "const token = body && body.token;",
+                  "pm.test(\"Login response contained a non-empty token\", function () { pm.expect(token, \"expected a non-empty token field\").to.be.a(\"string\").and.not.empty; });",
+                  "if (typeof token === \"string\" && token.length > 0) pm.environment.set(\"token\", token);"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "Account",
+      "item": [
+        {
+          "name": "GET /api/Account/DeleteAccounts",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Account/DeleteAccounts?id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Account",
+                "DeleteAccounts"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Account\nOperation ID: not specified\n\nParameters: query id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Account/GetAccountList",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Account/GetAccountList?search=&page=0&pageSize=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Account",
+                "GetAccountList"
+              ],
+              "query": [
+                {
+                  "key": "search",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "page",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "pageSize",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Account\nOperation ID: not specified\n\nParameters: query search (optional, string); query page (optional, integer/int32); query pageSize (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/accounts/DeleteAccounts",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/accounts/DeleteAccounts?id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "accounts",
+                "DeleteAccounts"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Account\nOperation ID: not specified\n\nParameters: query id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/accounts/GetAccountList",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/accounts/GetAccountList?search=&page=0&pageSize=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "accounts",
+                "GetAccountList"
+              ],
+              "query": [
+                {
+                  "key": "search",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "page",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "pageSize",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Account\nOperation ID: not specified\n\nParameters: query search (optional, string); query page (optional, integer/int32); query pageSize (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Account/AddAccounts",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/Account/AddAccounts",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Account",
+                "AddAccounts"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Account\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/Account_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"name\": \"<string>\",\n  \"type\": \"<string>\",\n  \"importance\": 0,\n  \"territoryId\": 0,\n  \"ownerEmployeeId\": 0,\n  \"privacySetting\": \"<string>\",\n  \"about\": \"<string>\",\n  \"tags\": \"<string>\",\n  \"phone\": \"<string>\",\n  \"email\": \"<string>\",\n  \"industryId\": 0,\n  \"timeZone\": \"<string>\",\n  \"website\": \"<string>\",\n  \"currencyCode\": \"<string>\",\n  \"serviceInstructions\": \"<string>\",\n  \"facebookUrl\": \"<string>\",\n  \"linkedInUrl\": \"<string>\",\n  \"twitterUrl\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/Account_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Account/EditAccounts",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/Account/EditAccounts",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Account",
+                "EditAccounts"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Account\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/EditAccount_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"name\": \"<string>\",\n  \"type\": \"<string>\",\n  \"importance\": 0,\n  \"territoryId\": 0,\n  \"ownerEmployeeId\": 0,\n  \"privacySetting\": \"<string>\",\n  \"about\": \"<string>\",\n  \"tags\": \"<string>\",\n  \"phone\": \"<string>\",\n  \"email\": \"<string>\",\n  \"industryId\": 0,\n  \"timeZone\": \"<string>\",\n  \"website\": \"<string>\",\n  \"currencyCode\": \"<string>\",\n  \"serviceInstructions\": \"<string>\",\n  \"facebookUrl\": \"<string>\",\n  \"linkedInUrl\": \"<string>\",\n  \"twitterUrl\": \"<string>\",\n  \"id\": 0\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/EditAccount_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/accounts/AddAccounts",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/accounts/AddAccounts",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "accounts",
+                "AddAccounts"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Account\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/Account_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"name\": \"<string>\",\n  \"type\": \"<string>\",\n  \"importance\": 0,\n  \"territoryId\": 0,\n  \"ownerEmployeeId\": 0,\n  \"privacySetting\": \"<string>\",\n  \"about\": \"<string>\",\n  \"tags\": \"<string>\",\n  \"phone\": \"<string>\",\n  \"email\": \"<string>\",\n  \"industryId\": 0,\n  \"timeZone\": \"<string>\",\n  \"website\": \"<string>\",\n  \"currencyCode\": \"<string>\",\n  \"serviceInstructions\": \"<string>\",\n  \"facebookUrl\": \"<string>\",\n  \"linkedInUrl\": \"<string>\",\n  \"twitterUrl\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/Account_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/accounts/EditAccounts",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/accounts/EditAccounts",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "accounts",
+                "EditAccounts"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Account\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/EditAccount_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"name\": \"<string>\",\n  \"type\": \"<string>\",\n  \"importance\": 0,\n  \"territoryId\": 0,\n  \"ownerEmployeeId\": 0,\n  \"privacySetting\": \"<string>\",\n  \"about\": \"<string>\",\n  \"tags\": \"<string>\",\n  \"phone\": \"<string>\",\n  \"email\": \"<string>\",\n  \"industryId\": 0,\n  \"timeZone\": \"<string>\",\n  \"website\": \"<string>\",\n  \"currencyCode\": \"<string>\",\n  \"serviceInstructions\": \"<string>\",\n  \"facebookUrl\": \"<string>\",\n  \"linkedInUrl\": \"<string>\",\n  \"twitterUrl\": \"<string>\",\n  \"id\": 0\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/EditAccount_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "Asset",
+      "item": [
+        {
+          "name": "GET /api/Asset/DeleteAsset",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Asset/DeleteAsset?id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Asset",
+                "DeleteAsset"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Asset\nOperation ID: not specified\n\nParameters: query id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Asset/GetAssetById",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Asset/GetAssetById?id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Asset",
+                "GetAssetById"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Asset\nOperation ID: not specified\n\nParameters: query id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Asset/GetAssetList",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Asset/GetAssetList?search=&page=0&pageSize=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Asset",
+                "GetAssetList"
+              ],
+              "query": [
+                {
+                  "key": "search",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "page",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "pageSize",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Asset\nOperation ID: not specified\n\nParameters: query search (optional, string); query page (optional, integer/int32); query pageSize (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Asset/AddAsset",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/Asset/AddAsset",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Asset",
+                "AddAsset"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Asset\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/Asset_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"assetCode\": \"<string>\",\n  \"name\": \"<string>\",\n  \"description\": \"<string>\",\n  \"accountId\": 0,\n  \"locationId\": 0,\n  \"isActive\": false\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/Asset_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Asset/EditAsset",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/Asset/EditAsset",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Asset",
+                "EditAsset"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Asset\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/EditAsset_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"id\": 0,\n  \"assetCode\": \"<string>\",\n  \"name\": \"<string>\",\n  \"description\": \"<string>\",\n  \"accountId\": 0,\n  \"locationId\": 0,\n  \"isActive\": false\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/EditAsset_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "Authentication",
+      "item": [
+        {
+          "name": "POST /api/Authentication/ChangePassword",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/Authentication/ChangePassword",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Authentication",
+                "ChangePassword"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Authentication\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/ChangePasswords; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"currentpassword\": \"<string>\",\n  \"newpassword\": \"<string>\",\n  \"confirmpassword\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/ChangePasswords; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Authentication/ForgetPassword",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Authentication/ForgetPassword?Email=",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Authentication",
+                "ForgetPassword"
+              ],
+              "query": [
+                {
+                  "key": "Email",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Authentication\nOperation ID: not specified\n\nParameters: query Email (optional, string)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Authentication/ResetPassword",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/Authentication/ResetPassword",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Authentication",
+                "ResetPassword"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Authentication\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/ForgetPassword_Dto; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"email\": \"<string>\",\n  \"password\": \"<string>\",\n  \"code\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/ForgetPassword_Dto; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Authentication/UpdateProfile",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Authentication/UpdateProfile",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Authentication",
+                "UpdateProfile"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Authentication\nOperation ID: not specified\n\nParameters: none\nRequest body: multipart/form-data; Illustrative placeholder generated from object; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "formdata",
+              "formdata": [
+                {
+                  "key": "Name",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "Email",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "Contact",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "Role",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "AccountId",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; integer/int32"
+                }
+              ],
+              "description": "Illustrative placeholder generated from object; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Authentication/VerificationCode",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Authentication/VerificationCode?code=",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Authentication",
+                "VerificationCode"
+              ],
+              "query": [
+                {
+                  "key": "code",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Authentication\nOperation ID: not specified\n\nParameters: query code (optional, string)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "Calendar",
+      "item": [
+        {
+          "name": "DELETE /api/Calendar/DeleteEvent/{id}",
+          "request": {
+            "method": "DELETE",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Calendar/DeleteEvent/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Calendar",
+                "DeleteEvent",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Calendar\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Calendar/GetEventById/{id}",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Calendar/GetEventById/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Calendar",
+                "GetEventById",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Calendar\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Calendar/GetEventList",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Calendar/GetEventList?search=&page=0&pageSize=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Calendar",
+                "GetEventList"
+              ],
+              "query": [
+                {
+                  "key": "search",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "page",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "pageSize",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Calendar\nOperation ID: not specified\n\nParameters: query search (optional, string); query page (optional, integer/int32); query pageSize (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Calendar/GetEventsForCalendar",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Calendar/GetEventsForCalendar?start=&end=",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Calendar",
+                "GetEventsForCalendar"
+              ],
+              "query": [
+                {
+                  "key": "start",
+                  "value": "",
+                  "description": "Optional; string/date-time",
+                  "disabled": false
+                },
+                {
+                  "key": "end",
+                  "value": "",
+                  "description": "Optional; string/date-time",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Calendar\nOperation ID: not specified\n\nParameters: query start (optional, string/date-time); query end (optional, string/date-time)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Calendar/AddEvent",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/Calendar/AddEvent",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Calendar",
+                "AddEvent"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Calendar\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/EditEvent_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"id\": 0,\n  \"title\": \"<string>\",\n  \"description\": \"<string>\",\n  \"location\": \"<string>\",\n  \"recordID\": 0,\n  \"recordName\": \"<string>\",\n  \"recordTargetType\": \"<string>\",\n  \"reminderMinutes\": 0,\n  \"eventColor\": \"<string>\",\n  \"startDate\": \"2026-01-01T00:00:00Z\",\n  \"startTime\": \"<string>\",\n  \"endDate\": \"2026-01-01T00:00:00Z\",\n  \"endTime\": \"<string>\",\n  \"allDay\": false\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/EditEvent_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Calendar/EditEvent",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/Calendar/EditEvent",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Calendar",
+                "EditEvent"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Calendar\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/EditEvent_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"id\": 0,\n  \"title\": \"<string>\",\n  \"description\": \"<string>\",\n  \"location\": \"<string>\",\n  \"recordID\": 0,\n  \"recordName\": \"<string>\",\n  \"recordTargetType\": \"<string>\",\n  \"reminderMinutes\": 0,\n  \"eventColor\": \"<string>\",\n  \"startDate\": \"2026-01-01T00:00:00Z\",\n  \"startTime\": \"<string>\",\n  \"endDate\": \"2026-01-01T00:00:00Z\",\n  \"endTime\": \"<string>\",\n  \"allDay\": false\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/EditEvent_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "Common",
+      "item": [
+        {
+          "name": "GET /Common/GetCategories",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/Common/GetCategories",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "Common",
+                "GetCategories"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Common\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /Common/GetContacts",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/Common/GetContacts",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "Common",
+                "GetContacts"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Common\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /Common/GetRoles",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/Common/GetRoles",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "Common",
+                "GetRoles"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Common\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /Common/GetSitesName",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/Common/GetSitesName",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "Common",
+                "GetSitesName"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Common\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /Common/GetUsers",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/Common/GetUsers?search=&page=0&pageSize=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "Common",
+                "GetUsers"
+              ],
+              "query": [
+                {
+                  "key": "search",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "page",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "pageSize",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Common\nOperation ID: not specified\n\nParameters: query search (optional, string); query page (optional, integer/int32); query pageSize (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "Contact",
+      "item": [
+        {
+          "name": "GET /api/Contact/DeleteContacts",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Contact/DeleteContacts?id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Contact",
+                "DeleteContacts"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Contact\nOperation ID: not specified\n\nParameters: query id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Contact/GetAddressbook",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Contact/GetAddressbook?search=&page=0&pageSize=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Contact",
+                "GetAddressbook"
+              ],
+              "query": [
+                {
+                  "key": "search",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "page",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "pageSize",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Contact\nOperation ID: not specified\n\nParameters: query search (optional, string); query page (optional, integer/int32); query pageSize (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Contact/GetCategories",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Contact/GetCategories",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Contact",
+                "GetCategories"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Contact\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Contact/GetContactList",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Contact/GetContactList?search=&page=0&pageSize=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Contact",
+                "GetContactList"
+              ],
+              "query": [
+                {
+                  "key": "search",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "page",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "pageSize",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Contact\nOperation ID: not specified\n\nParameters: query search (optional, string); query page (optional, integer/int32); query pageSize (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Contact/GetContacts",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Contact/GetContacts",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Contact",
+                "GetContacts"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Contact\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Contact/GetLocations",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Contact/GetLocations",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Contact",
+                "GetLocations"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Contact\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Contact/GetUsers",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Contact/GetUsers",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Contact",
+                "GetUsers"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Contact\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/contacts/DeleteContacts",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/contacts/DeleteContacts?id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "contacts",
+                "DeleteContacts"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Contact\nOperation ID: not specified\n\nParameters: query id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/contacts/GetAddressbook",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/contacts/GetAddressbook?search=&page=0&pageSize=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "contacts",
+                "GetAddressbook"
+              ],
+              "query": [
+                {
+                  "key": "search",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "page",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "pageSize",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Contact\nOperation ID: not specified\n\nParameters: query search (optional, string); query page (optional, integer/int32); query pageSize (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/contacts/GetCategories",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/contacts/GetCategories",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "contacts",
+                "GetCategories"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Contact\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/contacts/GetContactList",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/contacts/GetContactList?search=&page=0&pageSize=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "contacts",
+                "GetContactList"
+              ],
+              "query": [
+                {
+                  "key": "search",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "page",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "pageSize",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Contact\nOperation ID: not specified\n\nParameters: query search (optional, string); query page (optional, integer/int32); query pageSize (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/contacts/GetContacts",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/contacts/GetContacts",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "contacts",
+                "GetContacts"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Contact\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/contacts/GetLocations",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/contacts/GetLocations",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "contacts",
+                "GetLocations"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Contact\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/contacts/GetUsers",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/contacts/GetUsers",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "contacts",
+                "GetUsers"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Contact\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Contact/AddContacts",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/Contact/AddContacts",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Contact",
+                "AddContacts"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Contact\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/Contact_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"title\": \"<string>\",\n  \"owner\": \"<string>\",\n  \"firstName\": \"<string>\",\n  \"middleName\": \"<string>\",\n  \"lastName\": \"<string>\",\n  \"contactType\": \"<string>\",\n  \"phoneNumber\": \"<string>\",\n  \"email\": \"<string>\",\n  \"address1\": \"<string>\",\n  \"address2\": \"<string>\",\n  \"city\": \"<string>\",\n  \"state\": \"<string>\",\n  \"zip\": \"<string>\",\n  \"facebookUrl\": \"<string>\",\n  \"linkedInUrl\": \"<string>\",\n  \"twitterUrl\": \"<string>\",\n  \"locationId\": 0,\n  \"accountId\": 0\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/Contact_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Contact/AddLocation",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/Contact/AddLocation",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Contact",
+                "AddLocation"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Contact\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/Location_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"title\": \"<string>\",\n  \"name\": \"<string>\",\n  \"address\": \"<string>\",\n  \"city\": \"<string>\",\n  \"state\": \"<string>\",\n  \"zipCode\": \"<string>\",\n  \"phone\": \"<string>\",\n  \"contact\": \"<string>\",\n  \"contactEmail\": \"<string>\",\n  \"status\": \"<string>\",\n  \"accountId\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/Location_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Contact/DeleteLocation",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Contact/DeleteLocation?Id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Contact",
+                "DeleteLocation"
+              ],
+              "query": [
+                {
+                  "key": "Id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Contact\nOperation ID: not specified\n\nParameters: query Id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Contact/EditContacts",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/Contact/EditContacts",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Contact",
+                "EditContacts"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Contact\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/EditContact_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"id\": 0,\n  \"title\": \"<string>\",\n  \"owner\": \"<string>\",\n  \"firstName\": \"<string>\",\n  \"middleName\": \"<string>\",\n  \"lastName\": \"<string>\",\n  \"contactType\": \"<string>\",\n  \"phoneNumber\": \"<string>\",\n  \"email\": \"<string>\",\n  \"address1\": \"<string>\",\n  \"address2\": \"<string>\",\n  \"city\": \"<string>\",\n  \"state\": \"<string>\",\n  \"zip\": \"<string>\",\n  \"facebookUrl\": \"<string>\",\n  \"linkedInUrl\": \"<string>\",\n  \"twitterUrl\": \"<string>\",\n  \"locationId\": 0,\n  \"accountId\": 0\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/EditContact_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Contact/EditLocation",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/Contact/EditLocation",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Contact",
+                "EditLocation"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Contact\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/EditLocation_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"id\": 0,\n  \"title\": \"<string>\",\n  \"name\": \"<string>\",\n  \"address\": \"<string>\",\n  \"city\": \"<string>\",\n  \"state\": \"<string>\",\n  \"zipCode\": \"<string>\",\n  \"phone\": \"<string>\",\n  \"contact\": \"<string>\",\n  \"contactEmail\": \"<string>\",\n  \"status\": \"<string>\",\n  \"accountId\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/EditLocation_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/contacts/AddContacts",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/contacts/AddContacts",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "contacts",
+                "AddContacts"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Contact\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/Contact_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"title\": \"<string>\",\n  \"owner\": \"<string>\",\n  \"firstName\": \"<string>\",\n  \"middleName\": \"<string>\",\n  \"lastName\": \"<string>\",\n  \"contactType\": \"<string>\",\n  \"phoneNumber\": \"<string>\",\n  \"email\": \"<string>\",\n  \"address1\": \"<string>\",\n  \"address2\": \"<string>\",\n  \"city\": \"<string>\",\n  \"state\": \"<string>\",\n  \"zip\": \"<string>\",\n  \"facebookUrl\": \"<string>\",\n  \"linkedInUrl\": \"<string>\",\n  \"twitterUrl\": \"<string>\",\n  \"locationId\": 0,\n  \"accountId\": 0\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/Contact_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/contacts/AddLocation",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/contacts/AddLocation",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "contacts",
+                "AddLocation"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Contact\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/Location_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"title\": \"<string>\",\n  \"name\": \"<string>\",\n  \"address\": \"<string>\",\n  \"city\": \"<string>\",\n  \"state\": \"<string>\",\n  \"zipCode\": \"<string>\",\n  \"phone\": \"<string>\",\n  \"contact\": \"<string>\",\n  \"contactEmail\": \"<string>\",\n  \"status\": \"<string>\",\n  \"accountId\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/Location_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/contacts/DeleteLocation",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/contacts/DeleteLocation?Id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "contacts",
+                "DeleteLocation"
+              ],
+              "query": [
+                {
+                  "key": "Id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Contact\nOperation ID: not specified\n\nParameters: query Id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/contacts/EditContacts",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/contacts/EditContacts",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "contacts",
+                "EditContacts"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Contact\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/EditContact_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"id\": 0,\n  \"title\": \"<string>\",\n  \"owner\": \"<string>\",\n  \"firstName\": \"<string>\",\n  \"middleName\": \"<string>\",\n  \"lastName\": \"<string>\",\n  \"contactType\": \"<string>\",\n  \"phoneNumber\": \"<string>\",\n  \"email\": \"<string>\",\n  \"address1\": \"<string>\",\n  \"address2\": \"<string>\",\n  \"city\": \"<string>\",\n  \"state\": \"<string>\",\n  \"zip\": \"<string>\",\n  \"facebookUrl\": \"<string>\",\n  \"linkedInUrl\": \"<string>\",\n  \"twitterUrl\": \"<string>\",\n  \"locationId\": 0,\n  \"accountId\": 0\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/EditContact_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/contacts/EditLocation",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/contacts/EditLocation",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "contacts",
+                "EditLocation"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Contact\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/EditLocation_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"id\": 0,\n  \"title\": \"<string>\",\n  \"name\": \"<string>\",\n  \"address\": \"<string>\",\n  \"city\": \"<string>\",\n  \"state\": \"<string>\",\n  \"zipCode\": \"<string>\",\n  \"phone\": \"<string>\",\n  \"contact\": \"<string>\",\n  \"contactEmail\": \"<string>\",\n  \"status\": \"<string>\",\n  \"accountId\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/EditLocation_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "Dashboard",
+      "item": [
+        {
+          "name": "GET /api/Dashboard/Stats",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Dashboard/Stats",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Dashboard",
+                "Stats"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Dashboard\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "Dispatch",
+      "item": [
+        {
+          "name": "GET /api/Dispatch",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Dispatch?search=&status=&vendorId=0&dateFrom=&dateTo=&sortBy=&sortDir=&page=0&pageSize=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Dispatch"
+              ],
+              "query": [
+                {
+                  "key": "search",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "status",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "vendorId",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "dateFrom",
+                  "value": "",
+                  "description": "Optional; string/date-time",
+                  "disabled": false
+                },
+                {
+                  "key": "dateTo",
+                  "value": "",
+                  "description": "Optional; string/date-time",
+                  "disabled": false
+                },
+                {
+                  "key": "sortBy",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "sortDir",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "page",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "pageSize",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Dispatch\nOperation ID: not specified\n\nParameters: query search (optional, string); query status (optional, string); query vendorId (optional, integer/int32); query dateFrom (optional, string/date-time); query dateTo (optional, string/date-time); query sortBy (optional, string); query sortDir (optional, string); query page (optional, integer/int32); query pageSize (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Dispatch/{id}",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Dispatch/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Dispatch",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Dispatch\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/dispatches",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/dispatches?search=&status=&vendorId=0&dateFrom=&dateTo=&sortBy=&sortDir=&page=0&pageSize=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "dispatches"
+              ],
+              "query": [
+                {
+                  "key": "search",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "status",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "vendorId",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "dateFrom",
+                  "value": "",
+                  "description": "Optional; string/date-time",
+                  "disabled": false
+                },
+                {
+                  "key": "dateTo",
+                  "value": "",
+                  "description": "Optional; string/date-time",
+                  "disabled": false
+                },
+                {
+                  "key": "sortBy",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "sortDir",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "page",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "pageSize",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Dispatch\nOperation ID: not specified\n\nParameters: query search (optional, string); query status (optional, string); query vendorId (optional, integer/int32); query dateFrom (optional, string/date-time); query dateTo (optional, string/date-time); query sortBy (optional, string); query sortDir (optional, string); query page (optional, integer/int32); query pageSize (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/dispatches/{id}",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/dispatches/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "dispatches",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Dispatch\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "DispatchPublic",
+      "item": [
+        {
+          "name": "GET /api/dispatch/accept/{token}",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/dispatch/accept/:token",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "dispatch",
+                "accept",
+                ":token"
+              ],
+              "variable": [
+                {
+                  "key": "token",
+                  "value": "",
+                  "description": "Required; string"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): DispatchPublic\nOperation ID: not specified\n\nParameters: path token (required, string)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "DropdownOptions",
+      "item": [
+        {
+          "name": "DELETE /api/DropdownOptions/{id}",
+          "request": {
+            "method": "DELETE",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/DropdownOptions/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "DropdownOptions",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): DropdownOptions\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/DropdownOptions",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/DropdownOptions?category=",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "DropdownOptions"
+              ],
+              "query": [
+                {
+                  "key": "category",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): DropdownOptions\nOperation ID: not specified\n\nParameters: query category (optional, string)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/DropdownOptions/ByCategory/{category}",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/DropdownOptions/ByCategory/:category?parent=",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "DropdownOptions",
+                "ByCategory",
+                ":category"
+              ],
+              "query": [
+                {
+                  "key": "parent",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                }
+              ],
+              "variable": [
+                {
+                  "key": "category",
+                  "value": "",
+                  "description": "Required; string"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): DropdownOptions\nOperation ID: not specified\n\nParameters: path category (required, string); query parent (optional, string)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/DropdownOptions",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/DropdownOptions",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "DropdownOptions"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): DropdownOptions\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/DropdownOption_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"id\": 0,\n  \"category\": \"<string>\",\n  \"value\": \"<string>\",\n  \"parentValue\": \"<string>\",\n  \"sortOrder\": 0,\n  \"isActive\": false\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/DropdownOption_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "PUT /api/DropdownOptions/{id}",
+          "request": {
+            "method": "PUT",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/DropdownOptions/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "DropdownOptions",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): DropdownOptions\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/DropdownOption_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"id\": 0,\n  \"category\": \"<string>\",\n  \"value\": \"<string>\",\n  \"parentValue\": \"<string>\",\n  \"sortOrder\": 0,\n  \"isActive\": false\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/DropdownOption_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "Employee",
+      "item": [
+        {
+          "name": "GET /api/Employee/DeleteEmployees",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Employee/DeleteEmployees?id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Employee",
+                "DeleteEmployees"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Employee\nOperation ID: not specified\n\nParameters: query id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Employee/Dropdown",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Employee/Dropdown",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Employee",
+                "Dropdown"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Employee\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Employee/GetById",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Employee/GetById?id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Employee",
+                "GetById"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Employee\nOperation ID: not specified\n\nParameters: query id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Employee/GetEmployeeList",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Employee/GetEmployeeList?search=&page=0&pageSize=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Employee",
+                "GetEmployeeList"
+              ],
+              "query": [
+                {
+                  "key": "search",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "page",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "pageSize",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Employee\nOperation ID: not specified\n\nParameters: query search (optional, string); query page (optional, integer/int32); query pageSize (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/employees/DeleteEmployees",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/employees/DeleteEmployees?id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "employees",
+                "DeleteEmployees"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Employee\nOperation ID: not specified\n\nParameters: query id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/employees/Dropdown",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/employees/Dropdown",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "employees",
+                "Dropdown"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Employee\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/employees/GetById",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/employees/GetById?id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "employees",
+                "GetById"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Employee\nOperation ID: not specified\n\nParameters: query id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/employees/GetEmployeeList",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/employees/GetEmployeeList?search=&page=0&pageSize=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "employees",
+                "GetEmployeeList"
+              ],
+              "query": [
+                {
+                  "key": "search",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "page",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "pageSize",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Employee\nOperation ID: not specified\n\nParameters: query search (optional, string); query page (optional, integer/int32); query pageSize (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Employee/AddEmployees",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/Employee/AddEmployees",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Employee",
+                "AddEmployees"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Employee\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/AddEmployee_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"firstName\": \"<string>\",\n  \"lastName\": \"<string>\",\n  \"jobTitleId\": 0,\n  \"permissionGroupId\": 0,\n  \"email\": \"<string>\",\n  \"phone\": \"<string>\",\n  \"phoneExtension\": \"<string>\",\n  \"status\": \"<string>\",\n  \"lastLogin\": \"2026-01-01T00:00:00Z\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/AddEmployee_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Employee/Create",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/Employee/Create",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Employee",
+                "Create"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Employee\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/AddEmployee_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"firstName\": \"<string>\",\n  \"lastName\": \"<string>\",\n  \"jobTitleId\": 0,\n  \"permissionGroupId\": 0,\n  \"email\": \"<string>\",\n  \"phone\": \"<string>\",\n  \"phoneExtension\": \"<string>\",\n  \"status\": \"<string>\",\n  \"lastLogin\": \"2026-01-01T00:00:00Z\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/AddEmployee_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Employee/Delete",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Employee/Delete?id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Employee",
+                "Delete"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Employee\nOperation ID: not specified\n\nParameters: query id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Employee/EditEmployees",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/Employee/EditEmployees",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Employee",
+                "EditEmployees"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Employee\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/EditEmployee_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"firstName\": \"<string>\",\n  \"lastName\": \"<string>\",\n  \"jobTitleId\": 0,\n  \"permissionGroupId\": 0,\n  \"email\": \"<string>\",\n  \"phone\": \"<string>\",\n  \"phoneExtension\": \"<string>\",\n  \"status\": \"<string>\",\n  \"lastLogin\": \"2026-01-01T00:00:00Z\",\n  \"id\": 0\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/EditEmployee_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Employee/Update",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/Employee/Update",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Employee",
+                "Update"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Employee\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/EditEmployee_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"firstName\": \"<string>\",\n  \"lastName\": \"<string>\",\n  \"jobTitleId\": 0,\n  \"permissionGroupId\": 0,\n  \"email\": \"<string>\",\n  \"phone\": \"<string>\",\n  \"phoneExtension\": \"<string>\",\n  \"status\": \"<string>\",\n  \"lastLogin\": \"2026-01-01T00:00:00Z\",\n  \"id\": 0\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/EditEmployee_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/employees/AddEmployees",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/employees/AddEmployees",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "employees",
+                "AddEmployees"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Employee\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/AddEmployee_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"firstName\": \"<string>\",\n  \"lastName\": \"<string>\",\n  \"jobTitleId\": 0,\n  \"permissionGroupId\": 0,\n  \"email\": \"<string>\",\n  \"phone\": \"<string>\",\n  \"phoneExtension\": \"<string>\",\n  \"status\": \"<string>\",\n  \"lastLogin\": \"2026-01-01T00:00:00Z\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/AddEmployee_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/employees/Create",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/employees/Create",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "employees",
+                "Create"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Employee\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/AddEmployee_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"firstName\": \"<string>\",\n  \"lastName\": \"<string>\",\n  \"jobTitleId\": 0,\n  \"permissionGroupId\": 0,\n  \"email\": \"<string>\",\n  \"phone\": \"<string>\",\n  \"phoneExtension\": \"<string>\",\n  \"status\": \"<string>\",\n  \"lastLogin\": \"2026-01-01T00:00:00Z\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/AddEmployee_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/employees/Delete",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/employees/Delete?id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "employees",
+                "Delete"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Employee\nOperation ID: not specified\n\nParameters: query id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/employees/EditEmployees",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/employees/EditEmployees",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "employees",
+                "EditEmployees"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Employee\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/EditEmployee_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"firstName\": \"<string>\",\n  \"lastName\": \"<string>\",\n  \"jobTitleId\": 0,\n  \"permissionGroupId\": 0,\n  \"email\": \"<string>\",\n  \"phone\": \"<string>\",\n  \"phoneExtension\": \"<string>\",\n  \"status\": \"<string>\",\n  \"lastLogin\": \"2026-01-01T00:00:00Z\",\n  \"id\": 0\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/EditEmployee_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/employees/Update",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/employees/Update",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "employees",
+                "Update"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Employee\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/EditEmployee_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"firstName\": \"<string>\",\n  \"lastName\": \"<string>\",\n  \"jobTitleId\": 0,\n  \"permissionGroupId\": 0,\n  \"email\": \"<string>\",\n  \"phone\": \"<string>\",\n  \"phoneExtension\": \"<string>\",\n  \"status\": \"<string>\",\n  \"lastLogin\": \"2026-01-01T00:00:00Z\",\n  \"id\": 0\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/EditEmployee_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "FollowUp",
+      "item": [
+        {
+          "name": "GET /api/FollowUp/GetById",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/FollowUp/GetById?id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "FollowUp",
+                "GetById"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): FollowUp\nOperation ID: not specified\n\nParameters: query id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/FollowUp/GetFollowUpList",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/FollowUp/GetFollowUpList?search=&status=&page=0&pageSize=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "FollowUp",
+                "GetFollowUpList"
+              ],
+              "query": [
+                {
+                  "key": "search",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "status",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "page",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "pageSize",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): FollowUp\nOperation ID: not specified\n\nParameters: query search (optional, string); query status (optional, string); query page (optional, integer/int32); query pageSize (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/followups/GetById",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/followups/GetById?id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "followups",
+                "GetById"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): FollowUp\nOperation ID: not specified\n\nParameters: query id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/followups/GetFollowUpList",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/followups/GetFollowUpList?search=&status=&page=0&pageSize=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "followups",
+                "GetFollowUpList"
+              ],
+              "query": [
+                {
+                  "key": "search",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "status",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "page",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "pageSize",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): FollowUp\nOperation ID: not specified\n\nParameters: query search (optional, string); query status (optional, string); query page (optional, integer/int32); query pageSize (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/FollowUp/Cancel",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/FollowUp/Cancel?id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "FollowUp",
+                "Cancel"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): FollowUp\nOperation ID: not specified\n\nParameters: query id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/FollowUp/Complete",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/FollowUp/Complete?id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "FollowUp",
+                "Complete"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): FollowUp\nOperation ID: not specified\n\nParameters: query id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/FollowUp/Create",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/FollowUp/Create",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "FollowUp",
+                "Create"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): FollowUp\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/FollowUp_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"id\": 0,\n  \"reason\": \"<string>\",\n  \"scheduleDate\": \"2026-01-01T00:00:00Z\",\n  \"scheduleStartTime\": {\n    \"ticks\": 0,\n    \"days\": 0,\n    \"hours\": 0,\n    \"milliseconds\": 0,\n    \"microseconds\": 0,\n    \"nanoseconds\": 0,\n    \"minutes\": 0,\n    \"seconds\": 0,\n    \"totalDays\": 0,\n    \"totalHours\": 0,\n    \"totalMilliseconds\": 0,\n    \"totalMicroseconds\": 0,\n    \"totalNanoseconds\": 0,\n    \"totalMinutes\": 0,\n    \"totalSeconds\": 0\n  },\n  \"employeeId\": 0,\n  \"workOrderId\": 0,\n  \"accountId\": 0,\n  \"locationId\": 0\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/FollowUp_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/FollowUp/Delete",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/FollowUp/Delete?id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "FollowUp",
+                "Delete"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): FollowUp\nOperation ID: not specified\n\nParameters: query id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/FollowUp/Update",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/FollowUp/Update",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "FollowUp",
+                "Update"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): FollowUp\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/FollowUp_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"id\": 0,\n  \"reason\": \"<string>\",\n  \"scheduleDate\": \"2026-01-01T00:00:00Z\",\n  \"scheduleStartTime\": {\n    \"ticks\": 0,\n    \"days\": 0,\n    \"hours\": 0,\n    \"milliseconds\": 0,\n    \"microseconds\": 0,\n    \"nanoseconds\": 0,\n    \"minutes\": 0,\n    \"seconds\": 0,\n    \"totalDays\": 0,\n    \"totalHours\": 0,\n    \"totalMilliseconds\": 0,\n    \"totalMicroseconds\": 0,\n    \"totalNanoseconds\": 0,\n    \"totalMinutes\": 0,\n    \"totalSeconds\": 0\n  },\n  \"employeeId\": 0,\n  \"workOrderId\": 0,\n  \"accountId\": 0,\n  \"locationId\": 0\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/FollowUp_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/followups/Cancel",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/followups/Cancel?id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "followups",
+                "Cancel"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): FollowUp\nOperation ID: not specified\n\nParameters: query id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/followups/Complete",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/followups/Complete?id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "followups",
+                "Complete"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): FollowUp\nOperation ID: not specified\n\nParameters: query id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/followups/Create",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/followups/Create",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "followups",
+                "Create"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): FollowUp\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/FollowUp_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"id\": 0,\n  \"reason\": \"<string>\",\n  \"scheduleDate\": \"2026-01-01T00:00:00Z\",\n  \"scheduleStartTime\": {\n    \"ticks\": 0,\n    \"days\": 0,\n    \"hours\": 0,\n    \"milliseconds\": 0,\n    \"microseconds\": 0,\n    \"nanoseconds\": 0,\n    \"minutes\": 0,\n    \"seconds\": 0,\n    \"totalDays\": 0,\n    \"totalHours\": 0,\n    \"totalMilliseconds\": 0,\n    \"totalMicroseconds\": 0,\n    \"totalNanoseconds\": 0,\n    \"totalMinutes\": 0,\n    \"totalSeconds\": 0\n  },\n  \"employeeId\": 0,\n  \"workOrderId\": 0,\n  \"accountId\": 0,\n  \"locationId\": 0\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/FollowUp_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/followups/Delete",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/followups/Delete?id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "followups",
+                "Delete"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): FollowUp\nOperation ID: not specified\n\nParameters: query id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/followups/Update",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/followups/Update",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "followups",
+                "Update"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): FollowUp\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/FollowUp_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"id\": 0,\n  \"reason\": \"<string>\",\n  \"scheduleDate\": \"2026-01-01T00:00:00Z\",\n  \"scheduleStartTime\": {\n    \"ticks\": 0,\n    \"days\": 0,\n    \"hours\": 0,\n    \"milliseconds\": 0,\n    \"microseconds\": 0,\n    \"nanoseconds\": 0,\n    \"minutes\": 0,\n    \"seconds\": 0,\n    \"totalDays\": 0,\n    \"totalHours\": 0,\n    \"totalMilliseconds\": 0,\n    \"totalMicroseconds\": 0,\n    \"totalNanoseconds\": 0,\n    \"totalMinutes\": 0,\n    \"totalSeconds\": 0\n  },\n  \"employeeId\": 0,\n  \"workOrderId\": 0,\n  \"accountId\": 0,\n  \"locationId\": 0\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/FollowUp_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "Location",
+      "item": [
+        {
+          "name": "DELETE /api/Location/{id}",
+          "request": {
+            "method": "DELETE",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Location/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Location",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Location\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "DELETE /api/locations/{id}",
+          "request": {
+            "method": "DELETE",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/locations/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "locations",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Location\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Location/{id}",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Location/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Location",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Location\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Location/DeleteLocation",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Location/DeleteLocation?id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Location",
+                "DeleteLocation"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Location\nOperation ID: not specified\n\nParameters: query id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Location/GetLocationList",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Location/GetLocationList?search=&page=0&pageSize=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Location",
+                "GetLocationList"
+              ],
+              "query": [
+                {
+                  "key": "search",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "page",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "pageSize",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Location\nOperation ID: not specified\n\nParameters: query search (optional, string); query page (optional, integer/int32); query pageSize (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Location/sites",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Location/sites?search=",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Location",
+                "sites"
+              ],
+              "query": [
+                {
+                  "key": "search",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Location\nOperation ID: not specified\n\nParameters: query search (optional, string)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/locations/{id}",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/locations/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "locations",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Location\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/locations/DeleteLocation",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/locations/DeleteLocation?id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "locations",
+                "DeleteLocation"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Location\nOperation ID: not specified\n\nParameters: query id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/locations/GetLocationList",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/locations/GetLocationList?search=&page=0&pageSize=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "locations",
+                "GetLocationList"
+              ],
+              "query": [
+                {
+                  "key": "search",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "page",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "pageSize",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Location\nOperation ID: not specified\n\nParameters: query search (optional, string); query page (optional, integer/int32); query pageSize (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/locations/sites",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/locations/sites?search=",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "locations",
+                "sites"
+              ],
+              "query": [
+                {
+                  "key": "search",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Location\nOperation ID: not specified\n\nParameters: query search (optional, string)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Location",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/Location",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Location"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Location\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/Location_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"title\": \"<string>\",\n  \"name\": \"<string>\",\n  \"address\": \"<string>\",\n  \"city\": \"<string>\",\n  \"state\": \"<string>\",\n  \"zipCode\": \"<string>\",\n  \"phone\": \"<string>\",\n  \"contact\": \"<string>\",\n  \"contactEmail\": \"<string>\",\n  \"status\": \"<string>\",\n  \"accountId\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/Location_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/locations",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/locations",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "locations"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Location\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/Location_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"title\": \"<string>\",\n  \"name\": \"<string>\",\n  \"address\": \"<string>\",\n  \"city\": \"<string>\",\n  \"state\": \"<string>\",\n  \"zipCode\": \"<string>\",\n  \"phone\": \"<string>\",\n  \"contact\": \"<string>\",\n  \"contactEmail\": \"<string>\",\n  \"status\": \"<string>\",\n  \"accountId\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/Location_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "PUT /api/Location/{id}",
+          "request": {
+            "method": "PUT",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/Location/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Location",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Location\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/EditLocation_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"id\": 0,\n  \"title\": \"<string>\",\n  \"name\": \"<string>\",\n  \"address\": \"<string>\",\n  \"city\": \"<string>\",\n  \"state\": \"<string>\",\n  \"zipCode\": \"<string>\",\n  \"phone\": \"<string>\",\n  \"contact\": \"<string>\",\n  \"contactEmail\": \"<string>\",\n  \"status\": \"<string>\",\n  \"accountId\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/EditLocation_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "PUT /api/locations/{id}",
+          "request": {
+            "method": "PUT",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/locations/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "locations",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Location\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/EditLocation_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"id\": 0,\n  \"title\": \"<string>\",\n  \"name\": \"<string>\",\n  \"address\": \"<string>\",\n  \"city\": \"<string>\",\n  \"state\": \"<string>\",\n  \"zipCode\": \"<string>\",\n  \"phone\": \"<string>\",\n  \"contact\": \"<string>\",\n  \"contactEmail\": \"<string>\",\n  \"status\": \"<string>\",\n  \"accountId\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/EditLocation_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "PMSchedule",
+      "item": [
+        {
+          "name": "GET /api/PMSchedule/GetById",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/PMSchedule/GetById?id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "PMSchedule",
+                "GetById"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): PMSchedule\nOperation ID: not specified\n\nParameters: query id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/PMSchedule/GetList",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/PMSchedule/GetList",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "PMSchedule",
+                "GetList"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): PMSchedule\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/pmschedules/GetById",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/pmschedules/GetById?id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "pmschedules",
+                "GetById"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): PMSchedule\nOperation ID: not specified\n\nParameters: query id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/pmschedules/GetList",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/pmschedules/GetList",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "pmschedules",
+                "GetList"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): PMSchedule\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/PMSchedule/Delete",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/PMSchedule/Delete?id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "PMSchedule",
+                "Delete"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): PMSchedule\nOperation ID: not specified\n\nParameters: query id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/PMSchedule/Save",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/PMSchedule/Save",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "PMSchedule",
+                "Save"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): PMSchedule\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/PMSchedule_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"id\": 0,\n  \"name\": \"<string>\",\n  \"frequency\": \"<string>\",\n  \"startDate\": \"2026-01-01T00:00:00Z\",\n  \"isActive\": false,\n  \"assetId\": 0,\n  \"locationId\": 0\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/PMSchedule_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/pmschedules/Delete",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/pmschedules/Delete?id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "pmschedules",
+                "Delete"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): PMSchedule\nOperation ID: not specified\n\nParameters: query id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/pmschedules/Save",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/pmschedules/Save",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "pmschedules",
+                "Save"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): PMSchedule\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/PMSchedule_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"id\": 0,\n  \"name\": \"<string>\",\n  \"frequency\": \"<string>\",\n  \"startDate\": \"2026-01-01T00:00:00Z\",\n  \"isActive\": false,\n  \"assetId\": 0,\n  \"locationId\": 0\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/PMSchedule_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "Quotes",
+      "item": [
+        {
+          "name": "DELETE /api/Quotes/DeleteQuote",
+          "request": {
+            "method": "DELETE",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/Quotes/DeleteQuote",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Quotes",
+                "DeleteQuote"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Quotes\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/EditQuote_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"id\": 0,\n  \"quotId\": \"<string>\",\n  \"date\": \"<string>\",\n  \"tt\": \"<string>\",\n  \"po\": \"<string>\",\n  \"contactId\": 0,\n  \"workorderId\": 0,\n  \"projectName\": \"<string>\",\n  \"siteName\": \"<string>\",\n  \"siteId\": \"<string>\",\n  \"billingAddress\": \"<string>\",\n  \"lineItems\": [\n    {\n      \"lineitemNumber\": 0,\n      \"lineitem\": 0,\n      \"descriptions\": \"<string>\"\n    }\n  ]\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/EditQuote_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Quotes/GetQuoutes",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Quotes/GetQuoutes?search=&page=0&pageSize=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Quotes",
+                "GetQuoutes"
+              ],
+              "query": [
+                {
+                  "key": "search",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "page",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "pageSize",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Quotes\nOperation ID: not specified\n\nParameters: query search (optional, string); query page (optional, integer/int32); query pageSize (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Quotes/GetQuoutesById",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Quotes/GetQuoutesById?id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Quotes",
+                "GetQuoutesById"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Quotes\nOperation ID: not specified\n\nParameters: query id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Quotes/GetQuoutesdetailsAgainstWorkOrder",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Quotes/GetQuoutesdetailsAgainstWorkOrder?woId=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Quotes",
+                "GetQuoutesdetailsAgainstWorkOrder"
+              ],
+              "query": [
+                {
+                  "key": "woId",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Quotes\nOperation ID: not specified\n\nParameters: query woId (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Quotes/GetReporting",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Quotes/GetReporting",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Quotes",
+                "GetReporting"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Quotes\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Quotes/AddQuote",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/Quotes/AddQuote",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Quotes",
+                "AddQuote"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Quotes\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/Quote_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"quotId\": \"<string>\",\n  \"date\": \"<string>\",\n  \"tt\": \"<string>\",\n  \"po\": \"<string>\",\n  \"contactId\": 0,\n  \"workorderId\": 0,\n  \"projectName\": \"<string>\",\n  \"siteName\": \"<string>\",\n  \"siteId\": \"<string>\",\n  \"billingAddress\": \"<string>\",\n  \"lineItems\": [\n    {\n      \"lineitemNumber\": 0,\n      \"lineitem\": 0,\n      \"descriptions\": \"<string>\"\n    }\n  ]\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/Quote_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "PUT /api/Quotes/EditQuote",
+          "request": {
+            "method": "PUT",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/Quotes/EditQuote",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Quotes",
+                "EditQuote"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Quotes\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/EditQuote_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"id\": 0,\n  \"quotId\": \"<string>\",\n  \"date\": \"<string>\",\n  \"tt\": \"<string>\",\n  \"po\": \"<string>\",\n  \"contactId\": 0,\n  \"workorderId\": 0,\n  \"projectName\": \"<string>\",\n  \"siteName\": \"<string>\",\n  \"siteId\": \"<string>\",\n  \"billingAddress\": \"<string>\",\n  \"lineItems\": [\n    {\n      \"lineitemNumber\": 0,\n      \"lineitem\": 0,\n      \"descriptions\": \"<string>\"\n    }\n  ]\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/EditQuote_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "Settings",
+      "item": [
+        {
+          "name": "GET /Settings/DeleteCategory",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/Settings/DeleteCategory?id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "Settings",
+                "DeleteCategory"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Settings\nOperation ID: not specified\n\nParameters: query id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /Settings/GetCategoryList",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/Settings/GetCategoryList?page=0&pageSize=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "Settings",
+                "GetCategoryList"
+              ],
+              "query": [
+                {
+                  "key": "page",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "pageSize",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Settings\nOperation ID: not specified\n\nParameters: query page (optional, integer/int32); query pageSize (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /Settings/GetRoles",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/Settings/GetRoles",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "Settings",
+                "GetRoles"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Settings\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /Settings/GetTemplates",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/Settings/GetTemplates?page=0&pageSize=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "Settings",
+                "GetTemplates"
+              ],
+              "query": [
+                {
+                  "key": "page",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "pageSize",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Settings\nOperation ID: not specified\n\nParameters: query page (optional, integer/int32); query pageSize (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /Settings/GetUsers",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/Settings/GetUsers?search=&page=0&pageSize=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "Settings",
+                "GetUsers"
+              ],
+              "query": [
+                {
+                  "key": "search",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "page",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "pageSize",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Settings\nOperation ID: not specified\n\nParameters: query search (optional, string); query page (optional, integer/int32); query pageSize (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /Settings/AddCategory",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/Settings/AddCategory",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "Settings",
+                "AddCategory"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Settings\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/Category_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"name\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/Category_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /Settings/EditCategory",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/Settings/EditCategory",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "Settings",
+                "EditCategory"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Settings\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/EditCategory_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"id\": 0,\n  \"name\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/EditCategory_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "Sync",
+      "item": [
+        {
+          "name": "POST /api/Sync/All",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Sync/All",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Sync",
+                "All"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Sync\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Sync/BackfillCommentTypes",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Sync/BackfillCommentTypes",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Sync",
+                "BackfillCommentTypes"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Sync\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Sync/BackfillDispatchNumbers",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Sync/BackfillDispatchNumbers",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Sync",
+                "BackfillDispatchNumbers"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Sync\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Sync/BackfillInternalWONumbers",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Sync/BackfillInternalWONumbers",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Sync",
+                "BackfillInternalWONumbers"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Sync\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Sync/Comments",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Sync/Comments",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Sync",
+                "Comments"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Sync\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Sync/VendorReplies",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Sync/VendorReplies",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Sync",
+                "VendorReplies"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Sync\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Sync/WorkOrders",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Sync/WorkOrders",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Sync",
+                "WorkOrders"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Sync\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "TaskListTemplate",
+      "item": [
+        {
+          "name": "DELETE /api/TaskListTemplate/{id}",
+          "request": {
+            "method": "DELETE",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/TaskListTemplate/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "TaskListTemplate",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): TaskListTemplate\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "DELETE /api/tasklisttemplates/{id}",
+          "request": {
+            "method": "DELETE",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/tasklisttemplates/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "tasklisttemplates",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): TaskListTemplate\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/TaskListTemplate",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/TaskListTemplate",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "TaskListTemplate"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): TaskListTemplate\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/TaskListTemplate/{id}",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/TaskListTemplate/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "TaskListTemplate",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): TaskListTemplate\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/tasklisttemplates",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/tasklisttemplates",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "tasklisttemplates"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): TaskListTemplate\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/tasklisttemplates/{id}",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/tasklisttemplates/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "tasklisttemplates",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): TaskListTemplate\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/TaskListTemplate",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/TaskListTemplate",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "TaskListTemplate"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): TaskListTemplate\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/TaskListTemplate_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"name\": \"<string>\",\n  \"description\": \"<string>\",\n  \"isActive\": false,\n  \"items\": [\n    {\n      \"itemText\": \"<string>\",\n      \"sortOrder\": 0\n    }\n  ]\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/TaskListTemplate_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/tasklisttemplates",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/tasklisttemplates",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "tasklisttemplates"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): TaskListTemplate\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/TaskListTemplate_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"name\": \"<string>\",\n  \"description\": \"<string>\",\n  \"isActive\": false,\n  \"items\": [\n    {\n      \"itemText\": \"<string>\",\n      \"sortOrder\": 0\n    }\n  ]\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/TaskListTemplate_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "PUT /api/TaskListTemplate/{id}",
+          "request": {
+            "method": "PUT",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/TaskListTemplate/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "TaskListTemplate",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): TaskListTemplate\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/TaskListTemplate_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"name\": \"<string>\",\n  \"description\": \"<string>\",\n  \"isActive\": false,\n  \"items\": [\n    {\n      \"itemText\": \"<string>\",\n      \"sortOrder\": 0\n    }\n  ]\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/TaskListTemplate_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "PUT /api/tasklisttemplates/{id}",
+          "request": {
+            "method": "PUT",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/tasklisttemplates/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "tasklisttemplates",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): TaskListTemplate\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/TaskListTemplate_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"name\": \"<string>\",\n  \"description\": \"<string>\",\n  \"isActive\": false,\n  \"items\": [\n    {\n      \"itemText\": \"<string>\",\n      \"sortOrder\": 0\n    }\n  ]\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/TaskListTemplate_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "Uplift",
+      "item": [
+        {
+          "name": "GET /api/Uplift",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Uplift?status=&tier=0&page=0&pageSize=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Uplift"
+              ],
+              "query": [
+                {
+                  "key": "status",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "tier",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "page",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "pageSize",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Uplift\nOperation ID: not specified\n\nParameters: query status (optional, string); query tier (optional, integer/int32); query page (optional, integer/int32); query pageSize (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Uplift/{id}/evidence",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Uplift/:id/evidence",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Uplift",
+                ":id",
+                "evidence"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Uplift\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Uplift/can-approve",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Uplift/can-approve?tier=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Uplift",
+                "can-approve"
+              ],
+              "query": [
+                {
+                  "key": "tier",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Uplift\nOperation ID: not specified\n\nParameters: query tier (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Uplift/dispatch/{dispatchId}",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Uplift/dispatch/:dispatchId",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Uplift",
+                "dispatch",
+                ":dispatchId"
+              ],
+              "variable": [
+                {
+                  "key": "dispatchId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Uplift\nOperation ID: not specified\n\nParameters: path dispatchId (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/uplifts",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/uplifts?status=&tier=0&page=0&pageSize=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "uplifts"
+              ],
+              "query": [
+                {
+                  "key": "status",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "tier",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "page",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "pageSize",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Uplift\nOperation ID: not specified\n\nParameters: query status (optional, string); query tier (optional, integer/int32); query page (optional, integer/int32); query pageSize (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/uplifts/{id}/evidence",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/uplifts/:id/evidence",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "uplifts",
+                ":id",
+                "evidence"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Uplift\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/uplifts/can-approve",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/uplifts/can-approve?tier=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "uplifts",
+                "can-approve"
+              ],
+              "query": [
+                {
+                  "key": "tier",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Uplift\nOperation ID: not specified\n\nParameters: query tier (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/uplifts/dispatch/{dispatchId}",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/uplifts/dispatch/:dispatchId",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "uplifts",
+                "dispatch",
+                ":dispatchId"
+              ],
+              "variable": [
+                {
+                  "key": "dispatchId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Uplift\nOperation ID: not specified\n\nParameters: path dispatchId (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Uplift/{id}/approve",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/Uplift/:id/approve",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Uplift",
+                ":id",
+                "approve"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Uplift\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/DecisionRequest; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"note\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/DecisionRequest; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Uplift/{id}/deny",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/Uplift/:id/deny",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Uplift",
+                ":id",
+                "deny"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Uplift\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/DecisionRequest; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"note\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/DecisionRequest; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Uplift/{id}/reject",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/Uplift/:id/reject",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Uplift",
+                ":id",
+                "reject"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Uplift\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/DecisionRequest; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"note\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/DecisionRequest; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Uplift/{id}/request-changes",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/Uplift/:id/request-changes",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Uplift",
+                ":id",
+                "request-changes"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Uplift\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/DecisionRequest; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"note\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/DecisionRequest; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/uplifts/{id}/approve",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/uplifts/:id/approve",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "uplifts",
+                ":id",
+                "approve"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Uplift\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/DecisionRequest; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"note\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/DecisionRequest; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/uplifts/{id}/deny",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/uplifts/:id/deny",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "uplifts",
+                ":id",
+                "deny"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Uplift\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/DecisionRequest; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"note\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/DecisionRequest; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/uplifts/{id}/reject",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/uplifts/:id/reject",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "uplifts",
+                ":id",
+                "reject"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Uplift\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/DecisionRequest; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"note\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/DecisionRequest; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/uplifts/{id}/request-changes",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/uplifts/:id/request-changes",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "uplifts",
+                ":id",
+                "request-changes"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Uplift\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/DecisionRequest; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"note\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/DecisionRequest; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "User",
+      "item": [
+        {
+          "name": "DELETE /api/User/DeleteUser",
+          "request": {
+            "method": "DELETE",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/User/DeleteUser",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "User",
+                "DeleteUser"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): User\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/EditUser_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"id\": \"<string>\",\n  \"name\": \"<string>\",\n  \"email\": \"<string>\",\n  \"role\": \"<string>\",\n  \"accountId\": 0\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/EditUser_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/User",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/User",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "User"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): User\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/User/UserProfile",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/User/UserProfile",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "User",
+                "UserProfile"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): User\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/User/AddUser",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/User/AddUser",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "User",
+                "AddUser"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): User\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/User_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"name\": \"<string>\",\n  \"email\": \"<string>\",\n  \"contact\": \"<string>\",\n  \"role\": \"<string>\",\n  \"accountId\": 0\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/User_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/User/DeleteCurrentUser",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/User/DeleteCurrentUser",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "User",
+                "DeleteCurrentUser"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): User\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "PUT /api/User/EditUser",
+          "request": {
+            "method": "PUT",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/User/EditUser",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "User",
+                "EditUser"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): User\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/EditUser_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"id\": \"<string>\",\n  \"name\": \"<string>\",\n  \"email\": \"<string>\",\n  \"role\": \"<string>\",\n  \"accountId\": 0\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/EditUser_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "Vendor",
+      "item": [
+        {
+          "name": "DELETE /api/Vendor/{id}",
+          "request": {
+            "method": "DELETE",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Vendor/:id?id=0&confirmOpenWorkOrders=false",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Vendor",
+                ":id"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "confirmOpenWorkOrders",
+                  "value": "false",
+                  "description": "Optional; boolean",
+                  "disabled": false
+                }
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Vendor\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); query id (optional, integer/int32); query confirmOpenWorkOrders (optional, boolean)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "DELETE /api/vendors/{id}",
+          "request": {
+            "method": "DELETE",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendors/:id?id=0&confirmOpenWorkOrders=false",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendors",
+                ":id"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "confirmOpenWorkOrders",
+                  "value": "false",
+                  "description": "Optional; boolean",
+                  "disabled": false
+                }
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Vendor\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); query id (optional, integer/int32); query confirmOpenWorkOrders (optional, boolean)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Vendor/{id}",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Vendor/:id?id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Vendor",
+                ":id"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Vendor\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); query id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Vendor/{id}/deactivation-impact",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Vendor/:id/deactivation-impact",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Vendor",
+                ":id",
+                "deactivation-impact"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Vendor\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Vendor/{id}/portal-token",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Vendor/:id/portal-token",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Vendor",
+                ":id",
+                "portal-token"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Vendor\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Vendor/Dropdown",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Vendor/Dropdown?trade=&siteZip=",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Vendor",
+                "Dropdown"
+              ],
+              "query": [
+                {
+                  "key": "trade",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "siteZip",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Vendor\nOperation ID: not specified\n\nParameters: query trade (optional, string); query siteZip (optional, string)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Vendor/facets",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Vendor/facets?isActive=false",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Vendor",
+                "facets"
+              ],
+              "query": [
+                {
+                  "key": "isActive",
+                  "value": "false",
+                  "description": "Optional; boolean",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Vendor\nOperation ID: not specified\n\nParameters: query isActive (optional, boolean)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Vendor/GetById",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Vendor/GetById?id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Vendor",
+                "GetById"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Vendor\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); query id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/Vendor/GetVendorList",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Vendor/GetVendorList?search=&page=0&pageSize=0&isActive=false&companies=&trades=&locations=&jobBuckets=",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Vendor",
+                "GetVendorList"
+              ],
+              "query": [
+                {
+                  "key": "search",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "page",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "pageSize",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "isActive",
+                  "value": "false",
+                  "description": "Optional; boolean",
+                  "disabled": false
+                },
+                {
+                  "key": "companies",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "trades",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "locations",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "jobBuckets",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Vendor\nOperation ID: not specified\n\nParameters: query search (optional, string); query page (optional, integer/int32); query pageSize (optional, integer/int32); query isActive (optional, boolean); query companies (optional, array); query trades (optional, array); query locations (optional, array); query jobBuckets (optional, array)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/vendors/{id}",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendors/:id?id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendors",
+                ":id"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Vendor\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); query id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/vendors/{id}/deactivation-impact",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendors/:id/deactivation-impact",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendors",
+                ":id",
+                "deactivation-impact"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Vendor\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/vendors/{id}/portal-token",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendors/:id/portal-token",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendors",
+                ":id",
+                "portal-token"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Vendor\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/vendors/Dropdown",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendors/Dropdown?trade=&siteZip=",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendors",
+                "Dropdown"
+              ],
+              "query": [
+                {
+                  "key": "trade",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "siteZip",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Vendor\nOperation ID: not specified\n\nParameters: query trade (optional, string); query siteZip (optional, string)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/vendors/facets",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendors/facets?isActive=false",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendors",
+                "facets"
+              ],
+              "query": [
+                {
+                  "key": "isActive",
+                  "value": "false",
+                  "description": "Optional; boolean",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Vendor\nOperation ID: not specified\n\nParameters: query isActive (optional, boolean)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/vendors/GetById",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendors/GetById?id=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendors",
+                "GetById"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Vendor\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); query id (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/vendors/GetVendorList",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendors/GetVendorList?search=&page=0&pageSize=0&isActive=false&companies=&trades=&locations=&jobBuckets=",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendors",
+                "GetVendorList"
+              ],
+              "query": [
+                {
+                  "key": "search",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "page",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "pageSize",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "isActive",
+                  "value": "false",
+                  "description": "Optional; boolean",
+                  "disabled": false
+                },
+                {
+                  "key": "companies",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "trades",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "locations",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "jobBuckets",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Vendor\nOperation ID: not specified\n\nParameters: query search (optional, string); query page (optional, integer/int32); query pageSize (optional, integer/int32); query isActive (optional, boolean); query companies (optional, array); query trades (optional, array); query locations (optional, array); query jobBuckets (optional, array)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Vendor",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/Vendor",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Vendor"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Vendor\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/Vendor_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"companyName\": \"<string>\",\n  \"companyId\": 0,\n  \"contactName\": \"<string>\",\n  \"email\": \"<string>\",\n  \"phone\": \"<string>\",\n  \"companyPhone\": \"<string>\",\n  \"preferredContact\": \"<string>\",\n  \"address\": \"<string>\",\n  \"city\": \"<string>\",\n  \"state\": \"<string>\",\n  \"zip\": \"<string>\",\n  \"tradeSpecialties\": \"<string>\",\n  \"googleMapsUrl\": \"<string>\",\n  \"notes\": \"<string>\",\n  \"isActive\": false\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/Vendor_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Vendor/{id}/portal-token/revoke",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Vendor/:id/portal-token/revoke",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Vendor",
+                ":id",
+                "portal-token",
+                "revoke"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Vendor\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Vendor/{id}/portal-token/rotate",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Vendor/:id/portal-token/rotate",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Vendor",
+                ":id",
+                "portal-token",
+                "rotate"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Vendor\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Vendor/Create",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/Vendor/Create",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Vendor",
+                "Create"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Vendor\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/Vendor_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"companyName\": \"<string>\",\n  \"companyId\": 0,\n  \"contactName\": \"<string>\",\n  \"email\": \"<string>\",\n  \"phone\": \"<string>\",\n  \"companyPhone\": \"<string>\",\n  \"preferredContact\": \"<string>\",\n  \"address\": \"<string>\",\n  \"city\": \"<string>\",\n  \"state\": \"<string>\",\n  \"zip\": \"<string>\",\n  \"tradeSpecialties\": \"<string>\",\n  \"googleMapsUrl\": \"<string>\",\n  \"notes\": \"<string>\",\n  \"isActive\": false\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/Vendor_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Vendor/Delete",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/Vendor/Delete?id=0&confirmOpenWorkOrders=false",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Vendor",
+                "Delete"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "confirmOpenWorkOrders",
+                  "value": "false",
+                  "description": "Optional; boolean",
+                  "disabled": false
+                }
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Vendor\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); query id (optional, integer/int32); query confirmOpenWorkOrders (optional, boolean)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/Vendor/Update",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/Vendor/Update",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Vendor",
+                "Update"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Vendor\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/EditVendor_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"companyName\": \"<string>\",\n  \"companyId\": 0,\n  \"contactName\": \"<string>\",\n  \"email\": \"<string>\",\n  \"phone\": \"<string>\",\n  \"companyPhone\": \"<string>\",\n  \"preferredContact\": \"<string>\",\n  \"address\": \"<string>\",\n  \"city\": \"<string>\",\n  \"state\": \"<string>\",\n  \"zip\": \"<string>\",\n  \"tradeSpecialties\": \"<string>\",\n  \"googleMapsUrl\": \"<string>\",\n  \"notes\": \"<string>\",\n  \"isActive\": false,\n  \"id\": 0,\n  \"confirmOpenWorkOrders\": false\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/EditVendor_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/vendors",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendors",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendors"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Vendor\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/Vendor_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"companyName\": \"<string>\",\n  \"companyId\": 0,\n  \"contactName\": \"<string>\",\n  \"email\": \"<string>\",\n  \"phone\": \"<string>\",\n  \"companyPhone\": \"<string>\",\n  \"preferredContact\": \"<string>\",\n  \"address\": \"<string>\",\n  \"city\": \"<string>\",\n  \"state\": \"<string>\",\n  \"zip\": \"<string>\",\n  \"tradeSpecialties\": \"<string>\",\n  \"googleMapsUrl\": \"<string>\",\n  \"notes\": \"<string>\",\n  \"isActive\": false\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/Vendor_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/vendors/{id}/portal-token/revoke",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendors/:id/portal-token/revoke",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendors",
+                ":id",
+                "portal-token",
+                "revoke"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Vendor\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/vendors/{id}/portal-token/rotate",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendors/:id/portal-token/rotate",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendors",
+                ":id",
+                "portal-token",
+                "rotate"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Vendor\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/vendors/Create",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendors/Create",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendors",
+                "Create"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Vendor\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/Vendor_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"companyName\": \"<string>\",\n  \"companyId\": 0,\n  \"contactName\": \"<string>\",\n  \"email\": \"<string>\",\n  \"phone\": \"<string>\",\n  \"companyPhone\": \"<string>\",\n  \"preferredContact\": \"<string>\",\n  \"address\": \"<string>\",\n  \"city\": \"<string>\",\n  \"state\": \"<string>\",\n  \"zip\": \"<string>\",\n  \"tradeSpecialties\": \"<string>\",\n  \"googleMapsUrl\": \"<string>\",\n  \"notes\": \"<string>\",\n  \"isActive\": false\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/Vendor_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/vendors/Delete",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendors/Delete?id=0&confirmOpenWorkOrders=false",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendors",
+                "Delete"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "confirmOpenWorkOrders",
+                  "value": "false",
+                  "description": "Optional; boolean",
+                  "disabled": false
+                }
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Vendor\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); query id (optional, integer/int32); query confirmOpenWorkOrders (optional, boolean)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/vendors/Update",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendors/Update",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendors",
+                "Update"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Vendor\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/EditVendor_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"companyName\": \"<string>\",\n  \"companyId\": 0,\n  \"contactName\": \"<string>\",\n  \"email\": \"<string>\",\n  \"phone\": \"<string>\",\n  \"companyPhone\": \"<string>\",\n  \"preferredContact\": \"<string>\",\n  \"address\": \"<string>\",\n  \"city\": \"<string>\",\n  \"state\": \"<string>\",\n  \"zip\": \"<string>\",\n  \"tradeSpecialties\": \"<string>\",\n  \"googleMapsUrl\": \"<string>\",\n  \"notes\": \"<string>\",\n  \"isActive\": false,\n  \"id\": 0,\n  \"confirmOpenWorkOrders\": false\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/EditVendor_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "PUT /api/Vendor/{id}",
+          "request": {
+            "method": "PUT",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/Vendor/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Vendor",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Vendor\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/EditVendor_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"companyName\": \"<string>\",\n  \"companyId\": 0,\n  \"contactName\": \"<string>\",\n  \"email\": \"<string>\",\n  \"phone\": \"<string>\",\n  \"companyPhone\": \"<string>\",\n  \"preferredContact\": \"<string>\",\n  \"address\": \"<string>\",\n  \"city\": \"<string>\",\n  \"state\": \"<string>\",\n  \"zip\": \"<string>\",\n  \"tradeSpecialties\": \"<string>\",\n  \"googleMapsUrl\": \"<string>\",\n  \"notes\": \"<string>\",\n  \"isActive\": false,\n  \"id\": 0,\n  \"confirmOpenWorkOrders\": false\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/EditVendor_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "PUT /api/Vendor/{id}/work-order-update",
+          "request": {
+            "method": "PUT",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/Vendor/:id/work-order-update",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "Vendor",
+                ":id",
+                "work-order-update"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Vendor\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/WorkOrderVendorUpdate_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"workOrderId\": 0,\n  \"contactName\": \"<string>\",\n  \"preferredContact\": \"<string>\",\n  \"phone\": \"<string>\",\n  \"email\": \"<string>\",\n  \"notes\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/WorkOrderVendorUpdate_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "PUT /api/vendors/{id}",
+          "request": {
+            "method": "PUT",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendors/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendors",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Vendor\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/EditVendor_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"companyName\": \"<string>\",\n  \"companyId\": 0,\n  \"contactName\": \"<string>\",\n  \"email\": \"<string>\",\n  \"phone\": \"<string>\",\n  \"companyPhone\": \"<string>\",\n  \"preferredContact\": \"<string>\",\n  \"address\": \"<string>\",\n  \"city\": \"<string>\",\n  \"state\": \"<string>\",\n  \"zip\": \"<string>\",\n  \"tradeSpecialties\": \"<string>\",\n  \"googleMapsUrl\": \"<string>\",\n  \"notes\": \"<string>\",\n  \"isActive\": false,\n  \"id\": 0,\n  \"confirmOpenWorkOrders\": false\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/EditVendor_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "PUT /api/vendors/{id}/work-order-update",
+          "request": {
+            "method": "PUT",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendors/:id/work-order-update",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendors",
+                ":id",
+                "work-order-update"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): Vendor\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/WorkOrderVendorUpdate_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"workOrderId\": 0,\n  \"contactName\": \"<string>\",\n  \"preferredContact\": \"<string>\",\n  \"phone\": \"<string>\",\n  \"email\": \"<string>\",\n  \"notes\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/WorkOrderVendorUpdate_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "VendorCompanyRoster",
+      "item": [
+        {
+          "name": "GET /api/vendor-company-roster",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-company-roster?vendorId=0&companyId=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-company-roster"
+              ],
+              "query": [
+                {
+                  "key": "vendorId",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "companyId",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorCompanyRoster\nOperation ID: not specified\n\nParameters: query vendorId (optional, integer/int32); query companyId (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "PATCH /api/vendor-company-roster/{companyId}",
+          "request": {
+            "method": "PATCH",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-company-roster/:companyId",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-company-roster",
+                ":companyId"
+              ],
+              "variable": [
+                {
+                  "key": "companyId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorCompanyRoster\nOperation ID: not specified\n\nParameters: path companyId (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/AddTechniciansVendorRosterDTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"rowVersion\": \"<string>\",\n  \"addTechnicians\": [\n    {\n      \"id\": 0,\n      \"contactName\": \"<string>\",\n      \"phone\": \"<string>\",\n      \"email\": \"<string>\",\n      \"preferredContact\": \"<string>\",\n      \"tradeSpecialties\": \"<string>\",\n      \"isActive\": false\n    }\n  ],\n  \"companyFields\": {\n    \"name\": \"<string>\",\n    \"companyPhone\": \"<string>\",\n    \"email\": \"<string>\",\n    \"address\": \"<string>\",\n    \"city\": \"<string>\",\n    \"state\": \"<string>\",\n    \"zip\": \"<string>\",\n    \"googleMapsUrl\": \"<string>\",\n    \"notes\": \"<string>\"\n  }\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/AddTechniciansVendorRosterDTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/vendor-company-roster",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-company-roster",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-company-roster"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorCompanyRoster\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/CreateVendorRosterDTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"name\": \"<string>\",\n  \"companyPhone\": \"<string>\",\n  \"email\": \"<string>\",\n  \"address\": \"<string>\",\n  \"city\": \"<string>\",\n  \"state\": \"<string>\",\n  \"zip\": \"<string>\",\n  \"googleMapsUrl\": \"<string>\",\n  \"notes\": \"<string>\",\n  \"technicians\": [\n    {\n      \"id\": 0,\n      \"contactName\": \"<string>\",\n      \"phone\": \"<string>\",\n      \"email\": \"<string>\",\n      \"preferredContact\": \"<string>\",\n      \"tradeSpecialties\": \"<string>\",\n      \"isActive\": false\n    }\n  ]\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/CreateVendorRosterDTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "PUT /api/vendor-company-roster/{companyId}",
+          "request": {
+            "method": "PUT",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-company-roster/:companyId",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-company-roster",
+                ":companyId"
+              ],
+              "variable": [
+                {
+                  "key": "companyId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorCompanyRoster\nOperation ID: not specified\n\nParameters: path companyId (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/ReconcileVendorRosterDTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"rowVersion\": \"<string>\",\n  \"name\": \"<string>\",\n  \"companyPhone\": \"<string>\",\n  \"email\": \"<string>\",\n  \"address\": \"<string>\",\n  \"city\": \"<string>\",\n  \"state\": \"<string>\",\n  \"zip\": \"<string>\",\n  \"googleMapsUrl\": \"<string>\",\n  \"notes\": \"<string>\",\n  \"technicians\": [\n    {\n      \"id\": 0,\n      \"contactName\": \"<string>\",\n      \"phone\": \"<string>\",\n      \"email\": \"<string>\",\n      \"preferredContact\": \"<string>\",\n      \"tradeSpecialties\": \"<string>\",\n      \"isActive\": false\n    }\n  ]\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/ReconcileVendorRosterDTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "VendorOperations",
+      "item": [
+        {
+          "name": "GET /api/vendor-operations/availability",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-operations/availability?start=&end=&locationId=0&trade=",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-operations",
+                "availability"
+              ],
+              "query": [
+                {
+                  "key": "start",
+                  "value": "",
+                  "description": "Optional; string/date-time",
+                  "disabled": false
+                },
+                {
+                  "key": "end",
+                  "value": "",
+                  "description": "Optional; string/date-time",
+                  "disabled": false
+                },
+                {
+                  "key": "locationId",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "trade",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorOperations\nOperation ID: not specified\n\nParameters: query start (optional, string/date-time); query end (optional, string/date-time); query locationId (optional, integer/int32); query trade (optional, string)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/vendor-operations/insights",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-operations/insights?from=&to=&locationId=0&trade=&vendorId=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-operations",
+                "insights"
+              ],
+              "query": [
+                {
+                  "key": "from",
+                  "value": "",
+                  "description": "Optional; string/date-time",
+                  "disabled": false
+                },
+                {
+                  "key": "to",
+                  "value": "",
+                  "description": "Optional; string/date-time",
+                  "disabled": false
+                },
+                {
+                  "key": "locationId",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "trade",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "vendorId",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorOperations\nOperation ID: not specified\n\nParameters: query from (optional, string/date-time); query to (optional, string/date-time); query locationId (optional, integer/int32); query trade (optional, string); query vendorId (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/vendor-operations/insights.csv",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-operations/insights.csv?from=&to=&locationId=0&trade=&vendorId=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-operations",
+                "insights.csv"
+              ],
+              "query": [
+                {
+                  "key": "from",
+                  "value": "",
+                  "description": "Optional; string/date-time",
+                  "disabled": false
+                },
+                {
+                  "key": "to",
+                  "value": "",
+                  "description": "Optional; string/date-time",
+                  "disabled": false
+                },
+                {
+                  "key": "locationId",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "trade",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "vendorId",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorOperations\nOperation ID: not specified\n\nParameters: query from (optional, string/date-time); query to (optional, string/date-time); query locationId (optional, integer/int32); query trade (optional, string); query vendorId (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/vendor-operations/insights.pdf",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-operations/insights.pdf?from=&to=&locationId=0&trade=&vendorId=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-operations",
+                "insights.pdf"
+              ],
+              "query": [
+                {
+                  "key": "from",
+                  "value": "",
+                  "description": "Optional; string/date-time",
+                  "disabled": false
+                },
+                {
+                  "key": "to",
+                  "value": "",
+                  "description": "Optional; string/date-time",
+                  "disabled": false
+                },
+                {
+                  "key": "locationId",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "trade",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "vendorId",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorOperations\nOperation ID: not specified\n\nParameters: query from (optional, string/date-time); query to (optional, string/date-time); query locationId (optional, integer/int32); query trade (optional, string); query vendorId (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/vendor-operations/notifications",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-operations/notifications",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-operations",
+                "notifications"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorOperations\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/vendor-operations/sites/{locationId}/preferred-vendors",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-operations/sites/:locationId/preferred-vendors",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-operations",
+                "sites",
+                ":locationId",
+                "preferred-vendors"
+              ],
+              "variable": [
+                {
+                  "key": "locationId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorOperations\nOperation ID: not specified\n\nParameters: path locationId (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "PUT /api/vendor-operations/dispatches/{dispatchId}/commercial-status",
+          "request": {
+            "method": "PUT",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-operations/dispatches/:dispatchId/commercial-status",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-operations",
+                "dispatches",
+                ":dispatchId",
+                "commercial-status"
+              ],
+              "variable": [
+                {
+                  "key": "dispatchId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorOperations\nOperation ID: not specified\n\nParameters: path dispatchId (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/CommercialStatusRequest; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"invoiceStatus\": \"<string>\",\n  \"paymentStatus\": \"<string>\",\n  \"invoiceNumber\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/CommercialStatusRequest; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "PUT /api/vendor-operations/documents/{documentId}/review",
+          "request": {
+            "method": "PUT",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-operations/documents/:documentId/review",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-operations",
+                "documents",
+                ":documentId",
+                "review"
+              ],
+              "variable": [
+                {
+                  "key": "documentId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorOperations\nOperation ID: not specified\n\nParameters: path documentId (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/DocumentReviewRequest; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"reviewStatus\": \"<string>\",\n  \"rejectionReason\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/DocumentReviewRequest; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "PUT /api/vendor-operations/sites/{locationId}/preferred-vendors",
+          "request": {
+            "method": "PUT",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-operations/sites/:locationId/preferred-vendors",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-operations",
+                "sites",
+                ":locationId",
+                "preferred-vendors"
+              ],
+              "variable": [
+                {
+                  "key": "locationId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorOperations\nOperation ID: not specified\n\nParameters: path locationId (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from array; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "[\n  {\n    \"vendorId\": 0,\n    \"trade\": \"<string>\",\n    \"sortOrder\": 0\n  }\n]",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from array; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "PUT /api/vendor-operations/vendors/{vendorId}/availability",
+          "request": {
+            "method": "PUT",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-operations/vendors/:vendorId/availability",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-operations",
+                "vendors",
+                ":vendorId",
+                "availability"
+              ],
+              "variable": [
+                {
+                  "key": "vendorId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorOperations\nOperation ID: not specified\n\nParameters: path vendorId (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/VendorAvailabilityRequest; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"status\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/VendorAvailabilityRequest; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "PUT /api/vendor-operations/work-orders/{workOrderId}/assignment",
+          "request": {
+            "method": "PUT",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-operations/work-orders/:workOrderId/assignment",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-operations",
+                "work-orders",
+                ":workOrderId",
+                "assignment"
+              ],
+              "variable": [
+                {
+                  "key": "workOrderId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorOperations\nOperation ID: not specified\n\nParameters: path workOrderId (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/VendorAssignmentRequest; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"vendorId\": 0,\n  \"scheduledStart\": \"2026-01-01T00:00:00Z\",\n  \"scheduledEnd\": \"2026-01-01T00:00:00Z\",\n  \"estimatedArrivalAt\": \"2026-01-01T00:00:00Z\",\n  \"etaManualOverride\": false\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/VendorAssignmentRequest; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "VendorPortal",
+      "item": [
+        {
+          "name": "GET /api/vendor-portal/dispatches",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-portal/dispatches?status=",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-portal",
+                "dispatches"
+              ],
+              "query": [
+                {
+                  "key": "status",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: query status (optional, string)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/vendor-portal/dispatches/{id}",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-portal/dispatches/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-portal",
+                "dispatches",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/vendor-portal/dispatches/{id}/completion-documents/{documentId}",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-portal/dispatches/:id/completion-documents/:documentId",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-portal",
+                "dispatches",
+                ":id",
+                "completion-documents",
+                ":documentId"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                },
+                {
+                  "key": "documentId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); path documentId (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/vendor-portal/dispatches/{id}/documents/{documentId}",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-portal/dispatches/:id/documents/:documentId",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-portal",
+                "dispatches",
+                ":id",
+                "documents",
+                ":documentId"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                },
+                {
+                  "key": "documentId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); path documentId (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/vendor-portal/dispatches/{id}/documents/{documentId}/status",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-portal/dispatches/:id/documents/:documentId/status",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-portal",
+                "dispatches",
+                ":id",
+                "documents",
+                ":documentId",
+                "status"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                },
+                {
+                  "key": "documentId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); path documentId (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/vendor-portal/session",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-portal/session",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-portal",
+                "session"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/vendorportal/dispatches",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendorportal/dispatches?status=",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendorportal",
+                "dispatches"
+              ],
+              "query": [
+                {
+                  "key": "status",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: query status (optional, string)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/vendorportal/dispatches/{id}",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendorportal/dispatches/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendorportal",
+                "dispatches",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/vendorportal/dispatches/{id}/completion-documents/{documentId}",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendorportal/dispatches/:id/completion-documents/:documentId",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendorportal",
+                "dispatches",
+                ":id",
+                "completion-documents",
+                ":documentId"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                },
+                {
+                  "key": "documentId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); path documentId (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/vendorportal/dispatches/{id}/documents/{documentId}",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendorportal/dispatches/:id/documents/:documentId",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendorportal",
+                "dispatches",
+                ":id",
+                "documents",
+                ":documentId"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                },
+                {
+                  "key": "documentId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); path documentId (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/vendorportal/dispatches/{id}/documents/{documentId}/status",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendorportal/dispatches/:id/documents/:documentId/status",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendorportal",
+                "dispatches",
+                ":id",
+                "documents",
+                ":documentId",
+                "status"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                },
+                {
+                  "key": "documentId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); path documentId (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/vendorportal/session",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendorportal/session",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendorportal",
+                "session"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/vendor-portal/dispatches/{id}/accept",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-portal/dispatches/:id/accept",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-portal",
+                "dispatches",
+                ":id",
+                "accept"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/vendor-portal/dispatches/{id}/checklist/{itemId}",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-portal/dispatches/:id/checklist/:itemId",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-portal",
+                "dispatches",
+                ":id",
+                "checklist",
+                ":itemId"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                },
+                {
+                  "key": "itemId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); path itemId (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/ChecklistUpdateRequest; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"isCompleted\": false\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/ChecklistUpdateRequest; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/vendor-portal/dispatches/{id}/comments",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-portal/dispatches/:id/comments",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-portal",
+                "dispatches",
+                ":id",
+                "comments"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/CommentRequest; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"commentText\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/CommentRequest; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/vendor-portal/dispatches/{id}/completion-documents",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-portal/dispatches/:id/completion-documents",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-portal",
+                "dispatches",
+                ":id",
+                "completion-documents"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: multipart/form-data; Illustrative placeholder generated from object; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "formdata",
+              "formdata": [
+                {
+                  "key": "ContentType",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "ContentDisposition",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "Headers",
+                  "type": "text",
+                  "value": "[object Object]",
+                  "description": "Optional; object"
+                },
+                {
+                  "key": "Length",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; integer/int64"
+                },
+                {
+                  "key": "Name",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "FileName",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "replacesDocumentId",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; integer/int32"
+                },
+                {
+                  "key": "purpose",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                }
+              ],
+              "description": "Illustrative placeholder generated from object; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/vendor-portal/dispatches/{id}/documents",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-portal/dispatches/:id/documents",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-portal",
+                "dispatches",
+                ":id",
+                "documents"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: multipart/form-data; Illustrative placeholder generated from object; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "formdata",
+              "formdata": [
+                {
+                  "key": "ContentType",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "ContentDisposition",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "Headers",
+                  "type": "text",
+                  "value": "[object Object]",
+                  "description": "Optional; object"
+                },
+                {
+                  "key": "Length",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; integer/int64"
+                },
+                {
+                  "key": "Name",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "FileName",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "replacesDocumentId",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; integer/int32"
+                },
+                {
+                  "key": "purpose",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                }
+              ],
+              "description": "Illustrative placeholder generated from object; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/vendor-portal/dispatches/{id}/refuse",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-portal/dispatches/:id/refuse",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-portal",
+                "dispatches",
+                ":id",
+                "refuse"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/RefuseRequest; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"reason\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/RefuseRequest; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/vendor-portal/dispatches/{id}/request-cancel",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-portal/dispatches/:id/request-cancel",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-portal",
+                "dispatches",
+                ":id",
+                "request-cancel"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/RequestCancelRequest; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"reason\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/RequestCancelRequest; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/vendor-portal/dispatches/{id}/signoff",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-portal/dispatches/:id/signoff",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-portal",
+                "dispatches",
+                ":id",
+                "signoff"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/SignoffRequest; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"name\": \"<string>\",\n  \"signature\": \"<string>\",\n  \"signatureMethod\": \"<string>\",\n  \"signoffType\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/SignoffRequest; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/vendor-portal/dispatches/{id}/status",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-portal/dispatches/:id/status",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-portal",
+                "dispatches",
+                ":id",
+                "status"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/ChangeStatusRequest; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"status\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/ChangeStatusRequest; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/vendor-portal/dispatches/{id}/uplift-request",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-portal/dispatches/:id/uplift-request",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-portal",
+                "dispatches",
+                ":id",
+                "uplift-request"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/UpliftRequestBody; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"requestedNTE\": 0,\n  \"reason\": \"<string>\",\n  \"requestKey\": \"<string>\",\n  \"evidenceDocumentId\": 0\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/UpliftRequestBody; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/vendor-portal/dispatches/{id}/uplift-request/{requestId}/cancel",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-portal/dispatches/:id/uplift-request/:requestId/cancel",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-portal",
+                "dispatches",
+                ":id",
+                "uplift-request",
+                ":requestId",
+                "cancel"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                },
+                {
+                  "key": "requestId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); path requestId (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/vendor-portal/dispatches/{id}/uplift-request/{requestId}/revise",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-portal/dispatches/:id/uplift-request/:requestId/revise",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-portal",
+                "dispatches",
+                ":id",
+                "uplift-request",
+                ":requestId",
+                "revise"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                },
+                {
+                  "key": "requestId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); path requestId (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/UpliftRequestBody; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"requestedNTE\": 0,\n  \"reason\": \"<string>\",\n  \"requestKey\": \"<string>\",\n  \"evidenceDocumentId\": 0\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/UpliftRequestBody; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/vendor-portal/dispatches/{id}/uplift-request/{requestId}/withdraw",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendor-portal/dispatches/:id/uplift-request/:requestId/withdraw",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendor-portal",
+                "dispatches",
+                ":id",
+                "uplift-request",
+                ":requestId",
+                "withdraw"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                },
+                {
+                  "key": "requestId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); path requestId (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/vendorportal/dispatches/{id}/accept",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendorportal/dispatches/:id/accept",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendorportal",
+                "dispatches",
+                ":id",
+                "accept"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/vendorportal/dispatches/{id}/checklist/{itemId}",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendorportal/dispatches/:id/checklist/:itemId",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendorportal",
+                "dispatches",
+                ":id",
+                "checklist",
+                ":itemId"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                },
+                {
+                  "key": "itemId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); path itemId (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/ChecklistUpdateRequest; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"isCompleted\": false\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/ChecklistUpdateRequest; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/vendorportal/dispatches/{id}/comments",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendorportal/dispatches/:id/comments",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendorportal",
+                "dispatches",
+                ":id",
+                "comments"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/CommentRequest; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"commentText\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/CommentRequest; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/vendorportal/dispatches/{id}/completion-documents",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendorportal/dispatches/:id/completion-documents",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendorportal",
+                "dispatches",
+                ":id",
+                "completion-documents"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: multipart/form-data; Illustrative placeholder generated from object; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "formdata",
+              "formdata": [
+                {
+                  "key": "ContentType",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "ContentDisposition",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "Headers",
+                  "type": "text",
+                  "value": "[object Object]",
+                  "description": "Optional; object"
+                },
+                {
+                  "key": "Length",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; integer/int64"
+                },
+                {
+                  "key": "Name",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "FileName",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "replacesDocumentId",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; integer/int32"
+                },
+                {
+                  "key": "purpose",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                }
+              ],
+              "description": "Illustrative placeholder generated from object; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/vendorportal/dispatches/{id}/documents",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendorportal/dispatches/:id/documents",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendorportal",
+                "dispatches",
+                ":id",
+                "documents"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: multipart/form-data; Illustrative placeholder generated from object; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "formdata",
+              "formdata": [
+                {
+                  "key": "ContentType",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "ContentDisposition",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "Headers",
+                  "type": "text",
+                  "value": "[object Object]",
+                  "description": "Optional; object"
+                },
+                {
+                  "key": "Length",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; integer/int64"
+                },
+                {
+                  "key": "Name",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "FileName",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "replacesDocumentId",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; integer/int32"
+                },
+                {
+                  "key": "purpose",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                }
+              ],
+              "description": "Illustrative placeholder generated from object; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/vendorportal/dispatches/{id}/refuse",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendorportal/dispatches/:id/refuse",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendorportal",
+                "dispatches",
+                ":id",
+                "refuse"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/RefuseRequest; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"reason\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/RefuseRequest; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/vendorportal/dispatches/{id}/request-cancel",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendorportal/dispatches/:id/request-cancel",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendorportal",
+                "dispatches",
+                ":id",
+                "request-cancel"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/RequestCancelRequest; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"reason\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/RequestCancelRequest; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/vendorportal/dispatches/{id}/signoff",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendorportal/dispatches/:id/signoff",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendorportal",
+                "dispatches",
+                ":id",
+                "signoff"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/SignoffRequest; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"name\": \"<string>\",\n  \"signature\": \"<string>\",\n  \"signatureMethod\": \"<string>\",\n  \"signoffType\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/SignoffRequest; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/vendorportal/dispatches/{id}/status",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendorportal/dispatches/:id/status",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendorportal",
+                "dispatches",
+                ":id",
+                "status"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/ChangeStatusRequest; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"status\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/ChangeStatusRequest; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/vendorportal/dispatches/{id}/uplift-request",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendorportal/dispatches/:id/uplift-request",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendorportal",
+                "dispatches",
+                ":id",
+                "uplift-request"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/UpliftRequestBody; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"requestedNTE\": 0,\n  \"reason\": \"<string>\",\n  \"requestKey\": \"<string>\",\n  \"evidenceDocumentId\": 0\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/UpliftRequestBody; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/vendorportal/dispatches/{id}/uplift-request/{requestId}/cancel",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendorportal/dispatches/:id/uplift-request/:requestId/cancel",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendorportal",
+                "dispatches",
+                ":id",
+                "uplift-request",
+                ":requestId",
+                "cancel"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                },
+                {
+                  "key": "requestId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); path requestId (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/vendorportal/dispatches/{id}/uplift-request/{requestId}/revise",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendorportal/dispatches/:id/uplift-request/:requestId/revise",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendorportal",
+                "dispatches",
+                ":id",
+                "uplift-request",
+                ":requestId",
+                "revise"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                },
+                {
+                  "key": "requestId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); path requestId (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/UpliftRequestBody; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"requestedNTE\": 0,\n  \"reason\": \"<string>\",\n  \"requestKey\": \"<string>\",\n  \"evidenceDocumentId\": 0\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/UpliftRequestBody; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/vendorportal/dispatches/{id}/uplift-request/{requestId}/withdraw",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/vendorportal/dispatches/:id/uplift-request/:requestId/withdraw",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "vendorportal",
+                "dispatches",
+                ":id",
+                "uplift-request",
+                ":requestId",
+                "withdraw"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                },
+                {
+                  "key": "requestId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): VendorPortal\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); path requestId (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "WorkOrder",
+      "item": [
+        {
+          "name": "DELETE /api/WorkOrder/DeleteWorkorder",
+          "request": {
+            "method": "DELETE",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/DeleteWorkorder",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                "DeleteWorkorder"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/EditWorkorder_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"id\": 0,\n  \"workerOrderNumber\": \"<string>\",\n  \"workerOrderTitle\": \"<string>\",\n  \"description\": \"<string>\",\n  \"po\": \"<string>\",\n  \"tt\": \"<string>\",\n  \"assignTo\": \"<string>\",\n  \"dueDate\": \"2026-01-01T00:00:00Z\",\n  \"priority\": 1,\n  \"status\": 1,\n  \"locationId\": 0,\n  \"problem\": \"<string>\",\n  \"trade\": \"<string>\",\n  \"subTrade\": \"<string>\",\n  \"vendorNTE\": 0,\n  \"scheduledDate\": \"2026-01-01T00:00:00Z\",\n  \"completedDate\": \"2026-01-01T00:00:00Z\",\n  \"source\": \"<string>\",\n  \"attachments\": [\n    \"<binary file>\"\n  ],\n  \"beforPhotoIssue\": \"<string>\",\n  \"beforPhotoAttachment\": \"<binary file>\",\n  \"afterPhotoIssue\": \"<string>\",\n  \"afterPhotoAttachment\": \"<binary file>\",\n  \"signOffName\": \"<string>\",\n  \"signOffAttachment\": \"<binary file>\",\n  \"signOffSignature\": \"<string>\",\n  \"contactIds\": [\n    0\n  ],\n  \"categoryIds\": [\n    0\n  ]\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/EditWorkorder_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "DELETE /api/workorders/DeleteWorkorder",
+          "request": {
+            "method": "DELETE",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/DeleteWorkorder",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "DeleteWorkorder"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/EditWorkorder_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"id\": 0,\n  \"workerOrderNumber\": \"<string>\",\n  \"workerOrderTitle\": \"<string>\",\n  \"description\": \"<string>\",\n  \"po\": \"<string>\",\n  \"tt\": \"<string>\",\n  \"assignTo\": \"<string>\",\n  \"dueDate\": \"2026-01-01T00:00:00Z\",\n  \"priority\": 1,\n  \"status\": 1,\n  \"locationId\": 0,\n  \"problem\": \"<string>\",\n  \"trade\": \"<string>\",\n  \"subTrade\": \"<string>\",\n  \"vendorNTE\": 0,\n  \"scheduledDate\": \"2026-01-01T00:00:00Z\",\n  \"completedDate\": \"2026-01-01T00:00:00Z\",\n  \"source\": \"<string>\",\n  \"attachments\": [\n    \"<binary file>\"\n  ],\n  \"beforPhotoIssue\": \"<string>\",\n  \"beforPhotoAttachment\": \"<binary file>\",\n  \"afterPhotoIssue\": \"<string>\",\n  \"afterPhotoAttachment\": \"<binary file>\",\n  \"signOffName\": \"<string>\",\n  \"signOffAttachment\": \"<binary file>\",\n  \"signOffSignature\": \"<string>\",\n  \"contactIds\": [\n    0\n  ],\n  \"categoryIds\": [\n    0\n  ]\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/EditWorkorder_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/WorkOrder/{id}",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/WorkOrder/GetComments",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/GetComments",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                "GetComments"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/WorkOrder/GetCommentsByWorkorderId",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/GetCommentsByWorkorderId?woid=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                "GetCommentsByWorkorderId"
+              ],
+              "query": [
+                {
+                  "key": "woid",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: query woid (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/WorkOrder/GetFilteredWorkorder",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/GetFilteredWorkorder?assignto=&location=&priority=&status=&duedate=&search=&sort=&sortby=&page=0&pageSize=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                "GetFilteredWorkorder"
+              ],
+              "query": [
+                {
+                  "key": "assignto",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "location",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "priority",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "status",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "duedate",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "search",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "sort",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "sortby",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "page",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "pageSize",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: query assignto (optional, array); query location (optional, array); query priority (optional, array); query status (optional, array); query duedate (optional, array); query search (optional, string); query sort (optional, string); query sortby (optional, string); query page (optional, integer/int32); query pageSize (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/WorkOrder/GetFilteredWorkorder2",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/GetFilteredWorkorder2?assignto=&location=&priority=&status=&duedate=&search=&sort=&sortby=&page=0&pageSize=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                "GetFilteredWorkorder2"
+              ],
+              "query": [
+                {
+                  "key": "assignto",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "location",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "priority",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "status",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "duedate",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "search",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "sort",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "sortby",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "page",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "pageSize",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: query assignto (optional, array); query location (optional, array); query priority (optional, array); query status (optional, array); query duedate (optional, array); query search (optional, string); query sort (optional, string); query sortby (optional, string); query page (optional, integer/int32); query pageSize (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/WorkOrder/GetWorkorderById",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/GetWorkorderById",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                "GetWorkorderById"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/WorkOrder/GetWorkOrderList",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/GetWorkOrderList?search=&page=0&pageSize=0&sortBy=&sortDir=&status=&assignee=&locationId=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                "GetWorkOrderList"
+              ],
+              "query": [
+                {
+                  "key": "search",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "page",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "pageSize",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "sortBy",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "sortDir",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "status",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "assignee",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "locationId",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: query search (optional, string); query page (optional, integer/int32); query pageSize (optional, integer/int32); query sortBy (optional, string); query sortDir (optional, string); query status (optional, string); query assignee (optional, string); query locationId (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/WorkOrder/Getworkorders",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/Getworkorders",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                "Getworkorders"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/WorkOrder/GetworkordersDD",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/GetworkordersDD",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                "GetworkordersDD"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/workorders/{id}",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/workorders/GetComments",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/GetComments",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "GetComments"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/workorders/GetCommentsByWorkorderId",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/GetCommentsByWorkorderId?woid=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "GetCommentsByWorkorderId"
+              ],
+              "query": [
+                {
+                  "key": "woid",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: query woid (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/workorders/GetFilteredWorkorder",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/GetFilteredWorkorder?assignto=&location=&priority=&status=&duedate=&search=&sort=&sortby=&page=0&pageSize=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "GetFilteredWorkorder"
+              ],
+              "query": [
+                {
+                  "key": "assignto",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "location",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "priority",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "status",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "duedate",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "search",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "sort",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "sortby",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "page",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "pageSize",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: query assignto (optional, array); query location (optional, array); query priority (optional, array); query status (optional, array); query duedate (optional, array); query search (optional, string); query sort (optional, string); query sortby (optional, string); query page (optional, integer/int32); query pageSize (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/workorders/GetFilteredWorkorder2",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/GetFilteredWorkorder2?assignto=&location=&priority=&status=&duedate=&search=&sort=&sortby=&page=0&pageSize=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "GetFilteredWorkorder2"
+              ],
+              "query": [
+                {
+                  "key": "assignto",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "location",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "priority",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "status",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "duedate",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "search",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "sort",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "sortby",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "page",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "pageSize",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: query assignto (optional, array); query location (optional, array); query priority (optional, array); query status (optional, array); query duedate (optional, array); query search (optional, string); query sort (optional, string); query sortby (optional, string); query page (optional, integer/int32); query pageSize (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/workorders/GetWorkorderById",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/GetWorkorderById",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "GetWorkorderById"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/workorders/GetWorkOrderList",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/GetWorkOrderList?search=&page=0&pageSize=0&sortBy=&sortDir=&status=&assignee=&locationId=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "GetWorkOrderList"
+              ],
+              "query": [
+                {
+                  "key": "search",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "page",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "pageSize",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "sortBy",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "sortDir",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "status",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "assignee",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "locationId",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: query search (optional, string); query page (optional, integer/int32); query pageSize (optional, integer/int32); query sortBy (optional, string); query sortDir (optional, string); query status (optional, string); query assignee (optional, string); query locationId (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/workorders/Getworkorders",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/Getworkorders",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "Getworkorders"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/workorders/GetworkordersDD",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/GetworkordersDD",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "GetworkordersDD"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/WorkOrder/AddComment",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/AddComment",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                "AddComment"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: none\nRequest body: multipart/form-data; Illustrative placeholder generated from object; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "formdata",
+              "formdata": [
+                {
+                  "key": "Text",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "Document",
+                  "type": "file",
+                  "src": "",
+                  "description": "Optional; string/binary"
+                },
+                {
+                  "key": "WorkorderId",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; integer/int32"
+                },
+                {
+                  "key": "CreatedDate",
+                  "type": "text",
+                  "value": "2026-01-01T00:00:00Z",
+                  "description": "Optional; string/date-time"
+                },
+                {
+                  "key": "UserId",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "CommentType",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                }
+              ],
+              "description": "Illustrative placeholder generated from object; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/WorkOrder/AddCommentJson",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/AddCommentJson",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                "AddCommentJson"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/Comments_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"text\": \"<string>\",\n  \"document\": \"<binary file>\",\n  \"workorderId\": 0,\n  \"createdDate\": \"2026-01-01T00:00:00Z\",\n  \"userId\": \"<string>\",\n  \"commentType\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/Comments_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/WorkOrder/AddWorkorder",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/AddWorkorder",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                "AddWorkorder"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: none\nRequest body: multipart/form-data; Illustrative placeholder generated from object; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "formdata",
+              "formdata": [
+                {
+                  "key": "WorkerOrderNumber",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "WorkerOrderTitle",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "Description",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "PO",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "TT",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "AssignTo",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "DueDate",
+                  "type": "text",
+                  "value": "2026-01-01T00:00:00Z",
+                  "description": "Optional; string/date-time"
+                },
+                {
+                  "key": "Priority",
+                  "type": "text",
+                  "value": "1",
+                  "description": "Optional; #/components/schemas/WorkOrderPriority"
+                },
+                {
+                  "key": "LocationId",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; integer/int32"
+                },
+                {
+                  "key": "istemplate",
+                  "type": "text",
+                  "value": "false",
+                  "description": "Optional; boolean"
+                },
+                {
+                  "key": "Attachments",
+                  "type": "text",
+                  "value": "<binary file>",
+                  "description": "Optional; array"
+                },
+                {
+                  "key": "BeforPhotoIssue",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "BeforPhotoAttachment",
+                  "type": "file",
+                  "src": "",
+                  "description": "Optional; string/binary"
+                },
+                {
+                  "key": "AfterPhotoIssue",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "AfterPhotoAttachment",
+                  "type": "file",
+                  "src": "",
+                  "description": "Optional; string/binary"
+                },
+                {
+                  "key": "SignOffName",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "SignOffAttachment",
+                  "type": "file",
+                  "src": "",
+                  "description": "Optional; string/binary"
+                },
+                {
+                  "key": "SignOffSignature",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "ContactIds",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; array"
+                },
+                {
+                  "key": "CategoryIds",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; array"
+                },
+                {
+                  "key": "Customer",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                }
+              ],
+              "description": "Illustrative placeholder generated from object; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/WorkOrder/ChangeAssignment",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/ChangeAssignment?id=0&assignTo=",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                "ChangeAssignment"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "assignTo",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: query id (optional, integer/int32); query assignTo (optional, string)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/WorkOrder/ChangeStatus",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/ChangeStatus?id=0&status=",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                "ChangeStatus"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "status",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: query id (optional, integer/int32); query status (optional, string)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/WorkOrder/EditWorkorder",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/EditWorkorder",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                "EditWorkorder"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: none\nRequest body: multipart/form-data; Illustrative placeholder generated from object; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "formdata",
+              "formdata": [
+                {
+                  "key": "Id",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; integer/int32"
+                },
+                {
+                  "key": "WorkerOrderNumber",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "WorkerOrderTitle",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "Description",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "PO",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "TT",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "AssignTo",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "DueDate",
+                  "type": "text",
+                  "value": "2026-01-01T00:00:00Z",
+                  "description": "Optional; string/date-time"
+                },
+                {
+                  "key": "Priority",
+                  "type": "text",
+                  "value": "1",
+                  "description": "Optional; #/components/schemas/WorkOrderPriority"
+                },
+                {
+                  "key": "Status",
+                  "type": "text",
+                  "value": "1",
+                  "description": "Optional; #/components/schemas/WorkOrderStatus"
+                },
+                {
+                  "key": "LocationId",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; integer/int32"
+                },
+                {
+                  "key": "Problem",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "Trade",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "SubTrade",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "VendorNTE",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; number/double"
+                },
+                {
+                  "key": "ScheduledDate",
+                  "type": "text",
+                  "value": "2026-01-01T00:00:00Z",
+                  "description": "Optional; string/date-time"
+                },
+                {
+                  "key": "CompletedDate",
+                  "type": "text",
+                  "value": "2026-01-01T00:00:00Z",
+                  "description": "Optional; string/date-time"
+                },
+                {
+                  "key": "Source",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "Attachments",
+                  "type": "text",
+                  "value": "<binary file>",
+                  "description": "Optional; array"
+                },
+                {
+                  "key": "BeforPhotoIssue",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "BeforPhotoAttachment",
+                  "type": "file",
+                  "src": "",
+                  "description": "Optional; string/binary"
+                },
+                {
+                  "key": "AfterPhotoIssue",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "AfterPhotoAttachment",
+                  "type": "file",
+                  "src": "",
+                  "description": "Optional; string/binary"
+                },
+                {
+                  "key": "SignOffName",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "SignOffAttachment",
+                  "type": "file",
+                  "src": "",
+                  "description": "Optional; string/binary"
+                },
+                {
+                  "key": "SignOffSignature",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "ContactIds",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; array"
+                },
+                {
+                  "key": "CategoryIds",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; array"
+                }
+              ],
+              "description": "Illustrative placeholder generated from object; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/workorders/AddComment",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/AddComment",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "AddComment"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: none\nRequest body: multipart/form-data; Illustrative placeholder generated from object; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "formdata",
+              "formdata": [
+                {
+                  "key": "Text",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "Document",
+                  "type": "file",
+                  "src": "",
+                  "description": "Optional; string/binary"
+                },
+                {
+                  "key": "WorkorderId",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; integer/int32"
+                },
+                {
+                  "key": "CreatedDate",
+                  "type": "text",
+                  "value": "2026-01-01T00:00:00Z",
+                  "description": "Optional; string/date-time"
+                },
+                {
+                  "key": "UserId",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "CommentType",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                }
+              ],
+              "description": "Illustrative placeholder generated from object; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/workorders/AddCommentJson",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/AddCommentJson",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "AddCommentJson"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/Comments_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"text\": \"<string>\",\n  \"document\": \"<binary file>\",\n  \"workorderId\": 0,\n  \"createdDate\": \"2026-01-01T00:00:00Z\",\n  \"userId\": \"<string>\",\n  \"commentType\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/Comments_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/workorders/AddWorkorder",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/AddWorkorder",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "AddWorkorder"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: none\nRequest body: multipart/form-data; Illustrative placeholder generated from object; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "formdata",
+              "formdata": [
+                {
+                  "key": "WorkerOrderNumber",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "WorkerOrderTitle",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "Description",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "PO",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "TT",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "AssignTo",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "DueDate",
+                  "type": "text",
+                  "value": "2026-01-01T00:00:00Z",
+                  "description": "Optional; string/date-time"
+                },
+                {
+                  "key": "Priority",
+                  "type": "text",
+                  "value": "1",
+                  "description": "Optional; #/components/schemas/WorkOrderPriority"
+                },
+                {
+                  "key": "LocationId",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; integer/int32"
+                },
+                {
+                  "key": "istemplate",
+                  "type": "text",
+                  "value": "false",
+                  "description": "Optional; boolean"
+                },
+                {
+                  "key": "Attachments",
+                  "type": "text",
+                  "value": "<binary file>",
+                  "description": "Optional; array"
+                },
+                {
+                  "key": "BeforPhotoIssue",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "BeforPhotoAttachment",
+                  "type": "file",
+                  "src": "",
+                  "description": "Optional; string/binary"
+                },
+                {
+                  "key": "AfterPhotoIssue",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "AfterPhotoAttachment",
+                  "type": "file",
+                  "src": "",
+                  "description": "Optional; string/binary"
+                },
+                {
+                  "key": "SignOffName",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "SignOffAttachment",
+                  "type": "file",
+                  "src": "",
+                  "description": "Optional; string/binary"
+                },
+                {
+                  "key": "SignOffSignature",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "ContactIds",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; array"
+                },
+                {
+                  "key": "CategoryIds",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; array"
+                },
+                {
+                  "key": "Customer",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                }
+              ],
+              "description": "Illustrative placeholder generated from object; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/workorders/ChangeAssignment",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/ChangeAssignment?id=0&assignTo=",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "ChangeAssignment"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "assignTo",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: query id (optional, integer/int32); query assignTo (optional, string)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/workorders/ChangeStatus",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/ChangeStatus?id=0&status=",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "ChangeStatus"
+              ],
+              "query": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "status",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: query id (optional, integer/int32); query status (optional, string)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/workorders/EditWorkorder",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/EditWorkorder",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "EditWorkorder"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: none\nRequest body: multipart/form-data; Illustrative placeholder generated from object; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "formdata",
+              "formdata": [
+                {
+                  "key": "Id",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; integer/int32"
+                },
+                {
+                  "key": "WorkerOrderNumber",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "WorkerOrderTitle",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "Description",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "PO",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "TT",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "AssignTo",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "DueDate",
+                  "type": "text",
+                  "value": "2026-01-01T00:00:00Z",
+                  "description": "Optional; string/date-time"
+                },
+                {
+                  "key": "Priority",
+                  "type": "text",
+                  "value": "1",
+                  "description": "Optional; #/components/schemas/WorkOrderPriority"
+                },
+                {
+                  "key": "Status",
+                  "type": "text",
+                  "value": "1",
+                  "description": "Optional; #/components/schemas/WorkOrderStatus"
+                },
+                {
+                  "key": "LocationId",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; integer/int32"
+                },
+                {
+                  "key": "Problem",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "Trade",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "SubTrade",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "VendorNTE",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; number/double"
+                },
+                {
+                  "key": "ScheduledDate",
+                  "type": "text",
+                  "value": "2026-01-01T00:00:00Z",
+                  "description": "Optional; string/date-time"
+                },
+                {
+                  "key": "CompletedDate",
+                  "type": "text",
+                  "value": "2026-01-01T00:00:00Z",
+                  "description": "Optional; string/date-time"
+                },
+                {
+                  "key": "Source",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "Attachments",
+                  "type": "text",
+                  "value": "<binary file>",
+                  "description": "Optional; array"
+                },
+                {
+                  "key": "BeforPhotoIssue",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "BeforPhotoAttachment",
+                  "type": "file",
+                  "src": "",
+                  "description": "Optional; string/binary"
+                },
+                {
+                  "key": "AfterPhotoIssue",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "AfterPhotoAttachment",
+                  "type": "file",
+                  "src": "",
+                  "description": "Optional; string/binary"
+                },
+                {
+                  "key": "SignOffName",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "SignOffAttachment",
+                  "type": "file",
+                  "src": "",
+                  "description": "Optional; string/binary"
+                },
+                {
+                  "key": "SignOffSignature",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "ContactIds",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; array"
+                },
+                {
+                  "key": "CategoryIds",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; array"
+                }
+              ],
+              "description": "Illustrative placeholder generated from object; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "PUT /api/WorkOrder/{id}",
+          "request": {
+            "method": "PUT",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "",
+                  "description": "Required; string"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: path id (required, string)\nRequest body: multipart/form-data; Illustrative placeholder generated from object; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "formdata",
+              "formdata": [
+                {
+                  "key": "Id",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; integer/int32"
+                },
+                {
+                  "key": "WorkerOrderNumber",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "WorkerOrderTitle",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "Description",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "PO",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "TT",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "AssignTo",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "DueDate",
+                  "type": "text",
+                  "value": "2026-01-01T00:00:00Z",
+                  "description": "Optional; string/date-time"
+                },
+                {
+                  "key": "Priority",
+                  "type": "text",
+                  "value": "1",
+                  "description": "Optional; #/components/schemas/WorkOrderPriority"
+                },
+                {
+                  "key": "Status",
+                  "type": "text",
+                  "value": "1",
+                  "description": "Optional; #/components/schemas/WorkOrderStatus"
+                },
+                {
+                  "key": "LocationId",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; integer/int32"
+                },
+                {
+                  "key": "Problem",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "Trade",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "SubTrade",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "VendorNTE",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; number/double"
+                },
+                {
+                  "key": "ScheduledDate",
+                  "type": "text",
+                  "value": "2026-01-01T00:00:00Z",
+                  "description": "Optional; string/date-time"
+                },
+                {
+                  "key": "CompletedDate",
+                  "type": "text",
+                  "value": "2026-01-01T00:00:00Z",
+                  "description": "Optional; string/date-time"
+                },
+                {
+                  "key": "Source",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "Attachments",
+                  "type": "text",
+                  "value": "<binary file>",
+                  "description": "Optional; array"
+                },
+                {
+                  "key": "BeforPhotoIssue",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "BeforPhotoAttachment",
+                  "type": "file",
+                  "src": "",
+                  "description": "Optional; string/binary"
+                },
+                {
+                  "key": "AfterPhotoIssue",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "AfterPhotoAttachment",
+                  "type": "file",
+                  "src": "",
+                  "description": "Optional; string/binary"
+                },
+                {
+                  "key": "SignOffName",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "SignOffAttachment",
+                  "type": "file",
+                  "src": "",
+                  "description": "Optional; string/binary"
+                },
+                {
+                  "key": "SignOffSignature",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "ContactIds",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; array"
+                },
+                {
+                  "key": "CategoryIds",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; array"
+                }
+              ],
+              "description": "Illustrative placeholder generated from object; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "PUT /api/workorders/{id}",
+          "request": {
+            "method": "PUT",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "",
+                  "description": "Required; string"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrder\nOperation ID: not specified\n\nParameters: path id (required, string)\nRequest body: multipart/form-data; Illustrative placeholder generated from object; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "formdata",
+              "formdata": [
+                {
+                  "key": "Id",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; integer/int32"
+                },
+                {
+                  "key": "WorkerOrderNumber",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "WorkerOrderTitle",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "Description",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "PO",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "TT",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "AssignTo",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "DueDate",
+                  "type": "text",
+                  "value": "2026-01-01T00:00:00Z",
+                  "description": "Optional; string/date-time"
+                },
+                {
+                  "key": "Priority",
+                  "type": "text",
+                  "value": "1",
+                  "description": "Optional; #/components/schemas/WorkOrderPriority"
+                },
+                {
+                  "key": "Status",
+                  "type": "text",
+                  "value": "1",
+                  "description": "Optional; #/components/schemas/WorkOrderStatus"
+                },
+                {
+                  "key": "LocationId",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; integer/int32"
+                },
+                {
+                  "key": "Problem",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "Trade",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "SubTrade",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "VendorNTE",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; number/double"
+                },
+                {
+                  "key": "ScheduledDate",
+                  "type": "text",
+                  "value": "2026-01-01T00:00:00Z",
+                  "description": "Optional; string/date-time"
+                },
+                {
+                  "key": "CompletedDate",
+                  "type": "text",
+                  "value": "2026-01-01T00:00:00Z",
+                  "description": "Optional; string/date-time"
+                },
+                {
+                  "key": "Source",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "Attachments",
+                  "type": "text",
+                  "value": "<binary file>",
+                  "description": "Optional; array"
+                },
+                {
+                  "key": "BeforPhotoIssue",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "BeforPhotoAttachment",
+                  "type": "file",
+                  "src": "",
+                  "description": "Optional; string/binary"
+                },
+                {
+                  "key": "AfterPhotoIssue",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "AfterPhotoAttachment",
+                  "type": "file",
+                  "src": "",
+                  "description": "Optional; string/binary"
+                },
+                {
+                  "key": "SignOffName",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "SignOffAttachment",
+                  "type": "file",
+                  "src": "",
+                  "description": "Optional; string/binary"
+                },
+                {
+                  "key": "SignOffSignature",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "ContactIds",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; array"
+                },
+                {
+                  "key": "CategoryIds",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; array"
+                }
+              ],
+              "description": "Illustrative placeholder generated from object; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "WorkOrderBoard",
+      "item": [
+        {
+          "name": "GET /api/WorkOrder/board",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/board?weekStart=&weekEnd=&dispatchers=&myWorkOrders=false&types=&overdue=false&search=",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                "board"
+              ],
+              "query": [
+                {
+                  "key": "weekStart",
+                  "value": "",
+                  "description": "Required; #/components/schemas/DateOnly",
+                  "disabled": false
+                },
+                {
+                  "key": "weekEnd",
+                  "value": "",
+                  "description": "Optional; #/components/schemas/DateOnly",
+                  "disabled": false
+                },
+                {
+                  "key": "dispatchers",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "myWorkOrders",
+                  "value": "false",
+                  "description": "Optional; boolean",
+                  "disabled": false
+                },
+                {
+                  "key": "types",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "overdue",
+                  "value": "false",
+                  "description": "Optional; boolean",
+                  "disabled": false
+                },
+                {
+                  "key": "search",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderBoard\nOperation ID: not specified\n\nParameters: query weekStart (required, #/components/schemas/DateOnly); query weekEnd (optional, #/components/schemas/DateOnly); query dispatchers (optional, array); query myWorkOrders (optional, boolean); query types (optional, array); query overdue (optional, boolean); query search (optional, string)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/WorkOrder/board/search",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/board/search?Page=0&PageSize=0&Search=&DatePreset=&DateFrom=&DateTo=&Sites=&Types=&Overdue=false&Dispatchers=&Statuses=&PmTypes=&VendorIds=&DocStatuses=&Severities=&Rescheduled=false&CarriedOver=false&AddOn=false&AvetaOnly=false&FlagColors=&InternalOnly=false&HasUplift=false&UpliftStatuses=&MyWorkOrders=false&SortBy=&SortDir=",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                "board",
+                "search"
+              ],
+              "query": [
+                {
+                  "key": "Page",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "PageSize",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "Search",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "DatePreset",
+                  "value": "",
+                  "description": "Optional; #/components/schemas/WorkOrderAdvancedSearchDatePreset",
+                  "disabled": false
+                },
+                {
+                  "key": "DateFrom",
+                  "value": "",
+                  "description": "Optional; #/components/schemas/DateOnly",
+                  "disabled": false
+                },
+                {
+                  "key": "DateTo",
+                  "value": "",
+                  "description": "Optional; #/components/schemas/DateOnly",
+                  "disabled": false
+                },
+                {
+                  "key": "Sites",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "Types",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "Overdue",
+                  "value": "false",
+                  "description": "Optional; boolean",
+                  "disabled": false
+                },
+                {
+                  "key": "Dispatchers",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "Statuses",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "PmTypes",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "VendorIds",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "DocStatuses",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "Severities",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "Rescheduled",
+                  "value": "false",
+                  "description": "Optional; boolean",
+                  "disabled": false
+                },
+                {
+                  "key": "CarriedOver",
+                  "value": "false",
+                  "description": "Optional; boolean",
+                  "disabled": false
+                },
+                {
+                  "key": "AddOn",
+                  "value": "false",
+                  "description": "Optional; boolean",
+                  "disabled": false
+                },
+                {
+                  "key": "AvetaOnly",
+                  "value": "false",
+                  "description": "Optional; boolean",
+                  "disabled": false
+                },
+                {
+                  "key": "FlagColors",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "InternalOnly",
+                  "value": "false",
+                  "description": "Optional; boolean",
+                  "disabled": false
+                },
+                {
+                  "key": "HasUplift",
+                  "value": "false",
+                  "description": "Optional; boolean",
+                  "disabled": false
+                },
+                {
+                  "key": "UpliftStatuses",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "MyWorkOrders",
+                  "value": "false",
+                  "description": "Optional; boolean",
+                  "disabled": false
+                },
+                {
+                  "key": "SortBy",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "SortDir",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderBoard\nOperation ID: not specified\n\nParameters: query Page (optional, integer/int32); query PageSize (optional, integer/int32); query Search (optional, string); query DatePreset (optional, #/components/schemas/WorkOrderAdvancedSearchDatePreset); query DateFrom (optional, #/components/schemas/DateOnly); query DateTo (optional, #/components/schemas/DateOnly); query Sites (optional, array); query Types (optional, array); query Overdue (optional, boolean); query Dispatchers (optional, array); query Statuses (optional, array); query PmTypes (optional, array); query VendorIds (optional, array); query DocStatuses (optional, array); query Severities (optional, array); query Rescheduled (optional, boolean); query CarriedOver (optional, boolean); query AddOn (optional, boolean); query AvetaOnly (optional, boolean); query FlagColors (optional, array); query InternalOnly (optional, boolean); query HasUplift (optional, boolean); query UpliftStatuses (optional, array); query MyWorkOrders (optional, boolean); query SortBy (optional, string); query SortDir (optional, string)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/WorkOrder/lookups/dispatchers",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/lookups/dispatchers",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                "lookups",
+                "dispatchers"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderBoard\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/workorders/board",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/board?weekStart=&weekEnd=&dispatchers=&myWorkOrders=false&types=&overdue=false&search=",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "board"
+              ],
+              "query": [
+                {
+                  "key": "weekStart",
+                  "value": "",
+                  "description": "Required; #/components/schemas/DateOnly",
+                  "disabled": false
+                },
+                {
+                  "key": "weekEnd",
+                  "value": "",
+                  "description": "Optional; #/components/schemas/DateOnly",
+                  "disabled": false
+                },
+                {
+                  "key": "dispatchers",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "myWorkOrders",
+                  "value": "false",
+                  "description": "Optional; boolean",
+                  "disabled": false
+                },
+                {
+                  "key": "types",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "overdue",
+                  "value": "false",
+                  "description": "Optional; boolean",
+                  "disabled": false
+                },
+                {
+                  "key": "search",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderBoard\nOperation ID: not specified\n\nParameters: query weekStart (required, #/components/schemas/DateOnly); query weekEnd (optional, #/components/schemas/DateOnly); query dispatchers (optional, array); query myWorkOrders (optional, boolean); query types (optional, array); query overdue (optional, boolean); query search (optional, string)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/workorders/board/search",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/board/search?Page=0&PageSize=0&Search=&DatePreset=&DateFrom=&DateTo=&Sites=&Types=&Overdue=false&Dispatchers=&Statuses=&PmTypes=&VendorIds=&DocStatuses=&Severities=&Rescheduled=false&CarriedOver=false&AddOn=false&AvetaOnly=false&FlagColors=&InternalOnly=false&HasUplift=false&UpliftStatuses=&MyWorkOrders=false&SortBy=&SortDir=",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "board",
+                "search"
+              ],
+              "query": [
+                {
+                  "key": "Page",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "PageSize",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                },
+                {
+                  "key": "Search",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "DatePreset",
+                  "value": "",
+                  "description": "Optional; #/components/schemas/WorkOrderAdvancedSearchDatePreset",
+                  "disabled": false
+                },
+                {
+                  "key": "DateFrom",
+                  "value": "",
+                  "description": "Optional; #/components/schemas/DateOnly",
+                  "disabled": false
+                },
+                {
+                  "key": "DateTo",
+                  "value": "",
+                  "description": "Optional; #/components/schemas/DateOnly",
+                  "disabled": false
+                },
+                {
+                  "key": "Sites",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "Types",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "Overdue",
+                  "value": "false",
+                  "description": "Optional; boolean",
+                  "disabled": false
+                },
+                {
+                  "key": "Dispatchers",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "Statuses",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "PmTypes",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "VendorIds",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "DocStatuses",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "Severities",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "Rescheduled",
+                  "value": "false",
+                  "description": "Optional; boolean",
+                  "disabled": false
+                },
+                {
+                  "key": "CarriedOver",
+                  "value": "false",
+                  "description": "Optional; boolean",
+                  "disabled": false
+                },
+                {
+                  "key": "AddOn",
+                  "value": "false",
+                  "description": "Optional; boolean",
+                  "disabled": false
+                },
+                {
+                  "key": "AvetaOnly",
+                  "value": "false",
+                  "description": "Optional; boolean",
+                  "disabled": false
+                },
+                {
+                  "key": "FlagColors",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "InternalOnly",
+                  "value": "false",
+                  "description": "Optional; boolean",
+                  "disabled": false
+                },
+                {
+                  "key": "HasUplift",
+                  "value": "false",
+                  "description": "Optional; boolean",
+                  "disabled": false
+                },
+                {
+                  "key": "UpliftStatuses",
+                  "value": "",
+                  "description": "Optional; array",
+                  "disabled": false
+                },
+                {
+                  "key": "MyWorkOrders",
+                  "value": "false",
+                  "description": "Optional; boolean",
+                  "disabled": false
+                },
+                {
+                  "key": "SortBy",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "SortDir",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderBoard\nOperation ID: not specified\n\nParameters: query Page (optional, integer/int32); query PageSize (optional, integer/int32); query Search (optional, string); query DatePreset (optional, #/components/schemas/WorkOrderAdvancedSearchDatePreset); query DateFrom (optional, #/components/schemas/DateOnly); query DateTo (optional, #/components/schemas/DateOnly); query Sites (optional, array); query Types (optional, array); query Overdue (optional, boolean); query Dispatchers (optional, array); query Statuses (optional, array); query PmTypes (optional, array); query VendorIds (optional, array); query DocStatuses (optional, array); query Severities (optional, array); query Rescheduled (optional, boolean); query CarriedOver (optional, boolean); query AddOn (optional, boolean); query AvetaOnly (optional, boolean); query FlagColors (optional, array); query InternalOnly (optional, boolean); query HasUplift (optional, boolean); query UpliftStatuses (optional, array); query MyWorkOrders (optional, boolean); query SortBy (optional, string); query SortDir (optional, string)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/workorders/lookups/dispatchers",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/lookups/dispatchers",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "lookups",
+                "dispatchers"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderBoard\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "PATCH /api/WorkOrder/{id}/board",
+          "request": {
+            "method": "PATCH",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/:id/board",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                ":id",
+                "board"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderBoard\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/WorkOrderBoardPatchRequestDto; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"field\": \"<string>\",\n  \"value\": \"<string>\",\n  \"workOrderVersion\": \"<string>\",\n  \"dispatchVersion\": \"<string>\",\n  \"primaryDispatchId\": 0\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/WorkOrderBoardPatchRequestDto; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "PATCH /api/workorders/{id}/board",
+          "request": {
+            "method": "PATCH",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/:id/board",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                ":id",
+                "board"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderBoard\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/WorkOrderBoardPatchRequestDto; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"field\": \"<string>\",\n  \"value\": \"<string>\",\n  \"workOrderVersion\": \"<string>\",\n  \"dispatchVersion\": \"<string>\",\n  \"primaryDispatchId\": 0\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/WorkOrderBoardPatchRequestDto; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/WorkOrder/{id}/cancel",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/:id/cancel",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                ":id",
+                "cancel"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderBoard\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/WorkOrder/board",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/board",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                "board"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderBoard\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/WorkOrderBoardCreateRequestDto; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"woNumber\": \"<string>\",\n  \"workOrderType\": 1,\n  \"isAddOn\": false,\n  \"siteCode\": \"<string>\",\n  \"customer\": \"<string>\",\n  \"description\": \"<string>\",\n  \"trade\": \"<string>\",\n  \"primaryService\": \"<string>\",\n  \"extraServices\": [\n    \"<string>\"\n  ],\n  \"serviceNotes\": \"<string>\",\n  \"avetaRequired\": false,\n  \"locationId\": 0,\n  \"dueDate\": \"2026-01-01T00:00:00Z\",\n  \"assignTo\": \"<string>\",\n  \"scheduledDate\": \"2026-01-01T00:00:00Z\",\n  \"targetWeek\": {\n    \"year\": 0,\n    \"month\": 0,\n    \"day\": 0,\n    \"dayOfWeek\": 0,\n    \"dayOfYear\": 0,\n    \"dayNumber\": 0\n  },\n  \"scheduleWeekOnly\": false,\n  \"docStatus\": 1,\n  \"lifecycleStatus\": 1,\n  \"vendorId\": 0,\n  \"apptDate\": \"2026-01-01T00:00:00Z\",\n  \"apptTime\": \"<string>\",\n  \"pocContactId\": 0,\n  \"pocName\": \"<string>\",\n  \"pocPhone\": \"<string>\",\n  \"pocNotes\": \"<string>\",\n  \"additionalContacts\": [\n    {\n      \"name\": \"<string>\",\n      \"phone\": \"<string>\",\n      \"notes\": \"<string>\"\n    }\n  ],\n  \"techPhone\": \"<string>\",\n  \"vendorNotes\": \"<string>\",\n  \"severity\": 0\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/WorkOrderBoardCreateRequestDto; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/workorders/{id}/cancel",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/:id/cancel",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                ":id",
+                "cancel"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderBoard\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/workorders/board",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/board",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "board"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderBoard\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/WorkOrderBoardCreateRequestDto; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"woNumber\": \"<string>\",\n  \"workOrderType\": 1,\n  \"isAddOn\": false,\n  \"siteCode\": \"<string>\",\n  \"customer\": \"<string>\",\n  \"description\": \"<string>\",\n  \"trade\": \"<string>\",\n  \"primaryService\": \"<string>\",\n  \"extraServices\": [\n    \"<string>\"\n  ],\n  \"serviceNotes\": \"<string>\",\n  \"avetaRequired\": false,\n  \"locationId\": 0,\n  \"dueDate\": \"2026-01-01T00:00:00Z\",\n  \"assignTo\": \"<string>\",\n  \"scheduledDate\": \"2026-01-01T00:00:00Z\",\n  \"targetWeek\": {\n    \"year\": 0,\n    \"month\": 0,\n    \"day\": 0,\n    \"dayOfWeek\": 0,\n    \"dayOfYear\": 0,\n    \"dayNumber\": 0\n  },\n  \"scheduleWeekOnly\": false,\n  \"docStatus\": 1,\n  \"lifecycleStatus\": 1,\n  \"vendorId\": 0,\n  \"apptDate\": \"2026-01-01T00:00:00Z\",\n  \"apptTime\": \"<string>\",\n  \"pocContactId\": 0,\n  \"pocName\": \"<string>\",\n  \"pocPhone\": \"<string>\",\n  \"pocNotes\": \"<string>\",\n  \"additionalContacts\": [\n    {\n      \"name\": \"<string>\",\n      \"phone\": \"<string>\",\n      \"notes\": \"<string>\"\n    }\n  ],\n  \"techPhone\": \"<string>\",\n  \"vendorNotes\": \"<string>\",\n  \"severity\": 0\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/WorkOrderBoardCreateRequestDto; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "WorkOrderCompletion",
+      "item": [
+        {
+          "name": "DELETE /api/WorkOrder/completion-templates/{id}",
+          "request": {
+            "method": "DELETE",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/completion-templates/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                "completion-templates",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderCompletion\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "DELETE /api/workorders/completion-templates/{id}",
+          "request": {
+            "method": "DELETE",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/completion-templates/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "completion-templates",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderCompletion\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/WorkOrder/completion-templates",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/completion-templates?serviceKey=&workOrderType=",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                "completion-templates"
+              ],
+              "query": [
+                {
+                  "key": "serviceKey",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "workOrderType",
+                  "value": "",
+                  "description": "Optional; #/components/schemas/WorkOrderType",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderCompletion\nOperation ID: not specified\n\nParameters: query serviceKey (optional, string); query workOrderType (optional, #/components/schemas/WorkOrderType)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/WorkOrder/completion-templates/{id}",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/completion-templates/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                "completion-templates",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderCompletion\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/workorders/completion-templates",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/completion-templates?serviceKey=&workOrderType=",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "completion-templates"
+              ],
+              "query": [
+                {
+                  "key": "serviceKey",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                },
+                {
+                  "key": "workOrderType",
+                  "value": "",
+                  "description": "Optional; #/components/schemas/WorkOrderType",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderCompletion\nOperation ID: not specified\n\nParameters: query serviceKey (optional, string); query workOrderType (optional, #/components/schemas/WorkOrderType)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/workorders/completion-templates/{id}",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/completion-templates/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "completion-templates",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderCompletion\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/WorkOrder/{id}/completion-doc",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/:id/completion-doc",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                ":id",
+                "completion-doc"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderCompletion\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: multipart/form-data; Illustrative placeholder generated from object; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "formdata",
+              "formdata": [
+                {
+                  "key": "ContentType",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "ContentDisposition",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "Headers",
+                  "type": "text",
+                  "value": "[object Object]",
+                  "description": "Optional; object"
+                },
+                {
+                  "key": "Length",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; integer/int64"
+                },
+                {
+                  "key": "Name",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "FileName",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "signOffName",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "signOffSignature",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "workOrderVersion",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                }
+              ],
+              "description": "Illustrative placeholder generated from object; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/WorkOrder/completion-templates",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/completion-templates",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                "completion-templates"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderCompletion\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/CompletionDocTemplateCreateDto; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"name\": \"<string>\",\n  \"serviceKey\": \"<string>\",\n  \"workOrderType\": 1,\n  \"templateUrl\": \"<string>\",\n  \"isActive\": false\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/CompletionDocTemplateCreateDto; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/workorders/{id}/completion-doc",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/:id/completion-doc",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                ":id",
+                "completion-doc"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderCompletion\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: multipart/form-data; Illustrative placeholder generated from object; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "formdata",
+              "formdata": [
+                {
+                  "key": "ContentType",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "ContentDisposition",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "Headers",
+                  "type": "text",
+                  "value": "[object Object]",
+                  "description": "Optional; object"
+                },
+                {
+                  "key": "Length",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; integer/int64"
+                },
+                {
+                  "key": "Name",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "FileName",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "signOffName",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "signOffSignature",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "workOrderVersion",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                }
+              ],
+              "description": "Illustrative placeholder generated from object; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/workorders/completion-templates",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/completion-templates",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "completion-templates"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderCompletion\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/CompletionDocTemplateCreateDto; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"name\": \"<string>\",\n  \"serviceKey\": \"<string>\",\n  \"workOrderType\": 1,\n  \"templateUrl\": \"<string>\",\n  \"isActive\": false\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/CompletionDocTemplateCreateDto; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "PUT /api/WorkOrder/completion-templates/{id}",
+          "request": {
+            "method": "PUT",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/completion-templates/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                "completion-templates",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderCompletion\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/CompletionDocTemplateCreateDto; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"name\": \"<string>\",\n  \"serviceKey\": \"<string>\",\n  \"workOrderType\": 1,\n  \"templateUrl\": \"<string>\",\n  \"isActive\": false\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/CompletionDocTemplateCreateDto; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "PUT /api/workorders/completion-templates/{id}",
+          "request": {
+            "method": "PUT",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/completion-templates/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "completion-templates",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderCompletion\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/CompletionDocTemplateCreateDto; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"name\": \"<string>\",\n  \"serviceKey\": \"<string>\",\n  \"workOrderType\": 1,\n  \"templateUrl\": \"<string>\",\n  \"isActive\": false\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/CompletionDocTemplateCreateDto; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "WorkOrderDetail",
+      "item": [
+        {
+          "name": "GET /api/WorkOrder/{id}/audit",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/:id/audit?limit=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                ":id",
+                "audit"
+              ],
+              "query": [
+                {
+                  "key": "limit",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDetail\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); query limit (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/WorkOrder/{id}/comments",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/:id/comments",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                ":id",
+                "comments"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDetail\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/WorkOrder/{id}/detail",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/:id/detail",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                ":id",
+                "detail"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDetail\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/WorkOrder/{id}/uplifts",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/:id/uplifts",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                ":id",
+                "uplifts"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDetail\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/workorders/{id}/audit",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/:id/audit?limit=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                ":id",
+                "audit"
+              ],
+              "query": [
+                {
+                  "key": "limit",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDetail\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); query limit (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/workorders/{id}/comments",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/:id/comments",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                ":id",
+                "comments"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDetail\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/workorders/{id}/detail",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/:id/detail",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                ":id",
+                "detail"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDetail\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/workorders/{id}/uplifts",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/:id/uplifts",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                ":id",
+                "uplifts"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDetail\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "PATCH /api/WorkOrder/{id}/comments/{commentId}",
+          "request": {
+            "method": "PATCH",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/:id/comments/:commentId",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                ":id",
+                "comments",
+                ":commentId"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                },
+                {
+                  "key": "commentId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDetail\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); path commentId (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/WorkOrderCommentCreateDto; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"text\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/WorkOrderCommentCreateDto; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "PATCH /api/workorders/{id}/comments/{commentId}",
+          "request": {
+            "method": "PATCH",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/:id/comments/:commentId",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                ":id",
+                "comments",
+                ":commentId"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                },
+                {
+                  "key": "commentId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDetail\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); path commentId (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/WorkOrderCommentCreateDto; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"text\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/WorkOrderCommentCreateDto; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/WorkOrder/{id}/comments",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/:id/comments",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                ":id",
+                "comments"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDetail\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/WorkOrderCommentCreateDto; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"text\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/WorkOrderCommentCreateDto; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/WorkOrder/{id}/uplifts",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/:id/uplifts",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                ":id",
+                "uplifts"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDetail\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/CreateWorkOrderUpliftRequestDto; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"amount\": 0,\n  \"notes\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/CreateWorkOrderUpliftRequestDto; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/WorkOrder/{id}/uplifts/{upliftId}/cancel",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/:id/uplifts/:upliftId/cancel",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                ":id",
+                "uplifts",
+                ":upliftId",
+                "cancel"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                },
+                {
+                  "key": "upliftId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDetail\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); path upliftId (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/WorkOrder/{id}/uplifts/{upliftId}/revoke",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/:id/uplifts/:upliftId/revoke",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                ":id",
+                "uplifts",
+                ":upliftId",
+                "revoke"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                },
+                {
+                  "key": "upliftId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDetail\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); path upliftId (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/RevokeWorkOrderUpliftRequestDto; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"reason\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/RevokeWorkOrderUpliftRequestDto; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/workorders/{id}/comments",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/:id/comments",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                ":id",
+                "comments"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDetail\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/WorkOrderCommentCreateDto; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"text\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/WorkOrderCommentCreateDto; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/workorders/{id}/uplifts",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/:id/uplifts",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                ":id",
+                "uplifts"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDetail\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/CreateWorkOrderUpliftRequestDto; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"amount\": 0,\n  \"notes\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/CreateWorkOrderUpliftRequestDto; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/workorders/{id}/uplifts/{upliftId}/cancel",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/:id/uplifts/:upliftId/cancel",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                ":id",
+                "uplifts",
+                ":upliftId",
+                "cancel"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                },
+                {
+                  "key": "upliftId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDetail\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); path upliftId (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/workorders/{id}/uplifts/{upliftId}/revoke",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/:id/uplifts/:upliftId/revoke",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                ":id",
+                "uplifts",
+                ":upliftId",
+                "revoke"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                },
+                {
+                  "key": "upliftId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDetail\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); path upliftId (required, integer/int32)\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/RevokeWorkOrderUpliftRequestDto; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"reason\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/RevokeWorkOrderUpliftRequestDto; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "WorkOrderDispatch",
+      "item": [
+        {
+          "name": "GET /api/WorkOrder/GetDispatch/{id}",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/GetDispatch/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                "GetDispatch",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDispatch\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/WorkOrder/GetDispatches/{workOrderId}",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/GetDispatches/:workOrderId",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                "GetDispatches",
+                ":workOrderId"
+              ],
+              "variable": [
+                {
+                  "key": "workOrderId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDispatch\nOperation ID: not specified\n\nParameters: path workOrderId (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/workorders/GetDispatch/{id}",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/GetDispatch/:id",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "GetDispatch",
+                ":id"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDispatch\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/workorders/GetDispatches/{workOrderId}",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/GetDispatches/:workOrderId",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "GetDispatches",
+                ":workOrderId"
+              ],
+              "variable": [
+                {
+                  "key": "workOrderId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDispatch\nOperation ID: not specified\n\nParameters: path workOrderId (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/WorkOrder/AddChecklistItem",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/AddChecklistItem",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                "AddChecklistItem"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDispatch\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/AddChecklistItem_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"dispatchId\": 0,\n  \"workOrderId\": 0,\n  \"itemText\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/AddChecklistItem_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/WorkOrder/AddDispatchComment",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/AddDispatchComment",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                "AddDispatchComment"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDispatch\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/DispatchComment_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"dispatchId\": 0,\n  \"text\": \"<string>\",\n  \"sendEmail\": false\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/DispatchComment_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/WorkOrder/AddDispatchSignoff",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/AddDispatchSignoff",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                "AddDispatchSignoff"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDispatch\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/DispatchSignoff_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"dispatchId\": 0,\n  \"signoffType\": \"<string>\",\n  \"name\": \"<string>\",\n  \"signature\": \"<string>\",\n  \"signatureMethod\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/DispatchSignoff_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/WorkOrder/DispatchToVendor",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/DispatchToVendor",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                "DispatchToVendor"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDispatch\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/Dispatch_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"workOrderIds\": [\n    0\n  ],\n  \"vendorIds\": [\n    0\n  ],\n  \"nteAmount\": 0,\n  \"scheduledDate\": \"2026-01-01T00:00:00Z\",\n  \"estimatedArrivalAt\": \"2026-01-01T00:00:00Z\",\n  \"etaManualOverride\": false,\n  \"description\": \"<string>\",\n  \"taskListTemplateId\": 0,\n  \"customChecklistItems\": [\n    \"<string>\"\n  ]\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/Dispatch_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/WorkOrder/UpdateChecklistItem",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/UpdateChecklistItem",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                "UpdateChecklistItem"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDispatch\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/ChecklistItemUpdate_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"id\": 0,\n  \"isCompleted\": false,\n  \"completedBy\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/ChecklistItemUpdate_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/WorkOrder/UpdateDispatch",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/UpdateDispatch",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                "UpdateDispatch"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDispatch\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/UpdateDispatch_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"id\": 0,\n  \"status\": \"<string>\",\n  \"nteAmount\": 0,\n  \"scheduledDate\": \"2026-01-01T00:00:00Z\",\n  \"estimatedArrivalAt\": \"2026-01-01T00:00:00Z\",\n  \"etaManualOverride\": false,\n  \"completedDate\": \"2026-01-01T00:00:00Z\",\n  \"description\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/UpdateDispatch_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/WorkOrder/VerifyDispatch",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/VerifyDispatch?dispatchId=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                "VerifyDispatch"
+              ],
+              "query": [
+                {
+                  "key": "dispatchId",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDispatch\nOperation ID: not specified\n\nParameters: query dispatchId (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/workorders/AddChecklistItem",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/AddChecklistItem",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "AddChecklistItem"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDispatch\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/AddChecklistItem_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"dispatchId\": 0,\n  \"workOrderId\": 0,\n  \"itemText\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/AddChecklistItem_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/workorders/AddDispatchComment",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/AddDispatchComment",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "AddDispatchComment"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDispatch\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/DispatchComment_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"dispatchId\": 0,\n  \"text\": \"<string>\",\n  \"sendEmail\": false\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/DispatchComment_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/workorders/AddDispatchSignoff",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/AddDispatchSignoff",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "AddDispatchSignoff"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDispatch\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/DispatchSignoff_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"dispatchId\": 0,\n  \"signoffType\": \"<string>\",\n  \"name\": \"<string>\",\n  \"signature\": \"<string>\",\n  \"signatureMethod\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/DispatchSignoff_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/workorders/DispatchToVendor",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/DispatchToVendor",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "DispatchToVendor"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDispatch\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/Dispatch_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"workOrderIds\": [\n    0\n  ],\n  \"vendorIds\": [\n    0\n  ],\n  \"nteAmount\": 0,\n  \"scheduledDate\": \"2026-01-01T00:00:00Z\",\n  \"estimatedArrivalAt\": \"2026-01-01T00:00:00Z\",\n  \"etaManualOverride\": false,\n  \"description\": \"<string>\",\n  \"taskListTemplateId\": 0,\n  \"customChecklistItems\": [\n    \"<string>\"\n  ]\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/Dispatch_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/workorders/UpdateChecklistItem",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/UpdateChecklistItem",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "UpdateChecklistItem"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDispatch\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/ChecklistItemUpdate_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"id\": 0,\n  \"isCompleted\": false,\n  \"completedBy\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/ChecklistItemUpdate_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/workorders/UpdateDispatch",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/UpdateDispatch",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "UpdateDispatch"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDispatch\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/UpdateDispatch_DTO; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"id\": 0,\n  \"status\": \"<string>\",\n  \"nteAmount\": 0,\n  \"scheduledDate\": \"2026-01-01T00:00:00Z\",\n  \"estimatedArrivalAt\": \"2026-01-01T00:00:00Z\",\n  \"etaManualOverride\": false,\n  \"completedDate\": \"2026-01-01T00:00:00Z\",\n  \"description\": \"<string>\"\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/UpdateDispatch_DTO; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/workorders/VerifyDispatch",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/VerifyDispatch?dispatchId=0",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "VerifyDispatch"
+              ],
+              "query": [
+                {
+                  "key": "dispatchId",
+                  "value": "0",
+                  "description": "Optional; integer/int32",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderDispatch\nOperation ID: not specified\n\nParameters: query dispatchId (optional, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "WorkOrderIngest",
+      "item": [
+        {
+          "name": "POST /api/workorders/ingest",
+          "request": {
+            "method": "POST",
+            "header": [
+              {
+                "key": "Content-Type",
+                "value": "application/json"
+              }
+            ],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/ingest",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "ingest"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderIngest\nOperation ID: not specified\n\nParameters: none\nRequest body: application/json, text/json, application/*+json; Illustrative placeholder generated from #/components/schemas/WorkOrderIngestBatchRequestDto; replace placeholder values before sending.\nDocumented response codes: 200 (text/plain, application/json, text/json)\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "raw",
+              "raw": "{\n  \"items\": [\n    {\n      \"externalWorkOrderId\": \"<string>\",\n      \"description\": \"<string>\",\n      \"woStatus\": \"<string>\",\n      \"severity\": \"<string>\",\n      \"customer\": \"<string>\",\n      \"siteCode\": \"<string>\",\n      \"building\": \"<string>\",\n      \"address\": \"<string>\",\n      \"dueDate\": \"2026-01-01T00:00:00Z\",\n      \"dateReported\": \"2026-01-01T00:00:00Z\",\n      \"scheduledStart\": \"2026-01-01T00:00:00Z\",\n      \"sourceEmailS3Key\": \"<string>\",\n      \"createdAt\": \"2026-01-01T00:00:00Z\"\n    }\n  ]\n}",
+              "options": {
+                "raw": {
+                  "language": "json"
+                }
+              },
+              "description": "Illustrative placeholder generated from #/components/schemas/WorkOrderIngestBatchRequestDto; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "WorkOrderJobs",
+      "item": [
+        {
+          "name": "POST /api/workorders/jobs/past-due-cache",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/jobs/past-due-cache",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "jobs",
+                "past-due-cache"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderJobs\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200 (text/plain, application/json, text/json)\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/workorders/jobs/week-rolled",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/jobs/week-rolled?sourceWeekStart=",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "jobs",
+                "week-rolled"
+              ],
+              "query": [
+                {
+                  "key": "sourceWeekStart",
+                  "value": "",
+                  "description": "Optional; #/components/schemas/DateOnly",
+                  "disabled": false
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderJobs\nOperation ID: not specified\n\nParameters: query sourceWeekStart (optional, #/components/schemas/DateOnly)\nRequest body: none documented\nDocumented response codes: 200 (text/plain, application/json, text/json)\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "WorkOrderMedia",
+      "item": [
+        {
+          "name": "DELETE /api/WorkOrder/{id}/media/{mediaId}",
+          "request": {
+            "method": "DELETE",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/:id/media/:mediaId?workOrderVersion=",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                ":id",
+                "media",
+                ":mediaId"
+              ],
+              "query": [
+                {
+                  "key": "workOrderVersion",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                }
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                },
+                {
+                  "key": "mediaId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderMedia\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); path mediaId (required, integer/int32); query workOrderVersion (optional, string)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "DELETE /api/workorders/{id}/media/{mediaId}",
+          "request": {
+            "method": "DELETE",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/:id/media/:mediaId?workOrderVersion=",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                ":id",
+                "media",
+                ":mediaId"
+              ],
+              "query": [
+                {
+                  "key": "workOrderVersion",
+                  "value": "",
+                  "description": "Optional; string",
+                  "disabled": false
+                }
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                },
+                {
+                  "key": "mediaId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderMedia\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); path mediaId (required, integer/int32); query workOrderVersion (optional, string)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/WorkOrder/{id}/media",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/:id/media",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                ":id",
+                "media"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderMedia\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/WorkOrder/{id}/media/{mediaId}/content",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/:id/media/:mediaId/content",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                ":id",
+                "media",
+                ":mediaId",
+                "content"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                },
+                {
+                  "key": "mediaId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderMedia\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); path mediaId (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/workorders/{id}/media",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/:id/media",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                ":id",
+                "media"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderMedia\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "GET /api/workorders/{id}/media/{mediaId}/content",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/:id/media/:mediaId/content",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                ":id",
+                "media",
+                ":mediaId",
+                "content"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                },
+                {
+                  "key": "mediaId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderMedia\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); path mediaId (required, integer/int32)\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "PATCH /api/WorkOrder/{id}/media/{mediaId}",
+          "request": {
+            "method": "PATCH",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/:id/media/:mediaId",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                ":id",
+                "media",
+                ":mediaId"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                },
+                {
+                  "key": "mediaId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderMedia\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); path mediaId (required, integer/int32)\nRequest body: multipart/form-data; Illustrative placeholder generated from object; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "formdata",
+              "formdata": [
+                {
+                  "key": "category",
+                  "type": "text",
+                  "value": "1",
+                  "description": "Optional; #/components/schemas/WorkOrderMediaCategory"
+                },
+                {
+                  "key": "workOrderVersion",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                }
+              ],
+              "description": "Illustrative placeholder generated from object; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "PATCH /api/workorders/{id}/media/{mediaId}",
+          "request": {
+            "method": "PATCH",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/:id/media/:mediaId",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                ":id",
+                "media",
+                ":mediaId"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                },
+                {
+                  "key": "mediaId",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderMedia\nOperation ID: not specified\n\nParameters: path id (required, integer/int32); path mediaId (required, integer/int32)\nRequest body: multipart/form-data; Illustrative placeholder generated from object; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "formdata",
+              "formdata": [
+                {
+                  "key": "category",
+                  "type": "text",
+                  "value": "1",
+                  "description": "Optional; #/components/schemas/WorkOrderMediaCategory"
+                },
+                {
+                  "key": "workOrderVersion",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                }
+              ],
+              "description": "Illustrative placeholder generated from object; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/WorkOrder/{id}/media",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/WorkOrder/:id/media",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "WorkOrder",
+                ":id",
+                "media"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderMedia\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: multipart/form-data; Illustrative placeholder generated from object; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "formdata",
+              "formdata": [
+                {
+                  "key": "category",
+                  "type": "text",
+                  "value": "1",
+                  "description": "Optional; #/components/schemas/WorkOrderMediaCategory"
+                },
+                {
+                  "key": "ContentType",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "ContentDisposition",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "Headers",
+                  "type": "text",
+                  "value": "[object Object]",
+                  "description": "Optional; object"
+                },
+                {
+                  "key": "Length",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; integer/int64"
+                },
+                {
+                  "key": "Name",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "FileName",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                }
+              ],
+              "description": "Illustrative placeholder generated from object; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/workorders/{id}/media",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/:id/media",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                ":id",
+                "media"
+              ],
+              "variable": [
+                {
+                  "key": "id",
+                  "value": "0",
+                  "description": "Required; integer/int32"
+                }
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderMedia\nOperation ID: not specified\n\nParameters: path id (required, integer/int32)\nRequest body: multipart/form-data; Illustrative placeholder generated from object; replace placeholder values before sending.\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+            "body": {
+              "mode": "formdata",
+              "formdata": [
+                {
+                  "key": "category",
+                  "type": "text",
+                  "value": "1",
+                  "description": "Optional; #/components/schemas/WorkOrderMediaCategory"
+                },
+                {
+                  "key": "ContentType",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "ContentDisposition",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "Headers",
+                  "type": "text",
+                  "value": "[object Object]",
+                  "description": "Optional; object"
+                },
+                {
+                  "key": "Length",
+                  "type": "text",
+                  "value": "0",
+                  "description": "Optional; integer/int64"
+                },
+                {
+                  "key": "Name",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                },
+                {
+                  "key": "FileName",
+                  "type": "text",
+                  "value": "<string>",
+                  "description": "Optional; string"
+                }
+              ],
+              "description": "Illustrative placeholder generated from object; replace placeholder values before sending."
+            }
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "WorkOrderOps",
+      "item": [
+        {
+          "name": "GET /api/workorders/ops/health",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/workorders/ops/health",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "workorders",
+                "ops",
+                "health"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderOps\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200 (text/plain, application/json, text/json)\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "WorkOrderReconciliation",
+      "item": [
+        {
+          "name": "GET /api/admin/work-order-reconciliation",
+          "request": {
+            "method": "GET",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/admin/work-order-reconciliation",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "admin",
+                "work-order-reconciliation"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderReconciliation\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        },
+        {
+          "name": "POST /api/admin/work-order-reconciliation",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/admin/work-order-reconciliation",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "admin",
+                "work-order-reconciliation"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderReconciliation\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "name": "WorkOrderWebhook",
+      "item": [
+        {
+          "name": "POST /api/webhooks/work-orders",
+          "request": {
+            "method": "POST",
+            "header": [],
+            "url": {
+              "raw": "{{baseUrl}}/api/webhooks/work-orders",
+              "host": [
+                "{{baseUrl}}"
+              ],
+              "path": [
+                "api",
+                "webhooks",
+                "work-orders"
+              ]
+            },
+            "description": "Source: https://api.dev.seahaven.com/swagger/v1/swagger.json\nTag(s): WorkOrderWebhook\nOperation ID: not specified\n\nParameters: none\nRequest body: none documented\nDocumented response codes: 200\n\nBody values and parameter values are safe illustrative placeholders; review them against the target record before sending."
+          },
+          "event": [
+            {
+              "listen": "test",
+              "script": {
+                "type": "text/javascript",
+                "exec": [
+                  "const documented = [200];",
+                  "pm.test(\"Response status is documented by OpenAPI\", function () {",
+                  "    pm.expect(documented).to.include(pm.response.code);",
+                  "});"
+                ]
+              }
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/postman/SeaHaven-Dev.postman_environment.json b/postman/SeaHaven-Dev.postman_environment.json
new file mode 100644
index 0000000..38d1aeb
--- /dev/null
+++ b/postman/SeaHaven-Dev.postman_environment.json
@@ -0,0 +1,30 @@
+{
+  "name": "SeaHaven - Dev",
+  "values": [
+    {
+      "key": "baseUrl",
+      "value": "https://api.dev.seahaven.com",
+      "type": "default",
+      "enabled": true
+    },
+    {
+      "key": "username",
+      "value": "",
+      "type": "secret",
+      "enabled": true
+    },
+    {
+      "key": "password",
+      "value": "",
+      "type": "secret",
+      "enabled": true
+    },
+    {
+      "key": "token",
+      "value": "",
+      "type": "secret",
+      "enabled": true
+    }
+  ],
+  "_postman_variable_scope": "environment"
+}
diff --git a/scripts/generate-postman-collection.mjs b/scripts/generate-postman-collection.mjs
new file mode 100644
index 0000000..39f0d60
--- /dev/null
+++ b/scripts/generate-postman-collection.mjs
@@ -0,0 +1,375 @@
+#!/usr/bin/env node
+
+import fs from "node:fs/promises";
+import path from "node:path";
+import process from "node:process";
+
+const DEFAULT_SOURCE = "https://api.dev.seahaven.com/swagger/v1/swagger.json";
+const ROOT = path.resolve(new URL("..", import.meta.url).pathname);
+const COLLECTION_PATH = path.join(ROOT, "postman", "SeaHaven-Dev.postman_collection.json");
+const ENVIRONMENT_PATH = path.join(ROOT, "postman", "SeaHaven-Dev.postman_environment.json");
+const METHODS = ["get", "post", "put", "patch", "delete", "options", "head", "trace"];
+
+const sourceArg = process.argv.find((arg) => arg.startsWith("--source="));
+const inputArg = process.argv.find((arg) => arg.startsWith("--input="));
+const sourceUrl = sourceArg ? sourceArg.slice("--source=".length) : DEFAULT_SOURCE;
+const checkOnly = process.argv.includes("--check");
+
+function operationEntries(document) {
+  return Object.entries(document.paths ?? {}).flatMap(([route, pathItem]) =>
+    METHODS.filter((method) => pathItem?.[method]).map((method) => ({
+      route,
+      method,
+      operation: pathItem[method],
+      pathParameters: pathItem.parameters ?? [],
+    })),
+  );
+}
+
+function schemaRefName(ref) {
+  return typeof ref === "string" ? ref.split("/").pop() : undefined;
+}
+
+function resolveSchema(schema, document) {
+  if (!schema) return undefined;
+  if (schema.$ref) return document.components?.schemas?.[schemaRefName(schema.$ref)] ?? schema;
+  return schema;
+}
+
+function safeSample(schema, document, name = "value", depth = 0, seen = new Set()) {
+  const resolved = resolveSchema(schema, document) ?? {};
+  if (depth > 4) return "<nested value>";
+  if (resolved.$ref) {
+    if (seen.has(resolved.$ref)) return "<recursive value>";
+    seen.add(resolved.$ref);
+  }
+  if (resolved.enum?.length) return resolved.enum[0];
+  if (resolved.oneOf?.length) return safeSample(resolved.oneOf[0], document, name, depth + 1, seen);
+  if (resolved.anyOf?.length) return safeSample(resolved.anyOf[0], document, name, depth + 1, seen);
+  if (resolved.allOf?.length) {
+    return resolved.allOf.reduce((acc, part) => {
+      const value = safeSample(part, document, name, depth + 1, seen);
+      return typeof value === "object" && value && !Array.isArray(value) ? { ...acc, ...value } : value;
+    }, {});
+  }
+  if (resolved.type === "array" || resolved.items) {
+    return [safeSample(resolved.items ?? {}, document, `${name}Item`, depth + 1, seen)];
+  }
+  if (resolved.type === "object" || resolved.properties || resolved.additionalProperties) {
+    const object = {};
+    for (const [property, propertySchema] of Object.entries(resolved.properties ?? {})) {
+      object[property] = safeSample(propertySchema, document, property, depth + 1, seen);
+    }
+    return object;
+  }
+  switch (resolved.format) {
+    case "date-time": return "2026-01-01T00:00:00Z";
+    case "date": return "2026-01-01";
+    case "uuid": return "00000000-0000-0000-0000-000000000000";
+    case "email": return "user@example.com";
+    case "uri": return "https://example.com/resource";
+    case "binary": return "<binary file>";
+    default: break;
+  }
+  switch (resolved.type) {
+    case "integer":
+    case "number": return 0;
+    case "boolean": return false;
+    case "null": return null;
+    default: return "<string>";
+  }
+}
+
+function schemaHint(schema) {
+  if (!schema) return "schema unspecified";
+  if (schema.$ref) return schema.$ref;
+  const bits = [schema.type, schema.format].filter(Boolean);
+  if (schema.enum?.length) bits.push(`enum: ${schema.enum.join(", ")}`);
+  return bits.join("/") || "schema";
+}
+
+function parameterValue(parameter, document) {
+  const schema = parameter.schema ?? {};
+  if (schema.enum?.length) return String(schema.enum[0]);
+  if (parameter.example !== undefined) return String(parameter.example);
+  if (schema.type === "boolean") return "false";
+  if (["integer", "number"].includes(schema.type)) return "0";
+  if (schema.type === "array") return "";
+  return "";
+}
+
+function mergeParameters(entry) {
+  const parameters = [...entry.pathParameters, ...(entry.operation.parameters ?? [])];
+  const seen = new Set();
+  return parameters.filter((parameter) => {
+    const key = `${parameter.in}:${parameter.name}`;
+    if (seen.has(key)) return false;
+    seen.add(key);
+    return ["path", "query", "header"].includes(parameter.in);
+  });
+}
+
+function urlFor(entry, parameters) {
+  const pathParameters = parameters.filter((p) => p.in === "path");
+  const queryParameters = parameters.filter((p) => p.in === "query");
+  const headerParameters = parameters.filter((p) => p.in === "header");
+  const postmanPath = entry.route.replaceAll(/\{([^}]+)\}/g, ":$1");
+  const query = queryParameters.map((p) => ({
+    key: p.name,
+    value: parameterValue(p),
+    description: `${p.required ? "Required" : "Optional"}; ${schemaHint(p.schema)}`,
+    disabled: false,
+  }));
+  const raw = `{{baseUrl}}${postmanPath}${query.length ? `?${query.map((p) => `${p.key}=${p.value}`).join("&")}` : ""}`;
+  return {
+    raw,
+    host: ["{{baseUrl}}"],
+    path: postmanPath.split("/").filter(Boolean),
+    ...(query.length ? { query } : {}),
+    ...(pathParameters.length ? {
+      variable: pathParameters.map((p) => ({
+        key: p.name,
+        value: parameterValue(p),
+        description: `${p.required ? "Required" : "Optional"}; ${schemaHint(p.schema)}`,
+      })),
+    } : {}),
+  };
+}
+
+function bodyFor(entry, document) {
+  const content = entry.operation.requestBody?.content ?? {};
+  const mediaTypes = Object.keys(content);
+  const jsonType = mediaTypes.find((type) => type === "application/json" || type === "text/json" || type.includes("+json"));
+  const type = jsonType ?? mediaTypes.find((value) => value === "multipart/form-data") ?? mediaTypes[0];
+  if (!type) return undefined;
+  const schema = content[type]?.schema;
+  const description = `Illustrative placeholder generated from ${schemaHint(schema)}; replace placeholder values before sending.`;
+  if (type === "multipart/form-data") {
+    const resolved = resolveSchema(schema, document) ?? {};
+    const formdata = Object.entries(resolved.properties ?? {}).map(([key, propertySchema]) => ({
+      key,
+      type: propertySchema.format === "binary" ? "file" : "text",
+      ...(propertySchema.format === "binary" ? { src: "" } : { value: String(safeSample(propertySchema, document, key)) }),
+      description: `${resolved.required?.includes(key) ? "Required" : "Optional"}; ${schemaHint(propertySchema)}`,
+    }));
+    return { mode: "formdata", formdata, description };
+  }
+  if (type === "application/octet-stream") return { mode: "file", file: { src: "" }, description };
+  if (type.startsWith("text/")) return { mode: "raw", raw: "<text payload>", options: { raw: { language: "text" } }, description };
+  return { mode: "raw", raw: JSON.stringify(safeSample(schema, document), null, 2), options: { raw: { language: "json" } }, description };
+}
+
+function operationDescription(entry, document, parameters, body) {
+  const operation = entry.operation;
+  const responses = Object.entries(operation.responses ?? {})
+    .sort(([a], [b]) => a.localeCompare(b))
+    .map(([code, response]) => {
+      const mediaTypes = Object.keys(response.content ?? {});
+      return `${code}${mediaTypes.length ? ` (${mediaTypes.join(", ")})` : ""}`;
+    })
+    .join(", ") || "not documented";
+  const requestMediaTypes = Object.keys(operation.requestBody?.content ?? {});
+  const lines = [
+    `Source: ${sourceUrl}`,
+    `Tag(s): ${(operation.tags ?? ["Other"]).join(", ")}`,
+    `Operation ID: ${operation.operationId ?? "not specified"}`,
+    "",
+    operation.summary ?? "",
+    operation.description ?? "",
+    "",
+    `Parameters: ${parameters.length ? parameters.map((p) => `${p.in} ${p.name} (${p.required ? "required" : "optional"}, ${schemaHint(p.schema)})`).join("; ") : "none"}`,
+    `Request body: ${body ? `${requestMediaTypes.join(", ") || "media type unspecified"}; ${body.description}` : "none documented"}`,
+    `Documented response codes: ${responses}`,
+    "",
+    "Body values and parameter values are safe illustrative placeholders; review them against the target record before sending.",
+  ];
+  return lines.filter((line, index) => !(line === "" && lines[index - 1] === "")).join("\n").trim();
+}
+
+function testEvent(operation) {
+  const codes = Object.keys(operation.responses ?? {}).filter((key) => /^\d{3}$/.test(key)).map(Number);
+  if (!codes.length) return [];
+  return [{
+    listen: "test",
+    script: {
+      type: "text/javascript",
+      exec: [
+        `const documented = [${codes.join(", ")}];`,
+        "pm.test(\"Response status is documented by OpenAPI\", function () {",
+        "    pm.expect(documented).to.include(pm.response.code);",
+        "});",
+      ],
+    },
+  }];
+}
+
+function requestItem(entry, document) {
+  const parameters = mergeParameters(entry);
+  const body = bodyFor(entry, document);
+  const headers = parameters.filter((p) => p.in === "header").map((p) => ({
+    key: p.name,
+    value: parameterValue(p),
+    description: `${p.required ? "Required" : "Optional"}; ${schemaHint(p.schema)}`,
+  }));
+  if (body?.mode === "raw" && body.options?.raw?.language === "json") headers.push({ key: "Content-Type", value: "application/json" });
+  if (body?.mode === "raw" && body.options?.raw?.language === "text") headers.push({ key: "Content-Type", value: "text/plain" });
+  const item = {
+    name: `${entry.method.toUpperCase()} ${entry.route}`,
+    request: {
+      method: entry.method.toUpperCase(),
+      header: headers,
+      url: urlFor(entry, parameters),
+      description: operationDescription(entry, document, parameters, body),
+      ...(body ? { body } : {}),
+    },
+    event: testEvent(entry.operation),
+  };
+  return item;
+}
+
+function setupItems(document) {
+  const login = operationEntries(document).find((entry) => entry.route.toLowerCase() === "/api/authentication/login" && entry.method === "post");
+  const loginSchema = login?.operation.requestBody?.content?.["application/json"]?.schema;
+  return [
+    {
+      name: "Swagger - OpenAPI document",
+      request: {
+        auth: { type: "noauth" }, method: "GET", header: [],
+        url: { raw: "{{baseUrl}}/swagger/v1/swagger.json", host: ["{{baseUrl}}"], path: ["swagger", "v1", "swagger.json"] },
+        description: `Live OpenAPI contract for dev (${sourceUrl}). Import this URL when you need the latest server surface. No auth required.`,
+      },
+      event: [{ listen: "test", script: { type: "text/javascript", exec: [
+        "pm.test(\"OpenAPI document responded 200\", function () { pm.response.to.have.status(200); });",
+        "pm.test(\"OpenAPI document is JSON\", function () { pm.expect(pm.response.headers.get(\"Content-Type\")).to.include(\"application/json\"); });",
+        "pm.test(\"OpenAPI document has paths\", function () { pm.expect(pm.response.json()).to.have.property(\"paths\"); });",
+      ] } }],
+    },
+    {
+      name: "Authentication - Login",
+      request: {
+        auth: { type: "noauth" }, method: "POST", header: [{ key: "Content-Type", value: "application/json" }],
+        body: { mode: "raw", raw: JSON.stringify({ username: "{{username}}", password: "{{password}}" }, null, 2), options: { raw: { language: "json" } }, description: "Credentials are read from the selected secret environment and are never logged." },
+        url: { raw: "{{baseUrl}}/api/Authentication/login", host: ["{{baseUrl}}"], path: ["api", "Authentication", "login"] },
+        description: `Authentication login from ${sourceUrl}. A successful response stores only the non-empty token in the selected environment. Schema: ${schemaHint(loginSchema)}.`,
+      },
+      event: [
+        { listen: "prerequest", script: { type: "text/javascript", exec: [
+          "pm.environment.set(\"token\", \"\");",
+          "const username = pm.environment.get(\"username\");",
+          "const password = pm.environment.get(\"password\");",
+          "if (!username || !password) {",
+          "    pm.execution.skipRequest();",
+          "    throw new Error(\"Select the SeaHaven - Dev environment and set username and password before logging in.\");",
+          "}",
+        ] } },
+        { listen: "test", script: { type: "text/javascript", exec: [
+          "pm.test(\"Login responded 200\", function () { pm.response.to.have.status(200); });",
+          "let body;",
+          "pm.test(\"Login responded with JSON\", function () { pm.expect(pm.response.headers.get(\"Content-Type\")).to.include(\"application/json\"); body = pm.response.json(); });",
+          "const token = body && body.token;",
+          "pm.test(\"Login response contained a non-empty token\", function () { pm.expect(token, \"expected a non-empty token field\").to.be.a(\"string\").and.not.empty; });",
+          "if (typeof token === \"string\" && token.length > 0) pm.environment.set(\"token\", token);",
+        ] } },
+      ],
+    },
+  ];
+}
+
+function buildCollection(document) {
+  const entries = operationEntries(document);
+  const loginEntry = entries.find((entry) => entry.route.toLowerCase() === "/api/authentication/login" && entry.method === "post");
+  const folders = new Map();
+  for (const entry of entries) {
+    if (entry === loginEntry) continue;
+    const tag = [...(entry.operation.tags ?? ["Other"])].sort()[0] ?? "Other";
+    if (!folders.has(tag)) folders.set(tag, []);
+    folders.get(tag).push(requestItem(entry, document));
+  }
+  const generatedFolders = [...folders.entries()].sort(([a], [b]) => a.localeCompare(b)).map(([name, items]) => ({
+    name,
+    item: items.sort((a, b) => a.name.localeCompare(b.name)),
+  }));
+  return {
+    info: {
+      name: "SeaHaven - Dev API (OpenAPI generated)",
+      _postman_id: "a1f0514a-5e9f-41bd-a145-7163671b94db",
+      description: `Complete Postman collection generated from ${sourceUrl}. It contains every OpenAPI operation in the published dev contract. Dev only. Replace illustrative placeholders before sending requests.`,
+      schema: "https://schema.getpostman.com/json/collection/v2.1.0/collection.json",
+    },
+    auth: { type: "bearer", bearer: [{ key: "token", value: "{{token}}", type: "string" }] },
+    variable: [{ key: "baseUrl", value: "https://api.dev.seahaven.com", type: "string" }],
+    item: [{ name: "Setup", item: setupItems(document) }, ...generatedFolders],
+  };
+}
+
+function flattenCollectionItems(items, folder = "") {
+  return items.flatMap((item) => item.item ? flattenCollectionItems(item.item, `${folder}${item.name}/`) : [{ ...item, folder }]);
+}
+
+function validate(document, collection) {
+  const sourceEntries = operationEntries(document);
+  const allItems = flattenCollectionItems(collection.item);
+  const generated = allItems.filter((item) => !item.folder.startsWith("Setup/"));
+  const setupLogin = allItems.find((item) => item.name === "Authentication - Login");
+  const sourceKeys = new Set(sourceEntries.map((entry) => `${entry.method.toUpperCase()} ${entry.route}`));
+  const requestKey = (item) => `${item.request.method} ${item.request.url.raw.replace("{{baseUrl}}", "").replace(/\?.*$/, "").replaceAll(/:([^/]+)/g, "{$1}")}`;
+  const representedItems = [...generated, setupLogin].filter(Boolean);
+  const representedKeys = new Set(representedItems.map(requestKey));
+  const bodyCount = sourceEntries.filter((entry) => entry.operation.requestBody).length;
+  const generatedBodyCount = representedItems.filter((item) => item.request.body).length;
+  const authFailures = generated.filter((item) => item.request.auth?.type === "noauth");
+  const authConfig = collection.auth?.type === "bearer" && collection.auth.bearer?.some((entry) => entry.key === "token" && entry.value === "{{token}}");
+  const missingKeys = [...sourceKeys].filter((key) => !representedKeys.has(key));
+  const extraKeys = [...representedKeys].filter((key) => !sourceKeys.has(key));
+  const checks = [
+    ["operation count", representedKeys.size, sourceEntries.length],
+    ["unique operation keys", missingKeys.length + extraKeys.length, 0],
+    ["request-body coverage", generatedBodyCount, bodyCount],
+    ["protected operations inherit collection auth", authFailures.length, 0],
+    ["collection bearer token auth", authConfig, true],
+    ["login is explicitly noauth", setupLogin?.request?.auth?.type, "noauth"],
+  ];
+  const failures = checks.filter(([, actual, expected]) => actual !== expected);
+  if (failures.length) {
+    for (const [label, actual, expected] of failures) console.error(`FAIL ${label}: expected ${expected}, observed ${actual}`);
+    process.exitCode = 1;
+    return false;
+  }
+  for (const [label, actual, expected] of checks) console.log(`PASS ${label}: ${actual}`);
+  if (missingKeys.length || extraKeys.length) {
+    console.error(`Operation key mismatch. Missing: ${missingKeys.join(", ")}; extra: ${extraKeys.join(", ")}`);
+    process.exitCode = 1;
+    return false;
+  }
+  return true;
+}
+
+async function loadDocument() {
+  if (inputArg) return JSON.parse(await fs.readFile(inputArg.slice("--input=".length), "utf8"));
+  const response = await fetch(sourceUrl, { headers: { accept: "application/json" } });
+  if (!response.ok) throw new Error(`OpenAPI fetch failed: HTTP ${response.status}`);
+  const contentType = response.headers.get("content-type") ?? "";
+  if (!contentType.includes("json")) throw new Error(`OpenAPI fetch returned non-JSON content type: ${contentType}`);
+  return response.json();
+}
+
+const document = await loadDocument();
+const collection = buildCollection(document);
+if (checkOnly) {
+  const existing = JSON.parse(await fs.readFile(COLLECTION_PATH, "utf8"));
+  validate(document, existing);
+} else {
+  await fs.writeFile(COLLECTION_PATH, `${JSON.stringify(collection, null, 2)}\n`);
+  await fs.writeFile(ENVIRONMENT_PATH, `${JSON.stringify({
+    name: "SeaHaven - Dev",
+    values: [
+      { key: "baseUrl", value: "https://api.dev.seahaven.com", type: "default", enabled: true },
+      { key: "username", value: "", type: "secret", enabled: true },
+      { key: "password", value: "", type: "secret", enabled: true },
+      { key: "token", value: "", type: "secret", enabled: true },
+    ],
+    _postman_variable_scope: "environment",
+  }, null, 2)}\n`);
+  console.log(`Generated ${operationEntries(document).length} operations at ${COLLECTION_PATH}`);
+  validate(document, collection);
+}

From 802b7a414e3db1ff514a1f5197dd11e78c99a355 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Tue, 15 Sep 2026 16:46:40 -0300
Subject: [PATCH 005/183] SH-338: filter unscheduled work orders before
 pagination (#116)

* fix(work-orders): filter unscheduled search server-side

* fix(work-orders): preserve unscheduled status scope
---
 .../Helpers/WorkOrderBoardQueryFilters.cs     |  13 +
 .../WorkOrderAdvancedSearchDataService.cs     |  17 +-
 .../WorkOrderAdvancedSearchModels.cs          |   1 +
 .../DTOs/WorkOrderBoardRequestDTOs.cs         |   6 +
 .../WorkOrderAdvancedSearchService.cs         |  13 +-
 .../WorkOrderBoardSearchTests.cs              | 440 ++++++++++++++++++
 6 files changed, 479 insertions(+), 11 deletions(-)

diff --git a/SeaHaven.DataServices/Helpers/WorkOrderBoardQueryFilters.cs b/SeaHaven.DataServices/Helpers/WorkOrderBoardQueryFilters.cs
index 44f965b..7ff26ba 100644
--- a/SeaHaven.DataServices/Helpers/WorkOrderBoardQueryFilters.cs
+++ b/SeaHaven.DataServices/Helpers/WorkOrderBoardQueryFilters.cs
@@ -173,6 +173,19 @@ namespace SeaHaven.DataServices.Helpers
                     || (w.Problem ?? "").ToLower().Contains(pm)));
         }
 
+        /// <summary>
+        /// Restricts to unscheduled rows. A null ScheduledDate is the canonical
+        /// unscheduled representation; replaces the date-range filter when the
+        /// unscheduled-only search mode is active. Mirrors the undated branch of
+        /// <see cref="ApplyDateRangeFilter"/>: completed and canceled rows are
+        /// excluded so both modes agree on the protected unscheduled semantics.
+        /// </summary>
+        public static IQueryable<WorkOrder> ApplyUnscheduledOnlyFilter(IQueryable<WorkOrder> query)
+            => query.Where(w =>
+                w.ScheduledDate == null
+                && w.LifecycleStatus != LifecycleStatus.Completed
+                && w.LifecycleStatus != LifecycleStatus.Canceled);
+
         public static IQueryable<WorkOrder> ApplyDateRangeFilter(
             IQueryable<WorkOrder> query,
             DateOnly dateFrom,
diff --git a/SeaHaven.DataServices/Implementation/WorkOrderAdvancedSearchDataService.cs b/SeaHaven.DataServices/Implementation/WorkOrderAdvancedSearchDataService.cs
index 2eebc30..ceac856 100644
--- a/SeaHaven.DataServices/Implementation/WorkOrderAdvancedSearchDataService.cs
+++ b/SeaHaven.DataServices/Implementation/WorkOrderAdvancedSearchDataService.cs
@@ -19,7 +19,10 @@ namespace SeaHaven.DataServices.Implementation
             var baseQuery = WorkOrderBoardQueryFilters.ApplyBaseScope(_context.workOrders.AsNoTracking());
             if (query.AccountId.HasValue)
                 baseQuery = WorkOrderBoardQueryFilters.ApplyAccountScope(baseQuery, query.AccountId.Value);
-            baseQuery = WorkOrderBoardQueryFilters.ApplyDateRangeFilter(baseQuery, query.DateFrom, query.DateTo);
+            if (query.UnscheduledOnly)
+                baseQuery = WorkOrderBoardQueryFilters.ApplyUnscheduledOnlyFilter(baseQuery);
+            else
+                baseQuery = WorkOrderBoardQueryFilters.ApplyDateRangeFilter(baseQuery, query.DateFrom, query.DateTo);
             baseQuery = WorkOrderBoardQueryFilters.ApplySiteFilter(baseQuery, query.Sites);
             baseQuery = WorkOrderBoardQueryFilters.ApplyTypeFilter(baseQuery, query.Types, query.Overdue);
             baseQuery = WorkOrderBoardQueryFilters.ApplyDispatcherFilter(
@@ -61,14 +64,14 @@ namespace SeaHaven.DataServices.Implementation
             return field switch
             {
                 "wonumber" or "woNumber" => descending
-                    ? query.OrderByDescending(w => w.InternalWONumber)
-                    : query.OrderBy(w => w.InternalWONumber),
+                    ? query.OrderByDescending(w => w.InternalWONumber).ThenBy(w => w.Id)
+                    : query.OrderBy(w => w.InternalWONumber).ThenBy(w => w.Id),
                 "duedate" or "dueDate" => descending
-                    ? query.OrderByDescending(w => w.DueDate).ThenBy(w => w.InternalWONumber)
-                    : query.OrderBy(w => w.DueDate).ThenBy(w => w.InternalWONumber),
+                    ? query.OrderByDescending(w => w.DueDate).ThenBy(w => w.InternalWONumber).ThenBy(w => w.Id)
+                    : query.OrderBy(w => w.DueDate).ThenBy(w => w.InternalWONumber).ThenBy(w => w.Id),
                 _ => descending
-                    ? query.OrderByDescending(w => w.ScheduledDate).ThenByDescending(w => w.InternalWONumber)
-                    : query.OrderBy(w => w.ScheduledDate).ThenBy(w => w.InternalWONumber)
+                    ? query.OrderByDescending(w => w.ScheduledDate).ThenByDescending(w => w.InternalWONumber).ThenBy(w => w.Id)
+                    : query.OrderBy(w => w.ScheduledDate).ThenBy(w => w.InternalWONumber).ThenBy(w => w.Id)
             };
         }
     }
diff --git a/SeaHaven.DataServices/Interfaces/WorkOrderAdvancedSearchModels.cs b/SeaHaven.DataServices/Interfaces/WorkOrderAdvancedSearchModels.cs
index 44889dc..576af7a 100644
--- a/SeaHaven.DataServices/Interfaces/WorkOrderAdvancedSearchModels.cs
+++ b/SeaHaven.DataServices/Interfaces/WorkOrderAdvancedSearchModels.cs
@@ -7,6 +7,7 @@ namespace SeaHaven.DataServices.Interfaces
         string? Search,
         DateOnly DateFrom,
         DateOnly DateTo,
+        bool UnscheduledOnly,
         IReadOnlyList<string>? Sites,
         IReadOnlyList<WorkOrderType>? Types,
         bool Overdue,
diff --git a/SeaHaven.Services/DTOs/WorkOrderBoardRequestDTOs.cs b/SeaHaven.Services/DTOs/WorkOrderBoardRequestDTOs.cs
index e53adb1..8c04373 100644
--- a/SeaHaven.Services/DTOs/WorkOrderBoardRequestDTOs.cs
+++ b/SeaHaven.Services/DTOs/WorkOrderBoardRequestDTOs.cs
@@ -66,6 +66,12 @@ namespace SeaHaven.Services.DTOs
         public WorkOrderAdvancedSearchDatePreset? DatePreset { get; set; }
         public DateOnly? DateFrom { get; set; }
         public DateOnly? DateTo { get; set; }
+        /// <summary>
+        /// When true, only unscheduled rows (ScheduledDate is null) are returned.
+        /// Takes precedence over DatePreset/DateFrom/DateTo for the scheduled-date
+        /// filter; every other facet still applies.
+        /// </summary>
+        public bool UnscheduledOnly { get; set; }
         public List<string>? Sites { get; set; }
         public List<WorkOrderType>? Types { get; set; }
         /// <summary>When true, include past-due (isPastDue) rows. Combined with Types via OR.</summary>
diff --git a/SeaHaven.Services/Implementation/WorkOrderAdvancedSearchService.cs b/SeaHaven.Services/Implementation/WorkOrderAdvancedSearchService.cs
index 071acf0..6c4e3da 100644
--- a/SeaHaven.Services/Implementation/WorkOrderAdvancedSearchService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderAdvancedSearchService.cs
@@ -32,10 +32,14 @@ namespace SeaHaven.Services.Implementation
             var page = query.Page < 0 ? 0 : query.Page;
             var pageSize = query.PageSize < 1 ? DefaultPageSize : Math.Min(query.PageSize, MaxPageSize);
 
-            var dateRange = WorkOrderSearchDateRangeResolver.Resolve(
-                query.DatePreset,
-                query.DateFrom,
-                query.DateTo);
+            // Unscheduled-only mode ignores the scheduled-date range entirely;
+            // the inert wide range keeps the data contract satisfied.
+            var dateRange = query.UnscheduledOnly
+                ? new WorkOrderSearchDateRange(DateOnly.MinValue, DateOnly.MaxValue)
+                : WorkOrderSearchDateRangeResolver.Resolve(
+                    query.DatePreset,
+                    query.DateFrom,
+                    query.DateTo);
 
             var sortBy = WorkOrderBoardSortFields.NormalizeOrThrow(query.SortBy);
 
@@ -43,6 +47,7 @@ namespace SeaHaven.Services.Implementation
                 WorkOrderBoardSearchFilter.NormalizeSearch(query.Search),
                 dateRange.From,
                 dateRange.To,
+                query.UnscheduledOnly,
                 query.Sites,
                 query.Types,
                 query.Overdue,
diff --git a/SeaHavenIndustries.Tests/WorkOrderBoardSearchTests.cs b/SeaHavenIndustries.Tests/WorkOrderBoardSearchTests.cs
index 9c8dd75..721291a 100644
--- a/SeaHavenIndustries.Tests/WorkOrderBoardSearchTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderBoardSearchTests.cs
@@ -1048,4 +1048,444 @@ public class WorkOrderAdvancedSearchServiceTests
         Assert.Equal(1, result.Items.Single().Id);
         Assert.True(result.Items.Single().AvetaRequired);
     }
+
+    [Fact]
+    public async Task SearchAsync_UnscheduledOnly_ReturnsOnlyUndatedRows()
+    {
+        await using var context = CreateContext();
+        var weekStart = new DateOnly(2026, 6, 22);
+
+        context.workOrders.AddRange(
+            new WorkOrder
+            {
+                Id = 1,
+                ScheduledDate = new DateTime(2026, 6, 23),
+                LifecycleStatus = LifecycleStatus.Scheduled,
+                InternalWONumber = "10000000001",
+                istemplate = false
+            },
+            new WorkOrder
+            {
+                Id = 2,
+                ScheduledDate = null,
+                LifecycleStatus = LifecycleStatus.Incomplete,
+                InternalWONumber = "10000000002",
+                istemplate = false
+            });
+
+        await context.SaveChangesAsync();
+
+        var dataService = new WorkOrderAdvancedSearchDataService(context);
+        var service = new SeaHaven.Services.Implementation.WorkOrderAdvancedSearchService(
+            dataService,
+            WorkOrderAccountTestHelpers.Resolver(context));
+
+        var result = await service.SearchAsync(new SeaHaven.Services.DTOs.WorkOrderAdvancedSearchQueryDto
+        {
+            DatePreset = SeaHaven.Services.Helpers.WorkOrderAdvancedSearchDatePreset.Custom,
+            DateFrom = weekStart,
+            DateTo = weekStart.AddDays(4),
+            UnscheduledOnly = true
+        }, WorkOrderAccountTestHelpers.OrgWideAdmin(), null);
+
+        Assert.Equal(1, result.TotalCount);
+        Assert.Single(result.Items);
+        Assert.Equal(2, result.Items.Single().Id);
+        Assert.Null(result.Items.Single().ScheduledDate);
+    }
+
+    [Fact]
+    public async Task SearchAsync_UnscheduledOnlyFalse_MatchesDefaultRangeSearch()
+    {
+        await using var context = CreateContext();
+        var weekStart = new DateOnly(2026, 6, 22);
+
+        context.workOrders.AddRange(
+            new WorkOrder
+            {
+                Id = 1,
+                ScheduledDate = new DateTime(2026, 6, 23),
+                LifecycleStatus = LifecycleStatus.Scheduled,
+                InternalWONumber = "10000000001",
+                istemplate = false
+            },
+            new WorkOrder
+            {
+                Id = 2,
+                ScheduledDate = new DateTime(2026, 8, 4),
+                LifecycleStatus = LifecycleStatus.Scheduled,
+                InternalWONumber = "10000000002",
+                istemplate = false
+            },
+            new WorkOrder
+            {
+                Id = 3,
+                ScheduledDate = null,
+                LifecycleStatus = LifecycleStatus.Incomplete,
+                InternalWONumber = "10000000003",
+                istemplate = false
+            });
+
+        await context.SaveChangesAsync();
+
+        var dataService = new WorkOrderAdvancedSearchDataService(context);
+        var service = new SeaHaven.Services.Implementation.WorkOrderAdvancedSearchService(
+            dataService,
+            WorkOrderAccountTestHelpers.Resolver(context));
+
+        var withFlagFalse = await service.SearchAsync(new SeaHaven.Services.DTOs.WorkOrderAdvancedSearchQueryDto
+        {
+            DatePreset = SeaHaven.Services.Helpers.WorkOrderAdvancedSearchDatePreset.Custom,
+            DateFrom = weekStart,
+            DateTo = weekStart.AddDays(4),
+            UnscheduledOnly = false
+        }, WorkOrderAccountTestHelpers.OrgWideAdmin(), null);
+
+        var withFlagAbsent = await service.SearchAsync(new SeaHaven.Services.DTOs.WorkOrderAdvancedSearchQueryDto
+        {
+            DatePreset = SeaHaven.Services.Helpers.WorkOrderAdvancedSearchDatePreset.Custom,
+            DateFrom = weekStart,
+            DateTo = weekStart.AddDays(4)
+        }, WorkOrderAccountTestHelpers.OrgWideAdmin(), null);
+
+        Assert.Equal(withFlagAbsent.TotalCount, withFlagFalse.TotalCount);
+        Assert.Equal(
+            withFlagAbsent.Items.Select(i => i.Id).ToList(),
+            withFlagFalse.Items.Select(i => i.Id).ToList());
+        Assert.Equal(2, withFlagFalse.TotalCount);
+        Assert.Contains(withFlagFalse.Items, i => i.Id == 1);
+        Assert.Contains(withFlagFalse.Items, i => i.Id == 3);
+        Assert.DoesNotContain(withFlagFalse.Items, i => i.Id == 2);
+    }
+
+    [Fact]
+    public async Task SearchAsync_UnscheduledOnly_IgnoresScheduledDateRange()
+    {
+        await using var context = CreateContext();
+        var weekStart = new DateOnly(2026, 6, 22);
+
+        context.workOrders.AddRange(
+            new WorkOrder
+            {
+                Id = 1,
+                ScheduledDate = new DateTime(2026, 6, 23),
+                LifecycleStatus = LifecycleStatus.Scheduled,
+                InternalWONumber = "10000000001",
+                istemplate = false
+            },
+            new WorkOrder
+            {
+                Id = 2,
+                ScheduledDate = null,
+                LifecycleStatus = LifecycleStatus.Incomplete,
+                InternalWONumber = "10000000002",
+                istemplate = false
+            });
+
+        await context.SaveChangesAsync();
+
+        var dataService = new WorkOrderAdvancedSearchDataService(context);
+        var service = new SeaHaven.Services.Implementation.WorkOrderAdvancedSearchService(
+            dataService,
+            WorkOrderAccountTestHelpers.Resolver(context));
+
+        var result = await service.SearchAsync(new SeaHaven.Services.DTOs.WorkOrderAdvancedSearchQueryDto
+        {
+            DatePreset = SeaHaven.Services.Helpers.WorkOrderAdvancedSearchDatePreset.Custom,
+            DateFrom = weekStart,
+            DateTo = weekStart.AddDays(4),
+            UnscheduledOnly = true
+        }, WorkOrderAccountTestHelpers.OrgWideAdmin(), null);
+
+        Assert.Equal(1, result.TotalCount);
+        Assert.Single(result.Items);
+        Assert.Equal(2, result.Items.Single().Id);
+    }
+
+    [Fact]
+    public async Task SearchAsync_UnscheduledOnly_CustomPresetWithoutDates_DoesNotThrow()
+    {
+        await using var context = CreateContext();
+
+        context.workOrders.Add(new WorkOrder
+        {
+            Id = 1,
+            ScheduledDate = null,
+            LifecycleStatus = LifecycleStatus.Incomplete,
+            InternalWONumber = "10000000001",
+            istemplate = false
+        });
+        await context.SaveChangesAsync();
+
+        var dataService = new WorkOrderAdvancedSearchDataService(context);
+        var service = new SeaHaven.Services.Implementation.WorkOrderAdvancedSearchService(
+            dataService,
+            WorkOrderAccountTestHelpers.Resolver(context));
+
+        var result = await service.SearchAsync(new SeaHaven.Services.DTOs.WorkOrderAdvancedSearchQueryDto
+        {
+            DatePreset = SeaHaven.Services.Helpers.WorkOrderAdvancedSearchDatePreset.Custom,
+            UnscheduledOnly = true
+        }, WorkOrderAccountTestHelpers.OrgWideAdmin(), null);
+
+        Assert.Equal(1, result.TotalCount);
+        Assert.Equal(1, result.Items.Single().Id);
+    }
+
+    [Fact]
+    public async Task SearchAsync_UnscheduledOnly_ComposesWithAccountScopeAndSiteFacet()
+    {
+        await using var context = CreateContext();
+        await WorkOrderAccountTestHelpers.EnsureAccountAsync(context, 1, "A");
+        await WorkOrderAccountTestHelpers.EnsureAccountAsync(context, 2, "B");
+
+        context.workOrders.AddRange(
+            new WorkOrder
+            {
+                Id = 1,
+                AccountId = 1,
+                SiteCode = "BK5",
+                ScheduledDate = null,
+                LifecycleStatus = LifecycleStatus.Incomplete,
+                InternalWONumber = "10000000001",
+                istemplate = false
+            },
+            new WorkOrder
+            {
+                Id = 2,
+                AccountId = 2,
+                SiteCode = "BK5",
+                ScheduledDate = null,
+                LifecycleStatus = LifecycleStatus.Incomplete,
+                InternalWONumber = "10000000002",
+                istemplate = false
+            },
+            new WorkOrder
+            {
+                Id = 3,
+                AccountId = 1,
+                SiteCode = "BK6",
+                ScheduledDate = null,
+                LifecycleStatus = LifecycleStatus.Incomplete,
+                InternalWONumber = "10000000003",
+                istemplate = false
+            },
+            new WorkOrder
+            {
+                Id = 4,
+                AccountId = 1,
+                SiteCode = "BK5",
+                ScheduledDate = new DateTime(2026, 6, 23),
+                LifecycleStatus = LifecycleStatus.Scheduled,
+                InternalWONumber = "10000000004",
+                istemplate = false
+            });
+
+        await context.SaveChangesAsync();
+
+        var dataService = new WorkOrderAdvancedSearchDataService(context);
+        var service = new SeaHaven.Services.Implementation.WorkOrderAdvancedSearchService(
+            dataService,
+            WorkOrderAccountTestHelpers.Resolver(context));
+
+        var result = await service.SearchAsync(new SeaHaven.Services.DTOs.WorkOrderAdvancedSearchQueryDto
+        {
+            DatePreset = SeaHaven.Services.Helpers.WorkOrderAdvancedSearchDatePreset.Custom,
+            DateFrom = new DateOnly(2026, 6, 22),
+            DateTo = new DateOnly(2026, 6, 26),
+            UnscheduledOnly = true,
+            Sites = new List<string> { "BK5" }
+        }, WorkOrderAccountTestHelpers.AccountUser("disp-1", 1, "Dispatcher"), "disp-1");
+
+        Assert.Equal(1, result.TotalCount);
+        Assert.Single(result.Items);
+        Assert.Equal(1, result.Items.Single().Id);
+    }
+
+    [Fact]
+    public async Task SearchAsync_UnscheduledOnly_NoUndatedRows_ReturnsEmptyPage()
+    {
+        await using var context = CreateContext();
+
+        context.workOrders.AddRange(
+            new WorkOrder
+            {
+                Id = 1,
+                ScheduledDate = new DateTime(2026, 6, 23),
+                LifecycleStatus = LifecycleStatus.Scheduled,
+                InternalWONumber = "10000000001",
+                istemplate = false
+            },
+            new WorkOrder
+            {
+                Id = 2,
+                ScheduledDate = new DateTime(2026, 6, 24),
+                LifecycleStatus = LifecycleStatus.Scheduled,
+                InternalWONumber = "10000000002",
+                istemplate = false
+            });
+
+        await context.SaveChangesAsync();
+
+        var dataService = new WorkOrderAdvancedSearchDataService(context);
+        var service = new SeaHaven.Services.Implementation.WorkOrderAdvancedSearchService(
+            dataService,
+            WorkOrderAccountTestHelpers.Resolver(context));
+
+        var result = await service.SearchAsync(new SeaHaven.Services.DTOs.WorkOrderAdvancedSearchQueryDto
+        {
+            DatePreset = SeaHaven.Services.Helpers.WorkOrderAdvancedSearchDatePreset.Custom,
+            DateFrom = new DateOnly(2000, 1, 1),
+            DateTo = new DateOnly(2099, 12, 31),
+            UnscheduledOnly = true,
+            Page = 0,
+            PageSize = 25
+        }, WorkOrderAccountTestHelpers.OrgWideAdmin(), null);
+
+        Assert.Equal(0, result.TotalCount);
+        Assert.Empty(result.Items);
+        Assert.Equal(0, result.Page);
+        Assert.Equal(25, result.PageSize);
+    }
+
+    [Fact]
+    public async Task SearchAsync_UnscheduledOnly_PaginatesStableOrderWithoutDuplicates()
+    {
+        await using var context = CreateContext();
+
+        context.workOrders.AddRange(
+            new WorkOrder
+            {
+                Id = 1,
+                ScheduledDate = null,
+                LifecycleStatus = LifecycleStatus.Incomplete,
+                InternalWONumber = "10000000003",
+                istemplate = false
+            },
+            new WorkOrder
+            {
+                Id = 2,
+                ScheduledDate = null,
+                LifecycleStatus = LifecycleStatus.Incomplete,
+                InternalWONumber = "10000000001",
+                istemplate = false
+            },
+            new WorkOrder
+            {
+                Id = 3,
+                ScheduledDate = null,
+                LifecycleStatus = LifecycleStatus.Incomplete,
+                InternalWONumber = "10000000002",
+                istemplate = false
+            },
+            new WorkOrder
+            {
+                Id = 4,
+                ScheduledDate = new DateTime(2026, 6, 23),
+                LifecycleStatus = LifecycleStatus.Scheduled,
+                InternalWONumber = "10000000000",
+                istemplate = false
+            });
+
+        await context.SaveChangesAsync();
+
+        var dataService = new WorkOrderAdvancedSearchDataService(context);
+        var service = new SeaHaven.Services.Implementation.WorkOrderAdvancedSearchService(
+            dataService,
+            WorkOrderAccountTestHelpers.Resolver(context));
+
+        var page0 = await service.SearchAsync(new SeaHaven.Services.DTOs.WorkOrderAdvancedSearchQueryDto
+        {
+            DatePreset = SeaHaven.Services.Helpers.WorkOrderAdvancedSearchDatePreset.Custom,
+            DateFrom = new DateOnly(2026, 6, 22),
+            DateTo = new DateOnly(2026, 6, 26),
+            UnscheduledOnly = true,
+            Page = 0,
+            PageSize = 2
+        }, WorkOrderAccountTestHelpers.OrgWideAdmin(), null);
+
+        var page1 = await service.SearchAsync(new SeaHaven.Services.DTOs.WorkOrderAdvancedSearchQueryDto
+        {
+            DatePreset = SeaHaven.Services.Helpers.WorkOrderAdvancedSearchDatePreset.Custom,
+            DateFrom = new DateOnly(2026, 6, 22),
+            DateTo = new DateOnly(2026, 6, 26),
+            UnscheduledOnly = true,
+            Page = 1,
+            PageSize = 2
+        }, WorkOrderAccountTestHelpers.OrgWideAdmin(), null);
+
+        Assert.Equal(3, page0.TotalCount);
+        Assert.Equal(2, page0.Items.Count());
+        Assert.Equal(new[] { 2, 3 }, page0.Items.Select(i => i.Id).ToArray());
+
+        Assert.Equal(3, page1.TotalCount);
+        Assert.Single(page1.Items);
+        Assert.Equal(1, page1.Items.Single().Id);
+
+        Assert.Empty(page0.Items.Select(i => i.Id).Intersect(page1.Items.Select(i => i.Id)));
+        Assert.Equal(new[] { 1, 2, 3 }, page0.Items.Concat(page1.Items).Select(i => i.Id).OrderBy(id => id).ToArray());
+    }
+
+    [Fact]
+    public async Task SearchAsync_UnscheduledOnly_ExcludesCompletedAndCanceledUndatedRows()
+    {
+        await using var context = CreateContext();
+
+        context.workOrders.AddRange(
+            new WorkOrder
+            {
+                Id = 1,
+                ScheduledDate = null,
+                LifecycleStatus = LifecycleStatus.Incomplete,
+                InternalWONumber = "10000000001",
+                istemplate = false
+            },
+            new WorkOrder
+            {
+                Id = 2,
+                ScheduledDate = null,
+                LifecycleStatus = LifecycleStatus.Completed,
+                InternalWONumber = "10000000002",
+                istemplate = false
+            },
+            new WorkOrder
+            {
+                Id = 3,
+                ScheduledDate = null,
+                LifecycleStatus = LifecycleStatus.Canceled,
+                InternalWONumber = "10000000003",
+                istemplate = false
+            },
+            new WorkOrder
+            {
+                Id = 4,
+                ScheduledDate = new DateTime(2026, 6, 23),
+                LifecycleStatus = LifecycleStatus.Completed,
+                InternalWONumber = "10000000004",
+                istemplate = false
+            });
+
+        await context.SaveChangesAsync();
+
+        var dataService = new WorkOrderAdvancedSearchDataService(context);
+        var service = new SeaHaven.Services.Implementation.WorkOrderAdvancedSearchService(
+            dataService,
+            WorkOrderAccountTestHelpers.Resolver(context));
+
+        var result = await service.SearchAsync(new SeaHaven.Services.DTOs.WorkOrderAdvancedSearchQueryDto
+        {
+            DatePreset = SeaHaven.Services.Helpers.WorkOrderAdvancedSearchDatePreset.Custom,
+            DateFrom = new DateOnly(2026, 6, 22),
+            DateTo = new DateOnly(2026, 6, 26),
+            UnscheduledOnly = true
+        }, WorkOrderAccountTestHelpers.OrgWideAdmin(), null);
+
+        Assert.Equal(1, result.TotalCount);
+        Assert.Single(result.Items);
+        Assert.Equal(1, result.Items.Single().Id);
+        Assert.Null(result.Items.Single().ScheduledDate);
+        Assert.DoesNotContain(result.Items, i => i.Id == 2);
+        Assert.DoesNotContain(result.Items, i => i.Id == 3);
+        Assert.DoesNotContain(result.Items, i => i.Id == 4);
+    }
 }

From 4872fe5ba15b06a5301b3c44d27a640d9d5408ae Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Mon, 14 Sep 2026 21:44:45 -0300
Subject: [PATCH 006/183] feat(locations): manage ordered site contacts

---
 .../LocationSiteContactsTests.cs              |  581 +++
 .../Controllers/LocationController.cs         |   26 +-
 .../DTOs/EditLocation_DTO.cs                  |    1 +
 Api.SeaHavenIndustries/DTOs/Location_DTO.cs   |    9 +
 ...60915002525_SH138_SiteContacts.Designer.cs | 3933 +++++++++++++++++
 .../20260915002525_SH138_SiteContacts.cs      |   28 +
 .../ApplicationDbContextModelSnapshot.cs      |   35 +-
 Data.SeaHavenIndustries/Models/Contacts.cs    |    3 +
 Data.SeaHavenIndustries/Models/Locations.cs   |    3 +
 .../Implementation/LocationDataService.cs     |   20 +-
 .../Interfaces/ILocationDataService.cs        |    9 +
 SeaHaven.Services/DTOs/LocationDTOs.cs        |   25 +
 .../Implementation/LocationService.cs         |  176 +-
 .../Validation/SiteContactValidation.cs       |   81 +
 .../WorkOrderAccountScopeTests.cs             |    4 +
 15 files changed, 4905 insertions(+), 29 deletions(-)
 create mode 100644 Api.SeaHavenIndustries.Tests/LocationSiteContactsTests.cs
 create mode 100644 Data.SeaHavenIndustries/Migrations/20260915002525_SH138_SiteContacts.Designer.cs
 create mode 100644 Data.SeaHavenIndustries/Migrations/20260915002525_SH138_SiteContacts.cs
 create mode 100644 SeaHaven.Services/Validation/SiteContactValidation.cs

diff --git a/Api.SeaHavenIndustries.Tests/LocationSiteContactsTests.cs b/Api.SeaHavenIndustries.Tests/LocationSiteContactsTests.cs
new file mode 100644
index 0000000..a045661
--- /dev/null
+++ b/Api.SeaHavenIndustries.Tests/LocationSiteContactsTests.cs
@@ -0,0 +1,581 @@
+using System.Security.Claims;
+using System.Text.Json;
+using Api.SeaHavenIndustries.Controllers;
+using Data.SeaHavenIndustries;
+using FluentAssertions;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Migrations.Operations;
+using Microsoft.Extensions.Logging;
+using Moq;
+using SeaHaven.DataServices.Implementation;
+using SeaHaven.DataServices.Interfaces;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Helpers;
+using SeaHaven.Services.Implementation;
+using SeaHaven.Services.Validation;
+using Xunit;
+
+namespace Api.SeaHavenIndustries.Tests;
+
+public class LocationSiteContactsTests
+{
+    private static ApplicationDbContext NewContext()
+    {
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseInMemoryDatabase(Guid.NewGuid().ToString())
+            .Options;
+        return new ApplicationDbContext(options);
+    }
+
+    private static LocationService NewService(ApplicationDbContext ctx) =>
+        new(
+            new LocationDataService(ctx),
+            new AccountDataService(ctx),
+            new CreateLocationValidation(),
+            new UpdateLocationValidation());
+
+    private static ClaimsPrincipal OrgWideAdmin()
+    {
+        var claims = new List<Claim>
+        {
+            new(ClaimTypes.NameIdentifier, "admin-1"),
+            new(ClaimTypes.Role, "Admin"),
+            new(SeaHavenClaimTypes.OrgScope, SeaHavenClaimTypes.OrgScopeAll)
+        };
+        return new ClaimsPrincipal(new ClaimsIdentity(claims, "test"));
+    }
+
+    private static async Task<Locations> SeedLocationWithContactsAsync(ApplicationDbContext ctx)
+    {
+        var service = NewService(ctx);
+        await service.CreateLocationFromRequestAsync(new LocationCreateRequestDTO
+        {
+            Name = "Depot",
+            AccountId = null,
+            Contacts = new List<SiteContactRequestDTO>
+            {
+                new() { Name = " Alice Cooper ", Phone = " 555-0100 " },
+                new() { Name = "Bob Dillon", Phone = "555-0200"}
+            }
+        }, OrgWideAdmin(), CancellationToken.None);
+        return ctx.Locations.Include(l => l.Contacts).Single();
+    }
+
+    [Fact]
+    public async Task Create_WithContacts_PersistsTrimmedOrderedRows_MirrorsFirstPhone_SetsAccountFromLocation()
+    {
+        using var ctx = NewContext();
+        ctx.Accounts.Add(new Accounts { Id = 7, Name = "Customer", IsDeleted = false });
+        await ctx.SaveChangesAsync();
+
+        await NewService(ctx).CreateLocationFromRequestAsync(new LocationCreateRequestDTO
+        {
+            Name = "Warehouse",
+            AccountId = 7,
+            Contacts = new List<SiteContactRequestDTO>
+            {
+                new() { Name = " Alice Cooper ", Phone = " 555-0100 " },
+                new() { Name = "Bob Dillon", Phone = "555-0200" }
+            }
+        }, OrgWideAdmin(), CancellationToken.None);
+
+        var location = ctx.Locations.Include(l => l.Contacts).Single();
+        location.PhoneNumber.Should().Be("555-0100", "first contact mirrors Location.PhoneNumber");
+
+        var contacts = location.Contacts.OrderBy(c => c.SiteContactOrder).ToList();
+        contacts.Should().HaveCount(2);
+        contacts[0].FirstName.Should().Be("Alice Cooper");
+        contacts[0].MiddleName.Should().BeNull();
+        contacts[0].LastName.Should().BeNull();
+        contacts[0].PhoneNumber.Should().Be("555-0100");
+        contacts[0].SiteContactOrder.Should().Be(0);
+        contacts[0].AccountId.Should().Be(7, "AccountId must come from the location");
+        contacts[0].LocationId.Should().Be(location.Id);
+        contacts[0].createdby.Should().Be("admin-1");
+        contacts[0].CreatedDate.Should().NotBeNull();
+        contacts[1].SiteContactOrder.Should().Be(1);
+    }
+
+    [Fact]
+    public async Task Create_EmptyContactsArray_IsExplicitValidationError_AndWritesNothing()
+    {
+        using var ctx = NewContext();
+
+        var act = () => NewService(ctx).CreateLocationFromRequestAsync(new LocationCreateRequestDTO
+        {
+            Name = "Warehouse",
+            Contacts = new List<SiteContactRequestDTO>()
+        }, OrgWideAdmin(), CancellationToken.None);
+
+        (await act.Should().ThrowAsync<FluentValidation.ValidationException>())
+            .Which.Errors.Should().ContainSingle(e => e.PropertyName == "Contacts");
+        ctx.Locations.Should().BeEmpty();
+        ctx.Contacts.Should().BeEmpty();
+    }
+
+    [Theory]
+    [InlineData(null, "555-0100", "Contact name is required.")]
+    [InlineData("   ", "555-0100", "Contact name is required.")]
+    [InlineData("Alice", null, "Contact phone is required.")]
+    [InlineData("Alice", "  ", "Contact phone is required.")]
+    [InlineData("Alice", "555-0100", null)]
+    public async Task Create_ValidatesEachRow(string? name, string? phone, string? expectedError)
+    {
+        using var ctx = NewContext();
+        var contacts = new List<SiteContactRequestDTO> { new() { Name = name, Phone = phone } };
+
+        var act = () => NewService(ctx).CreateLocationFromRequestAsync(new LocationCreateRequestDTO
+        {
+            Name = "Warehouse",
+            Contacts = contacts
+        }, OrgWideAdmin(), CancellationToken.None);
+
+        if (expectedError == null)
+        {
+            await act.Should().NotThrowAsync();
+            return;
+        }
+
+        (await act.Should().ThrowAsync<FluentValidation.ValidationException>())
+            .Which.Errors.Should().Contain(e => e.ErrorMessage == expectedError);
+    }
+
+    [Fact]
+    public async Task Create_RejectsOversizedNameAndPhone()
+    {
+        using var ctx = NewContext();
+
+        var act = () => NewService(ctx).CreateLocationFromRequestAsync(new LocationCreateRequestDTO
+        {
+            Name = "Warehouse",
+            Contacts = new List<SiteContactRequestDTO>
+            {
+                new() { Name = new string('x', 101), Phone = new string('5', 21) }
+            }
+        }, OrgWideAdmin(), CancellationToken.None);
+
+        var thrown = (await act.Should().ThrowAsync<FluentValidation.ValidationException>()).Which;
+        thrown.Errors.Should().Contain(e => e.ErrorMessage.Contains("cannot exceed 100"));
+        thrown.Errors.Should().Contain(e => e.ErrorMessage.Contains("cannot exceed 20"));
+    }
+
+    [Fact]
+    public async Task Create_RejectsMoreThanTwentyContacts()
+    {
+        using var ctx = NewContext();
+        var contacts = Enumerable.Range(1, 21)
+            .Select(i => new SiteContactRequestDTO { Name = $"C{i}", Phone = "555-0100" })
+            .ToList();
+
+        var act = () => NewService(ctx).CreateLocationFromRequestAsync(new LocationCreateRequestDTO
+        {
+            Name = "Warehouse",
+            Contacts = contacts
+        }, OrgWideAdmin(), CancellationToken.None);
+
+        (await act.Should().ThrowAsync<FluentValidation.ValidationException>())
+            .Which.Errors.Should().ContainSingle(e => e.ErrorMessage.Contains("cannot exceed 20"));
+    }
+
+    [Fact]
+    public async Task Update_ContactsNull_KeepsLegacyBehavior_AndDoesNotMutateContactRows()
+    {
+        using var ctx = NewContext();
+        var seeded = await SeedLocationWithContactsAsync(ctx);
+        var before = ctx.Contacts.AsNoTracking().OrderBy(c => c.Id).ToList();
+
+        await NewService(ctx).UpdateLocationFromRequestAsync(seeded.Id, new LocationUpdateRequestDTO
+        {
+            Name = "Depot",
+            Phone = "555-9999"
+        }, OrgWideAdmin(), CancellationToken.None);
+
+        var after = ctx.Contacts.AsNoTracking().OrderBy(c => c.Id).ToList();
+        after.Should().HaveCount(before.Count);
+        after[0].FirstName.Should().Be(before[0].FirstName);
+        after[0].PhoneNumber.Should().Be(before[0].PhoneNumber);
+        after[0].SiteContactOrder.Should().Be(before[0].SiteContactOrder);
+        after[0].IsDeleted.Should().Be(before[0].IsDeleted);
+        ctx.Locations.Single().PhoneNumber.Should().Be("555-9999", "legacy updates keep request.Phone");
+    }
+
+    [Fact]
+    public async Task Update_EmptyContactsArray_IsExplicitValidationError()
+    {
+        using var ctx = NewContext();
+        var seeded = await SeedLocationWithContactsAsync(ctx);
+
+        var act = () => NewService(ctx).UpdateLocationFromRequestAsync(seeded.Id, new LocationUpdateRequestDTO
+        {
+            Name = "Depot",
+            Contacts = new List<SiteContactRequestDTO>()
+        }, OrgWideAdmin(), CancellationToken.None);
+
+        (await act.Should().ThrowAsync<FluentValidation.ValidationException>())
+            .Which.Errors.Should().ContainSingle(e => e.PropertyName == "Contacts");
+        ctx.Contacts.Should().OnlyContain(c => c.IsDeleted != true);
+    }
+
+    [Fact]
+    public async Task Update_ReordersAndSoftDeletes_DensifiesOrder_AndUpdatesMirror()
+    {
+        using var ctx = NewContext();
+        var seeded = await SeedLocationWithContactsAsync(ctx);
+        var alice = seeded.Contacts.Single(c => c.FirstName == "Alice Cooper");
+        var bob = seeded.Contacts.Single(c => c.FirstName == "Bob Dillon");
+
+        await NewService(ctx).UpdateLocationFromRequestAsync(seeded.Id, new LocationUpdateRequestDTO
+        {
+            Name = "Depot",
+            Contacts = new List<SiteContactRequestDTO>
+            {
+                new() { Id = bob.Id, Name = "Bob Dillon", Phone = "555-0200" },
+                new() { Id = alice.Id, Name = "Alice Cooper", Phone = "555-0300" },
+                new() { Name = "Cara Lane", Phone = "555-0400" }
+            }
+        }, OrgWideAdmin(), CancellationToken.None);
+
+        var location = ctx.Locations.Include(l => l.Contacts).Single();
+        location.PhoneNumber.Should().Be("555-0200", "reorder must update the mirror to the new first contact");
+
+        var active = location.Contacts.Where(c => c.IsDeleted != true).OrderBy(c => c.SiteContactOrder).ToList();
+        active.Should().HaveCount(3);
+        active.Select(c => c.FirstName).Should().ContainInOrder("Bob Dillon", "Alice Cooper", "Cara Lane");
+        active.Select(c => c.SiteContactOrder).Should().ContainInOrder(new int?[] { 0, 1, 2 }, "order is densified from zero");
+        active[1].PhoneNumber.Should().Be("555-0300");
+        active[0].Id.Should().Be(bob.Id);
+        active[1].Id.Should().Be(alice.Id, "existing ids are preserved");
+        active[2].AccountId.Should().Be(location.AccountId);
+    }
+
+    [Fact]
+    public async Task Update_SoftDeletesRemovedContacts_WithAuditFields_KeepingRowsReadable()
+    {
+        using var ctx = NewContext();
+        var seeded = await SeedLocationWithContactsAsync(ctx);
+        var alice = seeded.Contacts.Single(c => c.FirstName == "Alice Cooper");
+        var bob = seeded.Contacts.Single(c => c.FirstName == "Bob Dillon");
+
+        await NewService(ctx).UpdateLocationFromRequestAsync(seeded.Id, new LocationUpdateRequestDTO
+        {
+            Name = "Depot",
+            Contacts = new List<SiteContactRequestDTO> { new() { Id = alice.Id, Name = "Alice Cooper", Phone = "555-0100" } }
+        }, OrgWideAdmin(), CancellationToken.None);
+
+        var removed = ctx.Contacts.AsNoTracking().Single(c => c.Id == bob.Id);
+        removed.IsDeleted.Should().BeTrue();
+        removed.DeleterUserId.Should().Be("admin-1");
+        removed.DeletionTime.Should().NotBeNull();
+        removed.LastModificationTime.Should().NotBeNull();
+        removed.FirstName.Should().Be("Bob Dillon", "soft deleted rows keep data so historical WorkOrderContacts still render");
+        removed.PhoneNumber.Should().Be("555-0200");
+
+        var kept = ctx.Contacts.AsNoTracking().Single(c => c.Id == alice.Id);
+        kept.IsDeleted.Should().NotBeTrue();
+    }
+
+    [Fact]
+    public async Task Update_ForeignLocationContactId_RejectedWithoutMutation()
+    {
+        using var ctx = NewContext();
+        var seeded = await SeedLocationWithContactsAsync(ctx);
+        ctx.Locations.Add(new Locations { Id = seeded.Id + 1, Name = "Other" });
+        ctx.Contacts.Add(new Contacts { Id = 901, LocationId = seeded.Id + 1, FirstName = "Foreign", PhoneNumber = "555-0900" });
+        await ctx.SaveChangesAsync();
+        var snapshot = ctx.Contacts.AsNoTracking().OrderBy(c => c.Id).ToList();
+
+        var act = () => NewService(ctx).UpdateLocationFromRequestAsync(seeded.Id, new LocationUpdateRequestDTO
+        {
+            Name = "Depot",
+            Contacts = new List<SiteContactRequestDTO>
+            {
+                new() { Name = "Alice Cooper", Phone = "555-0100" },
+                new() { Id = 901, Name = "Foreign", Phone = "555-0900" }
+            }
+        }, OrgWideAdmin(), CancellationToken.None);
+
+        (await act.Should().ThrowAsync<FluentValidation.ValidationException>())
+            .Which.Errors.Should().ContainSingle(e => e.PropertyName.Contains("Id"));
+
+        var after = ctx.Contacts.AsNoTracking().OrderBy(c => c.Id).ToList();
+        after.Should().HaveCount(snapshot.Count);
+        after.Should().BeEquivalentTo(snapshot, o => o.Excluding(c => c.Location));
+        ctx.Locations.AsNoTracking().Single(l => l.Id == seeded.Id).PhoneNumber
+            .Should().Be("555-0100", "the rejected update must not persist any change");
+    }
+
+    [Fact]
+    public async Task Update_DeletedContactId_Rejected()
+    {
+        using var ctx = NewContext();
+        var seeded = await SeedLocationWithContactsAsync(ctx);
+        var bob = seeded.Contacts.Single(c => c.FirstName == "Bob Dillon");
+        bob.IsDeleted = true;
+        await ctx.SaveChangesAsync();
+
+        var act = () => NewService(ctx).UpdateLocationFromRequestAsync(seeded.Id, new LocationUpdateRequestDTO
+        {
+            Name = "Depot",
+            Contacts = new List<SiteContactRequestDTO> { new() { Id = bob.Id, Name = "Bob Dillon", Phone = "555-0200" } }
+        }, OrgWideAdmin(), CancellationToken.None);
+
+        (await act.Should().ThrowAsync<FluentValidation.ValidationException>())
+            .Which.Errors.Should().ContainSingle(e => e.PropertyName.Contains("Id"));
+    }
+
+    [Fact]
+    public async Task Update_AccountLevelContactId_Rejected()
+    {
+        using var ctx = NewContext();
+        var seeded = await SeedLocationWithContactsAsync(ctx);
+        ctx.Contacts.Add(new Contacts { Id = 902, AccountId = 55, LocationId = null, FirstName = "AccountOnly", PhoneNumber = "555-0900" });
+        await ctx.SaveChangesAsync();
+
+        var act = () => NewService(ctx).UpdateLocationFromRequestAsync(seeded.Id, new LocationUpdateRequestDTO
+        {
+            Name = "Depot",
+            Contacts = new List<SiteContactRequestDTO> { new() { Id = 902, Name = "AccountOnly", Phone = "555-0900" } }
+        }, OrgWideAdmin(), CancellationToken.None);
+
+        (await act.Should().ThrowAsync<FluentValidation.ValidationException>())
+            .Which.Errors.Should().ContainSingle(e => e.PropertyName.Contains("Id"));
+    }
+
+    [Fact]
+    public async Task Update_DuplicateContactIds_Rejected()
+    {
+        using var ctx = NewContext();
+        var seeded = await SeedLocationWithContactsAsync(ctx);
+        var alice = seeded.Contacts.Single(c => c.FirstName == "Alice Cooper");
+
+        var act = () => NewService(ctx).UpdateLocationFromRequestAsync(seeded.Id, new LocationUpdateRequestDTO
+        {
+            Name = "Depot",
+            Contacts = new List<SiteContactRequestDTO>
+            {
+                new() { Id = alice.Id, Name = "Alice Cooper", Phone = "555-0100" },
+                new() { Id = alice.Id, Name = "Alice Cooper", Phone = "555-0100" }
+            }
+        }, OrgWideAdmin(), CancellationToken.None);
+
+        (await act.Should().ThrowAsync<FluentValidation.ValidationException>())
+            .Which.Errors.Should().ContainSingle(e => e.ErrorMessage.Contains("more than once"));
+    }
+
+    [Fact]
+    public async Task Update_AccountScopedCaller_CannotAttachContactsToForeignLocation()
+    {
+        using var ctx = NewContext();
+        var seeded = await SeedLocationWithContactsAsync(ctx);
+        seeded.AccountId = 99;
+        await ctx.SaveChangesAsync();
+
+        var claims = new List<Claim>
+        {
+            new(ClaimTypes.NameIdentifier, "actor-1"),
+            new(ClaimTypes.Role, "Dispatcher"),
+            new(SeaHavenClaimTypes.AccountId, "4")
+        };
+        var caller = new ClaimsPrincipal(new ClaimsIdentity(claims, "test"));
+
+        var act = () => NewService(ctx).UpdateLocationFromRequestAsync(seeded.Id, new LocationUpdateRequestDTO
+        {
+            Name = "Depot",
+            Contacts = new List<SiteContactRequestDTO> { new() { Name = "Nope", Phone = "555-0000" } }
+        }, caller, CancellationToken.None);
+
+        await act.Should().ThrowAsync<UnauthorizedAccessException>();
+        ctx.Contacts.Should().OnlyContain(c => c.IsDeleted != true);
+    }
+
+    [Fact]
+    public async Task Detail_ExcludesDeletedContacts_AndOrdersBySiteContactOrderThenId()
+    {
+        using var ctx = NewContext();
+        var seeded = await SeedLocationWithContactsAsync(ctx);
+        var alice = seeded.Contacts.Single(c => c.FirstName == "Alice Cooper");
+        var bob = seeded.Contacts.Single(c => c.FirstName == "Bob Dillon");
+
+        await NewService(ctx).UpdateLocationFromRequestAsync(seeded.Id, new LocationUpdateRequestDTO
+        {
+            Name = "Depot",
+            Contacts = new List<SiteContactRequestDTO> { new() { Id = alice.Id, Name = "Alice Cooper", Phone = "555-0100" } }
+        }, OrgWideAdmin(), CancellationToken.None);
+
+        var detail = await NewService(ctx).GetLocationDetailAsync(seeded.Id, CancellationToken.None);
+
+        detail!.Contacts.Should().ContainSingle().Which.Id.Should().Be(alice.Id);
+    }
+
+    [Fact]
+    public async Task Detail_OrdersContactsByOrderThenId_WhenOrdersAreMissing()
+    {
+        using var ctx = NewContext();
+        var loc = new Locations { Id = 5, Name = "Legacy", AccountId = 7 };
+        ctx.Locations.Add(loc);
+        ctx.Contacts.AddRange(
+            new Contacts { Id = 31, LocationId = 5, AccountId = 7, FirstName = "No Order B", PhoneNumber = "555-2" },
+            new Contacts { Id = 30, LocationId = 5, AccountId = 7, FirstName = "No Order A", PhoneNumber = "555-1" });
+        await ctx.SaveChangesAsync();
+
+        var detail = await NewService(ctx).GetLocationDetailAsync(5, CancellationToken.None);
+
+        detail!.Contacts!.Select(c => c.Name).Should().ContainInOrder("No Order A", "No Order B");
+    }
+
+    [Fact]
+    public async Task List_LoadsPageContactsInSingleBatchedRead()
+    {
+        var data = new Mock<ILocationDataService>();
+        data.Setup(d => d.GetListPagedAsync(It.IsAny<int>(), It.IsAny<int>(), It.IsAny<string?>(), It.IsAny<IReadOnlyCollection<string>?>(), It.IsAny<CancellationToken>()))
+            .ReturnsAsync((new List<Locations>
+            {
+                new() { Id = 1, Name = "One" },
+                new() { Id = 2, Name = "Two" }
+            }, 2));
+        data.Setup(d => d.GetSiteContactsByLocationIdsAsync(It.IsAny<IReadOnlyCollection<int>>(), It.IsAny<CancellationToken>()))
+            .ReturnsAsync(new List<Contacts>
+            {
+                new() { Id = 10, LocationId = 1, SiteContactOrder = 1, FirstName = "Second", PhoneNumber = "555-2" },
+                new() { Id = 11, LocationId = 1, SiteContactOrder = 0, FirstName = "First", PhoneNumber = "555-1" },
+                new() { Id = 12, LocationId = 2, SiteContactOrder = 0, FirstName = "Solo", PhoneNumber = "555-3" }
+            });
+
+        var service = new LocationService(
+            data.Object,
+            Mock.Of<IAccountDataService>(),
+            new CreateLocationValidation(),
+            new UpdateLocationValidation());
+
+        var page = await service.GetLocationListPagedAsync(1, 10, null, cancellationToken: CancellationToken.None);
+
+        page.Items.Should().HaveCount(2);
+        page.Items.Single(i => i.Id == 1).Contacts!.Select(c => c.Name)
+            .Should().ContainInOrder(new[] { "First", "Second" }, "contacts are ordered per location");
+        page.Items.Single(i => i.Id == 2).Contacts!.Select(c => c.Name).Should().ContainSingle("Solo");
+        data.Verify(d => d.GetSiteContactsByLocationIdsAsync(It.IsAny<IReadOnlyCollection<int>>(), It.IsAny<CancellationToken>()), Times.Once);
+        data.Verify(d => d.GetSiteContactsByLocationIdsAsync(It.Is<IReadOnlyCollection<int>>(ids => ids.Contains(1) && ids.Contains(2)), It.IsAny<CancellationToken>()), Times.Once);
+    }
+
+    [Fact]
+    public async Task DataService_GetSiteContactsByLocationIdsAsync_ExcludesDeleted_AndOrders()
+    {
+        using var ctx = NewContext();
+        ctx.Contacts.AddRange(
+            new Contacts { Id = 1, LocationId = 5, SiteContactOrder = 1, FirstName = "B" },
+            new Contacts { Id = 2, LocationId = 5, SiteContactOrder = 0, FirstName = "A" },
+            new Contacts { Id = 3, LocationId = 5, SiteContactOrder = 0, FirstName = "Tie", IsDeleted = true },
+            new Contacts { Id = 4, LocationId = 6, SiteContactOrder = 0, FirstName = "Other" });
+        await ctx.SaveChangesAsync();
+
+        var rows = await new LocationDataService(ctx).GetSiteContactsByLocationIdsAsync(new[] { 5 }, CancellationToken.None);
+
+        rows.Select(r => r.FirstName).Should().ContainInOrder("A", "B");
+        rows.Should().OnlyContain(r => r.IsDeleted != true);
+    }
+
+    [Fact]
+    public async Task DataService_GetSiteContactsByLocationIdsAsync_EmptyInput_ReturnsWithoutQuerying()
+    {
+        using var ctx = NewContext();
+        ctx.Contacts.Add(new Contacts { Id = 1, LocationId = 5, FirstName = "A" });
+        await ctx.SaveChangesAsync();
+
+        var rows = await new LocationDataService(ctx).GetSiteContactsByLocationIdsAsync(Array.Empty<int>(), CancellationToken.None);
+
+        rows.Should().BeEmpty();
+    }
+
+    private sealed class ExposedSH138Migration : Data.SeaHavenIndustries.Migrations.SH138_SiteContacts
+    {
+        public void UpExposed(MigrationBuilder builder) => Up(builder);
+        public void DownExposed(MigrationBuilder builder) => Down(builder);
+    }
+
+    [Fact]
+    public void Migration_SH138_IsAdditiveOnly()
+    {
+        var migration = new ExposedSH138Migration();
+
+        var up = new MigrationBuilder("SqlServer");
+        migration.UpExposed(up);
+
+        up.Operations.Should().ContainSingle("the migration must only add the SiteContactOrder column");
+        var column = up.Operations.Single().Should().BeOfType<AddColumnOperation>().Subject;
+        column.Table.Should().Be("Contacts");
+        column.Name.Should().Be("SiteContactOrder");
+        column.IsNullable.Should().BeTrue("existing rows and legacy contacts have no order");
+        column.ClrType.Should().Be(typeof(int));
+
+        var down = new MigrationBuilder("SqlServer");
+        migration.DownExposed(down);
+
+        down.Operations.Should().ContainSingle("reverting drops only the added column");
+        down.Operations.Single().Should().BeOfType<DropColumnOperation>();
+    }
+
+    [Fact]
+    public void Migration_SH138_HasNoReorderIndexOrFkChange()
+    {
+        var migration = new ExposedSH138Migration();
+        var up = new MigrationBuilder("SqlServer");
+        migration.UpExposed(up);
+
+        up.Operations.Should().NotContain(o => o is CreateIndexOperation, "no unique reorder index");
+        up.Operations.Should().NotContain(o => o is AddForeignKeyOperation || o is DropForeignKeyOperation, "the existing restrict relationship is unchanged");
+        up.Operations.Should().NotContain(o => o is DropColumnOperation || o is DropTableOperation || o is SqlOperation, "no destructive or backfill operations");
+    }
+
+    [Fact]
+    public async Task Controller_Detail_ProjectsContactsAndCompatibilityFields()
+    {
+        using var ctx = NewContext();
+        var seeded = await SeedLocationWithContactsAsync(ctx);
+        var controller = new LocationController(
+            NewService(ctx),
+            Mock.Of<ILogger<LocationController>>())
+        {
+            ControllerContext = new ControllerContext { HttpContext = new DefaultHttpContext() }
+        };
+
+        var result = await controller.GetLocationById(seeded.Id, CancellationToken.None);
+
+        var ok = result.Should().BeOfType<OkObjectResult>().Subject;
+        using var json = JsonSerializer.SerializeToDocument(ok.Value);
+        var root = json.RootElement;
+
+        root.GetProperty("Phone").GetString().Should().Be("555-0100", "Phone mirrors the first site contact");
+        root.GetProperty("Contact").GetString().Should().Be("Alice Cooper", "Contact is the first contact display name");
+        var contacts = root.GetProperty("Contacts");
+        contacts.GetArrayLength().Should().Be(2);
+        contacts[0].GetProperty("Name").GetString().Should().Be("Alice Cooper");
+        contacts[0].GetProperty("Phone").GetString().Should().Be("555-0100");
+        contacts[1].GetProperty("Name").GetString().Should().Be("Bob Dillon");
+    }
+
+    [Fact]
+    public async Task Controller_List_ProjectsFirstContactAsLegacyContactField()
+    {
+        using var ctx = NewContext();
+        var seeded = await SeedLocationWithContactsAsync(ctx);
+        var controller = new LocationController(
+            NewService(ctx),
+            Mock.Of<ILogger<LocationController>>())
+        {
+            ControllerContext = new ControllerContext { HttpContext = new DefaultHttpContext() }
+        };
+
+        var result = await controller.GetLocationList(cancellationToken: CancellationToken.None);
+
+        var ok = result.Should().BeOfType<OkObjectResult>().Subject;
+        using var json = JsonSerializer.SerializeToDocument(ok.Value);
+        var row = json.RootElement.GetProperty("Data").EnumerateArray().Single();
+
+        row.GetProperty("Contact").GetString().Should().Be("Alice Cooper");
+        row.GetProperty("Phone").GetString().Should().Be("555-0100");
+        row.GetProperty("Contacts").GetArrayLength().Should().Be(2);
+    }
+}
diff --git a/Api.SeaHavenIndustries/Controllers/LocationController.cs b/Api.SeaHavenIndustries/Controllers/LocationController.cs
index 4c11ff7..9e970a6 100644
--- a/Api.SeaHavenIndustries/Controllers/LocationController.cs
+++ b/Api.SeaHavenIndustries/Controllers/LocationController.cs
@@ -54,10 +54,11 @@ namespace Api.SeaHavenIndustries.Controllers
                     State = l.State,
                     ZipCode = l.Zip,
                     Phone = l.PhoneNumber,
-                    Contact = (string?)null,
+                    Contact = l.Contacts?.FirstOrDefault()?.Name,
                     ContactEmail = l.Email,
                     Status = l.Status,
-                    AccountId = l.AccountId
+                    AccountId = l.AccountId,
+                    Contacts = l.Contacts?.Select(c => new { c.Id, c.Name, c.Phone }).ToList()
                 });
 
                 var viewModel = new Pagination_DTO
@@ -98,10 +99,11 @@ namespace Api.SeaHavenIndustries.Controllers
                 location.State,
                 ZipCode = location.Zip,
                 Phone = location.PhoneNumber,
-                Contact = (string?)null,
+                Contact = location.Contacts?.FirstOrDefault()?.Name,
                 ContactEmail = location.Email,
                 location.Status,
-                location.AccountId
+                location.AccountId,
+                Contacts = location.Contacts?.Select(c => new { c.Id, c.Name, c.Phone }).ToList()
             };
 
             return Ok(result);
@@ -197,7 +199,8 @@ namespace Api.SeaHavenIndustries.Controllers
                 Phone = model.Phone,
                 ContactEmail = model.ContactEmail,
                 Status = model.Status,
-                AccountId = model.GetAccountId()
+                AccountId = model.GetAccountId(),
+                Contacts = MapSiteContacts(model.Contacts)
             };
         }
 
@@ -214,8 +217,19 @@ namespace Api.SeaHavenIndustries.Controllers
                 Phone = model.Phone,
                 ContactEmail = model.ContactEmail,
                 Status = model.Status,
-                AccountId = model.GetAccountId()
+                AccountId = model.GetAccountId(),
+                Contacts = MapSiteContacts(model.Contacts)
             };
         }
+
+        private static List<SiteContactRequestDTO>? MapSiteContacts(List<SiteContactInput_DTO>? contacts)
+        {
+            if (contacts == null)
+                return null;
+
+            return contacts
+                .Select(c => new SiteContactRequestDTO { Id = c.Id, Name = c.Name, Phone = c.Phone })
+                .ToList();
+        }
     }
 }
diff --git a/Api.SeaHavenIndustries/DTOs/EditLocation_DTO.cs b/Api.SeaHavenIndustries/DTOs/EditLocation_DTO.cs
index d7d3d63..4a3cab8 100644
--- a/Api.SeaHavenIndustries/DTOs/EditLocation_DTO.cs
+++ b/Api.SeaHavenIndustries/DTOs/EditLocation_DTO.cs
@@ -16,6 +16,7 @@ namespace Api.SeaHavenIndustries.DTOs
         public string? ContactEmail { get; set; }
         public string? Status { get; set; }
         public string? AccountId { get; set; }
+        public List<SiteContactInput_DTO>? Contacts { get; set; }
 
         public int? GetAccountId() => LocationAccountIdMapping.ParseOptional(AccountId);
 
diff --git a/Api.SeaHavenIndustries/DTOs/Location_DTO.cs b/Api.SeaHavenIndustries/DTOs/Location_DTO.cs
index 68aa518..343df36 100644
--- a/Api.SeaHavenIndustries/DTOs/Location_DTO.cs
+++ b/Api.SeaHavenIndustries/DTOs/Location_DTO.cs
@@ -3,6 +3,14 @@ using SeaHaven.Services.DTOs;
 
 namespace Api.SeaHavenIndustries.DTOs
 {
+    // SH-138: additive site-contact write row (id optional on writes)
+    public class SiteContactInput_DTO
+    {
+        public int? Id { get; set; }
+        public string? Name { get; set; }
+        public string? Phone { get; set; }
+    }
+
     public class Location_DTO
     {
         public string? Title { get; set; }
@@ -16,6 +24,7 @@ namespace Api.SeaHavenIndustries.DTOs
         public string? ContactEmail { get; set; }
         public string? Status { get; set; }
         public string? AccountId { get; set; }
+        public List<SiteContactInput_DTO>? Contacts { get; set; }
 
         public int? GetAccountId() => LocationAccountIdMapping.ParseOptional(AccountId);
 
diff --git a/Data.SeaHavenIndustries/Migrations/20260915002525_SH138_SiteContacts.Designer.cs b/Data.SeaHavenIndustries/Migrations/20260915002525_SH138_SiteContacts.Designer.cs
new file mode 100644
index 0000000..545ac7f
--- /dev/null
+++ b/Data.SeaHavenIndustries/Migrations/20260915002525_SH138_SiteContacts.Designer.cs
@@ -0,0 +1,3933 @@
+// <auto-generated />
+using System;
+using Data.SeaHavenIndustries;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Metadata;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+
+#nullable disable
+
+namespace Data.SeaHavenIndustries.Migrations
+{
+    [DbContext(typeof(ApplicationDbContext))]
+    [Migration("20260915002525_SH138_SiteContacts")]
+    partial class SH138_SiteContacts
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasAnnotation("ProductVersion", "8.0.8")
+                .HasAnnotation("Relational:MaxIdentifierLength", 128);
+
+            SqlServerModelBuilderExtensions.UseIdentityColumns(modelBuilder);
+
+            modelBuilder.HasSequence("WorkOrderInternalNumberSequence");
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Accounts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("CurrencyCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Importance")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("IndustryId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("OwnerEmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Phone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PrivacySetting")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ServiceInstructions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Tags")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("TerritoryId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("TimeZone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Type")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Website")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Accounts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Addresses", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AddressType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Country")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("County")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("ContactId");
+
+                    b.ToTable("Addresses");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int>("AccessFailedCount")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Color")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ConcurrencyStamp")
+                        .IsConcurrencyToken()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Contact")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DeletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<bool>("EmailConfirmed")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("FirstName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Initials")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("LastName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Locations")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("LockoutEnabled")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTimeOffset?>("LockoutEnd")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("NormalizedEmail")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("NormalizedUserName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("PasswordHash")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("PhoneNumberConfirmed")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("SecurityStamp")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("TwoFactorEnabled")
+                        .HasColumnType("bit");
+
+                    b.Property<int?>("Type")
+                        .HasColumnType("int");
+
+                    b.Property<string>("UniqueName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserImage")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("NormalizedEmail")
+                        .HasDatabaseName("EmailIndex");
+
+                    b.HasIndex("NormalizedUserName")
+                        .IsUnique()
+                        .HasDatabaseName("UserNameIndex")
+                        .HasFilter("[NormalizedUserName] IS NOT NULL");
+
+                    b.ToTable("AspNetUsers", (string)null);
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("AssetCode")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Assets");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Category", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Categories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Comments", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CommentType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Commenter")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Commenttext")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Documents")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalCommentId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("ExternalSourceEmailS3Key")
+                        .HasMaxLength(2048)
+                        .HasColumnType("nvarchar(2048)");
+
+                    b.Property<DateTimeOffset?>("ExternalUpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalVersionHash")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RecordType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int?>("WorkerOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("UserId");
+
+                    b.HasIndex("WorkerOrderId");
+
+                    b.ToTable("Comments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.CompletionDocTemplate", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ServiceKey")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("TemplateUrl")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ServiceKey", "IsActive");
+
+                    b.ToTable("CompletionDocTemplates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ContactDetails", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DateOfBirth")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Gender")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PrivacySetting")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Tags")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Territory")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.ToTable("ContactDetails");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ContactType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FirstName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LastName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("MiddleName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Owner")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("SiteContactOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Title")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Contacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Department", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Departments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AcceptToken")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("AcknowledgedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CommercialStatusUpdatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CompletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DispatchNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DispatchedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("EmailSent")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("EstimatedArrivalAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("EtaManualOverride")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("InvoiceNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("InvoiceStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<decimal?>("NTEAmount")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<string>("PONumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PaymentStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ReplyToAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<DateTime?>("ScheduledDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TechPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("VendorNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<DateTime?>("VerifiedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("VerifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("Dispatches");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchChecklistItem", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CompletedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("CompletedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool>("IsCompleted")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ItemText")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("DispatchChecklistItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchSignoff", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Signature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignatureMethod")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("SignedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("SignoffType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.ToTable("DispatchSignoffs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchUpliftRequest", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<decimal?>("CurrentNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<DateTime?>("DecidedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DecidedByUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DecisionNote")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("EscalatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("EvidenceDocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("ExpiresAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("InitialNotificationSentAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("NotificationError")
+                        .HasMaxLength(500)
+                        .HasColumnType("nvarchar(500)");
+
+                    b.Property<string>("NotificationStatus")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<string>("RequestKey")
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<string>("RequestedByVendorName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<decimal>("RequestedNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<int>("RequiredTier")
+                        .HasColumnType("int");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<string>("Status")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<string>("VendorReason")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId")
+                        .IsUnique()
+                        .HasFilter("[Status] IN ('Pending', 'ChangesRequested')");
+
+                    b.HasIndex("EvidenceDocumentId");
+
+                    b.HasIndex("DispatchId", "RequestKey")
+                        .IsUnique()
+                        .HasFilter("[RequestKey] IS NOT NULL");
+
+                    b.ToTable("DispatchUpliftRequests");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchWorkOrder", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("DispatchWorkOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DropdownOption", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Category")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ParentValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Value")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("DropdownOptions");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("CanChangeProviderNumber")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ConfirmUserName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DateOfBirth")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DepartmentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("EmployeeNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FirstName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Gender")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("HireDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<int?>("JobTitleId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("LastLogin")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LastName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("MiddleName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("PermissionGroupId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("RegionId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("SMSAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TimeZone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Website")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DepartmentId");
+
+                    b.HasIndex("JobTitleId");
+
+                    b.HasIndex("RegionId");
+
+                    b.ToTable("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeAddress", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CountryCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CountyId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("StateCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Street")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("StreetLineTwo")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId")
+                        .IsUnique();
+
+                    b.ToTable("EmployeeAddresses");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeEmail", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<int?>("EmailTypeId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsPrimary")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.ToTable("EmployeeEmails");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeePhone", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Extension")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsPrimary")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Number")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("PhoneTypeId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.ToTable("EmployeePhones");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Events", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("AllDay")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("EndDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("EndTime")
+                        .HasMaxLength(10)
+                        .HasColumnType("nvarchar(10)");
+
+                    b.Property<string>("EventColor")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Location")
+                        .HasMaxLength(150)
+                        .HasColumnType("nvarchar(150)");
+
+                    b.Property<int?>("RecordID")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RecordName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("RecordTargetType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("ReminderMinutes")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime>("StartDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("StartTime")
+                        .HasMaxLength(10)
+                        .HasColumnType("nvarchar(10)");
+
+                    b.Property<string>("Title")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Events");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.FollowUps", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Reason")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("ScheduleDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<TimeSpan>("ScheduleStartTime")
+                        .HasColumnType("time");
+
+                    b.Property<string>("Status")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.HasIndex("LocationId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("FollowUps");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ForgetPasswordCode", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Code")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Email")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("ForgetPasswordCodes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.JobTitle", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("JobTitles");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalLocationId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Latitude")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Longitude")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Title")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.ToTable("Locations");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.PMSchedules", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AssetId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Frequency")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("StartDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AssetId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("PMSchedules");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BillingAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("Date")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ProjectName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("QuotId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ShippingAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("Quotes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.QuotesLineItems", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Descriptions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<decimal?>("Lineitem")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<int?>("LineitemNumber")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("QuoteId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("QuoteId");
+
+                    b.ToTable("QuotesLines");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Region", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Regions");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.SitePreferredVendor", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Trade")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("UpdatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("LocationId", "VendorId")
+                        .IsUnique()
+                        .HasFilter("[Trade] IS NULL");
+
+                    b.HasIndex("LocationId", "VendorId", "Trade")
+                        .IsUnique()
+                        .HasFilter("[Trade] IS NOT NULL");
+
+                    b.ToTable("SitePreferredVendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplate", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("TaskListTemplates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplateItem", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ItemText")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<int>("TaskListTemplateId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("TaskListTemplateId");
+
+                    b.ToTable("TaskListTemplateItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Template", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AfterPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AfterPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AssignTo")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DueDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Priority")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffSignature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderTitle")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AssignTo");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Templates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Trade", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("Trades");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AvailabilityStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("AvailabilityUpdatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CompanyId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CompanyName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CompanyPhone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ContactName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("GoogleMapsUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Phone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PreferredContact")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TradeSpecialties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CompanyId");
+
+                    b.ToTable("Vendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAccessToken", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime>("ExpiresAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime>("IssuedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("LastUsedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("RevokedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Token")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Token")
+                        .IsUnique();
+
+                    b.HasIndex("VendorId");
+
+                    b.ToTable("VendorAccessTokens");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAuditLog", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Actor")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("FieldName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NewValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("OldValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.ToTable("VendorAuditLogs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CompanyPhone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("GoogleMapsUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("VendorCompanies");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompletionDocument", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ContentType")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("OriginalFileName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Purpose")
+                        .IsRequired()
+                        .HasMaxLength(30)
+                        .HasColumnType("nvarchar(30)");
+
+                    b.Property<string>("RejectionReason")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ReplacesDocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ReviewStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ReviewedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ScanStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ScannedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<long>("SizeBytes")
+                        .HasColumnType("bigint");
+
+                    b.Property<string>("StoredFileName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("Version")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("VendorCompletionDocuments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("AdditionalContacts")
+                        .HasMaxLength(4000)
+                        .HasColumnType("nvarchar(4000)");
+
+                    b.Property<string>("AfterPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AfterPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateOnly?>("AssignDate")
+                        .HasColumnType("date");
+
+                    b.Property<string>("AssignTo")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("AvetaRequired")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("AvettaTask")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Building")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("CarriedOver")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CompletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Customer")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DateReported")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("DocStatus")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("DueDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ExternalAssignedTo")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<DateTimeOffset?>("ExternalLastOccurredAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalRecordType")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset?>("ExternalUpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalVersionHash")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("ExternalWorkOrderId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ExtraServices")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<string>("FlagColor")
+                        .HasMaxLength(7)
+                        .HasColumnType("nvarchar(7)");
+
+                    b.Property<string>("FrozenCompany")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FrozenPoc")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FrozenSite")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("InternalWONumber")
+                        .HasMaxLength(11)
+                        .HasColumnType("nvarchar(11)");
+
+                    b.Property<bool>("IsAddOn")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LegacyStatus")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("LifecycleStatus")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("OperationalFlags")
+                        .HasColumnType("int");
+
+                    b.Property<DateOnly?>("OriginalDate")
+                        .HasColumnType("date");
+
+                    b.Property<DateOnly?>("OriginalWeek")
+                        .HasColumnType("date");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PocName")
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("PocNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<string>("PocPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int?>("PrimaryDispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Priority")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Problem")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("RescheduleCount")
+                        .HasColumnType("int");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<bool?>("ScheduleWeekOnly")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("ScheduledDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("ScheduledEnd")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("ScheduledStart")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Service")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("ServiceNotes")
+                        .HasMaxLength(4000)
+                        .HasColumnType("nvarchar(4000)");
+
+                    b.Property<string>("Severity")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffSignature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteCode")
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<string>("Source")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SourceEmailS3Key")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SubTrade")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateOnly?>("TargetWeek")
+                        .HasColumnType("date");
+
+                    b.Property<string>("TechPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<string>("Trade")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<decimal?>("VendorNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<string>("VendorNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<int?>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("WorkerOrderNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderTitle")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("istemplate")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("ExternalWorkOrderId")
+                        .IsUnique()
+                        .HasFilter("[ExternalWorkOrderId] IS NOT NULL AND [ExternalWorkOrderId] <> ''");
+
+                    b.HasIndex("InternalWONumber")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.HasIndex("LocationId");
+
+                    b.HasIndex("PrimaryDispatchId");
+
+                    b.HasIndex("ScheduledDate");
+
+                    b.HasIndex("SiteCode")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.HasIndex("WorkOrderType");
+
+                    b.HasIndex("AssignTo", "ScheduledDate");
+
+                    b.HasIndex("LifecycleStatus", "ScheduledDate")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.ToTable("workOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAttachments", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Category")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("workOrderAttachments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAuditLog", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Action")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ActorType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CorrelationId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("EventType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FieldName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NewValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("OldValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UserId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("WorkOrderAuditLogs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderCategories", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("workOrderCategories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderContacts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("WorkOrderContacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderExternalReceipt", b =>
+                {
+                    b.Property<long>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("bigint");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<long>("Id"));
+
+                    b.Property<string>("ExternalId")
+                        .IsRequired()
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Kind")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<DateTimeOffset>("ProcessedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("Source")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset>("UpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("VersionHash")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Source", "Kind", "ExternalId")
+                        .IsUnique()
+                        .HasDatabaseName("IX_WorkOrderExternalReceipts_Source_Kind_ExternalId");
+
+                    b.ToTable("WorkOrderExternalReceipts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderFieldLock", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("FieldName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<DateTime>("LockedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("LockedByUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkOrderId", "FieldName")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderFieldLocks");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderReconciliationJob", b =>
+                {
+                    b.Property<int>("Id")
+                        .HasColumnType("int");
+
+                    b.Property<int>("CommentsProcessed")
+                        .HasColumnType("int");
+
+                    b.Property<DateTimeOffset?>("CompletedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ErrorCode")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<Guid?>("FenceToken")
+                        .HasColumnType("uniqueidentifier");
+
+                    b.Property<DateTimeOffset?>("LeaseExpiresAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("Reason")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset?>("RequestedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<Guid>("RunId")
+                        .HasColumnType("uniqueidentifier");
+
+                    b.Property<DateTimeOffset?>("StartedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("State")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<int>("WorkOrdersProcessed")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("State");
+
+                    b.ToTable("WorkOrderReconciliationJobs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWebhookDelivery", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BodySha256")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("DeliveryId")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("EventType")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<DateTimeOffset>("OccurredAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<DateTimeOffset>("ProcessedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DeliveryId")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderWebhookDeliveries");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWeekRolledLedger", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CorrelationId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("ProcessedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateOnly>("SourceWeekStart")
+                        .HasColumnType("date");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkOrderId", "SourceWeekStart")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderWeekRolledLedgers");
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRole", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ConcurrencyStamp")
+                        .IsConcurrencyToken()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("NormalizedName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique()
+                        .HasDatabaseName("RoleNameIndex")
+                        .HasFilter("[NormalizedName] IS NOT NULL");
+
+                    b.ToTable("AspNetRoles", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRoleClaim<string>", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ClaimType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ClaimValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("RoleId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AspNetRoleClaims", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserClaim<string>", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ClaimType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ClaimValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UserId");
+
+                    b.ToTable("AspNetUserClaims", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserLogin<string>", b =>
+                {
+                    b.Property<string>("LoginProvider")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ProviderKey")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ProviderDisplayName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("LoginProvider", "ProviderKey");
+
+                    b.HasIndex("UserId");
+
+                    b.ToTable("AspNetUserLogins", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserRole<string>", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("RoleId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("UserId", "RoleId");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AspNetUserRoles", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserToken<string>", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("LoginProvider")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Value")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("UserId", "LoginProvider", "Name");
+
+                    b.ToTable("AspNetUserTokens", (string)null);
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Addresses", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany("Addresses")
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contact")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Contact");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Comments", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("Comments")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "ApplicationUser")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Comments")
+                        .HasForeignKey("WorkerOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("ApplicationUser");
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ContactDetails", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contact")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Contact");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany("Contacts")
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany("Contacts")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("Dispatches")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Dispatches")
+                        .HasForeignKey("WorkOrderId");
+
+                    b.Navigation("Vendor");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchChecklistItem", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("ChecklistItems")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchSignoff", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("Signoffs")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchUpliftRequest", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany()
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.VendorCompletionDocument", "EvidenceDocument")
+                        .WithMany()
+                        .HasForeignKey("EvidenceDocumentId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("EvidenceDocument");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchWorkOrder", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("DispatchWorkOrders")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Department", "Department")
+                        .WithMany("Employees")
+                        .HasForeignKey("DepartmentId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.JobTitle", "JobTitle")
+                        .WithMany("Employees")
+                        .HasForeignKey("JobTitleId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Region", "Region")
+                        .WithMany("Employees")
+                        .HasForeignKey("RegionId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Department");
+
+                    b.Navigation("JobTitle");
+
+                    b.Navigation("Region");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeAddress", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithOne("Address")
+                        .HasForeignKey("Data.SeaHavenIndustries.EmployeeAddress", "EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeEmail", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany("Emails")
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeePhone", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany("Phones")
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.FollowUps", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany()
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Employee");
+
+                    b.Navigation("Location");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.PMSchedules", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Assets", "Asset")
+                        .WithMany("PMSchedules")
+                        .HasForeignKey("AssetId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Asset");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contacts")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Quotes")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Contacts");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.QuotesLineItems", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Quotes", "Quotes")
+                        .WithMany("LineItems")
+                        .HasForeignKey("QuoteId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Quotes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.SitePreferredVendor", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("SitePreferences")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Location");
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplateItem", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.TaskListTemplate", "Template")
+                        .WithMany("Items")
+                        .HasForeignKey("TaskListTemplateId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Template");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Template", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "AssignToUser")
+                        .WithMany("Templates")
+                        .HasForeignKey("AssignTo")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Category", "Category")
+                        .WithMany("Templates")
+                        .HasForeignKey("CategoryId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "POC")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Locations")
+                        .WithMany("Templates")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("AssignToUser");
+
+                    b.Navigation("Category");
+
+                    b.Navigation("Locations");
+
+                    b.Navigation("POC");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.VendorCompany", "Company")
+                        .WithMany("Vendors")
+                        .HasForeignKey("CompanyId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Company");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAccessToken", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany()
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAuditLog", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("AuditLogs")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompletionDocument", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("CompletionDocuments")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany()
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("Vendor");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "AssignToUser")
+                        .WithMany("WorkOrders")
+                        .HasForeignKey("AssignTo")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Locations")
+                        .WithMany("workOrders")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "PrimaryDispatch")
+                        .WithMany()
+                        .HasForeignKey("PrimaryDispatchId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("AssignToUser");
+
+                    b.Navigation("Locations");
+
+                    b.Navigation("PrimaryDispatch");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAttachments", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("workOrderAttachments")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAuditLog", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("User");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderCategories", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Category", "Category")
+                        .WithMany("WorkOrderCategories")
+                        .HasForeignKey("CategoryId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("WorkOrderCategories")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Category");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderContacts", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "POC")
+                        .WithMany("WorkOrderContacts")
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("WorkOrderContacts")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("POC");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderFieldLock", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("FieldLocks")
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWeekRolledLedger", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRoleClaim<string>", b =>
+                {
+                    b.HasOne("Microsoft.AspNetCore.Identity.IdentityRole", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserClaim<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserLogin<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserRole<string>", b =>
+                {
+                    b.HasOne("Microsoft.AspNetCore.Identity.IdentityRole", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserToken<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Accounts", b =>
+                {
+                    b.Navigation("Addresses");
+
+                    b.Navigation("Contacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.Navigation("Templates");
+
+                    b.Navigation("WorkOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.Navigation("PMSchedules");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Category", b =>
+                {
+                    b.Navigation("Templates");
+
+                    b.Navigation("WorkOrderCategories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.Navigation("WorkOrderContacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Department", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.Navigation("ChecklistItems");
+
+                    b.Navigation("Comments");
+
+                    b.Navigation("CompletionDocuments");
+
+                    b.Navigation("DispatchWorkOrders");
+
+                    b.Navigation("Signoffs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.Navigation("Address");
+
+                    b.Navigation("Emails");
+
+                    b.Navigation("Phones");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.JobTitle", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.Navigation("Contacts");
+
+                    b.Navigation("Templates");
+
+                    b.Navigation("workOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.Navigation("LineItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Region", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplate", b =>
+                {
+                    b.Navigation("Items");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.Navigation("AuditLogs");
+
+                    b.Navigation("Dispatches");
+
+                    b.Navigation("SitePreferences");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.Navigation("Vendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.Navigation("Comments");
+
+                    b.Navigation("Dispatches");
+
+                    b.Navigation("FieldLocks");
+
+                    b.Navigation("Quotes");
+
+                    b.Navigation("WorkOrderCategories");
+
+                    b.Navigation("WorkOrderContacts");
+
+                    b.Navigation("workOrderAttachments");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/Data.SeaHavenIndustries/Migrations/20260915002525_SH138_SiteContacts.cs b/Data.SeaHavenIndustries/Migrations/20260915002525_SH138_SiteContacts.cs
new file mode 100644
index 0000000..17191ed
--- /dev/null
+++ b/Data.SeaHavenIndustries/Migrations/20260915002525_SH138_SiteContacts.cs
@@ -0,0 +1,28 @@
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Data.SeaHavenIndustries.Migrations
+{
+    /// <inheritdoc />
+    public partial class SH138_SiteContacts : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.AddColumn<int>(
+                name: "SiteContactOrder",
+                table: "Contacts",
+                type: "int",
+                nullable: true);
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropColumn(
+                name: "SiteContactOrder",
+                table: "Contacts");
+        }
+    }
+}
diff --git a/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs b/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
index bc39339..7bf6f39 100644
--- a/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
+++ b/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
@@ -651,6 +651,9 @@ namespace Data.SeaHavenIndustries.Migrations
                     b.Property<string>("PhoneNumber")
                         .HasColumnType("nvarchar(max)");
 
+                    b.Property<int?>("SiteContactOrder")
+                        .HasColumnType("int");
+
                     b.Property<string>("State")
                         .HasColumnType("nvarchar(max)");
 
@@ -2400,6 +2403,10 @@ namespace Data.SeaHavenIndustries.Migrations
                     b.Property<int?>("AccountId")
                         .HasColumnType("int");
 
+                    b.Property<string>("AdditionalContacts")
+                        .HasMaxLength(4000)
+                        .HasColumnType("nvarchar(4000)");
+
                     b.Property<string>("AfterPhotoAttachment")
                         .HasColumnType("nvarchar(max)");
 
@@ -2548,10 +2555,6 @@ namespace Data.SeaHavenIndustries.Migrations
                         .HasMaxLength(2000)
                         .HasColumnType("nvarchar(2000)");
 
-                    b.Property<string>("AdditionalContacts")
-                        .HasMaxLength(4000)
-                        .HasColumnType("nvarchar(4000)");
-
                     b.Property<string>("PocPhone")
                         .HasMaxLength(50)
                         .HasColumnType("nvarchar(50)");
@@ -3224,16 +3227,6 @@ namespace Data.SeaHavenIndustries.Migrations
                     b.Navigation("Account");
                 });
 
-            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
-                {
-                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
-                        .WithMany()
-                        .HasForeignKey("AccountId")
-                        .OnDelete(DeleteBehavior.Restrict);
-
-                    b.Navigation("Account");
-                });
-
             modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
                 {
                     b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
@@ -3294,7 +3287,7 @@ namespace Data.SeaHavenIndustries.Migrations
                         .OnDelete(DeleteBehavior.Restrict);
 
                     b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
-                        .WithMany()
+                        .WithMany("Contacts")
                         .HasForeignKey("LocationId")
                         .OnDelete(DeleteBehavior.Restrict);
 
@@ -3474,6 +3467,16 @@ namespace Data.SeaHavenIndustries.Migrations
                     b.Navigation("WorkOrder");
                 });
 
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+                });
+
             modelBuilder.Entity("Data.SeaHavenIndustries.PMSchedules", b =>
                 {
                     b.HasOne("Data.SeaHavenIndustries.Assets", "Asset")
@@ -3869,7 +3872,7 @@ namespace Data.SeaHavenIndustries.Migrations
 
             modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
                 {
-                    b.Navigation("Account");
+                    b.Navigation("Contacts");
 
                     b.Navigation("Templates");
 
diff --git a/Data.SeaHavenIndustries/Models/Contacts.cs b/Data.SeaHavenIndustries/Models/Contacts.cs
index 27e50f7..062cfcd 100644
--- a/Data.SeaHavenIndustries/Models/Contacts.cs
+++ b/Data.SeaHavenIndustries/Models/Contacts.cs
@@ -30,6 +30,9 @@ namespace Data.SeaHavenIndustries
         public int? LocationId { get; set; }
         public int? AccountId { get; set; }
 
+        // SH-138: dense zero-based display order for site-managed contacts
+        public int? SiteContactOrder { get; set; }
+
         // Navigation Properties
         [ForeignKey(nameof(LocationId))]
         public Locations? Location { get; set; }
diff --git a/Data.SeaHavenIndustries/Models/Locations.cs b/Data.SeaHavenIndustries/Models/Locations.cs
index f2d9e2e..ce8a6ba 100644
--- a/Data.SeaHavenIndustries/Models/Locations.cs
+++ b/Data.SeaHavenIndustries/Models/Locations.cs
@@ -30,5 +30,8 @@ namespace Data.SeaHavenIndustries
         // Navigation Properties
         public ICollection<Template>? Templates { get; set; }
         public ICollection<WorkOrder>? workOrders { get; set; }
+
+        // SH-138: site contacts (soft-deleted rows stay for historical WorkOrderContacts)
+        public ICollection<Contacts>? Contacts { get; set; }
     }
 }
diff --git a/SeaHaven.DataServices/Implementation/LocationDataService.cs b/SeaHaven.DataServices/Implementation/LocationDataService.cs
index 5ea6983..57221c8 100644
--- a/SeaHaven.DataServices/Implementation/LocationDataService.cs
+++ b/SeaHaven.DataServices/Implementation/LocationDataService.cs
@@ -166,12 +166,30 @@ namespace SeaHaven.DataServices.Implementation
         {
             return await _context.Locations
                 .AsNoTracking()
+                .Include(l => l.Contacts.Where(c => c.IsDeleted != true))
                 .FirstOrDefaultAsync(l => l.Id == id, cancellationToken);
         }
 
         public async Task<Locations?> GetByIdForUpdateAsync(int id, CancellationToken cancellationToken)
         {
-            return await _context.Locations.FindAsync(new object[] { id }, cancellationToken);
+            return await _context.Locations
+                .Include(l => l.Contacts)
+                .FirstOrDefaultAsync(l => l.Id == id, cancellationToken);
+        }
+
+        public async Task<IReadOnlyList<Contacts>> GetSiteContactsByLocationIdsAsync(
+            IReadOnlyCollection<int> locationIds,
+            CancellationToken cancellationToken)
+        {
+            if (locationIds.Count == 0)
+                return Array.Empty<Contacts>();
+
+            return await _context.Contacts
+                .AsNoTracking()
+                .Where(c => c.LocationId != null && locationIds.Contains(c.LocationId.Value) && c.IsDeleted != true)
+                .OrderBy(c => c.SiteContactOrder)
+                .ThenBy(c => c.Id)
+                .ToListAsync(cancellationToken);
         }
 
         public async Task<Locations> AddAsync(Locations location, CancellationToken cancellationToken)
diff --git a/SeaHaven.DataServices/Interfaces/ILocationDataService.cs b/SeaHaven.DataServices/Interfaces/ILocationDataService.cs
index a2cbf6b..582fb4b 100644
--- a/SeaHaven.DataServices/Interfaces/ILocationDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/ILocationDataService.cs
@@ -37,6 +37,15 @@ namespace SeaHaven.DataServices.Interfaces
         Task<(List<Locations> Items, int TotalCount)> GetListPagedAsync(int page, int pageSize, string? search, IReadOnlyCollection<string>? states, CancellationToken cancellationToken);
         Task<Locations?> GetDetailByIdAsync(int id, CancellationToken cancellationToken);
         Task<Locations?> GetByIdForUpdateAsync(int id, CancellationToken cancellationToken);
+
+        /// <summary>
+        /// SH-138: single bounded read of active site contacts for a page of locations,
+        /// ordered by SiteContactOrder then Id. Deleted contacts are excluded.
+        /// </summary>
+        Task<IReadOnlyList<Contacts>> GetSiteContactsByLocationIdsAsync(
+            IReadOnlyCollection<int> locationIds,
+            CancellationToken cancellationToken);
+
         Task<Locations> AddAsync(Locations location, CancellationToken cancellationToken);
         Task UpdateAsync(Locations location, CancellationToken cancellationToken);
         Task<bool> DeleteByIdAsync(int id, CancellationToken cancellationToken);
diff --git a/SeaHaven.Services/DTOs/LocationDTOs.cs b/SeaHaven.Services/DTOs/LocationDTOs.cs
index fe694f8..1e437ba 100644
--- a/SeaHaven.Services/DTOs/LocationDTOs.cs
+++ b/SeaHaven.Services/DTOs/LocationDTOs.cs
@@ -16,6 +16,25 @@ namespace SeaHaven.Services.DTOs
         public int? AccountId { get; set; }
         public DateTime? CreatedDate { get; set; }
         public string? CreatedBy { get; set; }
+
+        /// <summary>SH-138: ordered site contacts; null when the site has none.</summary>
+        public IReadOnlyList<SiteContactResponseDTO>? Contacts { get; set; }
+    }
+
+    /// <summary>SH-138: additive site-contact write row. Id is optional on writes.</summary>
+    public class SiteContactRequestDTO
+    {
+        public int? Id { get; set; }
+        public string? Name { get; set; }
+        public string? Phone { get; set; }
+    }
+
+    /// <summary>SH-138: site-contact read row, ordered by SiteContactOrder then Id.</summary>
+    public class SiteContactResponseDTO
+    {
+        public int Id { get; set; }
+        public string? Name { get; set; }
+        public string? Phone { get; set; }
     }
 
     public class CreateLocationDTO
@@ -50,6 +69,9 @@ namespace SeaHaven.Services.DTOs
         public string? ContactEmail { get; set; }
         public string? Status { get; set; }
         public int? AccountId { get; set; }
+
+        /// <summary>SH-138: null keeps legacy behavior; empty array is a validation error.</summary>
+        public List<SiteContactRequestDTO>? Contacts { get; set; }
     }
 
     public class LocationUpdateRequestDTO
@@ -64,6 +86,9 @@ namespace SeaHaven.Services.DTOs
         public string? ContactEmail { get; set; }
         public string? Status { get; set; }
         public int? AccountId { get; set; }
+
+        /// <summary>SH-138: null keeps legacy behavior and must not mutate contact rows.</summary>
+        public List<SiteContactRequestDTO>? Contacts { get; set; }
     }
 
     public class SiteOptionDTO
diff --git a/SeaHaven.Services/Implementation/LocationService.cs b/SeaHaven.Services/Implementation/LocationService.cs
index 9c938aa..e140ece 100644
--- a/SeaHaven.Services/Implementation/LocationService.cs
+++ b/SeaHaven.Services/Implementation/LocationService.cs
@@ -49,13 +49,13 @@ namespace SeaHaven.Services.Implementation
         public async Task<IEnumerable<LocationDTO>> GetAllLocationsAsync()
         {
             var locations = await _locationDataService.GetAllAsync();
-            return locations.Select(MapToDTO);
+            return locations.Select(l => MapToDTO(l));
         }
 
         public async Task<IEnumerable<LocationDTO>> GetLocationsByAccountIdAsync(int accountId)
         {
             var locations = await _locationDataService.GetByAccountIdAsync(accountId);
-            return locations.Select(MapToDTO);
+            return locations.Select(l => MapToDTO(l));
         }
 
         public async Task<PagedResult<LocationDTO>> GetLocationsPagedAsync(int page, int pageSize, string? search = null)
@@ -63,7 +63,7 @@ namespace SeaHaven.Services.Implementation
             var (items, totalCount) = await _locationDataService.GetPagedAsync(page, pageSize, search);
             return new PagedResult<LocationDTO>
             {
-                Items = items.Select(MapToDTO).ToList(),
+                Items = items.Select(l => MapToDTO(l)).ToList(),
                 TotalCount = totalCount,
                 Page = page,
                 PageSize = pageSize
@@ -171,9 +171,13 @@ namespace SeaHaven.Services.Implementation
             var stateFilter = NormalizeStateFilter(states);
             var storageStateFilter = stateFilter == null ? null : UsStateCodes.ExpandStorageValues(stateFilter);
             var (items, totalCount) = await _locationDataService.GetListPagedAsync(page, pageSize, search, storageStateFilter, cancellationToken);
+
+            // SH-138: one bounded contact read for the whole page, never per row.
+            var contactsByLocation = await GetSiteContactsByLocationIdsAsync(items, cancellationToken);
+
             return new PagedResult<LocationDTO>
             {
-                Items = items.Select(MapToDTO).ToList(),
+                Items = items.Select(l => MapToDTO(l, contactsByLocation)).ToList(),
                 TotalCount = totalCount,
                 Page = page,
                 PageSize = pageSize
@@ -233,6 +237,11 @@ namespace SeaHaven.Services.Implementation
                 AccountId = request.AccountId
             };
 
+            if (request.Contacts is List<SiteContactRequestDTO> contacts)
+            {
+                ApplySiteContactsForCreate(location, contacts, GetActorId(user));
+            }
+
             await _locationDataService.AddAsync(location, cancellationToken);
         }
 
@@ -264,6 +273,12 @@ namespace SeaHaven.Services.Implementation
                 location.AccountId = accountId;
             }
 
+            // SH-138: null contacts keeps legacy behavior and must not mutate contact rows.
+            if (request.Contacts is List<SiteContactRequestDTO> contacts)
+            {
+                ApplySiteContactsForUpdate(location, contacts, GetActorId(user));
+            }
+
             await _locationDataService.UpdateAsync(location, cancellationToken);
         }
 
@@ -326,7 +341,153 @@ namespace SeaHaven.Services.Implementation
         }
 
         // Private helper methods
-        private LocationDTO MapToDTO(Locations location)
+
+        private static string? GetActorId(ClaimsPrincipal user) =>
+            user.FindFirst(ClaimTypes.NameIdentifier)?.Value;
+
+        private static void ThrowOnInvalidContacts(List<SiteContactRequestDTO> contacts)
+        {
+            var failures = SiteContactsValidation.Validate(contacts);
+            if (failures.Count > 0)
+                throw new ValidationException(failures);
+        }
+
+        private static void ApplySiteContactsForCreate(
+            Locations location,
+            List<SiteContactRequestDTO> contacts,
+            string? actorId)
+        {
+            ThrowOnInvalidContacts(contacts);
+
+            var now = DateTime.Now;
+            var siteContacts = contacts
+                .Select((row, index) => new Contacts
+                {
+                    FirstName = row.Name!.Trim(),
+                    MiddleName = null,
+                    LastName = null,
+                    PhoneNumber = row.Phone!.Trim(),
+                    SiteContactOrder = index,
+                    AccountId = location.AccountId,
+                    CreatedDate = now,
+                    createdby = actorId
+                })
+                .ToList();
+            location.Contacts = siteContacts;
+
+            // The first site contact mirrors Location.PhoneNumber for legacy consumers.
+            location.PhoneNumber = siteContacts[0].PhoneNumber;
+        }
+
+        private static void ApplySiteContactsForUpdate(
+            Locations location,
+            List<SiteContactRequestDTO> contacts,
+            string? actorId)
+        {
+            ThrowOnInvalidContacts(contacts);
+
+            var existingById = (location.Contacts ?? Enumerable.Empty<Contacts>())
+                .ToDictionary(c => c.Id);
+
+            var keptIds = new HashSet<int>();
+            for (var i = 0; i < contacts.Count; i++)
+            {
+                var row = contacts[i];
+                var name = row.Name!.Trim();
+                var phone = row.Phone!.Trim();
+
+                if (row.Id is int id)
+                {
+                    if (!existingById.TryGetValue(id, out var existing)
+                        || existing.LocationId != location.Id
+                        || existing.IsDeleted == true)
+                    {
+                        throw new ValidationException(new[]
+                        {
+                            new ValidationFailure(
+                                $"{nameof(LocationUpdateRequestDTO.Contacts)}[{i}].{nameof(SiteContactRequestDTO.Id)}",
+                                $"Contact {id} does not exist, is deleted, or does not belong to this location.")
+                        });
+                    }
+
+                    keptIds.Add(id);
+                    existing.FirstName = name;
+                    existing.MiddleName = null;
+                    existing.LastName = null;
+                    existing.PhoneNumber = phone;
+                    existing.SiteContactOrder = i;
+                    existing.AccountId = location.AccountId;
+                    existing.LastModificationTime = DateTime.Now;
+                }
+                else
+                {
+                    location.Contacts ??= new List<Contacts>();
+                    location.Contacts.Add(new Contacts
+                    {
+                        FirstName = name,
+                        MiddleName = null,
+                        LastName = null,
+                        PhoneNumber = phone,
+                        SiteContactOrder = i,
+                        AccountId = location.AccountId,
+                        CreatedDate = DateTime.Now,
+                        createdby = actorId
+                    });
+                }
+            }
+
+            // Rows omitted from the request are soft deleted so historical
+            // WorkOrderContacts keep rendering.
+            var now = DateTime.Now;
+            foreach (var existing in existingById.Values)
+            {
+                if (keptIds.Contains(existing.Id) || existing.IsDeleted == true)
+                    continue;
+
+                existing.IsDeleted = true;
+                existing.DeleterUserId = actorId;
+                existing.DeletionTime = now;
+                existing.LastModificationTime = now;
+            }
+
+            // The first site contact mirrors Location.PhoneNumber for legacy consumers.
+            location.PhoneNumber = contacts[0].Phone!.Trim();
+        }
+
+        private async Task<IReadOnlyDictionary<int, IReadOnlyList<Contacts>>> GetSiteContactsByLocationIdsAsync(
+            List<Locations> items,
+            CancellationToken cancellationToken)
+        {
+            if (items.Count == 0)
+                return new Dictionary<int, IReadOnlyList<Contacts>>();
+
+            var rows = await _locationDataService.GetSiteContactsByLocationIdsAsync(
+                items.Select(l => l.Id).ToList(),
+                cancellationToken);
+
+            return rows
+                .GroupBy(c => c.LocationId!.Value)
+                .ToDictionary(g => g.Key, g => (IReadOnlyList<Contacts>)g.ToList());
+        }
+
+        private static IReadOnlyList<SiteContactResponseDTO> MapSiteContacts(IEnumerable<Contacts>? contacts)
+        {
+            if (contacts == null)
+                return new List<SiteContactResponseDTO>();
+
+            return contacts
+                .OrderBy(c => c.SiteContactOrder)
+                .ThenBy(c => c.Id)
+                .Select(c => new SiteContactResponseDTO
+                {
+                    Id = c.Id,
+                    Name = c.FirstName,
+                    Phone = c.PhoneNumber
+                })
+                .ToList();
+        }
+
+        private LocationDTO MapToDTO(Locations location, IReadOnlyDictionary<int, IReadOnlyList<Contacts>>? contactsByLocation = null)
         {
             return new LocationDTO
             {
@@ -343,7 +504,10 @@ namespace SeaHaven.Services.Implementation
                 Status = location.Status,
                 AccountId = location.AccountId,
                 CreatedDate = location.CreatedDate,
-                CreatedBy = location.createdby
+                CreatedBy = location.createdby,
+                Contacts = contactsByLocation != null && contactsByLocation.TryGetValue(location.Id, out var contacts)
+                    ? MapSiteContacts(contacts)
+                    : MapSiteContacts(location.Contacts?.Where(c => c.IsDeleted != true))
             };
         }
     }
diff --git a/SeaHaven.Services/Validation/SiteContactValidation.cs b/SeaHaven.Services/Validation/SiteContactValidation.cs
new file mode 100644
index 0000000..a785ea0
--- /dev/null
+++ b/SeaHaven.Services/Validation/SiteContactValidation.cs
@@ -0,0 +1,81 @@
+using FluentValidation.Results;
+using SeaHaven.Services.DTOs;
+
+namespace SeaHaven.Services.Validation
+{
+    /// <summary>
+    /// SH-138 site-contact request validation shared by location create and update.
+    /// Null contacts means legacy behavior (no validation, no mutation);
+    /// a present array must contain 1..20 complete rows.
+    /// </summary>
+    public static class SiteContactsValidation
+    {
+        public const int MaxContacts = 20;
+        public const int MaxNameLength = 100;
+        public const int MaxPhoneLength = 20;
+
+        public static List<ValidationFailure> Validate(IReadOnlyList<SiteContactRequestDTO> contacts)
+        {
+            var failures = new List<ValidationFailure>();
+
+            if (contacts.Count == 0)
+            {
+                failures.Add(new ValidationFailure(
+                    nameof(LocationCreateRequestDTO.Contacts),
+                    "Contacts must contain at least one contact when provided."));
+                return failures;
+            }
+
+            if (contacts.Count > MaxContacts)
+            {
+                failures.Add(new ValidationFailure(
+                    nameof(LocationCreateRequestDTO.Contacts),
+                    $"Contacts cannot exceed {MaxContacts} entries."));
+                return failures;
+            }
+
+            var seenIds = new HashSet<int>();
+            for (var i = 0; i < contacts.Count; i++)
+            {
+                var row = contacts[i];
+                var name = row.Name?.Trim();
+                var phone = row.Phone?.Trim();
+
+                if (string.IsNullOrWhiteSpace(name))
+                {
+                    failures.Add(new ValidationFailure(
+                        $"{nameof(LocationCreateRequestDTO.Contacts)}[{i}].{nameof(SiteContactRequestDTO.Name)}",
+                        "Contact name is required."));
+                }
+                else if (name.Length > MaxNameLength)
+                {
+                    failures.Add(new ValidationFailure(
+                        $"{nameof(LocationCreateRequestDTO.Contacts)}[{i}].{nameof(SiteContactRequestDTO.Name)}",
+                        $"Contact name cannot exceed {MaxNameLength} characters."));
+                }
+
+                if (string.IsNullOrWhiteSpace(phone))
+                {
+                    failures.Add(new ValidationFailure(
+                        $"{nameof(LocationCreateRequestDTO.Contacts)}[{i}].{nameof(SiteContactRequestDTO.Phone)}",
+                        "Contact phone is required."));
+                }
+                else if (phone.Length > MaxPhoneLength)
+                {
+                    failures.Add(new ValidationFailure(
+                        $"{nameof(LocationCreateRequestDTO.Contacts)}[{i}].{nameof(SiteContactRequestDTO.Phone)}",
+                        $"Contact phone cannot exceed {MaxPhoneLength} characters."));
+                }
+
+                if (row.Id is int id && !seenIds.Add(id))
+                {
+                    failures.Add(new ValidationFailure(
+                        $"{nameof(LocationCreateRequestDTO.Contacts)}[{i}].{nameof(SiteContactRequestDTO.Id)}",
+                        $"Contact id {id} appears more than once."));
+                }
+            }
+
+            return failures;
+        }
+    }
+}
diff --git a/SeaHavenIndustries.Tests/WorkOrderAccountScopeTests.cs b/SeaHavenIndustries.Tests/WorkOrderAccountScopeTests.cs
index a081f75..2b11906 100644
--- a/SeaHavenIndustries.Tests/WorkOrderAccountScopeTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderAccountScopeTests.cs
@@ -841,6 +841,10 @@ public class WorkOrderAccountScopeTests
             => _inner.GetDetailByIdAsync(id, cancellationToken);
         public Task<Locations?> GetByIdForUpdateAsync(int id, CancellationToken cancellationToken)
             => _inner.GetByIdForUpdateAsync(id, cancellationToken);
+        public Task<IReadOnlyList<Contacts>> GetSiteContactsByLocationIdsAsync(
+            IReadOnlyCollection<int> locationIds,
+            CancellationToken cancellationToken)
+            => _inner.GetSiteContactsByLocationIdsAsync(locationIds, cancellationToken);
         public Task<Locations> AddAsync(Locations location, CancellationToken cancellationToken)
             => _inner.AddAsync(location, cancellationToken);
         public Task UpdateAsync(Locations location, CancellationToken cancellationToken)

From 0248aea5425d493d17bdab66196c5c848a0ca5b8 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Mon, 14 Sep 2026 22:20:46 -0300
Subject: [PATCH 007/183] fix(locations): preserve contacts when deleting sites

---
 .../LocationSiteContactsTests.cs              |  61 ++++
 .../Implementation/LocationDataService.cs     |  16 +-
 .../SH138SiteContactsSqlServerTests.cs        | 316 ++++++++++++++++++
 3 files changed, 392 insertions(+), 1 deletion(-)
 create mode 100644 SeaHavenIndustries.Tests/SH138SiteContactsSqlServerTests.cs

diff --git a/Api.SeaHavenIndustries.Tests/LocationSiteContactsTests.cs b/Api.SeaHavenIndustries.Tests/LocationSiteContactsTests.cs
index a045661..5b9cf9d 100644
--- a/Api.SeaHavenIndustries.Tests/LocationSiteContactsTests.cs
+++ b/Api.SeaHavenIndustries.Tests/LocationSiteContactsTests.cs
@@ -489,6 +489,67 @@ public class LocationSiteContactsTests
         rows.Should().BeEmpty();
     }
 
+    [Fact]
+    public async Task DataService_DeleteByIdAsync_WithContacts_RemovesLocation_RetainsSoftDeletedDetachedContacts()
+    {
+        using var ctx = NewContext();
+        var seeded = await SeedLocationWithContactsAsync(ctx);
+        var alice = seeded.Contacts!.Single(c => c.FirstName == "Alice Cooper");
+        var bob = seeded.Contacts!.Single(c => c.FirstName == "Bob Dillon");
+
+        var deleted = await new LocationDataService(ctx).DeleteByIdAsync(seeded.Id, CancellationToken.None);
+
+        deleted.Should().BeTrue();
+        ctx.Locations.Should().BeEmpty();
+
+        var retained = ctx.Contacts.AsNoTracking().OrderBy(c => c.Id).ToList();
+        retained.Should().HaveCount(2);
+        retained.Should().OnlyContain(c => c.IsDeleted == true);
+        retained.Should().OnlyContain(c => c.LocationId == null);
+        retained.Should().OnlyContain(c => c.DeletionTime != null);
+        retained.Should().OnlyContain(c => c.DeleterUserId == null, "the delete interface carries no actor");
+        retained.Single(c => c.Id == alice.Id).FirstName.Should().Be("Alice Cooper");
+        retained.Single(c => c.Id == alice.Id).PhoneNumber.Should().Be("555-0100");
+        retained.Single(c => c.Id == bob.Id).FirstName.Should().Be("Bob Dillon");
+        retained.Single(c => c.Id == bob.Id).PhoneNumber.Should().Be("555-0200");
+    }
+
+    [Fact]
+    public async Task DataService_DeleteByIdAsync_AlreadySoftDeletedContact_IsDetachedWithoutAuditRestamp()
+    {
+        using var ctx = NewContext();
+        var seeded = await SeedLocationWithContactsAsync(ctx);
+        var bob = seeded.Contacts!.Single(c => c.FirstName == "Bob Dillon");
+        bob.IsDeleted = true;
+        bob.DeleterUserId = "admin-1";
+        bob.DeletionTime = new DateTime(2026, 1, 1);
+        await ctx.SaveChangesAsync();
+        var bobStamp = bob.DeletionTime;
+
+        var deleted = await new LocationDataService(ctx).DeleteByIdAsync(seeded.Id, CancellationToken.None);
+
+        deleted.Should().BeTrue();
+        ctx.Locations.Should().BeEmpty();
+        var retained = ctx.Contacts.AsNoTracking().Single(c => c.Id == bob.Id);
+        retained.LocationId.Should().BeNull("previously soft-deleted rows must also detach or the restrict FK blocks the delete");
+        retained.IsDeleted.Should().BeTrue();
+        retained.DeleterUserId.Should().Be("admin-1", "original audit stamp is preserved");
+        retained.DeletionTime.Should().Be(bobStamp);
+    }
+
+    [Fact]
+    public async Task DataService_DeleteByIdAsync_Missing_ReturnsFalse()
+    {
+        using var ctx = NewContext();
+        await SeedLocationWithContactsAsync(ctx);
+
+        var deleted = await new LocationDataService(ctx).DeleteByIdAsync(424242, CancellationToken.None);
+
+        deleted.Should().BeFalse();
+        ctx.Locations.Should().HaveCount(1);
+        ctx.Contacts.Should().HaveCount(2);
+    }
+
     private sealed class ExposedSH138Migration : Data.SeaHavenIndustries.Migrations.SH138_SiteContacts
     {
         public void UpExposed(MigrationBuilder builder) => Up(builder);
diff --git a/SeaHaven.DataServices/Implementation/LocationDataService.cs b/SeaHaven.DataServices/Implementation/LocationDataService.cs
index 57221c8..71be6ec 100644
--- a/SeaHaven.DataServices/Implementation/LocationDataService.cs
+++ b/SeaHaven.DataServices/Implementation/LocationDataService.cs
@@ -209,10 +209,24 @@ namespace SeaHaven.DataServices.Implementation
 
         public async Task<bool> DeleteByIdAsync(int id, CancellationToken cancellationToken)
         {
-            var entity = await _context.Locations.FindAsync(new object[] { id }, cancellationToken);
+            var entity = await _context.Locations
+                .Include(l => l.Contacts)
+                .FirstOrDefaultAsync(l => l.Id == id, cancellationToken);
             if (entity == null)
                 return false;
 
+            var now = DateTime.Now;
+            foreach (var contact in entity.Contacts ?? Enumerable.Empty<Contacts>())
+            {
+                if (contact.IsDeleted != true)
+                {
+                    contact.IsDeleted = true;
+                    contact.DeletionTime = now;
+                }
+
+                contact.LocationId = null;
+            }
+
             _context.Locations.Remove(entity);
             await _context.SaveChangesAsync(cancellationToken);
             return true;
diff --git a/SeaHavenIndustries.Tests/SH138SiteContactsSqlServerTests.cs b/SeaHavenIndustries.Tests/SH138SiteContactsSqlServerTests.cs
new file mode 100644
index 0000000..e93807f
--- /dev/null
+++ b/SeaHavenIndustries.Tests/SH138SiteContactsSqlServerTests.cs
@@ -0,0 +1,316 @@
+using System.Reflection;
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Migrations;
+using Microsoft.Data.SqlClient;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Migrations;
+using SeaHaven.DataServices.Implementation;
+
+namespace SeaHavenIndustries.Tests;
+
+public class SH138SiteContactsSqlServerTests
+{
+    private const string LocalDbMaster =
+        @"Server=(localdb)\MSSQLLocalDB;Database=master;Trusted_Connection=True;TrustServerCertificate=True;Connect Timeout=3";
+
+    [Fact]
+    public async Task SH138_SiteContacts_MigrationAddsNullableIntOrderColumn_WhenLocalDbAvailable()
+    {
+        var masterConnectionString = await ResolveMasterConnectionStringAsync();
+        if (masterConnectionString == null)
+            return;
+
+        var dbName = $"SH138Migration_{Guid.NewGuid():N}";
+        var connectionString = WithDatabase(masterConnectionString, dbName);
+
+        try
+        {
+            await CreateDatabaseAsync(masterConnectionString, dbName);
+
+            await using var connection = new SqlConnection(connectionString);
+            await connection.OpenAsync();
+
+            await using (var createTables = connection.CreateCommand())
+            {
+                createTables.CommandText =
+                    """
+                    CREATE TABLE Contacts (
+                        Id int NOT NULL IDENTITY PRIMARY KEY,
+                        FirstName nvarchar(max) NULL,
+                        PhoneNumber nvarchar(max) NULL
+                    );
+                    """;
+                await createTables.ExecuteNonQueryAsync();
+            }
+
+            var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+                .UseSqlServer(connection)
+                .Options;
+
+            await using var context = new ApplicationDbContext(options);
+            await ApplyMigrationUpAsync(context, new SH138_SiteContacts());
+
+            await using (var columnCmd = connection.CreateCommand())
+            {
+                columnCmd.CommandText =
+                    """
+                    SELECT t.name
+                    FROM sys.columns c
+                    JOIN sys.types t ON c.user_type_id = t.user_type_id
+                    WHERE c.object_id = OBJECT_ID(N'Contacts')
+                      AND c.name = N'SiteContactOrder';
+                    """;
+                var columnType = await columnCmd.ExecuteScalarAsync();
+                Assert.Equal("int", columnType);
+            }
+
+            await using (var nullableCmd = connection.CreateCommand())
+            {
+                nullableCmd.CommandText =
+                    """
+                    SELECT c.is_nullable
+                    FROM sys.columns c
+                    WHERE c.object_id = OBJECT_ID(N'Contacts')
+                      AND c.name = N'SiteContactOrder';
+                    """;
+                var isNullable = await nullableCmd.ExecuteScalarAsync();
+                Assert.Equal(true, isNullable);
+            }
+        }
+        finally
+        {
+            await DropDatabaseAsync(masterConnectionString, dbName);
+        }
+    }
+
+    [Fact]
+    public async Task SH138_LocationDelete_DetachesSoftDeletedContacts_WithRestrictFk_WhenLocalDbAvailable()
+    {
+        var masterConnectionString = await ResolveMasterConnectionStringAsync();
+        if (masterConnectionString == null)
+            return;
+
+        var dbName = $"SH138LocationDelete_{Guid.NewGuid():N}";
+        var connectionString = WithDatabase(masterConnectionString, dbName);
+
+        try
+        {
+            await CreateDatabaseAsync(masterConnectionString, dbName);
+
+            await using var connection = new SqlConnection(connectionString);
+            await connection.OpenAsync();
+
+            await using (var createTables = connection.CreateCommand())
+            {
+                createTables.CommandText =
+                    """
+                    CREATE TABLE Locations (
+                        Id int NOT NULL IDENTITY PRIMARY KEY,
+                        AccountId int NULL,
+                        Title nvarchar(max) NULL,
+                        Name nvarchar(max) NULL,
+                        Latitude nvarchar(max) NULL,
+                        Longitude nvarchar(max) NULL,
+                        Address1 nvarchar(max) NULL,
+                        Address2 nvarchar(max) NULL,
+                        City nvarchar(max) NULL,
+                        State nvarchar(max) NULL,
+                        Zip nvarchar(max) NULL,
+                        PhoneNumber nvarchar(max) NULL,
+                        Email nvarchar(max) NULL,
+                        Status nvarchar(max) NULL,
+                        ExternalSource nvarchar(max) NULL,
+                        ExternalLocationId nvarchar(max) NULL,
+                        IsDeleted bit NULL,
+                        createdby nvarchar(max) NULL,
+                        DeleterUserId nvarchar(max) NULL,
+                        DeletionTime datetime2 NULL,
+                        CreatedDate datetime2 NULL,
+                        LastModificationTime datetime2 NULL,
+                        LastModifierUserId int NULL
+                    );
+                    CREATE TABLE Contacts (
+                        Id int NOT NULL IDENTITY PRIMARY KEY,
+                        AccountId int NULL,
+                        LocationId int NULL,
+                        Title nvarchar(max) NULL,
+                        Owner nvarchar(max) NULL,
+                        FirstName nvarchar(max) NULL,
+                        MiddleName nvarchar(max) NULL,
+                        LastName nvarchar(max) NULL,
+                        ContactType nvarchar(max) NULL,
+                        PhoneNumber nvarchar(max) NULL,
+                        Email nvarchar(max) NULL,
+                        Address1 nvarchar(max) NULL,
+                        Address2 nvarchar(max) NULL,
+                        City nvarchar(max) NULL,
+                        State nvarchar(max) NULL,
+                        Zip nvarchar(max) NULL,
+                        FacebookUrl nvarchar(max) NULL,
+                        LinkedInUrl nvarchar(max) NULL,
+                        TwitterUrl nvarchar(max) NULL,
+                        IsDeleted bit NULL,
+                        createdby nvarchar(max) NULL,
+                        DeleterUserId nvarchar(max) NULL,
+                        DeletionTime datetime2 NULL,
+                        CreatedDate datetime2 NULL,
+                        LastModificationTime datetime2 NULL,
+                        LastModifierUserId int NULL,
+                        SiteContactOrder int NULL,
+                        CONSTRAINT FK_Contacts_Locations_LocationId FOREIGN KEY (LocationId) REFERENCES Locations (Id) ON DELETE NO ACTION
+                    );
+                    SET IDENTITY_INSERT Locations ON;
+                    INSERT INTO Locations (Id, Name) VALUES (11, 'Depot');
+                    SET IDENTITY_INSERT Locations OFF;
+                    INSERT INTO Contacts (LocationId, FirstName, PhoneNumber, SiteContactOrder) VALUES (11, 'Alice Cooper', '555-0100', 0);
+                    INSERT INTO Contacts (LocationId, FirstName, PhoneNumber, IsDeleted, DeleterUserId, DeletionTime) VALUES (11, 'Bob Dillon', '555-0200', 1, 'actor-1', '2026-01-01T00:00:00');
+                    """;
+                await createTables.ExecuteNonQueryAsync();
+            }
+
+            var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+                .UseSqlServer(connection)
+                .Options;
+
+            await using var context = new ApplicationDbContext(options);
+            var service = new LocationDataService(context);
+            var deleted = await service.DeleteByIdAsync(11, CancellationToken.None);
+
+            Assert.True(deleted);
+
+            await using (var locationCmd = connection.CreateCommand())
+            {
+                locationCmd.CommandText = "SELECT COUNT(*) FROM Locations;";
+                var locationCount = await locationCmd.ExecuteScalarAsync();
+                Assert.Equal(0, Convert.ToInt32(locationCount));
+            }
+
+            await using (var activeCmd = connection.CreateCommand())
+            {
+                activeCmd.CommandText =
+                    """
+                    SELECT FirstName, PhoneNumber, LocationId, IsDeleted, DeleterUserId, DeletionTime
+                    FROM Contacts
+                    WHERE FirstName = N'Alice Cooper';
+                    """;
+                await using var reader = await activeCmd.ExecuteReaderAsync();
+                Assert.True(await reader.ReadAsync());
+                Assert.Equal("Alice Cooper", reader.GetString(0));
+                Assert.Equal("555-0100", reader.GetString(1));
+                Assert.True(reader.IsDBNull(2));
+                Assert.True(reader.GetBoolean(3));
+                Assert.True(reader.IsDBNull(4), "delete carries no audit actor");
+                Assert.False(reader.IsDBNull(5));
+                Assert.False(await reader.ReadAsync());
+            }
+
+            await using (var previouslyDeletedCmd = connection.CreateCommand())
+            {
+                previouslyDeletedCmd.CommandText =
+                    """
+                    SELECT LocationId, IsDeleted, DeleterUserId, DeletionTime
+                    FROM Contacts
+                    WHERE FirstName = N'Bob Dillon';
+                    """;
+                await using var reader = await previouslyDeletedCmd.ExecuteReaderAsync();
+                Assert.True(await reader.ReadAsync());
+                Assert.True(reader.IsDBNull(0), "already soft-deleted rows detach so the restrict FK cannot block the delete");
+                Assert.True(reader.GetBoolean(1));
+                Assert.Equal("actor-1", reader.GetString(2));
+                Assert.Equal(new DateTime(2026, 1, 1), reader.GetDateTime(3));
+                Assert.False(await reader.ReadAsync());
+            }
+        }
+        finally
+        {
+            await DropDatabaseAsync(masterConnectionString, dbName);
+        }
+    }
+
+    private static async Task ApplyMigrationUpAsync(ApplicationDbContext context, Migration migration)
+    {
+        var builder = new MigrationBuilder(context.Database.ProviderName!);
+        var up = typeof(Migration).GetMethod("Up", BindingFlags.Instance | BindingFlags.NonPublic)
+                 ?? throw new InvalidOperationException("Migration.Up not found.");
+        up.Invoke(migration, [builder]);
+
+        var sqlGenerator = context.GetService<IMigrationsSqlGenerator>();
+        var commands = sqlGenerator.Generate(builder.Operations, model: null);
+        foreach (var command in commands)
+            await context.Database.ExecuteSqlRawAsync(command.CommandText);
+    }
+
+    private static async Task<string?> ResolveMasterConnectionStringAsync()
+    {
+        var configured = Environment.GetEnvironmentVariable("SH138_SQLSERVER_MASTER");
+        var candidate = !string.IsNullOrWhiteSpace(configured)
+            ? WithDatabase(configured, "master")
+            : OperatingSystem.IsWindows() ? LocalDbMaster : null;
+
+        if (candidate == null)
+            return null;
+
+        try
+        {
+            await using var connection = new SqlConnection(candidate);
+            await connection.OpenAsync();
+            return candidate;
+        }
+        catch (SqlException)
+        {
+            return null;
+        }
+        catch (InvalidOperationException)
+        {
+            return null;
+        }
+    }
+
+    private static async Task CreateDatabaseAsync(string masterConnectionString, string dbName)
+    {
+        var quoted = QuoteSqlServerIdentifier(dbName);
+        await using var connection = new SqlConnection(masterConnectionString);
+        await connection.OpenAsync();
+        await using var command = connection.CreateCommand();
+        command.CommandText = $"CREATE DATABASE {quoted};";
+        await command.ExecuteNonQueryAsync();
+    }
+
+    private static async Task DropDatabaseAsync(string masterConnectionString, string dbName)
+    {
+        try
+        {
+            var quoted = QuoteSqlServerIdentifier(dbName);
+            await using var connection = new SqlConnection(masterConnectionString);
+            await connection.OpenAsync();
+            await using var command = connection.CreateCommand();
+            command.CommandText =
+                $"""
+                 IF DB_ID(@dbName) IS NOT NULL
+                 BEGIN
+                     ALTER DATABASE {quoted} SET SINGLE_USER WITH ROLLBACK IMMEDIATE;
+                     DROP DATABASE {quoted};
+                 END
+                 """;
+            command.Parameters.AddWithValue("@dbName", dbName);
+            await command.ExecuteNonQueryAsync();
+        }
+        catch
+        {
+            // Best-effort cleanup for ephemeral LocalDB databases.
+        }
+    }
+
+    private static string QuoteSqlServerIdentifier(string name) =>
+        "[" + name.Replace("]", "]]", StringComparison.Ordinal) + "]";
+
+    private static string WithDatabase(string connectionString, string database)
+    {
+        var builder = new SqlConnectionStringBuilder(connectionString)
+        {
+            InitialCatalog = database
+        };
+        return builder.ConnectionString;
+    }
+}

From 8515676f4dd68d12e0710cb7161b9f70b19cd6ba Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 11:34:45 -0300
Subject: [PATCH 008/183] feat(vendors): add admin-assigned vendor company Area

Seed an organization-wide Area catalogue (East, Central, West, California)
with stable ids, add a nullable AreaId to VendorCompany, allow only Admins
to change it through the roster endpoints, expose areas facet metadata and
an areas[n] company-directory filter with the __unassigned__ sentinel.
---
 .../VendorCompanyRosterControllerTests.cs     |   53 +-
 .../VendorCompanyRosterDataServiceTests.cs    |   39 +
 .../VendorCompanyRosterServiceTests.cs        |  248 +-
 .../VendorControllerTests.cs                  |    3 +
 .../VendorDataServiceTests.cs                 |   69 +-
 .../VendorServiceTests.cs                     |  103 +
 .../VendorCompanyRosterController.cs          |   25 +-
 .../Controllers/VendorController.cs           |    4 +
 .../Auth/ApplicationDbContext.cs              |   20 +
 ...140128_SH278_VendorCompanyArea.Designer.cs | 3977 +++++++++++++++++
 .../20260916140128_SH278_VendorCompanyArea.cs |   88 +
 .../ApplicationDbContextModelSnapshot.cs      |   44 +
 Data.SeaHavenIndustries/Models/Area.cs        |   15 +
 .../Models/VendorCompany.cs                   |    5 +
 .../VendorCompanyRosterDataService.cs         |   12 +
 .../Implementation/VendorDataService.cs       |   68 +-
 .../IVendorCompanyRosterDataService.cs        |    3 +
 .../Interfaces/IVendorDataService.cs          |    5 +
 .../Models/VendorCompanyRosterModels.cs       |   10 +
 .../Models/VendorDirectoryReadModels.cs       |   16 +
 .../DTOs/VendorCompanyRosterDTOs.cs           |   49 +
 SeaHaven.Services/DTOs/VendorDTOs.cs          |    2 +
 SeaHaven.Services/DTOs/VendorPortalDTOs.cs    |   14 +
 .../VendorCompanyRosterService.cs             |   89 +-
 .../Implementation/VendorService.cs           |   57 +
 .../Interfaces/IVendorCompanyRosterService.cs |    4 +
 .../Interfaces/IVendorService.cs              |    1 +
 27 files changed, 4963 insertions(+), 60 deletions(-)
 create mode 100644 Data.SeaHavenIndustries/Migrations/20260916140128_SH278_VendorCompanyArea.Designer.cs
 create mode 100644 Data.SeaHavenIndustries/Migrations/20260916140128_SH278_VendorCompanyArea.cs
 create mode 100644 Data.SeaHavenIndustries/Models/Area.cs

diff --git a/Api.SeaHavenIndustries.Tests/VendorCompanyRosterControllerTests.cs b/Api.SeaHavenIndustries.Tests/VendorCompanyRosterControllerTests.cs
index b10a37d..e57a307 100644
--- a/Api.SeaHavenIndustries.Tests/VendorCompanyRosterControllerTests.cs
+++ b/Api.SeaHavenIndustries.Tests/VendorCompanyRosterControllerTests.cs
@@ -105,14 +105,14 @@ public class VendorCompanyRosterControllerTests
         var result = await controller.Create(new CreateVendorRosterDTO { Name = "Acme", Email = "acme@example.com" }, CancellationToken.None);
 
         result.Should().BeOfType<UnauthorizedObjectResult>();
-        service.Verify(x => x.CreateRosterAsync(It.IsAny<CreateVendorRosterDTO>(), It.IsAny<string>(), It.IsAny<CancellationToken>()), Times.Never);
+        service.Verify(x => x.CreateRosterAsync(It.IsAny<CreateVendorRosterDTO>(), It.IsAny<string>(), It.IsAny<ClaimsPrincipal>(), It.IsAny<CancellationToken>()), Times.Never);
     }
 
     [Fact]
     public async Task Create_Returns200()
     {
         var service = new Mock<IVendorCompanyRosterService>();
-        service.Setup(x => x.CreateRosterAsync(It.IsAny<CreateVendorRosterDTO>(), "42", It.IsAny<CancellationToken>()))
+        service.Setup(x => x.CreateRosterAsync(It.IsAny<CreateVendorRosterDTO>(), "42", It.IsAny<ClaimsPrincipal>(), It.IsAny<CancellationToken>()))
             .ReturnsAsync(SampleRoster());
 
         var result = await NewController(service).Create(new CreateVendorRosterDTO { Name = "Acme", Email = "acme@example.com" }, CancellationToken.None);
@@ -125,7 +125,7 @@ public class VendorCompanyRosterControllerTests
     public async Task Create_ValidationException_Returns400()
     {
         var service = new Mock<IVendorCompanyRosterService>();
-        service.Setup(x => x.CreateRosterAsync(It.IsAny<CreateVendorRosterDTO>(), "42", It.IsAny<CancellationToken>()))
+        service.Setup(x => x.CreateRosterAsync(It.IsAny<CreateVendorRosterDTO>(), "42", It.IsAny<ClaimsPrincipal>(), It.IsAny<CancellationToken>()))
             .ThrowsAsync(new ValidationException("At least one company phone or email is required."));
 
         var result = await NewController(service).Create(new CreateVendorRosterDTO { Name = "Acme" }, CancellationToken.None);
@@ -137,7 +137,7 @@ public class VendorCompanyRosterControllerTests
     public async Task Create_DuplicateName_ReturnsStable409()
     {
         var service = new Mock<IVendorCompanyRosterService>();
-        service.Setup(x => x.CreateRosterAsync(It.IsAny<CreateVendorRosterDTO>(), "42", It.IsAny<CancellationToken>()))
+        service.Setup(x => x.CreateRosterAsync(It.IsAny<CreateVendorRosterDTO>(), "42", It.IsAny<ClaimsPrincipal>(), It.IsAny<CancellationToken>()))
             .ThrowsAsync(new VendorRosterDuplicateNameException(
                 "database detail",
                 new InvalidOperationException("IX_VendorCompanies_NormalizedName")));
@@ -164,14 +164,14 @@ public class VendorCompanyRosterControllerTests
         var result = await controller.Reconcile(7, new ReconcileVendorRosterDTO { RowVersion = "AAAAAAAAD8I=", Name = "Acme", Email = "acme@example.com" }, CancellationToken.None);
 
         result.Should().BeOfType<UnauthorizedObjectResult>();
-        service.Verify(x => x.ReconcileRosterAsync(It.IsAny<int>(), It.IsAny<ReconcileVendorRosterDTO>(), It.IsAny<string>(), It.IsAny<CancellationToken>()), Times.Never);
+        service.Verify(x => x.ReconcileRosterAsync(It.IsAny<int>(), It.IsAny<ReconcileVendorRosterDTO>(), It.IsAny<string>(), It.IsAny<ClaimsPrincipal>(), It.IsAny<CancellationToken>()), Times.Never);
     }
 
     [Fact]
     public async Task Reconcile_ValidationException_Returns400()
     {
         var service = new Mock<IVendorCompanyRosterService>();
-        service.Setup(x => x.ReconcileRosterAsync(It.IsAny<int>(), It.IsAny<ReconcileVendorRosterDTO>(), "42", It.IsAny<CancellationToken>()))
+        service.Setup(x => x.ReconcileRosterAsync(It.IsAny<int>(), It.IsAny<ReconcileVendorRosterDTO>(), "42", It.IsAny<ClaimsPrincipal>(), It.IsAny<CancellationToken>()))
             .ThrowsAsync(new ValidationException("Duplicate technician ids are not allowed."));
 
         var result = await NewController(service).Reconcile(7, new ReconcileVendorRosterDTO { RowVersion = "AAAAAAAAD8I=", Name = "Acme", Email = "acme@example.com" }, CancellationToken.None);
@@ -183,7 +183,7 @@ public class VendorCompanyRosterControllerTests
     public async Task Reconcile_CompanyNotFound_Returns404()
     {
         var service = new Mock<IVendorCompanyRosterService>();
-        service.Setup(x => x.ReconcileRosterAsync(It.IsAny<int>(), It.IsAny<ReconcileVendorRosterDTO>(), "42", It.IsAny<CancellationToken>()))
+        service.Setup(x => x.ReconcileRosterAsync(It.IsAny<int>(), It.IsAny<ReconcileVendorRosterDTO>(), "42", It.IsAny<ClaimsPrincipal>(), It.IsAny<CancellationToken>()))
             .ThrowsAsync(new KeyNotFoundException("not found"));
 
         var result = await NewController(service).Reconcile(404, new ReconcileVendorRosterDTO { RowVersion = "AAAAAAAAD8I=", Name = "Acme", Email = "acme@example.com" }, CancellationToken.None);
@@ -199,7 +199,7 @@ public class VendorCompanyRosterControllerTests
             new() { WorkOrderId = 500, WorkOrderNumber = "WO-500", LifecycleStatus = LifecycleStatus.Scheduled }
         };
         var service = new Mock<IVendorCompanyRosterService>();
-        service.Setup(x => x.ReconcileRosterAsync(It.IsAny<int>(), It.IsAny<ReconcileVendorRosterDTO>(), "42", It.IsAny<CancellationToken>()))
+        service.Setup(x => x.ReconcileRosterAsync(It.IsAny<int>(), It.IsAny<ReconcileVendorRosterDTO>(), "42", It.IsAny<ClaimsPrincipal>(), It.IsAny<CancellationToken>()))
             .ThrowsAsync(new VendorRosterConflictException("blocked", blocked));
 
         var result = await NewController(service).Reconcile(7, new ReconcileVendorRosterDTO { RowVersion = "AAAAAAAAD8I=", Name = "Acme", Email = "acme@example.com" }, CancellationToken.None);
@@ -212,7 +212,7 @@ public class VendorCompanyRosterControllerTests
     public async Task Reconcile_StaleRowVersion_ReturnsStable409WithoutExceptionText()
     {
         var service = new Mock<IVendorCompanyRosterService>();
-        service.Setup(x => x.ReconcileRosterAsync(It.IsAny<int>(), It.IsAny<ReconcileVendorRosterDTO>(), "42", It.IsAny<CancellationToken>()))
+        service.Setup(x => x.ReconcileRosterAsync(It.IsAny<int>(), It.IsAny<ReconcileVendorRosterDTO>(), "42", It.IsAny<ClaimsPrincipal>(), It.IsAny<CancellationToken>()))
             .ThrowsAsync(new DbUpdateConcurrencyException("internal provider detail: UPDATE [VendorCompanies] ..."));
 
         var result = await NewController(service).Reconcile(7, new ReconcileVendorRosterDTO { RowVersion = "AAAAAAAAD8I=", Name = "Acme", Email = "acme@example.com" }, CancellationToken.None);
@@ -251,14 +251,14 @@ public class VendorCompanyRosterControllerTests
         var result = await controller.AddTechnicians(7, PatchDto(), CancellationToken.None);
 
         result.Should().BeOfType<UnauthorizedObjectResult>();
-        service.Verify(x => x.AddTechniciansAsync(It.IsAny<int>(), It.IsAny<AddTechniciansVendorRosterDTO>(), It.IsAny<string>(), It.IsAny<CancellationToken>()), Times.Never);
+        service.Verify(x => x.AddTechniciansAsync(It.IsAny<int>(), It.IsAny<AddTechniciansVendorRosterDTO>(), It.IsAny<string>(), It.IsAny<ClaimsPrincipal>(), It.IsAny<CancellationToken>()), Times.Never);
     }
 
     [Fact]
     public async Task Patch_AddsTechnicians_Returns200WithRoster()
     {
         var service = new Mock<IVendorCompanyRosterService>();
-        service.Setup(x => x.AddTechniciansAsync(7, It.IsAny<AddTechniciansVendorRosterDTO>(), "42", It.IsAny<CancellationToken>()))
+        service.Setup(x => x.AddTechniciansAsync(7, It.IsAny<AddTechniciansVendorRosterDTO>(), "42", It.IsAny<ClaimsPrincipal>(), It.IsAny<CancellationToken>()))
             .ReturnsAsync(SampleRoster());
 
         var result = await NewController(service).AddTechnicians(7, PatchDto(), CancellationToken.None);
@@ -272,7 +272,7 @@ public class VendorCompanyRosterControllerTests
     public async Task Patch_ValidationException_Returns400()
     {
         var service = new Mock<IVendorCompanyRosterService>();
-        service.Setup(x => x.AddTechniciansAsync(It.IsAny<int>(), It.IsAny<AddTechniciansVendorRosterDTO>(), "42", It.IsAny<CancellationToken>()))
+        service.Setup(x => x.AddTechniciansAsync(It.IsAny<int>(), It.IsAny<AddTechniciansVendorRosterDTO>(), "42", It.IsAny<ClaimsPrincipal>(), It.IsAny<CancellationToken>()))
             .ThrowsAsync(new ValidationException("Technician ids are not allowed when adding technicians."));
 
         var result = await NewController(service).AddTechnicians(7, PatchDto(), CancellationToken.None);
@@ -285,7 +285,7 @@ public class VendorCompanyRosterControllerTests
     public async Task Patch_CompanyNotFound_Returns404()
     {
         var service = new Mock<IVendorCompanyRosterService>();
-        service.Setup(x => x.AddTechniciansAsync(It.IsAny<int>(), It.IsAny<AddTechniciansVendorRosterDTO>(), "42", It.IsAny<CancellationToken>()))
+        service.Setup(x => x.AddTechniciansAsync(It.IsAny<int>(), It.IsAny<AddTechniciansVendorRosterDTO>(), "42", It.IsAny<ClaimsPrincipal>(), It.IsAny<CancellationToken>()))
             .ThrowsAsync(new KeyNotFoundException("not found"));
 
         var result = await NewController(service).AddTechnicians(404, PatchDto(), CancellationToken.None);
@@ -297,7 +297,7 @@ public class VendorCompanyRosterControllerTests
     public async Task Patch_StaleRowVersion_ReturnsStable409WithoutExceptionText()
     {
         var service = new Mock<IVendorCompanyRosterService>();
-        service.Setup(x => x.AddTechniciansAsync(It.IsAny<int>(), It.IsAny<AddTechniciansVendorRosterDTO>(), "42", It.IsAny<CancellationToken>()))
+        service.Setup(x => x.AddTechniciansAsync(It.IsAny<int>(), It.IsAny<AddTechniciansVendorRosterDTO>(), "42", It.IsAny<ClaimsPrincipal>(), It.IsAny<CancellationToken>()))
             .ThrowsAsync(new DbUpdateConcurrencyException("internal provider detail: UPDATE [VendorCompanies] ..."));
 
         var result = await NewController(service).AddTechnicians(7, PatchDto(), CancellationToken.None);
@@ -306,4 +306,29 @@ public class VendorCompanyRosterControllerTests
         conflict.StatusCode.Should().Be(StatusCodes.Status409Conflict);
         conflict.Value!.ToString()!.Should().NotContain("internal provider detail");
     }
+
+    [Fact]
+    public async Task AreaAssignmentForbidden_Returns403OnEveryMutation()
+    {
+        var service = new Mock<IVendorCompanyRosterService>();
+        service.Setup(x => x.CreateRosterAsync(It.IsAny<CreateVendorRosterDTO>(), "42", It.IsAny<ClaimsPrincipal>(), It.IsAny<CancellationToken>()))
+            .ThrowsAsync(new VendorAreaAssignmentForbiddenException());
+        service.Setup(x => x.ReconcileRosterAsync(7, It.IsAny<ReconcileVendorRosterDTO>(), "42", It.IsAny<ClaimsPrincipal>(), It.IsAny<CancellationToken>()))
+            .ThrowsAsync(new VendorAreaAssignmentForbiddenException());
+        service.Setup(x => x.AddTechniciansAsync(7, It.IsAny<AddTechniciansVendorRosterDTO>(), "42", It.IsAny<ClaimsPrincipal>(), It.IsAny<CancellationToken>()))
+            .ThrowsAsync(new VendorAreaAssignmentForbiddenException());
+        var controller = NewController(service);
+
+        var results = new[]
+        {
+            await controller.Create(new CreateVendorRosterDTO { Name = "Acme", Email = "acme@example.com", AreaId = 1 }, CancellationToken.None),
+            await controller.Reconcile(7, new ReconcileVendorRosterDTO { RowVersion = "AAAAAAAAD8I=", Name = "Acme", AreaId = 1 }, CancellationToken.None),
+            await controller.AddTechnicians(7, new AddTechniciansVendorRosterDTO { RowVersion = "AAAAAAAAD8I=" }, CancellationToken.None)
+        };
+
+        foreach (var result in results)
+            result.Should().BeOfType<ObjectResult>().Which.StatusCode.Should().Be(StatusCodes.Status403Forbidden);
+
+        service.Verify(x => x.ReconcileRosterAsync(7, It.IsAny<ReconcileVendorRosterDTO>(), "42", controller.User, It.IsAny<CancellationToken>()), Times.Once);
+    }
 }
diff --git a/Api.SeaHavenIndustries.Tests/VendorCompanyRosterDataServiceTests.cs b/Api.SeaHavenIndustries.Tests/VendorCompanyRosterDataServiceTests.cs
index 6114c31..cd7627c 100644
--- a/Api.SeaHavenIndustries.Tests/VendorCompanyRosterDataServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/VendorCompanyRosterDataServiceTests.cs
@@ -835,4 +835,43 @@ public class VendorCompanyRosterDataServiceTests
 
         await act.Should().ThrowAsync<OperationCanceledException>();
     }
+
+    [Fact]
+    public async Task SaveRoster_AppliesAreaOnlyWhenProvidedAndReadsAreaName()
+    {
+        var dbName = Guid.NewGuid().ToString();
+        using var context = NewContext(dbName);
+        context.Areas.AddRange(
+            new Area { Id = 1, Name = "East", NormalizedName = "east" },
+            new Area { Id = 2, Name = "Central", NormalizedName = "central" });
+        await context.SaveChangesAsync();
+        var (companyId, _) = await SeedCompanyWithTechnicianAsync(context, "Area Co", "Tech");
+        var service = new VendorCompanyRosterDataService(context);
+
+        VendorCompanyRosterWriteModel Snapshot(bool provided, int? areaId) => new()
+        {
+            CompanyId = companyId,
+            Name = "Area Co",
+            Email = "area@example.com",
+            AreaIdProvided = provided,
+            AreaId = areaId,
+            Technicians = context.Vendors.Where(v => v.CompanyId == companyId)
+                .Select(v => new RosterTechnicianWriteModel { Id = v.Id, ContactName = v.ContactName })
+                .ToList()
+        };
+
+        var assigned = await service.SaveRosterAsync(Snapshot(true, 2), CancellationToken.None);
+        assigned.AreaId.Should().Be(2);
+        assigned.AreaName.Should().Be("Central");
+
+        var untouched = await service.SaveRosterAsync(Snapshot(false, null), CancellationToken.None);
+        untouched.AreaId.Should().Be(2);
+
+        var cleared = await service.SaveRosterAsync(Snapshot(true, null), CancellationToken.None);
+        cleared.AreaId.Should().BeNull();
+        cleared.AreaName.Should().BeNull();
+
+        (await service.IsActiveAreaAsync(1, CancellationToken.None)).Should().BeTrue();
+        (await service.IsActiveAreaAsync(42, CancellationToken.None)).Should().BeFalse();
+    }
 }
diff --git a/Api.SeaHavenIndustries.Tests/VendorCompanyRosterServiceTests.cs b/Api.SeaHavenIndustries.Tests/VendorCompanyRosterServiceTests.cs
index 5991fd5..72b29db 100644
--- a/Api.SeaHavenIndustries.Tests/VendorCompanyRosterServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/VendorCompanyRosterServiceTests.cs
@@ -3,6 +3,7 @@ using FluentAssertions;
 using FluentValidation;
 using Microsoft.Extensions.DependencyInjection;
 using Moq;
+using System.Security.Claims;
 using SeaHaven.DataServices.Interfaces;
 using SeaHaven.DataServices.Models;
 using SeaHaven.Services.DTOs;
@@ -13,6 +14,13 @@ namespace Api.SeaHavenIndustries.Tests;
 
 public class VendorCompanyRosterServiceTests
 {
+    private static readonly ClaimsPrincipal Dispatcher = Principal("User");
+    private static readonly ClaimsPrincipal Admin = Principal("Admin");
+
+    private static ClaimsPrincipal Principal(string role) => new(new ClaimsIdentity(
+        new[] { new Claim(ClaimTypes.NameIdentifier, "42"), new Claim(ClaimTypes.Role, role) },
+        "Test"));
+
     private static VendorCompanyRosterService NewService(Mock<IVendorCompanyRosterDataService> data) => new(data.Object);
 
     private static VendorCompanyRosterReadModel SampleReadModel(int companyId = 7, params int[] technicianIds) => new()
@@ -48,7 +56,7 @@ public class VendorCompanyRosterServiceTests
         var data = new Mock<IVendorCompanyRosterDataService>();
         var dto = new CreateVendorRosterDTO { Name = "Acme" };
 
-        var act = () => NewService(data).CreateRosterAsync(dto, "42", CancellationToken.None);
+        var act = () => NewService(data).CreateRosterAsync(dto, "42", Dispatcher, CancellationToken.None);
 
         await act.Should().ThrowAsync<ValidationException>();
         data.Verify(x => x.CreateRosterAsync(It.IsAny<VendorCompanyRosterWriteModel>(), It.IsAny<CancellationToken>()), Times.Never);
@@ -60,7 +68,7 @@ public class VendorCompanyRosterServiceTests
         var data = new Mock<IVendorCompanyRosterDataService>();
         var dto = new CreateVendorRosterDTO { Name = "Acme", CompanyPhone = "not-a-phone" };
 
-        var act = () => NewService(data).CreateRosterAsync(dto, "42", CancellationToken.None);
+        var act = () => NewService(data).CreateRosterAsync(dto, "42", Dispatcher, CancellationToken.None);
 
         (await act.Should().ThrowAsync<ValidationException>())
             .Which.Errors.Should().Contain(error => error.PropertyName == nameof(CreateVendorRosterDTO.CompanyPhone));
@@ -78,7 +86,7 @@ public class VendorCompanyRosterServiceTests
             Technicians = new List<RosterTechnicianInputDTO> { new() { Id = 7, ContactName = "Riley" } }
         };
 
-        var act = () => NewService(data).CreateRosterAsync(dto, "42", CancellationToken.None);
+        var act = () => NewService(data).CreateRosterAsync(dto, "42", Dispatcher, CancellationToken.None);
 
         await act.Should().ThrowAsync<ValidationException>();
         data.Verify(x => x.CreateRosterAsync(It.IsAny<VendorCompanyRosterWriteModel>(), It.IsAny<CancellationToken>()), Times.Never);
@@ -98,7 +106,7 @@ public class VendorCompanyRosterServiceTests
             Name = "Acme",
             Email = "acme@example.com",
             Technicians = new List<RosterTechnicianInputDTO>()
-        }, "42", CancellationToken.None);
+        }, "42", Dispatcher, CancellationToken.None);
 
         captured.Should().NotBeNull();
         captured!.Technicians.Should().BeEmpty();
@@ -120,7 +128,7 @@ public class VendorCompanyRosterServiceTests
             Name = "Acme",
             Email = "acme@example.com",
             Notes = notes
-        }, "42", CancellationToken.None);
+        }, "42", Dispatcher, CancellationToken.None);
 
         captured!.Notes.Should().Be(notes);
     }
@@ -136,7 +144,7 @@ public class VendorCompanyRosterServiceTests
             Notes = new string('n', 501)
         };
 
-        var act = () => NewService(data).CreateRosterAsync(dto, "42", CancellationToken.None);
+        var act = () => NewService(data).CreateRosterAsync(dto, "42", Dispatcher, CancellationToken.None);
 
         (await act.Should().ThrowAsync<ValidationException>())
             .Which.Errors.Should().ContainSingle(error =>
@@ -163,7 +171,7 @@ public class VendorCompanyRosterServiceTests
             }
         };
 
-        var act = () => NewService(data).ReconcileRosterAsync(7, dto, "42", CancellationToken.None);
+        var act = () => NewService(data).ReconcileRosterAsync(7, dto, "42", Dispatcher, CancellationToken.None);
 
         await act.Should().ThrowAsync<ValidationException>();
         data.Verify(x => x.SaveRosterAsync(It.IsAny<VendorCompanyRosterWriteModel>(), It.IsAny<CancellationToken>()), Times.Never);
@@ -188,7 +196,7 @@ public class VendorCompanyRosterServiceTests
             }
         };
 
-        var act = () => NewService(data).ReconcileRosterAsync(7, dto, "42", CancellationToken.None);
+        var act = () => NewService(data).ReconcileRosterAsync(7, dto, "42", Dispatcher, CancellationToken.None);
 
         await act.Should().ThrowAsync<ValidationException>();
         data.Verify(x => x.SaveRosterAsync(It.IsAny<VendorCompanyRosterWriteModel>(), It.IsAny<CancellationToken>()), Times.Never);
@@ -205,7 +213,7 @@ public class VendorCompanyRosterServiceTests
             GoogleMapsUrl = "http://maps.google.com/acme"
         };
 
-        var act = () => NewService(data).CreateRosterAsync(dto, "42", CancellationToken.None);
+        var act = () => NewService(data).CreateRosterAsync(dto, "42", Dispatcher, CancellationToken.None);
 
         (await act.Should().ThrowAsync<ValidationException>())
             .Which.Errors.Should().Contain(e => e.PropertyName == nameof(CreateVendorRosterDTO.GoogleMapsUrl));
@@ -228,7 +236,7 @@ public class VendorCompanyRosterServiceTests
             {
                 new() { ContactName = "Riley", Phone = "+1 312 555 0100" }
             }
-        }, "42", CancellationToken.None);
+        }, "42", Dispatcher, CancellationToken.None);
 
         captured!.Technicians.Single().Phone.Should().Be("(312) 555-0100");
     }
@@ -247,7 +255,7 @@ public class VendorCompanyRosterServiceTests
             }
         };
 
-        var act = () => NewService(data).CreateRosterAsync(dto, "42", CancellationToken.None);
+        var act = () => NewService(data).CreateRosterAsync(dto, "42", Dispatcher, CancellationToken.None);
 
         (await act.Should().ThrowAsync<ValidationException>())
             .Which.Errors.Should().Contain(e => e.PropertyName.EndsWith(nameof(RosterTechnicianInputDTO.Phone)));
@@ -270,7 +278,7 @@ public class VendorCompanyRosterServiceTests
             Name = "Acme Co",
             Email = "acme@example.com",
             Technicians = new List<RosterTechnicianInputDTO> { new() { Id = 1, ContactName = "T" } }
-        }, "42", CancellationToken.None);
+        }, "42", Dispatcher, CancellationToken.None);
 
         captured.Should().NotBeNull();
         captured!.CompanyId.Should().Be(7);
@@ -294,7 +302,7 @@ public class VendorCompanyRosterServiceTests
             Name = "Acme",
             Email = "acme@example.com",
             Notes = notes
-        }, "42", CancellationToken.None);
+        }, "42", Dispatcher, CancellationToken.None);
 
         captured!.Notes.Should().Be(notes);
     }
@@ -311,7 +319,7 @@ public class VendorCompanyRosterServiceTests
             Notes = new string('n', 501)
         };
 
-        var act = () => NewService(data).ReconcileRosterAsync(7, dto, "42", CancellationToken.None);
+        var act = () => NewService(data).ReconcileRosterAsync(7, dto, "42", Dispatcher, CancellationToken.None);
 
         (await act.Should().ThrowAsync<ValidationException>())
             .Which.Errors.Should().ContainSingle(error =>
@@ -336,7 +344,7 @@ public class VendorCompanyRosterServiceTests
             Email = "acme@example.com"
         };
 
-        var act = () => NewService(data).ReconcileRosterAsync(7, dto, "42", CancellationToken.None);
+        var act = () => NewService(data).ReconcileRosterAsync(7, dto, "42", Dispatcher, CancellationToken.None);
 
         (await act.Should().ThrowAsync<ValidationException>())
             .Which.Errors.Should().Contain(e => e.PropertyName == nameof(ReconcileVendorRosterDTO.RowVersion));
@@ -354,7 +362,7 @@ public class VendorCompanyRosterServiceTests
             Email = "acme@example.com"
         };
 
-        var act = () => NewService(data).ReconcileRosterAsync(7, dto, "42", CancellationToken.None);
+        var act = () => NewService(data).ReconcileRosterAsync(7, dto, "42", Dispatcher, CancellationToken.None);
 
         (await act.Should().ThrowAsync<ValidationException>())
             .Which.Errors.Should().Contain(error => error.PropertyName == nameof(ReconcileVendorRosterDTO.RowVersion));
@@ -376,7 +384,7 @@ public class VendorCompanyRosterServiceTests
             Technicians = null!
         };
 
-        await NewService(data).CreateRosterAsync(dto, "42", CancellationToken.None);
+        await NewService(data).CreateRosterAsync(dto, "42", Dispatcher, CancellationToken.None);
 
         captured!.Technicians.Should().BeEmpty();
     }
@@ -397,7 +405,7 @@ public class VendorCompanyRosterServiceTests
             }
         };
 
-        var act = () => NewService(data).CreateRosterAsync(dto, "42", CancellationToken.None);
+        var act = () => NewService(data).CreateRosterAsync(dto, "42", Dispatcher, CancellationToken.None);
 
         await act.Should().ThrowAsync<ValidationException>();
         data.Verify(x => x.CreateRosterAsync(It.IsAny<VendorCompanyRosterWriteModel>(), It.IsAny<CancellationToken>()), Times.Never);
@@ -420,7 +428,7 @@ public class VendorCompanyRosterServiceTests
             {
                 new() { ContactName = "", Phone = "", PreferredContact = "Phone" }
             }
-        }, "42", CancellationToken.None);
+        }, "42", Dispatcher, CancellationToken.None);
 
         captured!.Technicians.Should().ContainSingle();
         captured.Technicians.Single().ContactName.Should().BeEmpty();
@@ -442,7 +450,7 @@ public class VendorCompanyRosterServiceTests
             Technicians = new List<RosterTechnicianInputDTO> { new() { Id = 1, ContactName = "T" } }
         };
 
-        var act = () => NewService(data).ReconcileRosterAsync(404, dto, "42", CancellationToken.None);
+        var act = () => NewService(data).ReconcileRosterAsync(404, dto, "42", Dispatcher, CancellationToken.None);
         await act.Should().ThrowAsync<ValidationException>();
     }
 
@@ -462,7 +470,7 @@ public class VendorCompanyRosterServiceTests
             Name = "Acme",
             Email = "acme@example.com",
             Technicians = new List<RosterTechnicianInputDTO> { new() { Id = 1, ContactName = "T" } }
-        }, "42", cts.Token);
+        }, "42", Dispatcher, cts.Token);
 
         data.Verify(x => x.SaveRosterAsync(It.IsAny<VendorCompanyRosterWriteModel>(), cts.Token), Times.Once);
     }
@@ -477,7 +485,7 @@ public class VendorCompanyRosterServiceTests
     public async Task AddTechnicians_WithoutAuthenticatedUser_Throws()
     {
         var data = new Mock<IVendorCompanyRosterDataService>();
-        var act = () => NewService(data).AddTechniciansAsync(7, AddDto(new RosterTechnicianInputDTO { ContactName = "T" }), "", CancellationToken.None);
+        var act = () => NewService(data).AddTechniciansAsync(7, AddDto(new RosterTechnicianInputDTO { ContactName = "T" }), "", Dispatcher, CancellationToken.None);
         await act.Should().ThrowAsync<UnauthorizedAccessException>();
         data.Verify(x => x.AddTechniciansAsync(It.IsAny<VendorCompanyRosterAddWriteModel>(), It.IsAny<CancellationToken>()), Times.Never);
     }
@@ -488,7 +496,7 @@ public class VendorCompanyRosterServiceTests
         var data = new Mock<IVendorCompanyRosterDataService>();
         var dto = AddDto(new RosterTechnicianInputDTO { Id = 999, ContactName = "Foreign" });
 
-        var act = () => NewService(data).AddTechniciansAsync(7, dto, "42", CancellationToken.None);
+        var act = () => NewService(data).AddTechniciansAsync(7, dto, "42", Dispatcher, CancellationToken.None);
 
         (await act.Should().ThrowAsync<ValidationException>())
             .Which.Errors.Should().Contain(e => e.PropertyName == nameof(AddTechniciansVendorRosterDTO.AddTechnicians));
@@ -501,7 +509,7 @@ public class VendorCompanyRosterServiceTests
         var data = new Mock<IVendorCompanyRosterDataService>();
         var dto = new AddTechniciansVendorRosterDTO { RowVersion = "AAAAAAAAD8I=" };
 
-        var act = () => NewService(data).AddTechniciansAsync(7, dto, "42", CancellationToken.None);
+        var act = () => NewService(data).AddTechniciansAsync(7, dto, "42", Dispatcher, CancellationToken.None);
 
         await act.Should().ThrowAsync<ValidationException>();
         data.Verify(x => x.AddTechniciansAsync(It.IsAny<VendorCompanyRosterAddWriteModel>(), It.IsAny<CancellationToken>()), Times.Never);
@@ -517,7 +525,7 @@ public class VendorCompanyRosterServiceTests
             AddTechnicians = new List<RosterTechnicianInputDTO> { new() { ContactName = "T" } }
         };
 
-        var act = () => NewService(data).AddTechniciansAsync(7, dto, "42", CancellationToken.None);
+        var act = () => NewService(data).AddTechniciansAsync(7, dto, "42", Dispatcher, CancellationToken.None);
 
         (await act.Should().ThrowAsync<ValidationException>())
             .Which.Errors.Should().Contain(e => e.PropertyName == nameof(AddTechniciansVendorRosterDTO.RowVersion));
@@ -530,7 +538,7 @@ public class VendorCompanyRosterServiceTests
         var data = new Mock<IVendorCompanyRosterDataService>();
         var dto = AddDto(new RosterTechnicianInputDTO { ContactName = "T", Phone = "555-1234" });
 
-        var act = () => NewService(data).AddTechniciansAsync(7, dto, "42", CancellationToken.None);
+        var act = () => NewService(data).AddTechniciansAsync(7, dto, "42", Dispatcher, CancellationToken.None);
 
         (await act.Should().ThrowAsync<ValidationException>())
             .Which.Errors.Should().Contain(e => e.PropertyName.EndsWith(nameof(RosterTechnicianInputDTO.Phone)));
@@ -560,7 +568,7 @@ public class VendorCompanyRosterServiceTests
             }
         };
 
-        await NewService(data).AddTechniciansAsync(7, dto, "42", CancellationToken.None);
+        await NewService(data).AddTechniciansAsync(7, dto, "42", Dispatcher, CancellationToken.None);
 
         captured.Should().NotBeNull();
         captured!.CompanyId.Should().Be(7);
@@ -590,7 +598,7 @@ public class VendorCompanyRosterServiceTests
         {
             RowVersion = "AAAAAAAAD8I=",
             CompanyFields = new VendorRosterCompanyFieldsDTO { Notes = notes }
-        }, "42", CancellationToken.None);
+        }, "42", Dispatcher, CancellationToken.None);
 
         captured!.CompanyFields!.Notes.Should().Be(notes);
     }
@@ -605,7 +613,7 @@ public class VendorCompanyRosterServiceTests
             CompanyFields = new VendorRosterCompanyFieldsDTO { Notes = new string('n', 501) }
         };
 
-        var act = () => NewService(data).AddTechniciansAsync(7, dto, "42", CancellationToken.None);
+        var act = () => NewService(data).AddTechniciansAsync(7, dto, "42", Dispatcher, CancellationToken.None);
 
         (await act.Should().ThrowAsync<ValidationException>())
             .Which.Errors.Should().ContainSingle(error =>
@@ -632,7 +640,7 @@ public class VendorCompanyRosterServiceTests
             CompanyFields = new VendorRosterCompanyFieldsDTO { CompanyPhone = "   ", Email = "" }
         };
 
-        await NewService(data).AddTechniciansAsync(7, dto, "42", CancellationToken.None);
+        await NewService(data).AddTechniciansAsync(7, dto, "42", Dispatcher, CancellationToken.None);
 
         // SH-250: every field is blank, so there is no company change to apply. Forwarding a
         // non-null write model made the data layer bump RowVersion and rewrite every
@@ -652,7 +660,7 @@ public class VendorCompanyRosterServiceTests
             CompanyFields = new VendorRosterCompanyFieldsDTO { CompanyPhone = "   ", Email = "" }
         };
 
-        var act = () => NewService(data).AddTechniciansAsync(7, dto, "42", CancellationToken.None);
+        var act = () => NewService(data).AddTechniciansAsync(7, dto, "42", Dispatcher, CancellationToken.None);
 
         await act.Should().ThrowAsync<ValidationException>();
         data.Verify(
@@ -676,7 +684,7 @@ public class VendorCompanyRosterServiceTests
             CompanyFields = new VendorRosterCompanyFieldsDTO { City = "Norfolk" }
         };
 
-        await NewService(data).AddTechniciansAsync(7, dto, "42", CancellationToken.None);
+        await NewService(data).AddTechniciansAsync(7, dto, "42", Dispatcher, CancellationToken.None);
 
         captured!.CompanyFields.Should().NotBeNull();
         captured.CompanyFields!.City.Should().Be("Norfolk");
@@ -690,8 +698,182 @@ public class VendorCompanyRosterServiceTests
             .ReturnsAsync(SampleReadModel(7, 1));
 
         using var cts = new CancellationTokenSource();
-        await NewService(data).AddTechniciansAsync(7, AddDto(new RosterTechnicianInputDTO { ContactName = "T" }), "42", cts.Token);
+        await NewService(data).AddTechniciansAsync(7, AddDto(new RosterTechnicianInputDTO { ContactName = "T" }), "42", Dispatcher, cts.Token);
 
         data.Verify(x => x.AddTechniciansAsync(It.IsAny<VendorCompanyRosterAddWriteModel>(), cts.Token), Times.Once);
     }
+
+    private static VendorCompanyRosterReadModel ReadModelWithArea(int? areaId)
+    {
+        var model = SampleReadModel(7, 1);
+        model.AreaId = areaId;
+        return model;
+    }
+
+    [Fact]
+    public async Task Create_NonAdminAssigningArea_IsForbiddenAndNotPersisted()
+    {
+        var data = new Mock<IVendorCompanyRosterDataService>();
+        var dto = new CreateVendorRosterDTO { Name = "Acme", Email = "acme@example.com", AreaId = 1 };
+
+        var act = () => NewService(data).CreateRosterAsync(dto, "42", Dispatcher, CancellationToken.None);
+
+        await act.Should().ThrowAsync<VendorAreaAssignmentForbiddenException>();
+        data.Verify(x => x.CreateRosterAsync(It.IsAny<VendorCompanyRosterWriteModel>(), It.IsAny<CancellationToken>()), Times.Never);
+    }
+
+    [Fact]
+    public async Task Create_AdminAssigningUnknownOrArchivedArea_ThrowsValidation()
+    {
+        var data = new Mock<IVendorCompanyRosterDataService>();
+        data.Setup(x => x.IsActiveAreaAsync(99, It.IsAny<CancellationToken>())).ReturnsAsync(false);
+        var dto = new CreateVendorRosterDTO { Name = "Acme", Email = "acme@example.com", AreaId = 99 };
+
+        var act = () => NewService(data).CreateRosterAsync(dto, "42", Admin, CancellationToken.None);
+
+        (await act.Should().ThrowAsync<ValidationException>())
+            .Which.Errors.Should().Contain(error => error.PropertyName == nameof(CreateVendorRosterDTO.AreaId));
+        data.Verify(x => x.CreateRosterAsync(It.IsAny<VendorCompanyRosterWriteModel>(), It.IsAny<CancellationToken>()), Times.Never);
+    }
+
+    [Fact]
+    public async Task Create_AdminAssigningActiveArea_PersistsAreaId()
+    {
+        using var cts = new CancellationTokenSource();
+        var data = new Mock<IVendorCompanyRosterDataService>();
+        data.Setup(x => x.IsActiveAreaAsync(2, cts.Token)).ReturnsAsync(true);
+        VendorCompanyRosterWriteModel? captured = null;
+        data.Setup(x => x.CreateRosterAsync(It.IsAny<VendorCompanyRosterWriteModel>(), It.IsAny<CancellationToken>()))
+            .Callback<VendorCompanyRosterWriteModel, CancellationToken>((model, _) => captured = model)
+            .ReturnsAsync(ReadModelWithArea(2));
+
+        var result = await NewService(data).CreateRosterAsync(
+            new CreateVendorRosterDTO { Name = "Acme", Email = "acme@example.com", AreaId = 2 },
+            "42",
+            Admin,
+            cts.Token);
+
+        captured!.AreaId.Should().Be(2);
+        result.AreaId.Should().Be(2);
+        data.Verify(x => x.IsActiveAreaAsync(2, cts.Token), Times.Once);
+    }
+
+    [Fact]
+    public async Task Reconcile_NonAdminChangingOrClearingArea_IsForbiddenAndNotPersisted()
+    {
+        var data = new Mock<IVendorCompanyRosterDataService>();
+        data.Setup(x => x.GetRosterAsync(null, 7, It.IsAny<CancellationToken>()))
+            .ReturnsAsync(ReadModelWithArea(1));
+
+        foreach (int? requested in new int?[] { 3, null })
+        {
+            var dto = new ReconcileVendorRosterDTO
+            {
+                RowVersion = "AAAAAAAAD8I=",
+                Name = "Acme",
+                Email = "acme@example.com",
+                AreaId = requested
+            };
+
+            var act = () => NewService(data).ReconcileRosterAsync(7, dto, "42", Dispatcher, CancellationToken.None);
+
+            await act.Should().ThrowAsync<VendorAreaAssignmentForbiddenException>();
+        }
+
+        data.Verify(x => x.SaveRosterAsync(It.IsAny<VendorCompanyRosterWriteModel>(), It.IsAny<CancellationToken>()), Times.Never);
+    }
+
+    [Fact]
+    public async Task Reconcile_NonAdminRoundTripOrOmittedArea_SavesOtherFields()
+    {
+        var data = new Mock<IVendorCompanyRosterDataService>();
+        data.Setup(x => x.GetRosterAsync(null, 7, It.IsAny<CancellationToken>()))
+            .ReturnsAsync(ReadModelWithArea(1));
+        var captured = new List<VendorCompanyRosterWriteModel>();
+        data.Setup(x => x.SaveRosterAsync(It.IsAny<VendorCompanyRosterWriteModel>(), It.IsAny<CancellationToken>()))
+            .Callback<VendorCompanyRosterWriteModel, CancellationToken>((model, _) => captured.Add(model))
+            .ReturnsAsync(ReadModelWithArea(1));
+
+        await NewService(data).ReconcileRosterAsync(7, new ReconcileVendorRosterDTO
+        {
+            RowVersion = "AAAAAAAAD8I=",
+            Name = "Acme Renamed",
+            Email = "acme@example.com",
+            AreaId = 1
+        }, "42", Dispatcher, CancellationToken.None);
+
+        await NewService(data).ReconcileRosterAsync(7, new ReconcileVendorRosterDTO
+        {
+            RowVersion = "AAAAAAAAD8I=",
+            Name = "Acme Renamed",
+            Email = "acme@example.com"
+        }, "42", Dispatcher, CancellationToken.None);
+
+        captured.Should().HaveCount(2);
+        captured[0].AreaIdProvided.Should().BeTrue();
+        captured[0].AreaId.Should().Be(1);
+        captured[1].AreaIdProvided.Should().BeFalse();
+    }
+
+    [Fact]
+    public async Task Reconcile_AdminClearsAreaToUnassigned()
+    {
+        var data = new Mock<IVendorCompanyRosterDataService>();
+        data.Setup(x => x.GetRosterAsync(null, 7, It.IsAny<CancellationToken>()))
+            .ReturnsAsync(ReadModelWithArea(1));
+        VendorCompanyRosterWriteModel? captured = null;
+        data.Setup(x => x.SaveRosterAsync(It.IsAny<VendorCompanyRosterWriteModel>(), It.IsAny<CancellationToken>()))
+            .Callback<VendorCompanyRosterWriteModel, CancellationToken>((model, _) => captured = model)
+            .ReturnsAsync(ReadModelWithArea(null));
+
+        await NewService(data).ReconcileRosterAsync(7, new ReconcileVendorRosterDTO
+        {
+            RowVersion = "AAAAAAAAD8I=",
+            Name = "Acme",
+            Email = "acme@example.com",
+            AreaId = null
+        }, "42", Admin, CancellationToken.None);
+
+        captured!.AreaIdProvided.Should().BeTrue();
+        captured.AreaId.Should().BeNull();
+        data.Verify(x => x.IsActiveAreaAsync(It.IsAny<int>(), It.IsAny<CancellationToken>()), Times.Never);
+    }
+
+    [Fact]
+    public async Task AddTechnicians_NonAdminAreaChange_IsForbidden()
+    {
+        var data = new Mock<IVendorCompanyRosterDataService>();
+        data.Setup(x => x.GetRosterAsync(null, 7, It.IsAny<CancellationToken>()))
+            .ReturnsAsync(ReadModelWithArea(null));
+        var dto = new AddTechniciansVendorRosterDTO
+        {
+            RowVersion = "AAAAAAAAD8I=",
+            CompanyFields = new VendorRosterCompanyFieldsDTO { AreaId = 2 }
+        };
+
+        var act = () => NewService(data).AddTechniciansAsync(7, dto, "42", Dispatcher, CancellationToken.None);
+
+        await act.Should().ThrowAsync<VendorAreaAssignmentForbiddenException>();
+        data.Verify(x => x.AddTechniciansAsync(It.IsAny<VendorCompanyRosterAddWriteModel>(), It.IsAny<CancellationToken>()), Times.Never);
+    }
+
+    [Fact]
+    public void ReconcileDto_DistinguishesOmittedAreaFromExplicitNull()
+    {
+        var omitted = System.Text.Json.JsonSerializer.Deserialize<ReconcileVendorRosterDTO>(
+            """{"rowVersion":"AAAAAAAAD8I=","name":"Acme"}""",
+            new System.Text.Json.JsonSerializerOptions(System.Text.Json.JsonSerializerDefaults.Web))!;
+        var cleared = System.Text.Json.JsonSerializer.Deserialize<ReconcileVendorRosterDTO>(
+            """{"rowVersion":"AAAAAAAAD8I=","name":"Acme","areaId":null}""",
+            new System.Text.Json.JsonSerializerOptions(System.Text.Json.JsonSerializerDefaults.Web))!;
+        var assigned = System.Text.Json.JsonSerializer.Deserialize<ReconcileVendorRosterDTO>(
+            """{"rowVersion":"AAAAAAAAD8I=","name":"Acme","areaId":3}""",
+            new System.Text.Json.JsonSerializerOptions(System.Text.Json.JsonSerializerDefaults.Web))!;
+
+        omitted.AreaIdProvided.Should().BeFalse();
+        cleared.AreaIdProvided.Should().BeTrue();
+        cleared.AreaId.Should().BeNull();
+        assigned.AreaIdProvided.Should().BeTrue();
+        assigned.AreaId.Should().Be(3);
+    }
 }
diff --git a/Api.SeaHavenIndustries.Tests/VendorControllerTests.cs b/Api.SeaHavenIndustries.Tests/VendorControllerTests.cs
index 99b7d1d..e0d34e0 100644
--- a/Api.SeaHavenIndustries.Tests/VendorControllerTests.cs
+++ b/Api.SeaHavenIndustries.Tests/VendorControllerTests.cs
@@ -72,6 +72,7 @@ public class VendorControllerTests
             It.IsAny<IReadOnlyCollection<string>?>(),
             It.IsAny<IReadOnlyCollection<string>?>(),
             It.IsAny<IReadOnlyCollection<string>?>(),
+            It.IsAny<IReadOnlyCollection<string>?>(),
             It.IsAny<CancellationToken>()), Times.Never);
     }
 
@@ -155,6 +156,7 @@ public class VendorControllerTests
                 It.IsAny<IReadOnlyCollection<string>?>(),
                 It.IsAny<IReadOnlyCollection<string>?>(),
                 It.IsAny<IReadOnlyCollection<string>?>(),
+                It.IsAny<IReadOnlyCollection<string>?>(),
                 token))
             .ReturnsAsync(new PagedResult<VendorDirectoryItemDTO>
             {
@@ -203,6 +205,7 @@ public class VendorControllerTests
             It.IsAny<IReadOnlyCollection<string>?>(),
             It.IsAny<IReadOnlyCollection<string>?>(),
             It.IsAny<IReadOnlyCollection<string>?>(),
+            It.IsAny<IReadOnlyCollection<string>?>(),
             token), Times.Once);
         service.Verify(x => x.GetVendorTechnicianDirectoryPagedAsync(
             It.IsAny<int>(),
diff --git a/Api.SeaHavenIndustries.Tests/VendorDataServiceTests.cs b/Api.SeaHavenIndustries.Tests/VendorDataServiceTests.cs
index 7e7716a..4fc5ee1 100644
--- a/Api.SeaHavenIndustries.Tests/VendorDataServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/VendorDataServiceTests.cs
@@ -470,12 +470,14 @@ public class VendorDataServiceTests
             search: "alice",
             trades: new[] { "Plumbing" },
             locations: new[] { "Chicago, IL" },
-            jobBuckets: new[] { "under-50" }).ToQueryString();
+            jobBuckets: new[] { "under-50" },
+            areaFilter: new VendorAreaFilter { AreaIds = new[] { 1, 2 }, IncludeUnassigned = true }).ToQueryString();
 
         sql.Should().Contain("GROUP BY");
         sql.Should().Contain("LEFT JOIN");
         sql.Should().Contain("TradeSpecialties");
         sql.Should().Contain("TotalJobs");
+        sql.Should().Contain("AreaId");
         Regex.IsMatch(sql, @"SUM\s*\(\s*\(\s*SELECT", RegexOptions.IgnoreCase)
             .Should().BeFalse("company totals must sum pre-aggregated scalar job counts");
     }
@@ -1044,4 +1046,69 @@ public class VendorDataServiceTests
         sql.Should().Contain("SELECT");
         sql.Should().Contain("VendorCompanies");
     }
+
+    [Fact]
+    public async Task GetCompanyDirectoryPagedAsync_AreaFilterOrsWithinFacetAndUnassignedIncludesLegacyRows()
+    {
+        await using var context = NewContext();
+        var east = new Area { Id = 1, Name = "East", NormalizedName = "east" };
+        var west = new Area { Id = 3, Name = "West", NormalizedName = "west" };
+        context.Areas.AddRange(east, west);
+        var eastCo = new VendorCompany { Name = "East Co", NormalizedName = "east co", Area = east };
+        var westCo = new VendorCompany { Name = "West Co", NormalizedName = "west co", Area = west };
+        var unassignedCo = new VendorCompany { Name = "Unassigned Co", NormalizedName = "unassigned co" };
+        var eastOnly = new VendorCompany { Name = "East Only", NormalizedName = "east only", Area = east };
+        context.VendorCompanies.AddRange(eastCo, westCo, unassignedCo, eastOnly);
+        context.Vendors.AddRange(
+            new Vendor { Company = eastCo, CompanyName = "East Co", ContactName = "E", City = "Boston", State = "MA", IsActive = true, IsDeleted = false },
+            new Vendor { Company = westCo, CompanyName = "West Co", ContactName = "W", IsActive = true, IsDeleted = false },
+            new Vendor { Company = unassignedCo, CompanyName = "Unassigned Co", ContactName = "U", IsActive = true, IsDeleted = false },
+            new Vendor { CompanyName = "Legacy Co", ContactName = "L", IsActive = true, IsDeleted = false });
+        await context.SaveChangesAsync();
+        var service = new VendorDataService(context);
+
+        var eastResult = await service.GetCompanyDirectoryPagedAsync(
+            1, 50, isActive: true, areaFilter: new VendorAreaFilter { AreaIds = new[] { east.Id } });
+        eastResult.Items.Select(item => item.CompanyName)
+            .Should().BeEquivalentTo("East Co", "East Only");
+        eastResult.TotalCount.Should().Be(2);
+        var eastRow = eastResult.Items.Single(item => item.CompanyName == "East Co");
+        eastRow.AreaId.Should().Be(east.Id);
+        eastRow.AreaName.Should().Be("East");
+        eastResult.Items.Single(item => item.CompanyName == "East Only").AreaName.Should().Be("East");
+
+        var eastOrUnassigned = await service.GetCompanyDirectoryPagedAsync(
+            1, 50, isActive: true,
+            areaFilter: new VendorAreaFilter { AreaIds = new[] { east.Id }, IncludeUnassigned = true });
+        eastOrUnassigned.Items.Select(item => item.CompanyName)
+            .Should().BeEquivalentTo("East Co", "East Only", "Unassigned Co", "Legacy Co");
+        eastOrUnassigned.Items.Single(item => item.CompanyName == "Legacy Co").AreaId.Should().BeNull();
+
+        var eastAndBoston = await service.GetCompanyDirectoryPagedAsync(
+            1, 50, isActive: true, locations: new[] { "Boston, MA" },
+            areaFilter: new VendorAreaFilter { AreaIds = new[] { east.Id } });
+        eastAndBoston.Items.Should().ContainSingle(item => item.CompanyName == "East Co");
+
+        var matchesNobody = await service.GetCompanyDirectoryPagedAsync(
+            1, 50, isActive: true, areaFilter: new VendorAreaFilter());
+        matchesNobody.TotalCount.Should().Be(0);
+        matchesNobody.Items.Should().BeEmpty();
+
+        var unfiltered = await service.GetCompanyDirectoryPagedAsync(1, 50, isActive: true);
+        unfiltered.TotalCount.Should().Be(5);
+    }
+
+    [Fact]
+    public async Task GetActiveAreasAsync_ExcludesArchivedAreas()
+    {
+        await using var context = NewContext();
+        context.Areas.AddRange(
+            new Area { Id = 1, Name = "East", NormalizedName = "east" },
+            new Area { Id = 4, Name = "California", NormalizedName = "california", IsActive = false });
+        await context.SaveChangesAsync();
+
+        var areas = await new VendorDataService(context).GetActiveAreasAsync(CancellationToken.None);
+
+        areas.Select(area => area.Name).Should().Equal("East");
+    }
 }
diff --git a/Api.SeaHavenIndustries.Tests/VendorServiceTests.cs b/Api.SeaHavenIndustries.Tests/VendorServiceTests.cs
index a8e996d..48351df 100644
--- a/Api.SeaHavenIndustries.Tests/VendorServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/VendorServiceTests.cs
@@ -166,6 +166,7 @@ public class VendorServiceTests
                 It.IsAny<IReadOnlyCollection<string>?>(),
                 It.IsAny<IReadOnlyCollection<string>?>(),
                 It.IsAny<IReadOnlyCollection<string>?>(),
+                It.IsAny<VendorAreaFilter?>(),
                 token))
             .ReturnsAsync((new[]
             {
@@ -212,6 +213,7 @@ public class VendorServiceTests
             It.IsAny<IReadOnlyCollection<string>?>(),
             It.IsAny<IReadOnlyCollection<string>?>(),
             It.IsAny<IReadOnlyCollection<string>?>(),
+            It.IsAny<VendorAreaFilter?>(),
             token), Times.Once);
     }
 
@@ -228,6 +230,7 @@ public class VendorServiceTests
                 It.IsAny<IReadOnlyCollection<string>?>(),
                 It.IsAny<IReadOnlyCollection<string>?>(),
                 It.IsAny<IReadOnlyCollection<string>?>(),
+                It.IsAny<VendorAreaFilter?>(),
                 It.IsAny<CancellationToken>()))
             .ReturnsAsync((new List<VendorCompanyGroup>(), 0));
 
@@ -756,6 +759,8 @@ public class VendorServiceTests
             });
         data.Setup(x => x.GetActiveTradesAsync(It.IsAny<CancellationToken>()))
             .ReturnsAsync(new List<Trade>());
+        data.Setup(x => x.GetActiveAreasAsync(It.IsAny<CancellationToken>()))
+            .ReturnsAsync(new List<Area>());
 
         var facets = await NewService(data).GetFacetsAsync(true, CancellationToken.None);
 
@@ -794,6 +799,8 @@ public class VendorServiceTests
             });
         data.Setup(x => x.GetActiveTradesAsync(It.IsAny<CancellationToken>()))
             .ReturnsAsync(new List<Trade>());
+        data.Setup(x => x.GetActiveAreasAsync(It.IsAny<CancellationToken>()))
+            .ReturnsAsync(new List<Area>());
 
         var facets = await NewService(data).GetFacetsAsync(null, CancellationToken.None);
 
@@ -822,6 +829,8 @@ public class VendorServiceTests
             });
         data.Setup(x => x.GetActiveTradesAsync(It.IsAny<CancellationToken>()))
             .ReturnsAsync(new List<Trade>());
+        data.Setup(x => x.GetActiveAreasAsync(It.IsAny<CancellationToken>()))
+            .ReturnsAsync(new List<Area>());
 
         var facets = await NewService(data).GetFacetsAsync(null, CancellationToken.None);
 
@@ -849,6 +858,8 @@ public class VendorServiceTests
                     SortOrder = index + 1
                 })
                 .ToList());
+        data.Setup(x => x.GetActiveAreasAsync(It.IsAny<CancellationToken>()))
+            .ReturnsAsync(new List<Area>());
 
         var facets = await NewService(data).GetFacetsAsync(true, cts.Token);
 
@@ -898,4 +909,96 @@ public class VendorServiceTests
             TradeCatalog.CanonicalTrades,
             opts => opts.WithStrictOrdering());
     }
+
+    private static Mock<IVendorDataService> DirectoryDataWithAreas(Action<VendorAreaFilter?> capture)
+    {
+        var data = new Mock<IVendorDataService>();
+        data.Setup(x => x.GetActiveAreasAsync(It.IsAny<CancellationToken>()))
+            .ReturnsAsync(new List<Area>
+            {
+                new() { Id = 1, Name = "East", NormalizedName = "east" },
+                new() { Id = 3, Name = "West", NormalizedName = "west" }
+            });
+        data.Setup(x => x.GetCompanyDirectoryPagedAsync(
+                It.IsAny<int>(),
+                It.IsAny<int>(),
+                It.IsAny<string?>(),
+                It.IsAny<bool?>(),
+                It.IsAny<IReadOnlyCollection<string>?>(),
+                It.IsAny<IReadOnlyCollection<string>?>(),
+                It.IsAny<IReadOnlyCollection<string>?>(),
+                It.IsAny<IReadOnlyCollection<string>?>(),
+                It.IsAny<VendorAreaFilter?>(),
+                It.IsAny<CancellationToken>()))
+            .Callback<int, int, string?, bool?, IReadOnlyCollection<string>?, IReadOnlyCollection<string>?, IReadOnlyCollection<string>?, IReadOnlyCollection<string>?, VendorAreaFilter?, CancellationToken>(
+                (_, _, _, _, _, _, _, _, filter, _) => capture(filter))
+            .ReturnsAsync((new List<VendorCompanyGroup>(), 0));
+        return data;
+    }
+
+    [Fact]
+    public async Task GetVendorCompanyDirectoryPaged_ResolvesAreaIdsAndUnassignedSentinel()
+    {
+        VendorAreaFilter? captured = null;
+        var data = DirectoryDataWithAreas(filter => captured = filter);
+
+        await NewService(data).GetVendorCompanyDirectoryPagedAsync(
+            1, 10, areas: new[] { " 1 ", "__unassigned__", "", "1" });
+
+        captured.Should().NotBeNull();
+        captured!.AreaIds.Should().Equal(1);
+        captured.IncludeUnassigned.Should().BeTrue();
+    }
+
+    [Fact]
+    public async Task GetVendorCompanyDirectoryPaged_UnknownArchivedOrLabelAreaValuesMatchNobody()
+    {
+        VendorAreaFilter? captured = null;
+        var data = DirectoryDataWithAreas(filter => captured = filter);
+
+        // 4 is not in the active catalogue (unknown or archived); "West" is a label.
+        var result = await NewService(data).GetVendorCompanyDirectoryPagedAsync(
+            1, 10, areas: new[] { "4", "West", "-3" });
+
+        captured.Should().NotBeNull();
+        captured!.AreaIds.Should().BeEmpty();
+        captured.IncludeUnassigned.Should().BeFalse();
+        result.Items.Should().BeEmpty();
+    }
+
+    [Fact]
+    public async Task GetVendorCompanyDirectoryPaged_BlankAreaValuesApplyNoAreaFilter()
+    {
+        VendorAreaFilter? captured = new();
+        var data = DirectoryDataWithAreas(filter => captured = filter);
+
+        await NewService(data).GetVendorCompanyDirectoryPagedAsync(1, 10, areas: new[] { " ", "" });
+
+        captured.Should().BeNull();
+        data.Verify(x => x.GetActiveAreasAsync(It.IsAny<CancellationToken>()), Times.Never);
+    }
+
+    [Fact]
+    public async Task GetFacetsAsync_AreasComeFromActiveCatalogueOrderedByName()
+    {
+        using var cts = new CancellationTokenSource();
+        var data = new Mock<IVendorDataService>();
+        data.Setup(x => x.GetCompaniesForFacetsAsync(null, It.IsAny<CancellationToken>()))
+            .ReturnsAsync(new List<VendorCompany>());
+        data.Setup(x => x.GetActiveTradesAsync(It.IsAny<CancellationToken>()))
+            .ReturnsAsync(new List<Trade>());
+        data.Setup(x => x.GetActiveAreasAsync(cts.Token))
+            .ReturnsAsync(new List<Area>
+            {
+                new() { Id = 3, Name = "West", NormalizedName = "west" },
+                new() { Id = 1, Name = "East", NormalizedName = "east" },
+                new() { Id = 4, Name = "california", NormalizedName = "california" }
+            });
+
+        var facets = await NewService(data).GetFacetsAsync(null, cts.Token);
+
+        facets.Areas.Select(area => (area.Id, area.Name)).Should().Equal(
+            (4, "california"), (1, "East"), (3, "West"));
+        data.Verify(x => x.GetActiveAreasAsync(cts.Token), Times.Once);
+    }
 }
diff --git a/Api.SeaHavenIndustries/Controllers/VendorCompanyRosterController.cs b/Api.SeaHavenIndustries/Controllers/VendorCompanyRosterController.cs
index fa5e4fa..1930fe9 100644
--- a/Api.SeaHavenIndustries/Controllers/VendorCompanyRosterController.cs
+++ b/Api.SeaHavenIndustries/Controllers/VendorCompanyRosterController.cs
@@ -2,6 +2,7 @@ using Api.SeaHavenIndustries.Helper;
 using Data.SeaHavenIndustries;
 using FluentValidation;
 using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Http;
 using Microsoft.AspNetCore.Mvc;
 using Microsoft.EntityFrameworkCore;
 using Microsoft.Extensions.Logging;
@@ -70,7 +71,7 @@ namespace Api.SeaHavenIndustries.Controllers
 
             try
             {
-                var roster = await _rosterService.CreateRosterAsync(model, userId, cancellationToken);
+                var roster = await _rosterService.CreateRosterAsync(model, userId, User, cancellationToken);
                 return Ok(roster);
             }
             catch (ValidationException vex)
@@ -82,6 +83,12 @@ namespace Api.SeaHavenIndustries.Controllers
             {
                 return Unauthorized(new Response { Status = "Error", Message = "User not authenticated" });
             }
+            catch (VendorAreaAssignmentForbiddenException)
+            {
+                return StatusCode(
+                    StatusCodes.Status403Forbidden,
+                    new Response { Status = "Error", Message = "Only administrators can assign a vendor company Area." });
+            }
             catch (VendorRosterDuplicateNameException dup)
             {
                 return Conflict(new
@@ -109,7 +116,7 @@ namespace Api.SeaHavenIndustries.Controllers
 
             try
             {
-                var roster = await _rosterService.ReconcileRosterAsync(companyId, model, userId, cancellationToken);
+                var roster = await _rosterService.ReconcileRosterAsync(companyId, model, userId, User, cancellationToken);
                 return Ok(roster);
             }
             catch (ValidationException vex)
@@ -121,6 +128,12 @@ namespace Api.SeaHavenIndustries.Controllers
             {
                 return Unauthorized(new Response { Status = "Error", Message = "User not authenticated" });
             }
+            catch (VendorAreaAssignmentForbiddenException)
+            {
+                return StatusCode(
+                    StatusCodes.Status403Forbidden,
+                    new Response { Status = "Error", Message = "Only administrators can assign a vendor company Area." });
+            }
             catch (KeyNotFoundException)
             {
                 return NotFound(new Response { Status = "Error", Message = "Vendor company not found" });
@@ -164,7 +177,7 @@ namespace Api.SeaHavenIndustries.Controllers
 
             try
             {
-                var roster = await _rosterService.AddTechniciansAsync(companyId, model, userId, cancellationToken);
+                var roster = await _rosterService.AddTechniciansAsync(companyId, model, userId, User, cancellationToken);
                 return Ok(roster);
             }
             catch (ValidationException vex)
@@ -176,6 +189,12 @@ namespace Api.SeaHavenIndustries.Controllers
             {
                 return Unauthorized(new Response { Status = "Error", Message = "User not authenticated" });
             }
+            catch (VendorAreaAssignmentForbiddenException)
+            {
+                return StatusCode(
+                    StatusCodes.Status403Forbidden,
+                    new Response { Status = "Error", Message = "Only administrators can assign a vendor company Area." });
+            }
             catch (KeyNotFoundException)
             {
                 return NotFound(new Response { Status = "Error", Message = "Vendor company not found" });
diff --git a/Api.SeaHavenIndustries/Controllers/VendorController.cs b/Api.SeaHavenIndustries/Controllers/VendorController.cs
index fc42b88..2db1eba 100644
--- a/Api.SeaHavenIndustries/Controllers/VendorController.cs
+++ b/Api.SeaHavenIndustries/Controllers/VendorController.cs
@@ -97,6 +97,7 @@ namespace Api.SeaHavenIndustries.Controllers
             [FromQuery] string[]? trades = null,
             [FromQuery] string[]? locations = null,
             [FromQuery] string[]? jobBuckets = null,
+            [FromQuery] string[]? areas = null,
             CancellationToken cancellationToken = default)
         {
             var pagedResult = await _vendorService.GetVendorCompanyDirectoryPagedAsync(
@@ -108,6 +109,7 @@ namespace Api.SeaHavenIndustries.Controllers
                 trades,
                 locations,
                 jobBuckets,
+                areas,
                 cancellationToken);
 
             var data = pagedResult.Items.Select(v => new
@@ -129,6 +131,8 @@ namespace Api.SeaHavenIndustries.Controllers
                 v.Notes,
                 v.IsActive,
                 v.TotalJobs,
+                v.AreaId,
+                v.AreaName,
                 Technicians = v.Technicians.Select(t => new
                 {
                     t.Id,
diff --git a/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs b/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs
index a5256dc..c8ac67b 100644
--- a/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs
+++ b/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs
@@ -206,6 +206,25 @@ namespace Data.SeaHavenIndustries
             builder.Entity<Trade>()
                 .HasIndex(t => t.NormalizedName)
                 .IsUnique();
+
+            // SH-278 Area catalogue: bounded names so the unique key is indexable.
+            builder.Entity<Area>()
+                .Property(a => a.Name)
+                .HasMaxLength(128);
+
+            builder.Entity<Area>()
+                .Property(a => a.NormalizedName)
+                .HasMaxLength(128);
+
+            builder.Entity<Area>()
+                .HasIndex(a => a.NormalizedName)
+                .IsUnique();
+
+            builder.Entity<VendorCompany>()
+                .HasOne(c => c.Area)
+                .WithMany()
+                .HasForeignKey(c => c.AreaId)
+                .OnDelete(DeleteBehavior.Restrict);
         }
         public DbSet<Category> Categories { get; set; }
         public DbSet<Locations> Locations { get; set; }
@@ -228,6 +247,7 @@ namespace Data.SeaHavenIndustries
         public DbSet<WorkOrderExternalReceipt> WorkOrderExternalReceipts { get; set; }
         public DbSet<DropdownOption> DropdownOptions { get; set; }
         public DbSet<Trade> Trades { get; set; }
+        public DbSet<Area> Areas { get; set; }
         public DbSet<Vendor> Vendors { get; set; }
         public DbSet<VendorCompany> VendorCompanies { get; set; }
         public DbSet<VendorAuditLog> VendorAuditLogs { get; set; }
diff --git a/Data.SeaHavenIndustries/Migrations/20260916140128_SH278_VendorCompanyArea.Designer.cs b/Data.SeaHavenIndustries/Migrations/20260916140128_SH278_VendorCompanyArea.Designer.cs
new file mode 100644
index 0000000..2e442c7
--- /dev/null
+++ b/Data.SeaHavenIndustries/Migrations/20260916140128_SH278_VendorCompanyArea.Designer.cs
@@ -0,0 +1,3977 @@
+// <auto-generated />
+using System;
+using Data.SeaHavenIndustries;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Metadata;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+
+#nullable disable
+
+namespace Data.SeaHavenIndustries.Migrations
+{
+    [DbContext(typeof(ApplicationDbContext))]
+    [Migration("20260916140128_SH278_VendorCompanyArea")]
+    partial class SH278_VendorCompanyArea
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasAnnotation("ProductVersion", "8.0.8")
+                .HasAnnotation("Relational:MaxIdentifierLength", 128);
+
+            SqlServerModelBuilderExtensions.UseIdentityColumns(modelBuilder);
+
+            modelBuilder.HasSequence("WorkOrderInternalNumberSequence");
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Accounts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("CurrencyCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Importance")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("IndustryId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("OwnerEmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Phone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PrivacySetting")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ServiceInstructions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Tags")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("TerritoryId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("TimeZone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Type")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Website")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Accounts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Addresses", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AddressType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Country")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("County")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("ContactId");
+
+                    b.ToTable("Addresses");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int>("AccessFailedCount")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Color")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ConcurrencyStamp")
+                        .IsConcurrencyToken()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Contact")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DeletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<bool>("EmailConfirmed")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("FirstName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Initials")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("LastName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Locations")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("LockoutEnabled")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTimeOffset?>("LockoutEnd")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("NormalizedEmail")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("NormalizedUserName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("PasswordHash")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("PhoneNumberConfirmed")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("SecurityStamp")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("TwoFactorEnabled")
+                        .HasColumnType("bit");
+
+                    b.Property<int?>("Type")
+                        .HasColumnType("int");
+
+                    b.Property<string>("UniqueName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserImage")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("NormalizedEmail")
+                        .HasDatabaseName("EmailIndex");
+
+                    b.HasIndex("NormalizedUserName")
+                        .IsUnique()
+                        .HasDatabaseName("UserNameIndex")
+                        .HasFilter("[NormalizedUserName] IS NOT NULL");
+
+                    b.ToTable("AspNetUsers", (string)null);
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Area", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("Areas");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("AssetCode")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Assets");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Category", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Categories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Comments", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CommentType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Commenter")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Commenttext")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Documents")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalCommentId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("ExternalSourceEmailS3Key")
+                        .HasMaxLength(2048)
+                        .HasColumnType("nvarchar(2048)");
+
+                    b.Property<DateTimeOffset?>("ExternalUpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalVersionHash")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RecordType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int?>("WorkerOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("UserId");
+
+                    b.HasIndex("WorkerOrderId");
+
+                    b.ToTable("Comments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.CompletionDocTemplate", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ServiceKey")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("TemplateUrl")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ServiceKey", "IsActive");
+
+                    b.ToTable("CompletionDocTemplates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ContactDetails", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DateOfBirth")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Gender")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PrivacySetting")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Tags")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Territory")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.ToTable("ContactDetails");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ContactType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FirstName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LastName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("MiddleName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Owner")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("SiteContactOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Title")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Contacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Department", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Departments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AcceptToken")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("AcknowledgedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CommercialStatusUpdatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CompletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DispatchNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DispatchedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("EmailSent")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("EstimatedArrivalAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("EtaManualOverride")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("InvoiceNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("InvoiceStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<decimal?>("NTEAmount")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<string>("PONumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PaymentStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ReplyToAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<DateTime?>("ScheduledDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TechPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("VendorNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<DateTime?>("VerifiedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("VerifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("Dispatches");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchChecklistItem", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CompletedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("CompletedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool>("IsCompleted")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ItemText")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("DispatchChecklistItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchSignoff", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Signature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignatureMethod")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("SignedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("SignoffType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.ToTable("DispatchSignoffs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchUpliftRequest", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<decimal?>("CurrentNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<DateTime?>("DecidedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DecidedByUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DecisionNote")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("EscalatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("EvidenceDocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("ExpiresAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("InitialNotificationSentAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("NotificationError")
+                        .HasMaxLength(500)
+                        .HasColumnType("nvarchar(500)");
+
+                    b.Property<string>("NotificationStatus")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<string>("RequestKey")
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<string>("RequestedByVendorName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<decimal>("RequestedNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<int>("RequiredTier")
+                        .HasColumnType("int");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<string>("Status")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<string>("VendorReason")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId")
+                        .IsUnique()
+                        .HasFilter("[Status] IN ('Pending', 'ChangesRequested')");
+
+                    b.HasIndex("EvidenceDocumentId");
+
+                    b.HasIndex("DispatchId", "RequestKey")
+                        .IsUnique()
+                        .HasFilter("[RequestKey] IS NOT NULL");
+
+                    b.ToTable("DispatchUpliftRequests");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchWorkOrder", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("DispatchWorkOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DropdownOption", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Category")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ParentValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Value")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("DropdownOptions");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("CanChangeProviderNumber")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ConfirmUserName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DateOfBirth")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DepartmentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("EmployeeNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FirstName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Gender")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("HireDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<int?>("JobTitleId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("LastLogin")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LastName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("MiddleName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("PermissionGroupId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("RegionId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("SMSAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TimeZone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Website")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DepartmentId");
+
+                    b.HasIndex("JobTitleId");
+
+                    b.HasIndex("RegionId");
+
+                    b.ToTable("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeAddress", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CountryCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CountyId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("StateCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Street")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("StreetLineTwo")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId")
+                        .IsUnique();
+
+                    b.ToTable("EmployeeAddresses");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeEmail", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<int?>("EmailTypeId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsPrimary")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.ToTable("EmployeeEmails");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeePhone", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Extension")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsPrimary")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Number")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("PhoneTypeId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.ToTable("EmployeePhones");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Events", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("AllDay")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("EndDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("EndTime")
+                        .HasMaxLength(10)
+                        .HasColumnType("nvarchar(10)");
+
+                    b.Property<string>("EventColor")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Location")
+                        .HasMaxLength(150)
+                        .HasColumnType("nvarchar(150)");
+
+                    b.Property<int?>("RecordID")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RecordName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("RecordTargetType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("ReminderMinutes")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime>("StartDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("StartTime")
+                        .HasMaxLength(10)
+                        .HasColumnType("nvarchar(10)");
+
+                    b.Property<string>("Title")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Events");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.FollowUps", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Reason")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("ScheduleDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<TimeSpan>("ScheduleStartTime")
+                        .HasColumnType("time");
+
+                    b.Property<string>("Status")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.HasIndex("LocationId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("FollowUps");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ForgetPasswordCode", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Code")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Email")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("ForgetPasswordCodes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.JobTitle", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("JobTitles");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalLocationId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Latitude")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Longitude")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Title")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.ToTable("Locations");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.PMSchedules", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AssetId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Frequency")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("StartDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AssetId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("PMSchedules");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BillingAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("Date")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ProjectName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("QuotId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ShippingAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("Quotes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.QuotesLineItems", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Descriptions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<decimal?>("Lineitem")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<int?>("LineitemNumber")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("QuoteId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("QuoteId");
+
+                    b.ToTable("QuotesLines");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Region", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Regions");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.SitePreferredVendor", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Trade")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("UpdatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("LocationId", "VendorId")
+                        .IsUnique()
+                        .HasFilter("[Trade] IS NULL");
+
+                    b.HasIndex("LocationId", "VendorId", "Trade")
+                        .IsUnique()
+                        .HasFilter("[Trade] IS NOT NULL");
+
+                    b.ToTable("SitePreferredVendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplate", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("TaskListTemplates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplateItem", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ItemText")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<int>("TaskListTemplateId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("TaskListTemplateId");
+
+                    b.ToTable("TaskListTemplateItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Template", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AfterPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AfterPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AssignTo")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DueDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Priority")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffSignature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderTitle")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AssignTo");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Templates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Trade", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("Trades");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AvailabilityStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("AvailabilityUpdatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CompanyId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CompanyName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CompanyPhone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ContactName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("GoogleMapsUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Phone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PreferredContact")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TradeSpecialties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CompanyId");
+
+                    b.ToTable("Vendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAccessToken", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime>("ExpiresAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime>("IssuedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("LastUsedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("RevokedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Token")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Token")
+                        .IsUnique();
+
+                    b.HasIndex("VendorId");
+
+                    b.ToTable("VendorAccessTokens");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAuditLog", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Actor")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("FieldName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NewValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("OldValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.ToTable("VendorAuditLogs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("AreaId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CompanyPhone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("GoogleMapsUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AreaId");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("VendorCompanies");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompletionDocument", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ContentType")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("OriginalFileName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Purpose")
+                        .IsRequired()
+                        .HasMaxLength(30)
+                        .HasColumnType("nvarchar(30)");
+
+                    b.Property<string>("RejectionReason")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ReplacesDocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ReviewStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ReviewedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ScanStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ScannedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<long>("SizeBytes")
+                        .HasColumnType("bigint");
+
+                    b.Property<string>("StoredFileName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("Version")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("VendorCompletionDocuments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("AdditionalContacts")
+                        .HasMaxLength(4000)
+                        .HasColumnType("nvarchar(4000)");
+
+                    b.Property<string>("AfterPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AfterPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateOnly?>("AssignDate")
+                        .HasColumnType("date");
+
+                    b.Property<string>("AssignTo")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("AvetaRequired")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("AvettaTask")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Building")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("CarriedOver")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CompletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Customer")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DateReported")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("DocStatus")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("DueDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ExternalAssignedTo")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<DateTimeOffset?>("ExternalLastOccurredAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalRecordType")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset?>("ExternalUpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalVersionHash")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("ExternalWorkOrderId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ExtraServices")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<string>("FlagColor")
+                        .HasMaxLength(7)
+                        .HasColumnType("nvarchar(7)");
+
+                    b.Property<string>("FrozenCompany")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FrozenPoc")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FrozenSite")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("InternalWONumber")
+                        .HasMaxLength(11)
+                        .HasColumnType("nvarchar(11)");
+
+                    b.Property<bool>("IsAddOn")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LegacyStatus")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("LifecycleStatus")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("OperationalFlags")
+                        .HasColumnType("int");
+
+                    b.Property<DateOnly?>("OriginalDate")
+                        .HasColumnType("date");
+
+                    b.Property<DateOnly?>("OriginalWeek")
+                        .HasColumnType("date");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PocName")
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("PocNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<string>("PocPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int?>("PrimaryDispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Priority")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Problem")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("RescheduleCount")
+                        .HasColumnType("int");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<bool?>("ScheduleWeekOnly")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("ScheduledDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("ScheduledEnd")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("ScheduledStart")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Service")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("ServiceNotes")
+                        .HasMaxLength(4000)
+                        .HasColumnType("nvarchar(4000)");
+
+                    b.Property<string>("Severity")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffSignature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteCode")
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<string>("Source")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SourceEmailS3Key")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SubTrade")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateOnly?>("TargetWeek")
+                        .HasColumnType("date");
+
+                    b.Property<string>("TechPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<string>("Trade")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<decimal?>("VendorNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<string>("VendorNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<int?>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("WorkerOrderNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderTitle")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("istemplate")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("ExternalWorkOrderId")
+                        .IsUnique()
+                        .HasFilter("[ExternalWorkOrderId] IS NOT NULL AND [ExternalWorkOrderId] <> ''");
+
+                    b.HasIndex("InternalWONumber")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.HasIndex("LocationId");
+
+                    b.HasIndex("PrimaryDispatchId");
+
+                    b.HasIndex("ScheduledDate");
+
+                    b.HasIndex("SiteCode")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.HasIndex("WorkOrderType");
+
+                    b.HasIndex("AssignTo", "ScheduledDate");
+
+                    b.HasIndex("LifecycleStatus", "ScheduledDate")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.ToTable("workOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAttachments", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Category")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("workOrderAttachments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAuditLog", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Action")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ActorType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CorrelationId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("EventType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FieldName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NewValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("OldValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UserId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("WorkOrderAuditLogs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderCategories", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("workOrderCategories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderContacts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("WorkOrderContacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderExternalReceipt", b =>
+                {
+                    b.Property<long>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("bigint");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<long>("Id"));
+
+                    b.Property<string>("ExternalId")
+                        .IsRequired()
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Kind")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<DateTimeOffset>("ProcessedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("Source")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset>("UpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("VersionHash")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Source", "Kind", "ExternalId")
+                        .IsUnique()
+                        .HasDatabaseName("IX_WorkOrderExternalReceipts_Source_Kind_ExternalId");
+
+                    b.ToTable("WorkOrderExternalReceipts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderFieldLock", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("FieldName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<DateTime>("LockedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("LockedByUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkOrderId", "FieldName")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderFieldLocks");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderReconciliationJob", b =>
+                {
+                    b.Property<int>("Id")
+                        .HasColumnType("int");
+
+                    b.Property<int>("CommentsProcessed")
+                        .HasColumnType("int");
+
+                    b.Property<DateTimeOffset?>("CompletedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ErrorCode")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<Guid?>("FenceToken")
+                        .HasColumnType("uniqueidentifier");
+
+                    b.Property<DateTimeOffset?>("LeaseExpiresAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("Reason")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset?>("RequestedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<Guid>("RunId")
+                        .HasColumnType("uniqueidentifier");
+
+                    b.Property<DateTimeOffset?>("StartedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("State")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<int>("WorkOrdersProcessed")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("State");
+
+                    b.ToTable("WorkOrderReconciliationJobs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWebhookDelivery", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BodySha256")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("DeliveryId")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("EventType")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<DateTimeOffset>("OccurredAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<DateTimeOffset>("ProcessedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DeliveryId")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderWebhookDeliveries");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWeekRolledLedger", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CorrelationId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("ProcessedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateOnly>("SourceWeekStart")
+                        .HasColumnType("date");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkOrderId", "SourceWeekStart")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderWeekRolledLedgers");
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRole", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ConcurrencyStamp")
+                        .IsConcurrencyToken()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("NormalizedName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique()
+                        .HasDatabaseName("RoleNameIndex")
+                        .HasFilter("[NormalizedName] IS NOT NULL");
+
+                    b.ToTable("AspNetRoles", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRoleClaim<string>", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ClaimType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ClaimValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("RoleId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AspNetRoleClaims", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserClaim<string>", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ClaimType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ClaimValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UserId");
+
+                    b.ToTable("AspNetUserClaims", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserLogin<string>", b =>
+                {
+                    b.Property<string>("LoginProvider")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ProviderKey")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ProviderDisplayName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("LoginProvider", "ProviderKey");
+
+                    b.HasIndex("UserId");
+
+                    b.ToTable("AspNetUserLogins", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserRole<string>", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("RoleId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("UserId", "RoleId");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AspNetUserRoles", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserToken<string>", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("LoginProvider")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Value")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("UserId", "LoginProvider", "Name");
+
+                    b.ToTable("AspNetUserTokens", (string)null);
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Addresses", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany("Addresses")
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contact")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Contact");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Comments", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("Comments")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "ApplicationUser")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Comments")
+                        .HasForeignKey("WorkerOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("ApplicationUser");
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ContactDetails", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contact")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Contact");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany("Contacts")
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany("Contacts")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("Dispatches")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Dispatches")
+                        .HasForeignKey("WorkOrderId");
+
+                    b.Navigation("Vendor");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchChecklistItem", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("ChecklistItems")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchSignoff", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("Signoffs")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchUpliftRequest", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany()
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.VendorCompletionDocument", "EvidenceDocument")
+                        .WithMany()
+                        .HasForeignKey("EvidenceDocumentId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("EvidenceDocument");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchWorkOrder", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("DispatchWorkOrders")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Department", "Department")
+                        .WithMany("Employees")
+                        .HasForeignKey("DepartmentId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.JobTitle", "JobTitle")
+                        .WithMany("Employees")
+                        .HasForeignKey("JobTitleId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Region", "Region")
+                        .WithMany("Employees")
+                        .HasForeignKey("RegionId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Department");
+
+                    b.Navigation("JobTitle");
+
+                    b.Navigation("Region");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeAddress", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithOne("Address")
+                        .HasForeignKey("Data.SeaHavenIndustries.EmployeeAddress", "EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeEmail", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany("Emails")
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeePhone", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany("Phones")
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.FollowUps", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany()
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Employee");
+
+                    b.Navigation("Location");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.PMSchedules", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Assets", "Asset")
+                        .WithMany("PMSchedules")
+                        .HasForeignKey("AssetId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Asset");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contacts")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Quotes")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Contacts");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.QuotesLineItems", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Quotes", "Quotes")
+                        .WithMany("LineItems")
+                        .HasForeignKey("QuoteId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Quotes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.SitePreferredVendor", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("SitePreferences")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Location");
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplateItem", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.TaskListTemplate", "Template")
+                        .WithMany("Items")
+                        .HasForeignKey("TaskListTemplateId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Template");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Template", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "AssignToUser")
+                        .WithMany("Templates")
+                        .HasForeignKey("AssignTo")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Category", "Category")
+                        .WithMany("Templates")
+                        .HasForeignKey("CategoryId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "POC")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Locations")
+                        .WithMany("Templates")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("AssignToUser");
+
+                    b.Navigation("Category");
+
+                    b.Navigation("Locations");
+
+                    b.Navigation("POC");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.VendorCompany", "Company")
+                        .WithMany("Vendors")
+                        .HasForeignKey("CompanyId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Company");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAccessToken", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany()
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAuditLog", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("AuditLogs")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Area", "Area")
+                        .WithMany()
+                        .HasForeignKey("AreaId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Area");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompletionDocument", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("CompletionDocuments")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany()
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("Vendor");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "AssignToUser")
+                        .WithMany("WorkOrders")
+                        .HasForeignKey("AssignTo")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Locations")
+                        .WithMany("workOrders")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "PrimaryDispatch")
+                        .WithMany()
+                        .HasForeignKey("PrimaryDispatchId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("AssignToUser");
+
+                    b.Navigation("Locations");
+
+                    b.Navigation("PrimaryDispatch");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAttachments", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("workOrderAttachments")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAuditLog", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("User");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderCategories", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Category", "Category")
+                        .WithMany("WorkOrderCategories")
+                        .HasForeignKey("CategoryId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("WorkOrderCategories")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Category");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderContacts", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "POC")
+                        .WithMany("WorkOrderContacts")
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("WorkOrderContacts")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("POC");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderFieldLock", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("FieldLocks")
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWeekRolledLedger", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRoleClaim<string>", b =>
+                {
+                    b.HasOne("Microsoft.AspNetCore.Identity.IdentityRole", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserClaim<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserLogin<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserRole<string>", b =>
+                {
+                    b.HasOne("Microsoft.AspNetCore.Identity.IdentityRole", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserToken<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Accounts", b =>
+                {
+                    b.Navigation("Addresses");
+
+                    b.Navigation("Contacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.Navigation("Templates");
+
+                    b.Navigation("WorkOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.Navigation("PMSchedules");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Category", b =>
+                {
+                    b.Navigation("Templates");
+
+                    b.Navigation("WorkOrderCategories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.Navigation("WorkOrderContacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Department", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.Navigation("ChecklistItems");
+
+                    b.Navigation("Comments");
+
+                    b.Navigation("CompletionDocuments");
+
+                    b.Navigation("DispatchWorkOrders");
+
+                    b.Navigation("Signoffs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.Navigation("Address");
+
+                    b.Navigation("Emails");
+
+                    b.Navigation("Phones");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.JobTitle", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.Navigation("Contacts");
+
+                    b.Navigation("Templates");
+
+                    b.Navigation("workOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.Navigation("LineItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Region", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplate", b =>
+                {
+                    b.Navigation("Items");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.Navigation("AuditLogs");
+
+                    b.Navigation("Dispatches");
+
+                    b.Navigation("SitePreferences");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.Navigation("Vendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.Navigation("Comments");
+
+                    b.Navigation("Dispatches");
+
+                    b.Navigation("FieldLocks");
+
+                    b.Navigation("Quotes");
+
+                    b.Navigation("WorkOrderCategories");
+
+                    b.Navigation("WorkOrderContacts");
+
+                    b.Navigation("workOrderAttachments");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/Data.SeaHavenIndustries/Migrations/20260916140128_SH278_VendorCompanyArea.cs b/Data.SeaHavenIndustries/Migrations/20260916140128_SH278_VendorCompanyArea.cs
new file mode 100644
index 0000000..8c090d4
--- /dev/null
+++ b/Data.SeaHavenIndustries/Migrations/20260916140128_SH278_VendorCompanyArea.cs
@@ -0,0 +1,88 @@
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Data.SeaHavenIndustries.Migrations
+{
+    /// <inheritdoc />
+    public partial class SH278_VendorCompanyArea : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.AddColumn<int>(
+                name: "AreaId",
+                table: "VendorCompanies",
+                type: "int",
+                nullable: true);
+
+            migrationBuilder.CreateTable(
+                name: "Areas",
+                columns: table => new
+                {
+                    Id = table.Column<int>(type: "int", nullable: false)
+                        .Annotation("SqlServer:Identity", "1, 1"),
+                    Name = table.Column<string>(type: "nvarchar(128)", maxLength: 128, nullable: false),
+                    NormalizedName = table.Column<string>(type: "nvarchar(128)", maxLength: 128, nullable: false),
+                    IsActive = table.Column<bool>(type: "bit", nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("PK_Areas", x => x.Id);
+                });
+
+            migrationBuilder.CreateIndex(
+                name: "IX_VendorCompanies_AreaId",
+                table: "VendorCompanies",
+                column: "AreaId");
+
+            migrationBuilder.CreateIndex(
+                name: "IX_Areas_NormalizedName",
+                table: "Areas",
+                column: "NormalizedName",
+                unique: true);
+
+            // SH-278 v1 seed of the four dispatcher territories confirmed by Product.
+            // Names match the merged SH-273 Sites mapping (East / Central / West /
+            // California). Ids are stable; later renames change only the display name.
+            // Existing vendor companies stay Unassigned (no backfill).
+            migrationBuilder.InsertData(
+                table: "Areas",
+                columns: new[] { "Id", "Name", "NormalizedName", "IsActive" },
+                values: new object[,]
+                {
+                    { 1, "East", "east", true },
+                    { 2, "Central", "central", true },
+                    { 3, "West", "west", true },
+                    { 4, "California", "california", true }
+                });
+
+            migrationBuilder.AddForeignKey(
+                name: "FK_VendorCompanies_Areas_AreaId",
+                table: "VendorCompanies",
+                column: "AreaId",
+                principalTable: "Areas",
+                principalColumn: "Id",
+                onDelete: ReferentialAction.Restrict);
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropForeignKey(
+                name: "FK_VendorCompanies_Areas_AreaId",
+                table: "VendorCompanies");
+
+            migrationBuilder.DropTable(
+                name: "Areas");
+
+            migrationBuilder.DropIndex(
+                name: "IX_VendorCompanies_AreaId",
+                table: "VendorCompanies");
+
+            migrationBuilder.DropColumn(
+                name: "AreaId",
+                table: "VendorCompanies");
+        }
+    }
+}
diff --git a/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs b/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
index 7bf6f39..2120abc 100644
--- a/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
+++ b/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
@@ -286,6 +286,35 @@ namespace Data.SeaHavenIndustries.Migrations
                     b.ToTable("AspNetUsers", (string)null);
                 });
 
+            modelBuilder.Entity("Data.SeaHavenIndustries.Area", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("Areas");
+                });
+
             modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
                 {
                     b.Property<int>("Id")
@@ -2237,6 +2266,9 @@ namespace Data.SeaHavenIndustries.Migrations
                     b.Property<string>("Address")
                         .HasColumnType("nvarchar(max)");
 
+                    b.Property<int?>("AreaId")
+                        .HasColumnType("int");
+
                     b.Property<string>("City")
                         .HasColumnType("nvarchar(max)");
 
@@ -2294,6 +2326,8 @@ namespace Data.SeaHavenIndustries.Migrations
 
                     b.HasKey("Id");
 
+                    b.HasIndex("AreaId");
+
                     b.HasIndex("NormalizedName")
                         .IsUnique();
 
@@ -3614,6 +3648,16 @@ namespace Data.SeaHavenIndustries.Migrations
                     b.Navigation("Vendor");
                 });
 
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Area", "Area")
+                        .WithMany()
+                        .HasForeignKey("AreaId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Area");
+                });
+
             modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompletionDocument", b =>
                 {
                     b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
diff --git a/Data.SeaHavenIndustries/Models/Area.cs b/Data.SeaHavenIndustries/Models/Area.cs
new file mode 100644
index 0000000..0d124cb
--- /dev/null
+++ b/Data.SeaHavenIndustries/Models/Area.cs
@@ -0,0 +1,15 @@
+namespace Data.SeaHavenIndustries
+{
+    // SH-278: dispatcher territory catalogue for this Sea Haven deployment. Vendor
+    // companies carry zero or one Area by stable id; the display name is separate and
+    // may be renamed without changing assignments. Area is selected independently and
+    // is never derived from a company's State. Rows are organization-wide: vendor
+    // companies are not scoped to a customer Account.
+    public class Area
+    {
+        public int Id { get; set; }
+        public string Name { get; set; } = "";
+        public string NormalizedName { get; set; } = "";
+        public bool IsActive { get; set; } = true;
+    }
+}
diff --git a/Data.SeaHavenIndustries/Models/VendorCompany.cs b/Data.SeaHavenIndustries/Models/VendorCompany.cs
index d83d06b..844a944 100644
--- a/Data.SeaHavenIndustries/Models/VendorCompany.cs
+++ b/Data.SeaHavenIndustries/Models/VendorCompany.cs
@@ -16,6 +16,11 @@ namespace Data.SeaHavenIndustries
         public string? GoogleMapsUrl { get; set; }
         public string? Notes { get; set; }
 
+        // SH-278: optional dispatcher territory (0 or 1 per company), admin-assigned.
+        public int? AreaId { get; set; }
+        [ForeignKey(nameof(AreaId))]
+        public Area? Area { get; set; }
+
         [Timestamp]
         public byte[]? RowVersion { get; set; }
 
diff --git a/SeaHaven.DataServices/Implementation/VendorCompanyRosterDataService.cs b/SeaHaven.DataServices/Implementation/VendorCompanyRosterDataService.cs
index aacdf9c..cac9637 100644
--- a/SeaHaven.DataServices/Implementation/VendorCompanyRosterDataService.cs
+++ b/SeaHaven.DataServices/Implementation/VendorCompanyRosterDataService.cs
@@ -17,6 +17,11 @@ namespace SeaHaven.DataServices.Implementation
             _context = context;
         }
 
+        public Task<bool> IsActiveAreaAsync(int areaId, CancellationToken cancellationToken) =>
+            _context.Areas
+                .AsNoTracking()
+                .AnyAsync(area => area.Id == areaId && area.IsActive, cancellationToken);
+
         public async Task<VendorCompanyRosterReadModel?> GetRosterAsync(
             int? vendorId,
             int? companyId,
@@ -57,6 +62,8 @@ namespace SeaHaven.DataServices.Implementation
                     Zip = c.Zip,
                     GoogleMapsUrl = c.GoogleMapsUrl,
                     Notes = c.Notes,
+                    AreaId = c.AreaId,
+                    AreaName = c.Area != null ? c.Area.Name : null,
                     RowVersion = c.RowVersion
                 })
                 .FirstOrDefaultAsync(cancellationToken);
@@ -114,6 +121,8 @@ namespace SeaHaven.DataServices.Implementation
             company.Zip = roster.Zip;
             company.GoogleMapsUrl = roster.GoogleMapsUrl;
             company.Notes = roster.Notes;
+            if (roster.AreaIdProvided)
+                company.AreaId = roster.AreaId;
             company.LastModificationTime = now;
             int? actorId = int.TryParse(roster.ActorUserId, out var parsedActorId) ? parsedActorId : null;
             if (actorId.HasValue)
@@ -245,6 +254,7 @@ namespace SeaHaven.DataServices.Implementation
                 Zip = roster.Zip,
                 GoogleMapsUrl = roster.GoogleMapsUrl,
                 Notes = roster.Notes,
+                AreaId = roster.AreaId,
                 CreatedDate = now,
                 createdby = roster.ActorUserId
             };
@@ -367,6 +377,8 @@ namespace SeaHaven.DataServices.Implementation
                     company.GoogleMapsUrl = fields.GoogleMapsUrl;
                 if (fields.Notes != null)
                     company.Notes = fields.Notes;
+                if (fields.AreaIdProvided)
+                    company.AreaId = fields.AreaId;
 
                 // Keep the denormalized company columns on existing technicians aligned
                 // with the company row (same invariant SaveRosterAsync maintains). This
diff --git a/SeaHaven.DataServices/Implementation/VendorDataService.cs b/SeaHaven.DataServices/Implementation/VendorDataService.cs
index 3c5e70a..2268f53 100644
--- a/SeaHaven.DataServices/Implementation/VendorDataService.cs
+++ b/SeaHaven.DataServices/Implementation/VendorDataService.cs
@@ -106,6 +106,15 @@ namespace SeaHaven.DataServices.Implementation
             return query.OrderBy(c => c.Id);
         }
 
+        public async Task<IReadOnlyList<Area>> GetActiveAreasAsync(CancellationToken cancellationToken)
+        {
+            return await _context.Areas
+                .AsNoTracking()
+                .Where(a => a.IsActive)
+                .OrderBy(a => a.Id)
+                .ToListAsync(cancellationToken);
+        }
+
         public async Task<IReadOnlyList<VendorCompany>> GetCompaniesForFacetsAsync(bool? isActive, CancellationToken cancellationToken)
             => await BuildCompaniesForFacetsQuery(isActive).ToListAsync(cancellationToken);
 
@@ -177,6 +186,7 @@ namespace SeaHaven.DataServices.Implementation
             IReadOnlyCollection<string>? trades = null,
             IReadOnlyCollection<string>? locations = null,
             IReadOnlyCollection<string>? jobBuckets = null,
+            VendorAreaFilter? areaFilter = null,
             CancellationToken cancellationToken = default)
         {
             // Phase 1: select and paginate bounded company group keys in SQL.
@@ -186,7 +196,8 @@ namespace SeaHaven.DataServices.Implementation
                 companies,
                 trades,
                 locations,
-                jobBuckets);
+                jobBuckets,
+                areaFilter);
 
             var totalCount = await keyQuery.CountAsync(cancellationToken);
 
@@ -222,6 +233,7 @@ namespace SeaHaven.DataServices.Implementation
                 ? new Dictionary<int, VendorCompany>()
                 : await _context.VendorCompanies
                     .AsNoTracking()
+                    .Include(c => c.Area)
                     .Where(c => missingCompanyIds.Contains(c.Id))
                     .ToDictionaryAsync(c => c.Id, cancellationToken);
 
@@ -291,6 +303,8 @@ namespace SeaHaven.DataServices.Implementation
                 TradeSpecialties = AggregateTradeTokens(techniciansNewestFirst),
                 GoogleMapsUrl = primary.GoogleMapsUrl,
                 Notes = linked ? primary.CompanyNotes : null,
+                AreaId = linked ? primary.CompanyAreaId : null,
+                AreaName = linked ? primary.CompanyAreaName : null,
                 IsActive = primary.IsActive,
                 TotalJobs = techniciansNewestFirst.Sum(row => row.TotalJobs),
                 Technicians = techniciansNewestFirst.Select(row => new VendorCompanyGroupTechnician
@@ -344,6 +358,8 @@ namespace SeaHaven.DataServices.Implementation
             TradeSpecialties = null,
             GoogleMapsUrl = company.GoogleMapsUrl,
             Notes = company.Notes,
+            AreaId = company.AreaId,
+            AreaName = company.Area?.Name,
             IsActive = true,
             TotalJobs = 0,
             Technicians = Array.Empty<VendorCompanyGroupTechnician>()
@@ -355,10 +371,11 @@ namespace SeaHaven.DataServices.Implementation
             IReadOnlyCollection<string>? companies = null,
             IReadOnlyCollection<string>? trades = null,
             IReadOnlyCollection<string>? locations = null,
-            IReadOnlyCollection<string>? jobBuckets = null)
+            IReadOnlyCollection<string>? jobBuckets = null,
+            VendorAreaFilter? areaFilter = null)
         {
             var sourceRows = BuildDirectoryUnionBaseQuery(isActive)
-                .Select(BuildGroupSourceRowSelector(search, companies, trades, locations));
+                .Select(BuildGroupSourceRowSelector(search, companies, trades, locations, areaFilter));
 
             var grouped = sourceRows
                 .GroupBy(row => new { row.CompanyId, row.NameKey, row.VendorKey })
@@ -372,7 +389,8 @@ namespace SeaHaven.DataServices.Implementation
                     SearchMatch = group.Max(row => row.SearchFlag),
                     CompanyMatch = group.Max(row => row.CompanyFlag),
                     TradeMatch = group.Max(row => row.TradeFlag),
-                    LocationMatch = group.Max(row => row.LocationFlag)
+                    LocationMatch = group.Max(row => row.LocationFlag),
+                    AreaMatch = group.Max(row => row.AreaFlag)
                 });
 
             // Each facet selects the group when any status-eligible row matches it
@@ -405,6 +423,9 @@ namespace SeaHaven.DataServices.Implementation
             if (selectedLocations is { Length: > 0 })
                 grouped = grouped.Where(key => key.LocationMatch == 1);
 
+            if (areaFilter != null)
+                grouped = grouped.Where(key => key.AreaMatch == 1);
+
             var selectedJobBuckets = jobBuckets?
                 .Where(value => !string.IsNullOrWhiteSpace(value))
                 .Select(value => value.Trim().ToLower())
@@ -429,7 +450,8 @@ namespace SeaHaven.DataServices.Implementation
             string? search,
             IReadOnlyCollection<string>? companies,
             IReadOnlyCollection<string>? trades,
-            IReadOnlyCollection<string>? locations)
+            IReadOnlyCollection<string>? locations,
+            VendorAreaFilter? areaFilter)
         {
             var row = Expression.Parameter(typeof(VendorDirectoryRow), "row");
 
@@ -466,6 +488,9 @@ namespace SeaHaven.DataServices.Implementation
             var locationBody = selectedLocations is { Length: > 0 }
                 ? BuildLocationMatchBody<VendorDirectoryRow>(row, selectedLocations)
                 : null;
+            var areaBody = areaFilter == null
+                ? null
+                : BuildAreaMatchBody(row, areaFilter);
 
             var nameKey = Expression.Condition(
                 Expression.NotEqual(
@@ -508,7 +533,8 @@ namespace SeaHaven.DataServices.Implementation
                     Bind(nameof(VendorDirectoryGroupSourceRow.SearchFlag), Flag(searchBody)),
                     Bind(nameof(VendorDirectoryGroupSourceRow.CompanyFlag), Flag(companyBody)),
                     Bind(nameof(VendorDirectoryGroupSourceRow.TradeFlag), Flag(tradeBody)),
-                    Bind(nameof(VendorDirectoryGroupSourceRow.LocationFlag), Flag(locationBody))),
+                    Bind(nameof(VendorDirectoryGroupSourceRow.LocationFlag), Flag(locationBody)),
+                    Bind(nameof(VendorDirectoryGroupSourceRow.AreaFlag), Flag(areaBody))),
                 row);
         }
 
@@ -535,6 +561,8 @@ namespace SeaHaven.DataServices.Implementation
                 CompanyCity = v.Company != null ? v.Company.City : null,
                 CompanyState = v.Company != null ? v.Company.State : null,
                 CompanyNotes = v.Company != null ? v.Company.Notes : null,
+                CompanyAreaId = v.Company != null ? v.Company.AreaId : null,
+                CompanyAreaName = v.Company != null && v.Company.Area != null ? v.Company.Area.Name : null,
                 ContactName = v.ContactName,
                 Email = v.Email,
                 Phone = v.Phone,
@@ -702,6 +730,7 @@ namespace SeaHaven.DataServices.Implementation
                     TradeSpecialties = v.TradeSpecialties,
                     GoogleMapsUrl = v.GoogleMapsUrl,
                     Notes = v.Company != null ? v.Company.Notes : null,
+                    AreaId = v.Company != null ? v.Company.AreaId : null,
                     IsActive = v.IsActive,
                     TotalJobs = (int?)jobCount.TotalJobs ?? 0
                 };
@@ -736,6 +765,7 @@ namespace SeaHaven.DataServices.Implementation
                         TradeSpecialties = null,
                         GoogleMapsUrl = c.GoogleMapsUrl,
                         Notes = c.Notes,
+                        AreaId = c.AreaId,
                         IsActive = true,
                         TotalJobs = 0
                     });
@@ -777,6 +807,32 @@ namespace SeaHaven.DataServices.Implementation
             return body!;
         }
 
+        // SH-278: OR within the Area facet. Selected ids match the company's stable
+        // AreaId; the Unassigned sentinel matches rows without an Area, which includes
+        // unlinked legacy vendors that have no VendorCompany at all. A filter with no
+        // resolvable ids and no Unassigned matches nobody.
+        private static Expression BuildAreaMatchBody(ParameterExpression row, VendorAreaFilter areaFilter)
+        {
+            var areaId = Expression.Property(row, nameof(VendorDirectoryRow.AreaId));
+            Expression? body = null;
+
+            if (areaFilter.AreaIds.Count > 0)
+            {
+                var ids = areaFilter.AreaIds.Distinct().Select(id => (int?)id).ToArray();
+                body = OrElse(body, Expression.Call(
+                    typeof(Enumerable),
+                    nameof(Enumerable.Contains),
+                    new[] { typeof(int?) },
+                    Expression.Constant(ids),
+                    areaId));
+            }
+
+            if (areaFilter.IncludeUnassigned)
+                body = OrElse(body, Expression.Equal(areaId, Expression.Constant(null, typeof(int?))));
+
+            return body ?? Expression.Constant(false);
+        }
+
         private static Expression BuildCompanyNameMatchBody(
             ParameterExpression row,
             IReadOnlyCollection<string> selectedCompanies)
diff --git a/SeaHaven.DataServices/Interfaces/IVendorCompanyRosterDataService.cs b/SeaHaven.DataServices/Interfaces/IVendorCompanyRosterDataService.cs
index 45a7937..e2e6b62 100644
--- a/SeaHaven.DataServices/Interfaces/IVendorCompanyRosterDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IVendorCompanyRosterDataService.cs
@@ -4,6 +4,9 @@ namespace SeaHaven.DataServices.Interfaces
 {
     public interface IVendorCompanyRosterDataService
     {
+        // SH-278: true only for an existing, non-archived Area in the catalogue.
+        Task<bool> IsActiveAreaAsync(int areaId, CancellationToken cancellationToken);
+
         // Loads the company roster from either a vendor row id and/or a company id,
         // returning the company plus all non-deleted technician rows.
         Task<VendorCompanyRosterReadModel?> GetRosterAsync(
diff --git a/SeaHaven.DataServices/Interfaces/IVendorDataService.cs b/SeaHaven.DataServices/Interfaces/IVendorDataService.cs
index 2e08912..f0002ba 100644
--- a/SeaHaven.DataServices/Interfaces/IVendorDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IVendorDataService.cs
@@ -19,6 +19,10 @@ namespace SeaHaven.DataServices.Interfaces
         // of technician Vendor.TradeSpecialties free text.
         Task<IReadOnlyList<Trade>> GetActiveTradesAsync(CancellationToken cancellationToken);
 
+        // SH-278: active (non-archived) Area catalogue rows for vendor facets and for
+        // resolving areas[n] filter ids. Archived Areas are excluded.
+        Task<IReadOnlyList<Area>> GetActiveAreasAsync(CancellationToken cancellationToken);
+
         // SH-198 facet fix: company-owned facet profiles sourced from VendorCompanies,
         // with status semantics aligned to BuildDirectoryUnionQuery. Null returns all
         // companies; active includes companies with zero non-deleted technicians or at
@@ -66,6 +70,7 @@ namespace SeaHaven.DataServices.Interfaces
             IReadOnlyCollection<string>? trades = null,
             IReadOnlyCollection<string>? locations = null,
             IReadOnlyCollection<string>? jobBuckets = null,
+            VendorAreaFilter? areaFilter = null,
             CancellationToken cancellationToken = default);
         Task<Vendor> AddAsync(Vendor vendor);
         Task UpdateAsync(Vendor vendor);
diff --git a/SeaHaven.DataServices/Models/VendorCompanyRosterModels.cs b/SeaHaven.DataServices/Models/VendorCompanyRosterModels.cs
index 33e1225..92b4a55 100644
--- a/SeaHaven.DataServices/Models/VendorCompanyRosterModels.cs
+++ b/SeaHaven.DataServices/Models/VendorCompanyRosterModels.cs
@@ -14,6 +14,8 @@ namespace SeaHaven.DataServices.Models
         public string? Zip { get; set; }
         public string? GoogleMapsUrl { get; set; }
         public string? Notes { get; set; }
+        public int? AreaId { get; set; }
+        public string? AreaName { get; set; }
         public byte[]? RowVersion { get; set; }
         public List<VendorRosterTechnicianReadModel> Technicians { get; set; } = new();
     }
@@ -43,6 +45,10 @@ namespace SeaHaven.DataServices.Models
         public string? Zip { get; set; }
         public string? GoogleMapsUrl { get; set; }
         public string? Notes { get; set; }
+
+        // SH-278: applied only when AreaIdProvided; null AreaId means Unassigned.
+        public bool AreaIdProvided { get; set; }
+        public int? AreaId { get; set; }
         public string? ActorUserId { get; set; }
         public List<RosterTechnicianWriteModel> Technicians { get; set; } = new();
     }
@@ -81,6 +87,10 @@ namespace SeaHaven.DataServices.Models
         public string? Zip { get; set; }
         public string? GoogleMapsUrl { get; set; }
         public string? Notes { get; set; }
+
+        // SH-278: applied only when AreaIdProvided; null AreaId means Unassigned.
+        public bool AreaIdProvided { get; set; }
+        public int? AreaId { get; set; }
     }
 
     // Raised by the roster data service when a technician removed from the snapshot
diff --git a/SeaHaven.DataServices/Models/VendorDirectoryReadModels.cs b/SeaHaven.DataServices/Models/VendorDirectoryReadModels.cs
index dff7be9..71eb5d0 100644
--- a/SeaHaven.DataServices/Models/VendorDirectoryReadModels.cs
+++ b/SeaHaven.DataServices/Models/VendorDirectoryReadModels.cs
@@ -17,10 +17,20 @@ namespace SeaHaven.DataServices.Models
         public string? TradeSpecialties { get; set; }
         public string? GoogleMapsUrl { get; set; }
         public string? Notes { get; set; }
+        public int? AreaId { get; set; }
         public bool IsActive { get; set; }
         public int TotalJobs { get; set; }
     }
 
+    // SH-278: Area facet filter for the company directory. AreaIds are already
+    // resolved against the active catalogue; IncludeUnassigned selects groups with no
+    // Area (including unlinked legacy vendors). An empty filter matches nobody.
+    public sealed class VendorAreaFilter
+    {
+        public IReadOnlyCollection<int> AreaIds { get; init; } = Array.Empty<int>();
+        public bool IncludeUnassigned { get; init; }
+    }
+
     // SH-281 company directory: per-row source for the grouped key query. Carries the
     // company group key parts (CompanyId 0 = unlinked; NameKey groups unlinked legacy
     // vendors by trimmed case-insensitive CompanyName; VendorKey isolates vendors with
@@ -37,6 +47,7 @@ namespace SeaHaven.DataServices.Models
         public int CompanyFlag { get; set; }
         public int TradeFlag { get; set; }
         public int LocationFlag { get; set; }
+        public int AreaFlag { get; set; }
     }
 
     // SH-281: one row per company group after SQL grouping — the bounded key page.
@@ -51,6 +62,7 @@ namespace SeaHaven.DataServices.Models
         public int CompanyMatch { get; set; }
         public int TradeMatch { get; set; }
         public int LocationMatch { get; set; }
+        public int AreaMatch { get; set; }
     }
 
     // SH-281: full status-eligible roster row (phase 2) carrying both the vendor's own
@@ -69,6 +81,8 @@ namespace SeaHaven.DataServices.Models
         public string? CompanyCity { get; set; }
         public string? CompanyState { get; set; }
         public string? CompanyNotes { get; set; }
+        public int? CompanyAreaId { get; set; }
+        public string? CompanyAreaName { get; set; }
         public string? ContactName { get; set; }
         public string? Email { get; set; }
         public string? Phone { get; set; }
@@ -124,6 +138,8 @@ namespace SeaHaven.DataServices.Models
         public string? TradeSpecialties { get; set; }
         public string? GoogleMapsUrl { get; set; }
         public string? Notes { get; set; }
+        public int? AreaId { get; set; }
+        public string? AreaName { get; set; }
         public bool IsActive { get; set; }
         public int TotalJobs { get; set; }
         public IReadOnlyList<VendorCompanyGroupTechnician> Technicians { get; set; } = Array.Empty<VendorCompanyGroupTechnician>();
diff --git a/SeaHaven.Services/DTOs/VendorCompanyRosterDTOs.cs b/SeaHaven.Services/DTOs/VendorCompanyRosterDTOs.cs
index 3e20202..40d9a6d 100644
--- a/SeaHaven.Services/DTOs/VendorCompanyRosterDTOs.cs
+++ b/SeaHaven.Services/DTOs/VendorCompanyRosterDTOs.cs
@@ -1,3 +1,5 @@
+using System.Text.Json.Serialization;
+
 namespace SeaHaven.Services.DTOs
 {
     public class VendorRosterDTO
@@ -12,6 +14,8 @@ namespace SeaHaven.Services.DTOs
         public string? Zip { get; set; }
         public string? GoogleMapsUrl { get; set; }
         public string? Notes { get; set; }
+        public int? AreaId { get; set; }
+        public string? AreaName { get; set; }
         public string? RowVersion { get; set; }
         public List<VendorRosterTechnicianDTO> Technicians { get; set; } = new();
     }
@@ -50,6 +54,10 @@ namespace SeaHaven.Services.DTOs
         public string? Zip { get; set; }
         public string? GoogleMapsUrl { get; set; }
         public string? Notes { get; set; }
+
+        // SH-278: optional Area id; null leaves the new company Unassigned. Assigning
+        // an Area requires the Admin role.
+        public int? AreaId { get; set; }
         public List<RosterTechnicianInputDTO> Technicians { get; set; } = new();
     }
 
@@ -65,6 +73,22 @@ namespace SeaHaven.Services.DTOs
         public string? Zip { get; set; }
         public string? GoogleMapsUrl { get; set; }
         public string? Notes { get; set; }
+
+        // SH-278: an omitted areaId leaves the stored Area unchanged, so clients that
+        // predate Area never clear it. An explicit null clears it to Unassigned.
+        private int? _areaId;
+        public int? AreaId
+        {
+            get => _areaId;
+            set
+            {
+                _areaId = value;
+                AreaIdProvided = true;
+            }
+        }
+
+        [JsonIgnore]
+        public bool AreaIdProvided { get; private set; }
         public List<RosterTechnicianInputDTO> Technicians { get; set; } = new();
     }
 
@@ -89,5 +113,30 @@ namespace SeaHaven.Services.DTOs
         public string? Zip { get; set; }
         public string? GoogleMapsUrl { get; set; }
         public string? Notes { get; set; }
+
+        // SH-278: same presence semantics as ReconcileVendorRosterDTO.AreaId.
+        private int? _areaId;
+        public int? AreaId
+        {
+            get => _areaId;
+            set
+            {
+                _areaId = value;
+                AreaIdProvided = true;
+            }
+        }
+
+        [JsonIgnore]
+        public bool AreaIdProvided { get; private set; }
+    }
+
+    // SH-278: raised when a caller without the Admin role tries to change a vendor
+    // company's Area. Mapped to a stable 403 by the API.
+    public sealed class VendorAreaAssignmentForbiddenException : Exception
+    {
+        public VendorAreaAssignmentForbiddenException()
+            : base("Only administrators can assign a vendor company Area.")
+        {
+        }
     }
 }
diff --git a/SeaHaven.Services/DTOs/VendorDTOs.cs b/SeaHaven.Services/DTOs/VendorDTOs.cs
index 12fb5b8..0c74465 100644
--- a/SeaHaven.Services/DTOs/VendorDTOs.cs
+++ b/SeaHaven.Services/DTOs/VendorDTOs.cs
@@ -45,6 +45,8 @@ namespace SeaHaven.Services.DTOs
         public string? TradeSpecialties { get; set; }
         public string? GoogleMapsUrl { get; set; }
         public string? Notes { get; set; }
+        public int? AreaId { get; set; }
+        public string? AreaName { get; set; }
         public int TotalJobs { get; set; }
         public bool IsActive { get; set; }
         public List<VendorDirectoryTechnicianDTO> Technicians { get; set; } = new();
diff --git a/SeaHaven.Services/DTOs/VendorPortalDTOs.cs b/SeaHaven.Services/DTOs/VendorPortalDTOs.cs
index 8af1cfa..714a32f 100644
--- a/SeaHaven.Services/DTOs/VendorPortalDTOs.cs
+++ b/SeaHaven.Services/DTOs/VendorPortalDTOs.cs
@@ -59,7 +59,21 @@ namespace SeaHaven.Services.DTOs
     {
         public IEnumerable<VendorFacetCompanyDTO> Companies { get; set; } = Enumerable.Empty<VendorFacetCompanyDTO>();
         public IEnumerable<string> Trades { get; set; } = Enumerable.Empty<string>();
+        public IEnumerable<VendorFacetAreaDTO> Areas { get; set; } = Enumerable.Empty<VendorFacetAreaDTO>();
         public IEnumerable<VendorFacetLocationDTO> Locations { get; set; } = Enumerable.Empty<VendorFacetLocationDTO>();
         public IEnumerable<VendorJobBucketDTO> JobBuckets { get; set; } = Enumerable.Empty<VendorJobBucketDTO>();
     }
+
+    // SH-278: one active Area option. Id is the stable areas[n] filter value.
+    public class VendorFacetAreaDTO
+    {
+        public int Id { get; set; }
+        public string Name { get; set; } = string.Empty;
+    }
+
+    // SH-278: wire values accepted by the vendor directory areas[n] filter besides ids.
+    public static class VendorAreaFilterValues
+    {
+        public const string Unassigned = "__unassigned__";
+    }
 }
diff --git a/SeaHaven.Services/Implementation/VendorCompanyRosterService.cs b/SeaHaven.Services/Implementation/VendorCompanyRosterService.cs
index c5b7676..0cd1169 100644
--- a/SeaHaven.Services/Implementation/VendorCompanyRosterService.cs
+++ b/SeaHaven.Services/Implementation/VendorCompanyRosterService.cs
@@ -6,6 +6,7 @@ using SeaHaven.Services.DTOs;
 using SeaHaven.Services.Helpers;
 using SeaHaven.Services.Interfaces;
 using SeaHaven.Services.Validation;
+using System.Security.Claims;
 
 namespace SeaHaven.Services.Implementation
 {
@@ -13,6 +14,8 @@ namespace SeaHaven.Services.Implementation
     {
         private const int MaxNotesLength = 500;
         private const string NotesMaxLengthMessage = "Notes cannot exceed 500 characters.";
+        private const string AdminRole = "Admin";
+        private const string AreaNotFoundMessage = "Area was not found.";
 
         private readonly IVendorCompanyRosterDataService _rosterDataService;
 
@@ -39,6 +42,7 @@ namespace SeaHaven.Services.Implementation
         public async Task<VendorRosterDTO> CreateRosterAsync(
             CreateVendorRosterDTO dto,
             string userId,
+            ClaimsPrincipal caller,
             CancellationToken cancellationToken)
         {
             EnsureAuthenticated(userId);
@@ -60,6 +64,13 @@ namespace SeaHaven.Services.Implementation
                         "Technician ids are not allowed when creating a vendor company.")
                 });
 
+            await EnsureAreaAssignmentAllowedAsync(
+                caller,
+                dto.AreaId,
+                currentAreaId: null,
+                nameof(CreateVendorRosterDTO.AreaId),
+                cancellationToken);
+
             var writeModel = new VendorCompanyRosterWriteModel
             {
                 Name = dto.Name,
@@ -71,6 +82,8 @@ namespace SeaHaven.Services.Implementation
                 Zip = dto.Zip,
                 GoogleMapsUrl = dto.GoogleMapsUrl,
                 Notes = dto.Notes,
+                AreaIdProvided = true,
+                AreaId = dto.AreaId,
                 ActorUserId = userId,
                 Technicians = MapTechnicians(dto.Technicians)
             };
@@ -83,6 +96,7 @@ namespace SeaHaven.Services.Implementation
             int companyId,
             ReconcileVendorRosterDTO dto,
             string userId,
+            ClaimsPrincipal caller,
             CancellationToken cancellationToken)
         {
             EnsureAuthenticated(userId);
@@ -101,6 +115,14 @@ namespace SeaHaven.Services.Implementation
             // Mismatched ids: every non-null technician id must belong to this company.
             await EnsureTechnicianIdsBelongToCompanyAsync(companyId, dto.Technicians, cancellationToken);
 
+            if (dto.AreaIdProvided)
+                await EnsureAreaChangeAllowedAsync(
+                    companyId,
+                    caller,
+                    dto.AreaId,
+                    nameof(ReconcileVendorRosterDTO.AreaId),
+                    cancellationToken);
+
             var writeModel = new VendorCompanyRosterWriteModel
             {
                 CompanyId = companyId,
@@ -114,6 +136,8 @@ namespace SeaHaven.Services.Implementation
                 Zip = dto.Zip,
                 GoogleMapsUrl = dto.GoogleMapsUrl,
                 Notes = dto.Notes,
+                AreaIdProvided = dto.AreaIdProvided,
+                AreaId = dto.AreaId,
                 ActorUserId = userId,
                 Technicians = MapTechnicians(dto.Technicians)
             };
@@ -126,6 +150,7 @@ namespace SeaHaven.Services.Implementation
             int companyId,
             AddTechniciansVendorRosterDTO dto,
             string userId,
+            ClaimsPrincipal caller,
             CancellationToken cancellationToken)
         {
             EnsureAuthenticated(userId);
@@ -167,6 +192,14 @@ namespace SeaHaven.Services.Implementation
             if (failures.Count > 0)
                 throw new ValidationException(failures);
 
+            if (companyFields is { AreaIdProvided: true })
+                await EnsureAreaChangeAllowedAsync(
+                    companyId,
+                    caller,
+                    companyFields.AreaId,
+                    $"{nameof(AddTechniciansVendorRosterDTO.CompanyFields)}.{nameof(VendorRosterCompanyFieldsDTO.AreaId)}",
+                    cancellationToken);
+
             // The contact-group invariant ("at least one company phone or email") is
             // preserved by construction: blank company fields map to null ("unchanged"),
             // so this endpoint can only set valid phone/email values, never clear them.
@@ -184,6 +217,50 @@ namespace SeaHaven.Services.Implementation
             return MapToDTO(saved);
         }
 
+        // SH-278: Area assignment is Admin-only. A payload that leaves the stored Area
+        // unchanged is allowed for any authenticated caller, so non-admin users can
+        // still save other company fields while round-tripping the current Area.
+        private async Task EnsureAreaChangeAllowedAsync(
+            int companyId,
+            ClaimsPrincipal caller,
+            int? requestedAreaId,
+            string propertyName,
+            CancellationToken cancellationToken)
+        {
+            var roster = await _rosterDataService.GetRosterAsync(null, companyId, cancellationToken)
+                ?? throw new KeyNotFoundException($"Vendor company with ID {companyId} not found.");
+
+            await EnsureAreaAssignmentAllowedAsync(
+                caller,
+                requestedAreaId,
+                roster.AreaId,
+                propertyName,
+                cancellationToken);
+        }
+
+        private async Task EnsureAreaAssignmentAllowedAsync(
+            ClaimsPrincipal caller,
+            int? requestedAreaId,
+            int? currentAreaId,
+            string propertyName,
+            CancellationToken cancellationToken)
+        {
+            if (requestedAreaId == currentAreaId)
+                return;
+
+            if (caller?.IsInRole(AdminRole) != true)
+                throw new VendorAreaAssignmentForbiddenException();
+
+            if (requestedAreaId is int areaId
+                && (areaId <= 0 || !await _rosterDataService.IsActiveAreaAsync(areaId, cancellationToken)))
+            {
+                throw new ValidationException(new[]
+                {
+                    new ValidationFailure(propertyName, AreaNotFoundMessage)
+                });
+            }
+        }
+
         private static void EnsureAuthenticated(string userId)
         {
             if (string.IsNullOrWhiteSpace(userId))
@@ -290,7 +367,8 @@ namespace SeaHaven.Services.Implementation
             || !string.IsNullOrWhiteSpace(fields.State)
             || !string.IsNullOrWhiteSpace(fields.Zip)
             || !string.IsNullOrWhiteSpace(fields.GoogleMapsUrl)
-            || !string.IsNullOrWhiteSpace(fields.Notes);
+            || !string.IsNullOrWhiteSpace(fields.Notes)
+            || fields.AreaIdProvided;
 
         private static bool HasNoCompanyChange(VendorRosterCompanyFieldsWriteModel model) =>
             model.Name == null
@@ -301,7 +379,8 @@ namespace SeaHaven.Services.Implementation
             && model.State == null
             && model.Zip == null
             && model.GoogleMapsUrl == null
-            && model.Notes == null;
+            && model.Notes == null
+            && !model.AreaIdProvided;
 
         private static VendorRosterCompanyFieldsWriteModel ValidateAndMapCompanyFields(
             VendorRosterCompanyFieldsDTO fields,
@@ -344,7 +423,9 @@ namespace SeaHaven.Services.Implementation
                 State = string.IsNullOrWhiteSpace(fields.State) ? null : fields.State,
                 Zip = string.IsNullOrWhiteSpace(fields.Zip) ? null : fields.Zip,
                 GoogleMapsUrl = string.IsNullOrWhiteSpace(fields.GoogleMapsUrl) ? null : fields.GoogleMapsUrl,
-                Notes = string.IsNullOrWhiteSpace(fields.Notes) ? null : fields.Notes
+                Notes = string.IsNullOrWhiteSpace(fields.Notes) ? null : fields.Notes,
+                AreaIdProvided = fields.AreaIdProvided,
+                AreaId = fields.AreaId
             };
         }
 
@@ -443,6 +524,8 @@ namespace SeaHaven.Services.Implementation
             Zip = roster.Zip,
             GoogleMapsUrl = roster.GoogleMapsUrl,
             Notes = roster.Notes,
+            AreaId = roster.AreaId,
+            AreaName = roster.AreaName,
             RowVersion = roster.RowVersion == null ? null : Convert.ToBase64String(roster.RowVersion),
             Technicians = roster.Technicians.Select(t => new VendorRosterTechnicianDTO
             {
diff --git a/SeaHaven.Services/Implementation/VendorService.cs b/SeaHaven.Services/Implementation/VendorService.cs
index 5e4ce40..2d715a3 100644
--- a/SeaHaven.Services/Implementation/VendorService.cs
+++ b/SeaHaven.Services/Implementation/VendorService.cs
@@ -4,6 +4,7 @@ using FluentValidation;
 using FluentValidation.Results;
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
+using System.Globalization;
 using SeaHaven.DataServices.Interfaces;
 using SeaHaven.DataServices.Models;
 using SeaHaven.Services.Configuration;
@@ -160,10 +161,12 @@ namespace SeaHaven.Services.Implementation
             IReadOnlyCollection<string>? trades = null,
             IReadOnlyCollection<string>? locations = null,
             IReadOnlyCollection<string>? jobBuckets = null,
+            IReadOnlyCollection<string>? areas = null,
             CancellationToken cancellationToken = default)
         {
             var normalizedPage = Math.Max(1, page);
             var normalizedPageSize = Math.Clamp(pageSize, 1, MaxDirectoryPageSize);
+            var areaFilter = await ResolveAreaFilterAsync(areas, cancellationToken);
             var (items, totalCount) = await _vendorDataService.GetCompanyDirectoryPagedAsync(
                 normalizedPage,
                 normalizedPageSize,
@@ -173,6 +176,7 @@ namespace SeaHaven.Services.Implementation
                 trades,
                 locations,
                 jobBuckets,
+                areaFilter,
                 cancellationToken);
 
             return new PagedResult<VendorDirectoryItemDTO>
@@ -184,6 +188,47 @@ namespace SeaHaven.Services.Implementation
             };
         }
 
+        // SH-278 areas[n] contract: blank entries are ignored; "__unassigned__" selects
+        // companies without an Area; other values must be stable positive integer ids
+        // of active catalogue rows. Display names, unknown ids and archived ids never
+        // error — they simply match nobody. Null means no Area filter was requested.
+        private async Task<VendorAreaFilter?> ResolveAreaFilterAsync(
+            IReadOnlyCollection<string>? areas,
+            CancellationToken cancellationToken)
+        {
+            var values = areas?
+                .Where(value => !string.IsNullOrWhiteSpace(value))
+                .Select(value => value.Trim())
+                .ToList();
+
+            if (values is not { Count: > 0 })
+                return null;
+
+            var includeUnassigned = values.Contains(VendorAreaFilterValues.Unassigned, StringComparer.Ordinal);
+            var requestedIds = new HashSet<int>();
+            foreach (var value in values)
+            {
+                if (int.TryParse(value, NumberStyles.None, CultureInfo.InvariantCulture, out var id) && id > 0)
+                    requestedIds.Add(id);
+            }
+
+            IReadOnlyCollection<int> activeIds = Array.Empty<int>();
+            if (requestedIds.Count > 0)
+            {
+                var activeAreas = await _vendorDataService.GetActiveAreasAsync(cancellationToken);
+                activeIds = activeAreas
+                    .Select(area => area.Id)
+                    .Where(requestedIds.Contains)
+                    .ToArray();
+            }
+
+            return new VendorAreaFilter
+            {
+                AreaIds = activeIds,
+                IncludeUnassigned = includeUnassigned
+            };
+        }
+
         private static VendorDirectoryItemDTO MapToCompanyGroup(VendorCompanyGroup group) => new()
         {
             Id = group.Id,
@@ -201,6 +246,8 @@ namespace SeaHaven.Services.Implementation
             TradeSpecialties = group.TradeSpecialties,
             GoogleMapsUrl = group.GoogleMapsUrl,
             Notes = group.Notes,
+            AreaId = group.AreaId,
+            AreaName = group.AreaName,
             IsActive = group.IsActive,
             TotalJobs = group.TotalJobs,
             Technicians = group.Technicians.Select(MapToTechnician).ToList()
@@ -731,6 +778,7 @@ namespace SeaHaven.Services.Implementation
             // populated even on an empty database and independent of the status filter.
             var companies = await _vendorDataService.GetCompaniesForFacetsAsync(isActive, cancellationToken);
             var canonicalTrades = await _vendorDataService.GetActiveTradesAsync(cancellationToken);
+            var activeAreas = await _vendorDataService.GetActiveAreasAsync(cancellationToken);
 
             var companyFacets = companies
                 .Where(c => !string.IsNullOrWhiteSpace(c.Name))
@@ -772,10 +820,19 @@ namespace SeaHaven.Services.Implementation
                 .DistinctBy(location => location.Label, StringComparer.OrdinalIgnoreCase)
                 .OrderBy(location => location.Label);
 
+            // SH-278: the active Area catalogue, A–Z case-insensitive, independent of the
+            // status filter and of whether any company currently uses an Area. Clients
+            // prepend the "__unassigned__" option themselves.
+            var areas = activeAreas
+                .OrderBy(area => area.Name, StringComparer.OrdinalIgnoreCase)
+                .Select(area => new VendorFacetAreaDTO { Id = area.Id, Name = area.Name })
+                .ToList();
+
             return new VendorFacetsDTO
             {
                 Companies = companyFacets,
                 Trades = trades,
+                Areas = areas,
                 Locations = locations,
                 JobBuckets = new[]
                 {
diff --git a/SeaHaven.Services/Interfaces/IVendorCompanyRosterService.cs b/SeaHaven.Services/Interfaces/IVendorCompanyRosterService.cs
index 27d9d79..5b48cc0 100644
--- a/SeaHaven.Services/Interfaces/IVendorCompanyRosterService.cs
+++ b/SeaHaven.Services/Interfaces/IVendorCompanyRosterService.cs
@@ -1,3 +1,4 @@
+using System.Security.Claims;
 using SeaHaven.Services.DTOs;
 
 namespace SeaHaven.Services.Interfaces
@@ -13,18 +14,21 @@ namespace SeaHaven.Services.Interfaces
         Task<VendorRosterDTO> CreateRosterAsync(
             CreateVendorRosterDTO dto,
             string userId,
+            ClaimsPrincipal caller,
             CancellationToken cancellationToken);
 
         Task<VendorRosterDTO> ReconcileRosterAsync(
             int companyId,
             ReconcileVendorRosterDTO dto,
             string userId,
+            ClaimsPrincipal caller,
             CancellationToken cancellationToken);
 
         Task<VendorRosterDTO> AddTechniciansAsync(
             int companyId,
             AddTechniciansVendorRosterDTO dto,
             string userId,
+            ClaimsPrincipal caller,
             CancellationToken cancellationToken);
     }
 }
diff --git a/SeaHaven.Services/Interfaces/IVendorService.cs b/SeaHaven.Services/Interfaces/IVendorService.cs
index 74782af..185cb29 100644
--- a/SeaHaven.Services/Interfaces/IVendorService.cs
+++ b/SeaHaven.Services/Interfaces/IVendorService.cs
@@ -41,6 +41,7 @@ namespace SeaHaven.Services.Interfaces
             IReadOnlyCollection<string>? trades = null,
             IReadOnlyCollection<string>? locations = null,
             IReadOnlyCollection<string>? jobBuckets = null,
+            IReadOnlyCollection<string>? areas = null,
             CancellationToken cancellationToken = default);
         Task<VendorDTO> CreateVendorAsync(CreateVendorDTO dto, string userId);
         Task<VendorDTO> UpdateVendorAsync(int id, UpdateVendorDTO dto, string userId);

From caba84ea08f67264f923b7ec7c52a786d814c3d6 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 14:41:23 -0300
Subject: [PATCH 009/183] fix(work-orders): reject forged automatic lifecycle
 statuses on board patch (SH-357, SH-358) (#120)

Incomplete and Scheduled are derived by the server. A direct lifecycleStatus
PATCH may only restate the status derivation already produced; any other
request to move a work order into an automatic state returns the stable
AutomaticLifecycleStatus validation error and leaves status and audit untouched.
---
 .../WorkOrderBoardPatchLifecycleRules.cs      |  52 ++++++
 .../WorkOrderBoardUpdateService.cs            |  14 +-
 .../WorkOrderBoardPatchLifecycleRulesTests.cs | 171 ++++++++++++++++++
 3 files changed, 228 insertions(+), 9 deletions(-)
 create mode 100644 SeaHaven.Services/Helpers/WorkOrderBoardPatchLifecycleRules.cs
 create mode 100644 SeaHavenIndustries.Tests/WorkOrderBoardPatchLifecycleRulesTests.cs

diff --git a/SeaHaven.Services/Helpers/WorkOrderBoardPatchLifecycleRules.cs b/SeaHaven.Services/Helpers/WorkOrderBoardPatchLifecycleRules.cs
new file mode 100644
index 0000000..b963b73
--- /dev/null
+++ b/SeaHaven.Services/Helpers/WorkOrderBoardPatchLifecycleRules.cs
@@ -0,0 +1,52 @@
+using Data.SeaHavenIndustries.Enums;
+using SeaHaven.Services.Exceptions;
+
+namespace SeaHaven.Services.Helpers
+{
+    /// <summary>
+    /// SH-169 manual transition guard for the board lifecycleStatus PATCH.
+    /// Incomplete and Scheduled are derived by the server; a direct request may only
+    /// restate what derivation already produces, never forge a new automatic state.
+    /// Past Due is a read-model overlay (<see cref="WorkOrderDerivedFields.IsPastDue(System.DateTime?, LifecycleStatus?, System.DateTime?)"/>),
+    /// not a <see cref="LifecycleStatus"/> value, so it cannot be requested at all.
+    /// </summary>
+    public static class WorkOrderBoardPatchLifecycleRules
+    {
+        public const string AutomaticStatusCode = "AutomaticLifecycleStatus";
+
+        public static bool IsAutomaticStatus(LifecycleStatus status)
+            => status == LifecycleStatus.Incomplete || status == LifecycleStatus.Scheduled;
+
+        public static void EnsureRequestAllowed(
+            LifecycleStatus? current,
+            LifecycleStatus requested,
+            DateTime? scheduledDate,
+            bool? scheduleWeekOnly)
+        {
+            if (!IsAutomaticStatus(requested))
+                return;
+
+            if (requested == LifecycleStatus.Scheduled
+                && !WorkOrderBoardMutationRules.HasConcreteSchedule(scheduledDate, scheduleWeekOnly))
+            {
+                throw new WorkOrderBoardValidationException(
+                    "ScheduledRequiresDate",
+                    "Scheduled requires a concrete scheduledDate when scheduleWeekOnly is not true.");
+            }
+
+            // why: the board client restates the derived status after a schedule patch; that is a no-op, not a forge.
+            if (current == requested)
+                return;
+
+            if (requested == LifecycleStatus.Scheduled
+                && WorkOrderBoardMutationRules.ShouldPromoteToScheduled(current, scheduledDate, scheduleWeekOnly))
+            {
+                return;
+            }
+
+            throw new WorkOrderBoardValidationException(
+                AutomaticStatusCode,
+                $"{LifecycleStatusMapper.ToFeLabel(requested)} is set automatically and cannot be selected manually.");
+        }
+    }
+}
diff --git a/SeaHaven.Services/Implementation/WorkOrderBoardUpdateService.cs b/SeaHaven.Services/Implementation/WorkOrderBoardUpdateService.cs
index 18604b2..533ece6 100644
--- a/SeaHaven.Services/Implementation/WorkOrderBoardUpdateService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderBoardUpdateService.cs
@@ -516,15 +516,11 @@ namespace SeaHaven.Services.Implementation
                     "Replace the provisional SH work order number before marking the work order Completed.");
             }
 
-            if (parsed == LifecycleStatus.Scheduled
-                && !WorkOrderBoardMutationRules.HasConcreteSchedule(
-                    workOrder.ScheduledDate,
-                    workOrder.ScheduleWeekOnly))
-            {
-                throw new WorkOrderBoardValidationException(
-                    "ScheduledRequiresDate",
-                    "Scheduled requires a concrete scheduledDate when scheduleWeekOnly is not true.");
-            }
+            WorkOrderBoardPatchLifecycleRules.EnsureRequestAllowed(
+                workOrder.LifecycleStatus,
+                parsed.Value,
+                workOrder.ScheduledDate,
+                workOrder.ScheduleWeekOnly);
 
             var changes = new List<FieldChange>();
             var old = workOrder.LifecycleStatus?.ToString() ?? workOrder.Status;
diff --git a/SeaHavenIndustries.Tests/WorkOrderBoardPatchLifecycleRulesTests.cs b/SeaHavenIndustries.Tests/WorkOrderBoardPatchLifecycleRulesTests.cs
new file mode 100644
index 0000000..050b78b
--- /dev/null
+++ b/SeaHavenIndustries.Tests/WorkOrderBoardPatchLifecycleRulesTests.cs
@@ -0,0 +1,171 @@
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using Microsoft.EntityFrameworkCore;
+using SeaHaven.DataServices.Implementation;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Exceptions;
+using SeaHaven.Services.Helpers;
+using SeaHaven.Services.Implementation;
+
+namespace SeaHavenIndustries.Tests;
+
+/// <summary>SH-169 / SH-357 / SH-358: automatic lifecycle states cannot be forged through the board PATCH.</summary>
+public class WorkOrderBoardPatchLifecycleRulesTests
+{
+    private static readonly byte[] Version = { 1, 0, 0, 0, 0, 0, 0, 1 };
+
+    private static (ApplicationDbContext Context, WorkOrderBoardUpdateService Service) CreateSut()
+    {
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseInMemoryDatabase(Guid.NewGuid().ToString())
+            .Options;
+        var context = new ApplicationDbContext(options);
+        var fieldLocks = new WorkOrderFieldLockService(new WorkOrderFieldLockDataService(context));
+        var audit = new WorkOrderAuditService(new WorkOrderAuditDataService(context), fieldLocks);
+        var service = new WorkOrderBoardUpdateService(
+            new WorkOrderBoardDataService(context),
+            new WorkOrderBoardMutationDataService(context),
+            audit);
+        return (context, service);
+    }
+
+    private static async Task SeedAsync(
+        ApplicationDbContext context,
+        LifecycleStatus status,
+        DateTime? scheduledDate = null)
+    {
+        context.workOrders.Add(new WorkOrder
+        {
+            Id = 1,
+            LifecycleStatus = status,
+            ScheduledDate = scheduledDate,
+            ScheduleWeekOnly = false,
+            RowVersion = Version
+        });
+        await context.SaveChangesAsync();
+    }
+
+    private static Task<WorkOrderBoardRowDto> PatchStatusAsync(WorkOrderBoardUpdateService service, string value)
+        => service.PatchFieldAsync(1, new WorkOrderBoardPatchRequestDto
+        {
+            Field = WorkOrderBoardFieldNames.LifecycleStatus,
+            Value = value,
+            WorkOrderVersion = Convert.ToBase64String(Version)
+        }, "actor-1");
+
+    [Theory]
+    [InlineData(LifecycleStatus.Pending, "Incomplete")]
+    [InlineData(LifecycleStatus.InProgress, "Incomplete")]
+    [InlineData(LifecycleStatus.EnRoute, "incomplete")]
+    [InlineData(LifecycleStatus.OnSite, "1")]
+    [InlineData(LifecycleStatus.Pending, "Open")]
+    public async Task PatchField_IncompleteRequestFromAnotherState_IsRejectedWithoutChangeOrAudit(
+        LifecycleStatus current,
+        string requested)
+    {
+        var (context, service) = CreateSut();
+        await SeedAsync(context, current);
+
+        var ex = await Assert.ThrowsAsync<WorkOrderBoardValidationException>(
+            () => PatchStatusAsync(service, requested));
+
+        Assert.Equal(WorkOrderBoardPatchLifecycleRules.AutomaticStatusCode, ex.Code);
+        Assert.Equal(current, (await context.workOrders.SingleAsync()).LifecycleStatus);
+        Assert.Empty(await context.WorkOrderAuditLogs.ToListAsync());
+    }
+
+    [Theory]
+    [InlineData(LifecycleStatus.EnRoute)]
+    [InlineData(LifecycleStatus.OnSite)]
+    [InlineData(LifecycleStatus.InProgress)]
+    [InlineData(LifecycleStatus.PendingQuote)]
+    public async Task PatchField_ScheduledRequestWhenDerivationWouldNotPromote_IsRejected(LifecycleStatus current)
+    {
+        var (context, service) = CreateSut();
+        await SeedAsync(context, current, DateTime.UtcNow.Date.AddDays(7));
+
+        var ex = await Assert.ThrowsAsync<WorkOrderBoardValidationException>(
+            () => PatchStatusAsync(service, "Scheduled"));
+
+        Assert.Equal(WorkOrderBoardPatchLifecycleRules.AutomaticStatusCode, ex.Code);
+        Assert.Equal(current, (await context.workOrders.SingleAsync()).LifecycleStatus);
+        Assert.Empty(await context.WorkOrderAuditLogs.ToListAsync());
+    }
+
+    [Theory]
+    [InlineData("Past Due")]
+    [InlineData("PastDue")]
+    public async Task PatchField_PastDueIsNotARequestableLifecycleStatus(string requested)
+    {
+        var (context, service) = CreateSut();
+        await SeedAsync(context, LifecycleStatus.Pending);
+
+        var ex = await Assert.ThrowsAsync<WorkOrderBoardValidationException>(
+            () => PatchStatusAsync(service, requested));
+
+        Assert.Equal("InvalidValue", ex.Code);
+        Assert.Equal(LifecycleStatus.Pending, (await context.workOrders.SingleAsync()).LifecycleStatus);
+    }
+
+    [Fact]
+    public async Task PatchField_RestatingDerivedScheduledStatus_IsANoOp()
+    {
+        var (context, service) = CreateSut();
+        await SeedAsync(context, LifecycleStatus.Scheduled, DateTime.UtcNow.Date.AddDays(7));
+
+        var result = await PatchStatusAsync(service, "Scheduled");
+
+        Assert.Equal(LifecycleStatus.Scheduled, result.LifecycleStatus);
+        Assert.Empty(await context.WorkOrderAuditLogs.ToListAsync());
+    }
+
+    [Theory]
+    [InlineData(LifecycleStatus.Incomplete, "Pending")]
+    [InlineData(LifecycleStatus.Pending, "En Route")]
+    [InlineData(LifecycleStatus.EnRoute, "On Site")]
+    [InlineData(LifecycleStatus.OnSite, "In Progress")]
+    [InlineData(LifecycleStatus.InProgress, "Pending")]
+    public async Task PatchField_ManualTransition_PersistsAndAuditsActorPreviousAndNew(
+        LifecycleStatus current,
+        string requested)
+    {
+        var (context, service) = CreateSut();
+        await SeedAsync(context, current);
+
+        var result = await PatchStatusAsync(service, requested);
+
+        var expected = LifecycleStatusMapper.ParseLifecycleStatus(requested)!.Value;
+        Assert.Equal(expected, result.LifecycleStatus);
+        var audit = Assert.Single(await context.WorkOrderAuditLogs.ToListAsync());
+        Assert.Equal(AuditActionType.StatusChanged.ToString(), audit.Action);
+        Assert.Equal("actor-1", audit.UserId);
+        Assert.Equal(current.ToString(), audit.OldValue);
+        Assert.Equal(expected.ToString(), audit.NewValue);
+        Assert.NotEqual(default, audit.CreatedAt);
+    }
+
+    [Theory]
+    [InlineData(LifecycleStatus.Incomplete, LifecycleStatus.Incomplete, false)]
+    [InlineData(LifecycleStatus.Pending, LifecycleStatus.Incomplete, true)]
+    [InlineData(LifecycleStatus.Pending, LifecycleStatus.Pending, false)]
+    [InlineData(LifecycleStatus.Pending, LifecycleStatus.EnRoute, false)]
+    [InlineData(LifecycleStatus.InProgress, LifecycleStatus.Scheduled, true)]
+    [InlineData(LifecycleStatus.Incomplete, LifecycleStatus.Scheduled, false)]
+    [InlineData(LifecycleStatus.Pending, LifecycleStatus.Scheduled, false)]
+    public void EnsureRequestAllowed_WithConcreteSchedule(
+        LifecycleStatus current,
+        LifecycleStatus requested,
+        bool rejects)
+    {
+        var date = new DateTime(2026, 9, 21);
+        var ex = Record.Exception(() =>
+            WorkOrderBoardPatchLifecycleRules.EnsureRequestAllowed(current, requested, date, false));
+
+        if (rejects)
+            Assert.Equal(
+                WorkOrderBoardPatchLifecycleRules.AutomaticStatusCode,
+                Assert.IsType<WorkOrderBoardValidationException>(ex).Code);
+        else
+            Assert.Null(ex);
+    }
+}

From 776c8be5cb50c9555c85854df304e921e32a2e96 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 14:53:58 -0300
Subject: [PATCH 010/183] fix(work-orders): resolve undetermined media MIME
 from the extension (SH-370) (#122)

The media allowlist refused any upload whose multipart part had an empty or
application/octet-stream Content-Type before looking at the extension or the
bytes. Browsers take that header from File.type, which mobile browsers leave
empty when the OS cannot classify a picked file, while the client-side gate
already accepts such files on extension alone. A real JPG/MP4/MOV could pass
the dialog and still be refused by the API.

Only an undetermined type now falls back to the extension. The resolved type
still goes through the SH-171 document/category rule, the extension pairing,
and the magic-byte signature check, so an octet-stream .pdf stays refused for
Completion, Before and After, and a declared type is never overridden.
---
 .../Helpers/WorkOrderMediaFileRules.cs        | 28 +++++-
 .../WorkOrderPhase6Tests.cs                   | 98 +++++++++++++++++++
 2 files changed, 123 insertions(+), 3 deletions(-)

diff --git a/SeaHaven.Services/Helpers/WorkOrderMediaFileRules.cs b/SeaHaven.Services/Helpers/WorkOrderMediaFileRules.cs
index 1132a4f..e1281d4 100644
--- a/SeaHaven.Services/Helpers/WorkOrderMediaFileRules.cs
+++ b/SeaHaven.Services/Helpers/WorkOrderMediaFileRules.cs
@@ -32,6 +32,27 @@ namespace SeaHaven.Services.Helpers
                     new HashSet<string>(StringComparer.OrdinalIgnoreCase) { ".docx" }
             };
 
+        // A browser fills the multipart part's Content-Type from File.type, which mobile
+        // browsers leave empty (or the client sends octet-stream) when the OS cannot
+        // classify a picked file. Only then is the type resolved from the extension; the
+        // category rule, extension pairing, and magic-byte signature still decide.
+        private static readonly HashSet<string> UndeterminedContentTypes =
+            new(StringComparer.OrdinalIgnoreCase) { string.Empty, "application/octet-stream" };
+
+        private static string? ResolveContentType(string declaredType, string extension)
+        {
+            if (!UndeterminedContentTypes.Contains(declaredType))
+                return AllowedContentTypes.Contains(declaredType) ? declaredType : null;
+
+            foreach (var (contentType, extensions) in ExtensionsByContentType)
+            {
+                if (extensions.Contains(extension))
+                    return contentType;
+            }
+
+            return null;
+        }
+
         private static string CanonicalContentType(string contentType)
         {
             if (contentType.Equals("image/jpg", StringComparison.OrdinalIgnoreCase))
@@ -47,10 +68,12 @@ namespace SeaHaven.Services.Helpers
                 return false;
 
             var declaredType = (file.ContentType ?? string.Empty).Trim();
-            if (string.IsNullOrWhiteSpace(declaredType) || !AllowedContentTypes.Contains(declaredType))
+            var extension = Path.GetExtension(file.FileName ?? string.Empty);
+            var resolvedType = ResolveContentType(declaredType, extension);
+            if (resolvedType == null)
                 return false;
 
-            var contentType = CanonicalContentType(declaredType);
+            var contentType = CanonicalContentType(resolvedType);
             var resolvedCategory = category ?? WorkOrderMediaCategory.Extra;
             if (IsDocument(contentType)
                 && resolvedCategory is not WorkOrderMediaCategory.Extra and not WorkOrderMediaCategory.Aveta)
@@ -58,7 +81,6 @@ namespace SeaHaven.Services.Helpers
                 return false;
             }
 
-            var extension = Path.GetExtension(file.FileName ?? string.Empty);
             if (string.IsNullOrWhiteSpace(extension)
                 || !ExtensionsByContentType.TryGetValue(contentType, out var allowedExtensions)
                 || !allowedExtensions.Contains(extension))
diff --git a/SeaHavenIndustries.Tests/WorkOrderPhase6Tests.cs b/SeaHavenIndustries.Tests/WorkOrderPhase6Tests.cs
index ce285c1..468e2b0 100644
--- a/SeaHavenIndustries.Tests/WorkOrderPhase6Tests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderPhase6Tests.cs
@@ -2004,6 +2004,104 @@ public class WorkOrderMediaFileRulesTests
         Assert.False(WorkOrderMediaFileRules.IsAllowed(FormFile(new byte[] { 1, 2, 3 }, "photo.jpg", "image/jpeg")));
     }
 
+    // Signatures below are the leading bytes of files produced by real encoders:
+    // ffmpeg (mp4 isom, mov qt, jpeg JFIF, png) and an iPhone/macOS .MOV (ftyp qt).
+    private static readonly byte[] RealJpeg =
+        { 0xFF, 0xD8, 0xFF, 0xE0, 0x00, 0x10, 0x4A, 0x46, 0x49, 0x46, 0x00, 0x01, 0x02, 0x00, 0x00, 0x01 };
+    private static readonly byte[] RealPng =
+        { 0x89, 0x50, 0x4E, 0x47, 0x0D, 0x0A, 0x1A, 0x0A, 0x00, 0x00, 0x00, 0x0D, 0x49, 0x48, 0x44, 0x52 };
+    private static readonly byte[] RealMp4 =
+        { 0x00, 0x00, 0x00, 0x20, 0x66, 0x74, 0x79, 0x70, 0x69, 0x73, 0x6F, 0x6D, 0x00, 0x00, 0x02, 0x00 };
+    private static readonly byte[] RealMov =
+        { 0x00, 0x00, 0x00, 0x14, 0x66, 0x74, 0x79, 0x70, 0x71, 0x74, 0x20, 0x20, 0x00, 0x00, 0x00, 0x00 };
+    private static readonly byte[] RealPdf = Encoding.ASCII.GetBytes("%PDF-1.7\n%\u00e2\u00e3\n1 0 obj\n");
+
+    [Theory]
+    [InlineData("photo.jpg", "image/jpeg")]
+    [InlineData("IMG_0001.JPG", "image/jpeg")]
+    [InlineData("photo.jpeg", "image/jpg")]
+    [InlineData("scan.png", "image/png")]
+    [InlineData("clip.mp4", "video/mp4")]
+    [InlineData("VID_0001.MP4", "video/mp4")]
+    [InlineData("IMG_1587.MOV", "video/quicktime")]
+    public void IsAllowed_RealMediaSignatures_ReturnsTrueForEveryCategory(string fileName, string contentType)
+    {
+        var bytes = BytesFor(fileName);
+        foreach (var category in new[]
+                 {
+                     WorkOrderMediaCategory.Extra, WorkOrderMediaCategory.Before, WorkOrderMediaCategory.After
+                 })
+        {
+            Assert.True(WorkOrderMediaFileRules.IsAllowed(FormFile(bytes, fileName, contentType), category));
+        }
+    }
+
+    [Theory]
+    [InlineData("photo.jpg", "")]
+    [InlineData("IMG_0001.JPG", "application/octet-stream")]
+    [InlineData("scan.png", "")]
+    [InlineData("clip.mp4", "application/octet-stream")]
+    [InlineData("IMG_1587.MOV", "")]
+    [InlineData("IMG_1587.mov", "application/octet-stream")]
+    public void IsAllowed_UndeterminedMimeFromMobileBrowser_ResolvesFromExtensionAndSignature(
+        string fileName,
+        string contentType)
+    {
+        // Some mobile browsers leave File.type empty (or send octet-stream) when the OS
+        // cannot classify a picked file; the extension plus magic bytes must decide.
+        Assert.True(WorkOrderMediaFileRules.IsAllowed(
+            FormFile(BytesFor(fileName), fileName, contentType), WorkOrderMediaCategory.Before));
+    }
+
+    [Fact]
+    public void IsAllowed_UndeterminedMime_StillRequiresMatchingSignature()
+    {
+        var html = Encoding.UTF8.GetBytes("<html>not an image</html>");
+        Assert.False(WorkOrderMediaFileRules.IsAllowed(FormFile(html, "photo.jpg", "")));
+        Assert.False(WorkOrderMediaFileRules.IsAllowed(FormFile(RealPng, "photo.jpg", "application/octet-stream")));
+        Assert.False(WorkOrderMediaFileRules.IsAllowed(FormFile(RealJpeg, "clip.mov", "")));
+        Assert.False(WorkOrderMediaFileRules.IsAllowed(FormFile(RealJpeg, "photo.heic", "")));
+        Assert.False(WorkOrderMediaFileRules.IsAllowed(FormFile(RealJpeg, "photo", "application/octet-stream")));
+    }
+
+    [Theory]
+    [InlineData(WorkOrderMediaCategory.Completion)]
+    [InlineData(WorkOrderMediaCategory.Before)]
+    [InlineData(WorkOrderMediaCategory.After)]
+    public void IsAllowed_UndeterminedMimePdf_StillRefusedOutsideDocumentCategories(WorkOrderMediaCategory category)
+    {
+        // SH-337 / SH-171: resolving an empty MIME from ".pdf" must not reopen photo slots to documents.
+        Assert.False(WorkOrderMediaFileRules.IsAllowed(FormFile(RealPdf, "report.pdf", ""), category));
+        Assert.False(WorkOrderMediaFileRules.IsAllowed(
+            FormFile(RealPdf, "report.pdf", "application/octet-stream"), category));
+    }
+
+    [Fact]
+    public void IsAllowed_UndeterminedMimePdf_AcceptedForExtra()
+    {
+        Assert.True(WorkOrderMediaFileRules.IsAllowed(
+            FormFile(RealPdf, "report.pdf", ""), WorkOrderMediaCategory.Extra));
+    }
+
+    [Fact]
+    public void IsAllowed_DeclaredMimeMismatchingExtension_StillRejected()
+    {
+        // A concrete declared type is authoritative; only an undetermined one falls back to the extension.
+        Assert.False(WorkOrderMediaFileRules.IsAllowed(FormFile(RealMov, "clip.mov", "video/mp4")));
+        Assert.False(WorkOrderMediaFileRules.IsAllowed(FormFile(RealJpeg, "photo.jpg", "image/heic")));
+    }
+
+    private static byte[] BytesFor(string fileName)
+        => Path.GetExtension(fileName).ToLowerInvariant() switch
+        {
+            ".jpg" or ".jpeg" => RealJpeg,
+            ".png" => RealPng,
+            ".mp4" => RealMp4,
+            ".mov" => RealMov,
+            ".pdf" => RealPdf,
+            _ => throw new ArgumentOutOfRangeException(nameof(fileName))
+        };
+
     [Fact]
     public void IsAllowed_ValidMp4Ftyp_ReturnsTrue()
     {

From 4b772c8db35e2e17d99abf4a56d98106fb0a376e Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 15:01:10 -0300
Subject: [PATCH 011/183] fix(work-orders): keep SH placeholder WO numbers and
 block downgrades (#123)

SH-320: the WO number normalizer stripped every non-digit, so a manually
entered SH placeholder (e.g. SH00001) was saved as 00000000001 on both
create and patch. Keep the SH prefix, and reject replacing a saved real
APM number with an SH placeholder.
---
 .../Helpers/WorkOrderNumberNormalizer.cs      | 33 +++++++++++-
 .../WorkOrderBoardUpdateService.cs            |  8 +++
 .../WorkOrderBoardCreateServiceTests.cs       | 18 +++++++
 .../WorkOrderBoardUpdateServiceTests.cs       | 51 +++++++++++++++++++
 .../WorkOrderNumberNormalizerTests.cs         | 26 ++++++++++
 5 files changed, 135 insertions(+), 1 deletion(-)

diff --git a/SeaHaven.Services/Helpers/WorkOrderNumberNormalizer.cs b/SeaHaven.Services/Helpers/WorkOrderNumberNormalizer.cs
index 59f8494..8e97f43 100644
--- a/SeaHaven.Services/Helpers/WorkOrderNumberNormalizer.cs
+++ b/SeaHaven.Services/Helpers/WorkOrderNumberNormalizer.cs
@@ -5,6 +5,8 @@ namespace SeaHaven.Services.Helpers
     public static class WorkOrderNumberNormalizer
     {
         private const int RequiredLength = 11;
+        private const string ProvisionalPrefix = "SH";
+        private const int MinimumProvisionalDigits = 5;
 
         public static bool TryNormalize(string? input, out string normalized, out string? error)
         {
@@ -17,7 +19,11 @@ namespace SeaHaven.Services.Helpers
                 return false;
             }
 
-            var digits = Regex.Replace(input.Trim(), @"\D", "");
+            var trimmed = input.Trim();
+            if (WorkOrderNumberRules.IsProvisional(trimmed))
+                return TryNormalizeProvisional(trimmed, out normalized, out error);
+
+            var digits = Regex.Replace(trimmed, @"\D", "");
             if (digits.Length == 0)
             {
                 error = "WO number must contain digits.";
@@ -33,5 +39,30 @@ namespace SeaHaven.Services.Helpers
             normalized = digits.PadLeft(RequiredLength, '0');
             return true;
         }
+
+        // SH-320: an SH-prefixed number is the documented placeholder for a WO still
+        // awaiting its real APM number; keep the prefix instead of stripping it to digits.
+        private static bool TryNormalizeProvisional(string trimmed, out string normalized, out string? error)
+        {
+            normalized = "";
+            error = null;
+
+            var digits = Regex.Replace(trimmed[ProvisionalPrefix.Length..], @"\D", "");
+            if (digits.Length == 0)
+            {
+                error = "WO number must contain digits.";
+                return false;
+            }
+
+            var candidate = ProvisionalPrefix + digits.PadLeft(MinimumProvisionalDigits, '0');
+            if (candidate.Length > RequiredLength)
+            {
+                error = $"WO number cannot exceed {RequiredLength} characters.";
+                return false;
+            }
+
+            normalized = candidate;
+            return true;
+        }
     }
 }
diff --git a/SeaHaven.Services/Implementation/WorkOrderBoardUpdateService.cs b/SeaHaven.Services/Implementation/WorkOrderBoardUpdateService.cs
index 533ece6..b415035 100644
--- a/SeaHaven.Services/Implementation/WorkOrderBoardUpdateService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderBoardUpdateService.cs
@@ -334,6 +334,14 @@ namespace SeaHaven.Services.Implementation
             if (!WorkOrderNumberNormalizer.TryNormalize(value, out var normalized, out var error))
                 throw new WorkOrderBoardValidationException("InvalidWoNumber", error ?? "Invalid WO number.");
 
+            // SH-320: a saved real APM number can never be downgraded to an SH placeholder.
+            if (WorkOrderNumberRules.IsProvisional(normalized)
+                && !string.IsNullOrWhiteSpace(workOrder.InternalWONumber)
+                && !WorkOrderNumberRules.IsProvisional(workOrder.InternalWONumber))
+                throw new WorkOrderBoardValidationException(
+                    "WoNumberDowngrade",
+                    "Cannot replace an APM work order number with an internal number.");
+
             if (await _boardDataService.InternalWoNumberExistsAsync(normalized, workOrder.Id, cancellationToken))
                 throw new WorkOrderBoardValidationException("DuplicateWoNumber", "WO number already exists.");
 
diff --git a/SeaHavenIndustries.Tests/WorkOrderBoardCreateServiceTests.cs b/SeaHavenIndustries.Tests/WorkOrderBoardCreateServiceTests.cs
index dd2fd10..8a327e4 100644
--- a/SeaHavenIndustries.Tests/WorkOrderBoardCreateServiceTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderBoardCreateServiceTests.cs
@@ -87,6 +87,24 @@ public class WorkOrderBoardCreateServiceTests
         Assert.Equal("00000012345", result.WoNumber);
     }
 
+    [Theory]
+    [InlineData("SH00001", "SH00001")]
+    [InlineData("sh00042", "SH00042")]
+    public async Task Create_WithManualShPlaceholderWoNumber_KeepsShPrefix(string requested, string expected)
+    {
+        var (_, service) = CreateSut();
+
+        var result = await service.CreateAsync(new WorkOrderBoardCreateRequestDto
+        {
+            WoNumber = requested,
+            WorkOrderType = WorkOrderType.PM,
+            SiteCode = "DAL",
+            LocationId = 1
+        }, WorkOrderAccountTestHelpers.AccountUser(), "actor-1");
+
+        Assert.Equal(expected, result.WoNumber);
+    }
+
     [Fact]
     public async Task Create_DuplicateWoNumber_Throws()
     {
diff --git a/SeaHavenIndustries.Tests/WorkOrderBoardUpdateServiceTests.cs b/SeaHavenIndustries.Tests/WorkOrderBoardUpdateServiceTests.cs
index 975c58a..b2c715e 100644
--- a/SeaHavenIndustries.Tests/WorkOrderBoardUpdateServiceTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderBoardUpdateServiceTests.cs
@@ -1158,6 +1158,57 @@ public class WorkOrderBoardUpdateServiceTests
         Assert.Equal("00000012345", result.WoNumber);
     }
 
+    [Fact]
+    public async Task PatchField_ShPlaceholderReplacesShPlaceholder()
+    {
+        var (context, service) = CreateSut();
+        var wo = new WorkOrder
+        {
+            Id = 1,
+            InternalWONumber = "SH00001",
+            LifecycleStatus = LifecycleStatus.Incomplete,
+            RowVersion = new byte[] { 1, 0, 0, 0, 0, 0, 0, 1 }
+        };
+        context.workOrders.Add(wo);
+        await context.SaveChangesAsync();
+
+        var result = await service.PatchFieldAsync(1, new WorkOrderBoardPatchRequestDto
+        {
+            Field = WorkOrderBoardFieldNames.WoNumber,
+            Value = "SH00007",
+            WorkOrderVersion = ToVersion(wo)
+        }, "actor-1");
+
+        Assert.Equal("SH00007", result.WoNumber);
+    }
+
+    [Fact]
+    public async Task PatchField_RejectsReplacingRealWoNumberWithShPlaceholder()
+    {
+        var (context, service) = CreateSut();
+        var wo = new WorkOrder
+        {
+            Id = 1,
+            InternalWONumber = "00000012345",
+            LifecycleStatus = LifecycleStatus.Incomplete,
+            RowVersion = new byte[] { 1, 0, 0, 0, 0, 0, 0, 1 }
+        };
+        context.workOrders.Add(wo);
+        await context.SaveChangesAsync();
+
+        var ex = await Assert.ThrowsAsync<WorkOrderBoardValidationException>(() =>
+            service.PatchFieldAsync(1, new WorkOrderBoardPatchRequestDto
+            {
+                Field = WorkOrderBoardFieldNames.WoNumber,
+                Value = "SH00001",
+                WorkOrderVersion = ToVersion(wo)
+            }, "actor-1"));
+
+        Assert.Equal("WoNumberDowngrade", ex.Code);
+        var stored = await context.workOrders.SingleAsync(w => w.Id == 1);
+        Assert.Equal("00000012345", stored.InternalWONumber);
+    }
+
     [Fact]
     public async Task PatchField_RejectsDuplicateWoNumber()
     {
diff --git a/SeaHavenIndustries.Tests/WorkOrderNumberNormalizerTests.cs b/SeaHavenIndustries.Tests/WorkOrderNumberNormalizerTests.cs
index dcc4755..708f25d 100644
--- a/SeaHavenIndustries.Tests/WorkOrderNumberNormalizerTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderNumberNormalizerTests.cs
@@ -40,4 +40,30 @@ public class WorkOrderNumberNormalizerTests
         Assert.False(ok);
         Assert.Contains("11", error);
     }
+
+    [Theory]
+    [InlineData("SH00001", "SH00001")]
+    [InlineData(" sh00001 ", "SH00001")]
+    [InlineData("SH-00001", "SH00001")]
+    [InlineData("SH1", "SH00001")]
+    [InlineData("SH123456789", "SH123456789")]
+    public void TryNormalize_KeepsShPlaceholderPrefix(string input, string expected)
+    {
+        var ok = WorkOrderNumberNormalizer.TryNormalize(input, out var normalized, out var error);
+
+        Assert.True(ok);
+        Assert.Null(error);
+        Assert.Equal(expected, normalized);
+    }
+
+    [Theory]
+    [InlineData("SH")]
+    [InlineData("SH1234567890")]
+    public void TryNormalize_RejectsInvalidShPlaceholder(string input)
+    {
+        var ok = WorkOrderNumberNormalizer.TryNormalize(input, out _, out var error);
+
+        Assert.False(ok);
+        Assert.NotNull(error);
+    }
 }

From 4ae6d02d55ade4f4e56bc5b657b79049b7e9943b Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 15:52:02 -0300
Subject: [PATCH 012/183] feat(deploy): rebuild protected staging lane

---
 .github/workflows/deploy.yml                  | 464 ++++++++++++++++--
 scripts/check-terraform-import-plan.py        |  62 ++-
 scripts/terraform_import_plan_resources.py    |  51 ++
 scripts/test-terraform-import-plan-check.py   |  81 ++-
 terraform/live/README.md                      |  14 +-
 .../live/modules/environment-owned/main.tf    |   4 +-
 .../modules/environment-owned/variables.tf    |   6 +
 terraform/live/staging/main.tf                |   4 +-
 terraform/live/staging/variables.tf           |  15 +
 9 files changed, 635 insertions(+), 66 deletions(-)
 create mode 100644 terraform/live/staging/variables.tf

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 1cdcf0b..ea2d3ef 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -4,7 +4,7 @@ on:
   pull_request:
     branches: [dev, staging, main]
   push:
-    branches: [dev]
+    branches: [dev, staging]
   workflow_dispatch:
 
 permissions:
@@ -143,7 +143,6 @@ jobs:
           done
           echo "Application version did not become PROCESSED." >&2
           exit 1
-
       - name: Discard blocking VCS run before GitHub CD
         run: |
           set -euo pipefail
@@ -639,11 +638,13 @@ jobs:
           exit 1
 
   deploy-staging:
-    name: Deploy shoc-backend-staging to Elastic Beanstalk
+    name: Deploy shoc-backend-staging through Terraform
     if: >
-      github.event_name == 'workflow_dispatch' && github.ref == 'refs/heads/staging'
+      (github.event_name == 'push' && github.ref == 'refs/heads/staging') ||
+      (github.event_name == 'workflow_dispatch' && github.ref == 'refs/heads/staging')
     needs: validate
     runs-on: ubuntu-latest
+    timeout-minutes: 180
     permissions:
       contents: read
       id-token: write
@@ -652,28 +653,17 @@ jobs:
     concurrency:
       group: deploy-staging
       cancel-in-progress: false
+    env:
+      TF_CLOUD_ORGANIZATION: seahaven
+      TF_API_TOKEN: ${{ secrets.TF_API_TOKEN }}
+      EB_APPLICATION_NAME: shoc-backend
+      EB_ENVIRONMENT_NAME: shoc-backend-staging
+      SMOKE_URL: https://api.staging.seahaven.com
+      EB_BUCKET: elasticbeanstalk-us-east-1-396287094661
     steps:
       - name: Checkout
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
-      - name: Resolve deploy target
-        id: target
-        run: |
-          set -euo pipefail
-          application=shoc-backend
-          environment=shoc-backend-staging
-          smoke_url=https://api.staging.seahaven.com
-          {
-            echo "application=${application}"
-            echo "environment=${environment}"
-            echo "smoke_url=${smoke_url}"
-          } >> "${GITHUB_OUTPUT}"
-          {
-            echo "EB_APPLICATION_NAME=${application}"
-            echo "EB_ENVIRONMENT_NAME=${environment}"
-            echo "SMOKE_URL=${smoke_url}"
-          } >> "${GITHUB_ENV}"
-
       - name: Set up .NET
         uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
         with:
@@ -703,26 +693,227 @@ jobs:
           echo "$prev" > .artifacts/elastic-beanstalk/previous-version.txt
           echo "Previous version label: $prev"
 
-      - name: Deploy prebuilt bundle to existing environment
-        uses: aws-actions/aws-elasticbeanstalk-deploy@7883cdd454c162051bf6fc13389536b045149b4c # v1.0.8
+      - name: Assign immutable release identity
+        id: release
+        run: |
+          set -euo pipefail
+          version_label="${GITHUB_SHA}-${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}"
+          s3_key="shoc-backend/releases/staging/${GITHUB_SHA}/${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}/site.zip"
+          {
+            echo "version_label=${version_label}"
+            echo "s3_key=${s3_key}"
+          } >> "${GITHUB_OUTPUT}"
+
+      - name: Upload immutable bundle
+        run: |
+          set -euo pipefail
+          aws s3 cp .artifacts/elastic-beanstalk/site.zip \
+            "s3://${EB_BUCKET}/${{ steps.release.outputs.s3_key }}" \
+            --region us-east-1
+
+      - name: Create Elastic Beanstalk application version
+        run: |
+          set -euo pipefail
+          aws elasticbeanstalk create-application-version \
+            --application-name "${EB_APPLICATION_NAME}" \
+            --version-label "${{ steps.release.outputs.version_label }}" \
+            --description "GitHub Actions ${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}/actions/runs/${GITHUB_RUN_ID} attempt ${GITHUB_RUN_ATTEMPT}" \
+            --source-bundle "S3Bucket=${EB_BUCKET},S3Key=${{ steps.release.outputs.s3_key }}" \
+            --process \
+            --region us-east-1
+
+          status="UNPROCESSED"
+          for _ in $(seq 1 36); do
+            status="$(aws elasticbeanstalk describe-application-versions \
+              --application-name "${EB_APPLICATION_NAME}" \
+              --version-labels "${{ steps.release.outputs.version_label }}" \
+              --region us-east-1 \
+              --query 'ApplicationVersions[0].Status' \
+              --output text)"
+            echo "application version status: $status"
+            if [ "$status" = "PROCESSED" ]; then
+              exit 0
+            fi
+            if [ "$status" = "FAILED" ]; then
+              echo "Elastic Beanstalk failed to process ${{ steps.release.outputs.version_label }}." >&2
+              exit 1
+            fi
+            sleep 5
+          done
+          echo "Application version did not become PROCESSED." >&2
+          exit 1
+
+      - name: Discard blocking VCS run before GitHub CD
+        run: |
+          set -euo pipefail
+          python3 << 'PY'
+          import json, os, urllib.error, urllib.request
+
+          token = os.environ["TF_API_TOKEN"]
+          workspace = "shoc-backend-staging"
+          headers = {
+              "Authorization": f"Bearer {token}",
+              "Content-Type": "application/vnd.api+json",
+          }
+
+          def get(url):
+              req = urllib.request.Request(url, headers=headers)
+              with urllib.request.urlopen(req) as resp:
+                  return json.load(resp)
+
+          def post(url, payload):
+              data = json.dumps(payload).encode()
+              req = urllib.request.Request(
+                  url, data=data, method="POST", headers=headers
+              )
+              try:
+                  with urllib.request.urlopen(req) as resp:
+                      return resp.status
+              except urllib.error.HTTPError as exc:
+                  if exc.code in (409, 404):
+                      body = exc.read().decode("utf-8", "replace")
+                      print(f"discard returned HTTP {exc.code}: {body}")
+                      return exc.code
+                  raise
+
+          ws = get(
+              f"https://app.terraform.io/api/v2/organizations/seahaven/workspaces/{workspace}"
+          )["data"]
+          attrs = ws["attributes"]
+          if attrs.get("auto-apply") is True:
+              raise SystemExit("shoc-backend-staging auto-apply is on; refuse to continue")
+          if not attrs.get("speculative-enabled"):
+              raise SystemExit("speculative plans are off; refuse to continue")
+          if (attrs.get("vcs-repo") or {}).get("tags-regex"):
+              raise SystemExit("tag-based VCS triggering is set; refuse to continue")
+          expected_patterns = [
+              "terraform/live/staging/**",
+              "terraform/live/modules/**",
+          ]
+          if attrs.get("trigger-patterns") != expected_patterns:
+              raise SystemExit(
+                  "trigger-patterns must be "
+                  f"{expected_patterns}; got {attrs.get('trigger-patterns')}"
+              )
+          if not attrs.get("locked"):
+              print("workspace is unlocked")
+              raise SystemExit(0)
+
+          current = (
+              ws.get("relationships", {})
+              .get("current-run", {})
+              .get("data")
+          )
+          if not current:
+              raise SystemExit("workspace is locked without a current run")
+          run_id = current["id"]
+          run = get(f"https://app.terraform.io/api/v2/runs/{run_id}")["data"]
+          run_attrs = run["attributes"]
+          status = run_attrs.get("status")
+          plan_only = run_attrs.get("plan-only")
+          print(f"current run {run_id} status={status} plan-only={plan_only}")
+          if plan_only:
+              print("speculative run does not block GitHub CD")
+              raise SystemExit(0)
+          if status in {"applying", "apply_queued"}:
+              raise SystemExit(f"{run_id} is {status}; wait, do not discard an apply")
+          discardable = {
+              "pending", "planned", "cost_estimated", "policy_checked", "policy_override"
+          }
+          if status not in discardable:
+              raise SystemExit(f"{run_id} status {status} is not discardable")
+          code = post(
+              f"https://app.terraform.io/api/v2/runs/{run_id}/actions/discard",
+              {"comment": "Discarded so GitHub CD can create the version-only applyable run"},
+          )
+          print(f"discarded {run_id} http={code}")
+          PY
+
+      - name: Create Terraform release run
+        id: release-run
+        uses: hashicorp/tfc-workflows-github/actions/create-run@8e08d1ba957673f5fbf971a22b3219639dc45661 # v1.3.2
+        env:
+          TF_VAR_release_version_label: '"${{ steps.release.outputs.version_label }}"'
         with:
-          aws-region: us-east-1
-          application-name: ${{ steps.target.outputs.application }}
-          environment-name: ${{ steps.target.outputs.environment }}
-          version-label: ${{ github.sha }}-${{ github.run_id }}-${{ github.run_attempt }}
-          deployment-package-path: .artifacts/elastic-beanstalk/site.zip
-          s3-bucket-name: elasticbeanstalk-us-east-1-396287094661
-          create-application-if-not-exists: "false"
-          create-environment-if-not-exists: "false"
-          create-s3-bucket-if-not-exists: "false"
-          use-existing-application-version-if-available: "false"
-          wait-for-deployment: "true"
-          wait-for-environment-recovery: "true"
+          workspace: shoc-backend-staging
+          message: "Release ${{ steps.release.outputs.version_label }} from GitHub Actions"
+
+      - name: Read Terraform release plan counts
+        id: release-plan
+        uses: hashicorp/tfc-workflows-github/actions/plan-output@8e08d1ba957673f5fbf971a22b3219639dc45661 # v1.3.2
+        with:
+          plan: ${{ steps.release-run.outputs.plan_id }}
+
+      - name: Reject non-version-only resource counts
+        env:
+          PLAN_ADD: ${{ steps.release-plan.outputs.add }}
+          PLAN_CHANGE: ${{ steps.release-plan.outputs.change }}
+          PLAN_DESTROY: ${{ steps.release-plan.outputs.destroy }}
+        run: |
+          set -euo pipefail
+          if [ "$PLAN_ADD" != "0" ] || [ "$PLAN_CHANGE" != "1" ] || [ "$PLAN_DESTROY" != "0" ]; then
+            echo "HCP plan counts are add=${PLAN_ADD} change=${PLAN_CHANGE} destroy=${PLAN_DESTROY}; expected 0/1/0." >&2
+            exit 1
+          fi
+
+      - name: Guard version-only Terraform plan
+        run: |
+          set -euo pipefail
+          python scripts/check-terraform-release-plan.py \
+            --plan-id "${{ steps.release-run.outputs.plan_id }}" \
+            --expected-version-label "${{ steps.release.outputs.version_label }}"
+
+      - name: Discard release run when the guard fails
+        if: failure() && steps.release-run.outcome == 'success'
+        uses: hashicorp/tfc-workflows-github/actions/discard-run@8e08d1ba957673f5fbf971a22b3219639dc45661 # v1.3.2
+        with:
+          run: ${{ steps.release-run.outputs.run_id }}
+          comment: Rejected by the version-only plan guard from GitHub Actions
+
+      - name: Apply Terraform release run
+        id: release-apply
+        continue-on-error: true
+        uses: hashicorp/tfc-workflows-github/actions/apply-run@8e08d1ba957673f5fbf971a22b3219639dc45661 # v1.3.2
+        with:
+          run: ${{ steps.release-run.outputs.run_id }}
+          comment: Apply version-only release from GitHub Actions ${{ github.sha }}
+
+      - name: Treat already-applied release run as success
+        env:
+          APPLY_OUTCOME: ${{ steps.release-apply.outcome }}
+          RUN_ID: ${{ steps.release-run.outputs.run_id }}
+        run: |
+          set -euo pipefail
+          if [ "$APPLY_OUTCOME" = "success" ]; then
+            echo "Apply succeeded."
+            exit 0
+          fi
+          python3 << 'PY'
+          import json, os, urllib.request
+          run_id = os.environ["RUN_ID"]
+          token = os.environ["TF_API_TOKEN"]
+          req = urllib.request.Request(
+              f"https://app.terraform.io/api/v2/runs/{run_id}",
+              headers={
+                  "Authorization": f"Bearer {token}",
+                  "Content-Type": "application/vnd.api+json",
+              },
+          )
+          with urllib.request.urlopen(req) as resp:
+              status = json.load(resp)["data"]["attributes"]["status"]
+          print(f"HCP run {run_id} status={status}")
+          if status == "applied":
+              raise SystemExit(0)
+          raise SystemExit(
+              f"Apply failed: GitHub outcome={os.environ['APPLY_OUTCOME']} "
+              f"HCP status={status}"
+          )
+          PY
 
       - name: Verify exact application version is active
         run: |
           set -euo pipefail
-          expected="${{ github.sha }}-${{ github.run_id }}-${{ github.run_attempt }}"
+          expected="${{ steps.release.outputs.version_label }}"
           status="Unknown"
           current="Unknown"
           health="Unknown"
@@ -825,15 +1016,199 @@ jobs:
             echo "Environment is already on previous version $prev."
             exit 0
           fi
+          if [[ ! "$prev" =~ ^[0-9a-f]{40}-[0-9]+-[0-9]+$ ]]; then
+            echo "Previous version $prev is not a Terraform-managed release label; cannot roll back through HCP." >&2
+            exit 1
+          fi
+          echo "rollback_label=$prev" >> "${GITHUB_OUTPUT}"
+        id: rollback-prepare
 
-          echo "Restoring ${EB_ENVIRONMENT_NAME} application code to version label: $prev"
+      - name: Discard blocking VCS run before GitHub rollback
+        id: rollback-discard-vcs
+        if: failure() && steps.rollback-prepare.outputs.rollback_label != ''
+        run: |
+          set -euo pipefail
+          python3 << 'PY'
+          import json, os, urllib.error, urllib.request
+
+          token = os.environ["TF_API_TOKEN"]
+          workspace = "shoc-backend-staging"
+          headers = {
+              "Authorization": f"Bearer {token}",
+              "Content-Type": "application/vnd.api+json",
+          }
+
+          def get(url):
+              req = urllib.request.Request(url, headers=headers)
+              with urllib.request.urlopen(req) as resp:
+                  return json.load(resp)
+
+          def post(url, payload):
+              data = json.dumps(payload).encode()
+              req = urllib.request.Request(
+                  url, data=data, method="POST", headers=headers
+              )
+              try:
+                  with urllib.request.urlopen(req) as resp:
+                      return resp.status
+              except urllib.error.HTTPError as exc:
+                  if exc.code in (409, 404):
+                      body = exc.read().decode("utf-8", "replace")
+                      print(f"discard returned HTTP {exc.code}: {body}")
+                      return exc.code
+                  raise
+
+          ws = get(
+              f"https://app.terraform.io/api/v2/organizations/seahaven/workspaces/{workspace}"
+          )["data"]
+          attrs = ws["attributes"]
+          if attrs.get("auto-apply") is True:
+              raise SystemExit("shoc-backend-staging auto-apply is on; refuse to continue")
+          if not attrs.get("speculative-enabled"):
+              raise SystemExit("speculative plans are off; refuse to continue")
+          if (attrs.get("vcs-repo") or {}).get("tags-regex"):
+              raise SystemExit("tag-based VCS triggering is set; refuse to continue")
+          expected_patterns = [
+              "terraform/live/staging/**",
+              "terraform/live/modules/**",
+          ]
+          if attrs.get("trigger-patterns") != expected_patterns:
+              raise SystemExit(
+                  "trigger-patterns must be "
+                  f"{expected_patterns}; got {attrs.get('trigger-patterns')}"
+              )
+          if not attrs.get("locked"):
+              print("workspace is unlocked")
+              raise SystemExit(0)
+
+          current = (
+              ws.get("relationships", {})
+              .get("current-run", {})
+              .get("data")
+          )
+          if not current:
+              raise SystemExit("workspace is locked without a current run")
+          run_id = current["id"]
+          run = get(f"https://app.terraform.io/api/v2/runs/{run_id}")["data"]
+          run_attrs = run["attributes"]
+          status = run_attrs.get("status")
+          plan_only = run_attrs.get("plan-only")
+          print(f"current run {run_id} status={status} plan-only={plan_only}")
+          if plan_only:
+              print("speculative run does not block GitHub CD")
+              raise SystemExit(0)
+          if status in {"applying", "apply_queued"}:
+              raise SystemExit(f"{run_id} is {status}; wait, do not discard an apply")
+          discardable = {
+              "pending", "planned", "cost_estimated", "policy_checked", "policy_override"
+          }
+          if status not in discardable:
+              raise SystemExit(f"{run_id} status {status} is not discardable")
+          code = post(
+              f"https://app.terraform.io/api/v2/runs/{run_id}/actions/discard",
+              {"comment": "Discarded so GitHub CD can create the version-only applyable run"},
+          )
+          print(f"discarded {run_id} http={code}")
+          PY
+
+      - name: Create Terraform rollback run
+        id: rollback-run
+        if: failure() && steps.rollback-prepare.outputs.rollback_label != '' && steps.rollback-discard-vcs.outcome == 'success'
+        uses: hashicorp/tfc-workflows-github/actions/create-run@8e08d1ba957673f5fbf971a22b3219639dc45661 # v1.3.2
+        env:
+          TF_VAR_release_version_label: '"${{ steps.rollback-prepare.outputs.rollback_label }}"'
+        with:
+          workspace: shoc-backend-staging
+          message: "Rollback to ${{ steps.rollback-prepare.outputs.rollback_label }} from GitHub Actions"
+      - name: Read Terraform rollback plan counts
+        id: rollback-plan
+        if: failure() && steps.rollback-run.outcome == 'success'
+        uses: hashicorp/tfc-workflows-github/actions/plan-output@8e08d1ba957673f5fbf971a22b3219639dc45661 # v1.3.2
+        with:
+          plan: ${{ steps.rollback-run.outputs.plan_id }}
+
+      - name: Reject non-version-only rollback counts
+        id: rollback-count-guard
+        if: failure() && steps.rollback-plan.outcome == 'success'
+        env:
+          PLAN_ADD: ${{ steps.rollback-plan.outputs.add }}
+          PLAN_CHANGE: ${{ steps.rollback-plan.outputs.change }}
+          PLAN_DESTROY: ${{ steps.rollback-plan.outputs.destroy }}
+        run: |
+          set -euo pipefail
+          if [ "$PLAN_ADD" != "0" ] || [ "$PLAN_CHANGE" != "1" ] || [ "$PLAN_DESTROY" != "0" ]; then
+            echo "Rollback HCP plan counts are add=${PLAN_ADD} change=${PLAN_CHANGE} destroy=${PLAN_DESTROY}; expected 0/1/0." >&2
+            exit 1
+          fi
+
+      - name: Guard version-only Terraform rollback plan
+        id: rollback-json-guard
+        if: failure() && steps.rollback-count-guard.outcome == 'success'
+        run: |
+          set -euo pipefail
+          python scripts/check-terraform-release-plan.py \
+            --plan-id "${{ steps.rollback-run.outputs.plan_id }}" \
+            --expected-version-label "${{ steps.rollback-prepare.outputs.rollback_label }}"
+
+      - name: Discard rollback run when the guard fails
+        if: failure() && steps.rollback-run.outcome == 'success' && steps.rollback-json-guard.outcome != 'success'
+        uses: hashicorp/tfc-workflows-github/actions/discard-run@8e08d1ba957673f5fbf971a22b3219639dc45661 # v1.3.2
+        with:
+          run: ${{ steps.rollback-run.outputs.run_id }}
+          comment: Rejected by the version-only rollback plan guard from GitHub Actions
+
+      - name: Apply Terraform rollback run
+        id: rollback-apply
+        if: failure() && steps.rollback-json-guard.outcome == 'success'
+        continue-on-error: true
+        uses: hashicorp/tfc-workflows-github/actions/apply-run@8e08d1ba957673f5fbf971a22b3219639dc45661 # v1.3.2
+        with:
+          run: ${{ steps.rollback-run.outputs.run_id }}
+          comment: Apply version-only rollback from GitHub Actions ${{ github.sha }}
+
+      - name: Treat already-applied rollback run as success
+        id: rollback-apply-result
+        if: failure() && steps.rollback-apply.outcome != 'skipped'
+        env:
+          APPLY_OUTCOME: ${{ steps.rollback-apply.outcome }}
+          RUN_ID: ${{ steps.rollback-run.outputs.run_id }}
+        run: |
+          set -euo pipefail
+          if [ "$APPLY_OUTCOME" = "success" ]; then
+            echo "Apply succeeded."
+            exit 0
+          fi
+          python3 << 'PY'
+          import json, os, urllib.request
+          run_id = os.environ["RUN_ID"]
+          token = os.environ["TF_API_TOKEN"]
+          req = urllib.request.Request(
+              f"https://app.terraform.io/api/v2/runs/{run_id}",
+              headers={
+                  "Authorization": f"Bearer {token}",
+                  "Content-Type": "application/vnd.api+json",
+              },
+          )
+          with urllib.request.urlopen(req) as resp:
+              status = json.load(resp)["data"]["attributes"]["status"]
+          print(f"HCP run {run_id} status={status}")
+          if status == "applied":
+              raise SystemExit(0)
+          raise SystemExit(
+              f"Apply failed: GitHub outcome={os.environ['APPLY_OUTCOME']} "
+              f"HCP status={status}"
+          )
+          PY
+
+      - name: Verify previous application version is active
+        if: failure() && steps.rollback-apply-result.outcome == 'success'
+        run: |
+          set -euo pipefail
+          prev="${{ steps.rollback-prepare.outputs.rollback_label }}"
           echo "Database migrations are not reverted; deployable migrations must follow the expand/contract policy."
-          aws elasticbeanstalk update-environment \
-            --environment-name "${EB_ENVIRONMENT_NAME}" \
-            --version-label "$prev" \
-            --region us-east-1
-
-          echo "Waiting for previous version to become healthy..."
+          status="Unknown"
+          current="Unknown"
+          health="Unknown"
           for _ in $(seq 1 80); do
             read -r status current health < <(
               aws elasticbeanstalk describe-environments \
@@ -859,6 +1234,5 @@ jobs:
             fi
             sleep 15
           done
-
           echo "Environment did not return to Ready and healthy within the rollback window (last seen: status=$status version=$current health=$health)." >&2
           exit 1
diff --git a/scripts/check-terraform-import-plan.py b/scripts/check-terraform-import-plan.py
index 494d99c..1ffc18d 100644
--- a/scripts/check-terraform-import-plan.py
+++ b/scripts/check-terraform-import-plan.py
@@ -10,8 +10,10 @@ from pathlib import Path
 
 from terraform_import_plan_resources import (
     DEV_IMPORT_BASELINE,
-    DEV_IMPORT_IDS,
+    IMPORT_BASELINES,
+    IMPORT_IDS,
     REQUIRED_RESOURCES,
+    STAGING_IMPORT_BASELINE,
 )
 
 
@@ -92,6 +94,51 @@ def validate_dev_import_baseline(
             )
 
 
+def validate_staging_import_baseline(
+    resources_by_address: dict[str, dict], violations: list[str]
+) -> None:
+    environment_address = (
+        "module.environment.aws_elastic_beanstalk_environment.this"
+    )
+    route_address = "module.environment.aws_route53_record.api_cname[0]"
+    expected_tags = STAGING_IMPORT_BASELINE["environment_tags"]
+    expected_cname = STAGING_IMPORT_BASELINE["api_cname"]
+
+    for side in ("before", "after"):
+        environment = (
+            resources_by_address.get(environment_address, {})
+            .get("change", {})
+            .get(side)
+            or {}
+        )
+        if environment.get("tags") != expected_tags:
+            violations.append(
+                f"{environment_address}: {side} environment tags do not match "
+                f"the exact staging import baseline"
+            )
+        if environment.get("setting") != []:
+            violations.append(
+                f"{environment_address}: {side} contains managed EB settings "
+                "during the import-only phase"
+            )
+
+        route = (
+            resources_by_address.get(route_address, {})
+            .get("change", {})
+            .get(side)
+            or {}
+        )
+        actual_cname = {
+            "records": route.get("records"),
+            "ttl": route.get("ttl"),
+        }
+        if actual_cname != expected_cname:
+            violations.append(
+                f"{route_address}: {side} CNAME does not match the exact "
+                "live ALB target and TTL"
+            )
+
+
 def main() -> int:
     args = parse_args()
     plan = json.loads(args.plan_json.read_text(encoding="utf-8"))
@@ -143,13 +190,14 @@ def main() -> int:
                     f"{address}: update is not explicitly allowlisted"
                 )
 
-        if initial_import and args.environment == "dev":
+        if initial_import and args.environment in IMPORT_IDS:
             if actions != {"no-op"}:
                 violations.append(
-                    f"{address}: initial dev import actions must be ['no-op'], "
+                    f"{address}: initial {args.environment} import actions "
+                    "must be ['no-op'], "
                     f"got {sorted(actions)}"
                 )
-            expected_import_id = DEV_IMPORT_IDS.get(address)
+            expected_import_id = IMPORT_IDS[args.environment].get(address)
             actual_import_id = (
                 resource.get("change", {}).get("importing") or {}
             ).get("id")
@@ -167,6 +215,8 @@ def main() -> int:
 
     if initial_import and args.environment == "dev":
         validate_dev_import_baseline(resources_by_address, violations)
+    elif initial_import and args.environment == "staging":
+        validate_staging_import_baseline(resources_by_address, violations)
 
     if violations:
         print("FAIL: live Terraform plan is not import-safe", file=sys.stderr)
@@ -191,8 +241,8 @@ def main() -> int:
                 for address, resource in sorted(resources_by_address.items())
             },
         }
-        if args.environment == "dev" and initial_import:
-            evidence["asserted_live_baseline"] = DEV_IMPORT_BASELINE
+        if args.environment in IMPORT_BASELINES and initial_import:
+            evidence["asserted_live_baseline"] = IMPORT_BASELINES[args.environment]
         args.evidence_out.write_text(
             json.dumps(evidence, indent=2, sort_keys=True) + "\n",
             encoding="utf-8",
diff --git a/scripts/terraform_import_plan_resources.py b/scripts/terraform_import_plan_resources.py
index 064c98a..dc66365 100644
--- a/scripts/terraform_import_plan_resources.py
+++ b/scripts/terraform_import_plan_resources.py
@@ -65,3 +65,54 @@ DEV_IMPORT_BASELINE = {
         "evaluate_target_health": True,
     },
 }
+
+STAGING_IMPORT_IDS = {
+    "module.environment.aws_elastic_beanstalk_environment.this": "e-6c9m4vb62z",
+    "module.environment.aws_iam_instance_profile.runtime": "shoc-backend-staging",
+    "module.environment.aws_iam_role.github_deploy": (
+        "githubdeploy-shoc-backend-staging"
+    ),
+    "module.environment.aws_iam_role.runtime": "shoc-backend-staging",
+    "module.environment.aws_iam_role_policy.github_deploy": (
+        "githubdeploy-shoc-backend-staging:GithubDeployRoleDefaultPolicyE8F540D1"
+    ),
+    "module.environment.aws_iam_role_policy.runtime_app_config": (
+        "shoc-backend-staging:shoc-staging-secrets-read"
+    ),
+    "module.environment.aws_iam_role_policy.runtime_webhook[0]": (
+        "shoc-backend-staging:shoc-backend-staging-webhook-secret-access"
+    ),
+    "module.environment.aws_iam_role_policy_attachment.web_tier": (
+        "shoc-backend-staging/arn:aws:iam::aws:policy/AWSElasticBeanstalkWebTier"
+    ),
+    "module.environment.aws_secretsmanager_secret.app_config": (
+        "arn:aws:secretsmanager:us-east-1:396287094661:secret:"
+        "shoc/staging/app-config-CVV99L"
+    ),
+    "module.environment.aws_route53_record.api_cname[0]": (
+        "Z02602739VQWBWCAGXP4_api.staging.seahaven.com_CNAME"
+    ),
+}
+
+STAGING_IMPORT_BASELINE = {
+    "environment_tags": {
+        "env": "staging",
+        "project": "shoc",
+    },
+    "api_cname": {
+        "records": [
+            "awseb--AWSEB-pPXqiRgNnZe8-16996010.us-east-1.elb.amazonaws.com"
+        ],
+        "ttl": 60,
+    },
+}
+
+IMPORT_IDS = {
+    "dev": DEV_IMPORT_IDS,
+    "staging": STAGING_IMPORT_IDS,
+}
+
+IMPORT_BASELINES = {
+    "dev": DEV_IMPORT_BASELINE,
+    "staging": STAGING_IMPORT_BASELINE,
+}
diff --git a/scripts/test-terraform-import-plan-check.py b/scripts/test-terraform-import-plan-check.py
index fda940f..df0db19 100644
--- a/scripts/test-terraform-import-plan-check.py
+++ b/scripts/test-terraform-import-plan-check.py
@@ -11,8 +11,9 @@ from pathlib import Path
 
 from terraform_import_plan_resources import (
     DEV_IMPORT_BASELINE,
-    DEV_IMPORT_IDS,
+    IMPORT_IDS,
     REQUIRED_RESOURCES,
+    STAGING_IMPORT_BASELINE,
 )
 
 SCRIPT = Path(__file__).with_name("check-terraform-import-plan.py")
@@ -36,29 +37,40 @@ def run_case(
                 continue
             actions = (actions_by_address or {}).get(address, ["no-op"])
             change: dict[str, object] = {"actions": actions}
-            if environment == "dev":
+            if environment in IMPORT_IDS:
                 change["importing"] = {
                     "id": (import_id_overrides or {}).get(
-                        address, DEV_IMPORT_IDS[address]
+                        address, IMPORT_IDS[environment][address]
                     )
                 }
-                if (
-                    address
-                    == "module.environment.aws_elastic_beanstalk_environment.this"
+                if address == (
+                    "module.environment.aws_elastic_beanstalk_environment.this"
                 ):
+                    baseline = (
+                        DEV_IMPORT_BASELINE
+                        if environment == "dev"
+                        else STAGING_IMPORT_BASELINE
+                    )
                     state: dict[str, object] = {
-                        "tags": DEV_IMPORT_BASELINE["environment_tags"],
+                        "tags": baseline["environment_tags"],
                         "setting": [],
                     }
                     change["before"] = state
                     change["after"] = state
-                elif (
+                elif environment == "dev" and (
                     address
                     == "module.environment.aws_route53_record.api_alias[0]"
                 ):
                     state = {"alias": [DEV_IMPORT_BASELINE["api_alias"]]}
                     change["before"] = state
                     change["after"] = state
+                elif environment == "staging" and (
+                    address
+                    == "module.environment.aws_route53_record.api_cname[0]"
+                ):
+                    state = STAGING_IMPORT_BASELINE["api_cname"]
+                    change["before"] = state
+                    change["after"] = state
                 if address in (state_overrides or {}):
                     change["before"] = (state_overrides or {})[address]
                     change["after"] = (state_overrides or {})[address]
@@ -177,6 +189,59 @@ def main() -> int:
             ),
             1,
         ),
+        (
+            "wrong staging import id",
+            run_case(
+                "staging",
+                import_id_overrides={controlled_address: "wrong-role"},
+            ),
+            1,
+        ),
+        (
+            "wrong staging environment tags",
+            run_case(
+                "staging",
+                state_overrides={
+                    "module.environment.aws_elastic_beanstalk_environment.this": {
+                        "tags": {
+                            "Name": "shoc-backend-staging",
+                            "env": "staging",
+                            "project": "shoc",
+                        },
+                        "setting": [],
+                    }
+                },
+            ),
+            1,
+        ),
+        (
+            "staging managed settings during import",
+            run_case(
+                "staging",
+                state_overrides={
+                    "module.environment.aws_elastic_beanstalk_environment.this": {
+                        "tags": STAGING_IMPORT_BASELINE["environment_tags"],
+                        "setting": [{"name": "ASPNETCORE_ENVIRONMENT"}],
+                    }
+                },
+            ),
+            1,
+        ),
+        (
+            "wrong staging cname",
+            run_case(
+                "staging",
+                state_overrides={
+                    "module.environment.aws_route53_record.api_cname[0]": {
+                        "records": [
+                            "shoc-backend-staging.us-east-1.elasticbeanstalk.com"
+                        ],
+                        "ttl": 60,
+                    }
+                },
+            ),
+            1,
+        ),
         (
             "controlled update",
             run_case(
diff --git a/terraform/live/README.md b/terraform/live/README.md
index f9869cd..c89fa0e 100644
--- a/terraform/live/README.md
+++ b/terraform/live/README.md
@@ -153,8 +153,10 @@ cannot lock the workspace out from under GitHub CD. GitHub applies only after
 `plan-output` counts are `0/1/0` and
 `scripts/check-terraform-release-plan.py` accepts a version-only plan JSON.
 
-Staging keeps today's direct Elastic Beanstalk deploy path until staging
-adoption.
+Staging application CD uses the same guarded lane against workspace
+`shoc-backend-staging`. The workspace stays branch-based on `staging` with
+trigger patterns `terraform/live/staging/**` and `terraform/live/modules/**`,
+and GitHub deploys on pushes to `staging` and on manual `workflow_dispatch`.
 
 ### Credentials and enablement
 
@@ -187,8 +189,10 @@ identifiers make accidental cross-environment reuse fail review and planning.
 ## Safety invariants
 
 - Auto-apply remains off.
-- VCS stays branch-based on `dev` with speculative PR plans enabled and
-  trigger patterns `terraform/live/dev/**` and `terraform/live/modules/**`.
-  Do not switch Automatic Run Triggering to tag-based.
+- VCS stays branch-based on `dev` for `shoc-backend-dev` and on `staging` for
+  `shoc-backend-staging`, with speculative PR plans enabled and trigger
+  patterns `terraform/live/dev/**` (dev) and `terraform/live/staging/**`
+  (staging), each alongside `terraform/live/modules/**`. Do not switch
+  Automatic Run Triggering to tag-based.
 - Org baseline owns final HCP plan/apply permissions and manager tags.
 - Every imported Terraform resource has `prevent_destroy`.
diff --git a/terraform/live/modules/environment-owned/main.tf b/terraform/live/modules/environment-owned/main.tf
index b01a830..29b42f2 100644
--- a/terraform/live/modules/environment-owned/main.tf
+++ b/terraform/live/modules/environment-owned/main.tf
@@ -500,7 +500,9 @@ resource "aws_route53_record" "api_cname" {
   name    = var.api_domain
   type    = "CNAME"
   ttl     = 60
-  records = [aws_elastic_beanstalk_environment.this.endpoint_url]
+  records = [
+    var.api_cname_target == null ? aws_elastic_beanstalk_environment.this.endpoint_url : var.api_cname_target,
+  ]
 
   lifecycle {
     prevent_destroy = true
diff --git a/terraform/live/modules/environment-owned/variables.tf b/terraform/live/modules/environment-owned/variables.tf
index 8732d31..71a97cd 100644
--- a/terraform/live/modules/environment-owned/variables.tf
+++ b/terraform/live/modules/environment-owned/variables.tf
@@ -242,6 +242,12 @@ variable "api_alias_target" {
   default     = null
 }
 
+variable "api_cname_target" {
+  type        = string
+  description = "Exact existing Route 53 CNAME target preserved during import. Null resolves the target from Elastic Beanstalk."
+  default     = null
+}
+
 variable "metadata_before_adoption" {
   description = "Exact current metadata preserved while adoption_complete is false."
   type = object({
diff --git a/terraform/live/staging/main.tf b/terraform/live/staging/main.tf
index 7e875d3..01391d5 100644
--- a/terraform/live/staging/main.tf
+++ b/terraform/live/staging/main.tf
@@ -27,6 +27,7 @@ module "environment" {
   aws_region                             = local.aws_region
   environment                            = "staging"
   adoption_complete                      = false
+  manage_eb_settings                     = false
   eb_application_name                    = local.eb_application_name
   eb_environment_name                    = local.eb_environment_name
   eb_environment_id                      = local.eb_environment_id
@@ -60,6 +61,8 @@ module "environment" {
   hosted_zone_id            = "Z02602739VQWBWCAGXP4"
   api_domain                = local.api_domain
   api_record_type           = "CNAME"
+  api_cname_target          = "awseb--AWSEB-pPXqiRgNnZe8-16996010.us-east-1.elb.amazonaws.com"
+  release_version_label     = var.release_version_label
   metadata_before_adoption = {
     runtime_role_description = "SHOC backend staging compute role (EB instance profile)"
     runtime_role_tags = {
@@ -81,7 +84,6 @@ module "environment" {
       Project               = "shoc-backend"
     }
     environment_tags = {
-      Name    = "shoc-backend-staging"
       env     = "staging"
       project = "shoc"
     }
diff --git a/terraform/live/staging/variables.tf b/terraform/live/staging/variables.tf
new file mode 100644
index 0000000..3f21d9b
--- /dev/null
+++ b/terraform/live/staging/variables.tf
@@ -0,0 +1,15 @@
+variable "release_version_label" {
+  type     = string
+  default  = null
+  nullable = true
+
+  description = "Immutable Elastic Beanstalk application version. Null VCS plans leave the live version unchanged."
+
+  validation {
+    condition = (
+      var.release_version_label == null ||
+      can(regex("^[0-9a-f]{40}-[0-9]+-[0-9]+$", var.release_version_label))
+    )
+    error_message = "release_version_label must be <full-sha>-<run-id>-<attempt>."
+  }
+}

From 65c1ed86e1fcc672f12588ed88d80510042b4f38 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 16:07:16 -0300
Subject: [PATCH 013/183] docs(terraform): document staging token scope

---
 terraform/live/README.md | 14 ++++++++++----
 1 file changed, 10 insertions(+), 4 deletions(-)

diff --git a/terraform/live/README.md b/terraform/live/README.md
index c89fa0e..07a6f25 100644
--- a/terraform/live/README.md
+++ b/terraform/live/README.md
@@ -160,10 +160,16 @@ and GitHub deploys on pushes to `staging` and on manual `workflow_dispatch`.
 
 ### Credentials and enablement
 
-Store a dedicated HCP team token only as the GitHub `dev` environment secret
-`TF_API_TOKEN`. Scope it to workspace `shoc-backend-dev`. Plan JSON download
-requires workspace admin on that one workspace. Do not grant project admin,
-workspace create/move/delete, or staging access. Rotate at least every 90 days.
+Store dedicated HCP team tokens as the GitHub environment secret `TF_API_TOKEN`:
+
+- `dev`: use a token scoped only to workspace `shoc-backend-dev`.
+- `staging`: use a separate token scoped only to workspace
+  `shoc-backend-staging`.
+
+Plan JSON download requires workspace admin on the corresponding workspace. Do
+not grant project admin or workspace create/move/delete permissions. Do not rely
+on a repository-level token or reuse the dev-scoped token for staging. Rotate
+each token at least every 90 days.
 
 Repository variable `TERRAFORM_APP_CD_ENABLED` starts unset/false so pushes to
 `dev` do not deploy. `workflow_dispatch` on `dev` still runs a release for the

From 06f9450485c2aa10a3068fd3d295f86f782bed0e Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 16:18:46 -0300
Subject: [PATCH 014/183] feat(services): add global services registry

---
 .../ServicesRegistryControllerTests.cs        |  185 +
 .../ServicesRegistryServiceTests.cs           |  364 ++
 .../Controllers/ServicesRegistryController.cs |  110 +
 .../Auth/ApplicationDbContext.cs              |   49 +
 ...6185443_SH303_ServicesRegistry.Designer.cs | 4074 +++++++++++++++++
 .../20260916185443_SH303_ServicesRegistry.cs  |  162 +
 .../ApplicationDbContextModelSnapshot.cs      |  141 +
 Data.SeaHavenIndustries/Models/Service.cs     |   29 +
 .../ServicesRegistryDataService.cs            |  130 +
 .../IServicesRegistryDataService.cs           |   39 +
 .../DTOs/ServicesRegistryDTOs.cs              |   38 +
 .../Exceptions/ServicesRegistryExceptions.cs  |   12 +
 .../Implementation/ServicesRegistryService.cs |  226 +
 .../Interfaces/IServicesRegistryService.cs    |   19 +
 .../SH303ServicesRegistryMigrationTests.cs    |  316 ++
 15 files changed, 5894 insertions(+)
 create mode 100644 Api.SeaHavenIndustries.Tests/ServicesRegistryControllerTests.cs
 create mode 100644 Api.SeaHavenIndustries.Tests/ServicesRegistryServiceTests.cs
 create mode 100644 Api.SeaHavenIndustries/Controllers/ServicesRegistryController.cs
 create mode 100644 Data.SeaHavenIndustries/Migrations/20260916185443_SH303_ServicesRegistry.Designer.cs
 create mode 100644 Data.SeaHavenIndustries/Migrations/20260916185443_SH303_ServicesRegistry.cs
 create mode 100644 Data.SeaHavenIndustries/Models/Service.cs
 create mode 100644 SeaHaven.DataServices/Implementation/ServicesRegistryDataService.cs
 create mode 100644 SeaHaven.DataServices/Interfaces/IServicesRegistryDataService.cs
 create mode 100644 SeaHaven.Services/DTOs/ServicesRegistryDTOs.cs
 create mode 100644 SeaHaven.Services/Exceptions/ServicesRegistryExceptions.cs
 create mode 100644 SeaHaven.Services/Implementation/ServicesRegistryService.cs
 create mode 100644 SeaHaven.Services/Interfaces/IServicesRegistryService.cs
 create mode 100644 SeaHavenIndustries.Tests/SH303ServicesRegistryMigrationTests.cs

diff --git a/Api.SeaHavenIndustries.Tests/ServicesRegistryControllerTests.cs b/Api.SeaHavenIndustries.Tests/ServicesRegistryControllerTests.cs
new file mode 100644
index 0000000..c1d6cf0
--- /dev/null
+++ b/Api.SeaHavenIndustries.Tests/ServicesRegistryControllerTests.cs
@@ -0,0 +1,185 @@
+using System.Security.Claims;
+using Api.SeaHavenIndustries.Controllers;
+using Data.SeaHavenIndustries.Enums;
+using FluentAssertions;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Moq;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Exceptions;
+using SeaHaven.Services.Interfaces;
+using Xunit;
+
+namespace Api.SeaHavenIndustries.Tests;
+
+public class ServicesRegistryControllerTests
+{
+    private static ServicesRegistryController NewController(Mock<IServicesRegistryService> service, params string[] roles)
+    {
+        var controller = new ServicesRegistryController(service.Object)
+        {
+            ControllerContext = new ControllerContext
+            {
+                HttpContext = new DefaultHttpContext
+                {
+                    User = new ClaimsPrincipal(new ClaimsIdentity(
+                        roles.Select(r => new Claim(ClaimTypes.Role, r)), "Test"))
+                }
+            }
+        };
+        return controller;
+    }
+
+    private static ServicesRegistryValidationErrorDto? ErrorValue(IActionResult result) =>
+        (result as ObjectResult)?.Value as ServicesRegistryValidationErrorDto;
+
+    [Fact]
+    public async Task GetAll_ReturnsOkWithServices()
+    {
+        var service = new Mock<IServicesRegistryService>();
+        service.Setup(s => s.GetAllAsync(true, WorkOrderType.PM, It.IsAny<CancellationToken>()))
+               .ReturnsAsync(new List<ServiceDto> { new() { Id = 1, Name = "Leak", IsActive = true } });
+
+        var result = await NewController(service, "Admin").GetAll(true, WorkOrderType.PM, CancellationToken.None);
+
+        var ok = result.Should().BeOfType<OkObjectResult>().Subject;
+        (ok.Value as IEnumerable<ServiceDto>).Should().ContainSingle(s => s.Name == "Leak");
+    }
+
+    [Fact]
+    public async Task GetAll_WhenValidationCode_ReturnsBadRequestWithStableCodeAndMessage()
+    {
+        var service = new Mock<IServicesRegistryService>();
+        service.Setup(s => s.GetAllAsync(null, WorkOrderType.Project, It.IsAny<CancellationToken>()))
+               .Throws(new ServicesRegistryValidationException(
+                   "WorkOrderTypeInvalid", "Supported work order types may only include PM, Reactive, or Emergency."));
+
+        var result = await NewController(service, "Admin").GetAll(null, WorkOrderType.Project, CancellationToken.None);
+
+        var bad = result.Should().BeOfType<BadRequestObjectResult>().Subject;
+        ErrorValue(bad)!.Code.Should().Be("WorkOrderTypeInvalid");
+        ErrorValue(bad)!.Message.Should().Be("Supported work order types may only include PM, Reactive, or Emergency.");
+    }
+
+    [Fact]
+    public async Task GetById_WhenMissing_ReturnsNotFoundWithCode()
+    {
+        var service = new Mock<IServicesRegistryService>();
+        service.Setup(s => s.GetByIdAsync(9, It.IsAny<CancellationToken>()))
+               .ReturnsAsync((ServiceDto?)null);
+
+        var result = await NewController(service, "Admin").GetById(9, CancellationToken.None);
+
+        var notFound = result.Should().BeOfType<NotFoundObjectResult>().Subject;
+        ErrorValue(notFound)!.Code.Should().Be("NotFound");
+    }
+
+    [Fact]
+    public async Task Create_PassesCallerAndReturnsCreated()
+    {
+        var service = new Mock<IServicesRegistryService>();
+        service.Setup(s => s.CreateAsync(It.IsAny<ClaimsPrincipal>(), It.IsAny<ServiceInput>(), It.IsAny<CancellationToken>()))
+               .ReturnsAsync(new ServiceDto { Id = 42, Name = "Leak", IsActive = true });
+
+        var result = await NewController(service, "Scheduler").Create(new ServiceInput { Name = "Leak" }, CancellationToken.None);
+
+        var created = result.Should().BeOfType<ObjectResult>().Subject;
+        created.StatusCode.Should().Be(StatusCodes.Status201Created);
+        (created.Value as ServiceDto)!.Id.Should().Be(42);
+        service.Verify(s => s.CreateAsync(
+            It.Is<ClaimsPrincipal>(p => p.IsInRole("Scheduler")),
+            It.Is<ServiceInput>(i => i.Name == "Leak"),
+            It.IsAny<CancellationToken>()), Times.Once);
+    }
+
+    [Fact]
+    public async Task Create_WhenForbidden_Returns403WithStableCode()
+    {
+        var service = new Mock<IServicesRegistryService>();
+        service.Setup(s => s.CreateAsync(It.IsAny<ClaimsPrincipal>(), It.IsAny<ServiceInput>(), It.IsAny<CancellationToken>()))
+               .Throws(new ServicesRegistryValidationException("Forbidden", "Scheduler or Admin role is required."));
+
+        var result = await NewController(service, "User").Create(new ServiceInput { Name = "Leak" }, CancellationToken.None);
+
+        var forbidden = result.Should().BeOfType<ObjectResult>().Subject;
+        forbidden.StatusCode.Should().Be(StatusCodes.Status403Forbidden);
+        ErrorValue(forbidden)!.Code.Should().Be("Forbidden");
+    }
+
+    [Fact]
+    public async Task Create_WhenDuplicateName_Returns400WithStableCode()
+    {
+        var service = new Mock<IServicesRegistryService>();
+        service.Setup(s => s.CreateAsync(It.IsAny<ClaimsPrincipal>(), It.IsAny<ServiceInput>(), It.IsAny<CancellationToken>()))
+               .Throws(new ServicesRegistryValidationException("DuplicateName", "A service with this name already exists."));
+
+        var result = await NewController(service, "Admin").Create(new ServiceInput { Name = "Leak" }, CancellationToken.None);
+
+        var bad = result.Should().BeOfType<BadRequestObjectResult>().Subject;
+        ErrorValue(bad)!.Code.Should().Be("DuplicateName");
+    }
+
+    [Fact]
+    public async Task Update_ReturnsOkWithUpdatedService()
+    {
+        var service = new Mock<IServicesRegistryService>();
+        service.Setup(s => s.UpdateAsync(It.IsAny<ClaimsPrincipal>(), 7, It.IsAny<ServiceInput>(), It.IsAny<CancellationToken>()))
+               .ReturnsAsync(new ServiceDto { Id = 7, Name = "Renamed" });
+
+        var result = await NewController(service, "Admin").Update(7, new ServiceInput { Name = "Renamed" }, CancellationToken.None);
+
+        var ok = result.Should().BeOfType<OkObjectResult>().Subject;
+        (ok.Value as ServiceDto)!.Name.Should().Be("Renamed");
+    }
+
+    [Fact]
+    public async Task Update_WhenNotFound_Returns404WithCode()
+    {
+        var service = new Mock<IServicesRegistryService>();
+        service.Setup(s => s.UpdateAsync(It.IsAny<ClaimsPrincipal>(), 404, It.IsAny<ServiceInput>(), It.IsAny<CancellationToken>()))
+               .Throws(new ServicesRegistryValidationException("NotFound", "Service not found."));
+
+        var result = await NewController(service, "Admin").Update(404, new ServiceInput(), CancellationToken.None);
+
+        var notFound = result.Should().BeOfType<NotFoundObjectResult>().Subject;
+        ErrorValue(notFound)!.Code.Should().Be("NotFound");
+    }
+
+    [Fact]
+    public async Task Deactivate_ReturnsOk()
+    {
+        var service = new Mock<IServicesRegistryService>();
+
+        var result = await NewController(service, "Admin").Deactivate(3, CancellationToken.None);
+
+        result.Should().BeOfType<OkObjectResult>();
+        service.Verify(s => s.DeactivateAsync(
+            It.Is<ClaimsPrincipal>(p => p.IsInRole("Admin")), 3, It.IsAny<CancellationToken>()), Times.Once);
+    }
+
+    [Fact]
+    public async Task Deactivate_WhenForbidden_Returns403WithStableCode()
+    {
+        var service = new Mock<IServicesRegistryService>();
+        service.Setup(s => s.DeactivateAsync(It.IsAny<ClaimsPrincipal>(), 3, It.IsAny<CancellationToken>()))
+               .Throws(new ServicesRegistryValidationException("Forbidden", "Only administrators can deactivate services."));
+
+        var result = await NewController(service, "Scheduler").Deactivate(3, CancellationToken.None);
+
+        var forbidden = result.Should().BeOfType<ObjectResult>().Subject;
+        forbidden.StatusCode.Should().Be(StatusCodes.Status403Forbidden);
+        ErrorValue(forbidden)!.Code.Should().Be("Forbidden");
+    }
+
+    [Fact]
+    public async Task Deactivate_WhenNotFound_Returns404WithCode()
+    {
+        var service = new Mock<IServicesRegistryService>();
+        service.Setup(s => s.DeactivateAsync(It.IsAny<ClaimsPrincipal>(), 404, It.IsAny<CancellationToken>()))
+               .Throws(new ServicesRegistryValidationException("NotFound", "Service not found."));
+
+        var result = await NewController(service, "Admin").Deactivate(404, CancellationToken.None);
+
+        result.Should().BeOfType<NotFoundObjectResult>();
+    }
+}
diff --git a/Api.SeaHavenIndustries.Tests/ServicesRegistryServiceTests.cs b/Api.SeaHavenIndustries.Tests/ServicesRegistryServiceTests.cs
new file mode 100644
index 0000000..6d7086d
--- /dev/null
+++ b/Api.SeaHavenIndustries.Tests/ServicesRegistryServiceTests.cs
@@ -0,0 +1,364 @@
+using System.Security.Claims;
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using FluentAssertions;
+using Microsoft.EntityFrameworkCore;
+using SeaHaven.DataServices.Implementation;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Exceptions;
+using SeaHaven.Services.Implementation;
+using Xunit;
+
+namespace Api.SeaHavenIndustries.Tests;
+
+// Global Services registry behavior. The registry has no tenant scope
+// (no AccountId), authorization is enforced at the service boundary, and the
+// only allowed supported work-order types are PM, Reactive, and Emergency.
+public class ServicesRegistryServiceTests
+{
+    private static ApplicationDbContext NewContext()
+    {
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseInMemoryDatabase(databaseName: Guid.NewGuid().ToString())
+            .Options;
+        return new ApplicationDbContext(options);
+    }
+
+    private static ServicesRegistryService NewService(ApplicationDbContext ctx) =>
+        new(new ServicesRegistryDataService(ctx));
+
+    private static ClaimsPrincipal Principal(params string[] roles) =>
+        new(new ClaimsIdentity(roles.Select(r => new Claim(ClaimTypes.Role, r)), "Test"));
+
+    private static ClaimsPrincipal Admin() => Principal("Admin");
+    private static ClaimsPrincipal Scheduler() => Principal("Scheduler");
+
+    private static ServiceInput Input(
+        string name = "Leak",
+        string? trade = "Plumbing & Water Systems",
+        string? iconKey = "plumbing-water-systems",
+        bool requiresDoc = false,
+        int? templateId = null,
+        List<WorkOrderType>? types = null) => new()
+        {
+            Name = name,
+            Trade = trade,
+            IconKey = iconKey,
+            RequiresCompletionDocument = requiresDoc,
+            CompletionDocTemplateId = templateId,
+            SupportedWorkOrderTypes = types ?? new List<WorkOrderType>
+            {
+                WorkOrderType.PM, WorkOrderType.Reactive, WorkOrderType.Emergency
+            }
+        };
+
+    private static CompletionDocTemplate Template(string name, bool active = true, bool deleted = false) =>
+        new() { Name = name, ServiceKey = "test", TemplateUrl = "https://example.com/t.pdf", IsActive = active, IsDeleted = deleted };
+
+    [Fact]
+    public async Task Create_PersistsActiveServiceWithNormalizedFieldsAndSupportedTypes()
+    {
+        using var ctx = NewContext();
+
+        var dto = await NewService(ctx).CreateAsync(Scheduler(), Input("  Leak Detection  "), CancellationToken.None);
+
+        dto.Id.Should().BeGreaterThan(0);
+        dto.Name.Should().Be("Leak Detection");
+        dto.Trade.Should().Be("Plumbing & Water Systems");
+        dto.IconKey.Should().Be("plumbing-water-systems");
+        dto.IsActive.Should().BeTrue("new services are always active");
+        dto.CompletionDocTemplate.Should().BeNull();
+        dto.SupportedWorkOrderTypes.Should().BeEquivalentTo(new[] { WorkOrderType.PM, WorkOrderType.Reactive, WorkOrderType.Emergency });
+
+        var row = ctx.Services.Include(s => s.SupportedWorkOrderTypes).Single();
+        row.NormalizedName.Should().Be("leak detection");
+    }
+
+    [Fact]
+    public async Task Create_WhenTypeCategoriesOmitted_DefaultsToSupportedWorkOrderTypes()
+    {
+        using var ctx = NewContext();
+
+        var input = Input(types: null);
+        input.SupportedWorkOrderTypes = null;
+
+        var dto = await NewService(ctx).CreateAsync(Admin(), input, CancellationToken.None);
+
+        dto.SupportedWorkOrderTypes.Should().BeEquivalentTo(new[]
+        {
+            WorkOrderType.PM, WorkOrderType.Reactive, WorkOrderType.Emergency
+        });
+    }
+
+    [Theory]
+    [InlineData(null)]
+    [InlineData("")]
+    [InlineData("   ")]
+    public async Task Create_WhenNameBlank_ThrowsNameRequired(string? name)
+    {
+        using var ctx = NewContext();
+        var act = () => NewService(ctx).CreateAsync(Admin(), Input(name: name!), CancellationToken.None);
+        var ex = (await act.Should().ThrowAsync<ServicesRegistryValidationException>()).Subject.Single();
+        ex.Code.Should().Be("NameRequired");
+    }
+
+    [Fact]
+    public async Task Create_WhenTradeNotCanonical_ThrowsTradeInvalid()
+    {
+        using var ctx = NewContext();
+        var act = () => NewService(ctx).CreateAsync(Admin(), Input(trade: "Roofing"), CancellationToken.None);
+        (await act.Should().ThrowAsync<ServicesRegistryValidationException>()).Which.Code.Should().Be("TradeInvalid");
+    }
+
+    [Theory]
+    [InlineData("  hvac  ")]
+    [InlineData("HVAC")]
+    [InlineData("hvac")]
+    public async Task Create_AcceptsCanonicalTradeInAnyCasingOrPadding(string trade)
+    {
+        using var ctx = NewContext();
+        var dto = await NewService(ctx).CreateAsync(Admin(), Input(name: "Cooling", trade: trade, iconKey: "hvac"), CancellationToken.None);
+        dto.Trade.Should().Be("HVAC");
+    }
+
+    [Theory]
+    [InlineData(null)]
+    [InlineData("")]
+    [InlineData("   ")]
+    public async Task Create_WhenIconKeyBlank_ThrowsIconKeyInvalid(string? iconKey)
+    {
+        using var ctx = NewContext();
+        var act = () => NewService(ctx).CreateAsync(Admin(), Input(iconKey: iconKey!), CancellationToken.None);
+        (await act.Should().ThrowAsync<ServicesRegistryValidationException>()).Which.Code.Should().Be("IconKeyInvalid");
+    }
+
+    [Fact]
+    public async Task Create_WhenNormalizedNameExists_ThrowsDuplicateName_RegardlessOfCasing()
+    {
+        using var ctx = NewContext();
+        var service = NewService(ctx);
+        await service.CreateAsync(Admin(), Input("Leak"), CancellationToken.None);
+
+        var act = () => service.CreateAsync(Admin(), Input("  LEAK  "), CancellationToken.None);
+        (await act.Should().ThrowAsync<ServicesRegistryValidationException>()).Which.Code.Should().Be("DuplicateName");
+    }
+
+    [Fact]
+    public async Task Registry_IsGlobal_SingleScopeWithoutAccountOrTenantFilter()
+    {
+        using var ctx = NewContext();
+        var service = NewService(ctx);
+        // Distinct actors with different role sets still share one global registry.
+        var first = await service.CreateAsync(Admin(), Input("Leak"), CancellationToken.None);
+        var act = () => service.CreateAsync(Scheduler(), Input("Leak"), CancellationToken.None);
+        (await act.Should().ThrowAsync<ServicesRegistryValidationException>()).Which.Code.Should().Be("DuplicateName");
+
+        var all = await service.GetAllAsync(null, null, CancellationToken.None);
+        all.Should().ContainSingle(s => s.Id == first.Id);
+        typeof(Service).GetProperty("AccountId").Should().BeNull("tenant scope is global, matching DropdownOptions");
+    }
+
+    [Fact]
+    public async Task Create_WhenCallerLacksSchedulerAndAdminRole_ThrowsForbidden()
+    {
+        using var ctx = NewContext();
+        var act = () => NewService(ctx).CreateAsync(Principal("User"), Input(), CancellationToken.None);
+        (await act.Should().ThrowAsync<ServicesRegistryValidationException>()).Which.Code.Should().Be("Forbidden");
+    }
+
+    [Fact]
+    public async Task Create_WhenCallerUnauthenticated_ThrowsForbidden()
+    {
+        using var ctx = NewContext();
+        var act = () => NewService(ctx).CreateAsync(Principal(), Input(), CancellationToken.None);
+        (await act.Should().ThrowAsync<ServicesRegistryValidationException>()).Which.Code.Should().Be("Forbidden");
+    }
+
+    [Fact]
+    public async Task Create_WhenTemplateMissing_Inactive_OrDeleted_ThrowsTemplateInvalid()
+    {
+        using var ctx = NewContext();
+
+        (await new Func<Task<ServiceDto>>(() => NewService(ctx).CreateAsync(
+                Admin(), Input(requiresDoc: true, templateId: 999), CancellationToken.None))
+            .Should().ThrowAsync<ServicesRegistryValidationException>()).Which.Code.Should().Be("TemplateInvalid");
+
+        ctx.CompletionDocTemplates.Add(Template("Inactive", active: false));
+        ctx.CompletionDocTemplates.Add(Template("Deleted", deleted: true));
+        ctx.SaveChanges();
+
+        (await new Func<Task<ServiceDto>>(() => NewService(ctx).CreateAsync(
+                Admin(), Input(requiresDoc: true, templateId: ctx.CompletionDocTemplates.Local.First(t => t.Name == "Inactive").Id), CancellationToken.None))
+            .Should().ThrowAsync<ServicesRegistryValidationException>()).Which.Code.Should().Be("TemplateInvalid");
+
+        (await new Func<Task<ServiceDto>>(() => NewService(ctx).CreateAsync(
+                Admin(), Input(requiresDoc: true, templateId: ctx.CompletionDocTemplates.Local.First(t => t.Name == "Deleted").Id), CancellationToken.None))
+            .Should().ThrowAsync<ServicesRegistryValidationException>()).Which.Code.Should().Be("TemplateInvalid");
+    }
+
+    [Fact]
+    public async Task Create_WithActiveTemplate_ProjectsLinkedTemplateSummary()
+    {
+        using var ctx = NewContext();
+        var template = Template("Completion Packet");
+        ctx.CompletionDocTemplates.Add(template);
+        ctx.SaveChanges();
+
+        var dto = await NewService(ctx).CreateAsync(
+            Admin(), Input(requiresDoc: true, templateId: template.Id), CancellationToken.None);
+
+        dto.RequiresCompletionDocument.Should().BeTrue();
+        dto.CompletionDocTemplate.Should().NotBeNull();
+        dto.CompletionDocTemplate!.Id.Should().Be(template.Id);
+        dto.CompletionDocTemplate.Name.Should().Be("Completion Packet");
+    }
+
+    [Fact]
+    public async Task Create_WhenCompletionToggleOff_IgnoresTemplateLink()
+    {
+        using var ctx = NewContext();
+        var template = Template("Completion Packet");
+        ctx.CompletionDocTemplates.Add(template);
+        ctx.SaveChanges();
+
+        var dto = await NewService(ctx).CreateAsync(
+            Admin(), Input(requiresDoc: false, templateId: template.Id), CancellationToken.None);
+
+        dto.RequiresCompletionDocument.Should().BeFalse();
+        dto.CompletionDocTemplate.Should().BeNull();
+        ctx.Services.Single().CompletionDocTemplateId.Should().BeNull();
+    }
+
+    [Theory]
+    [InlineData(WorkOrderType.PO)]
+    [InlineData(WorkOrderType.Project)]
+    [InlineData(WorkOrderType.Inspection)]
+    [InlineData(WorkOrderType.AddOn)]
+    [InlineData(WorkOrderType.Other)]
+    public async Task Create_WhenUnsupportedWorkOrderType_ThrowsWorkOrderTypeInvalid(WorkOrderType unsupported)
+    {
+        using var ctx = NewContext();
+        var input = Input(types: new List<WorkOrderType> { WorkOrderType.PM, unsupported });
+        var act = () => NewService(ctx).CreateAsync(Admin(), input, CancellationToken.None);
+        (await act.Should().ThrowAsync<ServicesRegistryValidationException>()).Which.Code.Should().Be("WorkOrderTypeInvalid");
+    }
+
+    [Fact]
+    public async Task Update_RewritesFieldsButPreservesActiveState()
+    {
+        using var ctx = NewContext();
+        var service = NewService(ctx);
+        var created = await service.CreateAsync(Admin(), Input("Leak"), CancellationToken.None);
+        await service.DeactivateAsync(Admin(), created.Id, CancellationToken.None);
+
+        var updated = await service.UpdateAsync(
+            Admin(), created.Id, Input("Leak Repair", trade: "HVAC", iconKey: "hvac"), CancellationToken.None);
+
+        updated.Name.Should().Be("Leak Repair");
+        updated.Trade.Should().Be("HVAC");
+        updated.IconKey.Should().Be("hvac");
+        updated.IsActive.Should().BeFalse("update preserves the persisted active state");
+    }
+
+    [Fact]
+    public async Task Update_WhenNotFound_ThrowsNotFound()
+    {
+        using var ctx = NewContext();
+        var act = () => NewService(ctx).UpdateAsync(Admin(), 404, Input(), CancellationToken.None);
+        (await act.Should().ThrowAsync<ServicesRegistryValidationException>()).Which.Code.Should().Be("NotFound");
+    }
+
+    [Fact]
+    public async Task Update_WhenDuplicateNameElsewhere_ThrowsDuplicateName()
+    {
+        using var ctx = NewContext();
+        var service = NewService(ctx);
+        var first = await service.CreateAsync(Admin(), Input("Leak"), CancellationToken.None);
+        await service.CreateAsync(Admin(), Input("Clog"), CancellationToken.None);
+
+        var act = () => service.UpdateAsync(Admin(), first.Id, Input("clog"), CancellationToken.None);
+        (await act.Should().ThrowAsync<ServicesRegistryValidationException>()).Which.Code.Should().Be("DuplicateName");
+    }
+
+    [Fact]
+    public async Task Update_WhenCallerLacksRole_ThrowsForbidden_BeforeAnyMutation()
+    {
+        using var ctx = NewContext();
+        var service = NewService(ctx);
+        var created = await service.CreateAsync(Admin(), Input("Leak"), CancellationToken.None);
+
+        var act = () => service.UpdateAsync(Principal("User"), created.Id, Input("Changed"), CancellationToken.None);
+        (await act.Should().ThrowAsync<ServicesRegistryValidationException>()).Which.Code.Should().Be("Forbidden");
+        ctx.Services.Single().Name.Should().Be("Leak");
+    }
+
+    [Fact]
+    public async Task Deactivate_SoftStateChangeOnly_PreservesRow()
+    {
+        using var ctx = NewContext();
+        var service = NewService(ctx);
+        var created = await service.CreateAsync(Admin(), Input("Leak"), CancellationToken.None);
+
+        await service.DeactivateAsync(Admin(), created.Id, CancellationToken.None);
+
+        ctx.Services.Should().HaveCount(1, "deactivation never hard deletes");
+        var byId = await service.GetByIdAsync(created.Id, CancellationToken.None);
+        byId.Should().NotBeNull();
+        byId!.IsActive.Should().BeFalse();
+    }
+
+    [Fact]
+    public async Task Deactivate_WhenScheduler_ThrowsForbidden()
+    {
+        using var ctx = NewContext();
+        var service = NewService(ctx);
+        var created = await service.CreateAsync(Admin(), Input("Leak"), CancellationToken.None);
+
+        var act = () => service.DeactivateAsync(Scheduler(), created.Id, CancellationToken.None);
+        (await act.Should().ThrowAsync<ServicesRegistryValidationException>()).Which.Code.Should().Be("Forbidden");
+        ctx.Services.Single().IsActive.Should().BeTrue();
+    }
+
+    [Fact]
+    public async Task Deactivate_WhenNotFound_ThrowsNotFound()
+    {
+        using var ctx = NewContext();
+        var act = () => NewService(ctx).DeactivateAsync(Admin(), 404, CancellationToken.None);
+        (await act.Should().ThrowAsync<ServicesRegistryValidationException>()).Which.Code.Should().Be("NotFound");
+    }
+
+    [Fact]
+    public async Task GetAll_FiltersByActiveStateAndWorkOrderType()
+    {
+        using var ctx = NewContext();
+        var service = NewService(ctx);
+        var pm = await service.CreateAsync(Admin(), Input("PM Service", types: new List<WorkOrderType> { WorkOrderType.PM }), CancellationToken.None);
+        var reactive = await service.CreateAsync(Admin(), Input(name: "Reactive Service", trade: "HVAC", iconKey: "hvac", types: new List<WorkOrderType> { WorkOrderType.Reactive }), CancellationToken.None);
+        await service.DeactivateAsync(Admin(), reactive.Id, CancellationToken.None);
+
+        (await service.GetAllAsync(true, null, CancellationToken.None)).Select(s => s.Id)
+            .Should().BeEquivalentTo(new[] { pm.Id });
+        (await service.GetAllAsync(false, null, CancellationToken.None)).Select(s => s.Id)
+            .Should().BeEquivalentTo(new[] { reactive.Id });
+
+        (await service.GetAllAsync(null, WorkOrderType.PM, CancellationToken.None)).Select(s => s.Id)
+            .Should().BeEquivalentTo(new[] { pm.Id });
+        (await service.GetAllAsync(null, WorkOrderType.Emergency, CancellationToken.None))
+            .Should().BeEmpty();
+    }
+
+    [Fact]
+    public async Task GetAll_WhenWorkOrderTypeFilterUnsupported_ThrowsWorkOrderTypeInvalid()
+    {
+        using var ctx = NewContext();
+        var act = () => NewService(ctx).GetAllAsync(null, WorkOrderType.Project, CancellationToken.None);
+        (await act.Should().ThrowAsync<ServicesRegistryValidationException>()).Which.Code.Should().Be("WorkOrderTypeInvalid");
+    }
+
+    [Fact]
+    public async Task GetById_WhenMissing_ReturnsNull()
+    {
+        using var ctx = NewContext();
+        (await NewService(ctx).GetByIdAsync(99, CancellationToken.None)).Should().BeNull();
+    }
+}
diff --git a/Api.SeaHavenIndustries/Controllers/ServicesRegistryController.cs b/Api.SeaHavenIndustries/Controllers/ServicesRegistryController.cs
new file mode 100644
index 0000000..fe66268
--- /dev/null
+++ b/Api.SeaHavenIndustries/Controllers/ServicesRegistryController.cs
@@ -0,0 +1,110 @@
+using Data.SeaHavenIndustries.Enums;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Exceptions;
+using SeaHaven.Services.Interfaces;
+
+namespace Api.SeaHavenIndustries.Controllers
+{
+    [Authorize]
+    [ApiController]
+    [Route("api/services")]
+    public class ServicesRegistryController : Controller
+    {
+        private readonly IServicesRegistryService _servicesRegistryService;
+
+        public ServicesRegistryController(IServicesRegistryService servicesRegistryService)
+        {
+            _servicesRegistryService = servicesRegistryService;
+        }
+
+        [HttpGet]
+        public async Task<IActionResult> GetAll([FromQuery] bool? isActive, [FromQuery] WorkOrderType? workOrderType, CancellationToken cancellationToken)
+        {
+            try
+            {
+                var services = await _servicesRegistryService.GetAllAsync(isActive, workOrderType, cancellationToken);
+                return Ok(services);
+            }
+            catch (ServicesRegistryValidationException ex)
+            {
+                return BadRequest(new ServicesRegistryValidationErrorDto { Code = ex.Code, Message = ex.Message });
+            }
+        }
+
+        [HttpGet("{id}")]
+        public async Task<IActionResult> GetById(int id, CancellationToken cancellationToken)
+        {
+            var service = await _servicesRegistryService.GetByIdAsync(id, cancellationToken);
+            if (service == null)
+                return NotFound(new ServicesRegistryValidationErrorDto { Code = "NotFound", Message = "Service not found." });
+
+            return Ok(service);
+        }
+
+        [HttpPost]
+        public async Task<IActionResult> Create([FromBody] ServiceInput input, CancellationToken cancellationToken)
+        {
+            try
+            {
+                var created = await _servicesRegistryService.CreateAsync(User, input, cancellationToken);
+                return StatusCode(StatusCodes.Status201Created, created);
+            }
+            catch (ServicesRegistryValidationException ex) when (ex.Code == "Forbidden")
+            {
+                return MapForbidden(ex);
+            }
+            catch (ServicesRegistryValidationException ex)
+            {
+                return BadRequest(new ServicesRegistryValidationErrorDto { Code = ex.Code, Message = ex.Message });
+            }
+        }
+
+        [HttpPut("{id}")]
+        public async Task<IActionResult> Update(int id, [FromBody] ServiceInput input, CancellationToken cancellationToken)
+        {
+            try
+            {
+                var updated = await _servicesRegistryService.UpdateAsync(User, id, input, cancellationToken);
+                return Ok(updated);
+            }
+            catch (ServicesRegistryValidationException ex) when (ex.Code == "NotFound")
+            {
+                return NotFound(new ServicesRegistryValidationErrorDto { Code = ex.Code, Message = ex.Message });
+            }
+            catch (ServicesRegistryValidationException ex) when (ex.Code == "Forbidden")
+            {
+                return MapForbidden(ex);
+            }
+            catch (ServicesRegistryValidationException ex)
+            {
+                return BadRequest(new ServicesRegistryValidationErrorDto { Code = ex.Code, Message = ex.Message });
+            }
+        }
+
+        [HttpPost("{id}/deactivate")]
+        public async Task<IActionResult> Deactivate(int id, CancellationToken cancellationToken)
+        {
+            try
+            {
+                await _servicesRegistryService.DeactivateAsync(User, id, cancellationToken);
+                return Ok(new { message = "Service deactivated" });
+            }
+            catch (ServicesRegistryValidationException ex) when (ex.Code == "NotFound")
+            {
+                return NotFound(new ServicesRegistryValidationErrorDto { Code = ex.Code, Message = ex.Message });
+            }
+            catch (ServicesRegistryValidationException ex) when (ex.Code == "Forbidden")
+            {
+                return MapForbidden(ex);
+            }
+        }
+
+        private IActionResult MapForbidden(ServicesRegistryValidationException ex)
+        {
+            return StatusCode(StatusCodes.Status403Forbidden,
+                new ServicesRegistryValidationErrorDto { Code = ex.Code, Message = ex.Message });
+        }
+    }
+}
diff --git a/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs b/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs
index a5256dc..8426000 100644
--- a/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs
+++ b/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs
@@ -206,6 +206,53 @@ namespace Data.SeaHavenIndustries
             builder.Entity<Trade>()
                 .HasIndex(t => t.NormalizedName)
                 .IsUnique();
+
+            // Bounded lengths keep the unique NormalizedName key SQL
+            // Server-indexable (nvarchar(max) is not).
+            builder.Entity<Service>()
+                .Property(s => s.Name)
+                .HasMaxLength(200);
+
+            builder.Entity<Service>()
+                .Property(s => s.NormalizedName)
+                .HasMaxLength(200);
+
+            builder.Entity<Service>()
+                .HasIndex(s => s.NormalizedName)
+                .IsUnique();
+
+            builder.Entity<Service>()
+                .Property(s => s.Trade)
+                .HasMaxLength(64);
+
+            builder.Entity<Service>()
+                .HasIndex(s => s.Trade);
+
+            builder.Entity<Service>()
+                .Property(s => s.IconKey)
+                .HasMaxLength(64);
+
+            builder.Entity<Service>()
+                .HasIndex(s => s.IsActive);
+
+            builder.Entity<Service>()
+                .HasOne(s => s.CompletionDocTemplate)
+                .WithMany()
+                .HasForeignKey(s => s.CompletionDocTemplateId)
+                .OnDelete(DeleteBehavior.Restrict);
+
+            builder.Entity<Service>()
+                .HasIndex(s => s.CompletionDocTemplateId);
+
+            builder.Entity<ServiceWorkOrderType>()
+                .HasIndex(t => new { t.ServiceId, t.WorkOrderType })
+                .IsUnique();
+
+            builder.Entity<ServiceWorkOrderType>()
+                .HasOne(t => t.Service)
+                .WithMany(s => s.SupportedWorkOrderTypes)
+                .HasForeignKey(t => t.ServiceId)
+                .OnDelete(DeleteBehavior.Restrict);
         }
         public DbSet<Category> Categories { get; set; }
         public DbSet<Locations> Locations { get; set; }
@@ -241,6 +288,8 @@ namespace Data.SeaHavenIndustries
         public DbSet<DispatchUpliftRequest> DispatchUpliftRequests { get; set; }
         public DbSet<TaskListTemplate> TaskListTemplates { get; set; }
         public DbSet<TaskListTemplateItem> TaskListTemplateItems { get; set; }
+        public DbSet<Service> Services { get; set; }
+        public DbSet<ServiceWorkOrderType> ServiceWorkOrderTypes { get; set; }
 
         // New DbSets for added entities
         public DbSet<Accounts> Accounts { get; set; }
diff --git a/Data.SeaHavenIndustries/Migrations/20260916185443_SH303_ServicesRegistry.Designer.cs b/Data.SeaHavenIndustries/Migrations/20260916185443_SH303_ServicesRegistry.Designer.cs
new file mode 100644
index 0000000..15ed6d7
--- /dev/null
+++ b/Data.SeaHavenIndustries/Migrations/20260916185443_SH303_ServicesRegistry.Designer.cs
@@ -0,0 +1,4074 @@
+// <auto-generated />
+using System;
+using Data.SeaHavenIndustries;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Metadata;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+
+#nullable disable
+
+namespace Data.SeaHavenIndustries.Migrations
+{
+    [DbContext(typeof(ApplicationDbContext))]
+    [Migration("20260916185443_SH303_ServicesRegistry")]
+    partial class SH303_ServicesRegistry
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasAnnotation("ProductVersion", "8.0.8")
+                .HasAnnotation("Relational:MaxIdentifierLength", 128);
+
+            SqlServerModelBuilderExtensions.UseIdentityColumns(modelBuilder);
+
+            modelBuilder.HasSequence("WorkOrderInternalNumberSequence");
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Accounts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("CurrencyCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Importance")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("IndustryId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("OwnerEmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Phone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PrivacySetting")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ServiceInstructions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Tags")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("TerritoryId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("TimeZone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Type")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Website")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Accounts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Addresses", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AddressType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Country")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("County")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("ContactId");
+
+                    b.ToTable("Addresses");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int>("AccessFailedCount")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Color")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ConcurrencyStamp")
+                        .IsConcurrencyToken()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Contact")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DeletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<bool>("EmailConfirmed")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("FirstName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Initials")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("LastName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Locations")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("LockoutEnabled")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTimeOffset?>("LockoutEnd")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("NormalizedEmail")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("NormalizedUserName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("PasswordHash")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("PhoneNumberConfirmed")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("SecurityStamp")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("TwoFactorEnabled")
+                        .HasColumnType("bit");
+
+                    b.Property<int?>("Type")
+                        .HasColumnType("int");
+
+                    b.Property<string>("UniqueName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserImage")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("NormalizedEmail")
+                        .HasDatabaseName("EmailIndex");
+
+                    b.HasIndex("NormalizedUserName")
+                        .IsUnique()
+                        .HasDatabaseName("UserNameIndex")
+                        .HasFilter("[NormalizedUserName] IS NOT NULL");
+
+                    b.ToTable("AspNetUsers", (string)null);
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("AssetCode")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Assets");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Category", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Categories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Comments", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CommentType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Commenter")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Commenttext")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Documents")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalCommentId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("ExternalSourceEmailS3Key")
+                        .HasMaxLength(2048)
+                        .HasColumnType("nvarchar(2048)");
+
+                    b.Property<DateTimeOffset?>("ExternalUpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalVersionHash")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RecordType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int?>("WorkerOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("UserId");
+
+                    b.HasIndex("WorkerOrderId");
+
+                    b.ToTable("Comments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.CompletionDocTemplate", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ServiceKey")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("TemplateUrl")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ServiceKey", "IsActive");
+
+                    b.ToTable("CompletionDocTemplates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ContactDetails", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DateOfBirth")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Gender")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PrivacySetting")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Tags")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Territory")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.ToTable("ContactDetails");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ContactType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FirstName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LastName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("MiddleName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Owner")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("SiteContactOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Title")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Contacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Department", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Departments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AcceptToken")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("AcknowledgedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CommercialStatusUpdatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CompletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DispatchNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DispatchedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("EmailSent")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("EstimatedArrivalAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("EtaManualOverride")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("InvoiceNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("InvoiceStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<decimal?>("NTEAmount")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<string>("PONumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PaymentStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ReplyToAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<DateTime?>("ScheduledDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TechPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("VendorNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<DateTime?>("VerifiedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("VerifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("Dispatches");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchChecklistItem", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CompletedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("CompletedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool>("IsCompleted")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ItemText")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("DispatchChecklistItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchSignoff", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Signature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignatureMethod")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("SignedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("SignoffType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.ToTable("DispatchSignoffs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchUpliftRequest", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<decimal?>("CurrentNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<DateTime?>("DecidedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DecidedByUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DecisionNote")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("EscalatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("EvidenceDocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("ExpiresAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("InitialNotificationSentAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("NotificationError")
+                        .HasMaxLength(500)
+                        .HasColumnType("nvarchar(500)");
+
+                    b.Property<string>("NotificationStatus")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<string>("RequestKey")
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<string>("RequestedByVendorName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<decimal>("RequestedNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<int>("RequiredTier")
+                        .HasColumnType("int");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<string>("Status")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<string>("VendorReason")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId")
+                        .IsUnique()
+                        .HasFilter("[Status] IN ('Pending', 'ChangesRequested')");
+
+                    b.HasIndex("EvidenceDocumentId");
+
+                    b.HasIndex("DispatchId", "RequestKey")
+                        .IsUnique()
+                        .HasFilter("[RequestKey] IS NOT NULL");
+
+                    b.ToTable("DispatchUpliftRequests");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchWorkOrder", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("DispatchWorkOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DropdownOption", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Category")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ParentValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Value")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("DropdownOptions");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("CanChangeProviderNumber")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ConfirmUserName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DateOfBirth")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DepartmentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("EmployeeNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FirstName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Gender")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("HireDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<int?>("JobTitleId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("LastLogin")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LastName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("MiddleName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("PermissionGroupId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("RegionId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("SMSAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TimeZone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Website")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DepartmentId");
+
+                    b.HasIndex("JobTitleId");
+
+                    b.HasIndex("RegionId");
+
+                    b.ToTable("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeAddress", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CountryCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CountyId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("StateCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Street")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("StreetLineTwo")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId")
+                        .IsUnique();
+
+                    b.ToTable("EmployeeAddresses");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeEmail", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<int?>("EmailTypeId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsPrimary")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.ToTable("EmployeeEmails");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeePhone", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Extension")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsPrimary")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Number")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("PhoneTypeId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.ToTable("EmployeePhones");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Events", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("AllDay")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("EndDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("EndTime")
+                        .HasMaxLength(10)
+                        .HasColumnType("nvarchar(10)");
+
+                    b.Property<string>("EventColor")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Location")
+                        .HasMaxLength(150)
+                        .HasColumnType("nvarchar(150)");
+
+                    b.Property<int?>("RecordID")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RecordName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("RecordTargetType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("ReminderMinutes")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime>("StartDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("StartTime")
+                        .HasMaxLength(10)
+                        .HasColumnType("nvarchar(10)");
+
+                    b.Property<string>("Title")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Events");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.FollowUps", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Reason")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("ScheduleDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<TimeSpan>("ScheduleStartTime")
+                        .HasColumnType("time");
+
+                    b.Property<string>("Status")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.HasIndex("LocationId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("FollowUps");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ForgetPasswordCode", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Code")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Email")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("ForgetPasswordCodes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.JobTitle", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("JobTitles");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalLocationId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Latitude")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Longitude")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Title")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.ToTable("Locations");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.PMSchedules", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AssetId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Frequency")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("StartDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AssetId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("PMSchedules");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BillingAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("Date")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ProjectName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("QuotId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ShippingAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("Quotes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.QuotesLineItems", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Descriptions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<decimal?>("Lineitem")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<int?>("LineitemNumber")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("QuoteId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("QuoteId");
+
+                    b.ToTable("QuotesLines");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Region", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Regions");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Service", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("CompletionDocTemplateId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("IconKey")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<bool>("RequiresCompletionDocument")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Trade")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CompletionDocTemplateId");
+
+                    b.HasIndex("IsActive");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.HasIndex("Trade");
+
+                    b.ToTable("Services");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ServiceWorkOrderType", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("ServiceId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ServiceId", "WorkOrderType")
+                        .IsUnique();
+
+                    b.ToTable("ServiceWorkOrderTypes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.SitePreferredVendor", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Trade")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("UpdatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("LocationId", "VendorId")
+                        .IsUnique()
+                        .HasFilter("[Trade] IS NULL");
+
+                    b.HasIndex("LocationId", "VendorId", "Trade")
+                        .IsUnique()
+                        .HasFilter("[Trade] IS NOT NULL");
+
+                    b.ToTable("SitePreferredVendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplate", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("TaskListTemplates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplateItem", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ItemText")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<int>("TaskListTemplateId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("TaskListTemplateId");
+
+                    b.ToTable("TaskListTemplateItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Template", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AfterPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AfterPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AssignTo")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DueDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Priority")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffSignature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderTitle")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AssignTo");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Templates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Trade", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("Trades");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AvailabilityStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("AvailabilityUpdatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CompanyId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CompanyName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CompanyPhone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ContactName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("GoogleMapsUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Phone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PreferredContact")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TradeSpecialties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CompanyId");
+
+                    b.ToTable("Vendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAccessToken", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime>("ExpiresAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime>("IssuedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("LastUsedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("RevokedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Token")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Token")
+                        .IsUnique();
+
+                    b.HasIndex("VendorId");
+
+                    b.ToTable("VendorAccessTokens");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAuditLog", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Actor")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("FieldName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NewValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("OldValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.ToTable("VendorAuditLogs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CompanyPhone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("GoogleMapsUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("VendorCompanies");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompletionDocument", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ContentType")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("OriginalFileName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Purpose")
+                        .IsRequired()
+                        .HasMaxLength(30)
+                        .HasColumnType("nvarchar(30)");
+
+                    b.Property<string>("RejectionReason")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ReplacesDocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ReviewStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ReviewedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ScanStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ScannedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<long>("SizeBytes")
+                        .HasColumnType("bigint");
+
+                    b.Property<string>("StoredFileName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("Version")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("VendorCompletionDocuments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("AdditionalContacts")
+                        .HasMaxLength(4000)
+                        .HasColumnType("nvarchar(4000)");
+
+                    b.Property<string>("AfterPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AfterPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateOnly?>("AssignDate")
+                        .HasColumnType("date");
+
+                    b.Property<string>("AssignTo")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("AvetaRequired")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("AvettaTask")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Building")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("CarriedOver")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CompletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Customer")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DateReported")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("DocStatus")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("DueDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ExternalAssignedTo")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<DateTimeOffset?>("ExternalLastOccurredAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalRecordType")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset?>("ExternalUpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalVersionHash")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("ExternalWorkOrderId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ExtraServices")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<string>("FlagColor")
+                        .HasMaxLength(7)
+                        .HasColumnType("nvarchar(7)");
+
+                    b.Property<string>("FrozenCompany")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FrozenPoc")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FrozenSite")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("InternalWONumber")
+                        .HasMaxLength(11)
+                        .HasColumnType("nvarchar(11)");
+
+                    b.Property<bool>("IsAddOn")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LegacyStatus")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("LifecycleStatus")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("OperationalFlags")
+                        .HasColumnType("int");
+
+                    b.Property<DateOnly?>("OriginalDate")
+                        .HasColumnType("date");
+
+                    b.Property<DateOnly?>("OriginalWeek")
+                        .HasColumnType("date");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PocName")
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("PocNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<string>("PocPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int?>("PrimaryDispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Priority")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Problem")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("RescheduleCount")
+                        .HasColumnType("int");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<bool?>("ScheduleWeekOnly")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("ScheduledDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("ScheduledEnd")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("ScheduledStart")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Service")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("ServiceNotes")
+                        .HasMaxLength(4000)
+                        .HasColumnType("nvarchar(4000)");
+
+                    b.Property<string>("Severity")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffSignature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteCode")
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<string>("Source")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SourceEmailS3Key")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SubTrade")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateOnly?>("TargetWeek")
+                        .HasColumnType("date");
+
+                    b.Property<string>("TechPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<string>("Trade")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<decimal?>("VendorNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<string>("VendorNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<int?>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("WorkerOrderNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderTitle")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("istemplate")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("ExternalWorkOrderId")
+                        .IsUnique()
+                        .HasFilter("[ExternalWorkOrderId] IS NOT NULL AND [ExternalWorkOrderId] <> ''");
+
+                    b.HasIndex("InternalWONumber")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.HasIndex("LocationId");
+
+                    b.HasIndex("PrimaryDispatchId");
+
+                    b.HasIndex("ScheduledDate");
+
+                    b.HasIndex("SiteCode")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.HasIndex("WorkOrderType");
+
+                    b.HasIndex("AssignTo", "ScheduledDate");
+
+                    b.HasIndex("LifecycleStatus", "ScheduledDate")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.ToTable("workOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAttachments", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Category")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("workOrderAttachments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAuditLog", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Action")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ActorType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CorrelationId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("EventType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FieldName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NewValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("OldValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UserId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("WorkOrderAuditLogs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderCategories", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("workOrderCategories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderContacts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("WorkOrderContacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderExternalReceipt", b =>
+                {
+                    b.Property<long>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("bigint");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<long>("Id"));
+
+                    b.Property<string>("ExternalId")
+                        .IsRequired()
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Kind")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<DateTimeOffset>("ProcessedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("Source")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset>("UpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("VersionHash")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Source", "Kind", "ExternalId")
+                        .IsUnique()
+                        .HasDatabaseName("IX_WorkOrderExternalReceipts_Source_Kind_ExternalId");
+
+                    b.ToTable("WorkOrderExternalReceipts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderFieldLock", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("FieldName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<DateTime>("LockedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("LockedByUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkOrderId", "FieldName")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderFieldLocks");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderReconciliationJob", b =>
+                {
+                    b.Property<int>("Id")
+                        .HasColumnType("int");
+
+                    b.Property<int>("CommentsProcessed")
+                        .HasColumnType("int");
+
+                    b.Property<DateTimeOffset?>("CompletedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ErrorCode")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<Guid?>("FenceToken")
+                        .HasColumnType("uniqueidentifier");
+
+                    b.Property<DateTimeOffset?>("LeaseExpiresAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("Reason")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset?>("RequestedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<Guid>("RunId")
+                        .HasColumnType("uniqueidentifier");
+
+                    b.Property<DateTimeOffset?>("StartedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("State")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<int>("WorkOrdersProcessed")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("State");
+
+                    b.ToTable("WorkOrderReconciliationJobs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWebhookDelivery", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BodySha256")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("DeliveryId")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("EventType")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<DateTimeOffset>("OccurredAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<DateTimeOffset>("ProcessedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DeliveryId")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderWebhookDeliveries");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWeekRolledLedger", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CorrelationId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("ProcessedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateOnly>("SourceWeekStart")
+                        .HasColumnType("date");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkOrderId", "SourceWeekStart")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderWeekRolledLedgers");
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRole", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ConcurrencyStamp")
+                        .IsConcurrencyToken()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("NormalizedName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique()
+                        .HasDatabaseName("RoleNameIndex")
+                        .HasFilter("[NormalizedName] IS NOT NULL");
+
+                    b.ToTable("AspNetRoles", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRoleClaim<string>", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ClaimType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ClaimValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("RoleId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AspNetRoleClaims", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserClaim<string>", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ClaimType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ClaimValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UserId");
+
+                    b.ToTable("AspNetUserClaims", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserLogin<string>", b =>
+                {
+                    b.Property<string>("LoginProvider")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ProviderKey")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ProviderDisplayName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("LoginProvider", "ProviderKey");
+
+                    b.HasIndex("UserId");
+
+                    b.ToTable("AspNetUserLogins", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserRole<string>", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("RoleId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("UserId", "RoleId");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AspNetUserRoles", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserToken<string>", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("LoginProvider")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Value")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("UserId", "LoginProvider", "Name");
+
+                    b.ToTable("AspNetUserTokens", (string)null);
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Addresses", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany("Addresses")
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contact")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Contact");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Comments", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("Comments")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "ApplicationUser")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Comments")
+                        .HasForeignKey("WorkerOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("ApplicationUser");
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ContactDetails", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contact")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Contact");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany("Contacts")
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany("Contacts")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("Dispatches")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Dispatches")
+                        .HasForeignKey("WorkOrderId");
+
+                    b.Navigation("Vendor");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchChecklistItem", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("ChecklistItems")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchSignoff", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("Signoffs")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchUpliftRequest", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany()
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.VendorCompletionDocument", "EvidenceDocument")
+                        .WithMany()
+                        .HasForeignKey("EvidenceDocumentId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("EvidenceDocument");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchWorkOrder", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("DispatchWorkOrders")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Department", "Department")
+                        .WithMany("Employees")
+                        .HasForeignKey("DepartmentId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.JobTitle", "JobTitle")
+                        .WithMany("Employees")
+                        .HasForeignKey("JobTitleId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Region", "Region")
+                        .WithMany("Employees")
+                        .HasForeignKey("RegionId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Department");
+
+                    b.Navigation("JobTitle");
+
+                    b.Navigation("Region");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeAddress", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithOne("Address")
+                        .HasForeignKey("Data.SeaHavenIndustries.EmployeeAddress", "EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeEmail", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany("Emails")
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeePhone", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany("Phones")
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.FollowUps", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany()
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Employee");
+
+                    b.Navigation("Location");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.PMSchedules", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Assets", "Asset")
+                        .WithMany("PMSchedules")
+                        .HasForeignKey("AssetId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Asset");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contacts")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Quotes")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Contacts");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.QuotesLineItems", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Quotes", "Quotes")
+                        .WithMany("LineItems")
+                        .HasForeignKey("QuoteId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Quotes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Service", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.CompletionDocTemplate", "CompletionDocTemplate")
+                        .WithMany()
+                        .HasForeignKey("CompletionDocTemplateId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("CompletionDocTemplate");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ServiceWorkOrderType", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Service", "Service")
+                        .WithMany("SupportedWorkOrderTypes")
+                        .HasForeignKey("ServiceId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Service");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.SitePreferredVendor", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("SitePreferences")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Location");
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplateItem", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.TaskListTemplate", "Template")
+                        .WithMany("Items")
+                        .HasForeignKey("TaskListTemplateId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Template");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Template", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "AssignToUser")
+                        .WithMany("Templates")
+                        .HasForeignKey("AssignTo")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Category", "Category")
+                        .WithMany("Templates")
+                        .HasForeignKey("CategoryId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "POC")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Locations")
+                        .WithMany("Templates")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("AssignToUser");
+
+                    b.Navigation("Category");
+
+                    b.Navigation("Locations");
+
+                    b.Navigation("POC");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.VendorCompany", "Company")
+                        .WithMany("Vendors")
+                        .HasForeignKey("CompanyId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Company");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAccessToken", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany()
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAuditLog", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("AuditLogs")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompletionDocument", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("CompletionDocuments")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany()
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("Vendor");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "AssignToUser")
+                        .WithMany("WorkOrders")
+                        .HasForeignKey("AssignTo")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Locations")
+                        .WithMany("workOrders")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "PrimaryDispatch")
+                        .WithMany()
+                        .HasForeignKey("PrimaryDispatchId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("AssignToUser");
+
+                    b.Navigation("Locations");
+
+                    b.Navigation("PrimaryDispatch");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAttachments", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("workOrderAttachments")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAuditLog", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("User");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderCategories", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Category", "Category")
+                        .WithMany("WorkOrderCategories")
+                        .HasForeignKey("CategoryId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("WorkOrderCategories")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Category");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderContacts", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "POC")
+                        .WithMany("WorkOrderContacts")
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("WorkOrderContacts")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("POC");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderFieldLock", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("FieldLocks")
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWeekRolledLedger", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRoleClaim<string>", b =>
+                {
+                    b.HasOne("Microsoft.AspNetCore.Identity.IdentityRole", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserClaim<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserLogin<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserRole<string>", b =>
+                {
+                    b.HasOne("Microsoft.AspNetCore.Identity.IdentityRole", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserToken<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Accounts", b =>
+                {
+                    b.Navigation("Addresses");
+
+                    b.Navigation("Contacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.Navigation("Templates");
+
+                    b.Navigation("WorkOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.Navigation("PMSchedules");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Category", b =>
+                {
+                    b.Navigation("Templates");
+
+                    b.Navigation("WorkOrderCategories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.Navigation("WorkOrderContacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Department", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.Navigation("ChecklistItems");
+
+                    b.Navigation("Comments");
+
+                    b.Navigation("CompletionDocuments");
+
+                    b.Navigation("DispatchWorkOrders");
+
+                    b.Navigation("Signoffs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.Navigation("Address");
+
+                    b.Navigation("Emails");
+
+                    b.Navigation("Phones");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.JobTitle", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.Navigation("Contacts");
+
+                    b.Navigation("Templates");
+
+                    b.Navigation("workOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.Navigation("LineItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Region", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Service", b =>
+                {
+                    b.Navigation("SupportedWorkOrderTypes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplate", b =>
+                {
+                    b.Navigation("Items");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.Navigation("AuditLogs");
+
+                    b.Navigation("Dispatches");
+
+                    b.Navigation("SitePreferences");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.Navigation("Vendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.Navigation("Comments");
+
+                    b.Navigation("Dispatches");
+
+                    b.Navigation("FieldLocks");
+
+                    b.Navigation("Quotes");
+
+                    b.Navigation("WorkOrderCategories");
+
+                    b.Navigation("WorkOrderContacts");
+
+                    b.Navigation("workOrderAttachments");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/Data.SeaHavenIndustries/Migrations/20260916185443_SH303_ServicesRegistry.cs b/Data.SeaHavenIndustries/Migrations/20260916185443_SH303_ServicesRegistry.cs
new file mode 100644
index 0000000..41fe63d
--- /dev/null
+++ b/Data.SeaHavenIndustries/Migrations/20260916185443_SH303_ServicesRegistry.cs
@@ -0,0 +1,162 @@
+using System;
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Data.SeaHavenIndustries.Migrations
+{
+    /// <inheritdoc />
+    public partial class SH303_ServicesRegistry : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.CreateTable(
+                name: "Services",
+                columns: table => new
+                {
+                    Id = table.Column<int>(type: "int", nullable: false)
+                        .Annotation("SqlServer:Identity", "1, 1"),
+                    Name = table.Column<string>(type: "nvarchar(200)", maxLength: 200, nullable: false),
+                    NormalizedName = table.Column<string>(type: "nvarchar(200)", maxLength: 200, nullable: false),
+                    Trade = table.Column<string>(type: "nvarchar(64)", maxLength: 64, nullable: false),
+                    IconKey = table.Column<string>(type: "nvarchar(64)", maxLength: 64, nullable: false),
+                    RequiresCompletionDocument = table.Column<bool>(type: "bit", nullable: false),
+                    CompletionDocTemplateId = table.Column<int>(type: "int", nullable: true),
+                    IsActive = table.Column<bool>(type: "bit", nullable: false),
+                    IsDeleted = table.Column<bool>(type: "bit", nullable: true),
+                    createdby = table.Column<string>(type: "nvarchar(max)", nullable: true),
+                    DeleterUserId = table.Column<string>(type: "nvarchar(max)", nullable: true),
+                    DeletionTime = table.Column<DateTime>(type: "datetime2", nullable: true),
+                    CreatedDate = table.Column<DateTime>(type: "datetime2", nullable: true),
+                    LastModificationTime = table.Column<DateTime>(type: "datetime2", nullable: true),
+                    LastModifierUserId = table.Column<int>(type: "int", nullable: true)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("PK_Services", x => x.Id);
+                    table.ForeignKey(
+                        name: "FK_Services_CompletionDocTemplates_CompletionDocTemplateId",
+                        column: x => x.CompletionDocTemplateId,
+                        principalTable: "CompletionDocTemplates",
+                        principalColumn: "Id",
+                        onDelete: ReferentialAction.Restrict);
+                });
+
+            migrationBuilder.CreateTable(
+                name: "ServiceWorkOrderTypes",
+                columns: table => new
+                {
+                    Id = table.Column<int>(type: "int", nullable: false)
+                        .Annotation("SqlServer:Identity", "1, 1"),
+                    ServiceId = table.Column<int>(type: "int", nullable: false),
+                    WorkOrderType = table.Column<int>(type: "int", nullable: false),
+                    IsDeleted = table.Column<bool>(type: "bit", nullable: true),
+                    createdby = table.Column<string>(type: "nvarchar(max)", nullable: true),
+                    DeleterUserId = table.Column<string>(type: "nvarchar(max)", nullable: true),
+                    DeletionTime = table.Column<DateTime>(type: "datetime2", nullable: true),
+                    CreatedDate = table.Column<DateTime>(type: "datetime2", nullable: true),
+                    LastModificationTime = table.Column<DateTime>(type: "datetime2", nullable: true),
+                    LastModifierUserId = table.Column<int>(type: "int", nullable: true)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("PK_ServiceWorkOrderTypes", x => x.Id);
+                    table.ForeignKey(
+                        name: "FK_ServiceWorkOrderTypes_Services_ServiceId",
+                        column: x => x.ServiceId,
+                        principalTable: "Services",
+                        principalColumn: "Id",
+                        onDelete: ReferentialAction.Restrict);
+                });
+
+            migrationBuilder.CreateIndex(
+                name: "IX_Services_CompletionDocTemplateId",
+                table: "Services",
+                column: "CompletionDocTemplateId");
+
+            migrationBuilder.CreateIndex(
+                name: "IX_Services_IsActive",
+                table: "Services",
+                column: "IsActive");
+
+            migrationBuilder.CreateIndex(
+                name: "IX_Services_NormalizedName",
+                table: "Services",
+                column: "NormalizedName",
+                unique: true);
+
+            migrationBuilder.CreateIndex(
+                name: "IX_Services_Trade",
+                table: "Services",
+                column: "Trade");
+
+            migrationBuilder.CreateIndex(
+                name: "IX_ServiceWorkOrderTypes_ServiceId_WorkOrderType",
+                table: "ServiceWorkOrderTypes",
+                columns: new[] { "ServiceId", "WorkOrderType" },
+                unique: true);
+
+            // Additive seed: one active service per active Problem dropdown
+            // value already stored in the database (never the prototype's demo
+            // leaves). Idempotent via NormalizedName NOT EXISTS; dropdown rows are
+            // only read, never altered. Repeated source values collapse onto a
+            // deterministic MIN(Value) representative per normalized key.
+            migrationBuilder.Sql(
+                """
+                INSERT INTO [Services] ([Name], [NormalizedName], [Trade], [IconKey], [RequiresCompletionDocument], [CompletionDocTemplateId], [IsActive], [IsDeleted], [createdby])
+                SELECT seeded.[Name], seeded.[NormalizedName], seeded.[Trade],
+                       CASE seeded.[Trade]
+                           WHEN N'Plumbing & Water Systems' THEN N'plumbing-water-systems'
+                           WHEN N'Electrical' THEN N'electrical'
+                           WHEN N'HVAC' THEN N'hvac'
+                           WHEN N'Fire & Life Safety' THEN N'fire-life-safety'
+                           ELSE N'general-building-handyman'
+                       END,
+                       0, NULL, 1, 0, N'sh303-migration'
+                FROM (
+                    SELECT agg.[Name], agg.[NormalizedName],
+                           CASE
+                               WHEN agg.[Name] IN (N'Leak', N'Clogged') THEN N'Plumbing & Water Systems'
+                               WHEN agg.[Name] = N'No Power' THEN N'Electrical'
+                               WHEN agg.[Name] IN (N'Not Cooling', N'Not Heating') THEN N'HVAC'
+                               WHEN agg.[Name] = N'Alarm Fault' THEN N'Fire & Life Safety'
+                               ELSE N'General Building & Handyman'
+                           END AS [Trade]
+                    FROM (
+                        SELECT MIN(src.[Value]) AS [Name],
+                               LOWER(LTRIM(RTRIM(src.[Value]))) AS [NormalizedName]
+                        FROM [DropdownOptions] src
+                        WHERE src.[Category] = N'Problem'
+                          AND src.[IsActive] = 1
+                        GROUP BY LOWER(LTRIM(RTRIM(src.[Value])))
+                    ) agg
+                ) seeded
+                WHERE NOT EXISTS (
+                    SELECT 1 FROM [Services] s WHERE s.[NormalizedName] = seeded.[NormalizedName]
+                );
+
+                INSERT INTO [ServiceWorkOrderTypes] ([ServiceId], [WorkOrderType], [IsDeleted])
+                SELECT s.[Id], types.[WorkOrderType], 0
+                FROM [Services] s
+                CROSS JOIN (VALUES (2), (6), (3)) AS types([WorkOrderType])
+                WHERE s.[createdby] = N'sh303-migration'
+                  AND NOT EXISTS (
+                      SELECT 1 FROM [ServiceWorkOrderTypes] x
+                      WHERE x.[ServiceId] = s.[Id]
+                        AND x.[WorkOrderType] = types.[WorkOrderType]
+                  );
+                """);
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropTable(
+                name: "ServiceWorkOrderTypes");
+
+            migrationBuilder.DropTable(
+                name: "Services");
+        }
+    }
+}
diff --git a/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs b/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
index 7bf6f39..04dfa9e 100644
--- a/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
+++ b/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
@@ -1762,6 +1762,121 @@ namespace Data.SeaHavenIndustries.Migrations
                     b.ToTable("Regions");
                 });
 
+            modelBuilder.Entity("Data.SeaHavenIndustries.Service", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("CompletionDocTemplateId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("IconKey")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<bool>("RequiresCompletionDocument")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Trade")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CompletionDocTemplateId");
+
+                    b.HasIndex("IsActive");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.HasIndex("Trade");
+
+                    b.ToTable("Services");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ServiceWorkOrderType", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("ServiceId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ServiceId", "WorkOrderType")
+                        .IsUnique();
+
+                    b.ToTable("ServiceWorkOrderTypes");
+                });
+
             modelBuilder.Entity("Data.SeaHavenIndustries.SitePreferredVendor", b =>
                 {
                     b.Property<int>("Id")
@@ -3521,6 +3636,27 @@ namespace Data.SeaHavenIndustries.Migrations
                     b.Navigation("Quotes");
                 });
 
+            modelBuilder.Entity("Data.SeaHavenIndustries.Service", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.CompletionDocTemplate", "CompletionDocTemplate")
+                        .WithMany()
+                        .HasForeignKey("CompletionDocTemplateId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("CompletionDocTemplate");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ServiceWorkOrderType", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Service", "Service")
+                        .WithMany("SupportedWorkOrderTypes")
+                        .HasForeignKey("ServiceId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Service");
+                });
+
             modelBuilder.Entity("Data.SeaHavenIndustries.SitePreferredVendor", b =>
                 {
                     b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
@@ -3889,6 +4025,11 @@ namespace Data.SeaHavenIndustries.Migrations
                     b.Navigation("Employees");
                 });
 
+            modelBuilder.Entity("Data.SeaHavenIndustries.Service", b =>
+                {
+                    b.Navigation("SupportedWorkOrderTypes");
+                });
+
             modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplate", b =>
                 {
                     b.Navigation("Items");
diff --git a/Data.SeaHavenIndustries/Models/Service.cs b/Data.SeaHavenIndustries/Models/Service.cs
new file mode 100644
index 0000000..adba3f4
--- /dev/null
+++ b/Data.SeaHavenIndustries/Models/Service.cs
@@ -0,0 +1,29 @@
+using Data.SeaHavenIndustries.Enums;
+
+namespace Data.SeaHavenIndustries
+{
+    // Global (tenant-scope free) Services registry. Services are never
+    // hard deleted; deactivation is a soft IsActive state change so historical
+    // work-order references remain resolvable.
+    public class Service : FullAuditEntity
+    {
+        public string Name { get; set; } = "";
+        public string NormalizedName { get; set; } = "";
+        public string Trade { get; set; } = "";
+        public string IconKey { get; set; } = "";
+        public bool RequiresCompletionDocument { get; set; }
+        public int? CompletionDocTemplateId { get; set; }
+        public virtual CompletionDocTemplate? CompletionDocTemplate { get; set; }
+        public bool IsActive { get; set; } = true;
+        public virtual ICollection<ServiceWorkOrderType> SupportedWorkOrderTypes { get; set; } = new List<ServiceWorkOrderType>();
+    }
+
+    // Supported work-order types (PM, Reactive, Emergency) stored as an
+    // explicitly queryable relation so work-order features can filter by type.
+    public class ServiceWorkOrderType : FullAuditEntity
+    {
+        public int ServiceId { get; set; }
+        public virtual Service? Service { get; set; }
+        public WorkOrderType WorkOrderType { get; set; }
+    }
+}
diff --git a/SeaHaven.DataServices/Implementation/ServicesRegistryDataService.cs b/SeaHaven.DataServices/Implementation/ServicesRegistryDataService.cs
new file mode 100644
index 0000000..b6acd06
--- /dev/null
+++ b/SeaHaven.DataServices/Implementation/ServicesRegistryDataService.cs
@@ -0,0 +1,130 @@
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using Microsoft.EntityFrameworkCore;
+using SeaHaven.DataServices.Interfaces;
+
+namespace SeaHaven.DataServices.Implementation
+{
+    public class ServicesRegistryDataService : IServicesRegistryDataService
+    {
+        private readonly ApplicationDbContext _context;
+
+        public ServicesRegistryDataService(ApplicationDbContext context)
+        {
+            _context = context;
+        }
+
+        public async Task<IReadOnlyList<ServiceRegistryRow>> GetServiceRowsAsync(bool? isActive, WorkOrderType? workOrderType, CancellationToken cancellationToken)
+        {
+            var query = _context.Services
+                .AsNoTracking()
+                .Where(s => s.IsDeleted != true);
+
+            if (isActive.HasValue)
+                query = query.Where(s => s.IsActive == isActive.Value);
+
+            if (workOrderType.HasValue)
+                query = query.Where(s => s.SupportedWorkOrderTypes.Any(t => t.WorkOrderType == workOrderType.Value));
+
+            var rows = await query
+                .OrderBy(s => s.Name)
+                .Select(s => new ServiceRegistryRow
+                {
+                    Id = s.Id,
+                    Name = s.Name,
+                    Trade = s.Trade,
+                    IconKey = s.IconKey,
+                    RequiresCompletionDocument = s.RequiresCompletionDocument,
+                    IsActive = s.IsActive,
+                    CompletionDocTemplateId = s.CompletionDocTemplateId,
+                    CompletionDocTemplateName = s.CompletionDocTemplate != null ? s.CompletionDocTemplate.Name : null,
+                    SupportedWorkOrderTypes = s.SupportedWorkOrderTypes.Select(t => t.WorkOrderType).ToList()
+                })
+                .ToListAsync(cancellationToken);
+            return rows;
+        }
+
+        public async Task<ServiceRegistryRow?> GetServiceRowByIdAsync(int id, CancellationToken cancellationToken)
+        {
+            return await _context.Services.AsNoTracking()
+                .Where(s => s.Id == id && s.IsDeleted != true)
+                .Select(s => new ServiceRegistryRow
+                {
+                    Id = s.Id,
+                    Name = s.Name,
+                    Trade = s.Trade,
+                    IconKey = s.IconKey,
+                    RequiresCompletionDocument = s.RequiresCompletionDocument,
+                    IsActive = s.IsActive,
+                    CompletionDocTemplateId = s.CompletionDocTemplateId,
+                    CompletionDocTemplateName = s.CompletionDocTemplate != null ? s.CompletionDocTemplate.Name : null,
+                    SupportedWorkOrderTypes = s.SupportedWorkOrderTypes.Select(t => t.WorkOrderType).ToList()
+                })
+                .FirstOrDefaultAsync(cancellationToken);
+        }
+
+        public async Task<Service?> GetServiceForUpdateAsync(int id, CancellationToken cancellationToken)
+        {
+            return await _context.Services
+                .Include(s => s.SupportedWorkOrderTypes)
+                .FirstOrDefaultAsync(s => s.Id == id && s.IsDeleted != true, cancellationToken);
+        }
+
+        public async Task<bool> NormalizedNameExistsAsync(string normalizedName, int? excludeServiceId, CancellationToken cancellationToken)
+        {
+            return await _context.Services
+                .AnyAsync(s => s.IsDeleted != true
+                               && s.NormalizedName == normalizedName
+                               && (excludeServiceId == null || s.Id != excludeServiceId),
+                    cancellationToken);
+        }
+
+        public async Task<LinkedTemplateSummary?> GetActiveTemplateSummaryAsync(int templateId, CancellationToken cancellationToken)
+        {
+            return await _context.CompletionDocTemplates
+                .Where(t => t.Id == templateId && t.IsActive && t.IsDeleted != true)
+                .Select(t => new LinkedTemplateSummary { Id = t.Id, Name = t.Name })
+                .FirstOrDefaultAsync(cancellationToken);
+        }
+
+        public async Task<Service> AddServiceAsync(Service service, CancellationToken cancellationToken)
+        {
+            await _context.Services.AddAsync(service, cancellationToken);
+            await _context.SaveChangesAsync(cancellationToken);
+            return service;
+        }
+
+        public async Task SaveServiceAsync(Service service, IReadOnlyCollection<WorkOrderType> supportedWorkOrderTypes, CancellationToken cancellationToken)
+        {
+            var desired = supportedWorkOrderTypes.Distinct().ToList();
+            var current = service.SupportedWorkOrderTypes ?? new List<ServiceWorkOrderType>();
+
+            var stale = current.Where(t => !desired.Contains(t.WorkOrderType)).ToList();
+            _context.ServiceWorkOrderTypes.RemoveRange(stale);
+
+            var existingTypes = current.Select(t => t.WorkOrderType).ToHashSet();
+            foreach (var type in desired.Where(t => !existingTypes.Contains(t)))
+            {
+                _context.ServiceWorkOrderTypes.Add(new ServiceWorkOrderType
+                {
+                    ServiceId = service.Id,
+                    WorkOrderType = type
+                });
+            }
+
+            await _context.SaveChangesAsync(cancellationToken);
+        }
+
+        public async Task<bool> DeactivateServiceAsync(int id, CancellationToken cancellationToken)
+        {
+            var service = await _context.Services
+                .FirstOrDefaultAsync(s => s.Id == id && s.IsDeleted != true, cancellationToken);
+            if (service == null)
+                return false;
+
+            service.IsActive = false;
+            await _context.SaveChangesAsync(cancellationToken);
+            return true;
+        }
+    }
+}
diff --git a/SeaHaven.DataServices/Interfaces/IServicesRegistryDataService.cs b/SeaHaven.DataServices/Interfaces/IServicesRegistryDataService.cs
new file mode 100644
index 0000000..a09e465
--- /dev/null
+++ b/SeaHaven.DataServices/Interfaces/IServicesRegistryDataService.cs
@@ -0,0 +1,39 @@
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+
+namespace SeaHaven.DataServices.Interfaces
+{
+    // Read-side projection for the global Services registry. The linked
+    // completion template is projected to id/name only — full template
+    // entities are never materialized.
+    public class ServiceRegistryRow
+    {
+        public int Id { get; set; }
+        public string Name { get; set; } = "";
+        public string Trade { get; set; } = "";
+        public string IconKey { get; set; } = "";
+        public bool RequiresCompletionDocument { get; set; }
+        public bool IsActive { get; set; }
+        public int? CompletionDocTemplateId { get; set; }
+        public string? CompletionDocTemplateName { get; set; }
+        public List<WorkOrderType> SupportedWorkOrderTypes { get; set; } = new();
+    }
+
+    public class LinkedTemplateSummary
+    {
+        public int Id { get; set; }
+        public string Name { get; set; } = "";
+    }
+
+    public interface IServicesRegistryDataService
+    {
+        Task<IReadOnlyList<ServiceRegistryRow>> GetServiceRowsAsync(bool? isActive, WorkOrderType? workOrderType, CancellationToken cancellationToken);
+        Task<ServiceRegistryRow?> GetServiceRowByIdAsync(int id, CancellationToken cancellationToken);
+        Task<Service?> GetServiceForUpdateAsync(int id, CancellationToken cancellationToken);
+        Task<bool> NormalizedNameExistsAsync(string normalizedName, int? excludeServiceId, CancellationToken cancellationToken);
+        Task<LinkedTemplateSummary?> GetActiveTemplateSummaryAsync(int templateId, CancellationToken cancellationToken);
+        Task<Service> AddServiceAsync(Service service, CancellationToken cancellationToken);
+        Task SaveServiceAsync(Service service, IReadOnlyCollection<WorkOrderType> supportedWorkOrderTypes, CancellationToken cancellationToken);
+        Task<bool> DeactivateServiceAsync(int id, CancellationToken cancellationToken);
+    }
+}
diff --git a/SeaHaven.Services/DTOs/ServicesRegistryDTOs.cs b/SeaHaven.Services/DTOs/ServicesRegistryDTOs.cs
new file mode 100644
index 0000000..70fe43b
--- /dev/null
+++ b/SeaHaven.Services/DTOs/ServicesRegistryDTOs.cs
@@ -0,0 +1,38 @@
+using Data.SeaHavenIndustries.Enums;
+
+namespace SeaHaven.Services.DTOs
+{
+    public class ServiceDto
+    {
+        public int Id { get; set; }
+        public string Name { get; set; } = "";
+        public string Trade { get; set; } = "";
+        public string IconKey { get; set; } = "";
+        public bool RequiresCompletionDocument { get; set; }
+        public LinkedTemplateSummaryDto? CompletionDocTemplate { get; set; }
+        public bool IsActive { get; set; }
+        public List<WorkOrderType> SupportedWorkOrderTypes { get; set; } = new();
+    }
+
+    public class LinkedTemplateSummaryDto
+    {
+        public int Id { get; set; }
+        public string Name { get; set; } = "";
+    }
+
+    public class ServiceInput
+    {
+        public string? Name { get; set; }
+        public string? Trade { get; set; }
+        public string? IconKey { get; set; }
+        public bool RequiresCompletionDocument { get; set; }
+        public int? CompletionDocTemplateId { get; set; }
+        public List<WorkOrderType>? SupportedWorkOrderTypes { get; set; }
+    }
+
+    public class ServicesRegistryValidationErrorDto
+    {
+        public string Code { get; set; } = "";
+        public string Message { get; set; } = "";
+    }
+}
diff --git a/SeaHaven.Services/Exceptions/ServicesRegistryExceptions.cs b/SeaHaven.Services/Exceptions/ServicesRegistryExceptions.cs
new file mode 100644
index 0000000..bbec299
--- /dev/null
+++ b/SeaHaven.Services/Exceptions/ServicesRegistryExceptions.cs
@@ -0,0 +1,12 @@
+namespace SeaHaven.Services.Exceptions
+{
+    public class ServicesRegistryValidationException : Exception
+    {
+        public ServicesRegistryValidationException(string code, string message) : base(message)
+        {
+            Code = code;
+        }
+
+        public string Code { get; }
+    }
+}
diff --git a/SeaHaven.Services/Implementation/ServicesRegistryService.cs b/SeaHaven.Services/Implementation/ServicesRegistryService.cs
new file mode 100644
index 0000000..79e2dd9
--- /dev/null
+++ b/SeaHaven.Services/Implementation/ServicesRegistryService.cs
@@ -0,0 +1,226 @@
+using System.Security.Claims;
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using SeaHaven.DataServices.Interfaces;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Exceptions;
+using SeaHaven.Services.Interfaces;
+
+namespace SeaHaven.Services.Implementation
+{
+    public class ServicesRegistryService : IServicesRegistryService
+    {
+        // Product contract: the registry only accepts the three work-order types
+        // the product currently supports. Any other WorkOrderType is rejected.
+        public static readonly IReadOnlySet<WorkOrderType> AllowedWorkOrderTypes =
+            new HashSet<WorkOrderType> { WorkOrderType.PM, WorkOrderType.Reactive, WorkOrderType.Emergency };
+
+        private static readonly WorkOrderType[] DefaultSupportedWorkOrderTypes =
+            { WorkOrderType.PM, WorkOrderType.Reactive, WorkOrderType.Emergency };
+
+        public const string SchedulerRole = "Scheduler";
+        public const string AdminRole = "Admin";
+
+        private const int NameMaxLength = 200;
+        private const int IconKeyMaxLength = 64;
+
+        private readonly IServicesRegistryDataService _dataService;
+
+        public ServicesRegistryService(IServicesRegistryDataService dataService)
+        {
+            _dataService = dataService;
+        }
+
+        public async Task<IReadOnlyList<ServiceDto>> GetAllAsync(bool? isActive, WorkOrderType? workOrderType, CancellationToken cancellationToken)
+        {
+            ValidateWorkOrderTypeFilter(workOrderType);
+            var rows = await _dataService.GetServiceRowsAsync(isActive, workOrderType, cancellationToken);
+            return rows.Select(MapToDto).ToList();
+        }
+
+        public async Task<ServiceDto?> GetByIdAsync(int id, CancellationToken cancellationToken)
+        {
+            var row = await _dataService.GetServiceRowByIdAsync(id, cancellationToken);
+            return row == null ? null : MapToDto(row);
+        }
+
+        public async Task<ServiceDto> CreateAsync(ClaimsPrincipal user, ServiceInput input, CancellationToken cancellationToken)
+        {
+            EnsureCanMutate(user);
+
+            var name = RequireValidName(input.Name);
+            var trade = RequireCanonicalTrade(input.Trade);
+            var iconKey = RequireValidIconKey(input.IconKey);
+            var supportedTypes = RequireValidSupportedTypes(input.SupportedWorkOrderTypes);
+            var template = await ResolveTemplateLinkAsync(input, cancellationToken);
+
+            if (await _dataService.NormalizedNameExistsAsync(TradeCatalog.Normalize(name), null, cancellationToken))
+                throw new ServicesRegistryValidationException("DuplicateName", "A service with this name already exists.");
+
+            var service = new Service
+            {
+                Name = name,
+                NormalizedName = TradeCatalog.Normalize(name),
+                Trade = trade,
+                IconKey = iconKey,
+                RequiresCompletionDocument = input.RequiresCompletionDocument,
+                CompletionDocTemplateId = template?.Id,
+                IsActive = true,
+                SupportedWorkOrderTypes = supportedTypes
+                    .Select(t => new ServiceWorkOrderType { WorkOrderType = t })
+                    .ToList()
+            };
+
+            await _dataService.AddServiceAsync(service, cancellationToken);
+
+            var row = await _dataService.GetServiceRowByIdAsync(service.Id, cancellationToken);
+            return MapToDto(row!);
+        }
+
+        public async Task<ServiceDto> UpdateAsync(ClaimsPrincipal user, int id, ServiceInput input, CancellationToken cancellationToken)
+        {
+            EnsureCanMutate(user);
+
+            var service = await _dataService.GetServiceForUpdateAsync(id, cancellationToken);
+            if (service == null || service.IsDeleted == true)
+                throw new ServicesRegistryValidationException("NotFound", "Service not found.");
+
+            var name = RequireValidName(input.Name);
+            var trade = RequireCanonicalTrade(input.Trade);
+            var iconKey = RequireValidIconKey(input.IconKey);
+            var supportedTypes = RequireValidSupportedTypes(input.SupportedWorkOrderTypes);
+            var template = await ResolveTemplateLinkAsync(input, cancellationToken);
+
+            if (await _dataService.NormalizedNameExistsAsync(TradeCatalog.Normalize(name), id, cancellationToken))
+                throw new ServicesRegistryValidationException("DuplicateName", "A service with this name already exists.");
+
+            service.Name = name;
+            service.NormalizedName = TradeCatalog.Normalize(name);
+            service.Trade = trade;
+            service.IconKey = iconKey;
+            service.RequiresCompletionDocument = input.RequiresCompletionDocument;
+            service.CompletionDocTemplateId = template?.Id;
+
+            await _dataService.SaveServiceAsync(service, supportedTypes, cancellationToken);
+
+            var row = await _dataService.GetServiceRowByIdAsync(id, cancellationToken);
+            return MapToDto(row!);
+        }
+
+        public async Task DeactivateAsync(ClaimsPrincipal user, int id, CancellationToken cancellationToken)
+        {
+            if (user is null || !user.IsInRole(AdminRole))
+                throw new ServicesRegistryValidationException("Forbidden", "Only administrators can deactivate services.");
+
+            var deactivated = await _dataService.DeactivateServiceAsync(id, cancellationToken);
+            if (!deactivated)
+                throw new ServicesRegistryValidationException("NotFound", "Service not found.");
+        }
+
+        private static void EnsureCanMutate(ClaimsPrincipal user)
+        {
+            if (user is null || !(user.IsInRole(SchedulerRole) || user.IsInRole(AdminRole)))
+                throw new ServicesRegistryValidationException("Forbidden", "Scheduler or Admin role is required.");
+        }
+
+        private static string RequireValidName(string? name)
+        {
+            if (string.IsNullOrWhiteSpace(name))
+                throw new ServicesRegistryValidationException("NameRequired", "Service name is required.");
+
+            var trimmed = name.Trim();
+            if (trimmed.Length > NameMaxLength)
+                throw new ServicesRegistryValidationException("NameInvalid", $"Service name cannot exceed {NameMaxLength} characters.");
+
+            return trimmed;
+        }
+
+        private static string RequireCanonicalTrade(string? trade)
+        {
+            if (string.IsNullOrWhiteSpace(trade))
+                throw new ServicesRegistryValidationException("TradeInvalid", "Trade must be one of the canonical trade values.");
+
+            var normalized = TradeCatalog.Normalize(trade);
+            var canonical = TradeCatalog.CanonicalTrades
+                .FirstOrDefault(t => TradeCatalog.Normalize(t) == normalized);
+
+            if (canonical == null)
+                throw new ServicesRegistryValidationException("TradeInvalid", "Trade must be one of the canonical trade values.");
+
+            return canonical;
+        }
+
+        private static string RequireValidIconKey(string? iconKey)
+        {
+            if (string.IsNullOrWhiteSpace(iconKey))
+                throw new ServicesRegistryValidationException("IconKeyInvalid", "Icon key is required.");
+
+            var trimmed = iconKey.Trim();
+            if (trimmed.Length > IconKeyMaxLength)
+                throw new ServicesRegistryValidationException("IconKeyInvalid", $"Icon key cannot exceed {IconKeyMaxLength} characters.");
+
+            return trimmed;
+        }
+
+        private static List<WorkOrderType> RequireValidSupportedTypes(IEnumerable<WorkOrderType>? supportedTypes)
+        {
+            // The registry form does not expose type categories yet. Until it
+            // does, an omitted or empty category list keeps a service available
+            // to the three supported work-order types.
+            var types = supportedTypes?.Distinct().ToList();
+            if (types == null || types.Count == 0)
+                return DefaultSupportedWorkOrderTypes.ToList();
+
+            if (types.Any(t => !AllowedWorkOrderTypes.Contains(t)))
+                throw new ServicesRegistryValidationException(
+                    "WorkOrderTypeInvalid",
+                    "Supported work order types may only include PM, Reactive, or Emergency.");
+
+            return types;
+        }
+
+        private static void ValidateWorkOrderTypeFilter(WorkOrderType? workOrderType)
+        {
+            if (workOrderType.HasValue && !AllowedWorkOrderTypes.Contains(workOrderType.Value))
+                throw new ServicesRegistryValidationException(
+                    "WorkOrderTypeInvalid",
+                    "Supported work order types may only include PM, Reactive, or Emergency.");
+        }
+
+        private async Task<LinkedTemplateSummary?> ResolveTemplateLinkAsync(ServiceInput input, CancellationToken cancellationToken)
+        {
+            // Toggle off clears/ignores any template link.
+            if (!input.RequiresCompletionDocument || input.CompletionDocTemplateId is not int templateId)
+                return null;
+
+            var template = await _dataService.GetActiveTemplateSummaryAsync(templateId, cancellationToken);
+            if (template == null)
+                throw new ServicesRegistryValidationException(
+                    "TemplateInvalid",
+                    "Completion document template must reference an active, non-deleted template.");
+
+            return template;
+        }
+
+        private static ServiceDto MapToDto(ServiceRegistryRow row)
+        {
+            return new ServiceDto
+            {
+                Id = row.Id,
+                Name = row.Name,
+                Trade = row.Trade,
+                IconKey = row.IconKey,
+                RequiresCompletionDocument = row.RequiresCompletionDocument,
+                CompletionDocTemplate = row.CompletionDocTemplateId == null
+                    ? null
+                    : new LinkedTemplateSummaryDto
+                    {
+                        Id = row.CompletionDocTemplateId.Value,
+                        Name = row.CompletionDocTemplateName ?? ""
+                    },
+                IsActive = row.IsActive,
+                SupportedWorkOrderTypes = row.SupportedWorkOrderTypes.OrderBy(t => (int)t).ToList()
+            };
+        }
+    }
+}
diff --git a/SeaHaven.Services/Interfaces/IServicesRegistryService.cs b/SeaHaven.Services/Interfaces/IServicesRegistryService.cs
new file mode 100644
index 0000000..771238b
--- /dev/null
+++ b/SeaHaven.Services/Interfaces/IServicesRegistryService.cs
@@ -0,0 +1,19 @@
+using System.Security.Claims;
+using Data.SeaHavenIndustries.Enums;
+using SeaHaven.Services.DTOs;
+
+namespace SeaHaven.Services.Interfaces
+{
+    // Global Services registry. Tenant scope is global (no AccountId),
+    // matching DropdownOptions. Reads are authenticated; create/update require
+    // the Scheduler or Admin role and deactivation is Admin-only, enforced at
+    // this service entry — never in the controller alone.
+    public interface IServicesRegistryService
+    {
+        Task<IReadOnlyList<ServiceDto>> GetAllAsync(bool? isActive, WorkOrderType? workOrderType, CancellationToken cancellationToken);
+        Task<ServiceDto?> GetByIdAsync(int id, CancellationToken cancellationToken);
+        Task<ServiceDto> CreateAsync(ClaimsPrincipal user, ServiceInput input, CancellationToken cancellationToken);
+        Task<ServiceDto> UpdateAsync(ClaimsPrincipal user, int id, ServiceInput input, CancellationToken cancellationToken);
+        Task DeactivateAsync(ClaimsPrincipal user, int id, CancellationToken cancellationToken);
+    }
+}
diff --git a/SeaHavenIndustries.Tests/SH303ServicesRegistryMigrationTests.cs b/SeaHavenIndustries.Tests/SH303ServicesRegistryMigrationTests.cs
new file mode 100644
index 0000000..6dbb735
--- /dev/null
+++ b/SeaHavenIndustries.Tests/SH303ServicesRegistryMigrationTests.cs
@@ -0,0 +1,316 @@
+using System.Reflection;
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Migrations;
+using Microsoft.Data.SqlClient;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Migrations.Operations;
+using Xunit;
+
+namespace SeaHavenIndustries.Tests;
+
+// Shape evidence for the global Services registry migration (table,
+// indexes, FK, idempotent additive seed) plus a SQL Server execution test that
+// is silently skipped when no provider is reachable, mirroring existing
+// provider-gated migration tests.
+public class SH303ServicesRegistryMigrationTests
+{
+    private const string LocalDbMaster =
+        @"Server=(localdb)\MSSQLLocalDB;Database=master;Trusted_Connection=True;TrustServerCertificate=True;Connect Timeout=3";
+
+    [Fact]
+    public void Up_CreatesRegistryTablesUniqueIndexesFkAndIdempotentProblemSeed()
+    {
+        var operations = BuildOperations("Up");
+
+        var createTables = operations.OfType<CreateTableOperation>().ToList();
+        Assert.Equal(
+            new HashSet<string> { "Services", "ServiceWorkOrderTypes" },
+            createTables.Select(t => t.Name).ToHashSet());
+
+        var services = createTables.Single(t => t.Name == "Services");
+        Assert.Contains(services.Columns, c => c.Name == "NormalizedName" && (string)c.ColumnType! == "nvarchar(200)");
+        Assert.Contains(services.Columns, c => c.Name == "CompletionDocTemplateId" && c.IsNullable);
+        Assert.Contains(services.Columns, c => c.Name == "RequiresCompletionDocument" && !c.IsNullable);
+        Assert.Contains(services.Columns, c => c.Name == "IsActive" && !c.IsNullable);
+
+        var foreignKeys = services.ForeignKeys.Concat(
+                createTables.Single(t => t.Name == "ServiceWorkOrderTypes").ForeignKeys)
+            .ToList();
+        Assert.Contains(foreignKeys, fk =>
+            fk.Table == "Services"
+            && fk.PrincipalTable == "CompletionDocTemplates"
+            && fk.OnDelete == ReferentialAction.Restrict);
+        Assert.Contains(foreignKeys, fk =>
+            fk.Table == "ServiceWorkOrderTypes" && fk.PrincipalTable == "Services");
+
+        var indexes = operations.OfType<CreateIndexOperation>().ToList();
+        Assert.Contains(indexes, i =>
+            i.Table == "Services" && i.Columns.SequenceEqual(new[] { "NormalizedName" }) && i.IsUnique);
+        Assert.Contains(indexes, i =>
+            i.Table == "ServiceWorkOrderTypes"
+            && i.Columns.SequenceEqual(new[] { "ServiceId", "WorkOrderType" })
+            && i.IsUnique);
+
+        // The seed is raw additive SQL: read-only over DropdownOptions, idempotent
+        // via NormalizedName NOT EXISTS, and never mutates dropdown rows.
+        var seedSql = string.Join("\n", operations.OfType<SqlOperation>().Select(o => o.Sql));
+        Assert.Contains("[Category] = N'Problem'", seedSql);
+        Assert.Contains("[IsActive] = 1", seedSql);
+        Assert.Contains("NOT EXISTS", seedSql);
+        Assert.Contains("INSERT INTO [Services]", seedSql);
+        Assert.Contains("INSERT INTO [ServiceWorkOrderTypes]", seedSql);
+        Assert.DoesNotContain("UPDATE [DropdownOptions]", seedSql);
+        Assert.DoesNotContain("DELETE FROM [DropdownOptions]", seedSql);
+        Assert.DoesNotContain("DELETE [DropdownOptions]", seedSql);
+    }
+
+    [Fact]
+    public void Down_DropsRegistryTables()
+    {
+        var operations = BuildOperations("Down");
+
+        var drops = operations.OfType<DropTableOperation>().Select(d => d.Name).ToList();
+        Assert.Equal(
+            new HashSet<string> { "Services", "ServiceWorkOrderTypes" },
+            drops.ToHashSet());
+        Assert.Empty(operations.OfType<SqlOperation>());
+    }
+
+    [Fact]
+    public async Task Up_SeedsActiveProblemValuesIdempotently_WhenSqlServerAvailable()
+    {
+        var masterConnectionString = await ResolveMasterConnectionStringAsync();
+        if (masterConnectionString == null)
+            return;
+
+        var dbName = $"SH303Registry_{Guid.NewGuid():N}";
+        var connectionString = WithDatabase(masterConnectionString, dbName);
+
+        try
+        {
+            await CreateDatabaseAsync(masterConnectionString, dbName);
+
+            await using var connection = new SqlConnection(connectionString);
+            await connection.OpenAsync();
+
+            await using (var seedSource = connection.CreateCommand())
+            {
+                seedSource.CommandText =
+                    """
+                    CREATE TABLE DropdownOptions (
+                        Id int NOT NULL IDENTITY PRIMARY KEY,
+                        Category nvarchar(max) NOT NULL,
+                        Value nvarchar(max) NOT NULL,
+                        ParentValue nvarchar(max) NULL,
+                        SortOrder int NOT NULL,
+                        IsActive bit NOT NULL
+                    );
+                    CREATE TABLE CompletionDocTemplates (
+                        Id int NOT NULL IDENTITY PRIMARY KEY,
+                        Name nvarchar(200) NOT NULL,
+                        ServiceKey nvarchar(max) NOT NULL,
+                        TemplateUrl nvarchar(max) NOT NULL,
+                        IsActive bit NOT NULL,
+                        IsDeleted bit NULL,
+                        createdby nvarchar(max) NULL,
+                        DeleterUserId nvarchar(max) NULL,
+                        DeletionTime datetime2 NULL,
+                        CreatedDate datetime2 NULL,
+                        LastModificationTime datetime2 NULL,
+                        LastModifierUserId int NULL
+                    );
+                    INSERT INTO DropdownOptions (Category, Value, SortOrder, IsActive) VALUES
+                        (N'Problem', N'Leak', 0, 1),
+                        (N'Problem', N'leak', 1, 1),
+                        (N'Problem', N'No Power', 2, 1),
+                        (N'Problem', N'Not Cooling', 3, 1),
+                        (N'Problem', N'Not Heating', 4, 1),
+                        (N'Problem', N'Alarm Fault', 5, 1),
+                        (N'Problem', N'Broken/Damaged', 6, 1),
+                        (N'Problem', N'Retired Ghost', 7, 0),
+                        (N'Trade', N'Electrical', 0, 1);
+                    """;
+                await seedSource.ExecuteNonQueryAsync();
+            }
+
+            await using var context = new ApplicationDbContext(
+                new DbContextOptionsBuilder<ApplicationDbContext>().UseSqlServer(connection).Options);
+            await ApplyMigrationAsync(context, new SH303_ServicesRegistry());
+
+            await using (var servicesCmd = connection.CreateCommand())
+            {
+                servicesCmd.CommandText =
+                    """
+                    SELECT [Name], [Trade], [IconKey]
+                    FROM [Services]
+                    ORDER BY [Name];
+                    """;
+                await using var reader = await servicesCmd.ExecuteReaderAsync();
+                var rows = new List<string>();
+                while (await reader.ReadAsync())
+                    rows.Add($"{reader.GetString(0)}|{reader.GetString(1)}|{reader.GetString(2)}");
+
+                // Repeated case variants collapse onto one deterministic row and the
+                // inactive value plus the non-Problem category never seed.
+                var expected = new[]
+                {
+                    "Alarm Fault|Fire & Life Safety|fire-life-safety",
+                    "Broken/Damaged|General Building & Handyman|general-building-handyman",
+                    "Leak|Plumbing & Water Systems|plumbing-water-systems",
+                    "No Power|Electrical|electrical",
+                    "Not Cooling|HVAC|hvac",
+                    "Not Heating|HVAC|hvac"
+                };
+                Assert.Equal(expected, rows.OrderBy(r => r).ToArray());
+            }
+
+            await using (var typesCmd = connection.CreateCommand())
+            {
+                typesCmd.CommandText =
+                    """
+                    SELECT COUNT(*)
+                    FROM [ServiceWorkOrderTypes] t
+                    JOIN [Services] s ON s.[Id] = t.[ServiceId]
+                    WHERE t.[WorkOrderType] IN (2, 3, 6);
+                    """;
+                Assert.Equal(18, Convert.ToInt32(await typesCmd.ExecuteScalarAsync())); // 6 services x 3 supported types
+            }
+
+            await using (var untouchedCmd = connection.CreateCommand())
+            {
+                untouchedCmd.CommandText = "SELECT COUNT(*) FROM [DropdownOptions];";
+                Assert.Equal(9, Convert.ToInt32(await untouchedCmd.ExecuteScalarAsync()));
+            }
+
+            // Re-running only the seed statements must be a no-op (idempotence).
+            var before = await CountAsync(connection, "SELECT COUNT(*) FROM [Services];");
+            await ApplySeedStatementsAsync(context);
+            var after = await CountAsync(connection, "SELECT COUNT(*) FROM [Services];");
+            Assert.Equal(before, after);
+
+            var migration = new SH303_ServicesRegistry();
+            await ApplyMigrationAsync(context, migration, "Down");
+            Assert.Equal(0, await CountAsync(connection, "SELECT COUNT(*) FROM sys.tables WHERE name IN ('Services', 'ServiceWorkOrderTypes');"));
+
+            await ApplyMigrationAsync(context, migration, "Up");
+            Assert.Equal(6, await CountAsync(connection, "SELECT COUNT(*) FROM [Services];"));
+            Assert.Equal(18, await CountAsync(connection, "SELECT COUNT(*) FROM [ServiceWorkOrderTypes];"));
+        }
+        finally
+        {
+            await DropDatabaseAsync(masterConnectionString, dbName);
+        }
+    }
+
+    private static List<MigrationOperation> BuildOperations(string direction)
+    {
+        var builder = new MigrationBuilder("Microsoft.EntityFrameworkCore.SqlServer");
+        var operation = typeof(Migration).GetMethod(direction, BindingFlags.Instance | BindingFlags.NonPublic)
+                 ?? throw new InvalidOperationException($"Migration.{direction} not found.");
+        operation.Invoke(new SH303_ServicesRegistry(), [builder]);
+        return builder.Operations;
+    }
+
+    private static async Task ApplyMigrationAsync(ApplicationDbContext context, Migration migration, string direction = "Up")
+    {
+        var builder = new MigrationBuilder(context.Database.ProviderName!);
+        var operation = typeof(Migration).GetMethod(direction, BindingFlags.Instance | BindingFlags.NonPublic)
+                 ?? throw new InvalidOperationException($"Migration.{direction} not found.");
+        operation.Invoke(migration, [builder]);
+
+        var sqlGenerator = context.GetService<IMigrationsSqlGenerator>();
+        var commands = sqlGenerator.Generate(builder.Operations, context.Model);
+        foreach (var command in commands)
+            await context.Database.ExecuteSqlRawAsync(command.CommandText);
+    }
+
+    private static async Task ApplySeedStatementsAsync(ApplicationDbContext context)
+    {
+        var sqlOperations = BuildOperations("Up").OfType<SqlOperation>().ToList();
+        var sqlGenerator = context.GetService<IMigrationsSqlGenerator>();
+        var commands = sqlGenerator.Generate(sqlOperations, context.Model);
+        foreach (var command in commands)
+            await context.Database.ExecuteSqlRawAsync(command.CommandText);
+    }
+
+    private static async Task<int> CountAsync(SqlConnection connection, string commandText)
+    {
+        await using var command = connection.CreateCommand();
+        command.CommandText = commandText;
+        return Convert.ToInt32(await command.ExecuteScalarAsync());
+    }
+
+    private static async Task<string?> ResolveMasterConnectionStringAsync()
+    {
+        var configured = Environment.GetEnvironmentVariable("SH303_SQLSERVER_MASTER");
+        var candidate = !string.IsNullOrWhiteSpace(configured)
+            ? WithDatabase(configured, "master")
+            : OperatingSystem.IsWindows() ? LocalDbMaster : null;
+
+        if (candidate == null)
+            return null;
+
+        try
+        {
+            await using var connection = new SqlConnection(candidate);
+            await connection.OpenAsync();
+            return candidate;
+        }
+        catch (SqlException)
+        {
+            return null;
+        }
+        catch (InvalidOperationException)
+        {
+            return null;
+        }
+    }
+
+    private static async Task CreateDatabaseAsync(string masterConnectionString, string dbName)
+    {
+        await using var connection = new SqlConnection(masterConnectionString);
+        await connection.OpenAsync();
+        await using var command = connection.CreateCommand();
+        command.CommandText = $"CREATE DATABASE {QuoteSqlServerIdentifier(dbName)};";
+        await command.ExecuteNonQueryAsync();
+    }
+
+    private static async Task DropDatabaseAsync(string masterConnectionString, string dbName)
+    {
+        try
+        {
+            var quoted = QuoteSqlServerIdentifier(dbName);
+            await using var connection = new SqlConnection(masterConnectionString);
+            await connection.OpenAsync();
+            await using var command = connection.CreateCommand();
+            command.CommandText =
+                $"""
+                 IF DB_ID(@dbName) IS NOT NULL
+                 BEGIN
+                     ALTER DATABASE {quoted} SET SINGLE_USER WITH ROLLBACK IMMEDIATE;
+                     DROP DATABASE {quoted};
+                 END
+                 """;
+            command.Parameters.AddWithValue("@dbName", dbName);
+            await command.ExecuteNonQueryAsync();
+        }
+        catch
+        {
+            // Best-effort cleanup for ephemeral SQL Server databases.
+        }
+    }
+
+    private static string QuoteSqlServerIdentifier(string name) =>
+        "[" + name.Replace("]", "]]", StringComparison.Ordinal) + "]";
+
+    private static string WithDatabase(string connectionString, string database)
+    {
+        var builder = new SqlConnectionStringBuilder(connectionString)
+        {
+            InitialCatalog = database
+        };
+        return builder.ConnectionString;
+    }
+}

From efd13b6f60bfc7834371c8880c481df77e87aad6 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 17:12:03 -0300
Subject: [PATCH 015/183] fix(dashboard): scope stats to authenticated accounts
 (SH-336)

---
 .../DashboardServiceTests.cs                  | 86 ++++++++++++++++---
 .../Controllers/DashboardController.cs        |  2 +-
 .../Implementation/DashboardDataService.cs    |  8 +-
 .../Interfaces/IDashboardDataService.cs       |  4 +-
 .../Implementation/DashboardService.cs        | 14 ++-
 .../Interfaces/IDashboardService.cs           |  5 +-
 6 files changed, 99 insertions(+), 20 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs b/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
index 0af8f00..c45ab1a 100644
--- a/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
@@ -1,7 +1,10 @@
+using System.Security.Claims;
 using Data.SeaHavenIndustries;
 using FluentAssertions;
 using Microsoft.EntityFrameworkCore;
 using SeaHaven.DataServices.Implementation;
+using SeaHaven.Services.Exceptions;
+using SeaHaven.Services.Helpers;
 using SeaHaven.Services.Implementation;
 using Xunit;
 
@@ -17,33 +20,90 @@ public class DashboardServiceTests
         return new ApplicationDbContext(options);
     }
 
-    private static DashboardService NewService(ApplicationDbContext ctx) =>
-        new(new DashboardDataService(ctx));
+    private static DashboardService NewService(ApplicationDbContext ctx)
+    {
+        var resolver = new WorkOrderAccountResolver(
+            new AccountDataService(ctx),
+            new LocationDataService(ctx));
+        return new DashboardService(new DashboardDataService(ctx), resolver);
+    }
 
-    private static WorkOrder Wo(string? status, bool? isTemplate = false, string? assignTo = null) =>
-        new() { Status = status, istemplate = isTemplate, AssignTo = assignTo };
+    private static ClaimsPrincipal AccountUser(int accountId)
+    {
+        var claims = new[]
+        {
+            new Claim(SeaHavenClaimTypes.AccountId, accountId.ToString()),
+            new Claim(ClaimTypes.Role, "Dispatcher")
+        };
+        return new ClaimsPrincipal(new ClaimsIdentity(claims, "test"));
+    }
+
+    private static ClaimsPrincipal OrgWideUser()
+    {
+        var claims = new[]
+        {
+            new Claim(SeaHavenClaimTypes.OrgScope, SeaHavenClaimTypes.OrgScopeAll),
+            new Claim(ClaimTypes.Role, "Admin")
+        };
+        return new ClaimsPrincipal(new ClaimsIdentity(claims, "test"));
+    }
 
     [Fact]
     public async Task GetStatsAsync_CountsByStatusExcludingTemplates()
     {
         using var ctx = NewContext();
         ctx.workOrders.AddRange(
-            Wo("Open", isTemplate: false),
-            Wo("Open", isTemplate: false, assignTo: "u1"),
-            Wo("In Progress"),
-            Wo("On Hold"),
-            Wo("Done"),
-            Wo("Done"),
-            Wo("Open", isTemplate: true),
-            Wo("Cancelled", isTemplate: false)
+            new WorkOrder { AccountId = 1, Status = "Open", istemplate = false },
+            new WorkOrder { AccountId = 1, Status = "Open", istemplate = false, AssignTo = "u1" },
+            new WorkOrder { AccountId = 1, Status = "In Progress" },
+            new WorkOrder { AccountId = 1, Status = "On Hold" },
+            new WorkOrder { AccountId = 1, Status = "Done" },
+            new WorkOrder { AccountId = 1, Status = "Done" },
+            new WorkOrder { AccountId = 1, Status = "Open", istemplate = true },
+            new WorkOrder { AccountId = 1, Status = "Cancelled" },
+            new WorkOrder { AccountId = 2, Status = "Open" },
+            new WorkOrder { Status = "Open" }
         );
         ctx.SaveChanges();
 
-        var stats = await NewService(ctx).GetStatsAsync(CancellationToken.None);
+        var stats = await NewService(ctx).GetStatsAsync(AccountUser(1), CancellationToken.None);
 
         stats.Total.Should().Be(7);
         stats.Open.Should().Be(4);
         stats.NotDispatched.Should().Be(1);
         stats.Completed.Should().Be(2);
     }
+
+    [Fact]
+    public async Task GetStatsAsync_OrgWideUserSeesAllNonTemplateOrders()
+    {
+        using var ctx = NewContext();
+        ctx.workOrders.AddRange(
+            new WorkOrder { AccountId = 1, Status = "Open" },
+            new WorkOrder { AccountId = 2, Status = "Done" },
+            new WorkOrder { Status = "Open", istemplate = true });
+        ctx.SaveChanges();
+
+        var stats = await NewService(ctx).GetStatsAsync(OrgWideUser(), CancellationToken.None);
+
+        stats.Total.Should().Be(2);
+        stats.Open.Should().Be(1);
+        stats.Completed.Should().Be(1);
+    }
+
+    [Fact]
+    public async Task GetStatsAsync_MissingScopeFailsClosed()
+    {
+        using var ctx = NewContext();
+        var user = new ClaimsPrincipal(new ClaimsIdentity(new[]
+        {
+            new Claim(ClaimTypes.Role, "Dispatcher")
+        }, "test"));
+
+        var act = () => NewService(ctx).GetStatsAsync(user, CancellationToken.None);
+
+        var exception = await act.Should().ThrowAsync<WorkOrderBoardValidationException>();
+
+        exception.Which.Code.Should().Be("Forbidden");
+    }
 }
diff --git a/Api.SeaHavenIndustries/Controllers/DashboardController.cs b/Api.SeaHavenIndustries/Controllers/DashboardController.cs
index 6955cc2..4841c82 100644
--- a/Api.SeaHavenIndustries/Controllers/DashboardController.cs
+++ b/Api.SeaHavenIndustries/Controllers/DashboardController.cs
@@ -19,7 +19,7 @@ namespace Api.SeaHavenIndustries.Controllers
         [HttpGet("Stats")]
         public async Task<IActionResult> GetStats(CancellationToken cancellationToken)
         {
-            var stats = await _dashboardService.GetStatsAsync(cancellationToken);
+            var stats = await _dashboardService.GetStatsAsync(User, cancellationToken);
 
             return Ok(new
             {
diff --git a/SeaHaven.DataServices/Implementation/DashboardDataService.cs b/SeaHaven.DataServices/Implementation/DashboardDataService.cs
index d1e29c3..8bf21c9 100644
--- a/SeaHaven.DataServices/Implementation/DashboardDataService.cs
+++ b/SeaHaven.DataServices/Implementation/DashboardDataService.cs
@@ -13,9 +13,15 @@ namespace SeaHaven.DataServices.Implementation
             _context = context;
         }
 
-        public async Task<DashboardCounts> GetWorkOrderCountsAsync(CancellationToken cancellationToken)
+        public async Task<DashboardCounts> GetWorkOrderCountsAsync(
+            int? accountId,
+            CancellationToken cancellationToken)
         {
             var query = _context.workOrders.Where(w => w.istemplate != true);
+            if (accountId is int scopedAccountId)
+            {
+                query = query.Where(w => w.AccountId == scopedAccountId);
+            }
 
             var total = await query.CountAsync(cancellationToken);
             var open = await query.CountAsync(w => w.Status == "Open" || w.Status == "In Progress" || w.Status == "On Hold", cancellationToken);
diff --git a/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs b/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs
index 7acb41f..5993609 100644
--- a/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs
@@ -2,7 +2,9 @@ namespace SeaHaven.DataServices.Interfaces
 {
     public interface IDashboardDataService
     {
-        Task<DashboardCounts> GetWorkOrderCountsAsync(CancellationToken cancellationToken);
+        Task<DashboardCounts> GetWorkOrderCountsAsync(
+            int? accountId,
+            CancellationToken cancellationToken);
     }
 
     public class DashboardCounts
diff --git a/SeaHaven.Services/Implementation/DashboardService.cs b/SeaHaven.Services/Implementation/DashboardService.cs
index 0bec513..30695b9 100644
--- a/SeaHaven.Services/Implementation/DashboardService.cs
+++ b/SeaHaven.Services/Implementation/DashboardService.cs
@@ -1,3 +1,4 @@
+using System.Security.Claims;
 using SeaHaven.DataServices.Interfaces;
 using SeaHaven.Services.DTOs;
 using SeaHaven.Services.Interfaces;
@@ -7,15 +8,22 @@ namespace SeaHaven.Services.Implementation
     public class DashboardService : IDashboardService
     {
         private readonly IDashboardDataService _dataService;
+        private readonly IWorkOrderAccountResolver _accountResolver;
 
-        public DashboardService(IDashboardDataService dataService)
+        public DashboardService(
+            IDashboardDataService dataService,
+            IWorkOrderAccountResolver accountResolver)
         {
             _dataService = dataService;
+            _accountResolver = accountResolver;
         }
 
-        public async Task<DashboardStatsDTO> GetStatsAsync(CancellationToken cancellationToken)
+        public async Task<DashboardStatsDTO> GetStatsAsync(
+            ClaimsPrincipal user,
+            CancellationToken cancellationToken)
         {
-            var counts = await _dataService.GetWorkOrderCountsAsync(cancellationToken);
+            var accountId = _accountResolver.ResolveAccountFilter(user);
+            var counts = await _dataService.GetWorkOrderCountsAsync(accountId, cancellationToken);
 
             return new DashboardStatsDTO
             {
diff --git a/SeaHaven.Services/Interfaces/IDashboardService.cs b/SeaHaven.Services/Interfaces/IDashboardService.cs
index bfc2e2d..63379e1 100644
--- a/SeaHaven.Services/Interfaces/IDashboardService.cs
+++ b/SeaHaven.Services/Interfaces/IDashboardService.cs
@@ -1,9 +1,12 @@
+using System.Security.Claims;
 using SeaHaven.Services.DTOs;
 
 namespace SeaHaven.Services.Interfaces
 {
     public interface IDashboardService
     {
-        Task<DashboardStatsDTO> GetStatsAsync(CancellationToken cancellationToken);
+        Task<DashboardStatsDTO> GetStatsAsync(
+            ClaimsPrincipal user,
+            CancellationToken cancellationToken);
     }
 }

From a2e749c72db356b4c424ae96b3166517f0204a4f Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 17:28:21 -0300
Subject: [PATCH 016/183] feat(dashboard): add core dashboard metrics (SH-343)

---
 .../DashboardServiceTests.cs                  |  95 ++++++++++++++-
 .../Controllers/DashboardController.cs        |  14 ++-
 .../Implementation/DashboardDataService.cs    |  37 ++++++
 .../Interfaces/IDashboardDataService.cs       |  19 +++
 SeaHaven.Services/DTOs/DashboardDTOs.cs       |  20 ++++
 .../Helpers/DashboardBusinessTime.cs          |  13 ++
 SeaHaven.Services/Helpers/DashboardMetrics.cs | 113 ++++++++++++++++++
 .../Implementation/DashboardService.cs        |  31 ++++-
 .../Interfaces/IDashboardService.cs           |   1 +
 9 files changed, 331 insertions(+), 12 deletions(-)
 create mode 100644 SeaHaven.Services/Helpers/DashboardBusinessTime.cs
 create mode 100644 SeaHaven.Services/Helpers/DashboardMetrics.cs

diff --git a/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs b/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
index c45ab1a..a5dadfb 100644
--- a/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
@@ -4,6 +4,7 @@ using FluentAssertions;
 using Microsoft.EntityFrameworkCore;
 using SeaHaven.DataServices.Implementation;
 using SeaHaven.Services.Exceptions;
+using SeaHaven.Services.DTOs;
 using SeaHaven.Services.Helpers;
 using SeaHaven.Services.Implementation;
 using Xunit;
@@ -28,12 +29,16 @@ public class DashboardServiceTests
         return new DashboardService(new DashboardDataService(ctx), resolver);
     }
 
-    private static ClaimsPrincipal AccountUser(int accountId)
+    private static ClaimsPrincipal AccountUser(
+        int accountId,
+        string userId = "dispatcher-1",
+        string role = "Admin")
     {
         var claims = new[]
         {
             new Claim(SeaHavenClaimTypes.AccountId, accountId.ToString()),
-            new Claim(ClaimTypes.Role, "Dispatcher")
+            new Claim(ClaimTypes.NameIdentifier, userId),
+            new Claim(ClaimTypes.Role, role)
         };
         return new ClaimsPrincipal(new ClaimsIdentity(claims, "test"));
     }
@@ -66,7 +71,8 @@ public class DashboardServiceTests
         );
         ctx.SaveChanges();
 
-        var stats = await NewService(ctx).GetStatsAsync(AccountUser(1), CancellationToken.None);
+        var stats = await NewService(ctx).GetStatsAsync(
+            AccountUser(1), new DashboardStatsQueryDTO(), CancellationToken.None);
 
         stats.Total.Should().Be(7);
         stats.Open.Should().Be(4);
@@ -84,7 +90,8 @@ public class DashboardServiceTests
             new WorkOrder { Status = "Open", istemplate = true });
         ctx.SaveChanges();
 
-        var stats = await NewService(ctx).GetStatsAsync(OrgWideUser(), CancellationToken.None);
+        var stats = await NewService(ctx).GetStatsAsync(
+            OrgWideUser(), new DashboardStatsQueryDTO(), CancellationToken.None);
 
         stats.Total.Should().Be(2);
         stats.Open.Should().Be(1);
@@ -100,10 +107,88 @@ public class DashboardServiceTests
             new Claim(ClaimTypes.Role, "Dispatcher")
         }, "test"));
 
-        var act = () => NewService(ctx).GetStatsAsync(user, CancellationToken.None);
+        var act = () => NewService(ctx).GetStatsAsync(
+            user, new DashboardStatsQueryDTO(), CancellationToken.None);
 
         var exception = await act.Should().ThrowAsync<WorkOrderBoardValidationException>();
 
         exception.Which.Code.Should().Be("Forbidden");
     }
+
+    [Fact]
+    public async Task GetStatsAsync_UsesDashboardMetricRulesForDateRange()
+    {
+        using var ctx = NewContext();
+        var today = DashboardBusinessTime.Today();
+        ctx.workOrders.AddRange(
+            new WorkOrder
+            {
+                AccountId = 1,
+                WorkOrderType = Data.SeaHavenIndustries.Enums.WorkOrderType.PM,
+                LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Scheduled,
+                ScheduledDate = today.ToDateTime(TimeOnly.MinValue),
+                OriginalDate = today.AddDays(-6)
+            },
+            new WorkOrder
+            {
+                AccountId = 1,
+                WorkOrderType = Data.SeaHavenIndustries.Enums.WorkOrderType.Emergency,
+                LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.InProgress,
+                ScheduledDate = today.AddDays(-3).ToDateTime(TimeOnly.MinValue)
+            },
+            new WorkOrder
+            {
+                AccountId = 1,
+                WorkOrderType = Data.SeaHavenIndustries.Enums.WorkOrderType.Reactive,
+                LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Completed,
+                ScheduledDate = today.ToDateTime(TimeOnly.MinValue),
+                OriginalDate = today.AddDays(-15),
+                CompletedDate = today.AddDays(-12).ToDateTime(TimeOnly.MinValue)
+            },
+            new WorkOrder
+            {
+                AccountId = 1,
+                WorkOrderType = Data.SeaHavenIndustries.Enums.WorkOrderType.PM,
+                LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Incomplete,
+                ScheduledDate = today.AddDays(4).ToDateTime(TimeOnly.MinValue)
+            });
+        ctx.SaveChanges();
+
+        var query = new DashboardStatsQueryDTO
+        {
+            DateFrom = today.AddDays(-10),
+            DateTo = today.AddDays(10)
+        };
+        var stats = await NewService(ctx).GetStatsAsync(
+            AccountUser(1), query, CancellationToken.None);
+
+        stats.Total.Should().Be(4);
+        stats.Breakdown.Overdue.Should().Be(1);
+        stats.Breakdown.Other.Should().Be(0);
+        stats.Breakdown.PM.Should().Be(2);
+        stats.Breakdown.Emergency.Should().Be(0);
+        stats.Breakdown.Reactive.Should().Be(1);
+        (stats.Breakdown.PM + stats.Breakdown.Emergency + stats.Breakdown.Reactive
+            + stats.Breakdown.Overdue + stats.Breakdown.Other).Should().Be(stats.Total);
+        stats.DueCount.Should().Be(3);
+        stats.CompletedDueCount.Should().Be(1);
+        stats.CompletionRate.Should().Be(33.33m);
+        stats.AverageResolutionDays.Should().Be(3m);
+    }
+
+    [Fact]
+    public async Task GetStatsAsync_DispatcherOnlySeesAssignedOrders()
+    {
+        using var ctx = NewContext();
+        ctx.workOrders.AddRange(
+            new WorkOrder { AccountId = 1, Status = "Open", AssignTo = "dispatcher-1" },
+            new WorkOrder { AccountId = 1, Status = "Open", AssignTo = "dispatcher-2" });
+        ctx.SaveChanges();
+
+        var stats = await NewService(ctx).GetStatsAsync(
+            AccountUser(1, role: "Dispatcher"), new DashboardStatsQueryDTO(), CancellationToken.None);
+
+        stats.Total.Should().Be(1);
+        stats.Open.Should().Be(1);
+    }
 }
diff --git a/Api.SeaHavenIndustries/Controllers/DashboardController.cs b/Api.SeaHavenIndustries/Controllers/DashboardController.cs
index 4841c82..cb7e27c 100644
--- a/Api.SeaHavenIndustries/Controllers/DashboardController.cs
+++ b/Api.SeaHavenIndustries/Controllers/DashboardController.cs
@@ -1,5 +1,6 @@
 using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
+using SeaHaven.Services.DTOs;
 using SeaHaven.Services.Interfaces;
 
 namespace Api.SeaHavenIndustries.Controllers
@@ -17,16 +18,23 @@ namespace Api.SeaHavenIndustries.Controllers
         }
 
         [HttpGet("Stats")]
-        public async Task<IActionResult> GetStats(CancellationToken cancellationToken)
+        public async Task<IActionResult> GetStats(
+            [FromQuery] DashboardStatsQueryDTO query,
+            CancellationToken cancellationToken)
         {
-            var stats = await _dashboardService.GetStatsAsync(User, cancellationToken);
+            var stats = await _dashboardService.GetStatsAsync(User, query, cancellationToken);
 
             return Ok(new
             {
                 total = stats.Total,
                 open = stats.Open,
                 notDispatched = stats.NotDispatched,
-                completed = stats.Completed
+                completed = stats.Completed,
+                breakdown = stats.Breakdown,
+                dueCount = stats.DueCount,
+                completedDueCount = stats.CompletedDueCount,
+                completionRate = stats.CompletionRate,
+                averageResolutionDays = stats.AverageResolutionDays
             });
         }
     }
diff --git a/SeaHaven.DataServices/Implementation/DashboardDataService.cs b/SeaHaven.DataServices/Implementation/DashboardDataService.cs
index 8bf21c9..73c073e 100644
--- a/SeaHaven.DataServices/Implementation/DashboardDataService.cs
+++ b/SeaHaven.DataServices/Implementation/DashboardDataService.cs
@@ -1,5 +1,7 @@
 using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
 using Microsoft.EntityFrameworkCore;
+using SeaHaven.DataServices.Helpers;
 using SeaHaven.DataServices.Interfaces;
 
 namespace SeaHaven.DataServices.Implementation
@@ -36,5 +38,40 @@ namespace SeaHaven.DataServices.Implementation
                 Completed = completed
             };
         }
+
+        public async Task<IReadOnlyList<DashboardWorkOrder>> GetDashboardWorkOrdersAsync(
+            int? accountId,
+            string? dispatcherId,
+            DateOnly? dateFrom,
+            DateOnly? dateTo,
+            CancellationToken cancellationToken)
+        {
+            var query = WorkOrderBoardQueryFilters.ApplyBaseScope(_context.workOrders.AsNoTracking());
+            if (accountId is int scopedAccountId)
+                query = WorkOrderBoardQueryFilters.ApplyAccountScope(query, scopedAccountId);
+
+            if (dispatcherId != null)
+                query = query.Where(w => w.AssignTo == dispatcherId);
+
+            if (dateFrom is DateOnly from && dateTo is DateOnly to)
+            {
+                var fromDate = from.ToDateTime(TimeOnly.MinValue);
+                var toDateExclusive = to.AddDays(1).ToDateTime(TimeOnly.MinValue);
+                query = query.Where(w =>
+                    w.ScheduledDate >= fromDate && w.ScheduledDate < toDateExclusive);
+            }
+
+            return await query
+                .Select(w => new DashboardWorkOrder(
+                    w.Id,
+                    w.AssignTo,
+                    w.WorkOrderType,
+                    w.LifecycleStatus,
+                    w.LegacyStatus ?? w.Status,
+                    w.ScheduledDate,
+                    w.OriginalDate,
+                    w.CompletedDate))
+                .ToListAsync(cancellationToken);
+        }
     }
 }
diff --git a/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs b/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs
index 5993609..470e70e 100644
--- a/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs
@@ -1,12 +1,31 @@
 namespace SeaHaven.DataServices.Interfaces
 {
+    using Data.SeaHavenIndustries.Enums;
+
     public interface IDashboardDataService
     {
         Task<DashboardCounts> GetWorkOrderCountsAsync(
             int? accountId,
             CancellationToken cancellationToken);
+
+        Task<IReadOnlyList<DashboardWorkOrder>> GetDashboardWorkOrdersAsync(
+            int? accountId,
+            string? dispatcherId,
+            DateOnly? dateFrom,
+            DateOnly? dateTo,
+            CancellationToken cancellationToken);
     }
 
+    public sealed record DashboardWorkOrder(
+        int Id,
+        string? AssignTo,
+        WorkOrderType? WorkOrderType,
+        LifecycleStatus? LifecycleStatus,
+        string? LegacyStatus,
+        DateTime? ScheduledDate,
+        DateOnly? OriginalDate,
+        DateTime? CompletedDate);
+
     public class DashboardCounts
     {
         public int Total { get; set; }
diff --git a/SeaHaven.Services/DTOs/DashboardDTOs.cs b/SeaHaven.Services/DTOs/DashboardDTOs.cs
index 6bac68c..25ecafc 100644
--- a/SeaHaven.Services/DTOs/DashboardDTOs.cs
+++ b/SeaHaven.Services/DTOs/DashboardDTOs.cs
@@ -1,10 +1,30 @@
 namespace SeaHaven.Services.DTOs
 {
+    public sealed class DashboardStatsQueryDTO
+    {
+        public DateOnly? DateFrom { get; set; }
+        public DateOnly? DateTo { get; set; }
+    }
+
     public class DashboardStatsDTO
     {
         public int Total { get; set; }
         public int Open { get; set; }
         public int NotDispatched { get; set; }
         public int Completed { get; set; }
+        public DashboardBreakdownDTO Breakdown { get; set; } = new();
+        public int DueCount { get; set; }
+        public int CompletedDueCount { get; set; }
+        public decimal CompletionRate { get; set; }
+        public decimal? AverageResolutionDays { get; set; }
+    }
+
+    public sealed class DashboardBreakdownDTO
+    {
+        public int PM { get; set; }
+        public int Emergency { get; set; }
+        public int Reactive { get; set; }
+        public int Overdue { get; set; }
+        public int Other { get; set; }
     }
 }
diff --git a/SeaHaven.Services/Helpers/DashboardBusinessTime.cs b/SeaHaven.Services/Helpers/DashboardBusinessTime.cs
new file mode 100644
index 0000000..2ad280d
--- /dev/null
+++ b/SeaHaven.Services/Helpers/DashboardBusinessTime.cs
@@ -0,0 +1,13 @@
+namespace SeaHaven.Services.Helpers;
+
+public static class DashboardBusinessTime
+{
+    public const string TimeZoneId = "America/New_York";
+
+    public static DateOnly Today()
+    {
+        var timezone = TimeZoneInfo.FindSystemTimeZoneById(TimeZoneId);
+        var businessNow = TimeZoneInfo.ConvertTimeFromUtc(DateTime.UtcNow, timezone);
+        return DateOnly.FromDateTime(businessNow);
+    }
+}
diff --git a/SeaHaven.Services/Helpers/DashboardMetrics.cs b/SeaHaven.Services/Helpers/DashboardMetrics.cs
new file mode 100644
index 0000000..e49d921
--- /dev/null
+++ b/SeaHaven.Services/Helpers/DashboardMetrics.cs
@@ -0,0 +1,113 @@
+using Data.SeaHavenIndustries.Enums;
+using SeaHaven.DataServices.Interfaces;
+using SeaHaven.Services.DTOs;
+
+namespace SeaHaven.Services.Helpers;
+
+public static class DashboardMetrics
+{
+    public static DashboardMetricResult Calculate(
+        IReadOnlyList<DashboardWorkOrder> workOrders,
+        DateOnly today)
+    {
+        var breakdown = new DashboardBreakdownDTO();
+        var dueCount = 0;
+        var completedDueCount = 0;
+        var resolutionDays = new List<decimal>();
+
+        foreach (var workOrder in workOrders)
+        {
+            var status = workOrder.LifecycleStatus
+                ?? LifecycleStatusMapper.ParseLifecycleStatus(workOrder.LegacyStatus);
+            var completed = status == LifecycleStatus.Completed;
+            var canceled = status == LifecycleStatus.Canceled;
+            var pastDue = IsPastDue(workOrder, status, today);
+
+            AddBreakdownCount(breakdown, workOrder.WorkOrderType, pastDue);
+
+            var due = completed || (workOrder.ScheduledDate is DateTime scheduled
+                && DateOnly.FromDateTime(scheduled.Date) <= today);
+            if (due)
+            {
+                dueCount++;
+                if (completed)
+                    completedDueCount++;
+            }
+
+            if (completed && workOrder.CompletedDate is DateTime completedDate)
+            {
+                var anchor = workOrder.OriginalDate
+                    ?? (workOrder.ScheduledDate is DateTime scheduledDate
+                        ? DateOnly.FromDateTime(scheduledDate.Date)
+                        : null);
+                if (anchor is DateOnly originalDate)
+                    resolutionDays.Add((decimal)(completedDate.Date - originalDate.ToDateTime(TimeOnly.MinValue)).TotalDays);
+            }
+        }
+
+        return new DashboardMetricResult(
+            workOrders.Count,
+            workOrders.Count(workOrder =>
+            {
+                var status = workOrder.LifecycleStatus
+                    ?? LifecycleStatusMapper.ParseLifecycleStatus(workOrder.LegacyStatus);
+                return status is not LifecycleStatus.Completed and not LifecycleStatus.Canceled;
+            }),
+            workOrders.Count(workOrder => string.IsNullOrWhiteSpace(workOrder.AssignTo)),
+            workOrders.Count(workOrder =>
+                (workOrder.LifecycleStatus ?? LifecycleStatusMapper.ParseLifecycleStatus(workOrder.LegacyStatus))
+                == LifecycleStatus.Completed),
+            breakdown,
+            dueCount,
+            completedDueCount,
+            dueCount == 0 ? 0 : Math.Round((decimal)completedDueCount / dueCount * 100, 2),
+            resolutionDays.Count == 0 ? null : Math.Round(resolutionDays.Average(), 2));
+    }
+
+    private static bool IsPastDue(
+        DashboardWorkOrder workOrder,
+        LifecycleStatus? status,
+        DateOnly today)
+        => workOrder.ScheduledDate is DateTime scheduled
+            && DateOnly.FromDateTime(scheduled.Date) < today
+            && status is not LifecycleStatus.Completed and not LifecycleStatus.Canceled;
+
+    private static void AddBreakdownCount(
+        DashboardBreakdownDTO breakdown,
+        WorkOrderType? type,
+        bool pastDue)
+    {
+        if (pastDue)
+        {
+            breakdown.Overdue++;
+            return;
+        }
+
+        switch (type)
+        {
+            case WorkOrderType.PM:
+                breakdown.PM++;
+                break;
+            case WorkOrderType.Emergency:
+                breakdown.Emergency++;
+                break;
+            case WorkOrderType.Reactive:
+                breakdown.Reactive++;
+                break;
+            default:
+                breakdown.Other++;
+                break;
+        }
+    }
+}
+
+public sealed record DashboardMetricResult(
+    int Total,
+    int Open,
+    int NotDispatched,
+    int Completed,
+    DashboardBreakdownDTO Breakdown,
+    int DueCount,
+    int CompletedDueCount,
+    decimal CompletionRate,
+    decimal? AverageResolutionDays);
diff --git a/SeaHaven.Services/Implementation/DashboardService.cs b/SeaHaven.Services/Implementation/DashboardService.cs
index 30695b9..afe4cd0 100644
--- a/SeaHaven.Services/Implementation/DashboardService.cs
+++ b/SeaHaven.Services/Implementation/DashboardService.cs
@@ -1,6 +1,8 @@
 using System.Security.Claims;
 using SeaHaven.DataServices.Interfaces;
 using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Exceptions;
+using SeaHaven.Services.Helpers;
 using SeaHaven.Services.Interfaces;
 
 namespace SeaHaven.Services.Implementation
@@ -20,17 +22,38 @@ namespace SeaHaven.Services.Implementation
 
         public async Task<DashboardStatsDTO> GetStatsAsync(
             ClaimsPrincipal user,
+            DashboardStatsQueryDTO query,
             CancellationToken cancellationToken)
         {
             var accountId = _accountResolver.ResolveAccountFilter(user);
+            var dispatcherId = user.IsInRole("Dispatcher")
+                ? user.FindFirstValue(ClaimTypes.NameIdentifier)
+                : null;
+            if (user.IsInRole("Dispatcher") && string.IsNullOrWhiteSpace(dispatcherId))
+                throw new WorkOrderBoardValidationException("Forbidden", "Dispatcher identity is required.");
+
             var counts = await _dataService.GetWorkOrderCountsAsync(accountId, cancellationToken);
+            var workOrders = await _dataService.GetDashboardWorkOrdersAsync(
+                accountId,
+                dispatcherId,
+                query.DateFrom,
+                query.DateTo,
+                cancellationToken);
+            var metrics = DashboardMetrics.Calculate(workOrders, DashboardBusinessTime.Today());
+
+            var useMetrics = query.DateFrom.HasValue && query.DateTo.HasValue || dispatcherId is not null;
 
             return new DashboardStatsDTO
             {
-                Total = counts.Total,
-                Open = counts.Open,
-                NotDispatched = counts.NotDispatched,
-                Completed = counts.Completed
+                Total = useMetrics ? metrics.Total : counts.Total,
+                Open = useMetrics ? metrics.Open : counts.Open,
+                NotDispatched = useMetrics ? metrics.NotDispatched : counts.NotDispatched,
+                Completed = useMetrics ? metrics.Completed : counts.Completed,
+                Breakdown = metrics.Breakdown,
+                DueCount = metrics.DueCount,
+                CompletedDueCount = metrics.CompletedDueCount,
+                CompletionRate = metrics.CompletionRate,
+                AverageResolutionDays = metrics.AverageResolutionDays
             };
         }
     }
diff --git a/SeaHaven.Services/Interfaces/IDashboardService.cs b/SeaHaven.Services/Interfaces/IDashboardService.cs
index 63379e1..a760d47 100644
--- a/SeaHaven.Services/Interfaces/IDashboardService.cs
+++ b/SeaHaven.Services/Interfaces/IDashboardService.cs
@@ -7,6 +7,7 @@ namespace SeaHaven.Services.Interfaces
     {
         Task<DashboardStatsDTO> GetStatsAsync(
             ClaimsPrincipal user,
+            DashboardStatsQueryDTO query,
             CancellationToken cancellationToken);
     }
 }

From dec8b15278b73b7379568fd44c605139b3626831 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 17:31:21 -0300
Subject: [PATCH 017/183] fix(services): translate duplicate name races

---
 .../ServicesRegistryDataService.cs            | 29 +++++++++++++++++--
 .../Models/ServicesRegistryModels.cs          | 14 +++++++++
 .../Implementation/ServicesRegistryService.cs | 22 ++++++++++++--
 3 files changed, 61 insertions(+), 4 deletions(-)
 create mode 100644 SeaHaven.DataServices/Models/ServicesRegistryModels.cs

diff --git a/SeaHaven.DataServices/Implementation/ServicesRegistryDataService.cs b/SeaHaven.DataServices/Implementation/ServicesRegistryDataService.cs
index b6acd06..c2e9c77 100644
--- a/SeaHaven.DataServices/Implementation/ServicesRegistryDataService.cs
+++ b/SeaHaven.DataServices/Implementation/ServicesRegistryDataService.cs
@@ -2,6 +2,7 @@ using Data.SeaHavenIndustries;
 using Data.SeaHavenIndustries.Enums;
 using Microsoft.EntityFrameworkCore;
 using SeaHaven.DataServices.Interfaces;
+using SeaHaven.DataServices.Models;
 
 namespace SeaHaven.DataServices.Implementation
 {
@@ -90,7 +91,15 @@ namespace SeaHaven.DataServices.Implementation
         public async Task<Service> AddServiceAsync(Service service, CancellationToken cancellationToken)
         {
             await _context.Services.AddAsync(service, cancellationToken);
-            await _context.SaveChangesAsync(cancellationToken);
+            try
+            {
+                await _context.SaveChangesAsync(cancellationToken);
+            }
+            catch (DbUpdateException ex) when (IsUniqueNameViolation(ex))
+            {
+                throw new ServicesRegistryDuplicateNameException(ex);
+            }
+
             return service;
         }
 
@@ -112,7 +121,14 @@ namespace SeaHaven.DataServices.Implementation
                 });
             }
 
-            await _context.SaveChangesAsync(cancellationToken);
+            try
+            {
+                await _context.SaveChangesAsync(cancellationToken);
+            }
+            catch (DbUpdateException ex) when (IsUniqueNameViolation(ex))
+            {
+                throw new ServicesRegistryDuplicateNameException(ex);
+            }
         }
 
         public async Task<bool> DeactivateServiceAsync(int id, CancellationToken cancellationToken)
@@ -126,5 +142,14 @@ namespace SeaHaven.DataServices.Implementation
             await _context.SaveChangesAsync(cancellationToken);
             return true;
         }
+
+        private static bool IsUniqueNameViolation(DbUpdateException exception)
+        {
+            var message = exception.InnerException?.Message ?? exception.Message;
+            return message.Contains("IX_Services_NormalizedName", StringComparison.OrdinalIgnoreCase)
+                || message.Contains("NormalizedName", StringComparison.OrdinalIgnoreCase)
+                   && (message.Contains("duplicate", StringComparison.OrdinalIgnoreCase)
+                       || message.Contains("unique", StringComparison.OrdinalIgnoreCase));
+        }
     }
 }
diff --git a/SeaHaven.DataServices/Models/ServicesRegistryModels.cs b/SeaHaven.DataServices/Models/ServicesRegistryModels.cs
new file mode 100644
index 0000000..b34b25b
--- /dev/null
+++ b/SeaHaven.DataServices/Models/ServicesRegistryModels.cs
@@ -0,0 +1,14 @@
+namespace SeaHaven.DataServices.Models
+{
+    /// <summary>
+    /// Raised by the registry data service when the database unique name index
+    /// wins a concurrent create or update race.
+    /// </summary>
+    public sealed class ServicesRegistryDuplicateNameException : Exception
+    {
+        public ServicesRegistryDuplicateNameException(Exception innerException)
+            : base("A service name is already in use.", innerException)
+        {
+        }
+    }
+}
diff --git a/SeaHaven.Services/Implementation/ServicesRegistryService.cs b/SeaHaven.Services/Implementation/ServicesRegistryService.cs
index 79e2dd9..b6c7dd0 100644
--- a/SeaHaven.Services/Implementation/ServicesRegistryService.cs
+++ b/SeaHaven.Services/Implementation/ServicesRegistryService.cs
@@ -2,6 +2,7 @@ using System.Security.Claims;
 using Data.SeaHavenIndustries;
 using Data.SeaHavenIndustries.Enums;
 using SeaHaven.DataServices.Interfaces;
+using SeaHaven.DataServices.Models;
 using SeaHaven.Services.DTOs;
 using SeaHaven.Services.Exceptions;
 using SeaHaven.Services.Interfaces;
@@ -71,7 +72,14 @@ namespace SeaHaven.Services.Implementation
                     .ToList()
             };
 
-            await _dataService.AddServiceAsync(service, cancellationToken);
+            try
+            {
+                await _dataService.AddServiceAsync(service, cancellationToken);
+            }
+            catch (ServicesRegistryDuplicateNameException)
+            {
+                throw DuplicateName();
+            }
 
             var row = await _dataService.GetServiceRowByIdAsync(service.Id, cancellationToken);
             return MapToDto(row!);
@@ -101,7 +109,14 @@ namespace SeaHaven.Services.Implementation
             service.RequiresCompletionDocument = input.RequiresCompletionDocument;
             service.CompletionDocTemplateId = template?.Id;
 
-            await _dataService.SaveServiceAsync(service, supportedTypes, cancellationToken);
+            try
+            {
+                await _dataService.SaveServiceAsync(service, supportedTypes, cancellationToken);
+            }
+            catch (ServicesRegistryDuplicateNameException)
+            {
+                throw DuplicateName();
+            }
 
             var row = await _dataService.GetServiceRowByIdAsync(id, cancellationToken);
             return MapToDto(row!);
@@ -123,6 +138,9 @@ namespace SeaHaven.Services.Implementation
                 throw new ServicesRegistryValidationException("Forbidden", "Scheduler or Admin role is required.");
         }
 
+        private static ServicesRegistryValidationException DuplicateName() =>
+            new("DuplicateName", "A service with this name already exists.");
+
         private static string RequireValidName(string? name)
         {
             if (string.IsNullOrWhiteSpace(name))

From 9b39d0e5ecab63fd3a297825dbd5192118d2ae27 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 17:43:49 -0300
Subject: [PATCH 018/183] feat(dashboard): add dispatcher workload (SH-346)

---
 .../DashboardServiceTests.cs                  | 47 ++++++++++++
 .../Controllers/DashboardController.cs        | 26 +++++++
 .../Implementation/DashboardDataService.cs    | 74 +++++++++++++++++++
 .../Interfaces/IDashboardDataService.cs       | 13 ++++
 SeaHaven.Services/DTOs/DashboardDTOs.cs       | 16 ++++
 .../Implementation/DashboardService.cs        | 45 +++++++++++
 .../Interfaces/IDashboardService.cs           |  6 ++
 7 files changed, 227 insertions(+)

diff --git a/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs b/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
index a5dadfb..3d426c9 100644
--- a/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
@@ -1,6 +1,7 @@
 using System.Security.Claims;
 using Data.SeaHavenIndustries;
 using FluentAssertions;
+using Microsoft.AspNetCore.Identity;
 using Microsoft.EntityFrameworkCore;
 using SeaHaven.DataServices.Implementation;
 using SeaHaven.Services.Exceptions;
@@ -191,4 +192,50 @@ public class DashboardServiceTests
         stats.Total.Should().Be(1);
         stats.Open.Should().Be(1);
     }
+
+    [Fact]
+    public async Task GetWorkloadAsync_UsesRoleScopeAndExcludesTerminalOrdersFromOpenCount()
+    {
+        using var ctx = NewContext();
+        ctx.Roles.Add(new IdentityRole
+        {
+            Id = "dispatcher-role",
+            Name = "Dispatcher",
+            NormalizedName = "DISPATCHER"
+        });
+        ctx.Users.AddRange(
+            new ApplicationUser { Id = "dispatcher-1", FirstName = "Ada", LastName = "One" },
+            new ApplicationUser { Id = "dispatcher-2", FirstName = "Ben", LastName = "Two" });
+        ctx.UserRoles.AddRange(
+            new IdentityUserRole<string> { UserId = "dispatcher-1", RoleId = "dispatcher-role" },
+            new IdentityUserRole<string> { UserId = "dispatcher-2", RoleId = "dispatcher-role" });
+        ctx.workOrders.AddRange(
+            new WorkOrder { AccountId = 1, AssignTo = "dispatcher-1", Status = "Open" },
+            new WorkOrder { AccountId = 1, AssignTo = "dispatcher-1", LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Completed },
+            new WorkOrder { AccountId = 1, AssignTo = "dispatcher-2", Status = "Open" });
+        ctx.SaveChanges();
+
+        var result = await NewService(ctx).GetWorkloadAsync(
+            AccountUser(1, "dispatcher-1", "Dispatcher"),
+            new DashboardStatsQueryDTO(),
+            1,
+            CancellationToken.None);
+
+        result.TotalDispatchers.Should().Be(1);
+        result.Items.Should().ContainSingle();
+        result.Items[0].DispatcherName.Should().Be("Ada One");
+        result.Items[0].TotalCount.Should().Be(2);
+        result.Items[0].OpenCount.Should().Be(1);
+        result.PageSize.Should().Be(10);
+
+        var adminResult = await NewService(ctx).GetWorkloadAsync(
+            AccountUser(1),
+            new DashboardStatsQueryDTO(),
+            1,
+            CancellationToken.None);
+
+        adminResult.TotalDispatchers.Should().Be(2);
+        adminResult.Items.Select(item => item.DispatcherName)
+            .Should().ContainInOrder("Ada One", "Ben Two");
+    }
 }
diff --git a/Api.SeaHavenIndustries/Controllers/DashboardController.cs b/Api.SeaHavenIndustries/Controllers/DashboardController.cs
index cb7e27c..91fc35e 100644
--- a/Api.SeaHavenIndustries/Controllers/DashboardController.cs
+++ b/Api.SeaHavenIndustries/Controllers/DashboardController.cs
@@ -37,5 +37,31 @@ namespace Api.SeaHavenIndustries.Controllers
                 averageResolutionDays = stats.AverageResolutionDays
             });
         }
+
+        [HttpGet("Workload")]
+        public async Task<IActionResult> GetWorkload(
+            [FromQuery] DashboardStatsQueryDTO query,
+            [FromQuery] int page = 1,
+            CancellationToken cancellationToken = default)
+        {
+            try
+            {
+                return Ok(await _dashboardService.GetWorkloadAsync(
+                    User, query, page, cancellationToken));
+            }
+            catch (SeaHaven.Services.Exceptions.WorkOrderBoardValidationException ex)
+                when (ex.Code == "Forbidden")
+            {
+                return StatusCode(StatusCodes.Status403Forbidden, new
+                {
+                    code = ex.Code,
+                    message = ex.Message
+                });
+            }
+            catch (ArgumentOutOfRangeException ex)
+            {
+                return BadRequest(ex.Message);
+            }
+        }
     }
 }
diff --git a/SeaHaven.DataServices/Implementation/DashboardDataService.cs b/SeaHaven.DataServices/Implementation/DashboardDataService.cs
index 73c073e..f571302 100644
--- a/SeaHaven.DataServices/Implementation/DashboardDataService.cs
+++ b/SeaHaven.DataServices/Implementation/DashboardDataService.cs
@@ -73,5 +73,79 @@ namespace SeaHaven.DataServices.Implementation
                     w.CompletedDate))
                 .ToListAsync(cancellationToken);
         }
+
+        public async Task<IReadOnlyList<DashboardDispatcherWorkload>> GetDispatcherWorkloadAsync(
+            int? accountId,
+            string? dispatcherId,
+            DateOnly? dateFrom,
+            DateOnly? dateTo,
+            CancellationToken cancellationToken)
+        {
+            var dispatcherUsers = from user in _context.Users.AsNoTracking()
+                                  join userRole in _context.UserRoles
+                                      on user.Id equals userRole.UserId
+                                  join role in _context.Roles
+                                      on userRole.RoleId equals role.Id
+                                  where user.IsDeleted != true
+                                      && (role.Name == "Dispatcher" || role.Name == "DISPATCHER")
+                                      && (dispatcherId == null || user.Id == dispatcherId)
+                                  select new
+                                  {
+                                      user.Id,
+                                      Name = ((user.FirstName ?? "") + " " + (user.LastName ?? "")).Trim()
+                                  };
+
+            var workOrders = WorkOrderBoardQueryFilters.ApplyBaseScope(_context.workOrders.AsNoTracking());
+            if (accountId is int scopedAccountId)
+                workOrders = WorkOrderBoardQueryFilters.ApplyAccountScope(workOrders, scopedAccountId);
+
+            if (dateFrom is DateOnly from && dateTo is DateOnly to)
+            {
+                var fromDate = from.ToDateTime(TimeOnly.MinValue);
+                var toDateExclusive = to.AddDays(1).ToDateTime(TimeOnly.MinValue);
+                workOrders = workOrders.Where(w =>
+                    w.ScheduledDate >= fromDate && w.ScheduledDate < toDateExclusive);
+            }
+
+            var counts = await workOrders
+                .Where(w => w.AssignTo != null)
+                .GroupBy(w => w.AssignTo!)
+                .Select(group => new
+                {
+                    DispatcherId = group.Key,
+                    TotalCount = group.Count(),
+                    OpenCount = group.Count(w =>
+                        w.LifecycleStatus != LifecycleStatus.Completed
+                        && w.LifecycleStatus != LifecycleStatus.Canceled
+                        && (w.LifecycleStatus != null
+                            || (w.LegacyStatus ?? w.Status) != "Done"
+                            && (w.LegacyStatus ?? w.Status) != "Completed"
+                            && (w.LegacyStatus ?? w.Status) != "Complete"
+                            && (w.LegacyStatus ?? w.Status) != "Closed"
+                            && (w.LegacyStatus ?? w.Status) != "Canceled"
+                            && (w.LegacyStatus ?? w.Status) != "Cancelled"))
+                })
+                .ToListAsync(cancellationToken);
+
+            var dispatcherList = await dispatcherUsers
+                .Distinct()
+                .ToListAsync(cancellationToken);
+
+            return dispatcherList
+                .GroupJoin(
+                    counts,
+                    user => user.Id,
+                    count => count.DispatcherId,
+                    (user, matchingCounts) =>
+                    {
+                        var count = matchingCounts.SingleOrDefault();
+                        return new DashboardDispatcherWorkload(
+                            user.Id,
+                            user.Name,
+                            count?.TotalCount ?? 0,
+                            count?.OpenCount ?? 0);
+                    })
+                .ToList();
+        }
     }
 }
diff --git a/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs b/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs
index 470e70e..dcc77b1 100644
--- a/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs
@@ -14,6 +14,13 @@ namespace SeaHaven.DataServices.Interfaces
             DateOnly? dateFrom,
             DateOnly? dateTo,
             CancellationToken cancellationToken);
+
+        Task<IReadOnlyList<DashboardDispatcherWorkload>> GetDispatcherWorkloadAsync(
+            int? accountId,
+            string? dispatcherId,
+            DateOnly? dateFrom,
+            DateOnly? dateTo,
+            CancellationToken cancellationToken);
     }
 
     public sealed record DashboardWorkOrder(
@@ -26,6 +33,12 @@ namespace SeaHaven.DataServices.Interfaces
         DateOnly? OriginalDate,
         DateTime? CompletedDate);
 
+    public sealed record DashboardDispatcherWorkload(
+        string DispatcherId,
+        string DispatcherName,
+        int TotalCount,
+        int OpenCount);
+
     public class DashboardCounts
     {
         public int Total { get; set; }
diff --git a/SeaHaven.Services/DTOs/DashboardDTOs.cs b/SeaHaven.Services/DTOs/DashboardDTOs.cs
index 25ecafc..8af4d3f 100644
--- a/SeaHaven.Services/DTOs/DashboardDTOs.cs
+++ b/SeaHaven.Services/DTOs/DashboardDTOs.cs
@@ -6,6 +6,22 @@ namespace SeaHaven.Services.DTOs
         public DateOnly? DateTo { get; set; }
     }
 
+    public sealed class DashboardWorkloadResponseDTO
+    {
+        public IReadOnlyList<DashboardWorkloadRowDTO> Items { get; init; } = [];
+        public int Page { get; init; }
+        public int PageSize { get; init; }
+        public int TotalDispatchers { get; init; }
+    }
+
+    public sealed class DashboardWorkloadRowDTO
+    {
+        public string DispatcherId { get; init; } = string.Empty;
+        public string DispatcherName { get; init; } = string.Empty;
+        public int TotalCount { get; init; }
+        public int OpenCount { get; init; }
+    }
+
     public class DashboardStatsDTO
     {
         public int Total { get; set; }
diff --git a/SeaHaven.Services/Implementation/DashboardService.cs b/SeaHaven.Services/Implementation/DashboardService.cs
index afe4cd0..ef6364c 100644
--- a/SeaHaven.Services/Implementation/DashboardService.cs
+++ b/SeaHaven.Services/Implementation/DashboardService.cs
@@ -56,5 +56,50 @@ namespace SeaHaven.Services.Implementation
                 AverageResolutionDays = metrics.AverageResolutionDays
             };
         }
+
+        public async Task<DashboardWorkloadResponseDTO> GetWorkloadAsync(
+            ClaimsPrincipal user,
+            DashboardStatsQueryDTO query,
+            int page,
+            CancellationToken cancellationToken)
+        {
+            if (page < 1)
+                throw new ArgumentOutOfRangeException(nameof(page));
+
+            var accountId = _accountResolver.ResolveAccountFilter(user);
+            var dispatcherId = user.IsInRole("Dispatcher")
+                ? user.FindFirstValue(ClaimTypes.NameIdentifier)
+                : null;
+            if (user.IsInRole("Dispatcher") && string.IsNullOrWhiteSpace(dispatcherId))
+                throw new WorkOrderBoardValidationException("Forbidden", "Dispatcher identity is required.");
+
+            var rows = await _dataService.GetDispatcherWorkloadAsync(
+                accountId,
+                dispatcherId,
+                query.DateFrom,
+                query.DateTo,
+                cancellationToken);
+            var orderedRows = rows
+                .OrderByDescending(row => row.OpenCount)
+                .ThenBy(row => row.DispatcherName, StringComparer.OrdinalIgnoreCase)
+                .ThenBy(row => row.DispatcherId, StringComparer.Ordinal)
+                .ToList();
+            const int pageSize = 10;
+
+            return new DashboardWorkloadResponseDTO
+            {
+                Items = orderedRows.Skip((page - 1) * pageSize).Take(pageSize)
+                    .Select(row => new DashboardWorkloadRowDTO
+                    {
+                        DispatcherId = row.DispatcherId,
+                        DispatcherName = row.DispatcherName,
+                        TotalCount = row.TotalCount,
+                        OpenCount = row.OpenCount
+                    }).ToList(),
+                Page = page,
+                PageSize = pageSize,
+                TotalDispatchers = orderedRows.Count
+            };
+        }
     }
 }
diff --git a/SeaHaven.Services/Interfaces/IDashboardService.cs b/SeaHaven.Services/Interfaces/IDashboardService.cs
index a760d47..cdb572c 100644
--- a/SeaHaven.Services/Interfaces/IDashboardService.cs
+++ b/SeaHaven.Services/Interfaces/IDashboardService.cs
@@ -9,5 +9,11 @@ namespace SeaHaven.Services.Interfaces
             ClaimsPrincipal user,
             DashboardStatsQueryDTO query,
             CancellationToken cancellationToken);
+
+        Task<DashboardWorkloadResponseDTO> GetWorkloadAsync(
+            ClaimsPrincipal user,
+            DashboardStatsQueryDTO query,
+            int page,
+            CancellationToken cancellationToken);
     }
 }

From d6c3cd2e24ad740a9efa66928452e391dfc647c7 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 17:44:00 -0300
Subject: [PATCH 019/183] feat(permissions): add team member permission policy
 foundation (SH-327)

---
 .../Auth/ApplicationDbContext.cs              |   27 +
 .../Auth/UserPermissionOverride.cs            |   18 +
 .../Enums/PermissionEnums.cs                  |   13 +
 ..._SH327_UserPermissionOverrides.Designer.cs | 3966 +++++++++++++++++
 ...916201532_SH327_UserPermissionOverrides.cs |   46 +
 .../ApplicationDbContextModelSnapshot.cs      |   33 +
 .../TeamPermissionPolicyTests.cs              |  248 ++
 .../Constants/TeamPermissionKeys.cs           |   67 +
 .../Implementation/TeamPermissionPolicy.cs    |   88 +
 .../Interfaces/ITeamPermissionPolicy.cs       |   23 +
 10 files changed, 4529 insertions(+)
 create mode 100644 Data.SeaHavenIndustries/Auth/UserPermissionOverride.cs
 create mode 100644 Data.SeaHavenIndustries/Enums/PermissionEnums.cs
 create mode 100644 Data.SeaHavenIndustries/Migrations/20260916201532_SH327_UserPermissionOverrides.Designer.cs
 create mode 100644 Data.SeaHavenIndustries/Migrations/20260916201532_SH327_UserPermissionOverrides.cs
 create mode 100644 SeaHaven.Services.Tests/TeamPermissionPolicyTests.cs
 create mode 100644 SeaHaven.Services/Constants/TeamPermissionKeys.cs
 create mode 100644 SeaHaven.Services/Implementation/TeamPermissionPolicy.cs
 create mode 100644 SeaHaven.Services/Interfaces/ITeamPermissionPolicy.cs

diff --git a/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs b/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs
index c8ac67b..f322ed8 100644
--- a/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs
+++ b/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs
@@ -225,6 +225,32 @@ namespace Data.SeaHavenIndustries
                 .WithMany()
                 .HasForeignKey(c => c.AreaId)
                 .OnDelete(DeleteBehavior.Restrict);
+
+            // Per-person team permission overrides. Composite primary key
+            // (UserId + PermissionKey) plus an explicitly named unique composite
+            // index; missing rows behave as Unset.
+            builder.Entity<UserPermissionOverride>(entity =>
+            {
+                entity.HasKey(o => new { o.UserId, o.PermissionKey });
+
+                entity.Property(o => o.UserId)
+                    .HasMaxLength(450);
+
+                entity.Property(o => o.PermissionKey)
+                    .HasMaxLength(64);
+
+                entity.Property(o => o.State)
+                    .IsRequired();
+
+                entity.HasOne(o => o.User)
+                    .WithMany()
+                    .HasForeignKey(o => o.UserId)
+                    .OnDelete(DeleteBehavior.Restrict);
+
+                entity.HasIndex(o => new { o.UserId, o.PermissionKey })
+                    .IsUnique()
+                    .HasDatabaseName("IX_UserPermissionOverrides_UserId_PermissionKey");
+            });
         }
         public DbSet<Category> Categories { get; set; }
         public DbSet<Locations> Locations { get; set; }
@@ -279,6 +305,7 @@ namespace Data.SeaHavenIndustries
         public DbSet<Department> Departments { get; set; }
         public DbSet<JobTitle> JobTitles { get; set; }
         public DbSet<Region> Regions { get; set; }
+        public DbSet<UserPermissionOverride> UserPermissionOverrides { get; set; }
 
         public override int SaveChanges()
         {
diff --git a/Data.SeaHavenIndustries/Auth/UserPermissionOverride.cs b/Data.SeaHavenIndustries/Auth/UserPermissionOverride.cs
new file mode 100644
index 0000000..829daa8
--- /dev/null
+++ b/Data.SeaHavenIndustries/Auth/UserPermissionOverride.cs
@@ -0,0 +1,18 @@
+using Data.SeaHavenIndustries.Enums;
+
+namespace Data.SeaHavenIndustries
+{
+    /// <summary>
+    /// Per-person team permission override, keyed by user and canonical
+    /// permission key. Explicit Allow/Deny rows take precedence over role defaults;
+    /// <see cref="UserPermissionState.Unset"/> (and a missing row) falls back to
+    /// the role default.
+    /// </summary>
+    public class UserPermissionOverride
+    {
+        public string UserId { get; set; } = null!;
+        public string PermissionKey { get; set; } = null!;
+        public UserPermissionState State { get; set; } = UserPermissionState.Unset;
+        public virtual ApplicationUser? User { get; set; }
+    }
+}
diff --git a/Data.SeaHavenIndustries/Enums/PermissionEnums.cs b/Data.SeaHavenIndustries/Enums/PermissionEnums.cs
new file mode 100644
index 0000000..9c6b014
--- /dev/null
+++ b/Data.SeaHavenIndustries/Enums/PermissionEnums.cs
@@ -0,0 +1,13 @@
+namespace Data.SeaHavenIndustries.Enums
+{
+    /// <summary>
+    /// Tri-state state of a per-person team permission override.
+    /// A missing row behaves the same as <see cref="Unset"/>.
+    /// </summary>
+    public enum UserPermissionState
+    {
+        Unset = 0,
+        Allow = 1,
+        Deny = 2
+    }
+}
diff --git a/Data.SeaHavenIndustries/Migrations/20260916201532_SH327_UserPermissionOverrides.Designer.cs b/Data.SeaHavenIndustries/Migrations/20260916201532_SH327_UserPermissionOverrides.Designer.cs
new file mode 100644
index 0000000..c150a1c
--- /dev/null
+++ b/Data.SeaHavenIndustries/Migrations/20260916201532_SH327_UserPermissionOverrides.Designer.cs
@@ -0,0 +1,3966 @@
+// <auto-generated />
+using System;
+using Data.SeaHavenIndustries;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Metadata;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+
+#nullable disable
+
+namespace Data.SeaHavenIndustries.Migrations
+{
+    [DbContext(typeof(ApplicationDbContext))]
+    [Migration("20260916201532_SH327_UserPermissionOverrides")]
+    partial class SH327_UserPermissionOverrides
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasAnnotation("ProductVersion", "8.0.8")
+                .HasAnnotation("Relational:MaxIdentifierLength", 128);
+
+            SqlServerModelBuilderExtensions.UseIdentityColumns(modelBuilder);
+
+            modelBuilder.HasSequence("WorkOrderInternalNumberSequence");
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Accounts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("CurrencyCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Importance")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("IndustryId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("OwnerEmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Phone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PrivacySetting")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ServiceInstructions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Tags")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("TerritoryId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("TimeZone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Type")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Website")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Accounts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Addresses", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AddressType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Country")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("County")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("ContactId");
+
+                    b.ToTable("Addresses");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int>("AccessFailedCount")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Color")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ConcurrencyStamp")
+                        .IsConcurrencyToken()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Contact")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DeletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<bool>("EmailConfirmed")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("FirstName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Initials")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("LastName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Locations")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("LockoutEnabled")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTimeOffset?>("LockoutEnd")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("NormalizedEmail")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("NormalizedUserName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("PasswordHash")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("PhoneNumberConfirmed")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("SecurityStamp")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("TwoFactorEnabled")
+                        .HasColumnType("bit");
+
+                    b.Property<int?>("Type")
+                        .HasColumnType("int");
+
+                    b.Property<string>("UniqueName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserImage")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("NormalizedEmail")
+                        .HasDatabaseName("EmailIndex");
+
+                    b.HasIndex("NormalizedUserName")
+                        .IsUnique()
+                        .HasDatabaseName("UserNameIndex")
+                        .HasFilter("[NormalizedUserName] IS NOT NULL");
+
+                    b.ToTable("AspNetUsers", (string)null);
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("AssetCode")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Assets");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Category", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Categories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Comments", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CommentType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Commenter")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Commenttext")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Documents")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalCommentId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("ExternalSourceEmailS3Key")
+                        .HasMaxLength(2048)
+                        .HasColumnType("nvarchar(2048)");
+
+                    b.Property<DateTimeOffset?>("ExternalUpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalVersionHash")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RecordType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int?>("WorkerOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("UserId");
+
+                    b.HasIndex("WorkerOrderId");
+
+                    b.ToTable("Comments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.CompletionDocTemplate", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ServiceKey")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("TemplateUrl")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ServiceKey", "IsActive");
+
+                    b.ToTable("CompletionDocTemplates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ContactDetails", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DateOfBirth")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Gender")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PrivacySetting")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Tags")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Territory")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.ToTable("ContactDetails");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ContactType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FirstName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LastName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("MiddleName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Owner")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("SiteContactOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Title")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Contacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Department", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Departments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AcceptToken")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("AcknowledgedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CommercialStatusUpdatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CompletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DispatchNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DispatchedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("EmailSent")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("EstimatedArrivalAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("EtaManualOverride")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("InvoiceNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("InvoiceStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<decimal?>("NTEAmount")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<string>("PONumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PaymentStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ReplyToAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<DateTime?>("ScheduledDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TechPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("VendorNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<DateTime?>("VerifiedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("VerifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("Dispatches");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchChecklistItem", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CompletedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("CompletedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool>("IsCompleted")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ItemText")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("DispatchChecklistItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchSignoff", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Signature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignatureMethod")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("SignedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("SignoffType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.ToTable("DispatchSignoffs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchUpliftRequest", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<decimal?>("CurrentNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<DateTime?>("DecidedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DecidedByUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DecisionNote")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("EscalatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("EvidenceDocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("ExpiresAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("InitialNotificationSentAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("NotificationError")
+                        .HasMaxLength(500)
+                        .HasColumnType("nvarchar(500)");
+
+                    b.Property<string>("NotificationStatus")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<string>("RequestKey")
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<string>("RequestedByVendorName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<decimal>("RequestedNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<int>("RequiredTier")
+                        .HasColumnType("int");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<string>("Status")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<string>("VendorReason")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId")
+                        .IsUnique()
+                        .HasFilter("[Status] IN ('Pending', 'ChangesRequested')");
+
+                    b.HasIndex("EvidenceDocumentId");
+
+                    b.HasIndex("DispatchId", "RequestKey")
+                        .IsUnique()
+                        .HasFilter("[RequestKey] IS NOT NULL");
+
+                    b.ToTable("DispatchUpliftRequests");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchWorkOrder", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("DispatchWorkOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DropdownOption", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Category")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ParentValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Value")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("DropdownOptions");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("CanChangeProviderNumber")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ConfirmUserName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DateOfBirth")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DepartmentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("EmployeeNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FirstName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Gender")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("HireDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<int?>("JobTitleId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("LastLogin")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LastName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("MiddleName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("PermissionGroupId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("RegionId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("SMSAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TimeZone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Website")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DepartmentId");
+
+                    b.HasIndex("JobTitleId");
+
+                    b.HasIndex("RegionId");
+
+                    b.ToTable("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeAddress", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CountryCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CountyId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("StateCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Street")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("StreetLineTwo")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId")
+                        .IsUnique();
+
+                    b.ToTable("EmployeeAddresses");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeEmail", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<int?>("EmailTypeId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsPrimary")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.ToTable("EmployeeEmails");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeePhone", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Extension")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsPrimary")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Number")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("PhoneTypeId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.ToTable("EmployeePhones");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Events", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("AllDay")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("EndDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("EndTime")
+                        .HasMaxLength(10)
+                        .HasColumnType("nvarchar(10)");
+
+                    b.Property<string>("EventColor")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Location")
+                        .HasMaxLength(150)
+                        .HasColumnType("nvarchar(150)");
+
+                    b.Property<int?>("RecordID")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RecordName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("RecordTargetType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("ReminderMinutes")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime>("StartDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("StartTime")
+                        .HasMaxLength(10)
+                        .HasColumnType("nvarchar(10)");
+
+                    b.Property<string>("Title")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Events");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.FollowUps", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Reason")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("ScheduleDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<TimeSpan>("ScheduleStartTime")
+                        .HasColumnType("time");
+
+                    b.Property<string>("Status")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.HasIndex("LocationId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("FollowUps");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ForgetPasswordCode", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Code")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Email")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("ForgetPasswordCodes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.JobTitle", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("JobTitles");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalLocationId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Latitude")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Longitude")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Title")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.ToTable("Locations");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.PMSchedules", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AssetId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Frequency")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("StartDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AssetId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("PMSchedules");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BillingAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("Date")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ProjectName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("QuotId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ShippingAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("Quotes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.QuotesLineItems", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Descriptions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<decimal?>("Lineitem")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<int?>("LineitemNumber")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("QuoteId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("QuoteId");
+
+                    b.ToTable("QuotesLines");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Region", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Regions");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.SitePreferredVendor", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Trade")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("UpdatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("LocationId", "VendorId")
+                        .IsUnique()
+                        .HasFilter("[Trade] IS NULL");
+
+                    b.HasIndex("LocationId", "VendorId", "Trade")
+                        .IsUnique()
+                        .HasFilter("[Trade] IS NOT NULL");
+
+                    b.ToTable("SitePreferredVendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplate", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("TaskListTemplates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplateItem", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ItemText")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<int>("TaskListTemplateId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("TaskListTemplateId");
+
+                    b.ToTable("TaskListTemplateItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Template", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AfterPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AfterPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AssignTo")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DueDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Priority")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffSignature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderTitle")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AssignTo");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Templates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Trade", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("Trades");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserPermissionOverride", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("PermissionKey")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<int>("State")
+                        .HasColumnType("int");
+
+                    b.HasKey("UserId", "PermissionKey");
+
+                    b.HasIndex("UserId", "PermissionKey")
+                        .IsUnique()
+                        .HasDatabaseName("IX_UserPermissionOverrides_UserId_PermissionKey");
+
+                    b.ToTable("UserPermissionOverrides");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AvailabilityStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("AvailabilityUpdatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CompanyId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CompanyName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CompanyPhone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ContactName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("GoogleMapsUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Phone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PreferredContact")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TradeSpecialties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CompanyId");
+
+                    b.ToTable("Vendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAccessToken", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime>("ExpiresAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime>("IssuedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("LastUsedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("RevokedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Token")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Token")
+                        .IsUnique();
+
+                    b.HasIndex("VendorId");
+
+                    b.ToTable("VendorAccessTokens");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAuditLog", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Actor")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("FieldName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NewValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("OldValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.ToTable("VendorAuditLogs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CompanyPhone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("GoogleMapsUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("VendorCompanies");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompletionDocument", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ContentType")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("OriginalFileName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Purpose")
+                        .IsRequired()
+                        .HasMaxLength(30)
+                        .HasColumnType("nvarchar(30)");
+
+                    b.Property<string>("RejectionReason")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ReplacesDocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ReviewStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ReviewedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ScanStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ScannedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<long>("SizeBytes")
+                        .HasColumnType("bigint");
+
+                    b.Property<string>("StoredFileName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("Version")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("VendorCompletionDocuments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("AdditionalContacts")
+                        .HasMaxLength(4000)
+                        .HasColumnType("nvarchar(4000)");
+
+                    b.Property<string>("AfterPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AfterPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateOnly?>("AssignDate")
+                        .HasColumnType("date");
+
+                    b.Property<string>("AssignTo")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("AvetaRequired")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("AvettaTask")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Building")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("CarriedOver")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CompletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Customer")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DateReported")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("DocStatus")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("DueDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ExternalAssignedTo")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<DateTimeOffset?>("ExternalLastOccurredAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalRecordType")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset?>("ExternalUpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalVersionHash")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("ExternalWorkOrderId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ExtraServices")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<string>("FlagColor")
+                        .HasMaxLength(7)
+                        .HasColumnType("nvarchar(7)");
+
+                    b.Property<string>("FrozenCompany")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FrozenPoc")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FrozenSite")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("InternalWONumber")
+                        .HasMaxLength(11)
+                        .HasColumnType("nvarchar(11)");
+
+                    b.Property<bool>("IsAddOn")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LegacyStatus")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("LifecycleStatus")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("OperationalFlags")
+                        .HasColumnType("int");
+
+                    b.Property<DateOnly?>("OriginalDate")
+                        .HasColumnType("date");
+
+                    b.Property<DateOnly?>("OriginalWeek")
+                        .HasColumnType("date");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PocName")
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("PocNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<string>("PocPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int?>("PrimaryDispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Priority")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Problem")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("RescheduleCount")
+                        .HasColumnType("int");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<bool?>("ScheduleWeekOnly")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("ScheduledDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("ScheduledEnd")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("ScheduledStart")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Service")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("ServiceNotes")
+                        .HasMaxLength(4000)
+                        .HasColumnType("nvarchar(4000)");
+
+                    b.Property<string>("Severity")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffSignature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteCode")
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<string>("Source")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SourceEmailS3Key")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SubTrade")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateOnly?>("TargetWeek")
+                        .HasColumnType("date");
+
+                    b.Property<string>("TechPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<string>("Trade")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<decimal?>("VendorNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<string>("VendorNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<int?>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("WorkerOrderNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderTitle")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("istemplate")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("ExternalWorkOrderId")
+                        .IsUnique()
+                        .HasFilter("[ExternalWorkOrderId] IS NOT NULL AND [ExternalWorkOrderId] <> ''");
+
+                    b.HasIndex("InternalWONumber")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.HasIndex("LocationId");
+
+                    b.HasIndex("PrimaryDispatchId");
+
+                    b.HasIndex("ScheduledDate");
+
+                    b.HasIndex("SiteCode")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.HasIndex("WorkOrderType");
+
+                    b.HasIndex("AssignTo", "ScheduledDate");
+
+                    b.HasIndex("LifecycleStatus", "ScheduledDate")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.ToTable("workOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAttachments", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Category")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("workOrderAttachments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAuditLog", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Action")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ActorType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CorrelationId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("EventType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FieldName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NewValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("OldValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UserId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("WorkOrderAuditLogs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderCategories", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("workOrderCategories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderContacts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("WorkOrderContacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderExternalReceipt", b =>
+                {
+                    b.Property<long>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("bigint");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<long>("Id"));
+
+                    b.Property<string>("ExternalId")
+                        .IsRequired()
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Kind")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<DateTimeOffset>("ProcessedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("Source")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset>("UpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("VersionHash")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Source", "Kind", "ExternalId")
+                        .IsUnique()
+                        .HasDatabaseName("IX_WorkOrderExternalReceipts_Source_Kind_ExternalId");
+
+                    b.ToTable("WorkOrderExternalReceipts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderFieldLock", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("FieldName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<DateTime>("LockedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("LockedByUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkOrderId", "FieldName")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderFieldLocks");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderReconciliationJob", b =>
+                {
+                    b.Property<int>("Id")
+                        .HasColumnType("int");
+
+                    b.Property<int>("CommentsProcessed")
+                        .HasColumnType("int");
+
+                    b.Property<DateTimeOffset?>("CompletedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ErrorCode")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<Guid?>("FenceToken")
+                        .HasColumnType("uniqueidentifier");
+
+                    b.Property<DateTimeOffset?>("LeaseExpiresAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("Reason")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset?>("RequestedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<Guid>("RunId")
+                        .HasColumnType("uniqueidentifier");
+
+                    b.Property<DateTimeOffset?>("StartedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("State")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<int>("WorkOrdersProcessed")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("State");
+
+                    b.ToTable("WorkOrderReconciliationJobs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWebhookDelivery", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BodySha256")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("DeliveryId")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("EventType")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<DateTimeOffset>("OccurredAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<DateTimeOffset>("ProcessedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DeliveryId")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderWebhookDeliveries");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWeekRolledLedger", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CorrelationId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("ProcessedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateOnly>("SourceWeekStart")
+                        .HasColumnType("date");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkOrderId", "SourceWeekStart")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderWeekRolledLedgers");
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRole", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ConcurrencyStamp")
+                        .IsConcurrencyToken()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("NormalizedName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique()
+                        .HasDatabaseName("RoleNameIndex")
+                        .HasFilter("[NormalizedName] IS NOT NULL");
+
+                    b.ToTable("AspNetRoles", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRoleClaim<string>", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ClaimType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ClaimValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("RoleId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AspNetRoleClaims", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserClaim<string>", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ClaimType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ClaimValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UserId");
+
+                    b.ToTable("AspNetUserClaims", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserLogin<string>", b =>
+                {
+                    b.Property<string>("LoginProvider")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ProviderKey")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ProviderDisplayName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("LoginProvider", "ProviderKey");
+
+                    b.HasIndex("UserId");
+
+                    b.ToTable("AspNetUserLogins", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserRole<string>", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("RoleId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("UserId", "RoleId");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AspNetUserRoles", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserToken<string>", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("LoginProvider")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Value")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("UserId", "LoginProvider", "Name");
+
+                    b.ToTable("AspNetUserTokens", (string)null);
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Addresses", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany("Addresses")
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contact")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Contact");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Comments", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("Comments")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "ApplicationUser")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Comments")
+                        .HasForeignKey("WorkerOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("ApplicationUser");
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ContactDetails", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contact")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Contact");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany("Contacts")
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany("Contacts")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("Dispatches")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Dispatches")
+                        .HasForeignKey("WorkOrderId");
+
+                    b.Navigation("Vendor");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchChecklistItem", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("ChecklistItems")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchSignoff", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("Signoffs")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchUpliftRequest", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany()
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.VendorCompletionDocument", "EvidenceDocument")
+                        .WithMany()
+                        .HasForeignKey("EvidenceDocumentId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("EvidenceDocument");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchWorkOrder", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("DispatchWorkOrders")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Department", "Department")
+                        .WithMany("Employees")
+                        .HasForeignKey("DepartmentId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.JobTitle", "JobTitle")
+                        .WithMany("Employees")
+                        .HasForeignKey("JobTitleId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Region", "Region")
+                        .WithMany("Employees")
+                        .HasForeignKey("RegionId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Department");
+
+                    b.Navigation("JobTitle");
+
+                    b.Navigation("Region");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeAddress", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithOne("Address")
+                        .HasForeignKey("Data.SeaHavenIndustries.EmployeeAddress", "EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeEmail", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany("Emails")
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeePhone", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany("Phones")
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.FollowUps", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany()
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Employee");
+
+                    b.Navigation("Location");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.PMSchedules", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Assets", "Asset")
+                        .WithMany("PMSchedules")
+                        .HasForeignKey("AssetId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Asset");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contacts")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Quotes")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Contacts");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.QuotesLineItems", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Quotes", "Quotes")
+                        .WithMany("LineItems")
+                        .HasForeignKey("QuoteId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Quotes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.SitePreferredVendor", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("SitePreferences")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Location");
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplateItem", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.TaskListTemplate", "Template")
+                        .WithMany("Items")
+                        .HasForeignKey("TaskListTemplateId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Template");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Template", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "AssignToUser")
+                        .WithMany("Templates")
+                        .HasForeignKey("AssignTo")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Category", "Category")
+                        .WithMany("Templates")
+                        .HasForeignKey("CategoryId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "POC")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Locations")
+                        .WithMany("Templates")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("AssignToUser");
+
+                    b.Navigation("Category");
+
+                    b.Navigation("Locations");
+
+                    b.Navigation("POC");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserPermissionOverride", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("User");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.VendorCompany", "Company")
+                        .WithMany("Vendors")
+                        .HasForeignKey("CompanyId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Company");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAccessToken", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany()
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAuditLog", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("AuditLogs")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompletionDocument", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("CompletionDocuments")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany()
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("Vendor");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "AssignToUser")
+                        .WithMany("WorkOrders")
+                        .HasForeignKey("AssignTo")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Locations")
+                        .WithMany("workOrders")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "PrimaryDispatch")
+                        .WithMany()
+                        .HasForeignKey("PrimaryDispatchId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("AssignToUser");
+
+                    b.Navigation("Locations");
+
+                    b.Navigation("PrimaryDispatch");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAttachments", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("workOrderAttachments")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAuditLog", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("User");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderCategories", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Category", "Category")
+                        .WithMany("WorkOrderCategories")
+                        .HasForeignKey("CategoryId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("WorkOrderCategories")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Category");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderContacts", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "POC")
+                        .WithMany("WorkOrderContacts")
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("WorkOrderContacts")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("POC");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderFieldLock", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("FieldLocks")
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWeekRolledLedger", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRoleClaim<string>", b =>
+                {
+                    b.HasOne("Microsoft.AspNetCore.Identity.IdentityRole", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserClaim<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserLogin<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserRole<string>", b =>
+                {
+                    b.HasOne("Microsoft.AspNetCore.Identity.IdentityRole", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserToken<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Accounts", b =>
+                {
+                    b.Navigation("Addresses");
+
+                    b.Navigation("Contacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.Navigation("Templates");
+
+                    b.Navigation("WorkOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.Navigation("PMSchedules");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Category", b =>
+                {
+                    b.Navigation("Templates");
+
+                    b.Navigation("WorkOrderCategories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.Navigation("WorkOrderContacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Department", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.Navigation("ChecklistItems");
+
+                    b.Navigation("Comments");
+
+                    b.Navigation("CompletionDocuments");
+
+                    b.Navigation("DispatchWorkOrders");
+
+                    b.Navigation("Signoffs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.Navigation("Address");
+
+                    b.Navigation("Emails");
+
+                    b.Navigation("Phones");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.JobTitle", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.Navigation("Contacts");
+
+                    b.Navigation("Templates");
+
+                    b.Navigation("workOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.Navigation("LineItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Region", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplate", b =>
+                {
+                    b.Navigation("Items");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.Navigation("AuditLogs");
+
+                    b.Navigation("Dispatches");
+
+                    b.Navigation("SitePreferences");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.Navigation("Vendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.Navigation("Comments");
+
+                    b.Navigation("Dispatches");
+
+                    b.Navigation("FieldLocks");
+
+                    b.Navigation("Quotes");
+
+                    b.Navigation("WorkOrderCategories");
+
+                    b.Navigation("WorkOrderContacts");
+
+                    b.Navigation("workOrderAttachments");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/Data.SeaHavenIndustries/Migrations/20260916201532_SH327_UserPermissionOverrides.cs b/Data.SeaHavenIndustries/Migrations/20260916201532_SH327_UserPermissionOverrides.cs
new file mode 100644
index 0000000..732c20d
--- /dev/null
+++ b/Data.SeaHavenIndustries/Migrations/20260916201532_SH327_UserPermissionOverrides.cs
@@ -0,0 +1,46 @@
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Data.SeaHavenIndustries.Migrations
+{
+    /// <inheritdoc />
+    public partial class SH327_UserPermissionOverrides : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.CreateTable(
+                name: "UserPermissionOverrides",
+                columns: table => new
+                {
+                    UserId = table.Column<string>(type: "nvarchar(450)", maxLength: 450, nullable: false),
+                    PermissionKey = table.Column<string>(type: "nvarchar(64)", maxLength: 64, nullable: false),
+                    State = table.Column<int>(type: "int", nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("PK_UserPermissionOverrides", x => new { x.UserId, x.PermissionKey });
+                    table.ForeignKey(
+                        name: "FK_UserPermissionOverrides_AspNetUsers_UserId",
+                        column: x => x.UserId,
+                        principalTable: "AspNetUsers",
+                        principalColumn: "Id",
+                        onDelete: ReferentialAction.Restrict);
+                });
+
+            migrationBuilder.CreateIndex(
+                name: "IX_UserPermissionOverrides_UserId_PermissionKey",
+                table: "UserPermissionOverrides",
+                columns: new[] { "UserId", "PermissionKey" },
+                unique: true);
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropTable(
+                name: "UserPermissionOverrides");
+        }
+    }
+}
diff --git a/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs b/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
index 2120abc..b68965a 100644
--- a/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
+++ b/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
@@ -2072,6 +2072,28 @@ namespace Data.SeaHavenIndustries.Migrations
                     b.ToTable("Trades");
                 });
 
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserPermissionOverride", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("PermissionKey")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<int>("State")
+                        .HasColumnType("int");
+
+                    b.HasKey("UserId", "PermissionKey");
+
+                    b.HasIndex("UserId", "PermissionKey")
+                        .IsUnique()
+                        .HasDatabaseName("IX_UserPermissionOverrides_UserId_PermissionKey");
+
+                    b.ToTable("UserPermissionOverrides");
+                });
+
             modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
                 {
                     b.Property<int>("Id")
@@ -3616,6 +3638,17 @@ namespace Data.SeaHavenIndustries.Migrations
                     b.Navigation("POC");
                 });
 
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserPermissionOverride", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("User");
+                });
+
             modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
                 {
                     b.HasOne("Data.SeaHavenIndustries.VendorCompany", "Company")
diff --git a/SeaHaven.Services.Tests/TeamPermissionPolicyTests.cs b/SeaHaven.Services.Tests/TeamPermissionPolicyTests.cs
new file mode 100644
index 0000000..0294e22
--- /dev/null
+++ b/SeaHaven.Services.Tests/TeamPermissionPolicyTests.cs
@@ -0,0 +1,248 @@
+using Data.SeaHavenIndustries.Enums;
+using FluentAssertions;
+using SeaHaven.Services.Constants;
+using SeaHaven.Services.Implementation;
+using Xunit;
+
+namespace SeaHaven.Services.Tests;
+
+public class TeamPermissionPolicyTests
+{
+    private static readonly string[] DispatcherKeys =
+    {
+        TeamPermissionKeys.CreateVendors,
+        TeamPermissionKeys.EditVendors,
+        TeamPermissionKeys.DeactivateVendors,
+        TeamPermissionKeys.CreateSites,
+        TeamPermissionKeys.EditSites,
+        TeamPermissionKeys.CreateWorkOrders,
+        TeamPermissionKeys.EditOthersWorkOrders,
+        TeamPermissionKeys.CancelWorkOrders,
+        TeamPermissionKeys.RequestUplifts,
+        TeamPermissionKeys.AutoApproveUplifts
+    };
+
+    private static readonly string[] SchedulerOnlyKeys =
+    {
+        TeamPermissionKeys.DeleteSites,
+        TeamPermissionKeys.CreateServices,
+        TeamPermissionKeys.EditServices,
+        TeamPermissionKeys.CreateCompletionDocTemplates,
+        TeamPermissionKeys.EditCompletionDocTemplates,
+        TeamPermissionKeys.ViewAllDispatchersOnDashboard
+    };
+
+    private static readonly string[] AdminOnlyKeys =
+    {
+        TeamPermissionKeys.ManageTeamMembers,
+        TeamPermissionKeys.ChangeTeamMemberRole,
+        TeamPermissionKeys.DeactivateServices,
+        TeamPermissionKeys.DeleteCompletionDocTemplates,
+        TeamPermissionKeys.DeleteWorkOrders,
+        TeamPermissionKeys.ReviewUplifts
+    };
+
+    private static IReadOnlyDictionary<string, UserPermissionState> Overrides(
+        string key, UserPermissionState state) =>
+        new Dictionary<string, UserPermissionState>(StringComparer.OrdinalIgnoreCase)
+        {
+            [key] = state
+        };
+
+    [Fact]
+    public void Registry_Exposes_Exactly_The_22_Prototype_Keys()
+    {
+        TeamPermissionKeys.All.Should().HaveCount(22);
+        TeamPermissionKeys.KnownKeys.Should().HaveCount(22);
+        TeamPermissionKeys.All.Should().OnlyHaveUniqueItems();
+        TeamPermissionKeys.All.Should().OnlyContain(key => !string.IsNullOrWhiteSpace(key));
+        TeamPermissionKeys.All.Should().BeEquivalentTo(new[]
+        {
+            "manageTeamMembers",
+            "changeTeamMemberRole",
+            "createVendors",
+            "editVendors",
+            "deactivateVendors",
+            "createSites",
+            "editSites",
+            "deleteSites",
+            "createServices",
+            "editServices",
+            "deactivateServices",
+            "createCompletionDocTemplates",
+            "editCompletionDocTemplates",
+            "deleteCompletionDocTemplates",
+            "createWorkOrders",
+            "editOthersWorkOrders",
+            "cancelWorkOrders",
+            "deleteWorkOrders",
+            "requestUplifts",
+            "autoApproveUplifts",
+            "reviewUplifts",
+            "viewAllDispatchersOnDashboard"
+        });
+    }
+
+    [Fact]
+    public void Registry_IsKnown_Is_Case_Insensitive_And_Rejects_Unknown_Keys()
+    {
+        TeamPermissionKeys.IsKnown("CREATEVENDORS").Should().BeTrue();
+        TeamPermissionKeys.IsKnown("autoApproveUplifts").Should().BeTrue();
+        TeamPermissionKeys.IsKnown("nope.unknown").Should().BeFalse();
+        TeamPermissionKeys.IsKnown("").Should().BeFalse();
+        TeamPermissionKeys.IsKnown(null).Should().BeFalse();
+    }
+
+    [Fact]
+    public void Dispatcher_Gets_Exactly_Prototype_Defaults()
+    {
+        var policy = new TeamPermissionPolicy();
+
+        foreach (var key in TeamPermissionKeys.All)
+        {
+            var expected = DispatcherKeys.Contains(key, StringComparer.Ordinal);
+            policy.IsAllowed("Dispatcher", key).Should().Be(expected,
+                $"Dispatcher default for '{key}' should be {expected}");
+        }
+    }
+
+    [Fact]
+    public void Scheduler_Gets_Exactly_Prototype_Defaults()
+    {
+        var policy = new TeamPermissionPolicy();
+
+        foreach (var key in TeamPermissionKeys.All)
+        {
+            var expected = SchedulerOnlyKeys.Contains(key, StringComparer.Ordinal)
+                || DispatcherKeys.Contains(key, StringComparer.Ordinal)
+                    && key is not TeamPermissionKeys.RequestUplifts
+                    && key is not TeamPermissionKeys.AutoApproveUplifts;
+
+            policy.IsAllowed("Scheduler", key).Should().Be(expected,
+                $"Scheduler default for '{key}' should be {expected}");
+        }
+    }
+
+    [Fact]
+    public void Admin_Has_Effective_Access_To_Every_Key()
+    {
+        var policy = new TeamPermissionPolicy();
+
+        foreach (var key in TeamPermissionKeys.All)
+            policy.IsAllowed("Admin", key).Should().BeTrue($"Admin should hold '{key}'");
+    }
+
+    [Fact]
+    public void Role_Recognition_Is_Case_Insensitive()
+    {
+        var policy = new TeamPermissionPolicy();
+
+        policy.IsAllowed("dIsPaTcHeR", TeamPermissionKeys.CreateVendors).Should().BeTrue();
+        policy.IsAllowed("SCHEDULER", TeamPermissionKeys.DeleteSites).Should().BeTrue();
+        policy.IsAllowed("admin", TeamPermissionKeys.ReviewUplifts).Should().BeTrue();
+
+        policy.IsAllowed("dIsPaTcHeR", TeamPermissionKeys.DeleteSites).Should().BeFalse();
+        policy.IsAllowed("SCHEDULER", TeamPermissionKeys.AutoApproveUplifts).Should().BeFalse();
+    }
+
+    [Theory]
+    [InlineData("Manager")]
+    [InlineData("OfficeAdmin")]
+    [InlineData("")]
+    [InlineData(null)]
+    public void Unknown_And_Legacy_Roles_Receive_No_Permissions(string? role)
+    {
+        var policy = new TeamPermissionPolicy();
+
+        foreach (var key in TeamPermissionKeys.All)
+            policy.IsAllowed(role, key).Should().BeFalse(
+                $"unknown/legacy role '{role}' must not hold '{key}'");
+    }
+
+    [Fact]
+    public void Unknown_Role_Gains_Nothing_Even_With_Allow_Overrides()
+    {
+        var policy = new TeamPermissionPolicy();
+
+        foreach (var key in TeamPermissionKeys.All)
+            policy.IsAllowed("Manager", key, Overrides(key, UserPermissionState.Allow))
+                .Should().BeFalse($"an unknown role must not be elevated via '{key}'");
+    }
+
+    [Fact]
+    public void Allow_Override_Grants_Key_Outside_Role_Default()
+    {
+        var policy = new TeamPermissionPolicy();
+
+        policy.IsAllowed("Scheduler", TeamPermissionKeys.RequestUplifts)
+            .Should().BeFalse();
+        policy.IsAllowed(
+                "Scheduler",
+                TeamPermissionKeys.RequestUplifts,
+                Overrides(TeamPermissionKeys.RequestUplifts, UserPermissionState.Allow))
+            .Should().BeTrue();
+    }
+
+    [Fact]
+    public void Deny_Override_Removes_Key_Inside_Role_Default()
+    {
+        var policy = new TeamPermissionPolicy();
+
+        policy.IsAllowed("Dispatcher", TeamPermissionKeys.CreateVendors)
+            .Should().BeTrue();
+        policy.IsAllowed(
+                "Dispatcher",
+                TeamPermissionKeys.CreateVendors,
+                Overrides(TeamPermissionKeys.CreateVendors, UserPermissionState.Deny))
+            .Should().BeFalse();
+    }
+
+    [Fact]
+    public void Unset_Override_And_Missing_Row_Fall_Back_To_Role_Default()
+    {
+        var policy = new TeamPermissionPolicy();
+
+        policy.IsAllowed(
+                "Dispatcher",
+                TeamPermissionKeys.CreateWorkOrders,
+                Overrides(TeamPermissionKeys.CreateWorkOrders, UserPermissionState.Unset))
+            .Should().BeTrue();
+
+        policy.IsAllowed(
+                "Scheduler",
+                TeamPermissionKeys.RequestUplifts,
+                Overrides(TeamPermissionKeys.RequestUplifts, UserPermissionState.Unset))
+            .Should().BeFalse();
+
+        policy.IsAllowed(
+                "Scheduler",
+                TeamPermissionKeys.RequestUplifts,
+                new Dictionary<string, UserPermissionState>())
+            .Should().BeFalse();
+    }
+
+    [Fact]
+    public void Admin_Is_Immune_To_Overrides()
+    {
+        var policy = new TeamPermissionPolicy();
+
+        foreach (var key in TeamPermissionKeys.All)
+        {
+            policy.IsAllowed("Admin", key, Overrides(key, UserPermissionState.Deny))
+                .Should().BeTrue($"Admin must keep '{key}' despite a Deny override");
+            policy.IsAllowed("ADMIN", key, Overrides(key, UserPermissionState.Unset))
+                .Should().BeTrue();
+        }
+    }
+
+    [Fact]
+    public void Unknown_Permission_Key_Is_Denied_For_Every_Role()
+    {
+        var policy = new TeamPermissionPolicy();
+
+        policy.IsAllowed("Admin", "nope.unknown").Should().BeFalse();
+        policy.IsAllowed("Dispatcher", "nope.unknown").Should().BeFalse();
+        policy.IsAllowed("Admin", "nope.unknown", Overrides("nope.unknown", UserPermissionState.Allow))
+            .Should().BeFalse();
+    }
+}
diff --git a/SeaHaven.Services/Constants/TeamPermissionKeys.cs b/SeaHaven.Services/Constants/TeamPermissionKeys.cs
new file mode 100644
index 0000000..ceae372
--- /dev/null
+++ b/SeaHaven.Services/Constants/TeamPermissionKeys.cs
@@ -0,0 +1,67 @@
+namespace SeaHaven.Services.Constants
+{
+    /// <summary>
+    /// Canonical, immutable registry of team-members permission keys.
+    /// Exactly the 22 approved prototype keys; stored overrides must reference
+    /// these keys. Keys are stable identifiers and must never be renamed.
+    /// </summary>
+    public static class TeamPermissionKeys
+    {
+        public const string ManageTeamMembers = "manageTeamMembers";
+        public const string ChangeTeamMemberRole = "changeTeamMemberRole";
+        public const string CreateVendors = "createVendors";
+        public const string EditVendors = "editVendors";
+        public const string DeactivateVendors = "deactivateVendors";
+        public const string CreateSites = "createSites";
+        public const string EditSites = "editSites";
+        public const string DeleteSites = "deleteSites";
+        public const string CreateServices = "createServices";
+        public const string EditServices = "editServices";
+        public const string DeactivateServices = "deactivateServices";
+        public const string CreateCompletionDocTemplates = "createCompletionDocTemplates";
+        public const string EditCompletionDocTemplates = "editCompletionDocTemplates";
+        public const string DeleteCompletionDocTemplates = "deleteCompletionDocTemplates";
+        public const string CreateWorkOrders = "createWorkOrders";
+        public const string EditOthersWorkOrders = "editOthersWorkOrders";
+        public const string CancelWorkOrders = "cancelWorkOrders";
+        public const string DeleteWorkOrders = "deleteWorkOrders";
+        public const string RequestUplifts = "requestUplifts";
+        public const string AutoApproveUplifts = "autoApproveUplifts";
+        public const string ReviewUplifts = "reviewUplifts";
+        public const string ViewAllDispatchersOnDashboard = "viewAllDispatchersOnDashboard";
+
+        private static readonly IReadOnlyList<string> AllKeys = Array.AsReadOnly(new[]
+        {
+            ManageTeamMembers,
+            ChangeTeamMemberRole,
+            CreateVendors,
+            EditVendors,
+            DeactivateVendors,
+            CreateSites,
+            EditSites,
+            DeleteSites,
+            CreateServices,
+            EditServices,
+            DeactivateServices,
+            CreateCompletionDocTemplates,
+            EditCompletionDocTemplates,
+            DeleteCompletionDocTemplates,
+            CreateWorkOrders,
+            EditOthersWorkOrders,
+            CancelWorkOrders,
+            DeleteWorkOrders,
+            RequestUplifts,
+            AutoApproveUplifts,
+            ReviewUplifts,
+            ViewAllDispatchersOnDashboard
+        });
+
+        public static IReadOnlyList<string> All => AllKeys;
+
+        public static IReadOnlySet<string> KnownKeys { get; } =
+            new HashSet<string>(AllKeys, StringComparer.OrdinalIgnoreCase);
+
+        public static bool IsKnown(string? permissionKey) =>
+            !string.IsNullOrWhiteSpace(permissionKey) && KnownKeys.Contains(permissionKey);
+    }
+}
diff --git a/SeaHaven.Services/Implementation/TeamPermissionPolicy.cs b/SeaHaven.Services/Implementation/TeamPermissionPolicy.cs
new file mode 100644
index 0000000..31faa86
--- /dev/null
+++ b/SeaHaven.Services/Implementation/TeamPermissionPolicy.cs
@@ -0,0 +1,88 @@
+using Data.SeaHavenIndustries.Enums;
+using SeaHaven.Services.Constants;
+using SeaHaven.Services.Interfaces;
+
+namespace SeaHaven.Services.Implementation
+{
+    public sealed class TeamPermissionPolicy : ITeamPermissionPolicy
+    {
+        private static readonly StringComparer KeyComparer = StringComparer.OrdinalIgnoreCase;
+
+        private static readonly HashSet<string> DispatcherDefaults = new(KeyComparer)
+        {
+            TeamPermissionKeys.CreateVendors,
+            TeamPermissionKeys.EditVendors,
+            TeamPermissionKeys.DeactivateVendors,
+            TeamPermissionKeys.CreateSites,
+            TeamPermissionKeys.EditSites,
+            TeamPermissionKeys.CreateWorkOrders,
+            TeamPermissionKeys.EditOthersWorkOrders,
+            TeamPermissionKeys.CancelWorkOrders,
+            TeamPermissionKeys.RequestUplifts,
+            TeamPermissionKeys.AutoApproveUplifts
+        };
+
+        private static readonly HashSet<string> SchedulerDefaults = new(
+            DispatcherDefaults
+                .Except(new[]
+                {
+                    TeamPermissionKeys.RequestUplifts,
+                    TeamPermissionKeys.AutoApproveUplifts
+                }, KeyComparer)
+                .Concat(new[]
+                {
+                    TeamPermissionKeys.DeleteSites,
+                    TeamPermissionKeys.CreateServices,
+                    TeamPermissionKeys.EditServices,
+                    TeamPermissionKeys.CreateCompletionDocTemplates,
+                    TeamPermissionKeys.EditCompletionDocTemplates,
+                    TeamPermissionKeys.ViewAllDispatchersOnDashboard
+                }), KeyComparer);
+
+        public bool IsAllowed(
+            string? roleName,
+            string permissionKey,
+            IReadOnlyDictionary<string, UserPermissionState>? overrides = null)
+        {
+            if (!TeamPermissionKeys.IsKnown(permissionKey))
+                return false;
+
+            if (IsAdmin(roleName))
+                return true;
+
+            var defaults = ResolveRoleDefaults(roleName);
+            if (defaults is null)
+                return false;
+
+            if (overrides is not null
+                && overrides.TryGetValue(permissionKey, out var state))
+            {
+                return state switch
+                {
+                    UserPermissionState.Allow => true,
+                    UserPermissionState.Deny => false,
+                    _ => defaults.Contains(permissionKey)
+                };
+            }
+
+            return defaults.Contains(permissionKey);
+        }
+
+        private static bool IsAdmin(string? roleName) =>
+            string.Equals(roleName, "Admin", StringComparison.OrdinalIgnoreCase);
+
+        private static IReadOnlySet<string>? ResolveRoleDefaults(string? roleName)
+        {
+            if (string.IsNullOrWhiteSpace(roleName))
+                return null;
+
+            if (roleName.Equals("Dispatcher", StringComparison.OrdinalIgnoreCase))
+                return DispatcherDefaults;
+
+            if (roleName.Equals("Scheduler", StringComparison.OrdinalIgnoreCase))
+                return SchedulerDefaults;
+
+            return null;
+        }
+    }
+}
diff --git a/SeaHaven.Services/Interfaces/ITeamPermissionPolicy.cs b/SeaHaven.Services/Interfaces/ITeamPermissionPolicy.cs
new file mode 100644
index 0000000..1d66616
--- /dev/null
+++ b/SeaHaven.Services/Interfaces/ITeamPermissionPolicy.cs
@@ -0,0 +1,23 @@
+using Data.SeaHavenIndustries.Enums;
+
+namespace SeaHaven.Services.Interfaces
+{
+    /// <summary>
+    /// Pure evaluator for team-members permissions. Applies explicit
+    /// per-person overrides on top of role defaults; Admin has effective access
+    /// to every canonical key regardless of stored values. Unknown or legacy
+    /// roles receive no permissions.
+    /// </summary>
+    public interface ITeamPermissionPolicy
+    {
+        /// <summary>
+        /// Resolves whether a user in <paramref name="roleName"/> holds
+        /// <paramref name="permissionKey"/>. <paramref name="overrides"/> is the
+        /// person's stored override set (missing key behaves as Unset).
+        /// </summary>
+        bool IsAllowed(
+            string? roleName,
+            string permissionKey,
+            IReadOnlyDictionary<string, UserPermissionState>? overrides = null);
+    }
+}

From 0194748e3b8fc989b5c890e93c12df651636f44a Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 17:58:08 -0300
Subject: [PATCH 020/183] feat(dashboard): add dispatcher performance (SH-347)

---
 .../DashboardServiceTests.cs                  | 63 +++++++++++++++++++
 .../Controllers/DashboardController.cs        | 26 ++++++++
 .../Implementation/DashboardDataService.cs    | 12 ++--
 .../Interfaces/IDashboardDataService.cs       |  1 +
 SeaHaven.Services/DTOs/DashboardDTOs.cs       | 18 ++++++
 .../Implementation/DashboardService.cs        | 51 +++++++++++++++
 .../Interfaces/IDashboardService.cs           |  6 ++
 7 files changed, 172 insertions(+), 5 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs b/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
index 3d426c9..ff65c94 100644
--- a/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
@@ -237,5 +237,68 @@ public class DashboardServiceTests
         adminResult.TotalDispatchers.Should().Be(2);
         adminResult.Items.Select(item => item.DispatcherName)
             .Should().ContainInOrder("Ada One", "Ben Two");
+
+        var performance = await NewService(ctx).GetPerformanceAsync(
+            AccountUser(1),
+            new DashboardStatsQueryDTO(),
+            1,
+            CancellationToken.None);
+
+        performance.TotalDispatchers.Should().Be(2);
+        performance.Items[0].DispatcherName.Should().Be("Ada One");
+    }
+
+    [Fact]
+    public async Task GetPerformanceAsync_UsesDueOnlyRateAndOriginalDateResolution()
+    {
+        using var ctx = NewContext();
+        ctx.Roles.Add(new IdentityRole
+        {
+            Id = "dispatcher-role",
+            Name = "Dispatcher",
+            NormalizedName = "DISPATCHER"
+        });
+        ctx.Users.Add(new ApplicationUser
+        {
+            Id = "dispatcher-1",
+            FirstName = "Ada",
+            LastName = "One",
+            Color = "#123456"
+        });
+        ctx.UserRoles.Add(new IdentityUserRole<string>
+        {
+            UserId = "dispatcher-1",
+            RoleId = "dispatcher-role"
+        });
+        var today = DashboardBusinessTime.Today();
+        ctx.workOrders.AddRange(
+            new WorkOrder
+            {
+                AccountId = 1,
+                AssignTo = "dispatcher-1",
+                LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Completed,
+                ScheduledDate = today.ToDateTime(TimeOnly.MinValue),
+                OriginalDate = today.AddDays(-5),
+                CompletedDate = today.AddDays(-2).ToDateTime(TimeOnly.MinValue)
+            },
+            new WorkOrder
+            {
+                AccountId = 1,
+                AssignTo = "dispatcher-1",
+                LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Scheduled,
+                ScheduledDate = today.AddDays(3).ToDateTime(TimeOnly.MinValue)
+            });
+        ctx.SaveChanges();
+
+        var result = await NewService(ctx).GetPerformanceAsync(
+            AccountUser(1),
+            new DashboardStatsQueryDTO(),
+            1,
+            CancellationToken.None);
+
+        result.Items.Should().ContainSingle();
+        result.Items[0].CompletionRate.Should().Be(100m);
+        result.Items[0].AverageResolutionDays.Should().Be(3m);
+        result.Items[0].Color.Should().Be("#123456");
     }
 }
diff --git a/Api.SeaHavenIndustries/Controllers/DashboardController.cs b/Api.SeaHavenIndustries/Controllers/DashboardController.cs
index 91fc35e..aff03f3 100644
--- a/Api.SeaHavenIndustries/Controllers/DashboardController.cs
+++ b/Api.SeaHavenIndustries/Controllers/DashboardController.cs
@@ -63,5 +63,31 @@ namespace Api.SeaHavenIndustries.Controllers
                 return BadRequest(ex.Message);
             }
         }
+
+        [HttpGet("Performance")]
+        public async Task<IActionResult> GetPerformance(
+            [FromQuery] DashboardStatsQueryDTO query,
+            [FromQuery] int page = 1,
+            CancellationToken cancellationToken = default)
+        {
+            try
+            {
+                return Ok(await _dashboardService.GetPerformanceAsync(
+                    User, query, page, cancellationToken));
+            }
+            catch (SeaHaven.Services.Exceptions.WorkOrderBoardValidationException ex)
+                when (ex.Code == "Forbidden")
+            {
+                return StatusCode(StatusCodes.Status403Forbidden, new
+                {
+                    code = ex.Code,
+                    message = ex.Message
+                });
+            }
+            catch (ArgumentOutOfRangeException ex)
+            {
+                return BadRequest(ex.Message);
+            }
+        }
     }
 }
diff --git a/SeaHaven.DataServices/Implementation/DashboardDataService.cs b/SeaHaven.DataServices/Implementation/DashboardDataService.cs
index f571302..14b1ffa 100644
--- a/SeaHaven.DataServices/Implementation/DashboardDataService.cs
+++ b/SeaHaven.DataServices/Implementation/DashboardDataService.cs
@@ -92,7 +92,8 @@ namespace SeaHaven.DataServices.Implementation
                                   select new
                                   {
                                       user.Id,
-                                      Name = ((user.FirstName ?? "") + " " + (user.LastName ?? "")).Trim()
+                                      Name = ((user.FirstName ?? "") + " " + (user.LastName ?? "")).Trim(),
+                                      user.Color
                                   };
 
             var workOrders = WorkOrderBoardQueryFilters.ApplyBaseScope(_context.workOrders.AsNoTracking());
@@ -140,10 +141,11 @@ namespace SeaHaven.DataServices.Implementation
                     {
                         var count = matchingCounts.SingleOrDefault();
                         return new DashboardDispatcherWorkload(
-                            user.Id,
-                            user.Name,
-                            count?.TotalCount ?? 0,
-                            count?.OpenCount ?? 0);
+                                user.Id,
+                                user.Name,
+                                user.Color,
+                                count?.TotalCount ?? 0,
+                                count?.OpenCount ?? 0);
                     })
                 .ToList();
         }
diff --git a/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs b/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs
index dcc77b1..bd3a394 100644
--- a/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs
@@ -36,6 +36,7 @@ namespace SeaHaven.DataServices.Interfaces
     public sealed record DashboardDispatcherWorkload(
         string DispatcherId,
         string DispatcherName,
+        string? Color,
         int TotalCount,
         int OpenCount);
 
diff --git a/SeaHaven.Services/DTOs/DashboardDTOs.cs b/SeaHaven.Services/DTOs/DashboardDTOs.cs
index 8af4d3f..6034544 100644
--- a/SeaHaven.Services/DTOs/DashboardDTOs.cs
+++ b/SeaHaven.Services/DTOs/DashboardDTOs.cs
@@ -18,10 +18,28 @@ namespace SeaHaven.Services.DTOs
     {
         public string DispatcherId { get; init; } = string.Empty;
         public string DispatcherName { get; init; } = string.Empty;
+        public string? Color { get; init; }
         public int TotalCount { get; init; }
         public int OpenCount { get; init; }
     }
 
+    public sealed class DashboardPerformanceResponseDTO
+    {
+        public IReadOnlyList<DashboardPerformanceRowDTO> Items { get; init; } = [];
+        public int Page { get; init; }
+        public int PageSize { get; init; }
+        public int TotalDispatchers { get; init; }
+    }
+
+    public sealed class DashboardPerformanceRowDTO
+    {
+        public string DispatcherId { get; init; } = string.Empty;
+        public string DispatcherName { get; init; } = string.Empty;
+        public string? Color { get; init; }
+        public decimal CompletionRate { get; init; }
+        public decimal? AverageResolutionDays { get; init; }
+    }
+
     public class DashboardStatsDTO
     {
         public int Total { get; set; }
diff --git a/SeaHaven.Services/Implementation/DashboardService.cs b/SeaHaven.Services/Implementation/DashboardService.cs
index ef6364c..aaad3f1 100644
--- a/SeaHaven.Services/Implementation/DashboardService.cs
+++ b/SeaHaven.Services/Implementation/DashboardService.cs
@@ -93,6 +93,7 @@ namespace SeaHaven.Services.Implementation
                     {
                         DispatcherId = row.DispatcherId,
                         DispatcherName = row.DispatcherName,
+                        Color = row.Color,
                         TotalCount = row.TotalCount,
                         OpenCount = row.OpenCount
                     }).ToList(),
@@ -101,5 +102,55 @@ namespace SeaHaven.Services.Implementation
                 TotalDispatchers = orderedRows.Count
             };
         }
+
+        public async Task<DashboardPerformanceResponseDTO> GetPerformanceAsync(
+            ClaimsPrincipal user,
+            DashboardStatsQueryDTO query,
+            int page,
+            CancellationToken cancellationToken)
+        {
+            if (page < 1)
+                throw new ArgumentOutOfRangeException(nameof(page));
+
+            var accountId = _accountResolver.ResolveAccountFilter(user);
+            var dispatcherId = user.IsInRole("Dispatcher")
+                ? user.FindFirstValue(ClaimTypes.NameIdentifier)
+                : null;
+            if (user.IsInRole("Dispatcher") && string.IsNullOrWhiteSpace(dispatcherId))
+                throw new WorkOrderBoardValidationException("Forbidden", "Dispatcher identity is required.");
+
+            var directory = await _dataService.GetDispatcherWorkloadAsync(
+                accountId, dispatcherId, query.DateFrom, query.DateTo, cancellationToken);
+            var workOrders = await _dataService.GetDashboardWorkOrdersAsync(
+                accountId, dispatcherId, query.DateFrom, query.DateTo, cancellationToken);
+            var today = DashboardBusinessTime.Today();
+            var rows = directory.Select(dispatcher =>
+            {
+                var metrics = DashboardMetrics.Calculate(
+                    workOrders.Where(workOrder => workOrder.AssignTo == dispatcher.DispatcherId).ToList(),
+                    today);
+                return new DashboardPerformanceRowDTO
+                {
+                    DispatcherId = dispatcher.DispatcherId,
+                    DispatcherName = dispatcher.DispatcherName,
+                    Color = dispatcher.Color,
+                    CompletionRate = metrics.CompletionRate,
+                    AverageResolutionDays = metrics.AverageResolutionDays
+                };
+            })
+                .OrderByDescending(row => row.CompletionRate)
+                .ThenBy(row => row.DispatcherName, StringComparer.OrdinalIgnoreCase)
+                .ThenBy(row => row.DispatcherId, StringComparer.Ordinal)
+                .ToList();
+            const int pageSize = 10;
+
+            return new DashboardPerformanceResponseDTO
+            {
+                Items = rows.Skip((page - 1) * pageSize).Take(pageSize).ToList(),
+                Page = page,
+                PageSize = pageSize,
+                TotalDispatchers = rows.Count
+            };
+        }
     }
 }
diff --git a/SeaHaven.Services/Interfaces/IDashboardService.cs b/SeaHaven.Services/Interfaces/IDashboardService.cs
index cdb572c..8b74dd2 100644
--- a/SeaHaven.Services/Interfaces/IDashboardService.cs
+++ b/SeaHaven.Services/Interfaces/IDashboardService.cs
@@ -15,5 +15,11 @@ namespace SeaHaven.Services.Interfaces
             DashboardStatsQueryDTO query,
             int page,
             CancellationToken cancellationToken);
+
+        Task<DashboardPerformanceResponseDTO> GetPerformanceAsync(
+            ClaimsPrincipal user,
+            DashboardStatsQueryDTO query,
+            int page,
+            CancellationToken cancellationToken);
     }
 }

From 441735d39d30b23e724dd0b90480f8854ff6baa6 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 18:02:02 -0300
Subject: [PATCH 021/183] feat(permissions): expose team member permission
 overrides (SH-328)

---
 .../TeamPermissionOverrideDataServiceTests.cs |  80 +++++++++++
 .../Controllers/TeamPermissionController.cs   |  65 +++++++++
 .../Dto/TeamPermissionReadModels.cs           |  11 ++
 .../TeamPermissionOverrideDataService.cs      |  84 +++++++++++
 .../ITeamPermissionOverrideDataService.cs     |  14 ++
 .../TeamPermissionServiceTests.cs             | 130 ++++++++++++++++++
 SeaHaven.Services/DTOs/TeamPermissionDTOs.cs  |  49 +++++++
 .../Implementation/TeamPermissionService.cs   |  96 +++++++++++++
 .../Interfaces/ITeamPermissionService.cs      |  20 +++
 9 files changed, 549 insertions(+)
 create mode 100644 Api.SeaHavenIndustries.Tests/TeamPermissionOverrideDataServiceTests.cs
 create mode 100644 Api.SeaHavenIndustries/Controllers/TeamPermissionController.cs
 create mode 100644 SeaHaven.DataServices/Dto/TeamPermissionReadModels.cs
 create mode 100644 SeaHaven.DataServices/Implementation/TeamPermissionOverrideDataService.cs
 create mode 100644 SeaHaven.DataServices/Interfaces/ITeamPermissionOverrideDataService.cs
 create mode 100644 SeaHaven.Services.Tests/TeamPermissionServiceTests.cs
 create mode 100644 SeaHaven.Services/DTOs/TeamPermissionDTOs.cs
 create mode 100644 SeaHaven.Services/Implementation/TeamPermissionService.cs
 create mode 100644 SeaHaven.Services/Interfaces/ITeamPermissionService.cs

diff --git a/Api.SeaHavenIndustries.Tests/TeamPermissionOverrideDataServiceTests.cs b/Api.SeaHavenIndustries.Tests/TeamPermissionOverrideDataServiceTests.cs
new file mode 100644
index 0000000..0f0861e
--- /dev/null
+++ b/Api.SeaHavenIndustries.Tests/TeamPermissionOverrideDataServiceTests.cs
@@ -0,0 +1,80 @@
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using FluentAssertions;
+using Microsoft.AspNetCore.Identity;
+using Microsoft.EntityFrameworkCore;
+using SeaHaven.DataServices.Implementation;
+using Xunit;
+
+namespace Api.SeaHavenIndustries.Tests;
+
+public sealed class TeamPermissionOverrideDataServiceTests
+{
+    [Fact]
+    public async Task GetUserAsync_ReturnsIdentityRoleAndStoredOverrides()
+    {
+        await using var context = NewContext();
+        SeedUserWithRole(context, "u1", "Dispatcher");
+        context.UserPermissionOverrides.Add(new UserPermissionOverride
+        {
+            UserId = "u1",
+            PermissionKey = "deleteSites",
+            State = UserPermissionState.Deny
+        });
+        await context.SaveChangesAsync();
+
+        var result = await new TeamPermissionOverrideDataService(context)
+            .GetUserAsync("u1", CancellationToken.None);
+
+        result.Should().NotBeNull();
+        result!.RoleName.Should().Be("Dispatcher");
+        result.Overrides["deleteSites"].Should().Be(UserPermissionState.Deny);
+    }
+
+    [Fact]
+    public async Task SetOverrideAsync_UpsertsOneCompositeKey()
+    {
+        await using var context = NewContext();
+        SeedUserWithRole(context, "u1", "Scheduler");
+        await context.SaveChangesAsync();
+        var service = new TeamPermissionOverrideDataService(context);
+
+        await service.SetOverrideAsync("u1", "deleteSites", UserPermissionState.Allow, CancellationToken.None);
+        await service.SetOverrideAsync("u1", "deleteSites", UserPermissionState.Deny, CancellationToken.None);
+
+        var rows = await context.UserPermissionOverrides.ToListAsync();
+        rows.Should().ContainSingle();
+        rows[0].State.Should().Be(UserPermissionState.Deny);
+    }
+
+    private static ApplicationDbContext NewContext()
+    {
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseInMemoryDatabase(Guid.NewGuid().ToString())
+            .Options;
+        return new ApplicationDbContext(options);
+    }
+
+    private static void SeedUserWithRole(ApplicationDbContext context, string userId, string roleName)
+    {
+        context.Users.Add(new ApplicationUser
+        {
+            Id = userId,
+            UserName = userId,
+            NormalizedUserName = userId.ToUpperInvariant(),
+            Email = userId + "@example.com",
+            NormalizedEmail = (userId + "@example.com").ToUpperInvariant()
+        });
+        context.Roles.Add(new IdentityRole
+        {
+            Id = "role-1",
+            Name = roleName,
+            NormalizedName = roleName.ToUpperInvariant()
+        });
+        context.UserRoles.Add(new IdentityUserRole<string>
+        {
+            UserId = userId,
+            RoleId = "role-1"
+        });
+    }
+}
diff --git a/Api.SeaHavenIndustries/Controllers/TeamPermissionController.cs b/Api.SeaHavenIndustries/Controllers/TeamPermissionController.cs
new file mode 100644
index 0000000..72704cc
--- /dev/null
+++ b/Api.SeaHavenIndustries/Controllers/TeamPermissionController.cs
@@ -0,0 +1,65 @@
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Interfaces;
+
+namespace Api.SeaHavenIndustries.Controllers;
+
+[Authorize]
+[ApiController]
+[Route("api/User/{userId}/Permissions")]
+public sealed class TeamPermissionController : ControllerBase
+{
+    private readonly ITeamPermissionService _permissionService;
+
+    public TeamPermissionController(ITeamPermissionService permissionService)
+    {
+        _permissionService = permissionService;
+    }
+
+    [HttpGet]
+    public async Task<IActionResult> GetProfile(
+        string userId,
+        CancellationToken cancellationToken)
+    {
+        var result = await _permissionService.GetProfileAsync(userId, User, cancellationToken);
+        return ToActionResult(result);
+    }
+
+    [HttpPut("{permissionKey}")]
+    public async Task<IActionResult> SetOverride(
+        string userId,
+        string permissionKey,
+        [FromBody] SetTeamPermissionOverrideDTO request,
+        CancellationToken cancellationToken)
+    {
+        if (!Enum.IsDefined(request.State))
+            return BadRequest(new Response { Status = "Error", Message = "Invalid permission state." });
+
+        var result = await _permissionService.SetOverrideAsync(
+            userId,
+            permissionKey,
+            request.State,
+            User,
+            cancellationToken);
+        return ToActionResult(result);
+    }
+
+    private static IActionResult ToActionResult(
+        TeamPermissionResult<TeamPermissionProfileDTO> result)
+    {
+        return result.Status switch
+        {
+            TeamPermissionResultStatus.Success => new OkObjectResult(result.Value),
+            TeamPermissionResultStatus.Forbidden => new ForbidResult(),
+            TeamPermissionResultStatus.NotFound => new NotFoundObjectResult(
+                new Response { Status = "Error", Message = "User not found." }),
+            TeamPermissionResultStatus.InvalidPermissionKey => new BadRequestObjectResult(
+                new Response { Status = "Error", Message = "Unknown permission key." }),
+            _ => new BadRequestObjectResult(
+                new Response { Status = "Error", Message = "Unable to update permissions." })
+        };
+    }
+}
diff --git a/SeaHaven.DataServices/Dto/TeamPermissionReadModels.cs b/SeaHaven.DataServices/Dto/TeamPermissionReadModels.cs
new file mode 100644
index 0000000..d90a90f
--- /dev/null
+++ b/SeaHaven.DataServices/Dto/TeamPermissionReadModels.cs
@@ -0,0 +1,11 @@
+using Data.SeaHavenIndustries.Enums;
+
+namespace SeaHaven.DataServices.Dto;
+
+public sealed class TeamPermissionUserData
+{
+    public required string UserId { get; init; }
+    public string? RoleName { get; init; }
+    public IReadOnlyDictionary<string, UserPermissionState> Overrides { get; init; }
+        = new Dictionary<string, UserPermissionState>(StringComparer.OrdinalIgnoreCase);
+}
diff --git a/SeaHaven.DataServices/Implementation/TeamPermissionOverrideDataService.cs b/SeaHaven.DataServices/Implementation/TeamPermissionOverrideDataService.cs
new file mode 100644
index 0000000..954e8a4
--- /dev/null
+++ b/SeaHaven.DataServices/Implementation/TeamPermissionOverrideDataService.cs
@@ -0,0 +1,84 @@
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using Microsoft.EntityFrameworkCore;
+using SeaHaven.DataServices.Dto;
+using SeaHaven.DataServices.Interfaces;
+
+namespace SeaHaven.DataServices.Implementation;
+
+public sealed class TeamPermissionOverrideDataService : ITeamPermissionOverrideDataService
+{
+    private readonly ApplicationDbContext _context;
+
+    public TeamPermissionOverrideDataService(ApplicationDbContext context)
+    {
+        _context = context;
+    }
+
+    public async Task<TeamPermissionUserData?> GetUserAsync(
+        string userId,
+        CancellationToken cancellationToken)
+    {
+        var userExists = await _context.Users
+            .AsNoTracking()
+            .AnyAsync(user => user.Id == userId, cancellationToken);
+
+        if (!userExists)
+            return null;
+
+        var roleName = await (
+            from userRole in _context.UserRoles.AsNoTracking()
+            join role in _context.Roles.AsNoTracking()
+                on userRole.RoleId equals role.Id
+            where userRole.UserId == userId
+            select role.Name)
+            .FirstOrDefaultAsync(cancellationToken);
+
+        var overrides = await _context.UserPermissionOverrides
+            .AsNoTracking()
+            .Where(permission => permission.UserId == userId)
+            .ToDictionaryAsync(
+                permission => permission.PermissionKey,
+                permission => permission.State,
+                StringComparer.OrdinalIgnoreCase,
+                cancellationToken);
+
+        return new TeamPermissionUserData
+        {
+            UserId = userId,
+            RoleName = roleName,
+            Overrides = overrides
+        };
+    }
+
+    public async Task SetOverrideAsync(
+        string userId,
+        string permissionKey,
+        UserPermissionState state,
+        CancellationToken cancellationToken)
+    {
+        var existing = await _context.UserPermissionOverrides
+            .SingleOrDefaultAsync(
+                permission => permission.UserId == userId
+                    && permission.PermissionKey == permissionKey,
+                cancellationToken);
+
+        if (existing is null)
+        {
+            await _context.UserPermissionOverrides.AddAsync(
+                new UserPermissionOverride
+                {
+                    UserId = userId,
+                    PermissionKey = permissionKey,
+                    State = state
+                },
+                cancellationToken);
+        }
+        else
+        {
+            existing.State = state;
+        }
+
+        await _context.SaveChangesAsync(cancellationToken);
+    }
+}
diff --git a/SeaHaven.DataServices/Interfaces/ITeamPermissionOverrideDataService.cs b/SeaHaven.DataServices/Interfaces/ITeamPermissionOverrideDataService.cs
new file mode 100644
index 0000000..49d57e2
--- /dev/null
+++ b/SeaHaven.DataServices/Interfaces/ITeamPermissionOverrideDataService.cs
@@ -0,0 +1,14 @@
+using Data.SeaHavenIndustries.Enums;
+using SeaHaven.DataServices.Dto;
+
+namespace SeaHaven.DataServices.Interfaces;
+
+public interface ITeamPermissionOverrideDataService
+{
+    Task<TeamPermissionUserData?> GetUserAsync(string userId, CancellationToken cancellationToken);
+    Task SetOverrideAsync(
+        string userId,
+        string permissionKey,
+        UserPermissionState state,
+        CancellationToken cancellationToken);
+}
diff --git a/SeaHaven.Services.Tests/TeamPermissionServiceTests.cs b/SeaHaven.Services.Tests/TeamPermissionServiceTests.cs
new file mode 100644
index 0000000..048c94b
--- /dev/null
+++ b/SeaHaven.Services.Tests/TeamPermissionServiceTests.cs
@@ -0,0 +1,130 @@
+using Data.SeaHavenIndustries.Enums;
+using FluentAssertions;
+using SeaHaven.DataServices.Dto;
+using SeaHaven.DataServices.Interfaces;
+using SeaHaven.Services.Constants;
+using SeaHaven.Services.Implementation;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Interfaces;
+using System.Security.Claims;
+using Xunit;
+
+namespace SeaHaven.Services.Tests;
+
+public sealed class TeamPermissionServiceTests
+{
+    [Fact]
+    public async Task GetProfile_ReturnsEveryKeyAndRoleDefaults()
+    {
+        var data = new FakeDataService("u1", "Dispatcher");
+        var result = await Service(data).GetProfileAsync("u1", Admin(), CancellationToken.None);
+
+        result.IsSuccess.Should().BeTrue();
+        result.Value!.Permissions.Should().HaveCount(22);
+        result.Value.Permissions.Single(p => p.PermissionKey == TeamPermissionKeys.CreateSites).IsGranted.Should().BeTrue();
+        result.Value.Permissions.Single(p => p.PermissionKey == TeamPermissionKeys.DeleteSites).IsGranted.Should().BeFalse();
+        result.Value.Permissions.Should().OnlyContain(p => p.OverrideState == UserPermissionState.Unset);
+    }
+
+    [Fact]
+    public async Task SetOverride_ChangesOnlyOnePermissionAndPersistsCanonicalKey()
+    {
+        var data = new FakeDataService("u1", "Dispatcher");
+        var result = await Service(data).SetOverrideAsync(
+            "u1", "DELETEsites", UserPermissionState.Allow, Admin(), CancellationToken.None);
+
+        result.IsSuccess.Should().BeTrue();
+        result.Value!.Permissions.Single(p => p.PermissionKey == TeamPermissionKeys.DeleteSites).IsGranted.Should().BeTrue();
+        result.Value.Permissions.Single(p => p.PermissionKey == TeamPermissionKeys.DeleteSites).OverrideState.Should().Be(UserPermissionState.Allow);
+        result.Value.Permissions.Single(p => p.PermissionKey == TeamPermissionKeys.CreateSites).IsGranted.Should().BeTrue();
+        data.LastSet.Should().Be(("u1", TeamPermissionKeys.DeleteSites, UserPermissionState.Allow));
+    }
+
+    [Fact]
+    public async Task SetOverride_RejectsUnknownKeyBeforeDataAccess()
+    {
+        var data = new FakeDataService("u1", "Dispatcher");
+        var result = await Service(data).SetOverrideAsync(
+            "u1", "not-a-permission", UserPermissionState.Allow, Admin(), CancellationToken.None);
+
+        result.Status.Should().Be(TeamPermissionResultStatus.InvalidPermissionKey);
+        data.GetCalls.Should().Be(0);
+    }
+
+    [Fact]
+    public async Task NonAdminCannotReadOrWritePermissions()
+    {
+        var data = new FakeDataService("u1", "Dispatcher");
+        var service = Service(data);
+
+        var read = await service.GetProfileAsync("u1", User("Dispatcher"), CancellationToken.None);
+        var write = await service.SetOverrideAsync("u1", TeamPermissionKeys.CreateSites, UserPermissionState.Deny, User("Dispatcher"), CancellationToken.None);
+
+        read.Status.Should().Be(TeamPermissionResultStatus.Forbidden);
+        write.Status.Should().Be(TeamPermissionResultStatus.Forbidden);
+        data.GetCalls.Should().Be(0);
+    }
+
+    [Fact]
+    public async Task UnknownRoleReceivesNoGrantEvenWhenAnOverrideIsSet()
+    {
+        var data = new FakeDataService("u1", "Legacy");
+        var result = await Service(data).SetOverrideAsync(
+            "u1", TeamPermissionKeys.CreateSites, UserPermissionState.Allow, Admin(), CancellationToken.None);
+
+        result.Value!.Permissions.Should().OnlyContain(p => !p.IsGranted);
+    }
+
+    [Fact]
+    public async Task MissingUserReturnsNotFound()
+    {
+        var data = new FakeDataService(null, null);
+        var result = await Service(data).GetProfileAsync("missing", Admin(), CancellationToken.None);
+
+        result.Status.Should().Be(TeamPermissionResultStatus.NotFound);
+    }
+
+    private static TeamPermissionService Service(FakeDataService data) =>
+        new(data, new TeamPermissionPolicy());
+
+    private static ClaimsPrincipal Admin() => User("Admin");
+
+    private static ClaimsPrincipal User(string role) =>
+        new(new ClaimsIdentity(new[] { new Claim(ClaimTypes.Role, role) }, "test"));
+
+    private sealed class FakeDataService : ITeamPermissionOverrideDataService
+    {
+        private readonly string? _userId;
+        private readonly string? _roleName;
+        private readonly Dictionary<string, UserPermissionState> _overrides = new(StringComparer.OrdinalIgnoreCase);
+
+        public FakeDataService(string? userId, string? roleName)
+        {
+            _userId = userId;
+            _roleName = roleName;
+        }
+
+        public int GetCalls { get; private set; }
+        public (string UserId, string PermissionKey, UserPermissionState State)? LastSet { get; private set; }
+
+        public Task<TeamPermissionUserData?> GetUserAsync(string userId, CancellationToken cancellationToken)
+        {
+            GetCalls++;
+            return Task.FromResult<TeamPermissionUserData?>(_userId != userId
+                ? null
+                : new TeamPermissionUserData
+                {
+                    UserId = userId,
+                    RoleName = _roleName,
+                    Overrides = new Dictionary<string, UserPermissionState>(_overrides, StringComparer.OrdinalIgnoreCase)
+                });
+        }
+
+        public Task SetOverrideAsync(string userId, string permissionKey, UserPermissionState state, CancellationToken cancellationToken)
+        {
+            _overrides[permissionKey] = state;
+            LastSet = (userId, permissionKey, state);
+            return Task.CompletedTask;
+        }
+    }
+}
diff --git a/SeaHaven.Services/DTOs/TeamPermissionDTOs.cs b/SeaHaven.Services/DTOs/TeamPermissionDTOs.cs
new file mode 100644
index 0000000..d930a83
--- /dev/null
+++ b/SeaHaven.Services/DTOs/TeamPermissionDTOs.cs
@@ -0,0 +1,49 @@
+using Data.SeaHavenIndustries.Enums;
+
+namespace SeaHaven.Services.DTOs;
+
+public sealed class TeamPermissionProfileDTO
+{
+    public required string UserId { get; init; }
+    public string? RoleName { get; init; }
+    public required IReadOnlyList<TeamPermissionValueDTO> Permissions { get; init; }
+}
+
+public sealed class TeamPermissionValueDTO
+{
+    public required string PermissionKey { get; init; }
+    public UserPermissionState OverrideState { get; init; }
+    public bool IsGranted { get; init; }
+}
+
+public sealed class SetTeamPermissionOverrideDTO
+{
+    public UserPermissionState State { get; init; }
+}
+
+public enum TeamPermissionResultStatus
+{
+    Success,
+    Forbidden,
+    NotFound,
+    InvalidPermissionKey
+}
+
+public sealed class TeamPermissionResult<T>
+{
+    private TeamPermissionResult(TeamPermissionResultStatus status, T? value)
+    {
+        Status = status;
+        Value = value;
+    }
+
+    public TeamPermissionResultStatus Status { get; }
+    public T? Value { get; }
+    public bool IsSuccess => Status == TeamPermissionResultStatus.Success;
+
+    public static TeamPermissionResult<T> Success(T value) =>
+        new(TeamPermissionResultStatus.Success, value);
+
+    public static TeamPermissionResult<T> Failure(TeamPermissionResultStatus status) =>
+        new(status, default);
+}
diff --git a/SeaHaven.Services/Implementation/TeamPermissionService.cs b/SeaHaven.Services/Implementation/TeamPermissionService.cs
new file mode 100644
index 0000000..34e6f26
--- /dev/null
+++ b/SeaHaven.Services/Implementation/TeamPermissionService.cs
@@ -0,0 +1,96 @@
+using Data.SeaHavenIndustries.Enums;
+using SeaHaven.DataServices.Dto;
+using SeaHaven.DataServices.Interfaces;
+using SeaHaven.Services.Constants;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Interfaces;
+using System.Security.Claims;
+
+namespace SeaHaven.Services.Implementation;
+
+public sealed class TeamPermissionService : ITeamPermissionService
+{
+    private readonly ITeamPermissionOverrideDataService _dataService;
+    private readonly ITeamPermissionPolicy _policy;
+
+    public TeamPermissionService(
+        ITeamPermissionOverrideDataService dataService,
+        ITeamPermissionPolicy policy)
+    {
+        _dataService = dataService;
+        _policy = policy;
+    }
+
+    public async Task<TeamPermissionResult<TeamPermissionProfileDTO>> GetProfileAsync(
+        string userId,
+        ClaimsPrincipal caller,
+        CancellationToken cancellationToken)
+    {
+        if (!IsAdmin(caller))
+            return TeamPermissionResult<TeamPermissionProfileDTO>.Failure(TeamPermissionResultStatus.Forbidden);
+
+        var user = await _dataService.GetUserAsync(userId, cancellationToken);
+        return user is null
+            ? TeamPermissionResult<TeamPermissionProfileDTO>.Failure(TeamPermissionResultStatus.NotFound)
+            : TeamPermissionResult<TeamPermissionProfileDTO>.Success(BuildProfile(user));
+    }
+
+    public async Task<TeamPermissionResult<TeamPermissionProfileDTO>> SetOverrideAsync(
+        string userId,
+        string permissionKey,
+        UserPermissionState state,
+        ClaimsPrincipal caller,
+        CancellationToken cancellationToken)
+    {
+        if (!IsAdmin(caller))
+            return TeamPermissionResult<TeamPermissionProfileDTO>.Failure(TeamPermissionResultStatus.Forbidden);
+
+        var canonicalKey = TeamPermissionKeys.All.FirstOrDefault(
+            key => string.Equals(key, permissionKey, StringComparison.OrdinalIgnoreCase));
+        if (canonicalKey is null)
+            return TeamPermissionResult<TeamPermissionProfileDTO>.Failure(
+                TeamPermissionResultStatus.InvalidPermissionKey);
+
+        var user = await _dataService.GetUserAsync(userId, cancellationToken);
+        if (user is null)
+            return TeamPermissionResult<TeamPermissionProfileDTO>.Failure(TeamPermissionResultStatus.NotFound);
+
+        await _dataService.SetOverrideAsync(userId, canonicalKey, state, cancellationToken);
+
+        var updatedOverrides = user.Overrides.ToDictionary(
+            pair => pair.Key,
+            pair => pair.Value,
+            StringComparer.OrdinalIgnoreCase);
+        updatedOverrides[canonicalKey] = state;
+
+        return TeamPermissionResult<TeamPermissionProfileDTO>.Success(
+            BuildProfile(new TeamPermissionUserData
+            {
+                UserId = user.UserId,
+                RoleName = user.RoleName,
+                Overrides = updatedOverrides
+            }));
+    }
+
+    private TeamPermissionProfileDTO BuildProfile(TeamPermissionUserData user)
+    {
+        return new TeamPermissionProfileDTO
+        {
+            UserId = user.UserId,
+            RoleName = user.RoleName,
+            Permissions = TeamPermissionKeys.All
+                .Select(key => new TeamPermissionValueDTO
+                {
+                    PermissionKey = key,
+                    OverrideState = user.Overrides.TryGetValue(key, out var state)
+                        ? state
+                        : UserPermissionState.Unset,
+                    IsGranted = _policy.IsAllowed(user.RoleName, key, user.Overrides)
+                })
+                .ToList()
+        };
+    }
+
+    private static bool IsAdmin(ClaimsPrincipal? caller) =>
+        caller?.IsInRole("Admin") == true;
+}
diff --git a/SeaHaven.Services/Interfaces/ITeamPermissionService.cs b/SeaHaven.Services/Interfaces/ITeamPermissionService.cs
new file mode 100644
index 0000000..d4b3892
--- /dev/null
+++ b/SeaHaven.Services/Interfaces/ITeamPermissionService.cs
@@ -0,0 +1,20 @@
+using Data.SeaHavenIndustries.Enums;
+using SeaHaven.Services.DTOs;
+using System.Security.Claims;
+
+namespace SeaHaven.Services.Interfaces;
+
+public interface ITeamPermissionService
+{
+    Task<TeamPermissionResult<TeamPermissionProfileDTO>> GetProfileAsync(
+        string userId,
+        ClaimsPrincipal caller,
+        CancellationToken cancellationToken);
+
+    Task<TeamPermissionResult<TeamPermissionProfileDTO>> SetOverrideAsync(
+        string userId,
+        string permissionKey,
+        UserPermissionState state,
+        ClaimsPrincipal caller,
+        CancellationToken cancellationToken);
+}

From 33f517620bc8dea84fac9aa9a1e0db4be50a60b3 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 18:02:57 -0300
Subject: [PATCH 022/183] feat(work-orders): link service selections to
 registry

---
 .../Auth/ApplicationDbContext.cs              |    6 +
 ...606_SH187_WorkOrderServiceLink.Designer.cs | 4134 +++++++++++++++++
 ...260916204606_SH187_WorkOrderServiceLink.cs |   73 +
 .../ApplicationDbContextModelSnapshot.cs      |   16 +
 Data.SeaHavenIndustries/Models/WorkerOrder.cs |    5 +
 .../Helpers/WorkOrderBoardProjection.cs       |    4 +
 .../Interfaces/WorkOrderBoardModels.cs        |    2 +
 SeaHaven.Services/DTOs/WorkOrderBoardDTOs.cs  |    2 +
 .../DTOs/WorkOrderBoardRequestDTOs.cs         |    1 +
 .../Helpers/WorkOrderBoardFieldNames.cs       |    3 +
 .../WorkOrderBoardCreateService.cs            |   52 +-
 .../Implementation/WorkOrderBoardService.cs   |    4 +-
 .../WorkOrderBoardUpdateService.cs            |   90 +-
 .../SH303ServicesRegistryMigrationTests.cs    |   28 +-
 .../WorkOrderBoardServiceTests.cs             |    2 +
 15 files changed, 4417 insertions(+), 5 deletions(-)
 create mode 100644 Data.SeaHavenIndustries/Migrations/20260916204606_SH187_WorkOrderServiceLink.Designer.cs
 create mode 100644 Data.SeaHavenIndustries/Migrations/20260916204606_SH187_WorkOrderServiceLink.cs

diff --git a/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs b/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs
index 5dab440..554f826 100644
--- a/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs
+++ b/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs
@@ -80,6 +80,12 @@ namespace Data.SeaHavenIndustries
                 .HasIndex(w => w.InternalWONumber)
                 .HasFilter("[istemplate] = 0");
 
+            builder.Entity<WorkOrder>()
+                .HasOne(w => w.ServiceDefinition)
+                .WithMany()
+                .HasForeignKey(w => w.ServiceId)
+                .OnDelete(DeleteBehavior.Restrict);
+
             builder.Entity<WorkOrder>()
                 .HasIndex(w => new { w.LifecycleStatus, w.ScheduledDate })
                 .HasFilter("[istemplate] = 0");
diff --git a/Data.SeaHavenIndustries/Migrations/20260916204606_SH187_WorkOrderServiceLink.Designer.cs b/Data.SeaHavenIndustries/Migrations/20260916204606_SH187_WorkOrderServiceLink.Designer.cs
new file mode 100644
index 0000000..9a5cd12
--- /dev/null
+++ b/Data.SeaHavenIndustries/Migrations/20260916204606_SH187_WorkOrderServiceLink.Designer.cs
@@ -0,0 +1,4134 @@
+// <auto-generated />
+using System;
+using Data.SeaHavenIndustries;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Metadata;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+
+#nullable disable
+
+namespace Data.SeaHavenIndustries.Migrations
+{
+    [DbContext(typeof(ApplicationDbContext))]
+    [Migration("20260916204606_SH187_WorkOrderServiceLink")]
+    partial class SH187_WorkOrderServiceLink
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasAnnotation("ProductVersion", "8.0.8")
+                .HasAnnotation("Relational:MaxIdentifierLength", 128);
+
+            SqlServerModelBuilderExtensions.UseIdentityColumns(modelBuilder);
+
+            modelBuilder.HasSequence("WorkOrderInternalNumberSequence");
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Accounts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("CurrencyCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Importance")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("IndustryId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("OwnerEmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Phone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PrivacySetting")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ServiceInstructions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Tags")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("TerritoryId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("TimeZone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Type")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Website")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Accounts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Addresses", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AddressType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Country")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("County")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("ContactId");
+
+                    b.ToTable("Addresses");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int>("AccessFailedCount")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Color")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ConcurrencyStamp")
+                        .IsConcurrencyToken()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Contact")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DeletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<bool>("EmailConfirmed")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("FirstName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Initials")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("LastName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Locations")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("LockoutEnabled")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTimeOffset?>("LockoutEnd")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("NormalizedEmail")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("NormalizedUserName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("PasswordHash")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("PhoneNumberConfirmed")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("SecurityStamp")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("TwoFactorEnabled")
+                        .HasColumnType("bit");
+
+                    b.Property<int?>("Type")
+                        .HasColumnType("int");
+
+                    b.Property<string>("UniqueName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserImage")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("NormalizedEmail")
+                        .HasDatabaseName("EmailIndex");
+
+                    b.HasIndex("NormalizedUserName")
+                        .IsUnique()
+                        .HasDatabaseName("UserNameIndex")
+                        .HasFilter("[NormalizedUserName] IS NOT NULL");
+
+                    b.ToTable("AspNetUsers", (string)null);
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Area", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("Areas");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("AssetCode")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Assets");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Category", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Categories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Comments", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CommentType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Commenter")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Commenttext")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Documents")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalCommentId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("ExternalSourceEmailS3Key")
+                        .HasMaxLength(2048)
+                        .HasColumnType("nvarchar(2048)");
+
+                    b.Property<DateTimeOffset?>("ExternalUpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalVersionHash")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RecordType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int?>("WorkerOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("UserId");
+
+                    b.HasIndex("WorkerOrderId");
+
+                    b.ToTable("Comments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.CompletionDocTemplate", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ServiceKey")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("TemplateUrl")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ServiceKey", "IsActive");
+
+                    b.ToTable("CompletionDocTemplates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ContactDetails", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DateOfBirth")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Gender")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PrivacySetting")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Tags")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Territory")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.ToTable("ContactDetails");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ContactType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FirstName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LastName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("MiddleName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Owner")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("SiteContactOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Title")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Contacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Department", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Departments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AcceptToken")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("AcknowledgedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CommercialStatusUpdatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CompletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DispatchNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DispatchedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("EmailSent")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("EstimatedArrivalAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("EtaManualOverride")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("InvoiceNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("InvoiceStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<decimal?>("NTEAmount")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<string>("PONumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PaymentStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ReplyToAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<DateTime?>("ScheduledDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TechPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("VendorNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<DateTime?>("VerifiedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("VerifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("Dispatches");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchChecklistItem", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CompletedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("CompletedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool>("IsCompleted")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ItemText")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("DispatchChecklistItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchSignoff", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Signature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignatureMethod")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("SignedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("SignoffType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.ToTable("DispatchSignoffs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchUpliftRequest", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<decimal?>("CurrentNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<DateTime?>("DecidedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DecidedByUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DecisionNote")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("EscalatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("EvidenceDocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("ExpiresAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("InitialNotificationSentAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("NotificationError")
+                        .HasMaxLength(500)
+                        .HasColumnType("nvarchar(500)");
+
+                    b.Property<string>("NotificationStatus")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<string>("RequestKey")
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<string>("RequestedByVendorName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<decimal>("RequestedNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<int>("RequiredTier")
+                        .HasColumnType("int");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<string>("Status")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<string>("VendorReason")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId")
+                        .IsUnique()
+                        .HasFilter("[Status] IN ('Pending', 'ChangesRequested')");
+
+                    b.HasIndex("EvidenceDocumentId");
+
+                    b.HasIndex("DispatchId", "RequestKey")
+                        .IsUnique()
+                        .HasFilter("[RequestKey] IS NOT NULL");
+
+                    b.ToTable("DispatchUpliftRequests");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchWorkOrder", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("DispatchWorkOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DropdownOption", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Category")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ParentValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Value")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("DropdownOptions");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("CanChangeProviderNumber")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ConfirmUserName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DateOfBirth")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DepartmentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("EmployeeNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FirstName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Gender")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("HireDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<int?>("JobTitleId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("LastLogin")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LastName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("MiddleName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("PermissionGroupId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("RegionId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("SMSAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TimeZone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Website")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DepartmentId");
+
+                    b.HasIndex("JobTitleId");
+
+                    b.HasIndex("RegionId");
+
+                    b.ToTable("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeAddress", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CountryCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CountyId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("StateCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Street")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("StreetLineTwo")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId")
+                        .IsUnique();
+
+                    b.ToTable("EmployeeAddresses");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeEmail", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<int?>("EmailTypeId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsPrimary")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.ToTable("EmployeeEmails");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeePhone", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Extension")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsPrimary")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Number")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("PhoneTypeId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.ToTable("EmployeePhones");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Events", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("AllDay")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("EndDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("EndTime")
+                        .HasMaxLength(10)
+                        .HasColumnType("nvarchar(10)");
+
+                    b.Property<string>("EventColor")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Location")
+                        .HasMaxLength(150)
+                        .HasColumnType("nvarchar(150)");
+
+                    b.Property<int?>("RecordID")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RecordName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("RecordTargetType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("ReminderMinutes")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime>("StartDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("StartTime")
+                        .HasMaxLength(10)
+                        .HasColumnType("nvarchar(10)");
+
+                    b.Property<string>("Title")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Events");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.FollowUps", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Reason")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("ScheduleDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<TimeSpan>("ScheduleStartTime")
+                        .HasColumnType("time");
+
+                    b.Property<string>("Status")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.HasIndex("LocationId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("FollowUps");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ForgetPasswordCode", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Code")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Email")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("ForgetPasswordCodes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.JobTitle", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("JobTitles");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalLocationId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Latitude")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Longitude")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Title")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.ToTable("Locations");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.PMSchedules", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AssetId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Frequency")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("StartDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AssetId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("PMSchedules");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BillingAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("Date")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ProjectName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("QuotId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ShippingAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("Quotes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.QuotesLineItems", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Descriptions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<decimal?>("Lineitem")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<int?>("LineitemNumber")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("QuoteId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("QuoteId");
+
+                    b.ToTable("QuotesLines");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Region", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Regions");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Service", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("CompletionDocTemplateId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("IconKey")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<bool>("RequiresCompletionDocument")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Trade")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CompletionDocTemplateId");
+
+                    b.HasIndex("IsActive");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.HasIndex("Trade");
+
+                    b.ToTable("Services");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ServiceWorkOrderType", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("ServiceId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ServiceId", "WorkOrderType")
+                        .IsUnique();
+
+                    b.ToTable("ServiceWorkOrderTypes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.SitePreferredVendor", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Trade")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("UpdatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("LocationId", "VendorId")
+                        .IsUnique()
+                        .HasFilter("[Trade] IS NULL");
+
+                    b.HasIndex("LocationId", "VendorId", "Trade")
+                        .IsUnique()
+                        .HasFilter("[Trade] IS NOT NULL");
+
+                    b.ToTable("SitePreferredVendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplate", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("TaskListTemplates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplateItem", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ItemText")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<int>("TaskListTemplateId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("TaskListTemplateId");
+
+                    b.ToTable("TaskListTemplateItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Template", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AfterPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AfterPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AssignTo")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DueDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Priority")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffSignature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderTitle")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AssignTo");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Templates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Trade", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("Trades");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AvailabilityStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("AvailabilityUpdatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CompanyId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CompanyName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CompanyPhone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ContactName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("GoogleMapsUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Phone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PreferredContact")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TradeSpecialties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CompanyId");
+
+                    b.ToTable("Vendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAccessToken", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime>("ExpiresAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime>("IssuedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("LastUsedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("RevokedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Token")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Token")
+                        .IsUnique();
+
+                    b.HasIndex("VendorId");
+
+                    b.ToTable("VendorAccessTokens");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAuditLog", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Actor")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("FieldName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NewValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("OldValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.ToTable("VendorAuditLogs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("AreaId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CompanyPhone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("GoogleMapsUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AreaId");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("VendorCompanies");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompletionDocument", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ContentType")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("OriginalFileName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Purpose")
+                        .IsRequired()
+                        .HasMaxLength(30)
+                        .HasColumnType("nvarchar(30)");
+
+                    b.Property<string>("RejectionReason")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ReplacesDocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ReviewStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ReviewedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ScanStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ScannedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<long>("SizeBytes")
+                        .HasColumnType("bigint");
+
+                    b.Property<string>("StoredFileName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("Version")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("VendorCompletionDocuments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("AdditionalContacts")
+                        .HasMaxLength(4000)
+                        .HasColumnType("nvarchar(4000)");
+
+                    b.Property<string>("AfterPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AfterPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateOnly?>("AssignDate")
+                        .HasColumnType("date");
+
+                    b.Property<string>("AssignTo")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("AvetaRequired")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("AvettaTask")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Building")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("CarriedOver")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CompletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Customer")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DateReported")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("DocStatus")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("DueDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ExternalAssignedTo")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<DateTimeOffset?>("ExternalLastOccurredAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalRecordType")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset?>("ExternalUpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalVersionHash")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("ExternalWorkOrderId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ExtraServices")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<string>("FlagColor")
+                        .HasMaxLength(7)
+                        .HasColumnType("nvarchar(7)");
+
+                    b.Property<string>("FrozenCompany")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FrozenPoc")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FrozenSite")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("InternalWONumber")
+                        .HasMaxLength(11)
+                        .HasColumnType("nvarchar(11)");
+
+                    b.Property<bool>("IsAddOn")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LegacyStatus")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("LifecycleStatus")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("OperationalFlags")
+                        .HasColumnType("int");
+
+                    b.Property<DateOnly?>("OriginalDate")
+                        .HasColumnType("date");
+
+                    b.Property<DateOnly?>("OriginalWeek")
+                        .HasColumnType("date");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PocName")
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("PocNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<string>("PocPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int?>("PrimaryDispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Priority")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Problem")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("RescheduleCount")
+                        .HasColumnType("int");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<bool?>("ScheduleWeekOnly")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("ScheduledDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("ScheduledEnd")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("ScheduledStart")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Service")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<int?>("ServiceId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ServiceNameSnapshot")
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("ServiceNotes")
+                        .HasMaxLength(4000)
+                        .HasColumnType("nvarchar(4000)");
+
+                    b.Property<string>("Severity")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffSignature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteCode")
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<string>("Source")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SourceEmailS3Key")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SubTrade")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateOnly?>("TargetWeek")
+                        .HasColumnType("date");
+
+                    b.Property<string>("TechPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<string>("Trade")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<decimal?>("VendorNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<string>("VendorNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<int?>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("WorkerOrderNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderTitle")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("istemplate")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("ExternalWorkOrderId")
+                        .IsUnique()
+                        .HasFilter("[ExternalWorkOrderId] IS NOT NULL AND [ExternalWorkOrderId] <> ''");
+
+                    b.HasIndex("InternalWONumber")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.HasIndex("LocationId");
+
+                    b.HasIndex("PrimaryDispatchId");
+
+                    b.HasIndex("ScheduledDate");
+
+                    b.HasIndex("ServiceId");
+
+                    b.HasIndex("SiteCode")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.HasIndex("WorkOrderType");
+
+                    b.HasIndex("AssignTo", "ScheduledDate");
+
+                    b.HasIndex("LifecycleStatus", "ScheduledDate")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.ToTable("workOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAttachments", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Category")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("workOrderAttachments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAuditLog", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Action")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ActorType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CorrelationId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("EventType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FieldName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NewValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("OldValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UserId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("WorkOrderAuditLogs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderCategories", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("workOrderCategories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderContacts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("WorkOrderContacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderExternalReceipt", b =>
+                {
+                    b.Property<long>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("bigint");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<long>("Id"));
+
+                    b.Property<string>("ExternalId")
+                        .IsRequired()
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Kind")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<DateTimeOffset>("ProcessedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("Source")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset>("UpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("VersionHash")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Source", "Kind", "ExternalId")
+                        .IsUnique()
+                        .HasDatabaseName("IX_WorkOrderExternalReceipts_Source_Kind_ExternalId");
+
+                    b.ToTable("WorkOrderExternalReceipts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderFieldLock", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("FieldName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<DateTime>("LockedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("LockedByUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkOrderId", "FieldName")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderFieldLocks");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderReconciliationJob", b =>
+                {
+                    b.Property<int>("Id")
+                        .HasColumnType("int");
+
+                    b.Property<int>("CommentsProcessed")
+                        .HasColumnType("int");
+
+                    b.Property<DateTimeOffset?>("CompletedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ErrorCode")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<Guid?>("FenceToken")
+                        .HasColumnType("uniqueidentifier");
+
+                    b.Property<DateTimeOffset?>("LeaseExpiresAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("Reason")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset?>("RequestedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<Guid>("RunId")
+                        .HasColumnType("uniqueidentifier");
+
+                    b.Property<DateTimeOffset?>("StartedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("State")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<int>("WorkOrdersProcessed")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("State");
+
+                    b.ToTable("WorkOrderReconciliationJobs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWebhookDelivery", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BodySha256")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("DeliveryId")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("EventType")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<DateTimeOffset>("OccurredAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<DateTimeOffset>("ProcessedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DeliveryId")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderWebhookDeliveries");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWeekRolledLedger", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CorrelationId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("ProcessedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateOnly>("SourceWeekStart")
+                        .HasColumnType("date");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkOrderId", "SourceWeekStart")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderWeekRolledLedgers");
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRole", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ConcurrencyStamp")
+                        .IsConcurrencyToken()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("NormalizedName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique()
+                        .HasDatabaseName("RoleNameIndex")
+                        .HasFilter("[NormalizedName] IS NOT NULL");
+
+                    b.ToTable("AspNetRoles", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRoleClaim<string>", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ClaimType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ClaimValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("RoleId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AspNetRoleClaims", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserClaim<string>", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ClaimType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ClaimValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UserId");
+
+                    b.ToTable("AspNetUserClaims", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserLogin<string>", b =>
+                {
+                    b.Property<string>("LoginProvider")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ProviderKey")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ProviderDisplayName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("LoginProvider", "ProviderKey");
+
+                    b.HasIndex("UserId");
+
+                    b.ToTable("AspNetUserLogins", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserRole<string>", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("RoleId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("UserId", "RoleId");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AspNetUserRoles", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserToken<string>", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("LoginProvider")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Value")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("UserId", "LoginProvider", "Name");
+
+                    b.ToTable("AspNetUserTokens", (string)null);
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Addresses", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany("Addresses")
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contact")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Contact");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Comments", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("Comments")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "ApplicationUser")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Comments")
+                        .HasForeignKey("WorkerOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("ApplicationUser");
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ContactDetails", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contact")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Contact");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany("Contacts")
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany("Contacts")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("Dispatches")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Dispatches")
+                        .HasForeignKey("WorkOrderId");
+
+                    b.Navigation("Vendor");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchChecklistItem", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("ChecklistItems")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchSignoff", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("Signoffs")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchUpliftRequest", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany()
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.VendorCompletionDocument", "EvidenceDocument")
+                        .WithMany()
+                        .HasForeignKey("EvidenceDocumentId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("EvidenceDocument");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchWorkOrder", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("DispatchWorkOrders")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Department", "Department")
+                        .WithMany("Employees")
+                        .HasForeignKey("DepartmentId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.JobTitle", "JobTitle")
+                        .WithMany("Employees")
+                        .HasForeignKey("JobTitleId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Region", "Region")
+                        .WithMany("Employees")
+                        .HasForeignKey("RegionId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Department");
+
+                    b.Navigation("JobTitle");
+
+                    b.Navigation("Region");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeAddress", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithOne("Address")
+                        .HasForeignKey("Data.SeaHavenIndustries.EmployeeAddress", "EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeEmail", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany("Emails")
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeePhone", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany("Phones")
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.FollowUps", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany()
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Employee");
+
+                    b.Navigation("Location");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.PMSchedules", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Assets", "Asset")
+                        .WithMany("PMSchedules")
+                        .HasForeignKey("AssetId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Asset");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contacts")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Quotes")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Contacts");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.QuotesLineItems", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Quotes", "Quotes")
+                        .WithMany("LineItems")
+                        .HasForeignKey("QuoteId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Quotes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Service", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.CompletionDocTemplate", "CompletionDocTemplate")
+                        .WithMany()
+                        .HasForeignKey("CompletionDocTemplateId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("CompletionDocTemplate");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ServiceWorkOrderType", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Service", "Service")
+                        .WithMany("SupportedWorkOrderTypes")
+                        .HasForeignKey("ServiceId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Service");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.SitePreferredVendor", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("SitePreferences")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Location");
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplateItem", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.TaskListTemplate", "Template")
+                        .WithMany("Items")
+                        .HasForeignKey("TaskListTemplateId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Template");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Template", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "AssignToUser")
+                        .WithMany("Templates")
+                        .HasForeignKey("AssignTo")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Category", "Category")
+                        .WithMany("Templates")
+                        .HasForeignKey("CategoryId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "POC")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Locations")
+                        .WithMany("Templates")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("AssignToUser");
+
+                    b.Navigation("Category");
+
+                    b.Navigation("Locations");
+
+                    b.Navigation("POC");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.VendorCompany", "Company")
+                        .WithMany("Vendors")
+                        .HasForeignKey("CompanyId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Company");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAccessToken", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany()
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAuditLog", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("AuditLogs")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Area", "Area")
+                        .WithMany()
+                        .HasForeignKey("AreaId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Area");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompletionDocument", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("CompletionDocuments")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany()
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("Vendor");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "AssignToUser")
+                        .WithMany("WorkOrders")
+                        .HasForeignKey("AssignTo")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Locations")
+                        .WithMany("workOrders")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "PrimaryDispatch")
+                        .WithMany()
+                        .HasForeignKey("PrimaryDispatchId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Service", "ServiceDefinition")
+                        .WithMany()
+                        .HasForeignKey("ServiceId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("AssignToUser");
+
+                    b.Navigation("Locations");
+
+                    b.Navigation("PrimaryDispatch");
+
+                    b.Navigation("ServiceDefinition");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAttachments", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("workOrderAttachments")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAuditLog", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("User");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderCategories", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Category", "Category")
+                        .WithMany("WorkOrderCategories")
+                        .HasForeignKey("CategoryId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("WorkOrderCategories")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Category");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderContacts", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "POC")
+                        .WithMany("WorkOrderContacts")
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("WorkOrderContacts")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("POC");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderFieldLock", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("FieldLocks")
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWeekRolledLedger", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRoleClaim<string>", b =>
+                {
+                    b.HasOne("Microsoft.AspNetCore.Identity.IdentityRole", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserClaim<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserLogin<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserRole<string>", b =>
+                {
+                    b.HasOne("Microsoft.AspNetCore.Identity.IdentityRole", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserToken<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Accounts", b =>
+                {
+                    b.Navigation("Addresses");
+
+                    b.Navigation("Contacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.Navigation("Templates");
+
+                    b.Navigation("WorkOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.Navigation("PMSchedules");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Category", b =>
+                {
+                    b.Navigation("Templates");
+
+                    b.Navigation("WorkOrderCategories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.Navigation("WorkOrderContacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Department", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.Navigation("ChecklistItems");
+
+                    b.Navigation("Comments");
+
+                    b.Navigation("CompletionDocuments");
+
+                    b.Navigation("DispatchWorkOrders");
+
+                    b.Navigation("Signoffs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.Navigation("Address");
+
+                    b.Navigation("Emails");
+
+                    b.Navigation("Phones");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.JobTitle", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.Navigation("Contacts");
+
+                    b.Navigation("Templates");
+
+                    b.Navigation("workOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.Navigation("LineItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Region", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Service", b =>
+                {
+                    b.Navigation("SupportedWorkOrderTypes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplate", b =>
+                {
+                    b.Navigation("Items");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.Navigation("AuditLogs");
+
+                    b.Navigation("Dispatches");
+
+                    b.Navigation("SitePreferences");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.Navigation("Vendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.Navigation("Comments");
+
+                    b.Navigation("Dispatches");
+
+                    b.Navigation("FieldLocks");
+
+                    b.Navigation("Quotes");
+
+                    b.Navigation("WorkOrderCategories");
+
+                    b.Navigation("WorkOrderContacts");
+
+                    b.Navigation("workOrderAttachments");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/Data.SeaHavenIndustries/Migrations/20260916204606_SH187_WorkOrderServiceLink.cs b/Data.SeaHavenIndustries/Migrations/20260916204606_SH187_WorkOrderServiceLink.cs
new file mode 100644
index 0000000..6eefdf6
--- /dev/null
+++ b/Data.SeaHavenIndustries/Migrations/20260916204606_SH187_WorkOrderServiceLink.cs
@@ -0,0 +1,73 @@
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Data.SeaHavenIndustries.Migrations
+{
+    /// <inheritdoc />
+    public partial class SH187_WorkOrderServiceLink : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.AddColumn<int>(
+                name: "ServiceId",
+                table: "workOrders",
+                type: "int",
+                nullable: true);
+
+            migrationBuilder.AddColumn<string>(
+                name: "ServiceNameSnapshot",
+                table: "workOrders",
+                type: "nvarchar(200)",
+                maxLength: 200,
+                nullable: true);
+
+            migrationBuilder.Sql(
+                """
+                UPDATE w
+                SET
+                    w.[ServiceNameSnapshot] = LEFT(COALESCE(NULLIF(LTRIM(RTRIM(w.[Trade])), N''), NULLIF(LTRIM(RTRIM(w.[Problem])), N'')), 200),
+                    w.[ServiceId] = s.[Id]
+                FROM [workOrders] w
+                LEFT JOIN [Services] s
+                    ON (s.[IsDeleted] <> 1 OR s.[IsDeleted] IS NULL)
+                    AND s.[NormalizedName] = LOWER(LTRIM(RTRIM(COALESCE(NULLIF(LTRIM(RTRIM(w.[Trade])), N''), NULLIF(LTRIM(RTRIM(w.[Problem])), N'')))))
+                WHERE w.[ServiceNameSnapshot] IS NULL;
+                """);
+
+            migrationBuilder.CreateIndex(
+                name: "IX_workOrders_ServiceId",
+                table: "workOrders",
+                column: "ServiceId");
+
+            migrationBuilder.AddForeignKey(
+                name: "FK_workOrders_Services_ServiceId",
+                table: "workOrders",
+                column: "ServiceId",
+                principalTable: "Services",
+                principalColumn: "Id",
+                onDelete: ReferentialAction.Restrict);
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropForeignKey(
+                name: "FK_workOrders_Services_ServiceId",
+                table: "workOrders");
+
+            migrationBuilder.DropIndex(
+                name: "IX_workOrders_ServiceId",
+                table: "workOrders");
+
+            migrationBuilder.DropColumn(
+                name: "ServiceId",
+                table: "workOrders");
+
+            migrationBuilder.DropColumn(
+                name: "ServiceNameSnapshot",
+                table: "workOrders");
+        }
+    }
+}
diff --git a/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs b/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
index 730bc42..268e033 100644
--- a/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
+++ b/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
@@ -2741,6 +2741,13 @@ namespace Data.SeaHavenIndustries.Migrations
                         .HasMaxLength(128)
                         .HasColumnType("nvarchar(128)");
 
+                    b.Property<int?>("ServiceId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ServiceNameSnapshot")
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
                     b.Property<string>("ServiceNotes")
                         .HasMaxLength(4000)
                         .HasColumnType("nvarchar(4000)");
@@ -2825,6 +2832,8 @@ namespace Data.SeaHavenIndustries.Migrations
 
                     b.HasIndex("ScheduledDate");
 
+                    b.HasIndex("ServiceId");
+
                     b.HasIndex("SiteCode")
                         .HasFilter("[istemplate] = 0");
 
@@ -3843,6 +3852,11 @@ namespace Data.SeaHavenIndustries.Migrations
                         .HasForeignKey("PrimaryDispatchId")
                         .OnDelete(DeleteBehavior.Restrict);
 
+                    b.HasOne("Data.SeaHavenIndustries.Service", "ServiceDefinition")
+                        .WithMany()
+                        .HasForeignKey("ServiceId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
                     b.Navigation("Account");
 
                     b.Navigation("AssignToUser");
@@ -3850,6 +3864,8 @@ namespace Data.SeaHavenIndustries.Migrations
                     b.Navigation("Locations");
 
                     b.Navigation("PrimaryDispatch");
+
+                    b.Navigation("ServiceDefinition");
                 });
 
             modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAttachments", b =>
diff --git a/Data.SeaHavenIndustries/Models/WorkerOrder.cs b/Data.SeaHavenIndustries/Models/WorkerOrder.cs
index 3f71f87..8e5cd54 100644
--- a/Data.SeaHavenIndustries/Models/WorkerOrder.cs
+++ b/Data.SeaHavenIndustries/Models/WorkerOrder.cs
@@ -43,6 +43,11 @@ namespace Data.SeaHavenIndustries
         /// <summary>SHOC board "Service" column (PM type label). Not Trade/Problem.</summary>
         [MaxLength(128)]
         public string? Service { get; set; }
+        public int? ServiceId { get; set; }
+        [MaxLength(200)]
+        public string? ServiceNameSnapshot { get; set; }
+        [ForeignKey(nameof(ServiceId))]
+        public virtual Service? ServiceDefinition { get; set; }
         public int? PrimaryDispatchId { get; set; }
         [ForeignKey(nameof(PrimaryDispatchId))]
         public virtual Dispatch? PrimaryDispatch { get; set; }
diff --git a/SeaHaven.DataServices/Helpers/WorkOrderBoardProjection.cs b/SeaHaven.DataServices/Helpers/WorkOrderBoardProjection.cs
index 04beecf..db054de 100644
--- a/SeaHaven.DataServices/Helpers/WorkOrderBoardProjection.cs
+++ b/SeaHaven.DataServices/Helpers/WorkOrderBoardProjection.cs
@@ -34,6 +34,8 @@ namespace SeaHaven.DataServices.Helpers
                     w.OriginalDate,
                     w.OriginalWeek,
                     w.WorkOrderType,
+                    w.ServiceId,
+                    w.ServiceNameSnapshot,
                     w.SiteCode,
                     LocationName = w.Locations != null ? w.Locations.Name : null,
                     WoPocName = w.PocName,
@@ -136,6 +138,8 @@ namespace SeaHaven.DataServices.Helpers
                     w.CarriedOver,
                     w.IsAddOn,
                     w.WorkOrderType,
+                    w.ServiceId,
+                    w.ServiceNameSnapshot,
                     frozenSite?.Code ?? w.SiteCode,
                     frozenSite?.Label ?? w.LocationName,
                     pocName,
diff --git a/SeaHaven.DataServices/Interfaces/WorkOrderBoardModels.cs b/SeaHaven.DataServices/Interfaces/WorkOrderBoardModels.cs
index bd19e54..03cbdae 100644
--- a/SeaHaven.DataServices/Interfaces/WorkOrderBoardModels.cs
+++ b/SeaHaven.DataServices/Interfaces/WorkOrderBoardModels.cs
@@ -21,6 +21,8 @@ namespace SeaHaven.DataServices.Interfaces
         int CarriedOver,
         bool IsAddOn,
         WorkOrderType? WorkOrderType,
+        int? ServiceId,
+        string? ServiceNameSnapshot,
         string? SiteCode,
         string? LocationName,
         string? PocName,
diff --git a/SeaHaven.Services/DTOs/WorkOrderBoardDTOs.cs b/SeaHaven.Services/DTOs/WorkOrderBoardDTOs.cs
index 2a408f7..4070b4b 100644
--- a/SeaHaven.Services/DTOs/WorkOrderBoardDTOs.cs
+++ b/SeaHaven.Services/DTOs/WorkOrderBoardDTOs.cs
@@ -84,6 +84,8 @@ namespace SeaHaven.Services.DTOs
         public DateOnly? OriginalDate { get; set; }
         public DateOnly? OriginalWeek { get; set; }
         public WorkOrderType? WorkOrderType { get; set; }
+        public int? ServiceId { get; set; }
+        public string? ServiceNameSnapshot { get; set; }
         public bool IsPastDue { get; set; }
         public string? SiteCode { get; set; }
         public string? LocationName { get; set; }
diff --git a/SeaHaven.Services/DTOs/WorkOrderBoardRequestDTOs.cs b/SeaHaven.Services/DTOs/WorkOrderBoardRequestDTOs.cs
index 8c04373..aaac7d1 100644
--- a/SeaHaven.Services/DTOs/WorkOrderBoardRequestDTOs.cs
+++ b/SeaHaven.Services/DTOs/WorkOrderBoardRequestDTOs.cs
@@ -30,6 +30,7 @@ namespace SeaHaven.Services.DTOs
         public string? Trade { get; set; }
         /// <summary>Primary service label; persisted as Trade / board pm.</summary>
         public string? PrimaryService { get; set; }
+        public int? ServiceId { get; set; }
         public List<string>? ExtraServices { get; set; }
         public string? ServiceNotes { get; set; }
         /// <summary>Per-WO Aveta compliance. Omit or false = not required.</summary>
diff --git a/SeaHaven.Services/Helpers/WorkOrderBoardFieldNames.cs b/SeaHaven.Services/Helpers/WorkOrderBoardFieldNames.cs
index 52eb5b5..985242c 100644
--- a/SeaHaven.Services/Helpers/WorkOrderBoardFieldNames.cs
+++ b/SeaHaven.Services/Helpers/WorkOrderBoardFieldNames.cs
@@ -17,6 +17,7 @@ namespace SeaHaven.Services.Helpers
         public const string DocStatus = "docStatus";
         public const string CompletedDate = "completedDate";
         public const string Pm = "pm";
+        public const string ServiceId = "serviceId";
         public const string ServiceNotes = "serviceNotes";
         public const string ExtraServices = "extraServices";
         public const string AdditionalContacts = "additionalContacts";
@@ -49,6 +50,7 @@ namespace SeaHaven.Services.Helpers
             DocStatus,
             CompletedDate,
             Pm,
+            ServiceId,
             ServiceNotes,
             ExtraServices,
             AdditionalContacts,
@@ -93,6 +95,7 @@ namespace SeaHaven.Services.Helpers
                 DocStatus => "DocStatus",
                 CompletedDate => "CompletedDate",
                 Pm => "Trade",
+                ServiceId => "ServiceId",
                 ServiceNotes => "ServiceNotes",
                 ExtraServices => "ExtraServices",
                 AdditionalContacts => "AdditionalContacts",
diff --git a/SeaHaven.Services/Implementation/WorkOrderBoardCreateService.cs b/SeaHaven.Services/Implementation/WorkOrderBoardCreateService.cs
index 0305e1e..a0d68d0 100644
--- a/SeaHaven.Services/Implementation/WorkOrderBoardCreateService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderBoardCreateService.cs
@@ -20,6 +20,7 @@ namespace SeaHaven.Services.Implementation
         private readonly IWorkOrderAuditService _auditService;
         private readonly IWorkOrderBoardCreateValidation _validator;
         private readonly IWorkOrderAccountResolver _accountResolver;
+        private readonly IServicesRegistryService? _servicesRegistryService;
 
         public WorkOrderBoardCreateService(
             IWorkOrderBoardDataService boardDataService,
@@ -27,7 +28,8 @@ namespace SeaHaven.Services.Implementation
             IWorkOrderBoardService boardService,
             IWorkOrderAuditService auditService,
             IWorkOrderBoardCreateValidation validator,
-            IWorkOrderAccountResolver accountResolver)
+            IWorkOrderAccountResolver accountResolver,
+            IServicesRegistryService? servicesRegistryService = null)
         {
             _boardDataService = boardDataService;
             _mutationData = mutationData;
@@ -35,6 +37,7 @@ namespace SeaHaven.Services.Implementation
             _auditService = auditService;
             _validator = validator;
             _accountResolver = accountResolver;
+            _servicesRegistryService = servicesRegistryService;
         }
 
         public async Task<WorkOrderBoardRowDto> CreateAsync(
@@ -54,7 +57,8 @@ namespace SeaHaven.Services.Implementation
 
             var woNumber = await ResolveWoNumberAsync(request.WoNumber, cancellationToken);
             var siteCode = request.SiteCode!.Trim();
-            var primaryService = ResolvePrimaryService(request);
+            var selectedService = await ResolveServiceAsync(request.ServiceId, request.WorkOrderType, request.PrimaryService ?? request.Trade, cancellationToken);
+            var primaryService = selectedService?.Name ?? ResolvePrimaryService(request);
             var extraServicesJson = SerializeExtraServices(request.ExtraServices);
             var serviceNotes = TrimOrNull(request.ServiceNotes);
             var pocName = TrimOrNull(request.PocName);
@@ -87,6 +91,8 @@ namespace SeaHaven.Services.Implementation
                 AccountId = accountId,
                 Description = string.IsNullOrWhiteSpace(request.Description) ? null : request.Description.Trim(),
                 Trade = primaryService,
+                ServiceId = selectedService?.Id,
+                ServiceNameSnapshot = selectedService?.Name,
                 ExtraServices = extraServicesJson,
                 ServiceNotes = serviceNotes,
                 AvetaRequired = request.AvetaRequired == true,
@@ -138,6 +144,8 @@ namespace SeaHaven.Services.Implementation
                 changes.Add(WorkOrderBoardFieldMutations.BoardFieldChange.Changed("Description", "", workOrder.Description));
             if (workOrder.Trade != null)
                 changes.Add(WorkOrderBoardFieldMutations.BoardFieldChange.Changed("Trade", "", workOrder.Trade));
+            if (workOrder.ServiceId.HasValue)
+                changes.Add(WorkOrderBoardFieldMutations.BoardFieldChange.Changed("ServiceId", "", workOrder.ServiceId.Value.ToString()));
             if (workOrder.ExtraServices != null)
                 changes.Add(WorkOrderBoardFieldMutations.BoardFieldChange.Changed("ExtraServices", "", workOrder.ExtraServices));
             if (workOrder.ServiceNotes != null)
@@ -251,6 +259,46 @@ namespace SeaHaven.Services.Implementation
             return null;
         }
 
+        private async Task<ServiceDto?> ResolveServiceAsync(
+            int? serviceId,
+            WorkOrderType workOrderType,
+            string? legacyLabel,
+            CancellationToken cancellationToken)
+        {
+            if (_servicesRegistryService == null)
+            {
+                if (serviceId.HasValue)
+                    throw new WorkOrderBoardValidationException("ServiceInvalid", "serviceId is not available.");
+                return null;
+            }
+
+            if (!ServicesRegistryService.AllowedWorkOrderTypes.Contains(workOrderType))
+            {
+                if (serviceId.HasValue)
+                    throw new WorkOrderBoardValidationException(
+                        "ServiceInvalid",
+                        "serviceId is not supported for this work order type.");
+                return null;
+            }
+
+            var services = await _servicesRegistryService.GetAllAsync(true, workOrderType, cancellationToken);
+            if (serviceId.HasValue)
+            {
+                var selected = services.FirstOrDefault(service => service.Id == serviceId.Value);
+                if (selected == null)
+                    throw new WorkOrderBoardValidationException(
+                        "ServiceInvalid",
+                        "serviceId must reference an active service that supports this work order type.");
+                return selected;
+            }
+
+            if (string.IsNullOrWhiteSpace(legacyLabel))
+                return null;
+
+            return services.FirstOrDefault(service =>
+                string.Equals(service.Name.Trim(), legacyLabel.Trim(), StringComparison.OrdinalIgnoreCase));
+        }
+
         private static string? SerializeExtraServices(List<string>? extras)
         {
             if (extras == null || extras.Count == 0)
diff --git a/SeaHaven.Services/Implementation/WorkOrderBoardService.cs b/SeaHaven.Services/Implementation/WorkOrderBoardService.cs
index 1f19a3b..085e3db 100644
--- a/SeaHaven.Services/Implementation/WorkOrderBoardService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderBoardService.cs
@@ -108,6 +108,8 @@ namespace SeaHaven.Services.Implementation
                 OriginalDate = row.OriginalDate,
                 OriginalWeek = row.OriginalWeek,
                 WorkOrderType = row.WorkOrderType,
+                ServiceId = row.ServiceId,
+                ServiceNameSnapshot = row.ServiceNameSnapshot,
                 IsPastDue = WorkOrderDerivedFields.IsPastDue(row.ScheduledDate, row.LifecycleStatus, utcNow),
                 SiteCode = row.SiteCode,
                 LocationName = row.LocationName,
@@ -136,7 +138,7 @@ namespace SeaHaven.Services.Implementation
                 TechPhone = row.TechPhone,
                 ApptDate = row.DispatchApptDate ?? row.ScheduledDate,
                 ApptTime = WorkOrderDerivedFields.FormatApptTime(apptStart, apptEnd),
-                Pm = row.Trade ?? row.Problem,
+                Pm = row.ServiceNameSnapshot ?? row.Trade ?? row.Problem,
                 ServiceNotes = row.ServiceNotes,
                 ExtraServices = ParseExtraServices(row.ExtraServices),
                 AdditionalContacts = MapAdditionalContacts(row),
diff --git a/SeaHaven.Services/Implementation/WorkOrderBoardUpdateService.cs b/SeaHaven.Services/Implementation/WorkOrderBoardUpdateService.cs
index b415035..5a04011 100644
--- a/SeaHaven.Services/Implementation/WorkOrderBoardUpdateService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderBoardUpdateService.cs
@@ -16,15 +16,18 @@ namespace SeaHaven.Services.Implementation
         private readonly IWorkOrderBoardDataService _boardDataService;
         private readonly IWorkOrderBoardMutationDataService _mutationData;
         private readonly IWorkOrderAuditService _auditService;
+        private readonly IServicesRegistryService? _servicesRegistryService;
 
         public WorkOrderBoardUpdateService(
             IWorkOrderBoardDataService boardDataService,
             IWorkOrderBoardMutationDataService mutationData,
-            IWorkOrderAuditService auditService)
+            IWorkOrderAuditService auditService,
+            IServicesRegistryService? servicesRegistryService = null)
         {
             _boardDataService = boardDataService;
             _mutationData = mutationData;
             _auditService = auditService;
+            _servicesRegistryService = servicesRegistryService;
         }
 
         public async Task<WorkOrderBoardRowDto> PatchFieldAsync(
@@ -73,6 +76,13 @@ namespace SeaHaven.Services.Implementation
 
                 _mutationData.SetExpectedWorkOrderVersion(workOrder, workOrderVersion);
 
+                if (canonicalField.Equals(WorkOrderBoardFieldNames.WorkOrderType, StringComparison.OrdinalIgnoreCase)
+                    && workOrder.ServiceId.HasValue)
+                {
+                    var nextType = ParseWorkOrderType(value: request.Value);
+                    await EnsureServiceSupportsTypeAsync(workOrder.ServiceId.Value, nextType, ct);
+                }
+
                 Dispatch? dispatch = null;
                 ResolvedDispatch? resolved = null;
                 if (WorkOrderBoardFieldNames.IsDispatchField(canonicalField))
@@ -181,6 +191,7 @@ namespace SeaHaven.Services.Implementation
             {
                 WorkOrderBoardFieldNames.WoNumber => new List<FieldChange> { await ApplyWoNumber(workOrder, value, auditField, cancellationToken) },
                 WorkOrderBoardFieldNames.WorkOrderType => ApplyWorkOrderType(workOrder, value, auditField),
+                WorkOrderBoardFieldNames.ServiceId => await ApplyServiceIdAsync(workOrder, value, auditField, cancellationToken),
                 WorkOrderBoardFieldNames.Severity => new List<FieldChange> { ApplySeverity(workOrder, value, auditField) },
                 WorkOrderBoardFieldNames.SiteCode => new List<FieldChange> { ApplyStringField(value, auditField, v => workOrder.SiteCode = v, () => workOrder.SiteCode) },
                 WorkOrderBoardFieldNames.LifecycleStatus => ApplyLifecycleStatus(workOrder, value, auditField),
@@ -388,6 +399,83 @@ namespace SeaHaven.Services.Implementation
             return changes;
         }
 
+        private async Task<List<FieldChange>> ApplyServiceIdAsync(
+            WorkOrder workOrder,
+            string? value,
+            string auditField,
+            CancellationToken cancellationToken)
+        {
+            if (_servicesRegistryService == null)
+                throw new WorkOrderBoardValidationException("ServiceInvalid", "Service registry is unavailable.");
+
+            if (string.IsNullOrWhiteSpace(value))
+            {
+                var previousServiceId = workOrder.ServiceId;
+                var previousServiceLabel = workOrder.ServiceNameSnapshot ?? workOrder.Trade;
+                workOrder.ServiceId = null;
+                workOrder.ServiceNameSnapshot = null;
+                workOrder.Trade = null;
+                return new List<FieldChange>
+                {
+                    FieldChange.ForField(auditField, previousServiceId?.ToString(), null),
+                    FieldChange.ForField("Trade", previousServiceLabel, null)
+                };
+            }
+
+            if (!int.TryParse(value.Trim(), out var serviceId) || serviceId <= 0)
+                throw new WorkOrderBoardValidationException("ServiceInvalid", "serviceId must be a positive integer.");
+
+            var service = await _servicesRegistryService.GetByIdAsync(serviceId, cancellationToken);
+            if (!ServicesRegistryService.AllowedWorkOrderTypes.Contains(workOrder.WorkOrderType ?? WorkOrderType.PM)
+                || service == null
+                || !service.IsActive
+                || !service.SupportedWorkOrderTypes.Contains(workOrder.WorkOrderType ?? WorkOrderType.PM))
+            {
+                throw new WorkOrderBoardValidationException(
+                    "ServiceInvalid",
+                    "serviceId must reference an active service that supports this work order type.");
+            }
+
+            var oldId = workOrder.ServiceId;
+            var oldLabel = workOrder.ServiceNameSnapshot ?? workOrder.Trade;
+            workOrder.ServiceId = service.Id;
+            workOrder.ServiceNameSnapshot = service.Name;
+            workOrder.Trade = service.Name;
+            return new List<FieldChange>
+            {
+                oldId == service.Id
+                    ? FieldChange.Unchanged(auditField)
+                    : FieldChange.ForField(auditField, oldId?.ToString(), service.Id.ToString()),
+                oldLabel == service.Name
+                    ? FieldChange.Unchanged("Trade")
+                    : FieldChange.ForField("Trade", oldLabel, service.Name)
+            };
+        }
+
+        private async Task EnsureServiceSupportsTypeAsync(int serviceId, WorkOrderType workOrderType, CancellationToken cancellationToken)
+        {
+            if (_servicesRegistryService == null)
+                throw new WorkOrderBoardValidationException("ServiceTypeInvalid", "Service registry is unavailable.");
+
+            var service = await _servicesRegistryService.GetByIdAsync(serviceId, cancellationToken);
+            if (service == null || !service.SupportedWorkOrderTypes.Contains(workOrderType))
+                throw new WorkOrderBoardValidationException(
+                    "ServiceTypeInvalid",
+                    "The selected service does not support this work order type.");
+        }
+
+        private static WorkOrderType ParseWorkOrderType(string? value)
+        {
+            if (string.IsNullOrWhiteSpace(value)
+                || string.Equals(value.Trim(), "Overdue", StringComparison.OrdinalIgnoreCase)
+                || !WorkOrderTypeMapper.TryParseFeLabel(value, out var parsed))
+            {
+                throw new WorkOrderBoardValidationException("InvalidValue", $"Invalid workOrderType: {value}");
+            }
+
+            return parsed;
+        }
+
         private static FieldChange ApplySeverity(WorkOrder workOrder, string? value, string auditField)
         {
             if (!WorkOrderSeverityRules.TryNormalize(value, out var normalized))
diff --git a/SeaHavenIndustries.Tests/SH303ServicesRegistryMigrationTests.cs b/SeaHavenIndustries.Tests/SH303ServicesRegistryMigrationTests.cs
index 6dbb735..831e42f 100644
--- a/SeaHavenIndustries.Tests/SH303ServicesRegistryMigrationTests.cs
+++ b/SeaHavenIndustries.Tests/SH303ServicesRegistryMigrationTests.cs
@@ -78,6 +78,28 @@ public class SH303ServicesRegistryMigrationTests
         Assert.Empty(operations.OfType<SqlOperation>());
     }
 
+    [Fact]
+    public void SH187_Up_AddsNullableServiceLinkAndBackfillsLegacyLabels()
+    {
+        var operations = BuildOperations<SH187_WorkOrderServiceLink>("Up");
+
+        var columns = operations.OfType<AddColumnOperation>().ToList();
+        Assert.Contains(columns, c => c.Table == "workOrders" && c.Name == "ServiceId" && c.IsNullable);
+        Assert.Contains(columns, c => c.Table == "workOrders" && c.Name == "ServiceNameSnapshot"
+            && c.IsNullable && c.MaxLength == 200);
+        Assert.Contains(operations.OfType<CreateIndexOperation>(), i =>
+            i.Table == "workOrders" && i.Columns.SequenceEqual(new[] { "ServiceId" }));
+        Assert.Contains(operations.OfType<AddForeignKeyOperation>(), fk =>
+            fk.Table == "workOrders"
+            && fk.PrincipalTable == "Services"
+            && fk.OnDelete == ReferentialAction.Restrict);
+
+        var sql = string.Join("\n", operations.OfType<SqlOperation>().Select(o => o.Sql));
+        Assert.Contains("UPDATE w", sql);
+        Assert.Contains("ServiceNameSnapshot", sql);
+        Assert.Contains("LEFT JOIN [Services]", sql);
+    }
+
     [Fact]
     public async Task Up_SeedsActiveProblemValuesIdempotently_WhenSqlServerAvailable()
     {
@@ -205,11 +227,15 @@ public class SH303ServicesRegistryMigrationTests
     }
 
     private static List<MigrationOperation> BuildOperations(string direction)
+        => BuildOperations<SH303_ServicesRegistry>(direction);
+
+    private static List<MigrationOperation> BuildOperations<TMigration>(string direction)
+        where TMigration : Migration, new()
     {
         var builder = new MigrationBuilder("Microsoft.EntityFrameworkCore.SqlServer");
         var operation = typeof(Migration).GetMethod(direction, BindingFlags.Instance | BindingFlags.NonPublic)
                  ?? throw new InvalidOperationException($"Migration.{direction} not found.");
-        operation.Invoke(new SH303_ServicesRegistry(), [builder]);
+        operation.Invoke(new TMigration(), [builder]);
         return builder.Operations;
     }
 
diff --git a/SeaHavenIndustries.Tests/WorkOrderBoardServiceTests.cs b/SeaHavenIndustries.Tests/WorkOrderBoardServiceTests.cs
index d1d9343..9e35213 100644
--- a/SeaHavenIndustries.Tests/WorkOrderBoardServiceTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderBoardServiceTests.cs
@@ -1055,6 +1055,8 @@ public class WorkOrderBoardServiceTests
             CarriedOver: 0,
             IsAddOn: false,
             WorkOrderType: null,
+            ServiceId: null,
+            ServiceNameSnapshot: null,
             SiteCode: null,
             LocationName: null,
             PocName: null,

From d4afcced87623005bea79adf6c31331e01e2d6ac Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 18:01:42 -0300
Subject: [PATCH 023/183] feat(dashboard): add regional work order metrics
 (SH-348)

---
 .../DashboardServiceTests.cs                  | 23 +++++
 .../Controllers/DashboardController.cs        | 20 +++++
 .../Implementation/DashboardDataService.cs    |  3 +-
 .../Interfaces/IDashboardDataService.cs       |  3 +-
 SeaHaven.Services/DTOs/DashboardDTOs.cs       | 11 +++
 SeaHaven.Services/Helpers/DashboardRegions.cs | 84 +++++++++++++++++++
 .../Implementation/DashboardService.cs        | 27 ++++++
 .../Interfaces/IDashboardService.cs           |  5 ++
 8 files changed, 174 insertions(+), 2 deletions(-)
 create mode 100644 SeaHaven.Services/Helpers/DashboardRegions.cs

diff --git a/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs b/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
index ff65c94..c7c6410 100644
--- a/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
@@ -301,4 +301,27 @@ public class DashboardServiceTests
         result.Items[0].AverageResolutionDays.Should().Be(3m);
         result.Items[0].Color.Should().Be("#123456");
     }
+
+    [Fact]
+    public async Task GetRegionsAsync_UsesCanonicalBucketsAndUnmappedOther()
+    {
+        await using var ctx = NewContext();
+        ctx.Locations.AddRange(
+            new Locations { Id = 1, State = "NY" },
+            new Locations { Id = 2, State = "ca" },
+            new Locations { Id = 3, State = "XX" });
+        ctx.workOrders.AddRange(
+            new WorkOrder { AccountId = 1, LocationId = 1 },
+            new WorkOrder { AccountId = 1, LocationId = 2 },
+            new WorkOrder { AccountId = 1, LocationId = 3 },
+            new WorkOrder { AccountId = 1, LocationId = null });
+        await ctx.SaveChangesAsync();
+
+        var result = await NewService(ctx).GetRegionsAsync(
+            AccountUser(1), new DashboardStatsQueryDTO(), CancellationToken.None);
+
+        result.Items.Select(row => row.Region).Should().Equal(
+            "East", "Central", "West", "California", "Unmapped/Other");
+        result.Items.Select(row => row.WorkOrderCount).Should().Equal(1, 0, 0, 1, 2);
+    }
 }
diff --git a/Api.SeaHavenIndustries/Controllers/DashboardController.cs b/Api.SeaHavenIndustries/Controllers/DashboardController.cs
index aff03f3..bdce2e2 100644
--- a/Api.SeaHavenIndustries/Controllers/DashboardController.cs
+++ b/Api.SeaHavenIndustries/Controllers/DashboardController.cs
@@ -89,5 +89,25 @@ namespace Api.SeaHavenIndustries.Controllers
                 return BadRequest(ex.Message);
             }
         }
+
+        [HttpGet("Regions")]
+        public async Task<IActionResult> GetRegions(
+            [FromQuery] DashboardStatsQueryDTO query,
+            CancellationToken cancellationToken = default)
+        {
+            try
+            {
+                return Ok(await _dashboardService.GetRegionsAsync(User, query, cancellationToken));
+            }
+            catch (SeaHaven.Services.Exceptions.WorkOrderBoardValidationException ex)
+                when (ex.Code == "Forbidden")
+            {
+                return StatusCode(StatusCodes.Status403Forbidden, new
+                {
+                    code = ex.Code,
+                    message = ex.Message
+                });
+            }
+        }
     }
 }
diff --git a/SeaHaven.DataServices/Implementation/DashboardDataService.cs b/SeaHaven.DataServices/Implementation/DashboardDataService.cs
index 14b1ffa..a58aed3 100644
--- a/SeaHaven.DataServices/Implementation/DashboardDataService.cs
+++ b/SeaHaven.DataServices/Implementation/DashboardDataService.cs
@@ -70,7 +70,8 @@ namespace SeaHaven.DataServices.Implementation
                     w.LegacyStatus ?? w.Status,
                     w.ScheduledDate,
                     w.OriginalDate,
-                    w.CompletedDate))
+                    w.CompletedDate,
+                    w.Locations == null ? null : w.Locations.State))
                 .ToListAsync(cancellationToken);
         }
 
diff --git a/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs b/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs
index bd3a394..fa794b1 100644
--- a/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs
@@ -31,7 +31,8 @@ namespace SeaHaven.DataServices.Interfaces
         string? LegacyStatus,
         DateTime? ScheduledDate,
         DateOnly? OriginalDate,
-        DateTime? CompletedDate);
+        DateTime? CompletedDate,
+        string? LocationState = null);
 
     public sealed record DashboardDispatcherWorkload(
         string DispatcherId,
diff --git a/SeaHaven.Services/DTOs/DashboardDTOs.cs b/SeaHaven.Services/DTOs/DashboardDTOs.cs
index 6034544..e19f55c 100644
--- a/SeaHaven.Services/DTOs/DashboardDTOs.cs
+++ b/SeaHaven.Services/DTOs/DashboardDTOs.cs
@@ -40,6 +40,17 @@ namespace SeaHaven.Services.DTOs
         public decimal? AverageResolutionDays { get; init; }
     }
 
+    public sealed class DashboardRegionResponseDTO
+    {
+        public IReadOnlyList<DashboardRegionRowDTO> Items { get; init; } = [];
+    }
+
+    public sealed class DashboardRegionRowDTO
+    {
+        public string Region { get; init; } = string.Empty;
+        public int WorkOrderCount { get; init; }
+    }
+
     public class DashboardStatsDTO
     {
         public int Total { get; set; }
diff --git a/SeaHaven.Services/Helpers/DashboardRegions.cs b/SeaHaven.Services/Helpers/DashboardRegions.cs
new file mode 100644
index 0000000..f3b5fae
--- /dev/null
+++ b/SeaHaven.Services/Helpers/DashboardRegions.cs
@@ -0,0 +1,84 @@
+using SeaHaven.DataServices.Interfaces;
+
+namespace SeaHaven.Services.Helpers;
+
+public static class DashboardRegions
+{
+    public static readonly IReadOnlyList<string> Names =
+        ["East", "Central", "West", "California", "Unmapped/Other"];
+
+    public static string Resolve(string? state)
+    {
+        if (string.IsNullOrWhiteSpace(state))
+            return "Unmapped/Other";
+
+        return StateToRegion.TryGetValue(state.Trim().ToUpperInvariant(), out var region)
+            ? region
+            : "Unmapped/Other";
+    }
+
+    public static IReadOnlyDictionary<string, int> Count(
+        IReadOnlyList<DashboardWorkOrder> workOrders)
+    {
+        var counts = Names.ToDictionary(name => name, _ => 0, StringComparer.Ordinal);
+        foreach (var workOrder in workOrders)
+            counts[Resolve(workOrder.LocationState)]++;
+
+        return counts;
+    }
+
+    private static readonly IReadOnlyDictionary<string, string> StateToRegion =
+        new Dictionary<string, string>(StringComparer.Ordinal)
+        {
+            ["CT"] = "East",
+            ["DE"] = "East",
+            ["GA"] = "East",
+            ["ME"] = "East",
+            ["MD"] = "East",
+            ["MA"] = "East",
+            ["NH"] = "East",
+            ["NJ"] = "East",
+            ["NY"] = "East",
+            ["NC"] = "East",
+            ["PA"] = "East",
+            ["RI"] = "East",
+            ["SC"] = "East",
+            ["VT"] = "East",
+            ["VA"] = "East",
+            ["WV"] = "East",
+            ["AL"] = "Central",
+            ["AR"] = "Central",
+            ["FL"] = "Central",
+            ["IL"] = "Central",
+            ["IN"] = "Central",
+            ["IA"] = "Central",
+            ["KS"] = "Central",
+            ["KY"] = "Central",
+            ["LA"] = "Central",
+            ["MI"] = "Central",
+            ["MN"] = "Central",
+            ["MS"] = "Central",
+            ["MO"] = "Central",
+            ["NE"] = "Central",
+            ["ND"] = "Central",
+            ["OH"] = "Central",
+            ["OK"] = "Central",
+            ["SD"] = "Central",
+            ["TN"] = "Central",
+            ["WI"] = "Central",
+            ["AK"] = "West",
+            ["AZ"] = "West",
+            ["CO"] = "West",
+            ["HI"] = "West",
+            ["ID"] = "West",
+            ["MT"] = "West",
+            ["NV"] = "West",
+            ["NM"] = "West",
+            ["OR"] = "West",
+            ["TX"] = "West",
+            ["UT"] = "West",
+            ["WA"] = "West",
+            ["WY"] = "West",
+            ["CA"] = "California"
+        };
+}
diff --git a/SeaHaven.Services/Implementation/DashboardService.cs b/SeaHaven.Services/Implementation/DashboardService.cs
index aaad3f1..2bbe7ca 100644
--- a/SeaHaven.Services/Implementation/DashboardService.cs
+++ b/SeaHaven.Services/Implementation/DashboardService.cs
@@ -152,5 +152,32 @@ namespace SeaHaven.Services.Implementation
                 TotalDispatchers = rows.Count
             };
         }
+
+        public async Task<DashboardRegionResponseDTO> GetRegionsAsync(
+            ClaimsPrincipal user,
+            DashboardStatsQueryDTO query,
+            CancellationToken cancellationToken)
+        {
+            var accountId = _accountResolver.ResolveAccountFilter(user);
+            var dispatcherId = user.IsInRole("Dispatcher")
+                ? user.FindFirstValue(ClaimTypes.NameIdentifier)
+                : null;
+            if (user.IsInRole("Dispatcher") && string.IsNullOrWhiteSpace(dispatcherId))
+                throw new WorkOrderBoardValidationException("Forbidden", "Dispatcher identity is required.");
+
+            var workOrders = await _dataService.GetDashboardWorkOrdersAsync(
+                accountId, dispatcherId, query.DateFrom, query.DateTo, cancellationToken);
+            var counts = DashboardRegions.Count(workOrders);
+            return new DashboardRegionResponseDTO
+            {
+                Items = DashboardRegions.Names
+                    .Select(region => new DashboardRegionRowDTO
+                    {
+                        Region = region,
+                        WorkOrderCount = counts[region]
+                    })
+                    .ToList()
+            };
+        }
     }
 }
diff --git a/SeaHaven.Services/Interfaces/IDashboardService.cs b/SeaHaven.Services/Interfaces/IDashboardService.cs
index 8b74dd2..9b10f73 100644
--- a/SeaHaven.Services/Interfaces/IDashboardService.cs
+++ b/SeaHaven.Services/Interfaces/IDashboardService.cs
@@ -21,5 +21,10 @@ namespace SeaHaven.Services.Interfaces
             DashboardStatsQueryDTO query,
             int page,
             CancellationToken cancellationToken);
+
+        Task<DashboardRegionResponseDTO> GetRegionsAsync(
+            ClaimsPrincipal user,
+            DashboardStatsQueryDTO query,
+            CancellationToken cancellationToken);
     }
 }

From 3358ea5058707d08386e97bfe6dcc04877d42316 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 18:10:42 -0300
Subject: [PATCH 024/183] feat(dashboard): add vendor insights (SH-349)

---
 .../DashboardServiceTests.cs                  | 43 ++++++++++++++++
 .../Controllers/DashboardController.cs        | 18 +++++++
 .../Implementation/DashboardDataService.cs    | 15 +++++-
 .../Interfaces/IDashboardDataService.cs       |  7 ++-
 SeaHaven.Services/DTOs/DashboardDTOs.cs       | 18 +++++++
 .../Implementation/DashboardService.cs        | 49 +++++++++++++++++++
 .../Interfaces/IDashboardService.cs           |  4 ++
 7 files changed, 152 insertions(+), 2 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs b/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
index c7c6410..a383bd7 100644
--- a/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
@@ -324,4 +324,47 @@ public class DashboardServiceTests
             "East", "Central", "West", "California", "Unmapped/Other");
         result.Items.Select(row => row.WorkOrderCount).Should().Equal(1, 0, 0, 1, 2);
     }
+
+    [Fact]
+    public async Task GetVendorInsightsAsync_IsCompanyWideAndUsesVendorMetrics()
+    {
+        await using var ctx = NewContext();
+        ctx.VendorCompanies.Add(new VendorCompany { Id = 10, Name = "Acme Services", IsDeleted = false });
+        ctx.Vendors.Add(new Vendor
+        {
+            Id = 20,
+            CompanyId = 10,
+            IsActive = true,
+            CompanyName = "Acme Services"
+        });
+        ctx.Dispatches.Add(new Dispatch { Id = 30, VendorId = 20 });
+        ctx.workOrders.AddRange(
+            new WorkOrder
+            {
+                AccountId = 1,
+                PrimaryDispatchId = 30,
+                LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Completed,
+                ScheduledDate = DateTime.UtcNow.Date.AddDays(-3),
+                CompletedDate = DateTime.UtcNow.Date.AddDays(-1),
+                RescheduleCount = 1
+            },
+            new WorkOrder
+            {
+                AccountId = 1,
+                PrimaryDispatchId = 30,
+                LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Completed,
+                ScheduledDate = DateTime.UtcNow.Date.AddDays(-2),
+                CompletedDate = DateTime.UtcNow.Date.AddDays(-1)
+            });
+        await ctx.SaveChangesAsync();
+
+        var result = await NewService(ctx).GetVendorInsightsAsync(
+            AccountUser(1), CancellationToken.None);
+
+        result.TotalVendors.Should().Be(1);
+        result.Items.Should().ContainSingle();
+        result.Items[0].TotalJobs.Should().Be(2);
+        result.Items[0].CompletionRate.Should().Be(100);
+        result.Items[0].RescheduleRate.Should().Be(50);
+    }
 }
diff --git a/Api.SeaHavenIndustries/Controllers/DashboardController.cs b/Api.SeaHavenIndustries/Controllers/DashboardController.cs
index bdce2e2..055b933 100644
--- a/Api.SeaHavenIndustries/Controllers/DashboardController.cs
+++ b/Api.SeaHavenIndustries/Controllers/DashboardController.cs
@@ -109,5 +109,23 @@ namespace Api.SeaHavenIndustries.Controllers
                 });
             }
         }
+
+        [HttpGet("VendorInsights")]
+        public async Task<IActionResult> GetVendorInsights(CancellationToken cancellationToken = default)
+        {
+            try
+            {
+                return Ok(await _dashboardService.GetVendorInsightsAsync(User, cancellationToken));
+            }
+            catch (SeaHaven.Services.Exceptions.WorkOrderBoardValidationException ex)
+                when (ex.Code == "Forbidden")
+            {
+                return StatusCode(StatusCodes.Status403Forbidden, new
+                {
+                    code = ex.Code,
+                    message = ex.Message
+                });
+            }
+        }
     }
 }
diff --git a/SeaHaven.DataServices/Implementation/DashboardDataService.cs b/SeaHaven.DataServices/Implementation/DashboardDataService.cs
index a58aed3..a56f74f 100644
--- a/SeaHaven.DataServices/Implementation/DashboardDataService.cs
+++ b/SeaHaven.DataServices/Implementation/DashboardDataService.cs
@@ -71,7 +71,20 @@ namespace SeaHaven.DataServices.Implementation
                     w.ScheduledDate,
                     w.OriginalDate,
                     w.CompletedDate,
-                    w.Locations == null ? null : w.Locations.State))
+                    w.Locations == null ? null : w.Locations.State,
+                    w.RescheduleCount,
+                    w.PrimaryDispatch == null || w.PrimaryDispatch.Vendor == null
+                        ? null
+                        : w.PrimaryDispatch.Vendor.CompanyId,
+                    w.PrimaryDispatch == null || w.PrimaryDispatch.Vendor == null
+                        || w.PrimaryDispatch.Vendor.Company == null
+                        ? null
+                        : w.PrimaryDispatch.Vendor.Company.Name,
+                    w.PrimaryDispatch != null && w.PrimaryDispatch.Vendor != null
+                        && w.PrimaryDispatch.Vendor.IsActive,
+                    w.PrimaryDispatch != null && w.PrimaryDispatch.Vendor != null
+                        && w.PrimaryDispatch.Vendor.Company != null
+                        && w.PrimaryDispatch.Vendor.Company.IsDeleted == true))
                 .ToListAsync(cancellationToken);
         }
 
diff --git a/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs b/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs
index fa794b1..5348703 100644
--- a/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs
@@ -32,7 +32,12 @@ namespace SeaHaven.DataServices.Interfaces
         DateTime? ScheduledDate,
         DateOnly? OriginalDate,
         DateTime? CompletedDate,
-        string? LocationState = null);
+        string? LocationState = null,
+        int RescheduleCount = 0,
+        int? VendorCompanyId = null,
+        string? VendorCompanyName = null,
+        bool VendorIsActive = false,
+        bool VendorCompanyIsDeleted = false);
 
     public sealed record DashboardDispatcherWorkload(
         string DispatcherId,
diff --git a/SeaHaven.Services/DTOs/DashboardDTOs.cs b/SeaHaven.Services/DTOs/DashboardDTOs.cs
index e19f55c..a767a03 100644
--- a/SeaHaven.Services/DTOs/DashboardDTOs.cs
+++ b/SeaHaven.Services/DTOs/DashboardDTOs.cs
@@ -51,6 +51,24 @@ namespace SeaHaven.Services.DTOs
         public int WorkOrderCount { get; init; }
     }
 
+    public sealed class DashboardVendorInsightsResponseDTO
+    {
+        public IReadOnlyList<DashboardVendorInsightsRowDTO> Items { get; init; } = [];
+        public int Page { get; init; }
+        public int PageSize { get; init; }
+        public int TotalVendors { get; init; }
+    }
+
+    public sealed class DashboardVendorInsightsRowDTO
+    {
+        public int VendorCompanyId { get; init; }
+        public string VendorCompanyName { get; init; } = string.Empty;
+        public decimal CompletionRate { get; init; }
+        public decimal RescheduleRate { get; init; }
+        public decimal? AverageResolutionDays { get; init; }
+        public int TotalJobs { get; init; }
+    }
+
     public class DashboardStatsDTO
     {
         public int Total { get; set; }
diff --git a/SeaHaven.Services/Implementation/DashboardService.cs b/SeaHaven.Services/Implementation/DashboardService.cs
index 2bbe7ca..757dfb3 100644
--- a/SeaHaven.Services/Implementation/DashboardService.cs
+++ b/SeaHaven.Services/Implementation/DashboardService.cs
@@ -179,5 +179,54 @@ namespace SeaHaven.Services.Implementation
                     .ToList()
             };
         }
+
+        public async Task<DashboardVendorInsightsResponseDTO> GetVendorInsightsAsync(
+            ClaimsPrincipal user,
+            CancellationToken cancellationToken)
+        {
+            var accountId = _accountResolver.ResolveAccountFilter(user);
+            var workOrders = await _dataService.GetDashboardWorkOrdersAsync(
+                accountId, null, null, null, cancellationToken);
+            var activeVendorOrders = workOrders
+                .Where(workOrder => workOrder.VendorCompanyId.HasValue
+                    && workOrder.VendorIsActive
+                    && !workOrder.VendorCompanyIsDeleted)
+                .ToList();
+            var today = DashboardBusinessTime.Today();
+            var rows = activeVendorOrders
+                .GroupBy(workOrder => new
+                {
+                    Id = workOrder.VendorCompanyId!.Value,
+                    Name = workOrder.VendorCompanyName ?? string.Empty
+                })
+                .Select(group =>
+                {
+                    var orders = group.ToList();
+                    var metrics = DashboardMetrics.Calculate(orders, today);
+                    var rescheduled = orders.Count(order => order.RescheduleCount >= 1);
+                    return new DashboardVendorInsightsRowDTO
+                    {
+                        VendorCompanyId = group.Key.Id,
+                        VendorCompanyName = group.Key.Name,
+                        CompletionRate = metrics.CompletionRate,
+                        RescheduleRate = Math.Round((decimal)rescheduled / orders.Count * 100, 2),
+                        AverageResolutionDays = metrics.AverageResolutionDays,
+                        TotalJobs = orders.Count
+                    };
+                })
+                .OrderByDescending(row => row.CompletionRate)
+                .ThenBy(row => row.VendorCompanyName, StringComparer.OrdinalIgnoreCase)
+                .ThenBy(row => row.VendorCompanyId)
+                .ToList();
+            const int pageSize = 10;
+
+            return new DashboardVendorInsightsResponseDTO
+            {
+                Items = rows.Take(pageSize).ToList(),
+                Page = 1,
+                PageSize = pageSize,
+                TotalVendors = rows.Count
+            };
+        }
     }
 }
diff --git a/SeaHaven.Services/Interfaces/IDashboardService.cs b/SeaHaven.Services/Interfaces/IDashboardService.cs
index 9b10f73..2f744eb 100644
--- a/SeaHaven.Services/Interfaces/IDashboardService.cs
+++ b/SeaHaven.Services/Interfaces/IDashboardService.cs
@@ -26,5 +26,9 @@ namespace SeaHaven.Services.Interfaces
             ClaimsPrincipal user,
             DashboardStatsQueryDTO query,
             CancellationToken cancellationToken);
+
+        Task<DashboardVendorInsightsResponseDTO> GetVendorInsightsAsync(
+            ClaimsPrincipal user,
+            CancellationToken cancellationToken);
     }
 }

From ca4d4833ff5fb410542b5f5f8aaeb2b177947ff8 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 18:26:20 -0300
Subject: [PATCH 025/183] feat(permissions): protect configured account owner
 (SH-329)

---
 .../AccountOwnerDataServiceTests.cs           |   60 +
 .../UserServiceTests.cs                       |   37 +
 Api.SeaHavenIndustries/Program.cs             |    7 +
 .../Auth/ApplicationDbContext.cs              |    7 +
 ...1933_SH329_PrimaryAccountOwner.Designer.cs | 4018 +++++++++++++++++
 ...0260916211933_SH329_PrimaryAccountOwner.cs |   40 +
 .../ApplicationDbContextModelSnapshot.cs      |    8 +
 .../Implementation/AccountOwnerDataService.cs |   54 +
 .../Implementation/UserDataService.cs         |    9 +
 .../Interfaces/IAccountOwnerDataService.cs    |    6 +
 .../Interfaces/IUserDataService.cs            |    1 +
 .../Configuration/AccountOwnerOptions.cs      |    8 +
 .../DependencyInjection/ServicesModule.cs     |    1 +
 .../AccountOwnerDesignationService.cs         |   23 +
 .../Implementation/UserService.cs             |    8 +-
 .../IAccountOwnerDesignationService.cs        |    6 +
 ...orkOrderMediaConcurrencyRelationalTests.cs |    2 +-
 17 files changed, 4293 insertions(+), 2 deletions(-)
 create mode 100644 Api.SeaHavenIndustries.Tests/AccountOwnerDataServiceTests.cs
 create mode 100644 Data.SeaHavenIndustries/Migrations/20260916211933_SH329_PrimaryAccountOwner.Designer.cs
 create mode 100644 Data.SeaHavenIndustries/Migrations/20260916211933_SH329_PrimaryAccountOwner.cs
 create mode 100644 SeaHaven.DataServices/Implementation/AccountOwnerDataService.cs
 create mode 100644 SeaHaven.DataServices/Interfaces/IAccountOwnerDataService.cs
 create mode 100644 SeaHaven.Services/Configuration/AccountOwnerOptions.cs
 create mode 100644 SeaHaven.Services/Implementation/AccountOwnerDesignationService.cs
 create mode 100644 SeaHaven.Services/Interfaces/IAccountOwnerDesignationService.cs

diff --git a/Api.SeaHavenIndustries.Tests/AccountOwnerDataServiceTests.cs b/Api.SeaHavenIndustries.Tests/AccountOwnerDataServiceTests.cs
new file mode 100644
index 0000000..fad450d
--- /dev/null
+++ b/Api.SeaHavenIndustries.Tests/AccountOwnerDataServiceTests.cs
@@ -0,0 +1,60 @@
+using Data.SeaHavenIndustries;
+using FluentAssertions;
+using Microsoft.EntityFrameworkCore;
+using SeaHaven.DataServices.Implementation;
+using Xunit;
+
+namespace Api.SeaHavenIndustries.Tests;
+
+public class AccountOwnerDataServiceTests
+{
+    private static ApplicationDbContext NewContext()
+    {
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseInMemoryDatabase(Guid.NewGuid().ToString())
+            .Options;
+        return new ApplicationDbContext(options);
+    }
+
+    [Fact]
+    public async Task EnsureConfiguredOwnerAsync_MarksOnlyConfiguredUser()
+    {
+        await using var context = NewContext();
+        context.Users.AddRange(
+            new ApplicationUser { Id = "old-owner", UserName = "old@example.com", IsAccountOwner = true },
+            new ApplicationUser { Id = "configured-owner", UserName = "configured@example.com" });
+        await context.SaveChangesAsync();
+
+        var service = new AccountOwnerDataService(context);
+        (await service.EnsureConfiguredOwnerAsync(" configured-owner ", CancellationToken.None)).Should().BeTrue();
+
+        (await context.Users.SingleAsync(user => user.Id == "old-owner")).IsAccountOwner.Should().BeFalse();
+        (await context.Users.SingleAsync(user => user.Id == "configured-owner")).IsAccountOwner.Should().BeTrue();
+    }
+
+    [Fact]
+    public async Task EnsureConfiguredOwnerAsync_WithNoConfiguration_ClearsExistingOwner()
+    {
+        await using var context = NewContext();
+        context.Users.Add(new ApplicationUser { Id = "owner", UserName = "owner@example.com", IsAccountOwner = true });
+        await context.SaveChangesAsync();
+
+        var service = new AccountOwnerDataService(context);
+        (await service.EnsureConfiguredOwnerAsync(null, CancellationToken.None)).Should().BeTrue();
+        (await service.EnsureConfiguredOwnerAsync("  ", CancellationToken.None)).Should().BeFalse();
+
+        (await context.Users.SingleAsync()).IsAccountOwner.Should().BeFalse();
+    }
+
+    [Fact]
+    public async Task EnsureConfiguredOwnerAsync_RejectsUnknownUser()
+    {
+        await using var context = NewContext();
+        var service = new AccountOwnerDataService(context);
+
+        var action = () => service.EnsureConfiguredOwnerAsync("missing", CancellationToken.None);
+
+        await action.Should().ThrowAsync<InvalidOperationException>()
+            .WithMessage("The configured account owner user was not found.");
+    }
+}
diff --git a/Api.SeaHavenIndustries.Tests/UserServiceTests.cs b/Api.SeaHavenIndustries.Tests/UserServiceTests.cs
index d2364bb..916d0ec 100644
--- a/Api.SeaHavenIndustries.Tests/UserServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/UserServiceTests.cs
@@ -90,6 +90,23 @@ public class UserServiceTests
         userData.Verify(u => u.DeleteUserWithCascadeAsync(user, It.IsAny<CancellationToken>()), Times.Once);
     }
 
+    [Fact]
+    public async Task DeleteUser_AccountOwner_ReturnsForbiddenWithoutCascade()
+    {
+        var user = IdentityTestHelpers.User("owner");
+        var userData = new Mock<IUserDataService>();
+        userData.Setup(u => u.GetForEditAsync("owner", It.IsAny<CancellationToken>())).ReturnsAsync(user);
+        userData.Setup(u => u.IsAccountOwnerAsync("owner", It.IsAny<CancellationToken>())).ReturnsAsync(true);
+
+        var service = NewService(userData, new Mock<IEmailSender>(), out _);
+
+        var outcome = await service.DeleteUserAsync("owner", Principal("Admin"), CancellationToken.None);
+
+        outcome.Success.Should().BeFalse();
+        outcome.Error.Should().Be(UserMutationErrors.Forbidden);
+        userData.Verify(u => u.DeleteUserWithCascadeAsync(It.IsAny<ApplicationUser>(), It.IsAny<CancellationToken>()), Times.Never);
+    }
+
     [Fact]
     public async Task DeleteUser_NonAdmin_ReturnsForbiddenWithoutCascade()
     {
@@ -138,6 +155,26 @@ public class UserServiceTests
         outcome.Error.Should().Be(UserMutationErrors.UserNotFound);
     }
 
+    [Fact]
+    public async Task EditUser_AccountOwner_ReturnsForbiddenWithoutMutation()
+    {
+        var user = IdentityTestHelpers.User("owner");
+        var userData = new Mock<IUserDataService>();
+        userData.Setup(u => u.GetForEditAsync("owner", It.IsAny<CancellationToken>())).ReturnsAsync(user);
+        userData.Setup(u => u.IsAccountOwnerAsync("owner", It.IsAny<CancellationToken>())).ReturnsAsync(true);
+
+        var service = NewService(userData, new Mock<IEmailSender>(), out _);
+
+        var outcome = await service.EditUserAsync(
+            new EditUserRequestDTO { Id = "owner", Email = "owner@example.com", Name = "Owner", Role = "User" },
+            Principal("Admin"),
+            CancellationToken.None);
+
+        outcome.Success.Should().BeFalse();
+        outcome.Error.Should().Be(UserMutationErrors.Forbidden);
+        userData.Verify(u => u.UpdateUserAsync(It.IsAny<ApplicationUser>(), It.IsAny<CancellationToken>()), Times.Never);
+    }
+
     [Fact]
     public async Task GetUserProfile_MapsCreatedDateToAddedDate()
     {
diff --git a/Api.SeaHavenIndustries/Program.cs b/Api.SeaHavenIndustries/Program.cs
index f220dfa..6baf11f 100644
--- a/Api.SeaHavenIndustries/Program.cs
+++ b/Api.SeaHavenIndustries/Program.cs
@@ -222,6 +222,13 @@ app.UseAuthorization();
 
 app.MapControllers();
 
+using (var ownerScope = app.Services.CreateScope())
+{
+    await ownerScope.ServiceProvider
+        .GetRequiredService<IAccountOwnerDesignationService>()
+        .EnsureConfiguredOwnerAsync(CancellationToken.None);
+}
+
 //if (app.Environment.IsDevelopment())
 //{
 //    using var scope = app.Services.CreateScope();
diff --git a/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs b/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs
index f322ed8..870a127 100644
--- a/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs
+++ b/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs
@@ -170,6 +170,12 @@ namespace Data.SeaHavenIndustries
             builder.Entity<ApplicationUser>()
                 .HasIndex(u => u.AccountId);
 
+            builder.Entity<ApplicationUser>()
+                .HasIndex(u => u.IsAccountOwner)
+                .IsUnique()
+                .HasFilter("IsAccountOwner = 1")
+                .HasDatabaseName("IX_AspNetUsers_IsAccountOwner");
+
             builder.Entity<VendorCompany>()
                 .HasIndex(c => c.NormalizedName)
                 .IsUnique();
@@ -385,6 +391,7 @@ namespace Data.SeaHavenIndustries
         public string? Initials { get; set; }
         public string? Color { get; set; }
         public int? Type { get; set; } // 1 for users 0 for admin
+        public bool IsAccountOwner { get; set; }
         /// <summary>Optional CRM account membership for server-derived media scope (SH-221).</summary>
         public int? AccountId { get; set; }
         [ForeignKey(nameof(AccountId))]
diff --git a/Data.SeaHavenIndustries/Migrations/20260916211933_SH329_PrimaryAccountOwner.Designer.cs b/Data.SeaHavenIndustries/Migrations/20260916211933_SH329_PrimaryAccountOwner.Designer.cs
new file mode 100644
index 0000000..62712c1
--- /dev/null
+++ b/Data.SeaHavenIndustries/Migrations/20260916211933_SH329_PrimaryAccountOwner.Designer.cs
@@ -0,0 +1,4018 @@
+// <auto-generated />
+using System;
+using Data.SeaHavenIndustries;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Metadata;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+
+#nullable disable
+
+namespace Data.SeaHavenIndustries.Migrations
+{
+    [DbContext(typeof(ApplicationDbContext))]
+    [Migration("20260916211933_SH329_PrimaryAccountOwner")]
+    partial class SH329_PrimaryAccountOwner
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasAnnotation("ProductVersion", "8.0.8")
+                .HasAnnotation("Relational:MaxIdentifierLength", 128);
+
+            SqlServerModelBuilderExtensions.UseIdentityColumns(modelBuilder);
+
+            modelBuilder.HasSequence("WorkOrderInternalNumberSequence");
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Accounts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("CurrencyCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Importance")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("IndustryId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("OwnerEmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Phone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PrivacySetting")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ServiceInstructions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Tags")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("TerritoryId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("TimeZone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Type")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Website")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Accounts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Addresses", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AddressType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Country")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("County")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("ContactId");
+
+                    b.ToTable("Addresses");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int>("AccessFailedCount")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Color")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ConcurrencyStamp")
+                        .IsConcurrencyToken()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Contact")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DeletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<bool>("EmailConfirmed")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("FirstName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Initials")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsAccountOwner")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("LastName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Locations")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("LockoutEnabled")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTimeOffset?>("LockoutEnd")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("NormalizedEmail")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("NormalizedUserName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("PasswordHash")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("PhoneNumberConfirmed")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("SecurityStamp")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("TwoFactorEnabled")
+                        .HasColumnType("bit");
+
+                    b.Property<int?>("Type")
+                        .HasColumnType("int");
+
+                    b.Property<string>("UniqueName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserImage")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("IsAccountOwner")
+                        .IsUnique()
+                        .HasDatabaseName("IX_AspNetUsers_IsAccountOwner")
+                        .HasFilter("IsAccountOwner = 1");
+
+                    b.HasIndex("NormalizedEmail")
+                        .HasDatabaseName("EmailIndex");
+
+                    b.HasIndex("NormalizedUserName")
+                        .IsUnique()
+                        .HasDatabaseName("UserNameIndex")
+                        .HasFilter("[NormalizedUserName] IS NOT NULL");
+
+                    b.ToTable("AspNetUsers", (string)null);
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Area", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("Areas");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("AssetCode")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Assets");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Category", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Categories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Comments", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CommentType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Commenter")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Commenttext")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Documents")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalCommentId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("ExternalSourceEmailS3Key")
+                        .HasMaxLength(2048)
+                        .HasColumnType("nvarchar(2048)");
+
+                    b.Property<DateTimeOffset?>("ExternalUpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalVersionHash")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RecordType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int?>("WorkerOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("UserId");
+
+                    b.HasIndex("WorkerOrderId");
+
+                    b.ToTable("Comments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.CompletionDocTemplate", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ServiceKey")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("TemplateUrl")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ServiceKey", "IsActive");
+
+                    b.ToTable("CompletionDocTemplates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ContactDetails", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DateOfBirth")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Gender")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PrivacySetting")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Tags")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Territory")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.ToTable("ContactDetails");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ContactType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FirstName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LastName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("MiddleName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Owner")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("SiteContactOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Title")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Contacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Department", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Departments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AcceptToken")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("AcknowledgedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CommercialStatusUpdatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CompletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DispatchNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DispatchedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("EmailSent")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("EstimatedArrivalAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("EtaManualOverride")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("InvoiceNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("InvoiceStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<decimal?>("NTEAmount")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<string>("PONumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PaymentStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ReplyToAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<DateTime?>("ScheduledDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TechPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("VendorNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<DateTime?>("VerifiedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("VerifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("Dispatches");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchChecklistItem", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CompletedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("CompletedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool>("IsCompleted")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ItemText")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("DispatchChecklistItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchSignoff", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Signature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignatureMethod")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("SignedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("SignoffType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.ToTable("DispatchSignoffs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchUpliftRequest", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<decimal?>("CurrentNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<DateTime?>("DecidedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DecidedByUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DecisionNote")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("EscalatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("EvidenceDocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("ExpiresAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("InitialNotificationSentAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("NotificationError")
+                        .HasMaxLength(500)
+                        .HasColumnType("nvarchar(500)");
+
+                    b.Property<string>("NotificationStatus")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<string>("RequestKey")
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<string>("RequestedByVendorName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<decimal>("RequestedNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<int>("RequiredTier")
+                        .HasColumnType("int");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<string>("Status")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<string>("VendorReason")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId")
+                        .IsUnique()
+                        .HasFilter("[Status] IN ('Pending', 'ChangesRequested')");
+
+                    b.HasIndex("EvidenceDocumentId");
+
+                    b.HasIndex("DispatchId", "RequestKey")
+                        .IsUnique()
+                        .HasFilter("[RequestKey] IS NOT NULL");
+
+                    b.ToTable("DispatchUpliftRequests");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchWorkOrder", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("DispatchWorkOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DropdownOption", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Category")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ParentValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Value")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("DropdownOptions");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("CanChangeProviderNumber")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ConfirmUserName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DateOfBirth")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DepartmentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("EmployeeNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FirstName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Gender")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("HireDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<int?>("JobTitleId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("LastLogin")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LastName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("MiddleName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("PermissionGroupId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("RegionId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("SMSAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TimeZone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Website")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DepartmentId");
+
+                    b.HasIndex("JobTitleId");
+
+                    b.HasIndex("RegionId");
+
+                    b.ToTable("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeAddress", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CountryCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CountyId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("StateCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Street")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("StreetLineTwo")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId")
+                        .IsUnique();
+
+                    b.ToTable("EmployeeAddresses");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeEmail", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<int?>("EmailTypeId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsPrimary")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.ToTable("EmployeeEmails");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeePhone", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Extension")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsPrimary")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Number")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("PhoneTypeId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.ToTable("EmployeePhones");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Events", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("AllDay")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("EndDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("EndTime")
+                        .HasMaxLength(10)
+                        .HasColumnType("nvarchar(10)");
+
+                    b.Property<string>("EventColor")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Location")
+                        .HasMaxLength(150)
+                        .HasColumnType("nvarchar(150)");
+
+                    b.Property<int?>("RecordID")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RecordName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("RecordTargetType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("ReminderMinutes")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime>("StartDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("StartTime")
+                        .HasMaxLength(10)
+                        .HasColumnType("nvarchar(10)");
+
+                    b.Property<string>("Title")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Events");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.FollowUps", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Reason")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("ScheduleDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<TimeSpan>("ScheduleStartTime")
+                        .HasColumnType("time");
+
+                    b.Property<string>("Status")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.HasIndex("LocationId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("FollowUps");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ForgetPasswordCode", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Code")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Email")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("ForgetPasswordCodes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.JobTitle", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("JobTitles");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalLocationId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Latitude")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Longitude")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Title")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.ToTable("Locations");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.PMSchedules", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AssetId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Frequency")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("StartDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AssetId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("PMSchedules");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BillingAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("Date")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ProjectName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("QuotId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ShippingAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("Quotes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.QuotesLineItems", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Descriptions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<decimal?>("Lineitem")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<int?>("LineitemNumber")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("QuoteId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("QuoteId");
+
+                    b.ToTable("QuotesLines");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Region", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Regions");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.SitePreferredVendor", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Trade")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("UpdatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("LocationId", "VendorId")
+                        .IsUnique()
+                        .HasFilter("[Trade] IS NULL");
+
+                    b.HasIndex("LocationId", "VendorId", "Trade")
+                        .IsUnique()
+                        .HasFilter("[Trade] IS NOT NULL");
+
+                    b.ToTable("SitePreferredVendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplate", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("TaskListTemplates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplateItem", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ItemText")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<int>("TaskListTemplateId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("TaskListTemplateId");
+
+                    b.ToTable("TaskListTemplateItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Template", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AfterPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AfterPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AssignTo")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DueDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Priority")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffSignature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderTitle")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AssignTo");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Templates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Trade", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("Trades");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserPermissionOverride", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("PermissionKey")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<int>("State")
+                        .HasColumnType("int");
+
+                    b.HasKey("UserId", "PermissionKey");
+
+                    b.HasIndex("UserId", "PermissionKey")
+                        .IsUnique()
+                        .HasDatabaseName("IX_UserPermissionOverrides_UserId_PermissionKey");
+
+                    b.ToTable("UserPermissionOverrides");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AvailabilityStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("AvailabilityUpdatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CompanyId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CompanyName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CompanyPhone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ContactName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("GoogleMapsUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Phone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PreferredContact")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TradeSpecialties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CompanyId");
+
+                    b.ToTable("Vendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAccessToken", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime>("ExpiresAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime>("IssuedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("LastUsedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("RevokedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Token")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Token")
+                        .IsUnique();
+
+                    b.HasIndex("VendorId");
+
+                    b.ToTable("VendorAccessTokens");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAuditLog", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Actor")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("FieldName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NewValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("OldValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.ToTable("VendorAuditLogs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("AreaId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CompanyPhone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("GoogleMapsUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AreaId");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("VendorCompanies");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompletionDocument", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ContentType")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("OriginalFileName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Purpose")
+                        .IsRequired()
+                        .HasMaxLength(30)
+                        .HasColumnType("nvarchar(30)");
+
+                    b.Property<string>("RejectionReason")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ReplacesDocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ReviewStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ReviewedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ScanStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ScannedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<long>("SizeBytes")
+                        .HasColumnType("bigint");
+
+                    b.Property<string>("StoredFileName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("Version")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("VendorCompletionDocuments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("AdditionalContacts")
+                        .HasMaxLength(4000)
+                        .HasColumnType("nvarchar(4000)");
+
+                    b.Property<string>("AfterPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AfterPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateOnly?>("AssignDate")
+                        .HasColumnType("date");
+
+                    b.Property<string>("AssignTo")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("AvetaRequired")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("AvettaTask")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Building")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("CarriedOver")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CompletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Customer")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DateReported")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("DocStatus")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("DueDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ExternalAssignedTo")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<DateTimeOffset?>("ExternalLastOccurredAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalRecordType")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset?>("ExternalUpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalVersionHash")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("ExternalWorkOrderId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ExtraServices")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<string>("FlagColor")
+                        .HasMaxLength(7)
+                        .HasColumnType("nvarchar(7)");
+
+                    b.Property<string>("FrozenCompany")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FrozenPoc")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FrozenSite")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("InternalWONumber")
+                        .HasMaxLength(11)
+                        .HasColumnType("nvarchar(11)");
+
+                    b.Property<bool>("IsAddOn")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LegacyStatus")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("LifecycleStatus")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("OperationalFlags")
+                        .HasColumnType("int");
+
+                    b.Property<DateOnly?>("OriginalDate")
+                        .HasColumnType("date");
+
+                    b.Property<DateOnly?>("OriginalWeek")
+                        .HasColumnType("date");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PocName")
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("PocNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<string>("PocPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int?>("PrimaryDispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Priority")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Problem")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("RescheduleCount")
+                        .HasColumnType("int");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<bool?>("ScheduleWeekOnly")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("ScheduledDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("ScheduledEnd")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("ScheduledStart")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Service")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("ServiceNotes")
+                        .HasMaxLength(4000)
+                        .HasColumnType("nvarchar(4000)");
+
+                    b.Property<string>("Severity")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffSignature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteCode")
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<string>("Source")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SourceEmailS3Key")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SubTrade")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateOnly?>("TargetWeek")
+                        .HasColumnType("date");
+
+                    b.Property<string>("TechPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<string>("Trade")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<decimal?>("VendorNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<string>("VendorNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<int?>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("WorkerOrderNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderTitle")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("istemplate")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("ExternalWorkOrderId")
+                        .IsUnique()
+                        .HasFilter("[ExternalWorkOrderId] IS NOT NULL AND [ExternalWorkOrderId] <> ''");
+
+                    b.HasIndex("InternalWONumber")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.HasIndex("LocationId");
+
+                    b.HasIndex("PrimaryDispatchId");
+
+                    b.HasIndex("ScheduledDate");
+
+                    b.HasIndex("SiteCode")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.HasIndex("WorkOrderType");
+
+                    b.HasIndex("AssignTo", "ScheduledDate");
+
+                    b.HasIndex("LifecycleStatus", "ScheduledDate")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.ToTable("workOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAttachments", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Category")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("workOrderAttachments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAuditLog", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Action")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ActorType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CorrelationId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("EventType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FieldName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NewValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("OldValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UserId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("WorkOrderAuditLogs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderCategories", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("workOrderCategories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderContacts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("WorkOrderContacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderExternalReceipt", b =>
+                {
+                    b.Property<long>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("bigint");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<long>("Id"));
+
+                    b.Property<string>("ExternalId")
+                        .IsRequired()
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Kind")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<DateTimeOffset>("ProcessedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("Source")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset>("UpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("VersionHash")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Source", "Kind", "ExternalId")
+                        .IsUnique()
+                        .HasDatabaseName("IX_WorkOrderExternalReceipts_Source_Kind_ExternalId");
+
+                    b.ToTable("WorkOrderExternalReceipts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderFieldLock", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("FieldName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<DateTime>("LockedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("LockedByUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkOrderId", "FieldName")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderFieldLocks");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderReconciliationJob", b =>
+                {
+                    b.Property<int>("Id")
+                        .HasColumnType("int");
+
+                    b.Property<int>("CommentsProcessed")
+                        .HasColumnType("int");
+
+                    b.Property<DateTimeOffset?>("CompletedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ErrorCode")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<Guid?>("FenceToken")
+                        .HasColumnType("uniqueidentifier");
+
+                    b.Property<DateTimeOffset?>("LeaseExpiresAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("Reason")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset?>("RequestedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<Guid>("RunId")
+                        .HasColumnType("uniqueidentifier");
+
+                    b.Property<DateTimeOffset?>("StartedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("State")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<int>("WorkOrdersProcessed")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("State");
+
+                    b.ToTable("WorkOrderReconciliationJobs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWebhookDelivery", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BodySha256")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("DeliveryId")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("EventType")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<DateTimeOffset>("OccurredAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<DateTimeOffset>("ProcessedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DeliveryId")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderWebhookDeliveries");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWeekRolledLedger", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CorrelationId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("ProcessedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateOnly>("SourceWeekStart")
+                        .HasColumnType("date");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkOrderId", "SourceWeekStart")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderWeekRolledLedgers");
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRole", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ConcurrencyStamp")
+                        .IsConcurrencyToken()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("NormalizedName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique()
+                        .HasDatabaseName("RoleNameIndex")
+                        .HasFilter("[NormalizedName] IS NOT NULL");
+
+                    b.ToTable("AspNetRoles", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRoleClaim<string>", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ClaimType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ClaimValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("RoleId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AspNetRoleClaims", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserClaim<string>", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ClaimType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ClaimValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UserId");
+
+                    b.ToTable("AspNetUserClaims", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserLogin<string>", b =>
+                {
+                    b.Property<string>("LoginProvider")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ProviderKey")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ProviderDisplayName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("LoginProvider", "ProviderKey");
+
+                    b.HasIndex("UserId");
+
+                    b.ToTable("AspNetUserLogins", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserRole<string>", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("RoleId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("UserId", "RoleId");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AspNetUserRoles", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserToken<string>", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("LoginProvider")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Value")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("UserId", "LoginProvider", "Name");
+
+                    b.ToTable("AspNetUserTokens", (string)null);
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Addresses", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany("Addresses")
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contact")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Contact");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Comments", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("Comments")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "ApplicationUser")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Comments")
+                        .HasForeignKey("WorkerOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("ApplicationUser");
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ContactDetails", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contact")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Contact");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany("Contacts")
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany("Contacts")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("Dispatches")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Dispatches")
+                        .HasForeignKey("WorkOrderId");
+
+                    b.Navigation("Vendor");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchChecklistItem", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("ChecklistItems")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchSignoff", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("Signoffs")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchUpliftRequest", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany()
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.VendorCompletionDocument", "EvidenceDocument")
+                        .WithMany()
+                        .HasForeignKey("EvidenceDocumentId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("EvidenceDocument");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchWorkOrder", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("DispatchWorkOrders")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Department", "Department")
+                        .WithMany("Employees")
+                        .HasForeignKey("DepartmentId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.JobTitle", "JobTitle")
+                        .WithMany("Employees")
+                        .HasForeignKey("JobTitleId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Region", "Region")
+                        .WithMany("Employees")
+                        .HasForeignKey("RegionId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Department");
+
+                    b.Navigation("JobTitle");
+
+                    b.Navigation("Region");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeAddress", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithOne("Address")
+                        .HasForeignKey("Data.SeaHavenIndustries.EmployeeAddress", "EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeEmail", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany("Emails")
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeePhone", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany("Phones")
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.FollowUps", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany()
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Employee");
+
+                    b.Navigation("Location");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.PMSchedules", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Assets", "Asset")
+                        .WithMany("PMSchedules")
+                        .HasForeignKey("AssetId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Asset");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contacts")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Quotes")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Contacts");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.QuotesLineItems", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Quotes", "Quotes")
+                        .WithMany("LineItems")
+                        .HasForeignKey("QuoteId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Quotes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.SitePreferredVendor", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("SitePreferences")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Location");
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplateItem", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.TaskListTemplate", "Template")
+                        .WithMany("Items")
+                        .HasForeignKey("TaskListTemplateId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Template");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Template", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "AssignToUser")
+                        .WithMany("Templates")
+                        .HasForeignKey("AssignTo")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Category", "Category")
+                        .WithMany("Templates")
+                        .HasForeignKey("CategoryId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "POC")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Locations")
+                        .WithMany("Templates")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("AssignToUser");
+
+                    b.Navigation("Category");
+
+                    b.Navigation("Locations");
+
+                    b.Navigation("POC");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserPermissionOverride", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("User");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.VendorCompany", "Company")
+                        .WithMany("Vendors")
+                        .HasForeignKey("CompanyId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Company");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAccessToken", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany()
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAuditLog", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("AuditLogs")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Area", "Area")
+                        .WithMany()
+                        .HasForeignKey("AreaId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Area");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompletionDocument", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("CompletionDocuments")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany()
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("Vendor");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "AssignToUser")
+                        .WithMany("WorkOrders")
+                        .HasForeignKey("AssignTo")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Locations")
+                        .WithMany("workOrders")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "PrimaryDispatch")
+                        .WithMany()
+                        .HasForeignKey("PrimaryDispatchId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("AssignToUser");
+
+                    b.Navigation("Locations");
+
+                    b.Navigation("PrimaryDispatch");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAttachments", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("workOrderAttachments")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAuditLog", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("User");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderCategories", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Category", "Category")
+                        .WithMany("WorkOrderCategories")
+                        .HasForeignKey("CategoryId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("WorkOrderCategories")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Category");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderContacts", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "POC")
+                        .WithMany("WorkOrderContacts")
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("WorkOrderContacts")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("POC");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderFieldLock", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("FieldLocks")
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWeekRolledLedger", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRoleClaim<string>", b =>
+                {
+                    b.HasOne("Microsoft.AspNetCore.Identity.IdentityRole", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserClaim<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserLogin<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserRole<string>", b =>
+                {
+                    b.HasOne("Microsoft.AspNetCore.Identity.IdentityRole", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserToken<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Accounts", b =>
+                {
+                    b.Navigation("Addresses");
+
+                    b.Navigation("Contacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.Navigation("Templates");
+
+                    b.Navigation("WorkOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.Navigation("PMSchedules");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Category", b =>
+                {
+                    b.Navigation("Templates");
+
+                    b.Navigation("WorkOrderCategories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.Navigation("WorkOrderContacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Department", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.Navigation("ChecklistItems");
+
+                    b.Navigation("Comments");
+
+                    b.Navigation("CompletionDocuments");
+
+                    b.Navigation("DispatchWorkOrders");
+
+                    b.Navigation("Signoffs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.Navigation("Address");
+
+                    b.Navigation("Emails");
+
+                    b.Navigation("Phones");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.JobTitle", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.Navigation("Contacts");
+
+                    b.Navigation("Templates");
+
+                    b.Navigation("workOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.Navigation("LineItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Region", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplate", b =>
+                {
+                    b.Navigation("Items");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.Navigation("AuditLogs");
+
+                    b.Navigation("Dispatches");
+
+                    b.Navigation("SitePreferences");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.Navigation("Vendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.Navigation("Comments");
+
+                    b.Navigation("Dispatches");
+
+                    b.Navigation("FieldLocks");
+
+                    b.Navigation("Quotes");
+
+                    b.Navigation("WorkOrderCategories");
+
+                    b.Navigation("WorkOrderContacts");
+
+                    b.Navigation("workOrderAttachments");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/Data.SeaHavenIndustries/Migrations/20260916211933_SH329_PrimaryAccountOwner.cs b/Data.SeaHavenIndustries/Migrations/20260916211933_SH329_PrimaryAccountOwner.cs
new file mode 100644
index 0000000..9a808a0
--- /dev/null
+++ b/Data.SeaHavenIndustries/Migrations/20260916211933_SH329_PrimaryAccountOwner.cs
@@ -0,0 +1,40 @@
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Data.SeaHavenIndustries.Migrations
+{
+    /// <inheritdoc />
+    public partial class SH329_PrimaryAccountOwner : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.AddColumn<bool>(
+                name: "IsAccountOwner",
+                table: "AspNetUsers",
+                type: "bit",
+                nullable: false,
+                defaultValue: false);
+
+            migrationBuilder.CreateIndex(
+                name: "IX_AspNetUsers_IsAccountOwner",
+                table: "AspNetUsers",
+                column: "IsAccountOwner",
+                unique: true,
+                filter: "IsAccountOwner = 1");
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropIndex(
+                name: "IX_AspNetUsers_IsAccountOwner",
+                table: "AspNetUsers");
+
+            migrationBuilder.DropColumn(
+                name: "IsAccountOwner",
+                table: "AspNetUsers");
+        }
+    }
+}
diff --git a/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs b/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
index b68965a..e87b2d4 100644
--- a/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
+++ b/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
@@ -220,6 +220,9 @@ namespace Data.SeaHavenIndustries.Migrations
                     b.Property<string>("Initials")
                         .HasColumnType("nvarchar(max)");
 
+                    b.Property<bool>("IsAccountOwner")
+                        .HasColumnType("bit");
+
                     b.Property<bool?>("IsDeleted")
                         .HasColumnType("bit");
 
@@ -275,6 +278,11 @@ namespace Data.SeaHavenIndustries.Migrations
 
                     b.HasIndex("AccountId");
 
+                    b.HasIndex("IsAccountOwner")
+                        .IsUnique()
+                        .HasDatabaseName("IX_AspNetUsers_IsAccountOwner")
+                        .HasFilter("IsAccountOwner = 1");
+
                     b.HasIndex("NormalizedEmail")
                         .HasDatabaseName("EmailIndex");
 
diff --git a/SeaHaven.DataServices/Implementation/AccountOwnerDataService.cs b/SeaHaven.DataServices/Implementation/AccountOwnerDataService.cs
new file mode 100644
index 0000000..bcd4a33
--- /dev/null
+++ b/SeaHaven.DataServices/Implementation/AccountOwnerDataService.cs
@@ -0,0 +1,54 @@
+using Data.SeaHavenIndustries;
+using Microsoft.EntityFrameworkCore;
+using SeaHaven.DataServices.Interfaces;
+
+namespace SeaHaven.DataServices.Implementation;
+
+public sealed class AccountOwnerDataService : IAccountOwnerDataService
+{
+    private readonly ApplicationDbContext _context;
+
+    public AccountOwnerDataService(ApplicationDbContext context)
+    {
+        _context = context;
+    }
+
+    public async Task<bool> EnsureConfiguredOwnerAsync(
+        string? configuredUserId,
+        CancellationToken cancellationToken)
+    {
+        var ownerId = string.IsNullOrWhiteSpace(configuredUserId)
+            ? null
+            : configuredUserId.Trim();
+
+        if (ownerId is not null)
+        {
+            var configuredUserExists = await _context.Users
+                .AsNoTracking()
+                .AnyAsync(user => user.Id == ownerId, cancellationToken);
+
+            if (!configuredUserExists)
+                throw new InvalidOperationException("The configured account owner user was not found.");
+        }
+
+        var ownerRows = await _context.Users
+            .Where(user => user.IsAccountOwner || (ownerId != null && user.Id == ownerId))
+            .ToListAsync(cancellationToken);
+
+        var changed = false;
+        foreach (var user in ownerRows)
+        {
+            var shouldBeOwner = ownerId is not null && user.Id == ownerId;
+            if (user.IsAccountOwner != shouldBeOwner)
+            {
+                user.IsAccountOwner = shouldBeOwner;
+                changed = true;
+            }
+        }
+
+        if (changed)
+            await _context.SaveChangesAsync(cancellationToken);
+
+        return changed;
+    }
+}
diff --git a/SeaHaven.DataServices/Implementation/UserDataService.cs b/SeaHaven.DataServices/Implementation/UserDataService.cs
index 055f870..c197dda 100644
--- a/SeaHaven.DataServices/Implementation/UserDataService.cs
+++ b/SeaHaven.DataServices/Implementation/UserDataService.cs
@@ -93,6 +93,15 @@ namespace SeaHaven.DataServices.Implementation
                 .FirstOrDefaultAsync(cancellationToken);
         }
 
+        public async Task<bool> IsAccountOwnerAsync(string userId, CancellationToken cancellationToken)
+        {
+            return await _context.Users
+                .AsNoTracking()
+                .Where(user => user.Id == userId)
+                .Select(user => user.IsAccountOwner)
+                .SingleOrDefaultAsync(cancellationToken);
+        }
+
         public async Task<ApplicationUser?> GetByEmailNormalizedAsync(string email, CancellationToken cancellationToken)
         {
             var normalizedEmail = email.Trim().ToUpperInvariant();
diff --git a/SeaHaven.DataServices/Interfaces/IAccountOwnerDataService.cs b/SeaHaven.DataServices/Interfaces/IAccountOwnerDataService.cs
new file mode 100644
index 0000000..f146f3c
--- /dev/null
+++ b/SeaHaven.DataServices/Interfaces/IAccountOwnerDataService.cs
@@ -0,0 +1,6 @@
+namespace SeaHaven.DataServices.Interfaces;
+
+public interface IAccountOwnerDataService
+{
+    Task<bool> EnsureConfiguredOwnerAsync(string? configuredUserId, CancellationToken cancellationToken);
+}
diff --git a/SeaHaven.DataServices/Interfaces/IUserDataService.cs b/SeaHaven.DataServices/Interfaces/IUserDataService.cs
index 40dc64a..0a60d5c 100644
--- a/SeaHaven.DataServices/Interfaces/IUserDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IUserDataService.cs
@@ -14,6 +14,7 @@ namespace SeaHaven.DataServices.Interfaces
         Task<UserProfileData?> GetProfileAsync(string id, CancellationToken cancellationToken);
         Task<bool> UpdateProfileAsync(string id, string? name, string? email, string? contact, CancellationToken cancellationToken);
         Task<ApplicationUser?> GetForEditAsync(string id, CancellationToken cancellationToken);
+        Task<bool> IsAccountOwnerAsync(string userId, CancellationToken cancellationToken);
         Task<ApplicationUser?> GetByEmailNormalizedAsync(string email, CancellationToken cancellationToken);
         Task UpdateUserAsync(ApplicationUser user, CancellationToken cancellationToken);
         Task DeleteUserWithCascadeAsync(ApplicationUser user, CancellationToken cancellationToken);
diff --git a/SeaHaven.Services/Configuration/AccountOwnerOptions.cs b/SeaHaven.Services/Configuration/AccountOwnerOptions.cs
new file mode 100644
index 0000000..cfd428f
--- /dev/null
+++ b/SeaHaven.Services/Configuration/AccountOwnerOptions.cs
@@ -0,0 +1,8 @@
+namespace SeaHaven.Services.Configuration;
+
+public sealed class AccountOwnerOptions
+{
+    public const string SectionName = "TeamMembers:AccountOwner";
+
+    public string? UserId { get; set; }
+}
diff --git a/SeaHaven.Services/DependencyInjection/ServicesModule.cs b/SeaHaven.Services/DependencyInjection/ServicesModule.cs
index f44e262..e24dec3 100644
--- a/SeaHaven.Services/DependencyInjection/ServicesModule.cs
+++ b/SeaHaven.Services/DependencyInjection/ServicesModule.cs
@@ -18,6 +18,7 @@ namespace SeaHaven.Services.DependencyInjection
             services.Configure<ApprovalsOptions>(configuration.GetSection(ApprovalsOptions.SectionName));
             services.Configure<VendorPortalOptions>(configuration.GetSection(VendorPortalOptions.SectionName));
             services.Configure<VendorDocumentsOptions>(configuration.GetSection(VendorDocumentsOptions.SectionName));
+            services.Configure<AccountOwnerOptions>(configuration.GetSection(AccountOwnerOptions.SectionName));
 
             services.AddOptions<WorkOrderWebhookOptions>()
                 .Bind(configuration.GetSection(WorkOrderWebhookOptions.SectionName))
diff --git a/SeaHaven.Services/Implementation/AccountOwnerDesignationService.cs b/SeaHaven.Services/Implementation/AccountOwnerDesignationService.cs
new file mode 100644
index 0000000..c254872
--- /dev/null
+++ b/SeaHaven.Services/Implementation/AccountOwnerDesignationService.cs
@@ -0,0 +1,23 @@
+using Microsoft.Extensions.Options;
+using SeaHaven.DataServices.Interfaces;
+using SeaHaven.Services.Configuration;
+using SeaHaven.Services.Interfaces;
+
+namespace SeaHaven.Services.Implementation;
+
+public sealed class AccountOwnerDesignationService : IAccountOwnerDesignationService
+{
+    private readonly IAccountOwnerDataService _dataService;
+    private readonly IOptions<AccountOwnerOptions> _options;
+
+    public AccountOwnerDesignationService(
+        IAccountOwnerDataService dataService,
+        IOptions<AccountOwnerOptions> options)
+    {
+        _dataService = dataService;
+        _options = options;
+    }
+
+    public Task EnsureConfiguredOwnerAsync(CancellationToken cancellationToken) =>
+        _dataService.EnsureConfiguredOwnerAsync(_options.Value.UserId, cancellationToken);
+}
diff --git a/SeaHaven.Services/Implementation/UserService.cs b/SeaHaven.Services/Implementation/UserService.cs
index 01b19e9..5d35d39 100644
--- a/SeaHaven.Services/Implementation/UserService.cs
+++ b/SeaHaven.Services/Implementation/UserService.cs
@@ -136,6 +136,9 @@ namespace SeaHaven.Services.Implementation
             if (exist == null)
                 return new AddUserOutcomeDTO { Success = false, Error = UserMutationErrors.UserNotFound };
 
+            if (await _userDataService.IsAccountOwnerAsync(exist.Id, cancellationToken))
+                return new AddUserOutcomeDTO { Success = false, Error = UserMutationErrors.Forbidden };
+
             exist.FirstName = dto.Name;
             if (string.IsNullOrWhiteSpace(dto.Email))
                 throw new ArgumentException("Email is required.", nameof(dto));
@@ -174,6 +177,9 @@ namespace SeaHaven.Services.Implementation
             if (data == null)
                 return new AddUserOutcomeDTO { Success = false, Error = UserMutationErrors.UserNotFound };
 
+            if (await _userDataService.IsAccountOwnerAsync(data.Id, cancellationToken))
+                return new AddUserOutcomeDTO { Success = false, Error = UserMutationErrors.Forbidden };
+
             await _userDataService.DeleteUserWithCascadeAsync(data, cancellationToken);
             return new AddUserOutcomeDTO { Success = true };
         }
@@ -181,7 +187,7 @@ namespace SeaHaven.Services.Implementation
         public async Task DeleteCurrentUserAsync(string userId, CancellationToken cancellationToken)
         {
             var exist = await _userDataService.GetForEditAsync(userId, cancellationToken);
-            if (exist != null)
+            if (exist != null && !await _userDataService.IsAccountOwnerAsync(exist.Id, cancellationToken))
             {
                 exist.IsDeleted = true;
                 await _userDataService.UpdateUserAsync(exist, cancellationToken);
diff --git a/SeaHaven.Services/Interfaces/IAccountOwnerDesignationService.cs b/SeaHaven.Services/Interfaces/IAccountOwnerDesignationService.cs
new file mode 100644
index 0000000..8d28fe9
--- /dev/null
+++ b/SeaHaven.Services/Interfaces/IAccountOwnerDesignationService.cs
@@ -0,0 +1,6 @@
+namespace SeaHaven.Services.Interfaces;
+
+public interface IAccountOwnerDesignationService
+{
+    Task EnsureConfiguredOwnerAsync(CancellationToken cancellationToken);
+}
diff --git a/SeaHavenIndustries.Tests/WorkOrderMediaConcurrencyRelationalTests.cs b/SeaHavenIndustries.Tests/WorkOrderMediaConcurrencyRelationalTests.cs
index bfde333..1f2eea6 100644
--- a/SeaHavenIndustries.Tests/WorkOrderMediaConcurrencyRelationalTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderMediaConcurrencyRelationalTests.cs
@@ -208,7 +208,7 @@ public class WorkOrderMediaConcurrencyRelationalTests
 
             foreach (var index in builder.Model.GetEntityTypes().SelectMany(e => e.GetIndexes()))
             {
-                if (index.GetFilter() != null)
+                if (index.GetFilter() != null && index.GetDatabaseName() != "IX_AspNetUsers_IsAccountOwner")
                     index.SetFilter(null);
             }
 

From 9d7efa34a6241227b852f47329264b08576c36ac Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 18:42:26 -0300
Subject: [PATCH 026/183] feat(dashboard): add trend metrics (SH-350)

---
 .../DashboardServiceTests.cs                  | 255 ++++++++++++++++++
 .../Controllers/DashboardController.cs        |  41 +++
 SeaHaven.Services/DTOs/DashboardDTOs.cs       |  27 +-
 .../Implementation/DashboardService.cs        | 171 ++++++++++++
 .../Interfaces/IDashboardService.cs           |   5 +
 5 files changed, 498 insertions(+), 1 deletion(-)

diff --git a/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs b/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
index a383bd7..54b8886 100644
--- a/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
@@ -367,4 +367,259 @@ public class DashboardServiceTests
         result.Items[0].CompletionRate.Should().Be(100);
         result.Items[0].RescheduleRate.Should().Be(50);
     }
+
+    [Fact]
+    public async Task GetTrendAsync_DailyBucketsClassifyByNewYorkScheduledDate()
+    {
+        using var ctx = NewContext();
+        ctx.workOrders.AddRange(
+            new WorkOrder
+            {
+                AccountId = 1,
+                LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Scheduled,
+                ScheduledDate = new DateTime(2026, 1, 15, 3, 0, 0, DateTimeKind.Utc)
+            },
+            new WorkOrder
+            {
+                AccountId = 1,
+                LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Canceled,
+                ScheduledDate = new DateTime(2026, 1, 14, 15, 0, 0, DateTimeKind.Utc)
+            },
+            new WorkOrder
+            {
+                AccountId = 1,
+                LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Completed,
+                ScheduledDate = new DateTime(2026, 1, 15, 17, 0, 0, DateTimeKind.Utc),
+                CompletedDate = new DateTime(2026, 1, 16, 15, 0, 0, DateTimeKind.Utc)
+            },
+            new WorkOrder
+            {
+                AccountId = 1,
+                LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Scheduled,
+                ScheduledDate = new DateTime(2026, 1, 16, 3, 0, 0, DateTimeKind.Utc)
+            },
+            new WorkOrder
+            {
+                AccountId = 1,
+                LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Scheduled,
+                ScheduledDate = new DateTime(2026, 1, 17, 3, 0, 0, DateTimeKind.Utc)
+            },
+            new WorkOrder
+            {
+                AccountId = 1,
+                LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Scheduled,
+                ScheduledDate = new DateTime(2026, 1, 13, 20, 0, 0, DateTimeKind.Utc)
+            });
+        ctx.SaveChanges();
+
+        var query = new DashboardTrendQueryDTO
+        {
+            DateFrom = new DateOnly(2026, 1, 14),
+            DateTo = new DateOnly(2026, 1, 16)
+        };
+        var trend = await NewService(ctx).GetTrendAsync(
+            AccountUser(1), query, CancellationToken.None);
+
+        trend.Granularity.Should().Be("day");
+        trend.Buckets.Select(bucket => bucket.Date).Should().Equal(
+            new DateOnly(2026, 1, 14), new DateOnly(2026, 1, 15), new DateOnly(2026, 1, 16));
+        trend.Buckets.Select(bucket => bucket.Label).Should().Equal(
+            "2026-01-14", "2026-01-15", "2026-01-16");
+
+        trend.Buckets[0].Total.Should().Be(2);
+        trend.Buckets[0].Open.Should().Be(1);
+        trend.Buckets[0].Canceled.Should().Be(1);
+        trend.Buckets[0].Completed.Should().Be(0);
+        trend.Buckets[0].Overdue.Should().Be(1);
+
+        trend.Buckets[1].Total.Should().Be(2);
+        trend.Buckets[1].Open.Should().Be(1);
+        trend.Buckets[1].Completed.Should().Be(1);
+        trend.Buckets[1].Overdue.Should().Be(1);
+
+        trend.Buckets[2].Total.Should().Be(1);
+        trend.Buckets[2].Open.Should().Be(1);
+        trend.Buckets[2].Overdue.Should().Be(1);
+
+        trend.Buckets.Should().OnlyContain(bucket => !bucket.IsCurrent);
+    }
+
+    [Fact]
+    public async Task GetTrendAsync_ThreeMonthRangeUsesWeeklyMondayBuckets()
+    {
+        using var ctx = NewContext();
+        ctx.workOrders.AddRange(
+            new WorkOrder
+            {
+                AccountId = 1,
+                LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Scheduled,
+                ScheduledDate = new DateTime(2026, 6, 17, 12, 0, 0, DateTimeKind.Utc)
+            },
+            new WorkOrder
+            {
+                AccountId = 1,
+                LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Scheduled,
+                ScheduledDate = new DateTime(2026, 6, 16, 3, 0, 0, DateTimeKind.Utc)
+            },
+            new WorkOrder
+            {
+                AccountId = 1,
+                LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Completed,
+                ScheduledDate = new DateTime(2026, 9, 16, 12, 0, 0, DateTimeKind.Utc),
+                CompletedDate = new DateTime(2026, 9, 16, 18, 0, 0, DateTimeKind.Utc)
+            });
+        ctx.SaveChanges();
+
+        var query = new DashboardTrendQueryDTO
+        {
+            Range = "3m",
+            DateFrom = new DateOnly(2026, 6, 17),
+            DateTo = new DateOnly(2026, 9, 16)
+        };
+        var trend = await NewService(ctx).GetTrendAsync(
+            AccountUser(1), query, CancellationToken.None);
+
+        trend.Granularity.Should().Be("week");
+        trend.Buckets.Should().HaveCount(14);
+        trend.Buckets.Select(bucket => bucket.Date.DayOfWeek)
+            .Should().OnlyContain(day => day == DayOfWeek.Monday);
+        trend.Buckets[0].Date.Should().Be(new DateOnly(2026, 6, 15));
+        trend.Buckets[0].Total.Should().Be(2);
+        trend.Buckets[0].Open.Should().Be(2);
+        trend.Buckets[^1].Date.Should().Be(new DateOnly(2026, 9, 14));
+        trend.Buckets[^1].Total.Should().Be(1);
+        trend.Buckets[^1].Completed.Should().Be(1);
+    }
+
+    [Fact]
+    public async Task GetTrendAsync_YearFilterUsesMonthlyBuckets()
+    {
+        using var ctx = NewContext();
+        ctx.workOrders.AddRange(
+            new WorkOrder
+            {
+                AccountId = 1,
+                LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Scheduled,
+                ScheduledDate = new DateTime(2026, 1, 15, 12, 0, 0, DateTimeKind.Utc)
+            },
+            new WorkOrder
+            {
+                AccountId = 1,
+                LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Completed,
+                ScheduledDate = new DateTime(2026, 3, 20, 4, 0, 0, DateTimeKind.Utc),
+                CompletedDate = new DateTime(2026, 3, 21, 4, 0, 0, DateTimeKind.Utc)
+            },
+            new WorkOrder
+            {
+                AccountId = 1,
+                LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Scheduled,
+                ScheduledDate = new DateTime(2025, 12, 31, 20, 0, 0, DateTimeKind.Utc)
+            },
+            new WorkOrder
+            {
+                AccountId = 1,
+                LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Scheduled,
+                ScheduledDate = new DateTime(2027, 1, 1, 3, 0, 0, DateTimeKind.Utc)
+            });
+        ctx.SaveChanges();
+
+        var trend = await NewService(ctx).GetTrendAsync(
+            AccountUser(1), new DashboardTrendQueryDTO { Year = 2026 }, CancellationToken.None);
+
+        trend.Granularity.Should().Be("month");
+        trend.Buckets.Should().HaveCount(12);
+        trend.Buckets[0].Label.Should().Be("2026-01-01");
+        trend.Buckets[0].Total.Should().Be(1);
+        trend.Buckets[0].Open.Should().Be(1);
+        trend.Buckets[0].Overdue.Should().Be(1);
+        trend.Buckets[2].Label.Should().Be("2026-03-01");
+        trend.Buckets[2].Total.Should().Be(1);
+        trend.Buckets[2].Completed.Should().Be(1);
+        trend.Buckets[11].Label.Should().Be("2026-12-01");
+        trend.Buckets[11].Total.Should().Be(1);
+        trend.Buckets[11].Open.Should().Be(1);
+        trend.Buckets[11].Overdue.Should().Be(0);
+        trend.Today.Should().Be(DashboardBusinessTime.Today());
+    }
+
+    [Fact]
+    public async Task GetTrendAsync_MarksTodayBucketAsCurrent()
+    {
+        using var ctx = NewContext();
+        var today = DashboardBusinessTime.Today();
+        ctx.workOrders.Add(new WorkOrder
+        {
+            AccountId = 1,
+            LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Scheduled,
+            ScheduledDate = today.AddDays(-2).ToDateTime(new TimeOnly(12, 0))
+        });
+        ctx.SaveChanges();
+
+        var query = new DashboardTrendQueryDTO
+        {
+            DateFrom = today.AddDays(-2),
+            DateTo = today.AddDays(2)
+        };
+        var trend = await NewService(ctx).GetTrendAsync(
+            AccountUser(1), query, CancellationToken.None);
+
+        trend.Today.Should().Be(today);
+        trend.Buckets.Should().HaveCount(5);
+        trend.Buckets.Count(bucket => bucket.IsCurrent).Should().Be(1);
+        trend.Buckets.Single(bucket => bucket.IsCurrent).Date.Should().Be(today);
+        trend.Buckets[0].Total.Should().Be(1);
+        trend.Buckets.Single(bucket => bucket.Date == today).Total.Should().Be(0);
+    }
+
+    [Fact]
+    public async Task GetTrendAsync_DispatcherRoleAndTenantScopeMatchStats()
+    {
+        using var ctx = NewContext();
+        ctx.workOrders.AddRange(
+            new WorkOrder
+            {
+                AccountId = 1,
+                AssignTo = "dispatcher-1",
+                LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Scheduled,
+                ScheduledDate = new DateTime(2026, 2, 2, 12, 0, 0, DateTimeKind.Utc)
+            },
+            new WorkOrder
+            {
+                AccountId = 1,
+                AssignTo = "dispatcher-2",
+                LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Scheduled,
+                ScheduledDate = new DateTime(2026, 2, 2, 12, 0, 0, DateTimeKind.Utc)
+            },
+            new WorkOrder
+            {
+                AccountId = 2,
+                AssignTo = "dispatcher-1",
+                LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Scheduled,
+                ScheduledDate = new DateTime(2026, 2, 2, 12, 0, 0, DateTimeKind.Utc)
+            });
+        ctx.SaveChanges();
+
+        var query = new DashboardTrendQueryDTO
+        {
+            DateFrom = new DateOnly(2026, 2, 2),
+            DateTo = new DateOnly(2026, 2, 3)
+        };
+
+        var dispatcherTrend = await NewService(ctx).GetTrendAsync(
+            AccountUser(1, "dispatcher-1", "Dispatcher"), query, CancellationToken.None);
+
+        dispatcherTrend.Buckets.Should().HaveCount(2);
+        dispatcherTrend.Buckets[0].Total.Should().Be(1);
+        dispatcherTrend.Buckets[1].Total.Should().Be(0);
+
+        var adminTrend = await NewService(ctx).GetTrendAsync(
+            AccountUser(1), query, CancellationToken.None);
+
+        adminTrend.Buckets[0].Total.Should().Be(2);
+
+        var otherAccountTrend = await NewService(ctx).GetTrendAsync(
+            AccountUser(2), query, CancellationToken.None);
+
+        otherAccountTrend.Buckets[0].Total.Should().Be(1);
+    }
 }
diff --git a/Api.SeaHavenIndustries/Controllers/DashboardController.cs b/Api.SeaHavenIndustries/Controllers/DashboardController.cs
index 055b933..5551a5d 100644
--- a/Api.SeaHavenIndustries/Controllers/DashboardController.cs
+++ b/Api.SeaHavenIndustries/Controllers/DashboardController.cs
@@ -110,6 +110,47 @@ namespace Api.SeaHavenIndustries.Controllers
             }
         }
 
+        [HttpGet("Trend")]
+        public async Task<IActionResult> GetTrend(
+            [FromQuery] DashboardTrendQueryDTO query,
+            CancellationToken cancellationToken = default)
+        {
+            try
+            {
+                var trend = await _dashboardService.GetTrendAsync(User, query, cancellationToken);
+
+                return Ok(new
+                {
+                    granularity = trend.Granularity,
+                    today = trend.Today,
+                    buckets = trend.Buckets.Select(bucket => new
+                    {
+                        date = bucket.Date,
+                        label = bucket.Label,
+                        total = bucket.Total,
+                        open = bucket.Open,
+                        completed = bucket.Completed,
+                        canceled = bucket.Canceled,
+                        overdue = bucket.Overdue,
+                        isCurrent = bucket.IsCurrent
+                    })
+                });
+            }
+            catch (SeaHaven.Services.Exceptions.WorkOrderBoardValidationException ex)
+                when (ex.Code == "Forbidden")
+            {
+                return StatusCode(StatusCodes.Status403Forbidden, new
+                {
+                    code = ex.Code,
+                    message = ex.Message
+                });
+            }
+            catch (ArgumentOutOfRangeException ex)
+            {
+                return BadRequest(ex.Message);
+            }
+        }
+
         [HttpGet("VendorInsights")]
         public async Task<IActionResult> GetVendorInsights(CancellationToken cancellationToken = default)
         {
diff --git a/SeaHaven.Services/DTOs/DashboardDTOs.cs b/SeaHaven.Services/DTOs/DashboardDTOs.cs
index a767a03..ef5c70d 100644
--- a/SeaHaven.Services/DTOs/DashboardDTOs.cs
+++ b/SeaHaven.Services/DTOs/DashboardDTOs.cs
@@ -1,11 +1,36 @@
 namespace SeaHaven.Services.DTOs
 {
-    public sealed class DashboardStatsQueryDTO
+    public class DashboardStatsQueryDTO
     {
         public DateOnly? DateFrom { get; set; }
         public DateOnly? DateTo { get; set; }
     }
 
+    public sealed class DashboardTrendQueryDTO : DashboardStatsQueryDTO
+    {
+        public string? Range { get; set; }
+        public int? Year { get; set; }
+    }
+
+    public sealed class DashboardTrendResponseDTO
+    {
+        public string Granularity { get; init; } = "day";
+        public DateOnly Today { get; init; }
+        public IReadOnlyList<DashboardTrendBucketDTO> Buckets { get; init; } = [];
+    }
+
+    public sealed class DashboardTrendBucketDTO
+    {
+        public DateOnly Date { get; init; }
+        public string Label { get; init; } = string.Empty;
+        public int Total { get; init; }
+        public int Open { get; init; }
+        public int Completed { get; init; }
+        public int Canceled { get; init; }
+        public int Overdue { get; init; }
+        public bool IsCurrent { get; init; }
+    }
+
     public sealed class DashboardWorkloadResponseDTO
     {
         public IReadOnlyList<DashboardWorkloadRowDTO> Items { get; init; } = [];
diff --git a/SeaHaven.Services/Implementation/DashboardService.cs b/SeaHaven.Services/Implementation/DashboardService.cs
index 757dfb3..a4bdfce 100644
--- a/SeaHaven.Services/Implementation/DashboardService.cs
+++ b/SeaHaven.Services/Implementation/DashboardService.cs
@@ -1,4 +1,6 @@
+using System.Globalization;
 using System.Security.Claims;
+using Data.SeaHavenIndustries.Enums;
 using SeaHaven.DataServices.Interfaces;
 using SeaHaven.Services.DTOs;
 using SeaHaven.Services.Exceptions;
@@ -180,6 +182,175 @@ namespace SeaHaven.Services.Implementation
             };
         }
 
+        public async Task<DashboardTrendResponseDTO> GetTrendAsync(
+            ClaimsPrincipal user,
+            DashboardTrendQueryDTO query,
+            CancellationToken cancellationToken)
+        {
+            var accountId = _accountResolver.ResolveAccountFilter(user);
+            var dispatcherId = user.IsInRole("Dispatcher")
+                ? user.FindFirstValue(ClaimTypes.NameIdentifier)
+                : null;
+            if (user.IsInRole("Dispatcher") && string.IsNullOrWhiteSpace(dispatcherId))
+                throw new WorkOrderBoardValidationException("Forbidden", "Dispatcher identity is required.");
+
+            var today = DashboardBusinessTime.Today();
+            var (windowFrom, windowTo, granularity) = ResolveTrendWindow(query, today);
+            var timezone = TimeZoneInfo.FindSystemTimeZoneById(DashboardBusinessTime.TimeZoneId);
+            var firstBucketStart = BucketStart(windowFrom, granularity);
+            var lastBucketStart = BucketStart(windowTo, granularity);
+            var lastBucketEnd = BucketEnd(lastBucketStart, granularity);
+
+            var workOrders = await _dataService.GetDashboardWorkOrdersAsync(
+                accountId,
+                dispatcherId,
+                firstBucketStart.AddDays(-1),
+                lastBucketEnd.AddDays(1),
+                cancellationToken);
+
+            var buckets = BuildBucketStarts(firstBucketStart, windowTo, granularity)
+                .Select(start => new TrendBucket(start))
+                .ToList();
+            var bucketStarts = buckets.Select(bucket => bucket.Start).ToList();
+
+            foreach (var workOrder in workOrders)
+            {
+                if (workOrder.ScheduledDate is not DateTime scheduled)
+                    continue;
+                var businessDate = DateOnly.FromDateTime(
+                    TimeZoneInfo.ConvertTimeFromUtc(
+                        DateTime.SpecifyKind(scheduled, DateTimeKind.Utc), timezone));
+                if (businessDate < firstBucketStart || businessDate > lastBucketEnd)
+                    continue;
+                var bucket = buckets[LocateBucket(bucketStarts, businessDate)];
+                var status = workOrder.LifecycleStatus
+                    ?? LifecycleStatusMapper.ParseLifecycleStatus(workOrder.LegacyStatus);
+                bucket.Total++;
+                if (status == LifecycleStatus.Completed)
+                    bucket.Completed++;
+                else if (status == LifecycleStatus.Canceled)
+                    bucket.Canceled++;
+                else
+                {
+                    bucket.Open++;
+                    if (businessDate < today)
+                        bucket.Overdue++;
+                }
+            }
+
+            DateOnly? currentStart = today < firstBucketStart || today > lastBucketEnd
+                ? null
+                : buckets[LocateBucket(bucketStarts, today)].Start;
+
+            return new DashboardTrendResponseDTO
+            {
+                Granularity = granularity,
+                Today = today,
+                Buckets = buckets.Select(bucket => new DashboardTrendBucketDTO
+                {
+                    Date = bucket.Start,
+                    Label = bucket.Start.ToString("yyyy-MM-dd", CultureInfo.InvariantCulture),
+                    Total = bucket.Total,
+                    Open = bucket.Open,
+                    Completed = bucket.Completed,
+                    Canceled = bucket.Canceled,
+                    Overdue = bucket.Overdue,
+                    IsCurrent = bucket.Start == currentStart
+                }).ToList()
+            };
+        }
+
+        private static (DateOnly From, DateOnly To, string Granularity) ResolveTrendWindow(
+            DashboardTrendQueryDTO query,
+            DateOnly today)
+        {
+            if (query.Year is int year)
+            {
+                if (year < DateOnly.MinValue.Year || year > DateOnly.MaxValue.Year)
+                    throw new ArgumentOutOfRangeException(nameof(query));
+                return (new DateOnly(year, 1, 1), new DateOnly(year, 12, 31), "month");
+            }
+
+            if (string.Equals(query.Range, ThreeMonthRange, StringComparison.OrdinalIgnoreCase))
+            {
+                var weeklyTo = query.DateTo ?? today;
+                var weeklyFrom = query.DateFrom ?? weeklyTo.AddMonths(-3).AddDays(1);
+                if (weeklyFrom > weeklyTo)
+                    throw new ArgumentOutOfRangeException(nameof(query));
+                return (weeklyFrom, weeklyTo, "week");
+            }
+
+            if (query.DateFrom is DateOnly dailyFrom && query.DateTo is DateOnly dailyTo)
+            {
+                if (dailyFrom > dailyTo)
+                    throw new ArgumentOutOfRangeException(nameof(query));
+                return (dailyFrom, dailyTo, "day");
+            }
+
+            if (query.DateFrom.HasValue != query.DateTo.HasValue)
+                throw new ArgumentOutOfRangeException(nameof(query));
+
+            return (today, today, "day");
+        }
+
+        private static List<DateOnly> BuildBucketStarts(DateOnly from, DateOnly to, string granularity)
+        {
+            var starts = new List<DateOnly>();
+            var current = BucketStart(from, granularity);
+            while (current <= to)
+            {
+                starts.Add(current);
+                current = granularity switch
+                {
+                    "week" => current.AddDays(7),
+                    "month" => current.AddMonths(1),
+                    _ => current.AddDays(1)
+                };
+            }
+            return starts;
+        }
+
+        private static DateOnly BucketStart(DateOnly date, string granularity) => granularity switch
+        {
+            "week" => date.AddDays(-(((int)date.DayOfWeek + 6) % 7)),
+            "month" => new DateOnly(date.Year, date.Month, 1),
+            _ => date
+        };
+
+        private static DateOnly BucketEnd(DateOnly start, string granularity) => granularity switch
+        {
+            "week" => start.AddDays(6),
+            "month" => start.AddMonths(1).AddDays(-1),
+            _ => start
+        };
+
+        private static int LocateBucket(List<DateOnly> starts, DateOnly date)
+        {
+            var low = 0;
+            var high = starts.Count - 1;
+            while (low < high)
+            {
+                var middle = (low + high + 1) / 2;
+                if (starts[middle] <= date)
+                    low = middle;
+                else
+                    high = middle - 1;
+            }
+            return low;
+        }
+
+        private const string ThreeMonthRange = "3m";
+
+        private sealed class TrendBucket(DateOnly start)
+        {
+            public DateOnly Start { get; } = start;
+            public int Total { get; set; }
+            public int Open { get; set; }
+            public int Completed { get; set; }
+            public int Canceled { get; set; }
+            public int Overdue { get; set; }
+        }
+
         public async Task<DashboardVendorInsightsResponseDTO> GetVendorInsightsAsync(
             ClaimsPrincipal user,
             CancellationToken cancellationToken)
diff --git a/SeaHaven.Services/Interfaces/IDashboardService.cs b/SeaHaven.Services/Interfaces/IDashboardService.cs
index 2f744eb..8464bad 100644
--- a/SeaHaven.Services/Interfaces/IDashboardService.cs
+++ b/SeaHaven.Services/Interfaces/IDashboardService.cs
@@ -27,6 +27,11 @@ namespace SeaHaven.Services.Interfaces
             DashboardStatsQueryDTO query,
             CancellationToken cancellationToken);
 
+        Task<DashboardTrendResponseDTO> GetTrendAsync(
+            ClaimsPrincipal user,
+            DashboardTrendQueryDTO query,
+            CancellationToken cancellationToken);
+
         Task<DashboardVendorInsightsResponseDTO> GetVendorInsightsAsync(
             ClaimsPrincipal user,
             CancellationToken cancellationToken);

From fc5c7d5ca494c8080e1248db1631d8192d756ed4 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 19:14:36 -0300
Subject: [PATCH 027/183] feat(team-members): support pending member creation
 (SH-325)

---
 .../TeamMemberServiceTests.cs                 |  153 +
 .../Controllers/TeamMemberController.cs       |   36 +
 .../Auth/ApplicationDbContext.cs              |   24 +
 .../Auth/UserServiceArea.cs                   |    9 +
 ...220437_SH325_PendingTeamMember.Designer.cs | 4056 +++++++++++++++++
 .../20260916220437_SH325_PendingTeamMember.cs |   66 +
 .../ApplicationDbContextModelSnapshot.cs      |   38 +
 SeaHaven.DataServices/Dto/UserReadModels.cs   |    4 +
 .../TeamPermissionOverrideDataService.cs      |   53 +-
 .../Implementation/UserDataService.cs         |   15 +-
 .../UserServiceAreaDataService.cs             |   46 +
 .../ITeamPermissionOverrideDataService.cs     |    5 +
 .../Interfaces/IUserServiceAreaDataService.cs |   15 +
 .../TeamPermissionServiceTests.cs             |   14 +
 .../Constants/TeamMemberConstants.cs          |   31 +
 SeaHaven.Services/DTOs/IdentityDTOs.cs        |    4 +
 SeaHaven.Services/DTOs/TeamMemberDTOs.cs      |   33 +
 .../Implementation/TeamMemberService.cs       |  214 +
 .../Implementation/UserService.cs             |    6 +-
 .../Interfaces/ITeamMemberService.cs          |   12 +
 20 files changed, 4813 insertions(+), 21 deletions(-)
 create mode 100644 Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs
 create mode 100644 Api.SeaHavenIndustries/Controllers/TeamMemberController.cs
 create mode 100644 Data.SeaHavenIndustries/Auth/UserServiceArea.cs
 create mode 100644 Data.SeaHavenIndustries/Migrations/20260916220437_SH325_PendingTeamMember.Designer.cs
 create mode 100644 Data.SeaHavenIndustries/Migrations/20260916220437_SH325_PendingTeamMember.cs
 create mode 100644 SeaHaven.DataServices/Implementation/UserServiceAreaDataService.cs
 create mode 100644 SeaHaven.DataServices/Interfaces/IUserServiceAreaDataService.cs
 create mode 100644 SeaHaven.Services/Constants/TeamMemberConstants.cs
 create mode 100644 SeaHaven.Services/DTOs/TeamMemberDTOs.cs
 create mode 100644 SeaHaven.Services/Implementation/TeamMemberService.cs
 create mode 100644 SeaHaven.Services/Interfaces/ITeamMemberService.cs

diff --git a/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs b/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs
new file mode 100644
index 0000000..4b39ede
--- /dev/null
+++ b/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs
@@ -0,0 +1,153 @@
+using System.Security.Claims;
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using FluentAssertions;
+using Microsoft.AspNetCore.Identity;
+using Microsoft.Extensions.Logging;
+using Microsoft.Extensions.Options;
+using Moq;
+using SeaHaven.DataServices.Interfaces;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Implementation;
+using Xunit;
+
+namespace Api.SeaHavenIndustries.Tests;
+
+public sealed class TeamMemberServiceTests
+{
+    [Fact]
+    public async Task Create_DispatcherRequiresAtLeastOneServiceArea()
+    {
+        var userManager = UserManager();
+        var roleManager = RoleManager();
+        var service = new TeamMemberService(
+            userManager.Object,
+            roleManager.Object,
+            Mock.Of<IUserServiceAreaDataService>(),
+            Mock.Of<ITeamPermissionOverrideDataService>());
+
+        var result = await service.CreateAsync(
+            ValidRequest() with { ServiceAreas = Array.Empty<string>() },
+            Admin(),
+            CancellationToken.None);
+
+        result.Success.Should().BeFalse();
+        result.Error.Should().Be("At least one service area is required for a Dispatcher.");
+        userManager.Verify(manager => manager.CreateAsync(It.IsAny<ApplicationUser>()), Times.Never);
+    }
+
+    [Fact]
+    public async Task Create_RejectsUnknownColorAndPermission()
+    {
+        var service = NewService(out var userManager, out _, out _, out _);
+
+        var badColor = await service.CreateAsync(
+            ValidRequest() with { Color = "#000000" },
+            Admin(),
+            CancellationToken.None);
+        var badPermission = await service.CreateAsync(
+            ValidRequest() with
+            {
+                PermissionOverrides = new Dictionary<string, UserPermissionState>
+                {
+                    ["not-a-permission"] = UserPermissionState.Allow
+                }
+            },
+            Admin(),
+            CancellationToken.None);
+
+        badColor.Error.Should().Be("Color must be selected from the accessible palette.");
+        badPermission.Error.Should().Be("Unknown permission key: not-a-permission.");
+        userManager.Verify(manager => manager.CreateAsync(It.IsAny<ApplicationUser>()), Times.Never);
+    }
+
+    [Fact]
+    public async Task Create_PersistsPendingUserWithoutPasswordAndStoresAreasAndOverrides()
+    {
+        var service = NewService(out var userManager, out var roleManager, out var areas, out var overrides);
+        ApplicationUser? created = null;
+        userManager
+            .Setup(manager => manager.CreateAsync(It.IsAny<ApplicationUser>()))
+            .Callback<ApplicationUser>(user =>
+            {
+                user.Id = "new-user";
+                created = user;
+            })
+            .ReturnsAsync(IdentityResult.Success);
+        userManager
+            .Setup(manager => manager.FindByEmailAsync(It.IsAny<string>()))
+            .ReturnsAsync((ApplicationUser?)null);
+        userManager
+            .Setup(manager => manager.AddToRoleAsync(It.IsAny<ApplicationUser>(), "Dispatcher"))
+            .ReturnsAsync(IdentityResult.Success);
+        roleManager.Setup(manager => manager.RoleExistsAsync("Dispatcher")).ReturnsAsync(true);
+
+        var result = await service.CreateAsync(ValidRequest(), Admin(), CancellationToken.None);
+
+        result.Success.Should().BeTrue();
+        created.Should().NotBeNull();
+        created!.PasswordHash.Should().BeNull();
+        created.EmailConfirmed.Should().BeFalse();
+        created.PendingRegistration.Should().BeTrue();
+        created.PhoneNumber.Should().Be("555-0100");
+        result.Member!.ServiceAreas.Should().Equal("East", "West");
+        areas.Verify(data => data.ReplaceAsync("new-user", It.Is<IReadOnlyCollection<string>>(value => value.SequenceEqual(new[] { "East", "West" })), It.IsAny<CancellationToken>()), Times.Once);
+        overrides.Verify(data => data.SetOverridesAsync("new-user", It.Is<IReadOnlyDictionary<string, UserPermissionState>>(value => value["deleteSites"] == UserPermissionState.Allow), It.IsAny<CancellationToken>()), Times.Once);
+    }
+
+    private static TeamMemberService NewService(
+        out Mock<UserManager<ApplicationUser>> userManager,
+        out Mock<RoleManager<IdentityRole>> roleManager,
+        out Mock<IUserServiceAreaDataService> areas,
+        out Mock<ITeamPermissionOverrideDataService> overrides)
+    {
+        userManager = UserManager();
+        roleManager = RoleManager();
+        areas = new Mock<IUserServiceAreaDataService>();
+        overrides = new Mock<ITeamPermissionOverrideDataService>();
+        return new TeamMemberService(userManager.Object, roleManager.Object, areas.Object, overrides.Object);
+    }
+
+    private static Mock<UserManager<ApplicationUser>> UserManager()
+    {
+        var store = new Mock<IUserStore<ApplicationUser>>();
+        return new Mock<UserManager<ApplicationUser>>(
+            store.Object,
+            Microsoft.Extensions.Options.Options.Create(new IdentityOptions()),
+            Mock.Of<IPasswordHasher<ApplicationUser>>(),
+            Array.Empty<IUserValidator<ApplicationUser>>(),
+            Array.Empty<IPasswordValidator<ApplicationUser>>(),
+            Mock.Of<ILookupNormalizer>(),
+            new IdentityErrorDescriber(),
+            Mock.Of<IServiceProvider>(),
+            Mock.Of<ILogger<UserManager<ApplicationUser>>>());
+    }
+
+    private static Mock<RoleManager<IdentityRole>> RoleManager()
+    {
+        var store = new Mock<IRoleStore<IdentityRole>>();
+        return new Mock<RoleManager<IdentityRole>>(
+            store.Object,
+            Array.Empty<IRoleValidator<IdentityRole>>(),
+            Mock.Of<ILookupNormalizer>(),
+            new IdentityErrorDescriber(),
+            Mock.Of<ILogger<RoleManager<IdentityRole>>>());
+    }
+
+    private static CreateTeamMemberRequestDTO ValidRequest() => new()
+    {
+        Name = "Taylor Dispatcher",
+        Role = "dispatcher",
+        Color = "#F59E0B",
+        Email = "taylor@example.com",
+        Phone = "555-0100",
+        ServiceAreas = new[] { "east", "West" },
+        PermissionOverrides = new Dictionary<string, UserPermissionState>
+        {
+            ["deleteSites"] = UserPermissionState.Allow
+        }
+    };
+
+    private static ClaimsPrincipal Admin() =>
+        new(new ClaimsIdentity(new[] { new Claim(ClaimTypes.Role, "Admin") }, "test"));
+}
diff --git a/Api.SeaHavenIndustries/Controllers/TeamMemberController.cs b/Api.SeaHavenIndustries/Controllers/TeamMemberController.cs
new file mode 100644
index 0000000..d09c6bd
--- /dev/null
+++ b/Api.SeaHavenIndustries/Controllers/TeamMemberController.cs
@@ -0,0 +1,36 @@
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Interfaces;
+
+namespace Api.SeaHavenIndustries.Controllers;
+
+[Authorize]
+[ApiController]
+[Route("api/team-members")]
+public sealed class TeamMemberController : ControllerBase
+{
+    private readonly ITeamMemberService _teamMemberService;
+
+    public TeamMemberController(ITeamMemberService teamMemberService)
+    {
+        _teamMemberService = teamMemberService;
+    }
+
+    [HttpPost]
+    public async Task<IActionResult> Create(
+        CreateTeamMemberRequestDTO request,
+        CancellationToken cancellationToken)
+    {
+        var outcome = await _teamMemberService.CreateAsync(request, User, cancellationToken);
+        if (!outcome.Success)
+        {
+            if (string.Equals(outcome.Error, "Forbidden", StringComparison.Ordinal))
+                return Forbid();
+
+            return BadRequest(new { message = outcome.Error });
+        }
+
+        return Ok(outcome.Member);
+    }
+}
diff --git a/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs b/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs
index 870a127..cfc544b 100644
--- a/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs
+++ b/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs
@@ -257,6 +257,26 @@ namespace Data.SeaHavenIndustries
                     .IsUnique()
                     .HasDatabaseName("IX_UserPermissionOverrides_UserId_PermissionKey");
             });
+
+            builder.Entity<UserServiceArea>(entity =>
+            {
+                entity.HasKey(area => new { area.UserId, area.Area });
+
+                entity.Property(area => area.UserId)
+                    .HasMaxLength(450);
+
+                entity.Property(area => area.Area)
+                    .HasMaxLength(32);
+
+                entity.HasOne(area => area.User)
+                    .WithMany(user => user.ServiceAreas)
+                    .HasForeignKey(area => area.UserId)
+                    .OnDelete(DeleteBehavior.Cascade);
+
+                entity.HasIndex(area => new { area.UserId, area.Area })
+                    .IsUnique()
+                    .HasDatabaseName("IX_UserServiceAreas_UserId_Area");
+            });
         }
         public DbSet<Category> Categories { get; set; }
         public DbSet<Locations> Locations { get; set; }
@@ -312,6 +332,7 @@ namespace Data.SeaHavenIndustries
         public DbSet<JobTitle> JobTitles { get; set; }
         public DbSet<Region> Regions { get; set; }
         public DbSet<UserPermissionOverride> UserPermissionOverrides { get; set; }
+        public DbSet<UserServiceArea> UserServiceAreas { get; set; }
 
         public override int SaveChanges()
         {
@@ -392,12 +413,15 @@ namespace Data.SeaHavenIndustries
         public string? Color { get; set; }
         public int? Type { get; set; } // 1 for users 0 for admin
         public bool IsAccountOwner { get; set; }
+        public bool? PendingRegistration { get; set; }
+        public DateTime? PendingRegistrationCreatedDate { get; set; }
         /// <summary>Optional CRM account membership for server-derived media scope (SH-221).</summary>
         public int? AccountId { get; set; }
         [ForeignKey(nameof(AccountId))]
         public virtual Accounts? Account { get; set; }
         public ICollection<Template>? Templates { get; set; }
         public ICollection<WorkOrder>? WorkOrders { get; set; }
+        public ICollection<UserServiceArea> ServiceAreas { get; set; } = new List<UserServiceArea>();
     }
     public class FullAuditEntity
     {
diff --git a/Data.SeaHavenIndustries/Auth/UserServiceArea.cs b/Data.SeaHavenIndustries/Auth/UserServiceArea.cs
new file mode 100644
index 0000000..f07291c
--- /dev/null
+++ b/Data.SeaHavenIndustries/Auth/UserServiceArea.cs
@@ -0,0 +1,9 @@
+namespace Data.SeaHavenIndustries;
+
+/// <summary>Canonical service area assigned to a team member.</summary>
+public sealed class UserServiceArea
+{
+    public string UserId { get; set; } = null!;
+    public string Area { get; set; } = null!;
+    public ApplicationUser User { get; set; } = null!;
+}
diff --git a/Data.SeaHavenIndustries/Migrations/20260916220437_SH325_PendingTeamMember.Designer.cs b/Data.SeaHavenIndustries/Migrations/20260916220437_SH325_PendingTeamMember.Designer.cs
new file mode 100644
index 0000000..d28a901
--- /dev/null
+++ b/Data.SeaHavenIndustries/Migrations/20260916220437_SH325_PendingTeamMember.Designer.cs
@@ -0,0 +1,4056 @@
+// <auto-generated />
+using System;
+using Data.SeaHavenIndustries;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Metadata;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+
+#nullable disable
+
+namespace Data.SeaHavenIndustries.Migrations
+{
+    [DbContext(typeof(ApplicationDbContext))]
+    [Migration("20260916220437_SH325_PendingTeamMember")]
+    partial class SH325_PendingTeamMember
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasAnnotation("ProductVersion", "8.0.8")
+                .HasAnnotation("Relational:MaxIdentifierLength", 128);
+
+            SqlServerModelBuilderExtensions.UseIdentityColumns(modelBuilder);
+
+            modelBuilder.HasSequence("WorkOrderInternalNumberSequence");
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Accounts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("CurrencyCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Importance")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("IndustryId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("OwnerEmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Phone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PrivacySetting")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ServiceInstructions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Tags")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("TerritoryId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("TimeZone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Type")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Website")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Accounts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Addresses", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AddressType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Country")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("County")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("ContactId");
+
+                    b.ToTable("Addresses");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int>("AccessFailedCount")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Color")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ConcurrencyStamp")
+                        .IsConcurrencyToken()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Contact")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DeletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<bool>("EmailConfirmed")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("FirstName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Initials")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsAccountOwner")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("LastName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Locations")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("LockoutEnabled")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTimeOffset?>("LockoutEnd")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("NormalizedEmail")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("NormalizedUserName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("PasswordHash")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("PendingRegistration")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("PendingRegistrationCreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("PhoneNumberConfirmed")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("SecurityStamp")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("TwoFactorEnabled")
+                        .HasColumnType("bit");
+
+                    b.Property<int?>("Type")
+                        .HasColumnType("int");
+
+                    b.Property<string>("UniqueName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserImage")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("IsAccountOwner")
+                        .IsUnique()
+                        .HasDatabaseName("IX_AspNetUsers_IsAccountOwner")
+                        .HasFilter("IsAccountOwner = 1");
+
+                    b.HasIndex("NormalizedEmail")
+                        .HasDatabaseName("EmailIndex");
+
+                    b.HasIndex("NormalizedUserName")
+                        .IsUnique()
+                        .HasDatabaseName("UserNameIndex")
+                        .HasFilter("[NormalizedUserName] IS NOT NULL");
+
+                    b.ToTable("AspNetUsers", (string)null);
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Area", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("Areas");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("AssetCode")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Assets");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Category", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Categories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Comments", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CommentType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Commenter")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Commenttext")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Documents")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalCommentId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("ExternalSourceEmailS3Key")
+                        .HasMaxLength(2048)
+                        .HasColumnType("nvarchar(2048)");
+
+                    b.Property<DateTimeOffset?>("ExternalUpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalVersionHash")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RecordType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int?>("WorkerOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("UserId");
+
+                    b.HasIndex("WorkerOrderId");
+
+                    b.ToTable("Comments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.CompletionDocTemplate", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ServiceKey")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("TemplateUrl")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ServiceKey", "IsActive");
+
+                    b.ToTable("CompletionDocTemplates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ContactDetails", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DateOfBirth")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Gender")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PrivacySetting")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Tags")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Territory")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.ToTable("ContactDetails");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ContactType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FirstName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LastName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("MiddleName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Owner")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("SiteContactOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Title")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Contacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Department", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Departments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AcceptToken")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("AcknowledgedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CommercialStatusUpdatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CompletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DispatchNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DispatchedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("EmailSent")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("EstimatedArrivalAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("EtaManualOverride")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("InvoiceNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("InvoiceStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<decimal?>("NTEAmount")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<string>("PONumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PaymentStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ReplyToAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<DateTime?>("ScheduledDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TechPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("VendorNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<DateTime?>("VerifiedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("VerifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("Dispatches");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchChecklistItem", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CompletedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("CompletedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool>("IsCompleted")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ItemText")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("DispatchChecklistItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchSignoff", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Signature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignatureMethod")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("SignedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("SignoffType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.ToTable("DispatchSignoffs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchUpliftRequest", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<decimal?>("CurrentNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<DateTime?>("DecidedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DecidedByUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DecisionNote")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("EscalatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("EvidenceDocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("ExpiresAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("InitialNotificationSentAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("NotificationError")
+                        .HasMaxLength(500)
+                        .HasColumnType("nvarchar(500)");
+
+                    b.Property<string>("NotificationStatus")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<string>("RequestKey")
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<string>("RequestedByVendorName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<decimal>("RequestedNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<int>("RequiredTier")
+                        .HasColumnType("int");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<string>("Status")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<string>("VendorReason")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId")
+                        .IsUnique()
+                        .HasFilter("[Status] IN ('Pending', 'ChangesRequested')");
+
+                    b.HasIndex("EvidenceDocumentId");
+
+                    b.HasIndex("DispatchId", "RequestKey")
+                        .IsUnique()
+                        .HasFilter("[RequestKey] IS NOT NULL");
+
+                    b.ToTable("DispatchUpliftRequests");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchWorkOrder", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("DispatchWorkOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DropdownOption", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Category")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ParentValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Value")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("DropdownOptions");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("CanChangeProviderNumber")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ConfirmUserName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DateOfBirth")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DepartmentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("EmployeeNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FirstName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Gender")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("HireDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<int?>("JobTitleId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("LastLogin")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LastName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("MiddleName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("PermissionGroupId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("RegionId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("SMSAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TimeZone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Website")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DepartmentId");
+
+                    b.HasIndex("JobTitleId");
+
+                    b.HasIndex("RegionId");
+
+                    b.ToTable("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeAddress", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CountryCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CountyId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("StateCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Street")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("StreetLineTwo")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId")
+                        .IsUnique();
+
+                    b.ToTable("EmployeeAddresses");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeEmail", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<int?>("EmailTypeId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsPrimary")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.ToTable("EmployeeEmails");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeePhone", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Extension")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsPrimary")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Number")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("PhoneTypeId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.ToTable("EmployeePhones");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Events", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("AllDay")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("EndDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("EndTime")
+                        .HasMaxLength(10)
+                        .HasColumnType("nvarchar(10)");
+
+                    b.Property<string>("EventColor")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Location")
+                        .HasMaxLength(150)
+                        .HasColumnType("nvarchar(150)");
+
+                    b.Property<int?>("RecordID")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RecordName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("RecordTargetType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("ReminderMinutes")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime>("StartDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("StartTime")
+                        .HasMaxLength(10)
+                        .HasColumnType("nvarchar(10)");
+
+                    b.Property<string>("Title")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Events");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.FollowUps", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Reason")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("ScheduleDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<TimeSpan>("ScheduleStartTime")
+                        .HasColumnType("time");
+
+                    b.Property<string>("Status")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.HasIndex("LocationId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("FollowUps");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ForgetPasswordCode", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Code")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Email")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("ForgetPasswordCodes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.JobTitle", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("JobTitles");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalLocationId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Latitude")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Longitude")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Title")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.ToTable("Locations");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.PMSchedules", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AssetId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Frequency")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("StartDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AssetId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("PMSchedules");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BillingAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("Date")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ProjectName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("QuotId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ShippingAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("Quotes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.QuotesLineItems", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Descriptions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<decimal?>("Lineitem")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<int?>("LineitemNumber")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("QuoteId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("QuoteId");
+
+                    b.ToTable("QuotesLines");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Region", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Regions");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.SitePreferredVendor", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Trade")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("UpdatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("LocationId", "VendorId")
+                        .IsUnique()
+                        .HasFilter("[Trade] IS NULL");
+
+                    b.HasIndex("LocationId", "VendorId", "Trade")
+                        .IsUnique()
+                        .HasFilter("[Trade] IS NOT NULL");
+
+                    b.ToTable("SitePreferredVendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplate", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("TaskListTemplates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplateItem", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ItemText")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<int>("TaskListTemplateId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("TaskListTemplateId");
+
+                    b.ToTable("TaskListTemplateItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Template", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AfterPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AfterPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AssignTo")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DueDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Priority")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffSignature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderTitle")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AssignTo");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Templates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Trade", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("Trades");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserPermissionOverride", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("PermissionKey")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<int>("State")
+                        .HasColumnType("int");
+
+                    b.HasKey("UserId", "PermissionKey");
+
+                    b.HasIndex("UserId", "PermissionKey")
+                        .IsUnique()
+                        .HasDatabaseName("IX_UserPermissionOverrides_UserId_PermissionKey");
+
+                    b.ToTable("UserPermissionOverrides");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserServiceArea", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Area")
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.HasKey("UserId", "Area");
+
+                    b.HasIndex("UserId", "Area")
+                        .IsUnique()
+                        .HasDatabaseName("IX_UserServiceAreas_UserId_Area");
+
+                    b.ToTable("UserServiceAreas");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AvailabilityStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("AvailabilityUpdatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CompanyId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CompanyName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CompanyPhone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ContactName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("GoogleMapsUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Phone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PreferredContact")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TradeSpecialties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CompanyId");
+
+                    b.ToTable("Vendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAccessToken", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime>("ExpiresAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime>("IssuedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("LastUsedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("RevokedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Token")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Token")
+                        .IsUnique();
+
+                    b.HasIndex("VendorId");
+
+                    b.ToTable("VendorAccessTokens");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAuditLog", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Actor")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("FieldName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NewValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("OldValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.ToTable("VendorAuditLogs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("AreaId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CompanyPhone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("GoogleMapsUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AreaId");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("VendorCompanies");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompletionDocument", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ContentType")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("OriginalFileName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Purpose")
+                        .IsRequired()
+                        .HasMaxLength(30)
+                        .HasColumnType("nvarchar(30)");
+
+                    b.Property<string>("RejectionReason")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ReplacesDocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ReviewStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ReviewedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ScanStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ScannedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<long>("SizeBytes")
+                        .HasColumnType("bigint");
+
+                    b.Property<string>("StoredFileName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("Version")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("VendorCompletionDocuments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("AdditionalContacts")
+                        .HasMaxLength(4000)
+                        .HasColumnType("nvarchar(4000)");
+
+                    b.Property<string>("AfterPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AfterPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateOnly?>("AssignDate")
+                        .HasColumnType("date");
+
+                    b.Property<string>("AssignTo")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("AvetaRequired")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("AvettaTask")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Building")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("CarriedOver")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CompletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Customer")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DateReported")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("DocStatus")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("DueDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ExternalAssignedTo")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<DateTimeOffset?>("ExternalLastOccurredAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalRecordType")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset?>("ExternalUpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalVersionHash")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("ExternalWorkOrderId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ExtraServices")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<string>("FlagColor")
+                        .HasMaxLength(7)
+                        .HasColumnType("nvarchar(7)");
+
+                    b.Property<string>("FrozenCompany")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FrozenPoc")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FrozenSite")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("InternalWONumber")
+                        .HasMaxLength(11)
+                        .HasColumnType("nvarchar(11)");
+
+                    b.Property<bool>("IsAddOn")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LegacyStatus")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("LifecycleStatus")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("OperationalFlags")
+                        .HasColumnType("int");
+
+                    b.Property<DateOnly?>("OriginalDate")
+                        .HasColumnType("date");
+
+                    b.Property<DateOnly?>("OriginalWeek")
+                        .HasColumnType("date");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PocName")
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("PocNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<string>("PocPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int?>("PrimaryDispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Priority")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Problem")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("RescheduleCount")
+                        .HasColumnType("int");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<bool?>("ScheduleWeekOnly")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("ScheduledDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("ScheduledEnd")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("ScheduledStart")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Service")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("ServiceNotes")
+                        .HasMaxLength(4000)
+                        .HasColumnType("nvarchar(4000)");
+
+                    b.Property<string>("Severity")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffSignature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteCode")
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<string>("Source")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SourceEmailS3Key")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SubTrade")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateOnly?>("TargetWeek")
+                        .HasColumnType("date");
+
+                    b.Property<string>("TechPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<string>("Trade")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<decimal?>("VendorNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<string>("VendorNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<int?>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("WorkerOrderNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderTitle")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("istemplate")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("ExternalWorkOrderId")
+                        .IsUnique()
+                        .HasFilter("[ExternalWorkOrderId] IS NOT NULL AND [ExternalWorkOrderId] <> ''");
+
+                    b.HasIndex("InternalWONumber")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.HasIndex("LocationId");
+
+                    b.HasIndex("PrimaryDispatchId");
+
+                    b.HasIndex("ScheduledDate");
+
+                    b.HasIndex("SiteCode")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.HasIndex("WorkOrderType");
+
+                    b.HasIndex("AssignTo", "ScheduledDate");
+
+                    b.HasIndex("LifecycleStatus", "ScheduledDate")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.ToTable("workOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAttachments", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Category")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("workOrderAttachments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAuditLog", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Action")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ActorType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CorrelationId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("EventType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FieldName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NewValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("OldValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UserId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("WorkOrderAuditLogs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderCategories", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("workOrderCategories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderContacts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("WorkOrderContacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderExternalReceipt", b =>
+                {
+                    b.Property<long>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("bigint");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<long>("Id"));
+
+                    b.Property<string>("ExternalId")
+                        .IsRequired()
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Kind")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<DateTimeOffset>("ProcessedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("Source")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset>("UpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("VersionHash")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Source", "Kind", "ExternalId")
+                        .IsUnique()
+                        .HasDatabaseName("IX_WorkOrderExternalReceipts_Source_Kind_ExternalId");
+
+                    b.ToTable("WorkOrderExternalReceipts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderFieldLock", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("FieldName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<DateTime>("LockedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("LockedByUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkOrderId", "FieldName")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderFieldLocks");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderReconciliationJob", b =>
+                {
+                    b.Property<int>("Id")
+                        .HasColumnType("int");
+
+                    b.Property<int>("CommentsProcessed")
+                        .HasColumnType("int");
+
+                    b.Property<DateTimeOffset?>("CompletedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ErrorCode")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<Guid?>("FenceToken")
+                        .HasColumnType("uniqueidentifier");
+
+                    b.Property<DateTimeOffset?>("LeaseExpiresAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("Reason")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset?>("RequestedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<Guid>("RunId")
+                        .HasColumnType("uniqueidentifier");
+
+                    b.Property<DateTimeOffset?>("StartedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("State")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<int>("WorkOrdersProcessed")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("State");
+
+                    b.ToTable("WorkOrderReconciliationJobs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWebhookDelivery", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BodySha256")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("DeliveryId")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("EventType")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<DateTimeOffset>("OccurredAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<DateTimeOffset>("ProcessedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DeliveryId")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderWebhookDeliveries");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWeekRolledLedger", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CorrelationId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("ProcessedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateOnly>("SourceWeekStart")
+                        .HasColumnType("date");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkOrderId", "SourceWeekStart")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderWeekRolledLedgers");
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRole", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ConcurrencyStamp")
+                        .IsConcurrencyToken()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("NormalizedName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique()
+                        .HasDatabaseName("RoleNameIndex")
+                        .HasFilter("[NormalizedName] IS NOT NULL");
+
+                    b.ToTable("AspNetRoles", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRoleClaim<string>", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ClaimType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ClaimValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("RoleId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AspNetRoleClaims", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserClaim<string>", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ClaimType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ClaimValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UserId");
+
+                    b.ToTable("AspNetUserClaims", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserLogin<string>", b =>
+                {
+                    b.Property<string>("LoginProvider")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ProviderKey")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ProviderDisplayName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("LoginProvider", "ProviderKey");
+
+                    b.HasIndex("UserId");
+
+                    b.ToTable("AspNetUserLogins", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserRole<string>", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("RoleId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("UserId", "RoleId");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AspNetUserRoles", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserToken<string>", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("LoginProvider")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Value")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("UserId", "LoginProvider", "Name");
+
+                    b.ToTable("AspNetUserTokens", (string)null);
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Addresses", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany("Addresses")
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contact")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Contact");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Comments", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("Comments")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "ApplicationUser")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Comments")
+                        .HasForeignKey("WorkerOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("ApplicationUser");
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ContactDetails", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contact")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Contact");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany("Contacts")
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany("Contacts")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("Dispatches")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Dispatches")
+                        .HasForeignKey("WorkOrderId");
+
+                    b.Navigation("Vendor");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchChecklistItem", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("ChecklistItems")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchSignoff", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("Signoffs")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchUpliftRequest", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany()
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.VendorCompletionDocument", "EvidenceDocument")
+                        .WithMany()
+                        .HasForeignKey("EvidenceDocumentId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("EvidenceDocument");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchWorkOrder", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("DispatchWorkOrders")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Department", "Department")
+                        .WithMany("Employees")
+                        .HasForeignKey("DepartmentId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.JobTitle", "JobTitle")
+                        .WithMany("Employees")
+                        .HasForeignKey("JobTitleId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Region", "Region")
+                        .WithMany("Employees")
+                        .HasForeignKey("RegionId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Department");
+
+                    b.Navigation("JobTitle");
+
+                    b.Navigation("Region");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeAddress", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithOne("Address")
+                        .HasForeignKey("Data.SeaHavenIndustries.EmployeeAddress", "EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeEmail", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany("Emails")
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeePhone", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany("Phones")
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.FollowUps", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany()
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Employee");
+
+                    b.Navigation("Location");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.PMSchedules", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Assets", "Asset")
+                        .WithMany("PMSchedules")
+                        .HasForeignKey("AssetId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Asset");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contacts")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Quotes")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Contacts");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.QuotesLineItems", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Quotes", "Quotes")
+                        .WithMany("LineItems")
+                        .HasForeignKey("QuoteId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Quotes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.SitePreferredVendor", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("SitePreferences")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Location");
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplateItem", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.TaskListTemplate", "Template")
+                        .WithMany("Items")
+                        .HasForeignKey("TaskListTemplateId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Template");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Template", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "AssignToUser")
+                        .WithMany("Templates")
+                        .HasForeignKey("AssignTo")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Category", "Category")
+                        .WithMany("Templates")
+                        .HasForeignKey("CategoryId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "POC")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Locations")
+                        .WithMany("Templates")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("AssignToUser");
+
+                    b.Navigation("Category");
+
+                    b.Navigation("Locations");
+
+                    b.Navigation("POC");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserPermissionOverride", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("User");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserServiceArea", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany("ServiceAreas")
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("User");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.VendorCompany", "Company")
+                        .WithMany("Vendors")
+                        .HasForeignKey("CompanyId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Company");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAccessToken", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany()
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAuditLog", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("AuditLogs")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Area", "Area")
+                        .WithMany()
+                        .HasForeignKey("AreaId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Area");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompletionDocument", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("CompletionDocuments")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany()
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("Vendor");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "AssignToUser")
+                        .WithMany("WorkOrders")
+                        .HasForeignKey("AssignTo")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Locations")
+                        .WithMany("workOrders")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "PrimaryDispatch")
+                        .WithMany()
+                        .HasForeignKey("PrimaryDispatchId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("AssignToUser");
+
+                    b.Navigation("Locations");
+
+                    b.Navigation("PrimaryDispatch");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAttachments", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("workOrderAttachments")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAuditLog", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("User");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderCategories", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Category", "Category")
+                        .WithMany("WorkOrderCategories")
+                        .HasForeignKey("CategoryId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("WorkOrderCategories")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Category");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderContacts", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "POC")
+                        .WithMany("WorkOrderContacts")
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("WorkOrderContacts")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("POC");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderFieldLock", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("FieldLocks")
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWeekRolledLedger", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRoleClaim<string>", b =>
+                {
+                    b.HasOne("Microsoft.AspNetCore.Identity.IdentityRole", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserClaim<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserLogin<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserRole<string>", b =>
+                {
+                    b.HasOne("Microsoft.AspNetCore.Identity.IdentityRole", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserToken<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Accounts", b =>
+                {
+                    b.Navigation("Addresses");
+
+                    b.Navigation("Contacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.Navigation("ServiceAreas");
+
+                    b.Navigation("Templates");
+
+                    b.Navigation("WorkOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.Navigation("PMSchedules");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Category", b =>
+                {
+                    b.Navigation("Templates");
+
+                    b.Navigation("WorkOrderCategories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.Navigation("WorkOrderContacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Department", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.Navigation("ChecklistItems");
+
+                    b.Navigation("Comments");
+
+                    b.Navigation("CompletionDocuments");
+
+                    b.Navigation("DispatchWorkOrders");
+
+                    b.Navigation("Signoffs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.Navigation("Address");
+
+                    b.Navigation("Emails");
+
+                    b.Navigation("Phones");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.JobTitle", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.Navigation("Contacts");
+
+                    b.Navigation("Templates");
+
+                    b.Navigation("workOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.Navigation("LineItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Region", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplate", b =>
+                {
+                    b.Navigation("Items");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.Navigation("AuditLogs");
+
+                    b.Navigation("Dispatches");
+
+                    b.Navigation("SitePreferences");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.Navigation("Vendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.Navigation("Comments");
+
+                    b.Navigation("Dispatches");
+
+                    b.Navigation("FieldLocks");
+
+                    b.Navigation("Quotes");
+
+                    b.Navigation("WorkOrderCategories");
+
+                    b.Navigation("WorkOrderContacts");
+
+                    b.Navigation("workOrderAttachments");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/Data.SeaHavenIndustries/Migrations/20260916220437_SH325_PendingTeamMember.cs b/Data.SeaHavenIndustries/Migrations/20260916220437_SH325_PendingTeamMember.cs
new file mode 100644
index 0000000..7ed4270
--- /dev/null
+++ b/Data.SeaHavenIndustries/Migrations/20260916220437_SH325_PendingTeamMember.cs
@@ -0,0 +1,66 @@
+using System;
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Data.SeaHavenIndustries.Migrations
+{
+    /// <inheritdoc />
+    public partial class SH325_PendingTeamMember : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.AddColumn<bool>(
+                name: "PendingRegistration",
+                table: "AspNetUsers",
+                type: "bit",
+                nullable: true);
+
+            migrationBuilder.AddColumn<DateTime>(
+                name: "PendingRegistrationCreatedDate",
+                table: "AspNetUsers",
+                type: "datetime2",
+                nullable: true);
+
+            migrationBuilder.CreateTable(
+                name: "UserServiceAreas",
+                columns: table => new
+                {
+                    UserId = table.Column<string>(type: "nvarchar(450)", maxLength: 450, nullable: false),
+                    Area = table.Column<string>(type: "nvarchar(32)", maxLength: 32, nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("PK_UserServiceAreas", x => new { x.UserId, x.Area });
+                    table.ForeignKey(
+                        name: "FK_UserServiceAreas_AspNetUsers_UserId",
+                        column: x => x.UserId,
+                        principalTable: "AspNetUsers",
+                        principalColumn: "Id",
+                        onDelete: ReferentialAction.Cascade);
+                });
+
+            migrationBuilder.CreateIndex(
+                name: "IX_UserServiceAreas_UserId_Area",
+                table: "UserServiceAreas",
+                columns: new[] { "UserId", "Area" },
+                unique: true);
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropTable(
+                name: "UserServiceAreas");
+
+            migrationBuilder.DropColumn(
+                name: "PendingRegistration",
+                table: "AspNetUsers");
+
+            migrationBuilder.DropColumn(
+                name: "PendingRegistrationCreatedDate",
+                table: "AspNetUsers");
+        }
+    }
+}
diff --git a/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs b/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
index e87b2d4..7ccd8ce 100644
--- a/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
+++ b/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
@@ -249,6 +249,12 @@ namespace Data.SeaHavenIndustries.Migrations
                     b.Property<string>("PasswordHash")
                         .HasColumnType("nvarchar(max)");
 
+                    b.Property<bool?>("PendingRegistration")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("PendingRegistrationCreatedDate")
+                        .HasColumnType("datetime2");
+
                     b.Property<string>("PhoneNumber")
                         .HasColumnType("nvarchar(max)");
 
@@ -2102,6 +2108,25 @@ namespace Data.SeaHavenIndustries.Migrations
                     b.ToTable("UserPermissionOverrides");
                 });
 
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserServiceArea", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Area")
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.HasKey("UserId", "Area");
+
+                    b.HasIndex("UserId", "Area")
+                        .IsUnique()
+                        .HasDatabaseName("IX_UserServiceAreas_UserId_Area");
+
+                    b.ToTable("UserServiceAreas");
+                });
+
             modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
                 {
                     b.Property<int>("Id")
@@ -3657,6 +3682,17 @@ namespace Data.SeaHavenIndustries.Migrations
                     b.Navigation("User");
                 });
 
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserServiceArea", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany("ServiceAreas")
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("User");
+                });
+
             modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
                 {
                     b.HasOne("Data.SeaHavenIndustries.VendorCompany", "Company")
@@ -3901,6 +3937,8 @@ namespace Data.SeaHavenIndustries.Migrations
 
             modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
                 {
+                    b.Navigation("ServiceAreas");
+
                     b.Navigation("Templates");
 
                     b.Navigation("WorkOrders");
diff --git a/SeaHaven.DataServices/Dto/UserReadModels.cs b/SeaHaven.DataServices/Dto/UserReadModels.cs
index c3cb153..c619d14 100644
--- a/SeaHaven.DataServices/Dto/UserReadModels.cs
+++ b/SeaHaven.DataServices/Dto/UserReadModels.cs
@@ -8,6 +8,10 @@ namespace SeaHaven.DataServices.Dto
         public string? Name { get; init; }
         public DateTime? CreatedDate { get; init; }
         public string? Status { get; init; }
+        public string? Phone { get; init; }
+        public string? Color { get; init; }
+        public bool? PendingRegistration { get; init; }
+        public IReadOnlyList<string> ServiceAreas { get; init; } = Array.Empty<string>();
     }
 
     public sealed class UserProfileData
diff --git a/SeaHaven.DataServices/Implementation/TeamPermissionOverrideDataService.cs b/SeaHaven.DataServices/Implementation/TeamPermissionOverrideDataService.cs
index 954e8a4..3449313 100644
--- a/SeaHaven.DataServices/Implementation/TeamPermissionOverrideDataService.cs
+++ b/SeaHaven.DataServices/Implementation/TeamPermissionOverrideDataService.cs
@@ -57,26 +57,43 @@ public sealed class TeamPermissionOverrideDataService : ITeamPermissionOverrideD
         UserPermissionState state,
         CancellationToken cancellationToken)
     {
-        var existing = await _context.UserPermissionOverrides
-            .SingleOrDefaultAsync(
-                permission => permission.UserId == userId
-                    && permission.PermissionKey == permissionKey,
-                cancellationToken);
+        await SetOverridesAsync(
+            userId,
+            new Dictionary<string, UserPermissionState>(StringComparer.OrdinalIgnoreCase)
+            {
+                [permissionKey] = state
+            },
+            cancellationToken);
+    }
 
-        if (existing is null)
+    public async Task SetOverridesAsync(
+        string userId,
+        IReadOnlyDictionary<string, UserPermissionState> overrides,
+        CancellationToken cancellationToken)
+    {
+        foreach (var pair in overrides)
         {
-            await _context.UserPermissionOverrides.AddAsync(
-                new UserPermissionOverride
-                {
-                    UserId = userId,
-                    PermissionKey = permissionKey,
-                    State = state
-                },
-                cancellationToken);
-        }
-        else
-        {
-            existing.State = state;
+            var existing = await _context.UserPermissionOverrides
+                .SingleOrDefaultAsync(
+                    permission => permission.UserId == userId
+                        && permission.PermissionKey == pair.Key,
+                    cancellationToken);
+
+            if (existing is null)
+            {
+                await _context.UserPermissionOverrides.AddAsync(
+                    new UserPermissionOverride
+                    {
+                        UserId = userId,
+                        PermissionKey = pair.Key,
+                        State = pair.Value
+                    },
+                    cancellationToken);
+            }
+            else
+            {
+                existing.State = pair.Value;
+            }
         }
 
         await _context.SaveChangesAsync(cancellationToken);
diff --git a/SeaHaven.DataServices/Implementation/UserDataService.cs b/SeaHaven.DataServices/Implementation/UserDataService.cs
index c197dda..faafe0e 100644
--- a/SeaHaven.DataServices/Implementation/UserDataService.cs
+++ b/SeaHaven.DataServices/Implementation/UserDataService.cs
@@ -42,11 +42,22 @@ namespace SeaHaven.DataServices.Implementation
                 .Select(user => new UserListRowData
                 {
                     Id = user.Id,
-                    RoleName = user.PhoneNumber,
+                    RoleName = (
+                        from userRole in _context.UserRoles
+                        join role in _context.Roles on userRole.RoleId equals role.Id
+                        where userRole.UserId == user.Id
+                        select role.Name).FirstOrDefault() ?? user.PhoneNumber,
                     Email = user.Email,
                     Name = ((user.FirstName ?? "") + " " + (user.LastName ?? "")).Trim(),
                     CreatedDate = user.CreatedDate,
-                    Status = user.UniqueName
+                    Status = user.UniqueName,
+                    Phone = user.Contact ?? user.PhoneNumber,
+                    Color = user.Color,
+                    PendingRegistration = user.PendingRegistration,
+                    ServiceAreas = user.ServiceAreas
+                        .OrderBy(area => area.Area)
+                        .Select(area => area.Area)
+                        .ToList()
                 })
                 .ToListAsync(cancellationToken);
         }
diff --git a/SeaHaven.DataServices/Implementation/UserServiceAreaDataService.cs b/SeaHaven.DataServices/Implementation/UserServiceAreaDataService.cs
new file mode 100644
index 0000000..5e746e3
--- /dev/null
+++ b/SeaHaven.DataServices/Implementation/UserServiceAreaDataService.cs
@@ -0,0 +1,46 @@
+using Data.SeaHavenIndustries;
+using Microsoft.EntityFrameworkCore;
+using SeaHaven.DataServices.Interfaces;
+
+namespace SeaHaven.DataServices.Implementation;
+
+public sealed class UserServiceAreaDataService : IUserServiceAreaDataService
+{
+    private readonly ApplicationDbContext _context;
+
+    public UserServiceAreaDataService(ApplicationDbContext context)
+    {
+        _context = context;
+    }
+
+    public async Task ReplaceAsync(
+        string userId,
+        IReadOnlyCollection<string> areas,
+        CancellationToken cancellationToken)
+    {
+        var existing = await _context.UserServiceAreas
+            .Where(area => area.UserId == userId)
+            .ToListAsync(cancellationToken);
+
+        if (existing.Count > 0)
+            _context.UserServiceAreas.RemoveRange(existing);
+
+        await _context.UserServiceAreas.AddRangeAsync(
+            areas.Select(area => new UserServiceArea { UserId = userId, Area = area }),
+            cancellationToken);
+
+        await _context.SaveChangesAsync(cancellationToken);
+    }
+
+    public async Task<IReadOnlyList<string>> GetForUserAsync(
+        string userId,
+        CancellationToken cancellationToken)
+    {
+        return await _context.UserServiceAreas
+            .AsNoTracking()
+            .Where(area => area.UserId == userId)
+            .OrderBy(area => area.Area)
+            .Select(area => area.Area)
+            .ToListAsync(cancellationToken);
+    }
+}
diff --git a/SeaHaven.DataServices/Interfaces/ITeamPermissionOverrideDataService.cs b/SeaHaven.DataServices/Interfaces/ITeamPermissionOverrideDataService.cs
index 49d57e2..416c6c9 100644
--- a/SeaHaven.DataServices/Interfaces/ITeamPermissionOverrideDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/ITeamPermissionOverrideDataService.cs
@@ -11,4 +11,9 @@ public interface ITeamPermissionOverrideDataService
         string permissionKey,
         UserPermissionState state,
         CancellationToken cancellationToken);
+
+    Task SetOverridesAsync(
+        string userId,
+        IReadOnlyDictionary<string, UserPermissionState> overrides,
+        CancellationToken cancellationToken);
 }
diff --git a/SeaHaven.DataServices/Interfaces/IUserServiceAreaDataService.cs b/SeaHaven.DataServices/Interfaces/IUserServiceAreaDataService.cs
new file mode 100644
index 0000000..c222dee
--- /dev/null
+++ b/SeaHaven.DataServices/Interfaces/IUserServiceAreaDataService.cs
@@ -0,0 +1,15 @@
+using Data.SeaHavenIndustries;
+
+namespace SeaHaven.DataServices.Interfaces;
+
+public interface IUserServiceAreaDataService
+{
+    Task ReplaceAsync(
+        string userId,
+        IReadOnlyCollection<string> areas,
+        CancellationToken cancellationToken);
+
+    Task<IReadOnlyList<string>> GetForUserAsync(
+        string userId,
+        CancellationToken cancellationToken);
+}
diff --git a/SeaHaven.Services.Tests/TeamPermissionServiceTests.cs b/SeaHaven.Services.Tests/TeamPermissionServiceTests.cs
index 048c94b..b22042f 100644
--- a/SeaHaven.Services.Tests/TeamPermissionServiceTests.cs
+++ b/SeaHaven.Services.Tests/TeamPermissionServiceTests.cs
@@ -126,5 +126,19 @@ public sealed class TeamPermissionServiceTests
             LastSet = (userId, permissionKey, state);
             return Task.CompletedTask;
         }
+
+        public Task SetOverridesAsync(
+            string userId,
+            IReadOnlyDictionary<string, UserPermissionState> overrides,
+            CancellationToken cancellationToken)
+        {
+            foreach (var (permissionKey, state) in overrides)
+            {
+                _overrides[permissionKey] = state;
+                LastSet = (userId, permissionKey, state);
+            }
+
+            return Task.CompletedTask;
+        }
     }
 }
diff --git a/SeaHaven.Services/Constants/TeamMemberConstants.cs b/SeaHaven.Services/Constants/TeamMemberConstants.cs
new file mode 100644
index 0000000..64b1c83
--- /dev/null
+++ b/SeaHaven.Services/Constants/TeamMemberConstants.cs
@@ -0,0 +1,31 @@
+namespace SeaHaven.Services.Constants;
+
+public static class TeamMemberConstants
+{
+    public static readonly IReadOnlyList<string> Roles =
+        new[] { "Dispatcher", "Scheduler", "Admin" };
+
+    public static readonly IReadOnlyList<string> ServiceAreas =
+        new[] { "East", "Central", "West", "California" };
+
+    public static readonly IReadOnlySet<string> Colors = new HashSet<string>(
+        new[]
+        {
+            "#F59E0B", "#0D9488", "#6366F1", "#F43F5E", "#7C3AED",
+            "#0EA5E9", "#16A34A", "#EA580C", "#0891B2", "#C026D3"
+        },
+        StringComparer.OrdinalIgnoreCase);
+
+    public static string? CanonicalRole(string? value) => Canonical(value, Roles);
+
+    public static string? CanonicalArea(string? value) => Canonical(value, ServiceAreas);
+
+    private static string? Canonical(string? value, IReadOnlyList<string> allowed)
+    {
+        if (string.IsNullOrWhiteSpace(value))
+            return null;
+
+        return allowed.FirstOrDefault(item =>
+            string.Equals(item, value.Trim(), StringComparison.OrdinalIgnoreCase));
+    }
+}
diff --git a/SeaHaven.Services/DTOs/IdentityDTOs.cs b/SeaHaven.Services/DTOs/IdentityDTOs.cs
index 9afc76c..ad3b8cb 100644
--- a/SeaHaven.Services/DTOs/IdentityDTOs.cs
+++ b/SeaHaven.Services/DTOs/IdentityDTOs.cs
@@ -57,6 +57,10 @@ namespace SeaHaven.Services.DTOs
         public string Date { get; set; } = string.Empty;
         public string? Status { get; set; }
         public string? Id { get; set; }
+        public string? Phone { get; set; }
+        public string? Color { get; set; }
+        public bool? PendingRegistration { get; set; }
+        public IReadOnlyList<string> ServiceAreas { get; set; } = Array.Empty<string>();
     }
 
     public class UserProfileRowDTO
diff --git a/SeaHaven.Services/DTOs/TeamMemberDTOs.cs b/SeaHaven.Services/DTOs/TeamMemberDTOs.cs
new file mode 100644
index 0000000..8c430b9
--- /dev/null
+++ b/SeaHaven.Services/DTOs/TeamMemberDTOs.cs
@@ -0,0 +1,33 @@
+using Data.SeaHavenIndustries.Enums;
+
+namespace SeaHaven.Services.DTOs;
+
+public sealed record CreateTeamMemberRequestDTO
+{
+    public string? Name { get; init; }
+    public string? Role { get; init; }
+    public string? Color { get; init; }
+    public string? Email { get; init; }
+    public string? Phone { get; init; }
+    public IReadOnlyList<string>? ServiceAreas { get; init; }
+    public IReadOnlyDictionary<string, UserPermissionState>? PermissionOverrides { get; init; }
+}
+
+public sealed class TeamMemberCreatedDTO
+{
+    public required string Id { get; init; }
+    public required string Name { get; init; }
+    public required string Role { get; init; }
+    public required string Color { get; init; }
+    public string? Email { get; init; }
+    public string? Phone { get; init; }
+    public required IReadOnlyList<string> ServiceAreas { get; init; }
+    public bool PendingRegistration { get; init; }
+}
+
+public sealed class CreateTeamMemberOutcomeDTO
+{
+    public bool Success { get; init; }
+    public string? Error { get; init; }
+    public TeamMemberCreatedDTO? Member { get; init; }
+}
diff --git a/SeaHaven.Services/Implementation/TeamMemberService.cs b/SeaHaven.Services/Implementation/TeamMemberService.cs
new file mode 100644
index 0000000..ad01254
--- /dev/null
+++ b/SeaHaven.Services/Implementation/TeamMemberService.cs
@@ -0,0 +1,214 @@
+using System.Net.Mail;
+using System.Security.Claims;
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using Microsoft.AspNetCore.Identity;
+using SeaHaven.DataServices.Interfaces;
+using SeaHaven.Services.Constants;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Interfaces;
+
+namespace SeaHaven.Services.Implementation;
+
+public sealed class TeamMemberService : ITeamMemberService
+{
+    private const string ActiveStatus = "Active";
+    private readonly UserManager<ApplicationUser> _userManager;
+    private readonly RoleManager<IdentityRole> _roleManager;
+    private readonly IUserServiceAreaDataService _areaDataService;
+    private readonly ITeamPermissionOverrideDataService _permissionDataService;
+
+    public TeamMemberService(
+        UserManager<ApplicationUser> userManager,
+        RoleManager<IdentityRole> roleManager,
+        IUserServiceAreaDataService areaDataService,
+        ITeamPermissionOverrideDataService permissionDataService)
+    {
+        _userManager = userManager;
+        _roleManager = roleManager;
+        _areaDataService = areaDataService;
+        _permissionDataService = permissionDataService;
+    }
+
+    public async Task<CreateTeamMemberOutcomeDTO> CreateAsync(
+        CreateTeamMemberRequestDTO request,
+        ClaimsPrincipal caller,
+        CancellationToken cancellationToken)
+    {
+        if (caller?.IsInRole("Admin") != true)
+            return Failure("Forbidden");
+
+        var validation = Validate(request, out var role, out var color, out var email, out var areas, out var overrides);
+        if (validation is not null)
+            return Failure(validation);
+
+        if (await _userManager.FindByEmailAsync(email!) is not null)
+            return Failure("Email is already in use.");
+
+        if (!await _roleManager.RoleExistsAsync(role!))
+        {
+            var roleResult = await _roleManager.CreateAsync(new IdentityRole(role!));
+            if (!roleResult.Succeeded)
+                return Failure(roleResult.Errors.FirstOrDefault()?.Description ?? "Unable to create role.");
+        }
+
+        var now = DateTime.UtcNow;
+        var user = new ApplicationUser
+        {
+            UserName = email,
+            Email = email,
+            EmailConfirmed = false,
+            FirstName = request.Name!.Trim(),
+            Contact = request.Phone?.Trim(),
+            PhoneNumber = request.Phone?.Trim(),
+            Color = color,
+            UniqueName = ActiveStatus,
+            CreatedDate = now,
+            PendingRegistration = true,
+            PendingRegistrationCreatedDate = now
+        };
+
+        var createResult = await _userManager.CreateAsync(user);
+        if (!createResult.Succeeded)
+            return Failure(createResult.Errors.FirstOrDefault()?.Description ?? "Unable to create team member.");
+
+        var addRoleResult = await _userManager.AddToRoleAsync(user, role!);
+        if (!addRoleResult.Succeeded)
+        {
+            await _userManager.DeleteAsync(user);
+            return Failure(addRoleResult.Errors.FirstOrDefault()?.Description ?? "Unable to assign role.");
+        }
+
+        try
+        {
+            await _areaDataService.ReplaceAsync(user.Id, areas!, cancellationToken);
+            await _permissionDataService.SetOverridesAsync(user.Id, overrides!, cancellationToken);
+        }
+        catch
+        {
+            await _userManager.DeleteAsync(user);
+            throw;
+        }
+
+        return new CreateTeamMemberOutcomeDTO
+        {
+            Success = true,
+            Member = new TeamMemberCreatedDTO
+            {
+                Id = user.Id,
+                Name = user.FirstName!,
+                Role = role!,
+                Color = color!,
+                Email = user.Email,
+                Phone = user.PhoneNumber,
+                ServiceAreas = areas!,
+                PendingRegistration = true
+            }
+        };
+    }
+
+    private static string? Validate(
+        CreateTeamMemberRequestDTO request,
+        out string? role,
+        out string? color,
+        out string? email,
+        out IReadOnlyList<string>? areas,
+        out IReadOnlyDictionary<string, UserPermissionState>? overrides)
+    {
+        role = TeamMemberConstants.CanonicalRole(request.Role);
+        color = request.Color?.Trim();
+        email = request.Email?.Trim();
+        areas = NormalizeAreas(request.ServiceAreas, out var invalidArea);
+        overrides = NormalizeOverrides(request.PermissionOverrides, out var invalidPermission);
+
+        if (string.IsNullOrWhiteSpace(request.Name))
+            return "Name is required.";
+        if (role is null)
+            return "Role must be Dispatcher, Scheduler, or Admin.";
+        if (color is null || !TeamMemberConstants.Colors.Contains(color))
+            return "Color must be selected from the accessible palette.";
+        if (!IsValidEmail(email))
+            return "A valid email is required.";
+        if (invalidArea is not null)
+            return $"Unknown service area: {invalidArea}.";
+        if (string.Equals(role, "Dispatcher", StringComparison.Ordinal)
+            && (areas is null || areas.Count == 0))
+            return "At least one service area is required for a Dispatcher.";
+        if (!string.Equals(role, "Dispatcher", StringComparison.Ordinal)
+            && areas is { Count: > 0 })
+            return "Service areas are only available for Dispatchers.";
+        if (invalidPermission is not null)
+            return $"Unknown permission key: {invalidPermission}.";
+
+        return null;
+    }
+
+    private static IReadOnlyList<string> NormalizeAreas(
+        IReadOnlyList<string>? values,
+        out string? invalidArea)
+    {
+        invalidArea = null;
+        var normalized = new List<string>();
+        foreach (var value in values ?? Array.Empty<string>())
+        {
+            var canonical = TeamMemberConstants.CanonicalArea(value);
+            if (canonical is null)
+            {
+                invalidArea = value;
+                return Array.Empty<string>();
+            }
+
+            if (!normalized.Contains(canonical, StringComparer.Ordinal))
+                normalized.Add(canonical);
+        }
+
+        return normalized;
+    }
+
+    private static IReadOnlyDictionary<string, UserPermissionState> NormalizeOverrides(
+        IReadOnlyDictionary<string, UserPermissionState>? values,
+        out string? invalidPermission)
+    {
+        invalidPermission = null;
+        var normalized = new Dictionary<string, UserPermissionState>(StringComparer.OrdinalIgnoreCase);
+        foreach (var pair in values ?? new Dictionary<string, UserPermissionState>())
+        {
+            var canonical = TeamPermissionKeys.All.FirstOrDefault(key =>
+                string.Equals(key, pair.Key, StringComparison.OrdinalIgnoreCase));
+            if (canonical is null)
+            {
+                invalidPermission = pair.Key;
+                return new Dictionary<string, UserPermissionState>();
+            }
+
+            if (!Enum.IsDefined(pair.Value))
+            {
+                invalidPermission = pair.Key;
+                return new Dictionary<string, UserPermissionState>();
+            }
+
+            normalized[canonical] = pair.Value;
+        }
+
+        return normalized;
+    }
+
+    private static bool IsValidEmail(string? value)
+    {
+        if (string.IsNullOrWhiteSpace(value))
+            return false;
+
+        try
+        {
+            var address = new MailAddress(value);
+            return string.Equals(address.Address, value, StringComparison.OrdinalIgnoreCase);
+        }
+        catch (FormatException)
+        {
+            return false;
+        }
+    }
+
+    private static CreateTeamMemberOutcomeDTO Failure(string error) =>
+        new() { Success = false, Error = error };
+}
diff --git a/SeaHaven.Services/Implementation/UserService.cs b/SeaHaven.Services/Implementation/UserService.cs
index 5d35d39..99105a3 100644
--- a/SeaHaven.Services/Implementation/UserService.cs
+++ b/SeaHaven.Services/Implementation/UserService.cs
@@ -38,7 +38,11 @@ namespace SeaHaven.Services.Implementation
                 Name = s.Name,
                 Date = s.CreatedDate != null ? s.CreatedDate.Value.Date.ToString("MMM dd yyyy") : "",
                 Status = s.Status,
-                Id = s.Id
+                Id = s.Id,
+                Phone = s.Phone,
+                Color = s.Color,
+                PendingRegistration = s.PendingRegistration,
+                ServiceAreas = s.ServiceAreas
             });
         }
 
diff --git a/SeaHaven.Services/Interfaces/ITeamMemberService.cs b/SeaHaven.Services/Interfaces/ITeamMemberService.cs
new file mode 100644
index 0000000..36016cf
--- /dev/null
+++ b/SeaHaven.Services/Interfaces/ITeamMemberService.cs
@@ -0,0 +1,12 @@
+using System.Security.Claims;
+using SeaHaven.Services.DTOs;
+
+namespace SeaHaven.Services.Interfaces;
+
+public interface ITeamMemberService
+{
+    Task<CreateTeamMemberOutcomeDTO> CreateAsync(
+        CreateTeamMemberRequestDTO request,
+        ClaimsPrincipal caller,
+        CancellationToken cancellationToken);
+}

From 7947e2e77defb6807bcce82f4769cb9e29192c9a Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 19:19:10 -0300
Subject: [PATCH 028/183] feat(dashboard): expose KPI counts (SH-353)

---
 .../Implementation/DashboardDataService.cs    | 64 +++++++++++++++++++
 .../Interfaces/IDashboardDataService.cs       | 11 ++++
 SeaHaven.Services/DTOs/DashboardDTOs.cs       |  3 +
 .../Implementation/DashboardService.cs        |  8 +++
 4 files changed, 86 insertions(+)

diff --git a/SeaHaven.DataServices/Implementation/DashboardDataService.cs b/SeaHaven.DataServices/Implementation/DashboardDataService.cs
index a56f74f..91c545d 100644
--- a/SeaHaven.DataServices/Implementation/DashboardDataService.cs
+++ b/SeaHaven.DataServices/Implementation/DashboardDataService.cs
@@ -88,6 +88,70 @@ namespace SeaHaven.DataServices.Implementation
                 .ToListAsync(cancellationToken);
         }
 
+        public async Task<DashboardKpiCounts> GetKpiCountsAsync(
+            int? accountId,
+            string? dispatcherId,
+            DateOnly today,
+            CancellationToken cancellationToken)
+        {
+            var tomorrow = today.AddDays(1);
+            var dayAfterTomorrow = tomorrow.AddDays(1);
+            var workOrders = WorkOrderBoardQueryFilters.ApplyBaseScope(_context.workOrders.AsNoTracking());
+            if (accountId is int scopedAccountId)
+                workOrders = WorkOrderBoardQueryFilters.ApplyAccountScope(workOrders, scopedAccountId);
+            if (dispatcherId != null)
+                workOrders = workOrders.Where(w => w.AssignTo == dispatcherId);
+
+            var scheduledTomorrow = await workOrders
+                .Where(w => w.ScheduledDate >= tomorrow.ToDateTime(TimeOnly.MinValue)
+                    && w.ScheduledDate < dayAfterTomorrow.ToDateTime(TimeOnly.MinValue))
+                .CountAsync(cancellationToken);
+
+            var avetaPending = await workOrders
+                .Where(w => w.ScheduledDate >= today.ToDateTime(TimeOnly.MinValue)
+                    && w.ScheduledDate < dayAfterTomorrow.ToDateTime(TimeOnly.MinValue)
+                    && w.AvetaRequired
+                    && w.LifecycleStatus != LifecycleStatus.Completed
+                    && w.LifecycleStatus != LifecycleStatus.Canceled
+                    && (w.LifecycleStatus != null
+                        || ((w.LegacyStatus ?? w.Status) != "Done"
+                            && (w.LegacyStatus ?? w.Status) != "Completed"
+                            && (w.LegacyStatus ?? w.Status) != "Complete"
+                            && (w.LegacyStatus ?? w.Status) != "Closed"
+                            && (w.LegacyStatus ?? w.Status) != "Canceled"
+                            && (w.LegacyStatus ?? w.Status) != "Cancelled"))
+                    && !w.workOrderAttachments!.Any(attachment =>
+                        (attachment.IsDeleted == null || attachment.IsDeleted == false)
+                        && attachment.Category == WorkOrderMediaCategory.Aveta))
+                .CountAsync(cancellationToken);
+
+            var pendingUplifts = _context.DispatchUpliftRequests
+                .AsNoTracking()
+                .Where(request => request.Status == "Pending"
+                    && (request.IsDeleted == null || request.IsDeleted == false)
+                    && request.Dispatch != null
+                    && (request.Dispatch.IsDeleted == null || request.Dispatch.IsDeleted == false));
+            if (accountId is int account)
+            {
+                pendingUplifts = pendingUplifts.Where(request =>
+                    (request.Dispatch!.WorkOrder != null && request.Dispatch.WorkOrder.AccountId == account)
+                    || request.Dispatch.DispatchWorkOrders!.Any(link =>
+                        link.WorkOrder != null && link.WorkOrder.AccountId == account));
+            }
+            if (dispatcherId != null)
+            {
+                pendingUplifts = pendingUplifts.Where(request =>
+                    (request.Dispatch!.WorkOrder != null && request.Dispatch.WorkOrder.AssignTo == dispatcherId)
+                    || request.Dispatch.DispatchWorkOrders!.Any(link =>
+                        link.WorkOrder != null && link.WorkOrder.AssignTo == dispatcherId));
+            }
+
+            return new DashboardKpiCounts(
+                scheduledTomorrow,
+                await pendingUplifts.CountAsync(cancellationToken),
+                avetaPending);
+        }
+
         public async Task<IReadOnlyList<DashboardDispatcherWorkload>> GetDispatcherWorkloadAsync(
             int? accountId,
             string? dispatcherId,
diff --git a/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs b/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs
index 5348703..51ef7b5 100644
--- a/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs
@@ -8,6 +8,12 @@ namespace SeaHaven.DataServices.Interfaces
             int? accountId,
             CancellationToken cancellationToken);
 
+        Task<DashboardKpiCounts> GetKpiCountsAsync(
+            int? accountId,
+            string? dispatcherId,
+            DateOnly today,
+            CancellationToken cancellationToken);
+
         Task<IReadOnlyList<DashboardWorkOrder>> GetDashboardWorkOrdersAsync(
             int? accountId,
             string? dispatcherId,
@@ -53,4 +59,9 @@ namespace SeaHaven.DataServices.Interfaces
         public int NotDispatched { get; set; }
         public int Completed { get; set; }
     }
+
+    public sealed record DashboardKpiCounts(
+        int ScheduledTomorrow,
+        int PendingUplifts,
+        int AvetaPending);
 }
diff --git a/SeaHaven.Services/DTOs/DashboardDTOs.cs b/SeaHaven.Services/DTOs/DashboardDTOs.cs
index ef5c70d..3544ebb 100644
--- a/SeaHaven.Services/DTOs/DashboardDTOs.cs
+++ b/SeaHaven.Services/DTOs/DashboardDTOs.cs
@@ -100,6 +100,9 @@ namespace SeaHaven.Services.DTOs
         public int Open { get; set; }
         public int NotDispatched { get; set; }
         public int Completed { get; set; }
+        public int ScheduledTomorrow { get; set; }
+        public int PendingUplifts { get; set; }
+        public int AvetaPending { get; set; }
         public DashboardBreakdownDTO Breakdown { get; set; } = new();
         public int DueCount { get; set; }
         public int CompletedDueCount { get; set; }
diff --git a/SeaHaven.Services/Implementation/DashboardService.cs b/SeaHaven.Services/Implementation/DashboardService.cs
index a4bdfce..3193c08 100644
--- a/SeaHaven.Services/Implementation/DashboardService.cs
+++ b/SeaHaven.Services/Implementation/DashboardService.cs
@@ -35,6 +35,11 @@ namespace SeaHaven.Services.Implementation
                 throw new WorkOrderBoardValidationException("Forbidden", "Dispatcher identity is required.");
 
             var counts = await _dataService.GetWorkOrderCountsAsync(accountId, cancellationToken);
+            var kpis = await _dataService.GetKpiCountsAsync(
+                accountId,
+                dispatcherId,
+                DashboardBusinessTime.Today(),
+                cancellationToken);
             var workOrders = await _dataService.GetDashboardWorkOrdersAsync(
                 accountId,
                 dispatcherId,
@@ -51,6 +56,9 @@ namespace SeaHaven.Services.Implementation
                 Open = useMetrics ? metrics.Open : counts.Open,
                 NotDispatched = useMetrics ? metrics.NotDispatched : counts.NotDispatched,
                 Completed = useMetrics ? metrics.Completed : counts.Completed,
+                ScheduledTomorrow = kpis.ScheduledTomorrow,
+                PendingUplifts = kpis.PendingUplifts,
+                AvetaPending = kpis.AvetaPending,
                 Breakdown = metrics.Breakdown,
                 DueCount = metrics.DueCount,
                 CompletedDueCount = metrics.CompletedDueCount,

From 5877f7817f12ca86df1cc556f97979f777ce81f8 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 19:57:09 -0300
Subject: [PATCH 029/183] fix(dashboard): bucket trend by calendar
 ScheduledDate (SH-350)

ScheduledDate is persisted as a midnight calendar value (board create writes
request.ScheduledDate.Value.Date; board patch writes the parsed .Date into a
datetime2 column with no offset). GetTrendAsync treated it as a UTC instant and
converted to America/New_York, so midnight became 19:00/20:00 the previous day
and every board-scheduled work order fell into the prior bucket: a job scheduled
today read as yesterday and overdue, and the Today bucket showed zero.

Bucket by DateOnly.FromDateTime(scheduled.Date) with no conversion, matching
DashboardMetrics and WorkOrderDerivedFields, so Trend and Stats agree on the
same rows. Rewrite the daily and yearly trend tests to assert calendar-date
classification (the removed conversion had encoded the shift into their
expectations) and add a regression test that a midnight-today work order stays
in the Today bucket and is not overdue.
---
 .../DashboardServiceTests.cs                  | 57 ++++++++++++++++---
 .../Implementation/DashboardService.cs        |  5 +-
 2 files changed, 51 insertions(+), 11 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs b/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
index 54b8886..de6a9a6 100644
--- a/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
@@ -369,9 +369,14 @@ public class DashboardServiceTests
     }
 
     [Fact]
-    public async Task GetTrendAsync_DailyBucketsClassifyByNewYorkScheduledDate()
+    public async Task GetTrendAsync_DailyBucketsClassifyByCalendarScheduledDate()
     {
         using var ctx = NewContext();
+        // ScheduledDate is a stored calendar value (board writes persist `.Date`), so a work
+        // order buckets on its own calendar day regardless of the time-of-day component. The
+        // UTC hours below were previously shifted a full day by an America/New_York conversion
+        // (03:00 UTC -> prior evening), so they double as a regression guard: each row must now
+        // stay on the calendar date it was scheduled for.
         ctx.workOrders.AddRange(
             new WorkOrder
             {
@@ -426,17 +431,21 @@ public class DashboardServiceTests
         trend.Buckets.Select(bucket => bucket.Label).Should().Equal(
             "2026-01-14", "2026-01-15", "2026-01-16");
 
-        trend.Buckets[0].Total.Should().Be(2);
-        trend.Buckets[0].Open.Should().Be(1);
+        // 01-14: only the canceled row scheduled that calendar day.
+        trend.Buckets[0].Total.Should().Be(1);
+        trend.Buckets[0].Open.Should().Be(0);
         trend.Buckets[0].Canceled.Should().Be(1);
         trend.Buckets[0].Completed.Should().Be(0);
-        trend.Buckets[0].Overdue.Should().Be(1);
+        trend.Buckets[0].Overdue.Should().Be(0);
 
+        // 01-15: the 03:00 UTC scheduled row (no longer shifted to 01-14) plus the completed row.
         trend.Buckets[1].Total.Should().Be(2);
         trend.Buckets[1].Open.Should().Be(1);
         trend.Buckets[1].Completed.Should().Be(1);
+        trend.Buckets[1].Canceled.Should().Be(0);
         trend.Buckets[1].Overdue.Should().Be(1);
 
+        // 01-16: the 03:00 UTC scheduled row that stays on its own day.
         trend.Buckets[2].Total.Should().Be(1);
         trend.Buckets[2].Open.Should().Be(1);
         trend.Buckets[2].Overdue.Should().Be(1);
@@ -444,6 +453,38 @@ public class DashboardServiceTests
         trend.Buckets.Should().OnlyContain(bucket => !bucket.IsCurrent);
     }
 
+    [Fact]
+    public async Task GetTrendAsync_MidnightScheduledDateStaysInTodayBucketAndIsNotOverdue()
+    {
+        using var ctx = NewContext();
+        var today = DashboardBusinessTime.Today();
+        // A board-scheduled work order for today is stored as midnight (`.Date`). It must land
+        // in the Today bucket and count as open, not roll back to yesterday and read as overdue.
+        ctx.workOrders.Add(new WorkOrder
+        {
+            AccountId = 1,
+            LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Scheduled,
+            ScheduledDate = today.ToDateTime(TimeOnly.MinValue)
+        });
+        ctx.SaveChanges();
+
+        var query = new DashboardTrendQueryDTO
+        {
+            DateFrom = today.AddDays(-1),
+            DateTo = today.AddDays(1)
+        };
+        var trend = await NewService(ctx).GetTrendAsync(
+            AccountUser(1), query, CancellationToken.None);
+
+        var todayBucket = trend.Buckets.Single(bucket => bucket.Date == today);
+        todayBucket.Total.Should().Be(1);
+        todayBucket.Open.Should().Be(1);
+        todayBucket.Overdue.Should().Be(0);
+
+        var yesterdayBucket = trend.Buckets.Single(bucket => bucket.Date == today.AddDays(-1));
+        yesterdayBucket.Total.Should().Be(0);
+    }
+
     [Fact]
     public async Task GetTrendAsync_ThreeMonthRangeUsesWeeklyMondayBuckets()
     {
@@ -515,6 +556,8 @@ public class DashboardServiceTests
                 LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Scheduled,
                 ScheduledDate = new DateTime(2025, 12, 31, 20, 0, 0, DateTimeKind.Utc)
             },
+            // 2027-01-01 by calendar: outside the 2026 window. Previously an
+            // America/New_York conversion pulled it back to 2026-12-31 and into December.
             new WorkOrder
             {
                 AccountId = 1,
@@ -535,10 +578,10 @@ public class DashboardServiceTests
         trend.Buckets[2].Label.Should().Be("2026-03-01");
         trend.Buckets[2].Total.Should().Be(1);
         trend.Buckets[2].Completed.Should().Be(1);
+        // December stays empty: the 2027-01-01 row is no longer pulled inside the window.
         trend.Buckets[11].Label.Should().Be("2026-12-01");
-        trend.Buckets[11].Total.Should().Be(1);
-        trend.Buckets[11].Open.Should().Be(1);
-        trend.Buckets[11].Overdue.Should().Be(0);
+        trend.Buckets[11].Total.Should().Be(0);
+        trend.Buckets[11].Open.Should().Be(0);
         trend.Today.Should().Be(DashboardBusinessTime.Today());
     }
 
diff --git a/SeaHaven.Services/Implementation/DashboardService.cs b/SeaHaven.Services/Implementation/DashboardService.cs
index a4bdfce..56b4c8a 100644
--- a/SeaHaven.Services/Implementation/DashboardService.cs
+++ b/SeaHaven.Services/Implementation/DashboardService.cs
@@ -196,7 +196,6 @@ namespace SeaHaven.Services.Implementation
 
             var today = DashboardBusinessTime.Today();
             var (windowFrom, windowTo, granularity) = ResolveTrendWindow(query, today);
-            var timezone = TimeZoneInfo.FindSystemTimeZoneById(DashboardBusinessTime.TimeZoneId);
             var firstBucketStart = BucketStart(windowFrom, granularity);
             var lastBucketStart = BucketStart(windowTo, granularity);
             var lastBucketEnd = BucketEnd(lastBucketStart, granularity);
@@ -217,9 +216,7 @@ namespace SeaHaven.Services.Implementation
             {
                 if (workOrder.ScheduledDate is not DateTime scheduled)
                     continue;
-                var businessDate = DateOnly.FromDateTime(
-                    TimeZoneInfo.ConvertTimeFromUtc(
-                        DateTime.SpecifyKind(scheduled, DateTimeKind.Utc), timezone));
+                var businessDate = DateOnly.FromDateTime(scheduled.Date);
                 if (businessDate < firstBucketStart || businessDate > lastBucketEnd)
                     continue;
                 var bucket = buckets[LocateBucket(bucketStarts, businessDate)];

From 740bcaaf7de1dff5240f750e181726e380f8c998 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 20:01:46 -0300
Subject: [PATCH 030/183] feat(team-members): add member detail editing
 (SH-326)

---
 .../TeamMemberServiceTests.cs                 | 132 +++++++++++++++-
 .../Controllers/TeamMemberController.cs       |  31 ++++
 .../TeamPermissionOverrideDataService.cs      |   7 +
 .../ITeamPermissionOverrideDataService.cs     |   2 +
 .../TeamPermissionServiceTests.cs             |   6 +
 SeaHaven.Services/DTOs/TeamMemberDTOs.cs      |  28 +++-
 .../Implementation/TeamMemberService.cs       | 142 +++++++++++++++++-
 .../Interfaces/ITeamMemberService.cs          |   9 ++
 8 files changed, 344 insertions(+), 13 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs b/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs
index 4b39ede..e2295ff 100644
--- a/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs
@@ -9,6 +9,7 @@ using Moq;
 using SeaHaven.DataServices.Interfaces;
 using SeaHaven.Services.DTOs;
 using SeaHaven.Services.Implementation;
+using SeaHaven.Services.Interfaces;
 using Xunit;
 
 namespace Api.SeaHavenIndustries.Tests;
@@ -24,7 +25,9 @@ public sealed class TeamMemberServiceTests
             userManager.Object,
             roleManager.Object,
             Mock.Of<IUserServiceAreaDataService>(),
-            Mock.Of<ITeamPermissionOverrideDataService>());
+            Mock.Of<ITeamPermissionOverrideDataService>(),
+            Mock.Of<IUserDataService>(),
+            Mock.Of<ITeamPermissionService>());
 
         var result = await service.CreateAsync(
             ValidRequest() with { ServiceAreas = Array.Empty<string>() },
@@ -39,7 +42,7 @@ public sealed class TeamMemberServiceTests
     [Fact]
     public async Task Create_RejectsUnknownColorAndPermission()
     {
-        var service = NewService(out var userManager, out _, out _, out _);
+        var service = NewService(out var userManager, out _, out _, out _, out _, out _);
 
         var badColor = await service.CreateAsync(
             ValidRequest() with { Color = "#000000" },
@@ -64,7 +67,7 @@ public sealed class TeamMemberServiceTests
     [Fact]
     public async Task Create_PersistsPendingUserWithoutPasswordAndStoresAreasAndOverrides()
     {
-        var service = NewService(out var userManager, out var roleManager, out var areas, out var overrides);
+        var service = NewService(out var userManager, out var roleManager, out var areas, out var overrides, out _, out _);
         ApplicationUser? created = null;
         userManager
             .Setup(manager => manager.CreateAsync(It.IsAny<ApplicationUser>()))
@@ -95,17 +98,136 @@ public sealed class TeamMemberServiceTests
         overrides.Verify(data => data.SetOverridesAsync("new-user", It.Is<IReadOnlyDictionary<string, UserPermissionState>>(value => value["deleteSites"] == UserPermissionState.Allow), It.IsAny<CancellationToken>()), Times.Once);
     }
 
+    [Fact]
+    public async Task Update_ProtectsAccountOwnerFromRoleChangeAndDeactivation()
+    {
+        var service = NewService(
+            out var userManager,
+            out _,
+            out _,
+            out _,
+            out var userData,
+            out _);
+        var owner = new ApplicationUser
+        {
+            Id = "owner",
+            FirstName = "Primary",
+            Email = "owner@example.com",
+            IsAccountOwner = true
+        };
+        userManager.Setup(manager => manager.FindByIdAsync(owner.Id)).ReturnsAsync(owner);
+        userManager.Setup(manager => manager.GetRolesAsync(owner)).ReturnsAsync(new List<string> { "Admin" });
+        userData.Setup(data => data.IsAccountOwnerAsync(owner.Id, It.IsAny<CancellationToken>())).ReturnsAsync(true);
+
+        var result = await service.UpdateAsync(
+            owner.Id,
+            new UpdateTeamMemberRequestDTO
+            {
+                Name = "Primary",
+                Role = "Dispatcher",
+                Color = "#F59E0B",
+                Email = owner.Email,
+                ServiceAreas = new[] { "East" },
+                IsActive = false
+            },
+            Admin(),
+            CancellationToken.None);
+
+        result.Success.Should().BeFalse();
+        result.Error.Should().Be("Forbidden");
+        userData.Verify(data => data.UpdateUserAsync(It.IsAny<ApplicationUser>(), It.IsAny<CancellationToken>()), Times.Never);
+    }
+
+    [Fact]
+    public async Task Update_ReplacesAreasAndOverridesAndReturnsFullDetail()
+    {
+        var service = NewService(
+            out var userManager,
+            out var roleManager,
+            out var areas,
+            out var overrides,
+            out var userData,
+            out var permissions);
+        var user = new ApplicationUser
+        {
+            Id = "dispatcher",
+            FirstName = "Taylor",
+            Email = "old@example.com",
+            Color = "#F59E0B",
+            UniqueName = "Active"
+        };
+        userManager.Setup(manager => manager.FindByIdAsync(user.Id)).ReturnsAsync(user);
+        userManager.Setup(manager => manager.GetRolesAsync(user)).ReturnsAsync(new List<string> { "Dispatcher" });
+        userManager.Setup(manager => manager.FindByEmailAsync("new@example.com")).ReturnsAsync((ApplicationUser?)null);
+        roleManager.Setup(manager => manager.RoleExistsAsync("Dispatcher")).ReturnsAsync(true);
+        areas.Setup(data => data.GetForUserAsync(user.Id, It.IsAny<CancellationToken>()))
+            .ReturnsAsync(new[] { "Central" });
+        permissions.Setup(data => data.GetProfileAsync(user.Id, It.IsAny<ClaimsPrincipal>(), It.IsAny<CancellationToken>()))
+            .ReturnsAsync(TeamPermissionResult<TeamPermissionProfileDTO>.Success(new TeamPermissionProfileDTO
+            {
+                UserId = user.Id,
+                RoleName = "Dispatcher",
+                Permissions = new[]
+                {
+                    new TeamPermissionValueDTO
+                    {
+                        PermissionKey = "createSites",
+                        OverrideState = UserPermissionState.Deny,
+                        IsGranted = false
+                    }
+                }
+            }));
+
+        var result = await service.UpdateAsync(
+            user.Id,
+            new UpdateTeamMemberRequestDTO
+            {
+                Name = "Taylor Updated",
+                Role = "Dispatcher",
+                Color = "#0D9488",
+                Email = "new@example.com",
+                Phone = "555-0101",
+                ServiceAreas = new[] { "West" },
+                PermissionOverrides = new Dictionary<string, UserPermissionState>
+                {
+                    ["createSites"] = UserPermissionState.Deny
+                }
+            },
+            Admin(),
+            CancellationToken.None);
+
+        result.Success.Should().BeTrue();
+        result.Member!.Name.Should().Be("Taylor Updated");
+        result.Member.Email.Should().Be("new@example.com");
+        result.Member.ServiceAreas.Should().Equal("Central");
+        result.Member.Permissions.Should().ContainSingle(permission => permission.PermissionKey == "createSites");
+        userData.Verify(data => data.UpdateUserAsync(user, It.IsAny<CancellationToken>()), Times.Once);
+        areas.Verify(data => data.ReplaceAsync(user.Id, It.Is<IReadOnlyCollection<string>>(value => value.SequenceEqual(new[] { "West" })), It.IsAny<CancellationToken>()), Times.Once);
+        overrides.Verify(data => data.ClearOverridesAsync(user.Id, It.IsAny<CancellationToken>()), Times.Once);
+        overrides.Verify(data => data.SetOverridesAsync(user.Id, It.Is<IReadOnlyDictionary<string, UserPermissionState>>(value => value["createSites"] == UserPermissionState.Deny), It.IsAny<CancellationToken>()), Times.Once);
+    }
+
     private static TeamMemberService NewService(
         out Mock<UserManager<ApplicationUser>> userManager,
         out Mock<RoleManager<IdentityRole>> roleManager,
         out Mock<IUserServiceAreaDataService> areas,
-        out Mock<ITeamPermissionOverrideDataService> overrides)
+        out Mock<ITeamPermissionOverrideDataService> overrides,
+        out Mock<IUserDataService> userData,
+        out Mock<ITeamPermissionService> permissions)
     {
         userManager = UserManager();
         roleManager = RoleManager();
         areas = new Mock<IUserServiceAreaDataService>();
         overrides = new Mock<ITeamPermissionOverrideDataService>();
-        return new TeamMemberService(userManager.Object, roleManager.Object, areas.Object, overrides.Object);
+        userData = new Mock<IUserDataService>();
+        permissions = new Mock<ITeamPermissionService>();
+        return new TeamMemberService(
+            userManager.Object,
+            roleManager.Object,
+            areas.Object,
+            overrides.Object,
+            userData.Object,
+            permissions.Object);
     }
 
     private static Mock<UserManager<ApplicationUser>> UserManager()
diff --git a/Api.SeaHavenIndustries/Controllers/TeamMemberController.cs b/Api.SeaHavenIndustries/Controllers/TeamMemberController.cs
index d09c6bd..f6537b6 100644
--- a/Api.SeaHavenIndustries/Controllers/TeamMemberController.cs
+++ b/Api.SeaHavenIndustries/Controllers/TeamMemberController.cs
@@ -33,4 +33,35 @@ public sealed class TeamMemberController : ControllerBase
 
         return Ok(outcome.Member);
     }
+
+    [HttpGet("{userId}")]
+    public async Task<IActionResult> Get(string userId, CancellationToken cancellationToken)
+    {
+        var outcome = await _teamMemberService.GetAsync(userId, User, cancellationToken);
+        return ToActionResult(outcome);
+    }
+
+    [HttpPut("{userId}")]
+    public async Task<IActionResult> Update(
+        string userId,
+        UpdateTeamMemberRequestDTO request,
+        CancellationToken cancellationToken)
+    {
+        var outcome = await _teamMemberService.UpdateAsync(userId, request, User, cancellationToken);
+        return ToActionResult(outcome);
+    }
+
+    private IActionResult ToActionResult(TeamMemberOperationOutcomeDTO outcome)
+    {
+        if (outcome.Success)
+            return Ok(outcome.Member);
+
+        if (string.Equals(outcome.Error, "Forbidden", StringComparison.Ordinal))
+            return Forbid();
+
+        if (string.Equals(outcome.Error, "Team member not found.", StringComparison.Ordinal))
+            return NotFound(new { message = outcome.Error });
+
+        return BadRequest(new { message = outcome.Error });
+    }
 }
diff --git a/SeaHaven.DataServices/Implementation/TeamPermissionOverrideDataService.cs b/SeaHaven.DataServices/Implementation/TeamPermissionOverrideDataService.cs
index 3449313..e177534 100644
--- a/SeaHaven.DataServices/Implementation/TeamPermissionOverrideDataService.cs
+++ b/SeaHaven.DataServices/Implementation/TeamPermissionOverrideDataService.cs
@@ -98,4 +98,11 @@ public sealed class TeamPermissionOverrideDataService : ITeamPermissionOverrideD
 
         await _context.SaveChangesAsync(cancellationToken);
     }
+
+    public async Task ClearOverridesAsync(string userId, CancellationToken cancellationToken)
+    {
+        await _context.UserPermissionOverrides
+            .Where(item => item.UserId == userId)
+            .ExecuteDeleteAsync(cancellationToken);
+    }
 }
diff --git a/SeaHaven.DataServices/Interfaces/ITeamPermissionOverrideDataService.cs b/SeaHaven.DataServices/Interfaces/ITeamPermissionOverrideDataService.cs
index 416c6c9..79d9b9b 100644
--- a/SeaHaven.DataServices/Interfaces/ITeamPermissionOverrideDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/ITeamPermissionOverrideDataService.cs
@@ -16,4 +16,6 @@ public interface ITeamPermissionOverrideDataService
         string userId,
         IReadOnlyDictionary<string, UserPermissionState> overrides,
         CancellationToken cancellationToken);
+
+    Task ClearOverridesAsync(string userId, CancellationToken cancellationToken);
 }
diff --git a/SeaHaven.Services.Tests/TeamPermissionServiceTests.cs b/SeaHaven.Services.Tests/TeamPermissionServiceTests.cs
index b22042f..33bda2f 100644
--- a/SeaHaven.Services.Tests/TeamPermissionServiceTests.cs
+++ b/SeaHaven.Services.Tests/TeamPermissionServiceTests.cs
@@ -140,5 +140,11 @@ public sealed class TeamPermissionServiceTests
 
             return Task.CompletedTask;
         }
+
+        public Task ClearOverridesAsync(string userId, CancellationToken cancellationToken)
+        {
+            _overrides.Clear();
+            return Task.CompletedTask;
+        }
     }
 }
diff --git a/SeaHaven.Services/DTOs/TeamMemberDTOs.cs b/SeaHaven.Services/DTOs/TeamMemberDTOs.cs
index 8c430b9..814e279 100644
--- a/SeaHaven.Services/DTOs/TeamMemberDTOs.cs
+++ b/SeaHaven.Services/DTOs/TeamMemberDTOs.cs
@@ -13,7 +13,7 @@ public sealed record CreateTeamMemberRequestDTO
     public IReadOnlyDictionary<string, UserPermissionState>? PermissionOverrides { get; init; }
 }
 
-public sealed class TeamMemberCreatedDTO
+public class TeamMemberCreatedDTO
 {
     public required string Id { get; init; }
     public required string Name { get; init; }
@@ -25,6 +25,32 @@ public sealed class TeamMemberCreatedDTO
     public bool PendingRegistration { get; init; }
 }
 
+public sealed class TeamMemberDetailDTO : TeamMemberCreatedDTO
+{
+    public string Status { get; init; } = "Active";
+    public bool IsAccountOwner { get; init; }
+    public IReadOnlyList<TeamPermissionValueDTO> Permissions { get; init; } = Array.Empty<TeamPermissionValueDTO>();
+}
+
+public sealed record UpdateTeamMemberRequestDTO
+{
+    public string? Name { get; init; }
+    public string? Role { get; init; }
+    public string? Color { get; init; }
+    public string? Email { get; init; }
+    public string? Phone { get; init; }
+    public IReadOnlyList<string>? ServiceAreas { get; init; }
+    public IReadOnlyDictionary<string, UserPermissionState>? PermissionOverrides { get; init; }
+    public bool IsActive { get; init; } = true;
+}
+
+public sealed class TeamMemberOperationOutcomeDTO
+{
+    public bool Success { get; init; }
+    public string? Error { get; init; }
+    public TeamMemberDetailDTO? Member { get; init; }
+}
+
 public sealed class CreateTeamMemberOutcomeDTO
 {
     public bool Success { get; init; }
diff --git a/SeaHaven.Services/Implementation/TeamMemberService.cs b/SeaHaven.Services/Implementation/TeamMemberService.cs
index ad01254..5e85e89 100644
--- a/SeaHaven.Services/Implementation/TeamMemberService.cs
+++ b/SeaHaven.Services/Implementation/TeamMemberService.cs
@@ -17,17 +17,23 @@ public sealed class TeamMemberService : ITeamMemberService
     private readonly RoleManager<IdentityRole> _roleManager;
     private readonly IUserServiceAreaDataService _areaDataService;
     private readonly ITeamPermissionOverrideDataService _permissionDataService;
+    private readonly IUserDataService _userDataService;
+    private readonly ITeamPermissionService _permissionService;
 
     public TeamMemberService(
         UserManager<ApplicationUser> userManager,
         RoleManager<IdentityRole> roleManager,
         IUserServiceAreaDataService areaDataService,
-        ITeamPermissionOverrideDataService permissionDataService)
+        ITeamPermissionOverrideDataService permissionDataService,
+        IUserDataService userDataService,
+        ITeamPermissionService permissionService)
     {
         _userManager = userManager;
         _roleManager = roleManager;
         _areaDataService = areaDataService;
         _permissionDataService = permissionDataService;
+        _userDataService = userDataService;
+        _permissionService = permissionService;
     }
 
     public async Task<CreateTeamMemberOutcomeDTO> CreateAsync(
@@ -45,12 +51,9 @@ public sealed class TeamMemberService : ITeamMemberService
         if (await _userManager.FindByEmailAsync(email!) is not null)
             return Failure("Email is already in use.");
 
-        if (!await _roleManager.RoleExistsAsync(role!))
-        {
-            var roleResult = await _roleManager.CreateAsync(new IdentityRole(role!));
-            if (!roleResult.Succeeded)
-                return Failure(roleResult.Errors.FirstOrDefault()?.Description ?? "Unable to create role.");
-        }
+        var roleError = await EnsureRoleAsync(role!);
+        if (roleError is not null)
+            return Failure(roleError);
 
         var now = DateTime.UtcNow;
         var user = new ApplicationUser
@@ -107,6 +110,128 @@ public sealed class TeamMemberService : ITeamMemberService
         };
     }
 
+    public async Task<TeamMemberOperationOutcomeDTO> GetAsync(
+        string userId,
+        ClaimsPrincipal caller,
+        CancellationToken cancellationToken)
+    {
+        if (caller?.IsInRole("Admin") != true)
+            return OperationFailure("Forbidden");
+
+        var user = await _userManager.FindByIdAsync(userId);
+        if (user is null)
+            return OperationFailure("Team member not found.");
+
+        return await OperationSuccessAsync(user, caller, cancellationToken);
+    }
+
+    public async Task<TeamMemberOperationOutcomeDTO> UpdateAsync(
+        string userId,
+        UpdateTeamMemberRequestDTO request,
+        ClaimsPrincipal caller,
+        CancellationToken cancellationToken)
+    {
+        if (caller?.IsInRole("Admin") != true)
+            return OperationFailure("Forbidden");
+
+        var user = await _userManager.FindByIdAsync(userId);
+        if (user is null)
+            return OperationFailure("Team member not found.");
+
+        var existingRoles = await _userManager.GetRolesAsync(user);
+        var existingRole = existingRoles.FirstOrDefault();
+        var candidate = new CreateTeamMemberRequestDTO
+        {
+            Name = request.Name,
+            Role = request.Role,
+            Color = request.Color,
+            Email = request.Email,
+            Phone = request.Phone,
+            ServiceAreas = request.ServiceAreas,
+            PermissionOverrides = request.PermissionOverrides
+        };
+        var validation = Validate(candidate, out var role, out var color, out var email, out var areas, out var overrides);
+        if (validation is not null)
+            return OperationFailure(validation);
+
+        var roleChanged = !string.Equals(existingRole, role, StringComparison.OrdinalIgnoreCase);
+        var isOwner = await _userDataService.IsAccountOwnerAsync(user.Id, cancellationToken);
+        if (isOwner && (roleChanged || !request.IsActive))
+            return OperationFailure("Forbidden");
+
+        var duplicate = await _userManager.FindByEmailAsync(email!);
+        if (duplicate is not null && !string.Equals(duplicate.Id, user.Id, StringComparison.Ordinal))
+            return OperationFailure("Email is already in use.");
+
+        var roleError = await EnsureRoleAsync(role!);
+        if (roleError is not null)
+            return OperationFailure(roleError);
+
+        user.FirstName = candidate.Name!.Trim();
+        user.Email = email;
+        user.UserName = email;
+        user.NormalizedEmail = email!.ToUpperInvariant();
+        user.NormalizedUserName = email.ToUpperInvariant();
+        user.Contact = candidate.Phone?.Trim();
+        user.PhoneNumber = candidate.Phone?.Trim();
+        user.Color = color;
+        user.UniqueName = request.IsActive ? ActiveStatus : "Inactive";
+        user.IsDeleted = !request.IsActive;
+
+        if (roleChanged)
+        {
+            if (existingRoles.Count > 0)
+                await _userManager.RemoveFromRolesAsync(user, existingRoles);
+            await _userManager.AddToRoleAsync(user, role!);
+        }
+
+        await _userDataService.UpdateUserAsync(user, cancellationToken);
+        await _areaDataService.ReplaceAsync(user.Id, areas!, cancellationToken);
+        await _permissionDataService.ClearOverridesAsync(user.Id, cancellationToken);
+        await _permissionDataService.SetOverridesAsync(user.Id, overrides!, cancellationToken);
+
+        return await OperationSuccessAsync(user, caller, cancellationToken);
+    }
+
+    private async Task<string?> EnsureRoleAsync(string role)
+    {
+        if (await _roleManager.RoleExistsAsync(role))
+            return null;
+
+        var roleResult = await _roleManager.CreateAsync(new IdentityRole(role));
+        return roleResult.Succeeded
+            ? null
+            : roleResult.Errors.FirstOrDefault()?.Description ?? "Unable to create role.";
+    }
+
+    private async Task<TeamMemberOperationOutcomeDTO> OperationSuccessAsync(
+        ApplicationUser user,
+        ClaimsPrincipal caller,
+        CancellationToken cancellationToken)
+    {
+        var roles = await _userManager.GetRolesAsync(user);
+        var profile = await _permissionService.GetProfileAsync(user.Id, caller, cancellationToken);
+        var areas = await _areaDataService.GetForUserAsync(user.Id, cancellationToken);
+        return new TeamMemberOperationOutcomeDTO
+        {
+            Success = true,
+            Member = new TeamMemberDetailDTO
+            {
+                Id = user.Id,
+                Name = $"{user.FirstName ?? ""} {user.LastName ?? ""}".Trim(),
+                Role = TeamMemberConstants.CanonicalRole(roles.FirstOrDefault()) ?? roles.FirstOrDefault() ?? "",
+                Color = user.Color ?? "",
+                Email = user.Email,
+                Phone = user.Contact ?? user.PhoneNumber,
+                ServiceAreas = areas,
+                PendingRegistration = user.PendingRegistration == true,
+                Status = user.UniqueName ?? "Active",
+                IsAccountOwner = user.IsAccountOwner,
+                Permissions = profile?.Value?.Permissions ?? Array.Empty<TeamPermissionValueDTO>()
+            }
+        };
+    }
+
     private static string? Validate(
         CreateTeamMemberRequestDTO request,
         out string? role,
@@ -211,4 +336,7 @@ public sealed class TeamMemberService : ITeamMemberService
 
     private static CreateTeamMemberOutcomeDTO Failure(string error) =>
         new() { Success = false, Error = error };
+
+    private static TeamMemberOperationOutcomeDTO OperationFailure(string error) =>
+        new() { Success = false, Error = error };
 }
diff --git a/SeaHaven.Services/Interfaces/ITeamMemberService.cs b/SeaHaven.Services/Interfaces/ITeamMemberService.cs
index 36016cf..702625f 100644
--- a/SeaHaven.Services/Interfaces/ITeamMemberService.cs
+++ b/SeaHaven.Services/Interfaces/ITeamMemberService.cs
@@ -9,4 +9,13 @@ public interface ITeamMemberService
         CreateTeamMemberRequestDTO request,
         ClaimsPrincipal caller,
         CancellationToken cancellationToken);
+    Task<TeamMemberOperationOutcomeDTO> GetAsync(
+        string userId,
+        ClaimsPrincipal caller,
+        CancellationToken cancellationToken);
+    Task<TeamMemberOperationOutcomeDTO> UpdateAsync(
+        string userId,
+        UpdateTeamMemberRequestDTO request,
+        ClaimsPrincipal caller,
+        CancellationToken cancellationToken);
 }

From 3cb1e3e3f3593e29351dd78420d9fbe34a2b97af Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 20:03:35 -0300
Subject: [PATCH 031/183] feat(uplifts): add approval queue read contract
 (SH-207)

---
 .../UpliftControllerTests.cs                  |  50 ++
 .../UpliftQueueReadTests.cs                   | 465 ++++++++++++++++++
 .../Models/VendorPortalReadModels.cs          |  17 +
 .../Implementation/UpliftDataService.cs       |  97 +++-
 .../Interfaces/IUpliftDataService.cs          |   6 +
 SeaHaven.Services/DTOs/UpliftDTOs.cs          |  11 +
 .../Implementation/UpliftService.cs           |  37 ++
 .../WorkOrderBoardCancelServiceTests.cs       |   1 +
 8 files changed, 682 insertions(+), 2 deletions(-)
 create mode 100644 Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs

diff --git a/Api.SeaHavenIndustries.Tests/UpliftControllerTests.cs b/Api.SeaHavenIndustries.Tests/UpliftControllerTests.cs
index abad676..dc634aa 100644
--- a/Api.SeaHavenIndustries.Tests/UpliftControllerTests.cs
+++ b/Api.SeaHavenIndustries.Tests/UpliftControllerTests.cs
@@ -52,6 +52,56 @@ public class UpliftControllerTests
         envelope.Status.Should().Be("Success");
     }
 
+    [Fact]
+    public async Task List_PassesStatusAndTierFiltersToService()
+    {
+        var service = new Mock<IUpliftService>();
+        service.Setup(x => x.ListAsync(It.IsAny<ClaimsPrincipal>(), "Approved", 2, 3, 50, It.IsAny<CancellationToken>()))
+            .ReturnsAsync(new UpliftListResultDTO());
+
+        var controller = NewController(service);
+
+        await controller.List("Approved", 2, 3, 50);
+
+        service.Verify(
+            x => x.ListAsync(It.IsAny<ClaimsPrincipal>(), "Approved", 2, 3, 50, It.IsAny<CancellationToken>()),
+            Times.Once);
+    }
+
+    [Fact]
+    public async Task List_ReturnsQueueContractFieldsInEnvelope()
+    {
+        var service = new Mock<IUpliftService>();
+        var item = new UpliftListItemDTO
+        {
+            Id = 7,
+            WorkOrderId = 11,
+            WorkOrderNumber = "WO-77",
+            WorkOrderSite = "SITE-EAST",
+            WorkOrderService = "HVAC",
+            RequestedByName = "Gateway",
+            WorkOrderAutoApprovedTotal = 150m,
+            WorkOrderAdminApprovedTotal = 300m,
+            WorkOrderApprovedExposureTotal = 450m
+        };
+        service.Setup(x => x.ListAsync(It.IsAny<ClaimsPrincipal>(), It.IsAny<string?>(), It.IsAny<int?>(), It.IsAny<int>(), It.IsAny<int>(), It.IsAny<CancellationToken>()))
+            .ReturnsAsync(new UpliftListResultDTO { Total = 1, Page = 1, PageSize = 25, Items = new[] { item } });
+
+        var controller = NewController(service);
+
+        var result = await controller.List();
+
+        var ok = result.Should().BeOfType<OkObjectResult>().Subject;
+        var envelope = ok.Value.Should().BeOfType<DataResponse>().Subject;
+        var data = envelope.Data as UpliftListResultDTO;
+        var returned = data!.Items.Should().ContainSingle().Subject;
+        returned.WorkOrderNumber.Should().Be("WO-77");
+        returned.WorkOrderSite.Should().Be("SITE-EAST");
+        returned.WorkOrderService.Should().Be("HVAC");
+        returned.RequestedByName.Should().Be("Gateway");
+        returned.WorkOrderApprovedExposureTotal.Should().Be(450m);
+    }
+
     [Fact]
     public async Task Approve_NotFound_Returns404()
     {
diff --git a/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs b/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
new file mode 100644
index 0000000..ad539bd
--- /dev/null
+++ b/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
@@ -0,0 +1,465 @@
+using Data.SeaHavenIndustries;
+using FluentAssertions;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Options;
+using Moq;
+using SeaHaven.DataServices.Implementation;
+using SeaHaven.Services.Configuration;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Implementation;
+using SeaHaven.Services.Interfaces;
+using System.Security.Claims;
+using Xunit;
+
+namespace Api.SeaHavenIndustries.Tests;
+
+// Behavior tests for the approval queue read contract. These exercise the real
+// service + data-service layers against an in-memory DbContext so that queue
+// ordering, filters, flattened work-order fields, exposure aggregation, and
+// per-tier read authorization are validated through the public contract.
+public sealed class UpliftQueueReadTests
+{
+    private static ApplicationDbContext NewContext()
+    {
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseInMemoryDatabase(Guid.NewGuid().ToString())
+            .Options;
+        return new ApplicationDbContext(options);
+    }
+
+    private static ApprovalsOptions NewOptions() => new()
+    {
+        UpliftTier1MaxUsd = 2500m,
+        Tier1Roles = new[] { "Approver" },
+        Tier2Roles = new[] { "Manager" },
+        Tier1NotificationRecipients = new[] { "tier1@example.com" },
+        Tier2NotificationRecipients = new[] { "tier2@example.com" },
+        EscalationRecipients = new[] { "escalate@example.com" }
+    };
+
+    private static UpliftService NewService(ApplicationDbContext context) =>
+        new(new UpliftDataService(context),
+            new DispatchDataService(context),
+            Mock.Of<IVendorDocumentStoragePort>(),
+            TimeProvider.System,
+            Microsoft.Extensions.Options.Options.Create(NewOptions()));
+
+    private static ClaimsPrincipal UserWithRoles(params string[] roles)
+    {
+        var claims = new List<Claim> { new(ClaimTypes.NameIdentifier, "user-42") };
+        claims.AddRange(roles.Select(r => new Claim(ClaimTypes.Role, r)));
+        return new ClaimsPrincipal(new ClaimsIdentity(claims, "Test"));
+    }
+
+    private static DispatchUpliftRequest Request(
+        Dispatch dispatch,
+        string status,
+        DateTime created,
+        DateTime? decided = null,
+        int tier = 1,
+        decimal requested = 100m,
+        string? reason = null,
+        string? requestedBy = null,
+        string? createdBy = null,
+        decimal? currentNte = null) => new()
+        {
+            DispatchId = dispatch.Id,
+            Status = status,
+            CreatedDate = created,
+            DecidedAt = decided,
+            RequiredTier = tier,
+            RequestedNTE = requested,
+            CurrentNTE = currentNte,
+            VendorReason = reason,
+            RequestedByVendorName = requestedBy,
+            createdby = createdBy,
+            NotificationStatus = "Pending"
+        };
+
+    private static async Task<(Vendor Vendor, WorkOrder WorkOrder)> SeedWorkOrderAsync(
+        ApplicationDbContext context,
+        string number,
+        string site,
+        string service,
+        string vendorName = "Gateway")
+    {
+        var vendor = new Vendor { CompanyName = vendorName, IsActive = true };
+        var workOrder = new WorkOrder
+        {
+            WorkerOrderNumber = number,
+            SiteCode = site,
+            Service = service,
+            WorkerOrderTitle = "Repair"
+        };
+        context.AddRange(vendor, workOrder);
+        await context.SaveChangesAsync();
+        return (vendor, workOrder);
+    }
+
+    private static async Task<Dispatch> SeedDispatchAsync(
+        ApplicationDbContext context, Vendor vendor, WorkOrder workOrder, string number)
+    {
+        var dispatch = new Dispatch
+        {
+            VendorId = vendor.Id,
+            WorkOrderId = workOrder.Id,
+            DispatchNumber = number,
+            Status = "Completed",
+            NTEAmount = 1000m
+        };
+        context.Dispatches.Add(dispatch);
+        await context.SaveChangesAsync();
+        return dispatch;
+    }
+
+    // --- Ordering ---
+
+    [Fact]
+    public async Task List_PendingStatus_OrdersOldestRequestFirst()
+    {
+        using var context = NewContext();
+        var vendor = new Vendor { CompanyName = "Gateway", IsActive = true };
+        var workOrder = new WorkOrder { WorkerOrderTitle = "Repair" };
+        context.AddRange(vendor, workOrder);
+        await context.SaveChangesAsync();
+        var dispatch = await SeedDispatchAsync(context, vendor, workOrder, "DIS-1");
+        context.DispatchUpliftRequests.AddRange(
+            Request(dispatch, "Pending", new DateTime(2026, 3, 3)),
+            Request(dispatch, "Pending", new DateTime(2026, 3, 1)),
+            Request(dispatch, "Pending", new DateTime(2026, 3, 2)));
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        var result = await service.ListAsync(UserWithRoles("Approver"), "Pending", null, 1, 25, CancellationToken.None);
+
+        result.Items.Select(i => i.RequestedAt).Should().Equal(
+            new DateTime(2026, 3, 1),
+            new DateTime(2026, 3, 2),
+            new DateTime(2026, 3, 3));
+    }
+
+    [Fact]
+    public async Task List_ApprovedStatus_OrdersMostRecentlyDecidedFirst()
+    {
+        using var context = NewContext();
+        var vendor = new Vendor { CompanyName = "Gateway", IsActive = true };
+        var workOrder = new WorkOrder { WorkerOrderTitle = "Repair" };
+        context.AddRange(vendor, workOrder);
+        await context.SaveChangesAsync();
+        var dispatch = await SeedDispatchAsync(context, vendor, workOrder, "DIS-1");
+        context.DispatchUpliftRequests.AddRange(
+            Request(dispatch, "Approved", new DateTime(2026, 3, 1), decided: new DateTime(2026, 3, 10)),
+            Request(dispatch, "Approved", new DateTime(2026, 3, 2), decided: new DateTime(2026, 3, 20)),
+            Request(dispatch, "Approved", new DateTime(2026, 3, 3), decided: new DateTime(2026, 3, 15)));
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        var result = await service.ListAsync(UserWithRoles("Approver"), "Approved", null, 1, 25, CancellationToken.None);
+
+        result.Items.Select(i => i.DecidedAt).Should().Equal(
+            new DateTime(2026, 3, 20),
+            new DateTime(2026, 3, 15),
+            new DateTime(2026, 3, 10));
+    }
+
+    [Fact]
+    public async Task List_WithoutStatusFilter_KeepsHistoricalNewestRequestFirstOrder()
+    {
+        using var context = NewContext();
+        var vendor = new Vendor { CompanyName = "Gateway", IsActive = true };
+        var workOrder = new WorkOrder { WorkerOrderTitle = "Repair" };
+        context.AddRange(vendor, workOrder);
+        await context.SaveChangesAsync();
+        var dispatch = await SeedDispatchAsync(context, vendor, workOrder, "DIS-1");
+        context.DispatchUpliftRequests.AddRange(
+            Request(dispatch, "Rejected", new DateTime(2026, 3, 1), decided: new DateTime(2026, 3, 2)),
+            Request(dispatch, "Approved", new DateTime(2026, 3, 10), decided: new DateTime(2026, 3, 11)));
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        var result = await service.ListAsync(UserWithRoles("Approver"), null, null, 1, 25, CancellationToken.None);
+
+        result.Items.Select(i => i.RequestedAt).Should().ContainInOrder(
+            new DateTime(2026, 3, 10),
+            new DateTime(2026, 3, 1));
+    }
+
+    // --- Filters and scoping ---
+
+    [Fact]
+    public async Task List_StatusAndTierFilters_Combine()
+    {
+        using var context = NewContext();
+        var vendor = new Vendor { CompanyName = "Gateway", IsActive = true };
+        var workOrder = new WorkOrder { WorkerOrderTitle = "Repair" };
+        context.AddRange(vendor, workOrder);
+        await context.SaveChangesAsync();
+        var dispatch = await SeedDispatchAsync(context, vendor, workOrder, "DIS-1");
+        context.DispatchUpliftRequests.AddRange(
+            Request(dispatch, "Pending", new DateTime(2026, 3, 1), tier: 1),
+            Request(dispatch, "Pending", new DateTime(2026, 3, 2), tier: 2),
+            Request(dispatch, "Approved", new DateTime(2026, 3, 3), decided: new DateTime(2026, 3, 4), tier: 2));
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        var result = await service.ListAsync(UserWithRoles("Manager"), "Pending", 2, 1, 25, CancellationToken.None);
+
+        result.Total.Should().Be(1);
+        result.Items.Should().ContainSingle(i => i.RequiredTier == 2 && i.Status == "Pending");
+    }
+
+    [Fact]
+    public async Task List_ExcludesDeletedRequestsAndRequestsOnDeletedDispatches()
+    {
+        using var context = NewContext();
+        var vendor = new Vendor { CompanyName = "Gateway", IsActive = true };
+        var workOrder = new WorkOrder { WorkerOrderTitle = "Repair" };
+        context.AddRange(vendor, workOrder);
+        await context.SaveChangesAsync();
+        var dispatch = await SeedDispatchAsync(context, vendor, workOrder, "DIS-1");
+        var deletedDispatch = new Dispatch
+        {
+            VendorId = vendor.Id,
+            WorkOrderId = workOrder.Id,
+            DispatchNumber = "DIS-DELETED",
+            Status = "Completed",
+            IsDeleted = true
+        };
+        context.Dispatches.Add(deletedDispatch);
+        await context.SaveChangesAsync();
+        context.DispatchUpliftRequests.AddRange(
+            Request(dispatch, "Pending", new DateTime(2026, 3, 1)),
+            new DispatchUpliftRequest
+            {
+                DispatchId = dispatch.Id,
+                Status = "Pending",
+                CreatedDate = new DateTime(2026, 3, 2),
+                IsDeleted = true,
+                RequiredTier = 1,
+                RequestedNTE = 100m
+            },
+            Request(deletedDispatch, "Pending", new DateTime(2026, 3, 3)));
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        var result = await service.ListAsync(UserWithRoles("Approver"), "Pending", null, 1, 25, CancellationToken.None);
+
+        result.Total.Should().Be(1);
+        result.Items.Should().ContainSingle(i => i.RequestedAt == new DateTime(2026, 3, 1));
+    }
+
+    // --- Flattened queue fields ---
+
+    [Fact]
+    public async Task List_MapsFlattenedWorkOrderAndRequesterFields()
+    {
+        using var context = NewContext();
+        var (vendor, workOrder) = await SeedWorkOrderAsync(context, "WO-77", "SITE-EAST", "HVAC");
+        var dispatch = await SeedDispatchAsync(context, vendor, workOrder, "DIS-1");
+        context.Users.Add(new ApplicationUser { Id = "user-7", FirstName = "Ada", LastName = "Smith" });
+        await context.SaveChangesAsync();
+        context.DispatchUpliftRequests.Add(Request(
+            dispatch, "Pending", new DateTime(2026, 3, 2),
+            tier: 2, requested: 400m, reason: "Scope grew",
+            requestedBy: "Gateway", createdBy: "user-7", currentNte: 100m));
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        var result = await service.ListAsync(UserWithRoles("Manager"), "Pending", null, 1, 25, CancellationToken.None);
+
+        var item = result.Items.Should().ContainSingle().Subject;
+        item.WorkOrderId.Should().Be(workOrder.Id);
+        item.WorkOrderNumber.Should().Be("WO-77");
+        item.WorkOrderSite.Should().Be("SITE-EAST");
+        item.WorkOrderService.Should().Be("HVAC");
+        item.VendorCompanyName.Should().Be("Gateway");
+        item.RequestedByName.Should().Be("Gateway");
+        item.RequestedAt.Should().Be(new DateTime(2026, 3, 2));
+        item.VendorReason.Should().Be("Scope grew");
+        item.Delta.Should().Be(300m);
+        item.Status.Should().Be("Pending");
+    }
+
+    [Fact]
+    public async Task List_RequesterLabelFallsBackToCreatingUserName()
+    {
+        using var context = NewContext();
+        var (vendor, workOrder) = await SeedWorkOrderAsync(context, "WO-77", "SITE-EAST", "HVAC");
+        var dispatch = await SeedDispatchAsync(context, vendor, workOrder, "DIS-1");
+        context.Users.Add(new ApplicationUser { Id = "user-7", FirstName = "Ada", LastName = "Smith" });
+        await context.SaveChangesAsync();
+        context.DispatchUpliftRequests.Add(Request(
+            dispatch, "Pending", new DateTime(2026, 3, 2),
+            requestedBy: null, createdBy: "user-7"));
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        var result = await service.ListAsync(UserWithRoles("Approver"), "Pending", null, 1, 25, CancellationToken.None);
+
+        result.Items.Single().RequestedByName.Should().Be("Ada Smith");
+    }
+
+    [Fact]
+    public async Task List_MapsEvidenceAttachmentSummary()
+    {
+        using var context = NewContext();
+        var (vendor, workOrder) = await SeedWorkOrderAsync(context, "WO-77", "SITE-EAST", "HVAC");
+        var dispatch = await SeedDispatchAsync(context, vendor, workOrder, "DIS-1");
+        var evidence = new VendorCompletionDocument
+        {
+            VendorId = vendor.Id,
+            DispatchId = dispatch.Id,
+            WorkOrderId = workOrder.Id,
+            OriginalFileName = "quote.pdf",
+            StoredFileName = "evidence.bin",
+            ContentType = "application/pdf",
+            SizeBytes = 512,
+            ScanStatus = "Passed",
+            ReviewStatus = "Approved",
+            Purpose = "UpliftEvidence",
+            Version = 1
+        };
+        context.VendorCompletionDocuments.Add(evidence);
+        await context.SaveChangesAsync();
+        context.DispatchUpliftRequests.Add(new DispatchUpliftRequest
+        {
+            DispatchId = dispatch.Id,
+            Status = "Pending",
+            CreatedDate = new DateTime(2026, 3, 2),
+            RequiredTier = 1,
+            RequestedNTE = 200m,
+            EvidenceDocumentId = evidence.Id
+        });
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        var result = await service.ListAsync(UserWithRoles("Approver"), "Pending", null, 1, 25, CancellationToken.None);
+
+        var item = result.Items.Single();
+        item.EvidenceDocumentId.Should().Be(evidence.Id);
+        item.EvidenceFileName.Should().Be("quote.pdf");
+        item.EvidenceContentType.Should().Be("application/pdf");
+        item.EvidenceSizeBytes.Should().Be(512);
+    }
+
+    // --- Approved-on-WO exposure totals ---
+
+    [Fact]
+    public async Task List_AggregatesApprovedExposurePerWorkOrder_ExcludingNonApprovedStatuses()
+    {
+        using var context = NewContext();
+        var (vendorA, workOrderA) = await SeedWorkOrderAsync(context, "WO-A", "SITE-A", "HVAC", "Gateway-A");
+        var (vendorB, workOrderB) = await SeedWorkOrderAsync(context, "WO-B", "SITE-B", "Plumbing", "Gateway-B");
+        var dispatchA = await SeedDispatchAsync(context, vendorA, workOrderA, "DIS-A");
+        var dispatchB = await SeedDispatchAsync(context, vendorB, workOrderB, "DIS-B");
+        context.DispatchUpliftRequests.AddRange(
+            Request(dispatchA, "Approved", new DateTime(2026, 3, 1), decided: new DateTime(2026, 3, 2), requested: 300m),
+            new DispatchUpliftRequest
+            {
+                DispatchId = dispatchA.Id,
+                Status = "NoApprovalRequired",
+                CreatedDate = new DateTime(2026, 3, 1),
+                RequiredTier = 0,
+                RequestedNTE = 150m
+            },
+            Request(dispatchA, "Pending", new DateTime(2026, 3, 1), requested: 999m),
+            Request(dispatchA, "Rejected", new DateTime(2026, 3, 1), decided: new DateTime(2026, 3, 2), requested: 999m),
+            new DispatchUpliftRequest
+            {
+                DispatchId = dispatchA.Id,
+                Status = "Withdrawn",
+                CreatedDate = new DateTime(2026, 3, 1),
+                DecidedAt = new DateTime(2026, 3, 2),
+                RequiredTier = 1,
+                RequestedNTE = 999m
+            },
+            new DispatchUpliftRequest
+            {
+                DispatchId = dispatchA.Id,
+                Status = "Revoked",
+                CreatedDate = new DateTime(2026, 3, 1),
+                DecidedAt = new DateTime(2026, 3, 2),
+                RequiredTier = 1,
+                RequestedNTE = 999m
+            },
+            new DispatchUpliftRequest
+            {
+                DispatchId = dispatchA.Id,
+                Status = "Expired",
+                CreatedDate = new DateTime(2026, 3, 1),
+                RequiredTier = 1,
+                RequestedNTE = 999m
+            },
+            Request(dispatchB, "Approved", new DateTime(2026, 3, 5), decided: new DateTime(2026, 3, 6), requested: 75m));
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        var result = await service.ListAsync(UserWithRoles("Approver"), "Approved", null, 1, 25, CancellationToken.None);
+
+        var itemA = result.Items.Single(i => i.WorkOrderNumber == "WO-A");
+        itemA.WorkOrderAutoApprovedTotal.Should().Be(150m);
+        itemA.WorkOrderAdminApprovedTotal.Should().Be(300m);
+        itemA.WorkOrderApprovedExposureTotal.Should().Be(450m);
+
+        var itemB = result.Items.Single(i => i.WorkOrderNumber == "WO-B");
+        itemB.WorkOrderAutoApprovedTotal.Should().Be(0m);
+        itemB.WorkOrderAdminApprovedTotal.Should().Be(75m);
+        itemB.WorkOrderApprovedExposureTotal.Should().Be(75m);
+    }
+
+    [Fact]
+    public async Task Exposure_IncludesLinkedDispatchesViaServerDerivedWorkOrderLinks()
+    {
+        using var context = NewContext();
+        var (vendorA, workOrderA) = await SeedWorkOrderAsync(context, "WO-A", "SITE-A", "HVAC");
+        var dispatchA = await SeedDispatchAsync(context, vendorA, workOrderA, "DIS-A");
+        var linkedDispatch = new Dispatch
+        {
+            VendorId = vendorA.Id,
+            DispatchNumber = "DIS-LINKED",
+            Status = "Completed"
+        };
+        context.Dispatches.Add(linkedDispatch);
+        await context.SaveChangesAsync();
+        context.DispatchWorkOrders.Add(new DispatchWorkOrder
+        {
+            DispatchId = linkedDispatch.Id,
+            WorkOrderId = workOrderA.Id
+        });
+        await context.SaveChangesAsync();
+        context.DispatchUpliftRequests.Add(Request(
+            linkedDispatch, "Approved", new DateTime(2026, 3, 1), decided: new DateTime(2026, 3, 2), requested: 60m));
+        await context.SaveChangesAsync();
+        var data = new UpliftDataService(context);
+
+        var exposure = await data.GetApprovedExposureForWorkOrdersAsync(
+            new[] { workOrderA.Id }, CancellationToken.None);
+
+        var total = exposure.Should().ContainSingle(e => e.WorkOrderId == workOrderA.Id).Subject;
+        total.AdminApprovedTotal.Should().Be(60m);
+        total.AutoApprovedTotal.Should().Be(0m);
+    }
+
+    // --- Read authorization (tier roles) ---
+
+    [Fact]
+    public async Task List_CanDecide_ReflectsTierRolesForTheCaller()
+    {
+        using var context = NewContext();
+        var (vendor, workOrder) = await SeedWorkOrderAsync(context, "WO-77", "SITE-EAST", "HVAC");
+        var dispatch = await SeedDispatchAsync(context, vendor, workOrder, "DIS-1");
+        context.DispatchUpliftRequests.AddRange(
+            Request(dispatch, "Pending", new DateTime(2026, 3, 1), tier: 1),
+            Request(dispatch, "Pending", new DateTime(2026, 3, 2), tier: 2));
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        var tier1Only = await service.ListAsync(UserWithRoles("Approver"), "Pending", null, 1, 25, CancellationToken.None);
+        var tier2User = await service.ListAsync(UserWithRoles("Manager"), "Pending", null, 1, 25, CancellationToken.None);
+
+        tier1Only.Items.Single(i => i.RequiredTier == 1).CanDecide.Should().BeTrue();
+        tier1Only.Items.Single(i => i.RequiredTier == 2).CanDecide.Should().BeFalse();
+        tier2User.Items.Single(i => i.RequiredTier == 2).CanDecide.Should().BeTrue();
+        tier2User.Items.Single(i => i.RequiredTier == 1).CanDecide.Should().BeFalse();
+    }
+}
diff --git a/Data.SeaHavenIndustries/Models/VendorPortalReadModels.cs b/Data.SeaHavenIndustries/Models/VendorPortalReadModels.cs
index 28371b9..05ea0ab 100644
--- a/Data.SeaHavenIndustries/Models/VendorPortalReadModels.cs
+++ b/Data.SeaHavenIndustries/Models/VendorPortalReadModels.cs
@@ -81,6 +81,13 @@ namespace Data.SeaHavenIndustries
         public string? PONumber { get; set; }
         public int? WorkOrderId { get; set; }
         public string? VendorCompanyName { get; set; }
+        // Approval queue read contract: flattened work-order context.
+        public string? WorkOrderNumber { get; set; }
+        public string? WorkOrderSiteCode { get; set; }
+        public string? WorkOrderService { get; set; }
+        public string? RequestedByVendorName { get; set; }
+        public string? RequestedByFirstName { get; set; }
+        public string? RequestedByLastName { get; set; }
         public decimal? CurrentNTE { get; set; }
         public decimal RequestedNTE { get; set; }
         public string? VendorReason { get; set; }
@@ -130,6 +137,16 @@ namespace Data.SeaHavenIndustries
         public bool EvidenceScanPassed { get; set; }
     }
 
+    // Approval queue read contract: per-work-order exposure totals. Approved exposure is
+    // the sum of uplift amounts that were auto-approved or admin-approved on the work
+    // order; pending, rejected, cancelled/withdrawn, and revoked requests are excluded.
+    public class WorkOrderUpliftExposureData
+    {
+        public int WorkOrderId { get; set; }
+        public decimal AutoApprovedTotal { get; set; }
+        public decimal AdminApprovedTotal { get; set; }
+    }
+
     // SH-101: internal evidence-download projection. Server-side join enforces that the
     // returned document is the one linked to this specific uplift request and dispatch.
     public class UpliftEvidenceDownloadData
diff --git a/SeaHaven.DataServices/Implementation/UpliftDataService.cs b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
index fa8d76a..8d7ac66 100644
--- a/SeaHaven.DataServices/Implementation/UpliftDataService.cs
+++ b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
@@ -24,8 +24,13 @@ namespace SeaHaven.DataServices.Implementation
                         from v in vendors.DefaultIfEmpty()
                         join ev in _context.VendorCompletionDocuments on u.EvidenceDocumentId equals ev.Id into evidences
                         from ev in evidences.DefaultIfEmpty()
+                        join wo in _context.workOrders on d.WorkOrderId equals wo.Id into workOrders
+                        from wo in workOrders.DefaultIfEmpty()
+                        join reqUser in _context.Users on u.createdby equals reqUser.Id into requestUsers
+                        from reqUser in requestUsers.DefaultIfEmpty()
                         where (u.IsDeleted == null || u.IsDeleted == false)
-                        select new { u, d, v, ev };
+                            && (d.IsDeleted == null || d.IsDeleted == false)
+                        select new { u, d, v, ev, wo, reqUser };
 
             if (!string.IsNullOrWhiteSpace(status))
                 query = query.Where(x => x.u.Status == status);
@@ -34,8 +39,18 @@ namespace SeaHaven.DataServices.Implementation
 
             var total = await query.CountAsync(cancellationToken);
 
+            // Approval queue read contract: the actionable queue (Pending) surfaces the
+            // oldest request first; the decision log (Approved) surfaces the most
+            // recently decided first. Every other read keeps the historical
+            // newest-request-first order. Id is the deterministic tiebreaker.
+            if (string.Equals(status, "Pending", StringComparison.Ordinal))
+                query = query.OrderBy(x => x.u.CreatedDate).ThenBy(x => x.u.Id);
+            else if (string.Equals(status, "Approved", StringComparison.Ordinal))
+                query = query.OrderByDescending(x => x.u.DecidedAt).ThenByDescending(x => x.u.Id);
+            else
+                query = query.OrderByDescending(x => x.u.CreatedDate).ThenByDescending(x => x.u.Id);
+
             var items = await query
-                .OrderByDescending(x => x.u.CreatedDate)
                 .Skip((Math.Max(page, 1) - 1) * pageSize)
                 .Take(pageSize)
                 .Select(x => new UpliftListItemData
@@ -46,6 +61,12 @@ namespace SeaHaven.DataServices.Implementation
                     PONumber = x.d.PONumber,
                     WorkOrderId = x.d.WorkOrderId,
                     VendorCompanyName = x.v != null ? x.v.CompanyName : x.u.RequestedByVendorName,
+                    WorkOrderNumber = x.wo != null ? x.wo.WorkerOrderNumber : null,
+                    WorkOrderSiteCode = x.wo != null ? x.wo.SiteCode : null,
+                    WorkOrderService = x.wo != null ? x.wo.Service : null,
+                    RequestedByVendorName = x.u.RequestedByVendorName,
+                    RequestedByFirstName = x.reqUser != null ? x.reqUser.FirstName : null,
+                    RequestedByLastName = x.reqUser != null ? x.reqUser.LastName : null,
                     CurrentNTE = x.u.CurrentNTE,
                     RequestedNTE = x.u.RequestedNTE,
                     VendorReason = x.u.VendorReason,
@@ -252,6 +273,78 @@ namespace SeaHaven.DataServices.Implementation
                 .SumAsync(u => u.RequestedNTE, cancellationToken);
         }
 
+        // Approval queue read contract: set-based exposure aggregation. Dispatches map to
+        // work orders through the server-derived linkage (primary work order plus linked
+        // work orders), matching the ForWorkOrder scope; approved amounts are summed per
+        // dispatch in SQL and folded into per-work-order totals in memory (three set-based
+        // round trips, no query-per-work-order).
+        public async Task<IReadOnlyList<WorkOrderUpliftExposureData>> GetApprovedExposureForWorkOrdersAsync(
+            IReadOnlyCollection<int> workOrderIds, CancellationToken cancellationToken)
+        {
+            var workOrderIdsScope = workOrderIds.Distinct().ToList();
+            if (workOrderIdsScope.Count == 0)
+                return Array.Empty<WorkOrderUpliftExposureData>();
+
+            var primaryPairs = await _context.Dispatches
+                .Where(d => (d.IsDeleted == null || d.IsDeleted == false)
+                    && d.WorkOrderId != null
+                    && workOrderIdsScope.Contains(d.WorkOrderId.Value))
+                .Select(d => new { DispatchId = d.Id, WorkOrderId = d.WorkOrderId!.Value })
+                .ToListAsync(cancellationToken);
+
+            var linkedPairs = await _context.DispatchWorkOrders
+                .Where(l => workOrderIdsScope.Contains(l.WorkOrderId)
+                    && l.Dispatch != null
+                    && (l.Dispatch.IsDeleted == null || l.Dispatch.IsDeleted == false))
+                .Select(l => new { l.DispatchId, l.WorkOrderId })
+                .ToListAsync(cancellationToken);
+
+            var workOrdersByDispatch = primaryPairs
+                .Concat(linkedPairs)
+                .GroupBy(p => p.DispatchId)
+                .ToDictionary(g => g.Key, g => g.Select(p => p.WorkOrderId).ToHashSet());
+
+            if (workOrdersByDispatch.Count == 0)
+                return Array.Empty<WorkOrderUpliftExposureData>();
+
+            var dispatchIds = workOrdersByDispatch.Keys.ToList();
+            var sums = await _context.DispatchUpliftRequests
+                .Where(u => (u.IsDeleted == null || u.IsDeleted == false)
+                    && dispatchIds.Contains(u.DispatchId)
+                    && (u.Status == "Approved" || u.Status == "NoApprovalRequired"))
+                .GroupBy(u => u.DispatchId)
+                .Select(g => new
+                {
+                    DispatchId = g.Key,
+                    AutoApproved = g.Where(x => x.Status == "NoApprovalRequired")
+                        .Sum(x => (decimal?)x.RequestedNTE),
+                    AdminApproved = g.Where(x => x.Status == "Approved")
+                        .Sum(x => (decimal?)x.RequestedNTE)
+                })
+                .ToListAsync(cancellationToken);
+
+            var totals = new Dictionary<int, WorkOrderUpliftExposureData>();
+            foreach (var sum in sums)
+            {
+                if (!workOrdersByDispatch.TryGetValue(sum.DispatchId, out var linkedWorkOrders))
+                    continue;
+
+                foreach (var workOrderId in linkedWorkOrders)
+                {
+                    if (!totals.TryGetValue(workOrderId, out var total))
+                    {
+                        total = new WorkOrderUpliftExposureData { WorkOrderId = workOrderId };
+                        totals[workOrderId] = total;
+                    }
+
+                    total.AutoApprovedTotal += sum.AutoApproved ?? 0m;
+                    total.AdminApprovedTotal += sum.AdminApproved ?? 0m;
+                }
+            }
+
+            return totals.Values.ToList();
+        }
+
         public Task<List<DispatchUpliftRequest>> GetPendingForWorkOrderAsync(
             int workOrderId,
             CancellationToken cancellationToken)
diff --git a/SeaHaven.DataServices/Interfaces/IUpliftDataService.cs b/SeaHaven.DataServices/Interfaces/IUpliftDataService.cs
index 1c4062b..15be0ab 100644
--- a/SeaHaven.DataServices/Interfaces/IUpliftDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IUpliftDataService.cs
@@ -18,6 +18,12 @@ namespace SeaHaven.DataServices.Interfaces
         Task<bool> HasPendingAsync(int dispatchId, CancellationToken cancellationToken);
         Task<bool> HasPendingForWorkOrderAsync(int workOrderId, CancellationToken cancellationToken);
         Task<decimal> SumAutoApprovedAmountForWorkOrderAsync(int workOrderId, CancellationToken cancellationToken);
+        // Approval queue read contract: set-based per-work-order exposure totals covering
+        // auto-approved and admin-approved uplift amounts (pending, rejected,
+        // cancelled/withdrawn, and revoked requests are excluded). Work orders absent
+        // from the result have no approved exposure.
+        Task<IReadOnlyList<WorkOrderUpliftExposureData>> GetApprovedExposureForWorkOrdersAsync(
+            IReadOnlyCollection<int> workOrderIds, CancellationToken cancellationToken);
         Task<List<DispatchUpliftRequest>> GetPendingForWorkOrderAsync(int workOrderId, CancellationToken cancellationToken);
         // SH-101: active = Pending or ChangesRequested (the only states that block a new request).
         Task<bool> HasActiveAsync(int dispatchId, CancellationToken cancellationToken);
diff --git a/SeaHaven.Services/DTOs/UpliftDTOs.cs b/SeaHaven.Services/DTOs/UpliftDTOs.cs
index c9893ee..5333f07 100644
--- a/SeaHaven.Services/DTOs/UpliftDTOs.cs
+++ b/SeaHaven.Services/DTOs/UpliftDTOs.cs
@@ -8,6 +8,11 @@ namespace SeaHaven.Services.DTOs
         public string? PONumber { get; set; }
         public int? WorkOrderId { get; set; }
         public string? VendorCompanyName { get; set; }
+        // Approval queue read contract: flattened work-order context and requester.
+        public string? WorkOrderNumber { get; set; }
+        public string? WorkOrderSite { get; set; }
+        public string? WorkOrderService { get; set; }
+        public string? RequestedByName { get; set; }
         public decimal? CurrentNTE { get; set; }
         public decimal RequestedNTE { get; set; }
         public decimal Delta { get; set; }
@@ -26,6 +31,12 @@ namespace SeaHaven.Services.DTOs
         public DateTime? ExpiresAt { get; set; }
         public string? NotificationStatus { get; set; }
         public string? NotificationError { get; set; }
+        // Approved-on-WO exposure totals for this item's work order: auto-approved and
+        // admin-approved amounts; pending, rejected, cancelled/withdrawn, and revoked
+        // requests are excluded.
+        public decimal WorkOrderAutoApprovedTotal { get; set; }
+        public decimal WorkOrderAdminApprovedTotal { get; set; }
+        public decimal WorkOrderApprovedExposureTotal { get; set; }
     }
 
     public class UpliftListResultDTO
diff --git a/SeaHaven.Services/Implementation/UpliftService.cs b/SeaHaven.Services/Implementation/UpliftService.cs
index 2cfe96f..034f102 100644
--- a/SeaHaven.Services/Implementation/UpliftService.cs
+++ b/SeaHaven.Services/Implementation/UpliftService.cs
@@ -42,6 +42,10 @@ namespace SeaHaven.Services.Implementation
                 PONumber = r.PONumber,
                 WorkOrderId = r.WorkOrderId,
                 VendorCompanyName = r.VendorCompanyName,
+                WorkOrderNumber = r.WorkOrderNumber,
+                WorkOrderSite = r.WorkOrderSiteCode,
+                WorkOrderService = r.WorkOrderService,
+                RequestedByName = ResolveRequestedByName(r.RequestedByVendorName, r.RequestedByFirstName, r.RequestedByLastName),
                 CurrentNTE = r.CurrentNTE,
                 RequestedNTE = r.RequestedNTE,
                 Delta = r.RequestedNTE - (r.CurrentNTE ?? 0m),
@@ -61,6 +65,26 @@ namespace SeaHaven.Services.Implementation
                 NotificationError = r.NotificationError
             }).ToList();
 
+            // Approved-on-WO exposure totals are aggregated once for the whole page
+            // (single set-based data-service call) and then attached per item.
+            var workOrderIds = mapped
+                .Where(i => i.WorkOrderId.HasValue)
+                .Select(i => i.WorkOrderId!.Value)
+                .Distinct()
+                .ToList();
+            var exposureByWorkOrder = (await _upliftData
+                .GetApprovedExposureForWorkOrdersAsync(workOrderIds, cancellationToken))
+                .ToDictionary(e => e.WorkOrderId);
+            foreach (var item in mapped)
+            {
+                if (!item.WorkOrderId.HasValue) continue;
+                if (!exposureByWorkOrder.TryGetValue(item.WorkOrderId.Value, out var exposure)) continue;
+
+                item.WorkOrderAutoApprovedTotal = exposure.AutoApprovedTotal;
+                item.WorkOrderAdminApprovedTotal = exposure.AdminApprovedTotal;
+                item.WorkOrderApprovedExposureTotal = exposure.AutoApprovedTotal + exposure.AdminApprovedTotal;
+            }
+
             return new UpliftListResultDTO
             {
                 Total = total,
@@ -275,6 +299,19 @@ namespace SeaHaven.Services.Implementation
             return false;
         }
 
+        // Approval queue read contract: the requester label prefers the recorded
+        // requester (vendor or internal display name captured at creation) and falls
+        // back to the creating user's name resolved server-side.
+        private static string? ResolveRequestedByName(string? vendorName, string? firstName, string? lastName)
+        {
+            if (!string.IsNullOrWhiteSpace(vendorName))
+                return vendorName;
+
+            var composed = string.Join(" ", new[] { firstName, lastName }
+                .Where(s => !string.IsNullOrWhiteSpace(s))).Trim();
+            return composed.Length > 0 ? composed : null;
+        }
+
         private string[] RolesForTier(int requiredTier) => requiredTier switch
         {
             1 => _approvalsOptions.Tier1Roles,
diff --git a/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs b/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs
index f53f1ff..12ddd97 100644
--- a/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs
@@ -441,6 +441,7 @@ public class WorkOrderBoardCancelServiceTests
         public Task<bool> HasPendingAsync(int dispatchId, CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<bool> HasPendingForWorkOrderAsync(int workOrderId, CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<decimal> SumAutoApprovedAmountForWorkOrderAsync(int workOrderId, CancellationToken cancellationToken) => throw new NotSupportedException();
+        public Task<IReadOnlyList<WorkOrderUpliftExposureData>> GetApprovedExposureForWorkOrdersAsync(IReadOnlyCollection<int> workOrderIds, CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<List<DispatchUpliftRequest>> GetPendingForWorkOrderAsync(int workOrderId, CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<bool> HasActiveAsync(int dispatchId, CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<DispatchUpliftRequest?> GetActiveRequestAsync(int dispatchId, CancellationToken cancellationToken) => throw new NotSupportedException();

From 104439c23984fd4c9737bd979607fc2183a21f72 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 20:07:31 -0300
Subject: [PATCH 032/183] fix(dashboard): serialise KPI counts in Stats
 response (SH-353)

GetKpiCountsAsync computes ScheduledTomorrow, PendingUplifts and
AvetaPending and DashboardStatsDTO carries them, but the Stats
endpoint's anonymous wire object never serialised them, so the tiles
had nothing to read. Add scheduledTomorrow, pendingUplifts and
avetaPending to the response.

Add a DashboardServiceTests case covering GetKpiCountsAsync end to end:
it asserts all three counts and pins the pendingUplifts semantics to
Status "Pending" only, excluding "ChangesRequested" (which is back with
the vendor, not awaiting an approval decision).
---
 .../DashboardServiceTests.cs                  | 47 +++++++++++++++++++
 .../Controllers/DashboardController.cs        |  3 ++
 2 files changed, 50 insertions(+)

diff --git a/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs b/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
index 54b8886..1b2afb4 100644
--- a/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
@@ -99,6 +99,53 @@ public class DashboardServiceTests
         stats.Completed.Should().Be(1);
     }
 
+    [Fact]
+    public async Task GetStatsAsync_ExposesKpiCounts_PendingUpliftsCountsPendingStatusOnly()
+    {
+        using var ctx = NewContext();
+        var today = DashboardBusinessTime.Today();
+        var tomorrow = today.AddDays(1);
+
+        // Scheduled-tomorrow tile: one account-1 order scheduled for tomorrow.
+        ctx.workOrders.Add(new WorkOrder
+        {
+            AccountId = 1,
+            LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Scheduled,
+            ScheduledDate = tomorrow.ToDateTime(TimeOnly.MinValue)
+        });
+
+        // Aveta-pending tile: Aveta-required order in the today/tomorrow window
+        // with no Aveta attachment. Its Dispatch anchors the uplift requests below.
+        var avetaOrder = new WorkOrder
+        {
+            AccountId = 1,
+            AvetaRequired = true,
+            LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Scheduled,
+            ScheduledDate = today.ToDateTime(TimeOnly.MinValue)
+        };
+        ctx.workOrders.Add(avetaOrder);
+        ctx.SaveChanges();
+
+        var dispatch = new Dispatch { WorkOrderId = avetaOrder.Id, IsDeleted = false };
+        ctx.Set<Dispatch>().Add(dispatch);
+        ctx.SaveChanges();
+
+        // Pending-uplifts tile: only Status == "Pending" is an outstanding uplift
+        // awaiting an approval decision. A "ChangesRequested" request has been sent
+        // back to the vendor and must NOT be counted (SH-353 review decision).
+        ctx.Set<DispatchUpliftRequest>().AddRange(
+            new DispatchUpliftRequest { DispatchId = dispatch.Id, Status = "Pending", IsDeleted = false },
+            new DispatchUpliftRequest { DispatchId = dispatch.Id, Status = "ChangesRequested", IsDeleted = false });
+        ctx.SaveChanges();
+
+        var stats = await NewService(ctx).GetStatsAsync(
+            AccountUser(1), new DashboardStatsQueryDTO(), CancellationToken.None);
+
+        stats.ScheduledTomorrow.Should().Be(1);
+        stats.AvetaPending.Should().Be(1);
+        stats.PendingUplifts.Should().Be(1);
+    }
+
     [Fact]
     public async Task GetStatsAsync_MissingScopeFailsClosed()
     {
diff --git a/Api.SeaHavenIndustries/Controllers/DashboardController.cs b/Api.SeaHavenIndustries/Controllers/DashboardController.cs
index 5551a5d..483f891 100644
--- a/Api.SeaHavenIndustries/Controllers/DashboardController.cs
+++ b/Api.SeaHavenIndustries/Controllers/DashboardController.cs
@@ -30,6 +30,9 @@ namespace Api.SeaHavenIndustries.Controllers
                 open = stats.Open,
                 notDispatched = stats.NotDispatched,
                 completed = stats.Completed,
+                scheduledTomorrow = stats.ScheduledTomorrow,
+                pendingUplifts = stats.PendingUplifts,
+                avetaPending = stats.AvetaPending,
                 breakdown = stats.Breakdown,
                 dueCount = stats.DueCount,
                 completedDueCount = stats.CompletedDueCount,

From d366f319e9343b7f153970b6650513ea425a6083 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 20:11:26 -0300
Subject: [PATCH 033/183] feat(uplifts): add approval decision actions (SH-210)

---
 .../UpliftControllerTests.cs                  | 43 +++++++++++++++
 .../UpliftServiceRefusedTests.cs              | 53 +++++++++++++++++++
 .../Controllers/UpliftController.cs           | 29 ++++++++++
 .../Implementation/UpliftDataService.cs       | 21 ++++++++
 .../Interfaces/IUpliftDataService.cs          |  1 +
 .../Implementation/UpliftService.cs           | 40 +++++++++++++-
 .../Interfaces/IUpliftService.cs              |  1 +
 .../WorkOrderBoardCancelServiceTests.cs       |  1 +
 8 files changed, 188 insertions(+), 1 deletion(-)

diff --git a/Api.SeaHavenIndustries.Tests/UpliftControllerTests.cs b/Api.SeaHavenIndustries.Tests/UpliftControllerTests.cs
index dc634aa..7d49f24 100644
--- a/Api.SeaHavenIndustries.Tests/UpliftControllerTests.cs
+++ b/Api.SeaHavenIndustries.Tests/UpliftControllerTests.cs
@@ -117,6 +117,49 @@ public class UpliftControllerTests
         nf.Value.Should().BeOfType<Response>();
     }
 
+    [Fact]
+    public async Task Revoke_WithReason_DelegatesToService()
+    {
+        var service = new Mock<IUpliftService>();
+        service.Setup(x => x.RevokeAsync(
+                It.IsAny<ClaimsPrincipal>(),
+                7,
+                "Policy change",
+                It.IsAny<CancellationToken>()))
+            .ReturnsAsync(new UpliftDecisionResultDTO { Id = 7, Status = "Revoked" });
+
+        var controller = NewController(service, "Admin");
+
+        var result = await controller.Revoke(
+            7,
+            new UpliftController.DecisionRequest { Note = "Policy change" });
+
+        result.Should().BeOfType<OkObjectResult>();
+        service.Verify(x => x.RevokeAsync(
+            It.IsAny<ClaimsPrincipal>(),
+            7,
+            "Policy change",
+            It.IsAny<CancellationToken>()), Times.Once);
+    }
+
+    [Fact]
+    public async Task Revoke_WithoutReason_ReturnsBadRequest()
+    {
+        var service = new Mock<IUpliftService>();
+        service.Setup(x => x.RevokeAsync(
+                It.IsAny<ClaimsPrincipal>(),
+                7,
+                string.Empty,
+                It.IsAny<CancellationToken>()))
+            .ThrowsAsync(new InvalidOperationException("reason required"));
+
+        var controller = NewController(service, "Admin");
+
+        var result = await controller.Revoke(7, null);
+
+        result.Should().BeOfType<BadRequestObjectResult>();
+    }
+
     [Fact]
     public async Task Approve_Forbidden_ReturnsSanitized403AndLogsInternally()
     {
diff --git a/Api.SeaHavenIndustries.Tests/UpliftServiceRefusedTests.cs b/Api.SeaHavenIndustries.Tests/UpliftServiceRefusedTests.cs
index 9fa989c..a420208 100644
--- a/Api.SeaHavenIndustries.Tests/UpliftServiceRefusedTests.cs
+++ b/Api.SeaHavenIndustries.Tests/UpliftServiceRefusedTests.cs
@@ -5,6 +5,7 @@ using Microsoft.Extensions.Options;
 using Moq;
 using SeaHaven.DataServices.Interfaces;
 using SeaHaven.Services.Configuration;
+using SeaHaven.Services.DTOs;
 using SeaHaven.Services.Implementation;
 using SeaHaven.Services.Interfaces;
 using Xunit;
@@ -13,6 +14,58 @@ namespace Api.SeaHavenIndustries.Tests;
 
 public sealed class UpliftServiceRefusedTests
 {
+    [Fact]
+    public async Task RevokeAsync_DelegatesApprovedAdminRevocationToWorkOrderFlow()
+    {
+        var request = new DispatchUpliftRequest
+        {
+            Id = 7,
+            DispatchId = 42,
+            Status = "Approved",
+            RequiredTier = 1,
+            RequestedNTE = 900m
+        };
+        var upliftData = new Mock<IUpliftDataService>();
+        upliftData.Setup(data => data.GetByIdAsync(7, It.IsAny<CancellationToken>()))
+            .ReturnsAsync(request);
+        upliftData.Setup(data => data.GetWorkOrderIdForUpliftAsync(7, It.IsAny<CancellationToken>()))
+            .ReturnsAsync(77);
+        var workOrderFlow = new Mock<IWorkOrderUpliftService>();
+        workOrderFlow.Setup(flow => flow.RevokeAsync(
+                77,
+                7,
+                It.Is<RevokeWorkOrderUpliftRequestDto>(r => r.Reason == "Policy change"),
+                It.IsAny<ClaimsPrincipal>(),
+                It.IsAny<CancellationToken>()))
+            .ReturnsAsync(new WorkOrderUpliftDto { Id = 7, Status = "revoked" });
+
+        var service = new UpliftService(
+            upliftData.Object,
+            Mock.Of<IDispatchDataService>(),
+            Mock.Of<IVendorDocumentStoragePort>(),
+            TimeProvider.System,
+            Microsoft.Extensions.Options.Options.Create(new ApprovalsOptions()),
+            workOrderFlow.Object);
+        var user = new ClaimsPrincipal(new ClaimsIdentity(
+            new[]
+            {
+                new Claim(ClaimTypes.NameIdentifier, "admin-1"),
+                new Claim(ClaimTypes.Role, "Admin")
+            },
+            "test"));
+
+        var result = await service.RevokeAsync(user, 7, " Policy change ", CancellationToken.None);
+
+        result.Id.Should().Be(7);
+        result.Status.Should().Be("Revoked");
+        workOrderFlow.Verify(flow => flow.RevokeAsync(
+            77,
+            7,
+            It.Is<RevokeWorkOrderUpliftRequestDto>(r => r.Reason == "Policy change"),
+            It.IsAny<ClaimsPrincipal>(),
+            It.IsAny<CancellationToken>()), Times.Once);
+    }
+
     [Fact]
     public async Task ApproveAsync_RefusedDispatch_RejectsWithoutChangingNteOrRequest()
     {
diff --git a/Api.SeaHavenIndustries/Controllers/UpliftController.cs b/Api.SeaHavenIndustries/Controllers/UpliftController.cs
index cc2d9ca..fcba99f 100644
--- a/Api.SeaHavenIndustries/Controllers/UpliftController.cs
+++ b/Api.SeaHavenIndustries/Controllers/UpliftController.cs
@@ -127,6 +127,35 @@ namespace Api.SeaHavenIndustries.Controllers
             }
         }
 
+        [HttpPost("{id:int}/revoke")]
+        public async Task<IActionResult> Revoke(
+            int id,
+            [FromBody] DecisionRequest? body,
+            CancellationToken cancellationToken = default)
+        {
+            try
+            {
+                var result = await _upliftService.RevokeAsync(
+                    User,
+                    id,
+                    body?.Note ?? string.Empty,
+                    cancellationToken);
+                return Ok(new DataResponse { Status = "Success", Data = result });
+            }
+            catch (KeyNotFoundException ex)
+            {
+                return NotFound(new Response { Status = "Error", Message = _logger.Sanitize(ex, "Uplift request not found") });
+            }
+            catch (UpliftForbiddenException ex)
+            {
+                return StatusCode(403, new Response { Status = "Error", Message = _logger.Sanitize(ex, "You are not authorized to revoke this uplift") });
+            }
+            catch (InvalidOperationException ex)
+            {
+                return BadRequest(new Response { Status = "Error", Message = _logger.Sanitize(ex, "This uplift request cannot be revoked") });
+            }
+        }
+
         [HttpGet("can-approve")]
         public IActionResult CanApprove([FromQuery] int tier)
         {
diff --git a/SeaHaven.DataServices/Implementation/UpliftDataService.cs b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
index 8d7ac66..6c52434 100644
--- a/SeaHaven.DataServices/Implementation/UpliftDataService.cs
+++ b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
@@ -221,6 +221,27 @@ namespace SeaHaven.DataServices.Implementation
                 .FirstOrDefaultAsync(u => u.Id == id, cancellationToken);
         }
 
+        public async Task<int?> GetWorkOrderIdForUpliftAsync(
+            int upliftRequestId,
+            CancellationToken cancellationToken)
+        {
+            var link = await _context.DispatchUpliftRequests
+                .Where(u => u.Id == upliftRequestId
+                    && (u.IsDeleted == null || u.IsDeleted == false)
+                    && u.Dispatch != null
+                    && (u.Dispatch.IsDeleted == null || u.Dispatch.IsDeleted == false))
+                .Select(u => new
+                {
+                    PrimaryWorkOrderId = u.Dispatch!.WorkOrderId,
+                    LinkedWorkOrderId = u.Dispatch.DispatchWorkOrders!
+                        .Select(dispatchWorkOrder => (int?)dispatchWorkOrder.WorkOrderId)
+                        .FirstOrDefault()
+                })
+                .FirstOrDefaultAsync(cancellationToken);
+
+            return link?.PrimaryWorkOrderId ?? link?.LinkedWorkOrderId;
+        }
+
         public async Task<DispatchUpliftRequest?> GetByIdAndDispatchAsync(int requestId, int dispatchId, CancellationToken cancellationToken)
         {
             return await _context.DispatchUpliftRequests
diff --git a/SeaHaven.DataServices/Interfaces/IUpliftDataService.cs b/SeaHaven.DataServices/Interfaces/IUpliftDataService.cs
index 15be0ab..9ca8a5d 100644
--- a/SeaHaven.DataServices/Interfaces/IUpliftDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IUpliftDataService.cs
@@ -11,6 +11,7 @@ namespace SeaHaven.DataServices.Interfaces
         Task<DispatchUpliftRequest?> GetByIdAndWorkOrderAsync(int requestId, int workOrderId, CancellationToken cancellationToken);
         Task<IReadOnlyList<PortalUpliftData>> GetForVendorDispatchAsync(int dispatchId, CancellationToken cancellationToken);
         Task<DispatchUpliftRequest?> GetByIdAsync(int id, CancellationToken cancellationToken);
+        Task<int?> GetWorkOrderIdForUpliftAsync(int upliftRequestId, CancellationToken cancellationToken);
         Task<DispatchUpliftRequest?> GetByIdAndDispatchAsync(int requestId, int dispatchId, CancellationToken cancellationToken);
         // SH-101: server-side join of an uplift request with its linked evidence document.
         // Returns null when the request, the linked evidence, or the dispatch linkage is absent.
diff --git a/SeaHaven.Services/Implementation/UpliftService.cs b/SeaHaven.Services/Implementation/UpliftService.cs
index 034f102..9e86960 100644
--- a/SeaHaven.Services/Implementation/UpliftService.cs
+++ b/SeaHaven.Services/Implementation/UpliftService.cs
@@ -15,19 +15,22 @@ namespace SeaHaven.Services.Implementation
         private readonly IVendorDocumentStoragePort _documentStorage;
         private readonly TimeProvider _timeProvider;
         private readonly ApprovalsOptions _approvalsOptions;
+        private readonly IWorkOrderUpliftService? _workOrderUpliftService;
 
         public UpliftService(
             IUpliftDataService upliftData,
             IDispatchDataService dispatchData,
             IVendorDocumentStoragePort documentStorage,
             TimeProvider timeProvider,
-            IOptions<ApprovalsOptions> approvalsOptions)
+            IOptions<ApprovalsOptions> approvalsOptions,
+            IWorkOrderUpliftService? workOrderUpliftService = null)
         {
             _upliftData = upliftData;
             _dispatchData = dispatchData;
             _documentStorage = documentStorage;
             _timeProvider = timeProvider;
             _approvalsOptions = approvalsOptions.Value;
+            _workOrderUpliftService = workOrderUpliftService;
         }
 
         public async Task<UpliftListResultDTO> ListAsync(ClaimsPrincipal user, string? status, int? tier, int page, int pageSize, CancellationToken cancellationToken)
@@ -180,6 +183,41 @@ namespace SeaHaven.Services.Implementation
         public Task<UpliftDecisionResultDTO> RejectAsync(ClaimsPrincipal user, int id, string? note, CancellationToken cancellationToken)
             => RejectInternalAsync(user, id, note, "reject", cancellationToken);
 
+        public async Task<UpliftDecisionResultDTO> RevokeAsync(
+            ClaimsPrincipal user,
+            int id,
+            string reason,
+            CancellationToken cancellationToken)
+        {
+            if (string.IsNullOrWhiteSpace(reason))
+                throw new InvalidOperationException("A reason is required when revoking an approved uplift");
+
+            var request = await _upliftData.GetByIdAsync(id, cancellationToken);
+            if (request == null)
+                throw new KeyNotFoundException("Uplift request not found");
+            if (!string.Equals(UpliftStatus.ToCanonical(request.Status), UpliftStatus.Approved, StringComparison.Ordinal))
+                throw new InvalidOperationException($"Cannot revoke a '{UpliftStatus.ToCanonical(request.Status)}' uplift request");
+            if (!user.IsInRole("Admin"))
+                throw new UpliftForbiddenException("Admin role is required to revoke an approved uplift");
+            if (_workOrderUpliftService == null)
+                throw new InvalidOperationException("The work-order uplift flow is unavailable");
+
+            var workOrderId = await _upliftData.GetWorkOrderIdForUpliftAsync(id, cancellationToken);
+            if (!workOrderId.HasValue)
+                throw new KeyNotFoundException("Work order not found");
+
+            var revoked = await _workOrderUpliftService.RevokeAsync(
+                workOrderId.Value,
+                id,
+                new RevokeWorkOrderUpliftRequestDto { Reason = reason.Trim() },
+                user,
+                cancellationToken);
+            if (revoked == null)
+                throw new KeyNotFoundException("Work order not found");
+
+            return new UpliftDecisionResultDTO { Id = revoked.Id, Status = UpliftStatus.Revoked };
+        }
+
         private async Task<UpliftDecisionResultDTO> RejectInternalAsync(ClaimsPrincipal user, int id, string? note, string actionSuffix, CancellationToken cancellationToken)
         {
             if (string.IsNullOrWhiteSpace(note))
diff --git a/SeaHaven.Services/Interfaces/IUpliftService.cs b/SeaHaven.Services/Interfaces/IUpliftService.cs
index 04dcadc..c84142f 100644
--- a/SeaHaven.Services/Interfaces/IUpliftService.cs
+++ b/SeaHaven.Services/Interfaces/IUpliftService.cs
@@ -11,6 +11,7 @@ namespace SeaHaven.Services.Interfaces
         Task<UpliftDenyResultDTO> DenyAsync(ClaimsPrincipal user, int id, string? note, CancellationToken cancellationToken);
         // SH-101: canonical reject (alias of deny; writes Rejected).
         Task<UpliftDecisionResultDTO> RejectAsync(ClaimsPrincipal user, int id, string? note, CancellationToken cancellationToken);
+        Task<UpliftDecisionResultDTO> RevokeAsync(ClaimsPrincipal user, int id, string reason, CancellationToken cancellationToken);
         // SH-101: internal request-changes route (note + tier authorization + audit).
         Task<UpliftDecisionResultDTO> RequestChangesAsync(ClaimsPrincipal user, int id, string note, CancellationToken cancellationToken);
         // SH-101: authorized internal download of a Passed UpliftEvidence file linked to an uplift request.
diff --git a/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs b/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs
index 12ddd97..bfc163f 100644
--- a/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs
@@ -436,6 +436,7 @@ public class WorkOrderBoardCancelServiceTests
         public Task<DispatchUpliftRequest?> GetByIdAndWorkOrderAsync(int requestId, int workOrderId, CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<IReadOnlyList<PortalUpliftData>> GetForVendorDispatchAsync(int dispatchId, CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<DispatchUpliftRequest?> GetByIdAsync(int id, CancellationToken cancellationToken) => throw new NotSupportedException();
+        public Task<int?> GetWorkOrderIdForUpliftAsync(int upliftRequestId, CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<DispatchUpliftRequest?> GetByIdAndDispatchAsync(int requestId, int dispatchId, CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<UpliftEvidenceDownloadData?> GetEvidenceForInternalDownloadAsync(int upliftRequestId, CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<bool> HasPendingAsync(int dispatchId, CancellationToken cancellationToken) => throw new NotSupportedException();

From 22308f21f6a4c590a97606595daad36d3c5bfab3 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 20:15:20 -0300
Subject: [PATCH 034/183] fix(dashboard): resolve region zones from full state
 names (SH-348)

Locations store State as either a two-letter postal code or a full state
name (the location list filter expands codes to both forms via
UsStateCodes.ExpandStorageValues, and dev fixtures carry State = "indiana").
DashboardRegions.Resolve only matched the two-letter key, so every location
stored as a full name fell into Unmapped/Other and the East/Central/West/
California bars undercounted.

Normalise the stored value through a new UsStateCodes.ToCode, which accepts a
code or a full name and returns the canonical postal code, before the zone
lookup. Extend the region test with full-name storage forms and add an
invariant asserting every US state and its full-name form resolves to a
canonical bucket.
---
 .../DashboardServiceTests.cs                  | 31 +++++++++++++++++--
 SeaHaven.Services/Helpers/DashboardRegions.cs |  5 +--
 SeaHaven.Services/Helpers/UsStateCodes.cs     | 21 +++++++++++++
 3 files changed, 53 insertions(+), 4 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs b/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
index c7c6410..4b6b2c5 100644
--- a/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
@@ -309,11 +309,17 @@ public class DashboardServiceTests
         ctx.Locations.AddRange(
             new Locations { Id = 1, State = "NY" },
             new Locations { Id = 2, State = "ca" },
-            new Locations { Id = 3, State = "XX" });
+            new Locations { Id = 3, State = "XX" },
+            new Locations { Id = 4, State = "indiana" },
+            new Locations { Id = 5, State = "NEW YORK" },
+            new Locations { Id = 6, State = "California" });
         ctx.workOrders.AddRange(
             new WorkOrder { AccountId = 1, LocationId = 1 },
             new WorkOrder { AccountId = 1, LocationId = 2 },
             new WorkOrder { AccountId = 1, LocationId = 3 },
+            new WorkOrder { AccountId = 1, LocationId = 4 },
+            new WorkOrder { AccountId = 1, LocationId = 5 },
+            new WorkOrder { AccountId = 1, LocationId = 6 },
             new WorkOrder { AccountId = 1, LocationId = null });
         await ctx.SaveChangesAsync();
 
@@ -322,6 +328,27 @@ public class DashboardServiceTests
 
         result.Items.Select(row => row.Region).Should().Equal(
             "East", "Central", "West", "California", "Unmapped/Other");
-        result.Items.Select(row => row.WorkOrderCount).Should().Equal(1, 0, 0, 1, 2);
+        // NY + "NEW YORK" -> East; "indiana" -> Central; "ca" + "California" -> California;
+        // "XX" + unassigned location -> Unmapped/Other. Full-name storage forms must not
+        // fall through to Unmapped/Other (SH-348 review).
+        result.Items.Select(row => row.WorkOrderCount).Should().Equal(2, 1, 0, 2, 2);
+    }
+
+    [Fact]
+    public void Resolve_MapsEveryUsStateAndItsFullNameToACanonicalBucket()
+    {
+        foreach (var code in UsStateCodes.All)
+        {
+            var byCode = DashboardRegions.Resolve(code);
+            byCode.Should().NotBe(
+                "Unmapped/Other",
+                $"state code {code} must belong to a canonical region");
+
+            var fullName = UsStateCodes.ExpandStorageValues(new[] { code })
+                .First(value => value != code);
+            DashboardRegions.Resolve(fullName).Should().Be(
+                byCode,
+                $"the full-name storage form of {code} must resolve to the same region as the code");
+        }
     }
 }
diff --git a/SeaHaven.Services/Helpers/DashboardRegions.cs b/SeaHaven.Services/Helpers/DashboardRegions.cs
index f3b5fae..d41ae83 100644
--- a/SeaHaven.Services/Helpers/DashboardRegions.cs
+++ b/SeaHaven.Services/Helpers/DashboardRegions.cs
@@ -9,10 +9,11 @@ public static class DashboardRegions
 
     public static string Resolve(string? state)
     {
-        if (string.IsNullOrWhiteSpace(state))
+        var code = UsStateCodes.ToCode(state);
+        if (code is null)
             return "Unmapped/Other";
 
-        return StateToRegion.TryGetValue(state.Trim().ToUpperInvariant(), out var region)
+        return StateToRegion.TryGetValue(code, out var region)
             ? region
             : "Unmapped/Other";
     }
diff --git a/SeaHaven.Services/Helpers/UsStateCodes.cs b/SeaHaven.Services/Helpers/UsStateCodes.cs
index 9d64a1a..54c32ea 100644
--- a/SeaHaven.Services/Helpers/UsStateCodes.cs
+++ b/SeaHaven.Services/Helpers/UsStateCodes.cs
@@ -56,8 +56,29 @@ namespace SeaHaven.Services.Helpers
             ["WY"] = "WYOMING"
         };
 
+        private static readonly IReadOnlyDictionary<string, string> CodesByName =
+            Names.ToDictionary(pair => pair.Value, pair => pair.Key, StringComparer.Ordinal);
+
         public static IReadOnlySet<string> All { get; } = new HashSet<string>(Names.Keys, StringComparer.Ordinal);
 
+        /// <summary>
+        /// Normalises a stored state value to its two-letter postal code. Accepts either a
+        /// postal code ("IN") or a full state name ("Indiana"), case-insensitively, matching
+        /// the storage forms produced by <see cref="ExpandStorageValues"/>. Returns null when
+        /// the value is blank or is not a recognised US state.
+        /// </summary>
+        public static string? ToCode(string? value)
+        {
+            if (string.IsNullOrWhiteSpace(value))
+                return null;
+
+            var normalized = value.Trim().ToUpperInvariant();
+            if (All.Contains(normalized))
+                return normalized;
+
+            return CodesByName.TryGetValue(normalized, out var code) ? code : null;
+        }
+
         public static IReadOnlyCollection<string> ExpandStorageValues(IEnumerable<string> codes)
         {
             return codes

From 7bdcc61651c8977ac3e4c26ee93aa2ed0615367f Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 20:15:30 -0300
Subject: [PATCH 035/183] fix(work-orders): bind GetWorkorderById id from the
 query string (SH-374)

---
 .../WorkOrderGetByIdBindingTests.cs           | 106 ++++++++++++++++++
 .../WorkOrderRouteContractTests.cs            |   6 +-
 .../Controllers/WorkOrderController.cs        |  10 +-
 3 files changed, 117 insertions(+), 5 deletions(-)
 create mode 100644 Api.SeaHavenIndustries.Tests/WorkOrderGetByIdBindingTests.cs

diff --git a/Api.SeaHavenIndustries.Tests/WorkOrderGetByIdBindingTests.cs b/Api.SeaHavenIndustries.Tests/WorkOrderGetByIdBindingTests.cs
new file mode 100644
index 0000000..2d88138
--- /dev/null
+++ b/Api.SeaHavenIndustries.Tests/WorkOrderGetByIdBindingTests.cs
@@ -0,0 +1,106 @@
+using Api.SeaHavenIndustries.Controllers;
+using Data.SeaHavenIndustries;
+using FluentAssertions;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.Controllers;
+using Microsoft.AspNetCore.Mvc.Infrastructure;
+using Microsoft.AspNetCore.Mvc.ModelBinding;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
+using Moq;
+using SeaHaven.DataServices.Models;
+using SeaHaven.Services.Interfaces;
+using Xunit;
+
+namespace Api.SeaHavenIndustries.Tests;
+
+/// <summary>
+/// SH-374: GET api/WorkOrder/GetWorkorderById?id= must read the id from the query string, while
+/// GET api/WorkOrder/{id} keeps reading it from the route. Both must return the same work order,
+/// and an unknown id keeps the existing "ID not found!" response.
+/// </summary>
+public class WorkOrderGetByIdBindingTests
+{
+    private const int ExistingId = 374;
+    private const int UnknownId = 999_999;
+
+    private static ControllerActionDescriptor ActionForTemplate(string relativeTemplate)
+    {
+        var services = new ServiceCollection();
+        services.AddLogging();
+        services.AddMvcCore().AddApplicationPart(typeof(WorkOrderController).Assembly);
+
+        using var provider = services.BuildServiceProvider();
+        return provider.GetRequiredService<IActionDescriptorCollectionProvider>().ActionDescriptors.Items
+            .OfType<ControllerActionDescriptor>()
+            .Where(cad => cad.ControllerTypeInfo == typeof(WorkOrderController))
+            .Where(cad => cad.ActionConstraints!
+                .OfType<Microsoft.AspNetCore.Mvc.ActionConstraints.HttpMethodActionConstraint>()
+                .Any(c => c.HttpMethods.Contains("GET")))
+            .Single(cad => string.Equals(
+                cad.AttributeRouteInfo?.Template?.Trim('/'),
+                $"api/WorkOrder/{relativeTemplate}",
+                StringComparison.Ordinal));
+    }
+
+    [Theory]
+    [InlineData("GetWorkorderById", "Query")]
+    [InlineData("{id:int}", "Path")]
+    public void Id_binds_from_the_source_its_route_provides(string relativeTemplate, string expectedSource)
+    {
+        var action = ActionForTemplate(relativeTemplate);
+
+        var id = action.Parameters.Single(p => p.Name == "id");
+        id.BindingInfo.Should().NotBeNull();
+        id.BindingInfo!.BindingSource!.Id.Should().Be(expectedSource);
+    }
+
+    private static (WorkOrderController Controller, WorkOrderDetailReadModel Existing) NewController()
+    {
+        var existing = new WorkOrderDetailReadModel { Id = ExistingId, Title = "Leaking roof" };
+        var service = new Mock<IWorkOrderService>();
+        service.Setup(s => s.GetWorkOrderDetailAsync(ExistingId, It.IsAny<int?>())).ReturnsAsync(existing);
+        service.Setup(s => s.GetWorkOrderDetailAsync(UnknownId, It.IsAny<int?>()))
+            .ReturnsAsync((WorkOrderDetailReadModel?)null);
+
+        var controller = new WorkOrderController(
+            service.Object,
+            Mock.Of<IWorkOrderAccountResolver>(),
+            Mock.Of<ILogger<WorkOrderController>>())
+        {
+            ControllerContext = new ControllerContext { HttpContext = new DefaultHttpContext() }
+        };
+        return (controller, existing);
+    }
+
+    [Fact]
+    public async Task Existing_id_returns_the_same_work_order_through_both_routes()
+    {
+        var (controller, existing) = NewController();
+
+        var byQuery = await controller.GetWorkorderById(ExistingId);
+        var byRoute = await controller.GetWorkorderByRouteId(ExistingId);
+
+        byQuery.Should().BeOfType<OkObjectResult>().Which.Value.Should().BeSameAs(existing);
+        byRoute.Should().BeOfType<OkObjectResult>().Which.Value.Should().BeSameAs(existing);
+    }
+
+    [Fact]
+    public async Task Unknown_id_keeps_the_not_found_response_through_both_routes()
+    {
+        var (controller, _) = NewController();
+
+        foreach (var result in new[]
+                 {
+                     await controller.GetWorkorderById(UnknownId),
+                     await controller.GetWorkorderByRouteId(UnknownId),
+                 })
+        {
+            var body = result.Should().BeOfType<BadRequestObjectResult>().Which.Value
+                .Should().BeOfType<Response>().Subject;
+            body.Status.Should().Be("Error");
+            body.Message.Should().Be("ID not found!");
+        }
+    }
+}
diff --git a/Api.SeaHavenIndustries.Tests/WorkOrderRouteContractTests.cs b/Api.SeaHavenIndustries.Tests/WorkOrderRouteContractTests.cs
index 6411337..1bb17e5 100644
--- a/Api.SeaHavenIndustries.Tests/WorkOrderRouteContractTests.cs
+++ b/Api.SeaHavenIndustries.Tests/WorkOrderRouteContractTests.cs
@@ -17,8 +17,8 @@ namespace Api.SeaHavenIndustries.Tests;
 /// combination is registered more than once by different actions.
 ///
 /// Routes are read from the ASP.NET Core action descriptor provider so the EXACT templates the
-/// framework will dispatch are compared, including multi-attribute actions (e.g. Editworkorder,
-/// GetWorkorderById) and the two shared controller-level base routes.
+/// framework will dispatch are compared, including multi-attribute actions (e.g. Editworkorder)
+/// and the two shared controller-level base routes.
 /// </summary>
 public class WorkOrderRouteContractTests
 {
@@ -39,7 +39,7 @@ public class WorkOrderRouteContractTests
     /// WorkOrderController exposed, plus the author-only board-comment edit endpoint (SH-122).
     /// Every action is reachable under both api/WorkOrder and api/workorders; that base-route
     /// duplication is collapsed here, so this is the distinct action-relative contract. 52 routes
-    /// come from 50 actions (Editworkorder and GetWorkorderById each bind two routes).
+    /// come from 51 actions (Editworkorder binds two routes).
     /// </summary>
     private static readonly HashSet<string> ExpectedWorkOrderEndpoints = new(StringComparer.Ordinal)
     {
diff --git a/Api.SeaHavenIndustries/Controllers/WorkOrderController.cs b/Api.SeaHavenIndustries/Controllers/WorkOrderController.cs
index c7928de..9c73034 100644
--- a/Api.SeaHavenIndustries/Controllers/WorkOrderController.cs
+++ b/Api.SeaHavenIndustries/Controllers/WorkOrderController.cs
@@ -208,9 +208,15 @@ namespace Api.SeaHavenIndustries.Controllers
             }
         }
 
-        [HttpGet("{id:int}")]
+        // SH-374: two actions, one per route, so each binds id from the source its route provides.
+        // A single action carrying both routes inferred id as [FromRoute] and the query route got 0.
         [HttpGet("GetWorkorderById")]
-        public async Task<IActionResult> GetWorkorderById(int id)
+        public Task<IActionResult> GetWorkorderById([FromQuery] int id) => GetWorkorderDetail(id);
+
+        [HttpGet("{id:int}")]
+        public Task<IActionResult> GetWorkorderByRouteId([FromRoute] int id) => GetWorkorderDetail(id);
+
+        private async Task<IActionResult> GetWorkorderDetail(int id)
         {
             try
             {

From 93ecbbd410a67c280c5c47a222f5360ef3b1e94f Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alexbrandizzi@gmail.com>
Date: Wed, 16 Sep 2026 20:25:45 -0300
Subject: [PATCH 036/183] test(dashboard): guard Stats wire object for KPI
 counts (SH-353)

The added service test asserts DashboardStatsDTO, which already carried
ScheduledTomorrow, PendingUplifts and AvetaPending, so it does not guard
the regression that was actually shipped: the DashboardController Stats
anonymous response dropping those keys and leaving the tiles empty.

Add DashboardControllerTests.GetStats_SerialisesKpiCountsOnWireObject,
which drives the controller and asserts the three keys are present on the
serialised wire object, so re-dropping any of them fails a test.

Also reword the pending-uplifts comment in DashboardServiceTests: the
Pending-only-vs-ChangesRequested exclusion is the behaviour the code
ships today, an open product call, not a settled review decision.
---
 .../DashboardControllerTests.cs               | 54 +++++++++++++++++++
 .../DashboardServiceTests.cs                  |  6 ++-
 2 files changed, 58 insertions(+), 2 deletions(-)
 create mode 100644 Api.SeaHavenIndustries.Tests/DashboardControllerTests.cs

diff --git a/Api.SeaHavenIndustries.Tests/DashboardControllerTests.cs b/Api.SeaHavenIndustries.Tests/DashboardControllerTests.cs
new file mode 100644
index 0000000..4ef3b58
--- /dev/null
+++ b/Api.SeaHavenIndustries.Tests/DashboardControllerTests.cs
@@ -0,0 +1,54 @@
+using System.Security.Claims;
+using Api.SeaHavenIndustries.Controllers;
+using FluentAssertions;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Moq;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Interfaces;
+using Xunit;
+
+namespace Api.SeaHavenIndustries.Tests;
+
+public class DashboardControllerTests
+{
+    private static object Prop(object source, string name) =>
+        source.GetType().GetProperty(name)!.GetValue(source)!;
+
+    private static DashboardController NewController(Mock<IDashboardService> service) =>
+        new(service.Object)
+        {
+            ControllerContext = new ControllerContext
+            {
+                HttpContext = new DefaultHttpContext()
+            }
+        };
+
+    // Guards the Stats wire object, not the service DTO. GetKpiCountsAsync and
+    // DashboardStatsDTO already carried these three counts; the regression this
+    // pins is the controller's anonymous response silently dropping them, which
+    // is what left the tiles with nothing to read.
+    [Fact]
+    public async Task GetStats_SerialisesKpiCountsOnWireObject()
+    {
+        var service = new Mock<IDashboardService>();
+        service.Setup(s => s.GetStatsAsync(
+                It.IsAny<ClaimsPrincipal>(),
+                It.IsAny<DashboardStatsQueryDTO>(),
+                It.IsAny<CancellationToken>()))
+            .ReturnsAsync(new DashboardStatsDTO
+            {
+                ScheduledTomorrow = 3,
+                PendingUplifts = 5,
+                AvetaPending = 7
+            });
+
+        var result = await NewController(service).GetStats(
+            new DashboardStatsQueryDTO(), CancellationToken.None);
+
+        var body = result.Should().BeOfType<OkObjectResult>().Subject.Value!;
+        ((int)Prop(body, "scheduledTomorrow")).Should().Be(3);
+        ((int)Prop(body, "pendingUplifts")).Should().Be(5);
+        ((int)Prop(body, "avetaPending")).Should().Be(7);
+    }
+}
diff --git a/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs b/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
index 1b2afb4..1d4e8ec 100644
--- a/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
@@ -131,8 +131,10 @@ public class DashboardServiceTests
         ctx.SaveChanges();
 
         // Pending-uplifts tile: only Status == "Pending" is an outstanding uplift
-        // awaiting an approval decision. A "ChangesRequested" request has been sent
-        // back to the vendor and must NOT be counted (SH-353 review decision).
+        // awaiting an approval decision. This test pins the behaviour the code
+        // ships today: a "ChangesRequested" request has been sent back to the
+        // vendor, so it is NOT counted. Whether pendingUplifts should also include
+        // ChangesRequested is an open product call, not a settled review decision.
         ctx.Set<DispatchUpliftRequest>().AddRange(
             new DispatchUpliftRequest { DispatchId = dispatch.Id, Status = "Pending", IsDeleted = false },
             new DispatchUpliftRequest { DispatchId = dispatch.Id, Status = "ChangesRequested", IsDeleted = false });

From af441894d7777409c5be701ed0cb49bc8155aa70 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 20:27:26 -0300
Subject: [PATCH 037/183] fix(permissions): clean up overrides on user delete
 and converge concurrent override writes (SH-328)

DeleteUserWithCascadeAsync never removed UserPermissionOverrides rows, and
the FK on UserId is Restrict. Once an override was saved for a member, the
admin hard-delete (DeleteUserAsync -> DeleteUserWithCascadeAsync) failed the
foreign key inside the transaction and the controller surfaced it as a 400,
so the user was never deleted. Add an explicit ExecuteDelete on
UserPermissionOverrides before the user is removed, matching how UserRoles is
already cleared in the same method (no schema change).

SetOverrideAsync was check-then-insert on the composite key with no
DbUpdateException handling, so two concurrent PUTs for the same
(UserId, PermissionKey) let the loser violate PK_UserPermissionOverrides and
return 500. Catch the conflict, detach the pending insert, and converge by
updating the persisted row to the caller's requested state.
---
 .../TeamPermissionOverrideDataService.cs      | 43 +++++++++++++------
 .../Implementation/UserDataService.cs         |  4 ++
 2 files changed, 34 insertions(+), 13 deletions(-)

diff --git a/SeaHaven.DataServices/Implementation/TeamPermissionOverrideDataService.cs b/SeaHaven.DataServices/Implementation/TeamPermissionOverrideDataService.cs
index 954e8a4..b968a8b 100644
--- a/SeaHaven.DataServices/Implementation/TeamPermissionOverrideDataService.cs
+++ b/SeaHaven.DataServices/Implementation/TeamPermissionOverrideDataService.cs
@@ -63,22 +63,39 @@ public sealed class TeamPermissionOverrideDataService : ITeamPermissionOverrideD
                     && permission.PermissionKey == permissionKey,
                 cancellationToken);
 
-        if (existing is null)
-        {
-            await _context.UserPermissionOverrides.AddAsync(
-                new UserPermissionOverride
-                {
-                    UserId = userId,
-                    PermissionKey = permissionKey,
-                    State = state
-                },
-                cancellationToken);
-        }
-        else
+        if (existing is not null)
         {
             existing.State = state;
+            await _context.SaveChangesAsync(cancellationToken);
+            return;
         }
 
-        await _context.SaveChangesAsync(cancellationToken);
+        var addition = new UserPermissionOverride
+        {
+            UserId = userId,
+            PermissionKey = permissionKey,
+            State = state
+        };
+        await _context.UserPermissionOverrides.AddAsync(addition, cancellationToken);
+
+        try
+        {
+            await _context.SaveChangesAsync(cancellationToken);
+        }
+        catch (DbUpdateException)
+        {
+            // A concurrent PUT inserted the same (UserId, PermissionKey) between our
+            // existence check and this save, violating PK_UserPermissionOverrides.
+            // Converge on the caller's intent by updating the persisted row.
+            _context.Entry(addition).State = EntityState.Detached;
+
+            var winner = await _context.UserPermissionOverrides
+                .SingleAsync(
+                    permission => permission.UserId == userId
+                        && permission.PermissionKey == permissionKey,
+                    cancellationToken);
+            winner.State = state;
+            await _context.SaveChangesAsync(cancellationToken);
+        }
     }
 }
diff --git a/SeaHaven.DataServices/Implementation/UserDataService.cs b/SeaHaven.DataServices/Implementation/UserDataService.cs
index 055f870..f5dbb70 100644
--- a/SeaHaven.DataServices/Implementation/UserDataService.cs
+++ b/SeaHaven.DataServices/Implementation/UserDataService.cs
@@ -135,6 +135,10 @@ namespace SeaHaven.DataServices.Implementation
                 .Where(role => role.UserId == id)
                 .ExecuteDeleteAsync(cancellationToken);
 
+            await _context.UserPermissionOverrides
+                .Where(permissionOverride => permissionOverride.UserId == id)
+                .ExecuteDeleteAsync(cancellationToken);
+
             await _context.Users
                 .Where(existingUser => existingUser.Id == id)
                 .ExecuteDeleteAsync(cancellationToken);

From 660ebac628ca1ab7b76ba57fd534b7504764225e Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 20:45:15 -0300
Subject: [PATCH 038/183] feat(locations): support site registry queries
 (SH-330)

---
 .../LocationControllerTests.cs                |  96 +++++++++++++-
 .../LocationDataServiceTests.cs               | 125 ++++++++++++++++++
 .../LocationServiceTests.cs                   | 105 ++++++++++++++-
 .../LocationSiteContactsTests.cs              |   2 +-
 .../Controllers/LocationController.cs         |   6 +-
 .../Implementation/LocationDataService.cs     |  42 +++++-
 .../Interfaces/ILocationDataService.cs        |   6 +-
 SeaHaven.Services/DTOs/LocationDTOs.cs        |   1 +
 .../Implementation/LocationService.cs         |  45 ++++++-
 .../Interfaces/ILocationService.cs            |   2 +-
 .../WorkOrderAccountScopeTests.cs             |   4 +-
 11 files changed, 410 insertions(+), 24 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/LocationControllerTests.cs b/Api.SeaHavenIndustries.Tests/LocationControllerTests.cs
index 47e53dd..888f092 100644
--- a/Api.SeaHavenIndustries.Tests/LocationControllerTests.cs
+++ b/Api.SeaHavenIndustries.Tests/LocationControllerTests.cs
@@ -26,7 +26,7 @@ public class LocationControllerTests
     public async Task GetLocationList_ReturnsPaginationEnvelopeWithServiceData()
     {
         var service = new Mock<ILocationService>();
-        service.Setup(s => s.GetLocationListPagedAsync(1, 10, "a", null, It.IsAny<CancellationToken>()))
+        service.Setup(s => s.GetLocationListPagedAsync(1, 10, "a", null, It.IsAny<CancellationToken>(), It.IsAny<string?>(), It.IsAny<string?>()))
                .ReturnsAsync(new PagedResult<LocationDTO>
                {
                    Items = new List<LocationDTO> { new() { Id = 1, Name = "Site" } },
@@ -49,7 +49,7 @@ public class LocationControllerTests
     public async Task GetLocationList_PassesStatesFilterToService()
     {
         var service = new Mock<ILocationService>();
-        service.Setup(s => s.GetLocationListPagedAsync(1, 10, null, "tx, mo", It.IsAny<CancellationToken>()))
+        service.Setup(s => s.GetLocationListPagedAsync(1, 10, null, "tx, mo", It.IsAny<CancellationToken>(), It.IsAny<string?>(), It.IsAny<string?>()))
                .ReturnsAsync(new PagedResult<LocationDTO>
                {
                    Items = new List<LocationDTO>(),
@@ -58,7 +58,7 @@ public class LocationControllerTests
                    PageSize = 10
                });
 
-        var result = await NewController(service).GetLocationList(null, 1, 10, "tx, mo", CancellationToken.None);
+        var result = await NewController(service).GetLocationList(null, 1, 10, "tx, mo", cancellationToken: CancellationToken.None);
 
         result.Should().BeOfType<OkObjectResult>();
         service.VerifyAll();
@@ -68,13 +68,13 @@ public class LocationControllerTests
     public async Task GetLocationList_WhenStatesInvalid_ReturnsExistingValidationErrorShape()
     {
         var service = new Mock<ILocationService>();
-        service.Setup(s => s.GetLocationListPagedAsync(It.IsAny<int>(), It.IsAny<int>(), It.IsAny<string?>(), It.IsAny<string?>(), It.IsAny<CancellationToken>()))
+        service.Setup(s => s.GetLocationListPagedAsync(It.IsAny<int>(), It.IsAny<int>(), It.IsAny<string?>(), It.IsAny<string?>(), It.IsAny<CancellationToken>(), It.IsAny<string?>(), It.IsAny<string?>()))
                .ThrowsAsync(new ValidationException(new[]
                {
                    new ValidationFailure("states", "states must be valid US postal abbreviations: ZZ.")
                }));
 
-        var result = await NewController(service).GetLocationList(null, 1, 10, "ZZ", CancellationToken.None);
+        var result = await NewController(service).GetLocationList(null, 1, 10, "ZZ", cancellationToken: CancellationToken.None);
 
         var bad = result.Should().BeOfType<BadRequestObjectResult>().Subject;
         var response = bad.Value.Should().BeOfType<Response>().Subject;
@@ -200,4 +200,90 @@ public class LocationControllerTests
         var notFound = result.Should().BeOfType<NotFoundObjectResult>().Subject;
         notFound.Value.Should().BeOfType<Response>().Subject.Message.Should().Be("Location not found");
     }
+
+    [Fact]
+    public async Task GetLocationList_ForwardsSortParamsToService()
+    {
+        var service = new Mock<ILocationService>();
+        service.Setup(s => s.GetLocationListPagedAsync(1, 10, "", null, It.IsAny<CancellationToken>(), "city", "desc"))
+               .ReturnsAsync(new PagedResult<LocationDTO> { Items = new List<LocationDTO>(), TotalCount = 0, Page = 1, PageSize = 10 });
+
+        await NewController(service).GetLocationList(sortBy: "city", sortDirection: "desc", cancellationToken: CancellationToken.None);
+
+        service.Verify(s => s.GetLocationListPagedAsync(1, 10, "", null, It.IsAny<CancellationToken>(), "city", "desc"), Times.Once);
+    }
+
+    [Fact]
+    public async Task GetLocationList_WhenSortInvalid_ReturnsExistingValidationErrorShape()
+    {
+        var service = new Mock<ILocationService>();
+        service.Setup(s => s.GetLocationListPagedAsync(It.IsAny<int>(), It.IsAny<int>(), It.IsAny<string?>(), It.IsAny<string?>(), It.IsAny<CancellationToken>(), It.IsAny<string?>(), It.IsAny<string?>()))
+               .ThrowsAsync(new ValidationException(new[]
+               {
+                   new ValidationFailure("sortBy", "sortBy must be one of: code, client, address, city, state, poc.")
+               }));
+
+        var result = await NewController(service).GetLocationList(sortBy: "nope", cancellationToken: CancellationToken.None);
+
+        var bad = result.Should().BeOfType<BadRequestObjectResult>().Subject;
+        var response = bad.Value.Should().BeOfType<Response>().Subject;
+        response.Status.Should().Be("Validation Error");
+        response.Message.Should().Contain("sortBy");
+    }
+
+    [Fact]
+    public async Task GetLocationList_ProjectsClientAccountNameAndSiteFields()
+    {
+        var service = new Mock<ILocationService>();
+        service.Setup(s => s.GetLocationListPagedAsync(1, 10, "", null, It.IsAny<CancellationToken>(), null, null))
+               .ReturnsAsync(new PagedResult<LocationDTO>
+               {
+                   Items = new List<LocationDTO>
+                   {
+                       new()
+                       {
+                           Id = 1,
+                           Name = "STL8",
+                           Address1 = "9 River Rd",
+                           City = "St. Louis",
+                           State = "MO",
+                           Zip = "63101",
+                           PhoneNumber = "555-0100",
+                           Email = "poc@example.com",
+                           AccountId = 3,
+                           AccountName = "Acme Co",
+                           Contacts = new List<SiteContactResponseDTO>
+                           {
+                               new() { Id = 10, Name = "Cara Lane", Phone = "555-0100" },
+                               new() { Id = 11, Name = "Alan Ford", Phone = "555-0101" }
+                           }
+                       }
+                   },
+                   TotalCount = 1,
+                   Page = 1,
+                   PageSize = 10
+               });
+
+        var result = await NewController(service).GetLocationList(cancellationToken: CancellationToken.None);
+
+        var ok = result.Should().BeOfType<OkObjectResult>().Subject;
+        using var json = System.Text.Json.JsonSerializer.SerializeToDocument(ok.Value);
+        var row = json.RootElement.GetProperty("Data").EnumerateArray().Single();
+
+        row.GetProperty("Name").GetString().Should().Be("STL8", "the site code is the legacy Name field");
+        row.GetProperty("Address").GetString().Should().Be("9 River Rd");
+        row.GetProperty("City").GetString().Should().Be("St. Louis");
+        row.GetProperty("State").GetString().Should().Be("MO");
+        row.GetProperty("ZipCode").GetString().Should().Be("63101");
+        row.GetProperty("Phone").GetString().Should().Be("555-0100");
+        row.GetProperty("ContactEmail").GetString().Should().Be("poc@example.com");
+        row.GetProperty("Contact").GetString().Should().Be("Cara Lane", "the first ordered contact is the legacy Contact field");
+        row.GetProperty("AccountId").GetInt32().Should().Be(3);
+        row.GetProperty("ClientName").GetString().Should().Be("Acme Co");
+        row.GetProperty("AccountName").GetString().Should().Be("Acme Co");
+        var contacts = row.GetProperty("Contacts");
+        contacts.GetArrayLength().Should().Be(2);
+        contacts[0].GetProperty("Name").GetString().Should().Be("Cara Lane");
+        contacts[1].GetProperty("Name").GetString().Should().Be("Alan Ford");
+    }
 }
diff --git a/Api.SeaHavenIndustries.Tests/LocationDataServiceTests.cs b/Api.SeaHavenIndustries.Tests/LocationDataServiceTests.cs
index 0dafeaf..595f78e 100644
--- a/Api.SeaHavenIndustries.Tests/LocationDataServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/LocationDataServiceTests.cs
@@ -86,4 +86,129 @@ public class LocationDataServiceTests
         totalCount.Should().Be(2);
         items.Select(l => l.State).Should().BeEquivalentTo("indiana", "MO");
     }
+
+    private static async Task SeedRegistryAsync(ApplicationDbContext ctx)
+    {
+        ctx.Accounts.AddRange(
+            new Accounts { Id = 1, Name = "Acme Co", IsDeleted = false },
+            new Accounts { Id = 2, Name = "Borealis LLC", IsDeleted = false });
+        ctx.Locations.AddRange(
+            new Locations { Id = 10, Name = "STL8", Address1 = "9 River Rd", City = "St. Louis", State = "MO", AccountId = 1 },
+            new Locations { Id = 11, Name = "DFW8", Address1 = "2 Prairie Ave", City = "Dallas", State = "TX", AccountId = 2 },
+            new Locations { Id = 12, Name = "IND9", Address1 = "5 Circle Blvd", City = "Indianapolis", State = "IN", AccountId = 1 },
+            new Locations { Id = 13, Name = "MIA2", Address1 = "1 Bay Dr", City = "Miami", State = "FL", AccountId = 2 });
+        ctx.Contacts.AddRange(
+            new Contacts { Id = 100, LocationId = 10, SiteContactOrder = 0, FirstName = "Cara Lane", PhoneNumber = "555-0001" },
+            new Contacts { Id = 101, LocationId = 10, SiteContactOrder = 1, FirstName = "Alan Ford", PhoneNumber = "555-0002" },
+            new Contacts { Id = 102, LocationId = 11, SiteContactOrder = 1, FirstName = "Zoe Park", PhoneNumber = "555-0003" },
+            new Contacts { Id = 103, LocationId = 11, SiteContactOrder = 0, FirstName = "Removed Poc", PhoneNumber = "555-0004", IsDeleted = true },
+            new Contacts { Id = 104, LocationId = 12, SiteContactOrder = 0, FirstName = "Bob Quinn", PhoneNumber = "555-0005" });
+        await ctx.SaveChangesAsync();
+    }
+
+    [Theory]
+    [InlineData("STL", new[] { 10 }, "site code")]
+    [InlineData("Borealis", new[] { 11, 13 }, "client name")]
+    [InlineData("Prairie", new[] { 11 }, "street address")]
+    [InlineData("Miami", new[] { 13 }, "city")]
+    public async Task GetListPagedAsync_SearchMatchesCodeClientAddressAndCity(string term, int[] expectedIds, string becauseField)
+    {
+        await using var ctx = NewContext();
+        await SeedRegistryAsync(ctx);
+
+        var (items, totalCount) = await new LocationDataService(ctx)
+            .GetListPagedAsync(1, 10, term, null, CancellationToken.None);
+
+        totalCount.Should().Be(expectedIds.Length, $"search must match the {becauseField}");
+        items.Select(l => l.Id).Should().BeEquivalentTo(expectedIds);
+    }
+
+    [Theory]
+    [InlineData("code", 11, 12, 13, 10)]
+    [InlineData("client", 10, 12, 11, 13)]
+    [InlineData("address", 13, 11, 12, 10)]
+    [InlineData("city", 11, 12, 13, 10)]
+    [InlineData("state", 13, 12, 10, 11)]
+    [InlineData("poc", 13, 12, 10, 11)]
+    public async Task GetListPagedAsync_SortByAllowlistedColumn_OrdersAscending_WithIdTiebreak(
+        string sortBy, params int[] expectedIds)
+    {
+        await using var ctx = NewContext();
+        await SeedRegistryAsync(ctx);
+
+        var (items, _) = await new LocationDataService(ctx)
+            .GetListPagedAsync(1, 10, null, null, CancellationToken.None, sortBy, "asc");
+
+        items.Select(l => l.Id).Should().ContainInOrder(expectedIds);
+    }
+
+    [Fact]
+    public async Task GetListPagedAsync_SortByPoc_IgnoresDeletedContacts_AndSortsByFirstActiveContact()
+    {
+        await using var ctx = NewContext();
+        await SeedRegistryAsync(ctx);
+
+        var (items, _) = await new LocationDataService(ctx)
+            .GetListPagedAsync(1, 10, null, null, CancellationToken.None, "poc", "asc");
+
+        // DFW8's order-0 row is soft deleted, so its POC is "Zoe Park" (order 1) and it must
+        // sort last; including the deleted row ("Removed Poc") would instead place it second.
+        items.Select(l => l.Id).Should().ContainInOrder(13, 12, 10, 11);
+    }
+
+    [Fact]
+    public async Task GetListPagedAsync_SortByClient_Desc_ReversesAccountOrder()
+    {
+        await using var ctx = NewContext();
+        await SeedRegistryAsync(ctx);
+
+        var (items, _) = await new LocationDataService(ctx)
+            .GetListPagedAsync(1, 10, null, null, CancellationToken.None, "client", "desc");
+
+        items.Select(l => l.Id).Should().ContainInOrder(new[] { 11, 13, 10, 12 });
+    }
+
+    [Fact]
+    public async Task GetListPagedAsync_UnknownSortColumn_FallsBackToLegacyCodeOrder()
+    {
+        await using var ctx = NewContext();
+        await SeedRegistryAsync(ctx);
+
+        var (items, _) = await new LocationDataService(ctx)
+            .GetListPagedAsync(1, 10, null, null, CancellationToken.None, "not-a-column", "sideways");
+
+        items.Select(l => l.Name).Should().ContainInOrder("DFW8", "IND9", "MIA2", "STL8");
+    }
+
+    [Fact]
+    public async Task GetListPagedAsync_EqualSortValues_BreakTiesById_AcrossPages()
+    {
+        await using var ctx = NewContext();
+        ctx.Locations.AddRange(
+            new Locations { Id = 20, Name = "HOU1", City = "Dallas" },
+            new Locations { Id = 21, Name = "AUS3", City = "Dallas" },
+            new Locations { Id = 22, Name = "ELP4", City = "Dallas" });
+        await ctx.SaveChangesAsync();
+
+        var service = new LocationDataService(ctx);
+
+        var (page1, totalCount) = await service.GetListPagedAsync(1, 2, null, null, CancellationToken.None, "city", "asc");
+        var (page2, _) = await service.GetListPagedAsync(2, 2, null, null, CancellationToken.None, "city", "asc");
+
+        totalCount.Should().Be(3);
+        page1.Select(l => l.Id).Should().ContainInOrder(20, 21);
+        page2.Select(l => l.Id).Should().ContainInOrder(22);
+    }
+
+    [Fact]
+    public async Task GetListPagedAsync_ListLoadIncludesAccountNameForProjection()
+    {
+        await using var ctx = NewContext();
+        await SeedRegistryAsync(ctx);
+
+        var (items, _) = await new LocationDataService(ctx)
+            .GetListPagedAsync(1, 10, null, null, CancellationToken.None);
+
+        items.Single(l => l.Id == 10).Account!.Name.Should().Be("Acme Co");
+    }
 }
diff --git a/Api.SeaHavenIndustries.Tests/LocationServiceTests.cs b/Api.SeaHavenIndustries.Tests/LocationServiceTests.cs
index c8986b6..2c986c8 100644
--- a/Api.SeaHavenIndustries.Tests/LocationServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/LocationServiceTests.cs
@@ -131,8 +131,8 @@ public class LocationServiceTests
     {
         var data = new Mock<ILocationDataService>();
         IReadOnlyCollection<string>? captured = default;
-        data.Setup(d => d.GetListPagedAsync(1, 10, null, It.IsAny<IReadOnlyCollection<string>?>(), It.IsAny<CancellationToken>()))
-            .Callback<int, int, string?, IReadOnlyCollection<string>?, CancellationToken>((_, _, _, states, _) => captured = states)
+        data.Setup(d => d.GetListPagedAsync(1, 10, null, It.IsAny<IReadOnlyCollection<string>?>(), It.IsAny<CancellationToken>(), It.IsAny<string?>(), It.IsAny<string?>()))
+            .Callback<int, int, string?, IReadOnlyCollection<string>?, CancellationToken, string?, string?>((_, _, _, states, _, _, _) => captured = states)
             .ReturnsAsync((new List<Locations>(), 0));
 
         await NewServiceWithSpy(data.Object).GetLocationListPagedAsync(1, 10, null, " tx , Mo ,,TX,  ", CancellationToken.None);
@@ -149,8 +149,8 @@ public class LocationServiceTests
         {
             var data = new Mock<ILocationDataService>();
             IReadOnlyCollection<string>? captured = default;
-            data.Setup(d => d.GetListPagedAsync(It.IsAny<int>(), It.IsAny<int>(), It.IsAny<string?>(), It.IsAny<IReadOnlyCollection<string>?>(), It.IsAny<CancellationToken>()))
-                .Callback<int, int, string?, IReadOnlyCollection<string>?, CancellationToken>((_, _, _, stateFilter, _) => captured = stateFilter)
+            data.Setup(d => d.GetListPagedAsync(It.IsAny<int>(), It.IsAny<int>(), It.IsAny<string?>(), It.IsAny<IReadOnlyCollection<string>?>(), It.IsAny<CancellationToken>(), It.IsAny<string?>(), It.IsAny<string?>()))
+                .Callback<int, int, string?, IReadOnlyCollection<string>?, CancellationToken, string?, string?>((_, _, _, stateFilter, _, _, _) => captured = stateFilter)
                 .ReturnsAsync((new List<Locations>(), 0));
 
             var page = await NewServiceWithSpy(data.Object).GetLocationListPagedAsync(1, 10, "search", states, CancellationToken.None);
@@ -173,14 +173,14 @@ public class LocationServiceTests
                 && e.ErrorMessage.Contains("ZZ")
                 && e.ErrorMessage.Contains("QQ")
                 && !e.ErrorMessage.Contains("TX"));
-        data.Verify(d => d.GetListPagedAsync(It.IsAny<int>(), It.IsAny<int>(), It.IsAny<string?>(), It.IsAny<IReadOnlyCollection<string>?>(), It.IsAny<CancellationToken>()), Times.Never);
+        data.Verify(d => d.GetListPagedAsync(It.IsAny<int>(), It.IsAny<int>(), It.IsAny<string?>(), It.IsAny<IReadOnlyCollection<string>?>(), It.IsAny<CancellationToken>(), It.IsAny<string?>(), It.IsAny<string?>()), Times.Never);
     }
 
     [Fact]
     public async Task GetLocationListPagedAsync_AcceptsAllFiftyStateCodes()
     {
         var data = new Mock<ILocationDataService>();
-        data.Setup(d => d.GetListPagedAsync(It.IsAny<int>(), It.IsAny<int>(), It.IsAny<string?>(), It.IsAny<IReadOnlyCollection<string>?>(), It.IsAny<CancellationToken>()))
+        data.Setup(d => d.GetListPagedAsync(It.IsAny<int>(), It.IsAny<int>(), It.IsAny<string?>(), It.IsAny<IReadOnlyCollection<string>?>(), It.IsAny<CancellationToken>(), It.IsAny<string?>(), It.IsAny<string?>()))
             .ReturnsAsync((new List<Locations>(), 0));
 
         var allStates = string.Join(",", SeaHaven.Services.Helpers.UsStateCodes.All);
@@ -533,4 +533,97 @@ public class LocationServiceTests
         again.Should().BeFalse();
         ctx.Locations.Should().BeEmpty();
     }
+
+    [Fact]
+    public async Task GetLocationListPagedAsync_NormalizesAndForwardsSortToDataService()
+    {
+        var data = new Mock<ILocationDataService>();
+        string? capturedSort = "sentinel";
+        string? capturedDirection = "sentinel";
+        data.Setup(d => d.GetListPagedAsync(It.IsAny<int>(), It.IsAny<int>(), It.IsAny<string?>(), It.IsAny<IReadOnlyCollection<string>?>(), It.IsAny<CancellationToken>(), It.IsAny<string?>(), It.IsAny<string?>()))
+            .Callback<int, int, string?, IReadOnlyCollection<string>?, CancellationToken, string?, string?>((_, _, _, _, _, sortBy, sortDirection) =>
+            {
+                capturedSort = sortBy;
+                capturedDirection = sortDirection;
+            })
+            .ReturnsAsync((new List<Locations>(), 0));
+
+        await NewServiceWithSpy(data.Object).GetLocationListPagedAsync(1, 10, null, cancellationToken: CancellationToken.None, sortBy: " POC ", sortDirection: " DESC ");
+
+        capturedSort.Should().Be("poc");
+        capturedDirection.Should().Be("desc");
+    }
+
+    [Theory]
+    [InlineData(null, null)]
+    [InlineData("", "  ")]
+    public async Task GetLocationListPagedAsync_BlankOrDefaultSort_PassesNormalizedDefaults(
+        string? sortBy,
+        string? sortDirection)
+    {
+        var data = new Mock<ILocationDataService>();
+        string? capturedSort = "sentinel";
+        string? capturedDirection = "sentinel";
+        data.Setup(d => d.GetListPagedAsync(It.IsAny<int>(), It.IsAny<int>(), It.IsAny<string?>(), It.IsAny<IReadOnlyCollection<string>?>(), It.IsAny<CancellationToken>(), It.IsAny<string?>(), It.IsAny<string?>()))
+            .Callback<int, int, string?, IReadOnlyCollection<string>?, CancellationToken, string?, string?>((_, _, _, _, _, s, d) =>
+            {
+                capturedSort = s;
+                capturedDirection = d;
+            })
+            .ReturnsAsync((new List<Locations>(), 0));
+
+        await NewServiceWithSpy(data.Object).GetLocationListPagedAsync(1, 10, null, cancellationToken: CancellationToken.None, sortBy: sortBy, sortDirection: sortDirection);
+
+        capturedSort.Should().BeNull("a blank sort column must keep the legacy ordering");
+        capturedDirection.Should().Be("asc");
+    }
+
+    [Theory]
+    [InlineData("rating")]
+    [InlineData("password; drop table locations")]
+    public async Task GetLocationListPagedAsync_InvalidSortBy_ThrowsValidationAndNeverQueries(string sortBy)
+    {
+        var data = new Mock<ILocationDataService>();
+
+        var act = () => NewServiceWithSpy(data.Object).GetLocationListPagedAsync(1, 10, null, cancellationToken: CancellationToken.None, sortBy: sortBy);
+
+        (await act.Should().ThrowAsync<FluentValidation.ValidationException>())
+            .Which.Errors.Should().ContainSingle(e =>
+                e.PropertyName == "sortBy"
+                && e.ErrorMessage.Contains("code")
+                && e.ErrorMessage.Contains("poc"));
+        data.Verify(d => d.GetListPagedAsync(It.IsAny<int>(), It.IsAny<int>(), It.IsAny<string?>(), It.IsAny<IReadOnlyCollection<string>?>(), It.IsAny<CancellationToken>(), It.IsAny<string?>(), It.IsAny<string?>()), Times.Never);
+    }
+
+    [Theory]
+    [InlineData("ascending")]
+    [InlineData("DESC; drop table locations")]
+    public async Task GetLocationListPagedAsync_InvalidSortDirection_ThrowsValidationAndNeverQueries(string sortDirection)
+    {
+        var data = new Mock<ILocationDataService>();
+
+        var act = () => NewServiceWithSpy(data.Object).GetLocationListPagedAsync(1, 10, null, cancellationToken: CancellationToken.None, sortBy: "city", sortDirection: sortDirection);
+
+        (await act.Should().ThrowAsync<FluentValidation.ValidationException>())
+            .Which.Errors.Should().ContainSingle(e =>
+                e.PropertyName == "sortDirection"
+                && e.ErrorMessage.Contains("asc")
+                && e.ErrorMessage.Contains("desc"));
+        data.Verify(d => d.GetListPagedAsync(It.IsAny<int>(), It.IsAny<int>(), It.IsAny<string?>(), It.IsAny<IReadOnlyCollection<string>?>(), It.IsAny<CancellationToken>(), It.IsAny<string?>(), It.IsAny<string?>()), Times.Never);
+    }
+
+    [Fact]
+    public async Task GetLocationListPagedAsync_MapsClientAccountNameIntoRows()
+    {
+        using var ctx = NewContext();
+        SeedAccount(ctx, 9, "Acme Co");
+        SeedLocation(ctx, "Alpha Site", "Austin").AccountId = 9;
+        await ctx.SaveChangesAsync();
+
+        var page = await NewService(ctx).GetLocationListPagedAsync(1, 10, null, cancellationToken: CancellationToken.None);
+
+        var row = page.Items.Should().ContainSingle().Subject;
+        row.AccountId.Should().Be(9);
+        row.AccountName.Should().Be("Acme Co");
+    }
 }
diff --git a/Api.SeaHavenIndustries.Tests/LocationSiteContactsTests.cs b/Api.SeaHavenIndustries.Tests/LocationSiteContactsTests.cs
index 5b9cf9d..f4aef07 100644
--- a/Api.SeaHavenIndustries.Tests/LocationSiteContactsTests.cs
+++ b/Api.SeaHavenIndustries.Tests/LocationSiteContactsTests.cs
@@ -430,7 +430,7 @@ public class LocationSiteContactsTests
     public async Task List_LoadsPageContactsInSingleBatchedRead()
     {
         var data = new Mock<ILocationDataService>();
-        data.Setup(d => d.GetListPagedAsync(It.IsAny<int>(), It.IsAny<int>(), It.IsAny<string?>(), It.IsAny<IReadOnlyCollection<string>?>(), It.IsAny<CancellationToken>()))
+        data.Setup(d => d.GetListPagedAsync(It.IsAny<int>(), It.IsAny<int>(), It.IsAny<string?>(), It.IsAny<IReadOnlyCollection<string>?>(), It.IsAny<CancellationToken>(), It.IsAny<string?>(), It.IsAny<string?>()))
             .ReturnsAsync((new List<Locations>
             {
                 new() { Id = 1, Name = "One" },
diff --git a/Api.SeaHavenIndustries/Controllers/LocationController.cs b/Api.SeaHavenIndustries/Controllers/LocationController.cs
index 9e970a6..a956819 100644
--- a/Api.SeaHavenIndustries/Controllers/LocationController.cs
+++ b/Api.SeaHavenIndustries/Controllers/LocationController.cs
@@ -36,11 +36,11 @@ namespace Api.SeaHavenIndustries.Controllers
         }
 
         [HttpGet("GetLocationList")]
-        public async Task<IActionResult> GetLocationList(string? search = "", int page = 1, int pageSize = 10, string? states = null, CancellationToken cancellationToken = default)
+        public async Task<IActionResult> GetLocationList(string? search = "", int page = 1, int pageSize = 10, string? states = null, string? sortBy = null, string? sortDirection = null, CancellationToken cancellationToken = default)
         {
             try
             {
-                var pagedResult = await _locationService.GetLocationListPagedAsync(page, pageSize, search, states, cancellationToken);
+                var pagedResult = await _locationService.GetLocationListPagedAsync(page, pageSize, search, states, cancellationToken, sortBy, sortDirection);
 
                 var data = pagedResult.Items.Select(l => new
                 {
@@ -58,6 +58,8 @@ namespace Api.SeaHavenIndustries.Controllers
                     ContactEmail = l.Email,
                     Status = l.Status,
                     AccountId = l.AccountId,
+                    ClientName = l.AccountName,
+                    AccountName = l.AccountName,
                     Contacts = l.Contacts?.Select(c => new { c.Id, c.Name, c.Phone }).ToList()
                 });
 
diff --git a/SeaHaven.DataServices/Implementation/LocationDataService.cs b/SeaHaven.DataServices/Implementation/LocationDataService.cs
index 71be6ec..11cb89e 100644
--- a/SeaHaven.DataServices/Implementation/LocationDataService.cs
+++ b/SeaHaven.DataServices/Implementation/LocationDataService.cs
@@ -136,15 +136,21 @@ namespace SeaHaven.DataServices.Implementation
             int pageSize,
             string? search,
             IReadOnlyCollection<string>? states,
-            CancellationToken cancellationToken)
+            CancellationToken cancellationToken,
+            string? sortBy = null,
+            string? sortDirection = null)
         {
-            var query = _context.Locations.AsNoTracking();
+            IQueryable<Locations> query = _context.Locations
+                .AsNoTracking()
+                .Include(l => l.Account);
 
             if (!string.IsNullOrWhiteSpace(search))
             {
                 query = query.Where(l =>
                     l.Name!.Contains(search) ||
-                    l.City!.Contains(search));
+                    l.Address1!.Contains(search) ||
+                    l.City!.Contains(search) ||
+                    l.Account != null && l.Account.Name!.Contains(search));
             }
 
             if (states is { Count: > 0 })
@@ -152,9 +158,10 @@ namespace SeaHaven.DataServices.Implementation
                 query = query.Where(l => l.State != null && states.Contains(l.State.Trim().ToUpper()));
             }
 
+            query = ApplyListSort(query, sortBy, sortDirection);
+
             var totalCount = await query.CountAsync(cancellationToken);
             var items = await query
-                .OrderBy(l => l.Name)
                 .Skip((page - 1) * pageSize)
                 .Take(pageSize)
                 .ToListAsync(cancellationToken);
@@ -162,6 +169,33 @@ namespace SeaHaven.DataServices.Implementation
             return (items, totalCount);
         }
 
+        private static IQueryable<Locations> ApplyListSort(IQueryable<Locations> query, string? sortBy, string? sortDirection)
+        {
+            var descending = string.Equals(sortDirection?.Trim(), "desc", StringComparison.OrdinalIgnoreCase);
+            IOrderedQueryable<Locations> ordered = (sortBy?.Trim().ToLowerInvariant()) switch
+            {
+                "code" => descending ? query.OrderByDescending(l => l.Name) : query.OrderBy(l => l.Name),
+                "client" => descending ? query.OrderByDescending(l => l.Account!.Name) : query.OrderBy(l => l.Account!.Name),
+                "address" => descending ? query.OrderByDescending(l => l.Address1) : query.OrderBy(l => l.Address1),
+                "city" => descending ? query.OrderByDescending(l => l.City) : query.OrderBy(l => l.City),
+                "state" => descending ? query.OrderByDescending(l => l.State) : query.OrderBy(l => l.State),
+                "poc" => descending
+                    ? query.OrderByDescending(FirstActiveContactName)
+                    : query.OrderBy(FirstActiveContactName),
+                _ => query.OrderBy(l => l.Name)
+            };
+
+            return ordered.ThenBy(l => l.Id);
+        }
+
+        private static readonly System.Linq.Expressions.Expression<Func<Locations, string?>> FirstActiveContactName =
+            l => l.Contacts
+                .Where(c => c.IsDeleted != true)
+                .OrderBy(c => c.SiteContactOrder)
+                .ThenBy(c => c.Id)
+                .Select(c => c.FirstName)
+                .FirstOrDefault();
+
         public async Task<Locations?> GetDetailByIdAsync(int id, CancellationToken cancellationToken)
         {
             return await _context.Locations
diff --git a/SeaHaven.DataServices/Interfaces/ILocationDataService.cs b/SeaHaven.DataServices/Interfaces/ILocationDataService.cs
index 582fb4b..5a068c1 100644
--- a/SeaHaven.DataServices/Interfaces/ILocationDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/ILocationDataService.cs
@@ -34,7 +34,11 @@ namespace SeaHaven.DataServices.Interfaces
         Task<bool> ExistsAsync(int id);
         Task<int> CountAsync();
 
-        Task<(List<Locations> Items, int TotalCount)> GetListPagedAsync(int page, int pageSize, string? search, IReadOnlyCollection<string>? states, CancellationToken cancellationToken);
+        /// <summary>
+        /// Sort keys are validated upstream; unknown or null keys fall back to the legacy code order.
+        /// Sort options trail the token so existing call sites stay source-compatible.
+        /// </summary>
+        Task<(List<Locations> Items, int TotalCount)> GetListPagedAsync(int page, int pageSize, string? search, IReadOnlyCollection<string>? states, CancellationToken cancellationToken, string? sortBy = null, string? sortDirection = null);
         Task<Locations?> GetDetailByIdAsync(int id, CancellationToken cancellationToken);
         Task<Locations?> GetByIdForUpdateAsync(int id, CancellationToken cancellationToken);
 
diff --git a/SeaHaven.Services/DTOs/LocationDTOs.cs b/SeaHaven.Services/DTOs/LocationDTOs.cs
index 1e437ba..58f0878 100644
--- a/SeaHaven.Services/DTOs/LocationDTOs.cs
+++ b/SeaHaven.Services/DTOs/LocationDTOs.cs
@@ -14,6 +14,7 @@ namespace SeaHaven.Services.DTOs
         public string? Email { get; set; }
         public string? Status { get; set; }
         public int? AccountId { get; set; }
+        public string? AccountName { get; set; }
         public DateTime? CreatedDate { get; set; }
         public string? CreatedBy { get; set; }
 
diff --git a/SeaHaven.Services/Implementation/LocationService.cs b/SeaHaven.Services/Implementation/LocationService.cs
index e140ece..64b275a 100644
--- a/SeaHaven.Services/Implementation/LocationService.cs
+++ b/SeaHaven.Services/Implementation/LocationService.cs
@@ -166,11 +166,15 @@ namespace SeaHaven.Services.Implementation
             int pageSize,
             string? search,
             string? states = null,
-            CancellationToken cancellationToken = default)
+            CancellationToken cancellationToken = default,
+            string? sortBy = null,
+            string? sortDirection = null)
         {
             var stateFilter = NormalizeStateFilter(states);
             var storageStateFilter = stateFilter == null ? null : UsStateCodes.ExpandStorageValues(stateFilter);
-            var (items, totalCount) = await _locationDataService.GetListPagedAsync(page, pageSize, search, storageStateFilter, cancellationToken);
+            var sort = NormalizeSortColumn(sortBy);
+            var direction = NormalizeSortDirection(sortDirection);
+            var (items, totalCount) = await _locationDataService.GetListPagedAsync(page, pageSize, search, storageStateFilter, cancellationToken, sort, direction);
 
             // SH-138: one bounded contact read for the whole page, never per row.
             var contactsByLocation = await GetSiteContactsByLocationIdsAsync(items, cancellationToken);
@@ -184,6 +188,42 @@ namespace SeaHaven.Services.Implementation
             };
         }
 
+        internal static readonly IReadOnlyCollection<string> SortableColumns = new[] { "code", "client", "address", "city", "state", "poc" };
+
+        internal static string? NormalizeSortColumn(string? sortBy)
+        {
+            if (string.IsNullOrWhiteSpace(sortBy))
+                return null;
+
+            var normalized = sortBy.Trim().ToLowerInvariant();
+            if (!SortableColumns.Contains(normalized))
+            {
+                throw new ValidationException(new[]
+                {
+                    new ValidationFailure("sortBy", $"sortBy must be one of: {string.Join(", ", SortableColumns)}.")
+                });
+            }
+
+            return normalized;
+        }
+
+        internal static string NormalizeSortDirection(string? sortDirection)
+        {
+            if (string.IsNullOrWhiteSpace(sortDirection))
+                return "asc";
+
+            var normalized = sortDirection.Trim().ToLowerInvariant();
+            if (normalized != "asc" && normalized != "desc")
+            {
+                throw new ValidationException(new[]
+                {
+                    new ValidationFailure("sortDirection", "sortDirection must be asc or desc.")
+                });
+            }
+
+            return normalized;
+        }
+
         internal static IReadOnlyCollection<string>? NormalizeStateFilter(string? states)
         {
             if (string.IsNullOrWhiteSpace(states))
@@ -503,6 +543,7 @@ namespace SeaHaven.Services.Implementation
                 Email = location.Email,
                 Status = location.Status,
                 AccountId = location.AccountId,
+                AccountName = location.Account?.Name,
                 CreatedDate = location.CreatedDate,
                 CreatedBy = location.createdby,
                 Contacts = contactsByLocation != null && contactsByLocation.TryGetValue(location.Id, out var contacts)
diff --git a/SeaHaven.Services/Interfaces/ILocationService.cs b/SeaHaven.Services/Interfaces/ILocationService.cs
index 661adde..f05620a 100644
--- a/SeaHaven.Services/Interfaces/ILocationService.cs
+++ b/SeaHaven.Services/Interfaces/ILocationService.cs
@@ -19,7 +19,7 @@ namespace SeaHaven.Services.Interfaces
         Task<bool> LocationExistsAsync(int id);
         Task<int> GetTotalLocationCountAsync();
 
-        Task<PagedResult<LocationDTO>> GetLocationListPagedAsync(int page, int pageSize, string? search, string? states = null, CancellationToken cancellationToken = default);
+        Task<PagedResult<LocationDTO>> GetLocationListPagedAsync(int page, int pageSize, string? search, string? states = null, CancellationToken cancellationToken = default, string? sortBy = null, string? sortDirection = null);
         Task<LocationDTO?> GetLocationDetailAsync(int id, CancellationToken cancellationToken);
         Task CreateLocationFromRequestAsync(LocationCreateRequestDTO request, ClaimsPrincipal user, CancellationToken cancellationToken);
         Task UpdateLocationFromRequestAsync(int id, LocationUpdateRequestDTO request, ClaimsPrincipal user, CancellationToken cancellationToken);
diff --git a/SeaHavenIndustries.Tests/WorkOrderAccountScopeTests.cs b/SeaHavenIndustries.Tests/WorkOrderAccountScopeTests.cs
index 2b11906..5acde4c 100644
--- a/SeaHavenIndustries.Tests/WorkOrderAccountScopeTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderAccountScopeTests.cs
@@ -835,8 +835,8 @@ public class WorkOrderAccountScopeTests
         public Task<bool> ExistsAsync(int id) => _inner.ExistsAsync(id);
         public Task<int> CountAsync() => _inner.CountAsync();
         public Task<(List<Locations> Items, int TotalCount)> GetListPagedAsync(
-            int page, int pageSize, string? search, IReadOnlyCollection<string>? states, CancellationToken cancellationToken)
-            => _inner.GetListPagedAsync(page, pageSize, search, states, cancellationToken);
+            int page, int pageSize, string? search, IReadOnlyCollection<string>? states, CancellationToken cancellationToken, string? sortBy = null, string? sortDirection = null)
+            => _inner.GetListPagedAsync(page, pageSize, search, states, cancellationToken, sortBy, sortDirection);
         public Task<Locations?> GetDetailByIdAsync(int id, CancellationToken cancellationToken)
             => _inner.GetDetailByIdAsync(id, cancellationToken);
         public Task<Locations?> GetByIdForUpdateAsync(int id, CancellationToken cancellationToken)

From 738c9eaf4503aa79732fbd0aa035efd79cbed3e6 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 21:27:05 -0300
Subject: [PATCH 039/183] feat(work-orders): add region filtering (SH-348)

---
 .../Helpers/WorkOrderBoardQueryFilters.cs     | 34 +++++++++
 .../Helpers/WorkOrderBoardRegions.cs          | 45 ++++++++++++
 .../WorkOrderAdvancedSearchDataService.cs     |  1 +
 .../WorkOrderAdvancedSearchModels.cs          |  1 +
 .../DTOs/WorkOrderBoardRequestDTOs.cs         |  1 +
 SeaHaven.Services/Helpers/DashboardRegions.cs | 70 +++----------------
 .../WorkOrderAdvancedSearchService.cs         |  1 +
 .../WorkOrderBoardSearchTests.cs              | 40 +++++++++++
 8 files changed, 133 insertions(+), 60 deletions(-)
 create mode 100644 SeaHaven.DataServices/Helpers/WorkOrderBoardRegions.cs

diff --git a/SeaHaven.DataServices/Helpers/WorkOrderBoardQueryFilters.cs b/SeaHaven.DataServices/Helpers/WorkOrderBoardQueryFilters.cs
index 7ff26ba..71c4d94 100644
--- a/SeaHaven.DataServices/Helpers/WorkOrderBoardQueryFilters.cs
+++ b/SeaHaven.DataServices/Helpers/WorkOrderBoardQueryFilters.cs
@@ -121,6 +121,40 @@ namespace SeaHaven.DataServices.Helpers
             return query.Where(w => w.SiteCode != null && normalized.Contains(w.SiteCode));
         }
 
+        public static IQueryable<WorkOrder> ApplyRegionFilter(
+            IQueryable<WorkOrder> query,
+            IReadOnlyList<string>? regions)
+        {
+            if (regions == null || regions.Count == 0)
+                return query;
+
+            var normalized = regions
+                .Where(region => !string.IsNullOrWhiteSpace(region))
+                .Select(region => region.Trim())
+                .Distinct(StringComparer.Ordinal)
+                .ToList();
+            if (normalized.Count == 0)
+                return query;
+
+            var knownRegions = normalized
+                .Where(region => WorkOrderBoardRegions.Names.Contains(region) && region != "Unmapped/Other")
+                .SelectMany(WorkOrderBoardRegions.StorageValuesFor)
+                .Distinct(StringComparer.Ordinal)
+                .ToList();
+            var includeUnmapped = normalized.Contains("Unmapped/Other", StringComparer.Ordinal);
+            var hasKnownRegion = knownRegions.Count > 0;
+
+            if (!hasKnownRegion && !includeUnmapped)
+                return query.Where(_ => false);
+
+            return query.Where(w =>
+                (hasKnownRegion && w.Locations != null && w.Locations.State != null && knownRegions.Contains(w.Locations.State))
+                || (includeUnmapped && (w.Locations == null
+                    || w.Locations.State == null
+                    || w.Locations.State == ""
+                    || !WorkOrderBoardRegions.KnownStorageValues.Contains(w.Locations.State))));
+        }
+
         public static IQueryable<WorkOrder> ApplyStatusFilter(
             IQueryable<WorkOrder> query,
             IReadOnlyList<LifecycleStatus>? statuses)
diff --git a/SeaHaven.DataServices/Helpers/WorkOrderBoardRegions.cs b/SeaHaven.DataServices/Helpers/WorkOrderBoardRegions.cs
new file mode 100644
index 0000000..0ca39ec
--- /dev/null
+++ b/SeaHaven.DataServices/Helpers/WorkOrderBoardRegions.cs
@@ -0,0 +1,45 @@
+namespace SeaHaven.DataServices.Helpers
+{
+    public static class WorkOrderBoardRegions
+    {
+        public static readonly IReadOnlyList<string> Names =
+            ["East", "Central", "West", "California", "Unmapped/Other"];
+
+        private static readonly IReadOnlyDictionary<string, string[]> RegionStateCodes =
+            new Dictionary<string, string[]>(StringComparer.Ordinal)
+            {
+                ["East"] = ["CT", "DE", "GA", "ME", "MD", "MA", "NH", "NJ", "NY", "NC", "PA", "RI", "SC", "VT", "VA", "WV"],
+                ["Central"] = ["AL", "AR", "FL", "IL", "IN", "IA", "KS", "KY", "LA", "MI", "MN", "MS", "MO", "NE", "ND", "OH", "OK", "SD", "TN", "WI"],
+                ["West"] = ["AK", "AZ", "CO", "HI", "ID", "MT", "NV", "NM", "OR", "TX", "UT", "WA", "WY"],
+                ["California"] = ["CA"]
+            };
+
+        private static readonly IReadOnlyDictionary<string, string> StateNames =
+            new Dictionary<string, string>(StringComparer.Ordinal)
+            {
+                ["AL"] = "ALABAMA", ["AK"] = "ALASKA", ["AZ"] = "ARIZONA", ["AR"] = "ARKANSAS",
+                ["CA"] = "CALIFORNIA", ["CO"] = "COLORADO", ["CT"] = "CONNECTICUT", ["DE"] = "DELAWARE",
+                ["FL"] = "FLORIDA", ["GA"] = "GEORGIA", ["HI"] = "HAWAII", ["ID"] = "IDAHO",
+                ["IL"] = "ILLINOIS", ["IN"] = "INDIANA", ["IA"] = "IOWA", ["KS"] = "KANSAS",
+                ["KY"] = "KENTUCKY", ["LA"] = "LOUISIANA", ["ME"] = "MAINE", ["MD"] = "MARYLAND",
+                ["MA"] = "MASSACHUSETTS", ["MI"] = "MICHIGAN", ["MN"] = "MINNESOTA", ["MS"] = "MISSISSIPPI",
+                ["MO"] = "MISSOURI", ["MT"] = "MONTANA", ["NE"] = "NEBRASKA", ["NV"] = "NEVADA",
+                ["NH"] = "NEW HAMPSHIRE", ["NJ"] = "NEW JERSEY", ["NM"] = "NEW MEXICO", ["NY"] = "NEW YORK",
+                ["NC"] = "NORTH CAROLINA", ["ND"] = "NORTH DAKOTA", ["OH"] = "OHIO", ["OK"] = "OKLAHOMA",
+                ["OR"] = "OREGON", ["PA"] = "PENNSYLVANIA", ["RI"] = "RHODE ISLAND", ["SC"] = "SOUTH CAROLINA",
+                ["SD"] = "SOUTH DAKOTA", ["TN"] = "TENNESSEE", ["TX"] = "TEXAS", ["UT"] = "UTAH",
+                ["VT"] = "VERMONT", ["VA"] = "VIRGINIA", ["WA"] = "WASHINGTON", ["WV"] = "WEST VIRGINIA",
+                ["WI"] = "WISCONSIN", ["WY"] = "WYOMING"
+            };
+
+        public static IReadOnlyCollection<string> StorageValuesFor(string region)
+            => RegionStateCodes.TryGetValue(region, out var codes)
+                ? codes.SelectMany(code => new[] { code, StateNames[code] }).ToArray()
+                : Array.Empty<string>();
+
+        public static IReadOnlySet<string> KnownStorageValues { get; } =
+            RegionStateCodes.Values
+                .SelectMany(codes => codes.SelectMany(code => new[] { code, StateNames[code] }))
+                .ToHashSet(StringComparer.Ordinal);
+    }
+}
diff --git a/SeaHaven.DataServices/Implementation/WorkOrderAdvancedSearchDataService.cs b/SeaHaven.DataServices/Implementation/WorkOrderAdvancedSearchDataService.cs
index ceac856..eeb28c5 100644
--- a/SeaHaven.DataServices/Implementation/WorkOrderAdvancedSearchDataService.cs
+++ b/SeaHaven.DataServices/Implementation/WorkOrderAdvancedSearchDataService.cs
@@ -24,6 +24,7 @@ namespace SeaHaven.DataServices.Implementation
             else
                 baseQuery = WorkOrderBoardQueryFilters.ApplyDateRangeFilter(baseQuery, query.DateFrom, query.DateTo);
             baseQuery = WorkOrderBoardQueryFilters.ApplySiteFilter(baseQuery, query.Sites);
+            baseQuery = WorkOrderBoardQueryFilters.ApplyRegionFilter(baseQuery, query.Regions);
             baseQuery = WorkOrderBoardQueryFilters.ApplyTypeFilter(baseQuery, query.Types, query.Overdue);
             baseQuery = WorkOrderBoardQueryFilters.ApplyDispatcherFilter(
                 baseQuery, query.Dispatchers, query.MyWorkOrders, query.CurrentUserId);
diff --git a/SeaHaven.DataServices/Interfaces/WorkOrderAdvancedSearchModels.cs b/SeaHaven.DataServices/Interfaces/WorkOrderAdvancedSearchModels.cs
index 576af7a..2c0a627 100644
--- a/SeaHaven.DataServices/Interfaces/WorkOrderAdvancedSearchModels.cs
+++ b/SeaHaven.DataServices/Interfaces/WorkOrderAdvancedSearchModels.cs
@@ -9,6 +9,7 @@ namespace SeaHaven.DataServices.Interfaces
         DateOnly DateTo,
         bool UnscheduledOnly,
         IReadOnlyList<string>? Sites,
+        IReadOnlyList<string>? Regions,
         IReadOnlyList<WorkOrderType>? Types,
         bool Overdue,
         IReadOnlyList<string>? Dispatchers,
diff --git a/SeaHaven.Services/DTOs/WorkOrderBoardRequestDTOs.cs b/SeaHaven.Services/DTOs/WorkOrderBoardRequestDTOs.cs
index 8c04373..b90380c 100644
--- a/SeaHaven.Services/DTOs/WorkOrderBoardRequestDTOs.cs
+++ b/SeaHaven.Services/DTOs/WorkOrderBoardRequestDTOs.cs
@@ -73,6 +73,7 @@ namespace SeaHaven.Services.DTOs
         /// </summary>
         public bool UnscheduledOnly { get; set; }
         public List<string>? Sites { get; set; }
+        public List<string>? Regions { get; set; }
         public List<WorkOrderType>? Types { get; set; }
         /// <summary>When true, include past-due (isPastDue) rows. Combined with Types via OR.</summary>
         public bool Overdue { get; set; }
diff --git a/SeaHaven.Services/Helpers/DashboardRegions.cs b/SeaHaven.Services/Helpers/DashboardRegions.cs
index f3b5fae..45f23aa 100644
--- a/SeaHaven.Services/Helpers/DashboardRegions.cs
+++ b/SeaHaven.Services/Helpers/DashboardRegions.cs
@@ -1,20 +1,25 @@
+using SeaHaven.DataServices.Helpers;
 using SeaHaven.DataServices.Interfaces;
 
 namespace SeaHaven.Services.Helpers;
 
 public static class DashboardRegions
 {
-    public static readonly IReadOnlyList<string> Names =
-        ["East", "Central", "West", "California", "Unmapped/Other"];
+    public static readonly IReadOnlyList<string> Names = WorkOrderBoardRegions.Names;
 
     public static string Resolve(string? state)
     {
         if (string.IsNullOrWhiteSpace(state))
             return "Unmapped/Other";
 
-        return StateToRegion.TryGetValue(state.Trim().ToUpperInvariant(), out var region)
-            ? region
-            : "Unmapped/Other";
+        var normalized = state.Trim().ToUpperInvariant();
+        foreach (var region in Names.Where(region => region != "Unmapped/Other"))
+        {
+            if (WorkOrderBoardRegions.StorageValuesFor(region).Contains(normalized))
+                return region;
+        }
+
+        return "Unmapped/Other";
     }
 
     public static IReadOnlyDictionary<string, int> Count(
@@ -26,59 +31,4 @@ public static class DashboardRegions
 
         return counts;
     }
-
-    private static readonly IReadOnlyDictionary<string, string> StateToRegion =
-        new Dictionary<string, string>(StringComparer.Ordinal)
-        {
-            ["CT"] = "East",
-            ["DE"] = "East",
-            ["GA"] = "East",
-            ["ME"] = "East",
-            ["MD"] = "East",
-            ["MA"] = "East",
-            ["NH"] = "East",
-            ["NJ"] = "East",
-            ["NY"] = "East",
-            ["NC"] = "East",
-            ["PA"] = "East",
-            ["RI"] = "East",
-            ["SC"] = "East",
-            ["VT"] = "East",
-            ["VA"] = "East",
-            ["WV"] = "East",
-            ["AL"] = "Central",
-            ["AR"] = "Central",
-            ["FL"] = "Central",
-            ["IL"] = "Central",
-            ["IN"] = "Central",
-            ["IA"] = "Central",
-            ["KS"] = "Central",
-            ["KY"] = "Central",
-            ["LA"] = "Central",
-            ["MI"] = "Central",
-            ["MN"] = "Central",
-            ["MS"] = "Central",
-            ["MO"] = "Central",
-            ["NE"] = "Central",
-            ["ND"] = "Central",
-            ["OH"] = "Central",
-            ["OK"] = "Central",
-            ["SD"] = "Central",
-            ["TN"] = "Central",
-            ["WI"] = "Central",
-            ["AK"] = "West",
-            ["AZ"] = "West",
-            ["CO"] = "West",
-            ["HI"] = "West",
-            ["ID"] = "West",
-            ["MT"] = "West",
-            ["NV"] = "West",
-            ["NM"] = "West",
-            ["OR"] = "West",
-            ["TX"] = "West",
-            ["UT"] = "West",
-            ["WA"] = "West",
-            ["WY"] = "West",
-            ["CA"] = "California"
-        };
 }
diff --git a/SeaHaven.Services/Implementation/WorkOrderAdvancedSearchService.cs b/SeaHaven.Services/Implementation/WorkOrderAdvancedSearchService.cs
index 6c4e3da..fa97dc5 100644
--- a/SeaHaven.Services/Implementation/WorkOrderAdvancedSearchService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderAdvancedSearchService.cs
@@ -49,6 +49,7 @@ namespace SeaHaven.Services.Implementation
                 dateRange.To,
                 query.UnscheduledOnly,
                 query.Sites,
+                query.Regions,
                 query.Types,
                 query.Overdue,
                 query.Dispatchers,
diff --git a/SeaHavenIndustries.Tests/WorkOrderBoardSearchTests.cs b/SeaHavenIndustries.Tests/WorkOrderBoardSearchTests.cs
index 721291a..033d3fb 100644
--- a/SeaHavenIndustries.Tests/WorkOrderBoardSearchTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderBoardSearchTests.cs
@@ -228,6 +228,46 @@ public class WorkOrderAdvancedSearchServiceTests
         Assert.Equal("BK5", result.Items.First().SiteCode);
     }
 
+    [Fact]
+    public async Task SearchAsync_FiltersByCanonicalRegionAndUnmappedBucket()
+    {
+        await using var context = CreateContext();
+        var date = new DateTime(2026, 6, 23);
+        context.Locations.AddRange(
+            new Locations { Id = 1, State = "WA" },
+            new Locations { Id = 2, State = "CALIFORNIA" },
+            new Locations { Id = 3, State = "Atlantis" },
+            new Locations { Id = 4, State = null });
+        context.workOrders.AddRange(
+            new WorkOrder { Id = 1, LocationId = 1, ScheduledDate = date, LifecycleStatus = LifecycleStatus.Scheduled },
+            new WorkOrder { Id = 2, LocationId = 2, ScheduledDate = date, LifecycleStatus = LifecycleStatus.Scheduled },
+            new WorkOrder { Id = 3, LocationId = 3, ScheduledDate = date, LifecycleStatus = LifecycleStatus.Scheduled },
+            new WorkOrder { Id = 4, LocationId = 4, ScheduledDate = date, LifecycleStatus = LifecycleStatus.Scheduled });
+        await context.SaveChangesAsync();
+
+        var dataService = new WorkOrderAdvancedSearchDataService(context);
+        var service = new SeaHaven.Services.Implementation.WorkOrderAdvancedSearchService(
+            dataService, WorkOrderAccountTestHelpers.Resolver(context));
+        var query = new SeaHaven.Services.DTOs.WorkOrderAdvancedSearchQueryDto
+        {
+            DatePreset = SeaHaven.Services.Helpers.WorkOrderAdvancedSearchDatePreset.Custom,
+            DateFrom = new DateOnly(2026, 6, 22), DateTo = new DateOnly(2026, 6, 30),
+            PageSize = 50
+        };
+
+        query.Regions = new List<string> { "West" };
+        var west = await service.SearchAsync(query, WorkOrderAccountTestHelpers.OrgWideAdmin(), null);
+        Assert.Equal(new[] { 1 }, west.Items.Select(item => item.Id));
+
+        query.Regions = new List<string> { "California" };
+        var california = await service.SearchAsync(query, WorkOrderAccountTestHelpers.OrgWideAdmin(), null);
+        Assert.Equal(new[] { 2 }, california.Items.Select(item => item.Id));
+
+        query.Regions = new List<string> { "Unmapped/Other" };
+        var unmapped = await service.SearchAsync(query, WorkOrderAccountTestHelpers.OrgWideAdmin(), null);
+        Assert.Equal(new[] { 3, 4 }, unmapped.Items.Select(item => item.Id));
+    }
+
     [Fact]
     public async Task SearchAsync_ClampsPageSizeToMax()
     {

From dca8d898cb7b69fd05b98c635ad26ce9817556bb Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 21:37:17 -0300
Subject: [PATCH 040/183] feat(dashboard): add scoped metrics contract (SH-347)

---
 .../DashboardServiceTests.cs                  | 255 +++++++++++++++++-
 .../Controllers/DashboardController.cs        |   3 +-
 .../Implementation/DashboardDataService.cs    |   4 +-
 SeaHaven.Services/DTOs/DashboardDTOs.cs       |  10 +
 SeaHaven.Services/Helpers/DashboardMetrics.cs |  22 +-
 .../Implementation/DashboardService.cs        |  59 ++--
 6 files changed, 324 insertions(+), 29 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs b/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
index a383bd7..6bb5b38 100644
--- a/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
@@ -221,11 +221,13 @@ public class DashboardServiceTests
             1,
             CancellationToken.None);
 
-        result.TotalDispatchers.Should().Be(1);
-        result.Items.Should().ContainSingle();
-        result.Items[0].DispatcherName.Should().Be("Ada One");
+        result.TotalDispatchers.Should().Be(2);
+        result.Items.Select(item => item.DispatcherName)
+            .Should().ContainInOrder("Ada One", "Ben Two");
         result.Items[0].TotalCount.Should().Be(2);
         result.Items[0].OpenCount.Should().Be(1);
+        result.Items[1].TotalCount.Should().Be(0);
+        result.Items[1].OpenCount.Should().Be(0);
         result.PageSize.Should().Be(10);
 
         var adminResult = await NewService(ctx).GetWorkloadAsync(
@@ -367,4 +369,251 @@ public class DashboardServiceTests
         result.Items[0].CompletionRate.Should().Be(100);
         result.Items[0].RescheduleRate.Should().Be(50);
     }
+
+    [Fact]
+    public async Task GetStatsAsync_DispatcherQuerySelectionCannotBroadenScope()
+    {
+        using var ctx = NewContext();
+        ctx.workOrders.AddRange(
+            new WorkOrder { AccountId = 1, Status = "Open", AssignTo = "dispatcher-1" },
+            new WorkOrder { AccountId = 1, Status = "Open", AssignTo = "dispatcher-1" },
+            new WorkOrder { AccountId = 1, Status = "Open", AssignTo = "dispatcher-2" },
+            new WorkOrder { AccountId = 1, Status = "Open", AssignTo = "dispatcher-2" },
+            new WorkOrder { AccountId = 1, Status = "Open", AssignTo = "dispatcher-2" });
+        ctx.SaveChanges();
+
+        var query = new DashboardStatsQueryDTO { DispatcherId = "dispatcher-2" };
+        var stats = await NewService(ctx).GetStatsAsync(
+            AccountUser(1, "dispatcher-1", "Dispatcher"), query, CancellationToken.None);
+
+        stats.Total.Should().Be(2);
+        stats.Open.Should().Be(2);
+    }
+
+    [Fact]
+    public async Task GetStatsAsync_AdminCanSelectIndividualDispatcherOrMine()
+    {
+        using var ctx = NewContext();
+        ctx.workOrders.AddRange(
+            new WorkOrder { AccountId = 1, Status = "Done", AssignTo = "admin-1" },
+            new WorkOrder { AccountId = 1, Status = "Open", AssignTo = "dispatcher-2" },
+            new WorkOrder { AccountId = 1, Status = "Open", AssignTo = "dispatcher-2" },
+            new WorkOrder { AccountId = 1, Status = "Open", AssignTo = "dispatcher-2" });
+        ctx.SaveChanges();
+
+        var service = NewService(ctx);
+
+        var selected = await service.GetStatsAsync(
+            AccountUser(1, "admin-1"),
+            new DashboardStatsQueryDTO { DispatcherId = "dispatcher-2" },
+            CancellationToken.None);
+        selected.Total.Should().Be(3);
+        selected.Open.Should().Be(3);
+
+        var mine = await service.GetStatsAsync(
+            AccountUser(1, "admin-1"),
+            new DashboardStatsQueryDTO { DispatcherId = "mine" },
+            CancellationToken.None);
+        mine.Total.Should().Be(1);
+        mine.Completed.Should().Be(1);
+
+        var all = await service.GetStatsAsync(
+            AccountUser(1, "admin-1"),
+            new DashboardStatsQueryDTO(),
+            CancellationToken.None);
+        all.Total.Should().Be(4);
+    }
+
+    [Fact]
+    public async Task GetStatsAsync_ManagerSelectionScopesStats()
+    {
+        using var ctx = NewContext();
+        ctx.workOrders.AddRange(
+            new WorkOrder { AccountId = 1, Status = "Open", AssignTo = "dispatcher-1" },
+            new WorkOrder { AccountId = 1, Status = "Open", AssignTo = "dispatcher-2" });
+        ctx.SaveChanges();
+
+        var stats = await NewService(ctx).GetStatsAsync(
+            AccountUser(1, "manager-1", "Manager"),
+            new DashboardStatsQueryDTO { DispatcherId = "dispatcher-2" },
+            CancellationToken.None);
+
+        stats.Total.Should().Be(1);
+    }
+
+    [Fact]
+    public async Task GetDashboardAsync_UnauthorizedRoleFailsClosed()
+    {
+        using var ctx = NewContext();
+        var service = NewService(ctx);
+        var user = AccountUser(1, "tech-1", "Technician");
+
+        var statsAct = () => service.GetStatsAsync(
+            user, new DashboardStatsQueryDTO(), CancellationToken.None);
+        var statsException = await statsAct.Should().ThrowAsync<WorkOrderBoardValidationException>();
+        statsException.Which.Code.Should().Be("Forbidden");
+
+        var workloadAct = () => service.GetWorkloadAsync(
+            user, new DashboardStatsQueryDTO(), 1, CancellationToken.None);
+        var workloadException = await workloadAct.Should().ThrowAsync<WorkOrderBoardValidationException>();
+        workloadException.Which.Code.Should().Be("Forbidden");
+
+        var performanceAct = () => service.GetPerformanceAsync(
+            user, new DashboardStatsQueryDTO(), 1, CancellationToken.None);
+        var performanceException = await performanceAct.Should().ThrowAsync<WorkOrderBoardValidationException>();
+        performanceException.Which.Code.Should().Be("Forbidden");
+
+        var regionsAct = () => service.GetRegionsAsync(
+            user, new DashboardStatsQueryDTO(), CancellationToken.None);
+        var regionsException = await regionsAct.Should().ThrowAsync<WorkOrderBoardValidationException>();
+        regionsException.Which.Code.Should().Be("Forbidden");
+    }
+
+    [Fact]
+    public async Task GetWorkloadAsync_IndividualSelectionPreservesRosterWithZeroRows()
+    {
+        using var ctx = NewContext();
+        ctx.Roles.Add(new IdentityRole
+        {
+            Id = "dispatcher-role",
+            Name = "Dispatcher",
+            NormalizedName = "DISPATCHER"
+        });
+        ctx.Users.AddRange(
+            new ApplicationUser { Id = "dispatcher-1", FirstName = "Ada", LastName = "One" },
+            new ApplicationUser { Id = "dispatcher-2", FirstName = "Ben", LastName = "Two" });
+        ctx.UserRoles.AddRange(
+            new IdentityUserRole<string> { UserId = "dispatcher-1", RoleId = "dispatcher-role" },
+            new IdentityUserRole<string> { UserId = "dispatcher-2", RoleId = "dispatcher-role" });
+        ctx.workOrders.AddRange(
+            new WorkOrder { AccountId = 1, AssignTo = "dispatcher-1", Status = "Open" },
+            new WorkOrder { AccountId = 1, AssignTo = "dispatcher-1", Status = "Open" });
+        ctx.SaveChanges();
+
+        var workload = await NewService(ctx).GetWorkloadAsync(
+            AccountUser(1, "admin-1"),
+            new DashboardStatsQueryDTO { DispatcherId = "dispatcher-1" },
+            1,
+            CancellationToken.None);
+
+        workload.TotalDispatchers.Should().Be(2);
+        workload.Items.Should().HaveCount(2);
+        workload.Items[0].DispatcherId.Should().Be("dispatcher-1");
+        workload.Items[0].TotalCount.Should().Be(2);
+        workload.Items[0].OpenCount.Should().Be(2);
+        workload.Items[1].DispatcherId.Should().Be("dispatcher-2");
+        workload.Items[1].TotalCount.Should().Be(0);
+        workload.Items[1].OpenCount.Should().Be(0);
+        workload.Page.Should().Be(1);
+        workload.PageSize.Should().Be(10);
+
+        var performance = await NewService(ctx).GetPerformanceAsync(
+            AccountUser(1, "admin-1"),
+            new DashboardStatsQueryDTO { DispatcherId = "dispatcher-1" },
+            1,
+            CancellationToken.None);
+
+        performance.TotalDispatchers.Should().Be(2);
+        performance.Items.Should().HaveCount(2);
+        performance.Items[0].DispatcherId.Should().Be("dispatcher-1");
+        performance.Items[0].AssignedCount.Should().Be(2);
+        performance.Items[1].DispatcherId.Should().Be("dispatcher-2");
+        performance.Items[1].AssignedCount.Should().Be(0);
+        performance.Items[1].CompletedCount.Should().Be(0);
+    }
+
+    [Fact]
+    public async Task GetPerformanceAsync_PopulatesAssignedAndCompletedCounts()
+    {
+        using var ctx = NewContext();
+        ctx.Roles.Add(new IdentityRole
+        {
+            Id = "dispatcher-role",
+            Name = "Dispatcher",
+            NormalizedName = "DISPATCHER"
+        });
+        ctx.Users.Add(new ApplicationUser { Id = "dispatcher-1", FirstName = "Ada", LastName = "One" });
+        ctx.UserRoles.Add(new IdentityUserRole<string>
+        {
+            UserId = "dispatcher-1",
+            RoleId = "dispatcher-role"
+        });
+        ctx.workOrders.AddRange(
+            new WorkOrder
+            {
+                AccountId = 1,
+                AssignTo = "dispatcher-1",
+                LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Completed
+            },
+            new WorkOrder
+            {
+                AccountId = 1,
+                AssignTo = "dispatcher-1",
+                LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Scheduled
+            },
+            new WorkOrder
+            {
+                AccountId = 1,
+                AssignTo = "dispatcher-1",
+                LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Canceled
+            });
+        ctx.SaveChanges();
+
+        var result = await NewService(ctx).GetPerformanceAsync(
+            AccountUser(1),
+            new DashboardStatsQueryDTO(),
+            1,
+            CancellationToken.None);
+
+        result.Items.Should().ContainSingle();
+        result.Items[0].AssignedCount.Should().Be(3);
+        result.Items[0].CompletedCount.Should().Be(1);
+    }
+
+    [Fact]
+    public async Task GetStatsAsync_StatusDistributionBucketsResolvedStatuses()
+    {
+        using var ctx = NewContext();
+        ctx.workOrders.AddRange(
+            new WorkOrder
+            {
+                AccountId = 1,
+                LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Scheduled
+            },
+            new WorkOrder { AccountId = 1, Status = "In Progress" },
+            new WorkOrder { AccountId = 1, Status = "Done" },
+            new WorkOrder { AccountId = 1, Status = "Done" },
+            new WorkOrder { AccountId = 1, Status = "Unparseable" });
+        ctx.SaveChanges();
+
+        var stats = await NewService(ctx).GetStatsAsync(
+            AccountUser(1, "admin-1"),
+            new DashboardStatsQueryDTO(),
+            CancellationToken.None);
+
+        stats.StatusDistribution.Should().HaveCount(4);
+        stats.StatusDistribution
+            .Select(bucket => (bucket.Status, bucket.Count))
+            .Should().BeEquivalentTo(new[]
+            {
+                (Status: "Completed", Count: 2),
+                (Status: "In Progress", Count: 1),
+                (Status: "Scheduled", Count: 1),
+                (Status: "Unknown", Count: 1)
+            });
+        stats.StatusDistribution.Sum(bucket => bucket.Count).Should().Be(5);
+    }
+
+    [Fact]
+    public async Task GetStatsAsync_StatusDistributionIsEmptyWithoutWorkOrders()
+    {
+        using var ctx = NewContext();
+
+        var stats = await NewService(ctx).GetStatsAsync(
+            AccountUser(1, "admin-1"),
+            new DashboardStatsQueryDTO(),
+            CancellationToken.None);
+
+        stats.StatusDistribution.Should().BeEmpty();
+    }
 }
diff --git a/Api.SeaHavenIndustries/Controllers/DashboardController.cs b/Api.SeaHavenIndustries/Controllers/DashboardController.cs
index 055b933..cc63f77 100644
--- a/Api.SeaHavenIndustries/Controllers/DashboardController.cs
+++ b/Api.SeaHavenIndustries/Controllers/DashboardController.cs
@@ -34,7 +34,8 @@ namespace Api.SeaHavenIndustries.Controllers
                 dueCount = stats.DueCount,
                 completedDueCount = stats.CompletedDueCount,
                 completionRate = stats.CompletionRate,
-                averageResolutionDays = stats.AverageResolutionDays
+                averageResolutionDays = stats.AverageResolutionDays,
+                statusDistribution = stats.StatusDistribution
             });
         }
 
diff --git a/SeaHaven.DataServices/Implementation/DashboardDataService.cs b/SeaHaven.DataServices/Implementation/DashboardDataService.cs
index a56f74f..f92d080 100644
--- a/SeaHaven.DataServices/Implementation/DashboardDataService.cs
+++ b/SeaHaven.DataServices/Implementation/DashboardDataService.cs
@@ -102,7 +102,6 @@ namespace SeaHaven.DataServices.Implementation
                                       on userRole.RoleId equals role.Id
                                   where user.IsDeleted != true
                                       && (role.Name == "Dispatcher" || role.Name == "DISPATCHER")
-                                      && (dispatcherId == null || user.Id == dispatcherId)
                                   select new
                                   {
                                       user.Id,
@@ -114,6 +113,9 @@ namespace SeaHaven.DataServices.Implementation
             if (accountId is int scopedAccountId)
                 workOrders = WorkOrderBoardQueryFilters.ApplyAccountScope(workOrders, scopedAccountId);
 
+            if (dispatcherId != null)
+                workOrders = workOrders.Where(w => w.AssignTo == dispatcherId);
+
             if (dateFrom is DateOnly from && dateTo is DateOnly to)
             {
                 var fromDate = from.ToDateTime(TimeOnly.MinValue);
diff --git a/SeaHaven.Services/DTOs/DashboardDTOs.cs b/SeaHaven.Services/DTOs/DashboardDTOs.cs
index a767a03..9c9d3a7 100644
--- a/SeaHaven.Services/DTOs/DashboardDTOs.cs
+++ b/SeaHaven.Services/DTOs/DashboardDTOs.cs
@@ -4,6 +4,7 @@ namespace SeaHaven.Services.DTOs
     {
         public DateOnly? DateFrom { get; set; }
         public DateOnly? DateTo { get; set; }
+        public string? DispatcherId { get; set; }
     }
 
     public sealed class DashboardWorkloadResponseDTO
@@ -38,6 +39,8 @@ namespace SeaHaven.Services.DTOs
         public string? Color { get; init; }
         public decimal CompletionRate { get; init; }
         public decimal? AverageResolutionDays { get; init; }
+        public int AssignedCount { get; init; }
+        public int CompletedCount { get; init; }
     }
 
     public sealed class DashboardRegionResponseDTO
@@ -80,6 +83,13 @@ namespace SeaHaven.Services.DTOs
         public int CompletedDueCount { get; set; }
         public decimal CompletionRate { get; set; }
         public decimal? AverageResolutionDays { get; set; }
+        public IReadOnlyList<DashboardStatusBucketDTO> StatusDistribution { get; set; } = [];
+    }
+
+    public sealed class DashboardStatusBucketDTO
+    {
+        public string Status { get; init; } = string.Empty;
+        public int Count { get; init; }
     }
 
     public sealed class DashboardBreakdownDTO
diff --git a/SeaHaven.Services/Helpers/DashboardMetrics.cs b/SeaHaven.Services/Helpers/DashboardMetrics.cs
index e49d921..885ac7d 100644
--- a/SeaHaven.Services/Helpers/DashboardMetrics.cs
+++ b/SeaHaven.Services/Helpers/DashboardMetrics.cs
@@ -61,9 +61,26 @@ public static class DashboardMetrics
             dueCount,
             completedDueCount,
             dueCount == 0 ? 0 : Math.Round((decimal)completedDueCount / dueCount * 100, 2),
-            resolutionDays.Count == 0 ? null : Math.Round(resolutionDays.Average(), 2));
+            resolutionDays.Count == 0 ? null : Math.Round(resolutionDays.Average(), 2),
+            BuildStatusDistribution(workOrders));
     }
 
+    private static IReadOnlyList<DashboardStatusBucketDTO> BuildStatusDistribution(
+        IReadOnlyList<DashboardWorkOrder> workOrders)
+        => workOrders
+            .GroupBy(workOrder => workOrder.LifecycleStatus
+                ?? LifecycleStatusMapper.ParseLifecycleStatus(workOrder.LegacyStatus))
+            .Select(group => new DashboardStatusBucketDTO
+            {
+                Status = group.Key.HasValue
+                    ? LifecycleStatusMapper.ToFeLabel(group.Key.Value)
+                    : "Unknown",
+                Count = group.Count()
+            })
+            .OrderByDescending(bucket => bucket.Count)
+            .ThenBy(bucket => bucket.Status, StringComparer.OrdinalIgnoreCase)
+            .ToList();
+
     private static bool IsPastDue(
         DashboardWorkOrder workOrder,
         LifecycleStatus? status,
@@ -110,4 +127,5 @@ public sealed record DashboardMetricResult(
     int DueCount,
     int CompletedDueCount,
     decimal CompletionRate,
-    decimal? AverageResolutionDays);
+    decimal? AverageResolutionDays,
+    IReadOnlyList<DashboardStatusBucketDTO> StatusDistribution);
diff --git a/SeaHaven.Services/Implementation/DashboardService.cs b/SeaHaven.Services/Implementation/DashboardService.cs
index 757dfb3..49c5c1f 100644
--- a/SeaHaven.Services/Implementation/DashboardService.cs
+++ b/SeaHaven.Services/Implementation/DashboardService.cs
@@ -26,11 +26,7 @@ namespace SeaHaven.Services.Implementation
             CancellationToken cancellationToken)
         {
             var accountId = _accountResolver.ResolveAccountFilter(user);
-            var dispatcherId = user.IsInRole("Dispatcher")
-                ? user.FindFirstValue(ClaimTypes.NameIdentifier)
-                : null;
-            if (user.IsInRole("Dispatcher") && string.IsNullOrWhiteSpace(dispatcherId))
-                throw new WorkOrderBoardValidationException("Forbidden", "Dispatcher identity is required.");
+            var dispatcherId = ResolveDispatcherScope(user, query);
 
             var counts = await _dataService.GetWorkOrderCountsAsync(accountId, cancellationToken);
             var workOrders = await _dataService.GetDashboardWorkOrdersAsync(
@@ -53,7 +49,8 @@ namespace SeaHaven.Services.Implementation
                 DueCount = metrics.DueCount,
                 CompletedDueCount = metrics.CompletedDueCount,
                 CompletionRate = metrics.CompletionRate,
-                AverageResolutionDays = metrics.AverageResolutionDays
+                AverageResolutionDays = metrics.AverageResolutionDays,
+                StatusDistribution = metrics.StatusDistribution
             };
         }
 
@@ -67,11 +64,7 @@ namespace SeaHaven.Services.Implementation
                 throw new ArgumentOutOfRangeException(nameof(page));
 
             var accountId = _accountResolver.ResolveAccountFilter(user);
-            var dispatcherId = user.IsInRole("Dispatcher")
-                ? user.FindFirstValue(ClaimTypes.NameIdentifier)
-                : null;
-            if (user.IsInRole("Dispatcher") && string.IsNullOrWhiteSpace(dispatcherId))
-                throw new WorkOrderBoardValidationException("Forbidden", "Dispatcher identity is required.");
+            var dispatcherId = ResolveDispatcherScope(user, query);
 
             var rows = await _dataService.GetDispatcherWorkloadAsync(
                 accountId,
@@ -113,11 +106,7 @@ namespace SeaHaven.Services.Implementation
                 throw new ArgumentOutOfRangeException(nameof(page));
 
             var accountId = _accountResolver.ResolveAccountFilter(user);
-            var dispatcherId = user.IsInRole("Dispatcher")
-                ? user.FindFirstValue(ClaimTypes.NameIdentifier)
-                : null;
-            if (user.IsInRole("Dispatcher") && string.IsNullOrWhiteSpace(dispatcherId))
-                throw new WorkOrderBoardValidationException("Forbidden", "Dispatcher identity is required.");
+            var dispatcherId = ResolveDispatcherScope(user, query);
 
             var directory = await _dataService.GetDispatcherWorkloadAsync(
                 accountId, dispatcherId, query.DateFrom, query.DateTo, cancellationToken);
@@ -135,7 +124,9 @@ namespace SeaHaven.Services.Implementation
                     DispatcherName = dispatcher.DispatcherName,
                     Color = dispatcher.Color,
                     CompletionRate = metrics.CompletionRate,
-                    AverageResolutionDays = metrics.AverageResolutionDays
+                    AverageResolutionDays = metrics.AverageResolutionDays,
+                    AssignedCount = metrics.Total,
+                    CompletedCount = metrics.Completed
                 };
             })
                 .OrderByDescending(row => row.CompletionRate)
@@ -159,11 +150,7 @@ namespace SeaHaven.Services.Implementation
             CancellationToken cancellationToken)
         {
             var accountId = _accountResolver.ResolveAccountFilter(user);
-            var dispatcherId = user.IsInRole("Dispatcher")
-                ? user.FindFirstValue(ClaimTypes.NameIdentifier)
-                : null;
-            if (user.IsInRole("Dispatcher") && string.IsNullOrWhiteSpace(dispatcherId))
-                throw new WorkOrderBoardValidationException("Forbidden", "Dispatcher identity is required.");
+            var dispatcherId = ResolveDispatcherScope(user, query);
 
             var workOrders = await _dataService.GetDashboardWorkOrdersAsync(
                 accountId, dispatcherId, query.DateFrom, query.DateTo, cancellationToken);
@@ -228,5 +215,33 @@ namespace SeaHaven.Services.Implementation
                 TotalVendors = rows.Count
             };
         }
+
+        private string? ResolveDispatcherScope(ClaimsPrincipal user, DashboardStatsQueryDTO query)
+        {
+            if (user.IsInRole("Dispatcher"))
+            {
+                var dispatcherId = user.FindFirstValue(ClaimTypes.NameIdentifier);
+                if (string.IsNullOrWhiteSpace(dispatcherId))
+                    throw new WorkOrderBoardValidationException("Forbidden", "Dispatcher identity is required.");
+                return dispatcherId;
+            }
+
+            if (user.IsInRole("Admin") || user.IsInRole("Manager"))
+            {
+                var selected = query.DispatcherId;
+                if (string.IsNullOrWhiteSpace(selected))
+                    return null;
+                if (selected.Equals("mine", StringComparison.OrdinalIgnoreCase))
+                {
+                    var identity = user.FindFirstValue(ClaimTypes.NameIdentifier);
+                    if (string.IsNullOrWhiteSpace(identity))
+                        throw new WorkOrderBoardValidationException("Forbidden", "Dispatcher identity is required.");
+                    return identity;
+                }
+                return selected;
+            }
+
+            throw new WorkOrderBoardValidationException("Forbidden", "Dashboard access requires an authorized role.");
+        }
     }
 }

From 69798b3e86d0aba51f855bfb8347eed5ad12089b Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 18:26:20 -0300
Subject: [PATCH 041/183] feat(permissions): protect configured account owner
 (SH-329)

---
 .../AccountOwnerDataServiceTests.cs           |   60 +
 .../UserServiceTests.cs                       |   37 +
 Api.SeaHavenIndustries/Program.cs             |    7 +
 .../Auth/ApplicationDbContext.cs              |    7 +
 ...1933_SH329_PrimaryAccountOwner.Designer.cs | 4018 +++++++++++++++++
 ...0260916211933_SH329_PrimaryAccountOwner.cs |   40 +
 .../ApplicationDbContextModelSnapshot.cs      |    8 +
 .../Implementation/AccountOwnerDataService.cs |   54 +
 .../Implementation/UserDataService.cs         |    9 +
 .../Interfaces/IAccountOwnerDataService.cs    |    6 +
 .../Interfaces/IUserDataService.cs            |    1 +
 .../Configuration/AccountOwnerOptions.cs      |    8 +
 .../DependencyInjection/ServicesModule.cs     |    1 +
 .../AccountOwnerDesignationService.cs         |   23 +
 .../Implementation/UserService.cs             |    8 +-
 .../IAccountOwnerDesignationService.cs        |    6 +
 ...orkOrderMediaConcurrencyRelationalTests.cs |    2 +-
 17 files changed, 4293 insertions(+), 2 deletions(-)
 create mode 100644 Api.SeaHavenIndustries.Tests/AccountOwnerDataServiceTests.cs
 create mode 100644 Data.SeaHavenIndustries/Migrations/20260916211933_SH329_PrimaryAccountOwner.Designer.cs
 create mode 100644 Data.SeaHavenIndustries/Migrations/20260916211933_SH329_PrimaryAccountOwner.cs
 create mode 100644 SeaHaven.DataServices/Implementation/AccountOwnerDataService.cs
 create mode 100644 SeaHaven.DataServices/Interfaces/IAccountOwnerDataService.cs
 create mode 100644 SeaHaven.Services/Configuration/AccountOwnerOptions.cs
 create mode 100644 SeaHaven.Services/Implementation/AccountOwnerDesignationService.cs
 create mode 100644 SeaHaven.Services/Interfaces/IAccountOwnerDesignationService.cs

diff --git a/Api.SeaHavenIndustries.Tests/AccountOwnerDataServiceTests.cs b/Api.SeaHavenIndustries.Tests/AccountOwnerDataServiceTests.cs
new file mode 100644
index 0000000..fad450d
--- /dev/null
+++ b/Api.SeaHavenIndustries.Tests/AccountOwnerDataServiceTests.cs
@@ -0,0 +1,60 @@
+using Data.SeaHavenIndustries;
+using FluentAssertions;
+using Microsoft.EntityFrameworkCore;
+using SeaHaven.DataServices.Implementation;
+using Xunit;
+
+namespace Api.SeaHavenIndustries.Tests;
+
+public class AccountOwnerDataServiceTests
+{
+    private static ApplicationDbContext NewContext()
+    {
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseInMemoryDatabase(Guid.NewGuid().ToString())
+            .Options;
+        return new ApplicationDbContext(options);
+    }
+
+    [Fact]
+    public async Task EnsureConfiguredOwnerAsync_MarksOnlyConfiguredUser()
+    {
+        await using var context = NewContext();
+        context.Users.AddRange(
+            new ApplicationUser { Id = "old-owner", UserName = "old@example.com", IsAccountOwner = true },
+            new ApplicationUser { Id = "configured-owner", UserName = "configured@example.com" });
+        await context.SaveChangesAsync();
+
+        var service = new AccountOwnerDataService(context);
+        (await service.EnsureConfiguredOwnerAsync(" configured-owner ", CancellationToken.None)).Should().BeTrue();
+
+        (await context.Users.SingleAsync(user => user.Id == "old-owner")).IsAccountOwner.Should().BeFalse();
+        (await context.Users.SingleAsync(user => user.Id == "configured-owner")).IsAccountOwner.Should().BeTrue();
+    }
+
+    [Fact]
+    public async Task EnsureConfiguredOwnerAsync_WithNoConfiguration_ClearsExistingOwner()
+    {
+        await using var context = NewContext();
+        context.Users.Add(new ApplicationUser { Id = "owner", UserName = "owner@example.com", IsAccountOwner = true });
+        await context.SaveChangesAsync();
+
+        var service = new AccountOwnerDataService(context);
+        (await service.EnsureConfiguredOwnerAsync(null, CancellationToken.None)).Should().BeTrue();
+        (await service.EnsureConfiguredOwnerAsync("  ", CancellationToken.None)).Should().BeFalse();
+
+        (await context.Users.SingleAsync()).IsAccountOwner.Should().BeFalse();
+    }
+
+    [Fact]
+    public async Task EnsureConfiguredOwnerAsync_RejectsUnknownUser()
+    {
+        await using var context = NewContext();
+        var service = new AccountOwnerDataService(context);
+
+        var action = () => service.EnsureConfiguredOwnerAsync("missing", CancellationToken.None);
+
+        await action.Should().ThrowAsync<InvalidOperationException>()
+            .WithMessage("The configured account owner user was not found.");
+    }
+}
diff --git a/Api.SeaHavenIndustries.Tests/UserServiceTests.cs b/Api.SeaHavenIndustries.Tests/UserServiceTests.cs
index d2364bb..916d0ec 100644
--- a/Api.SeaHavenIndustries.Tests/UserServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/UserServiceTests.cs
@@ -90,6 +90,23 @@ public class UserServiceTests
         userData.Verify(u => u.DeleteUserWithCascadeAsync(user, It.IsAny<CancellationToken>()), Times.Once);
     }
 
+    [Fact]
+    public async Task DeleteUser_AccountOwner_ReturnsForbiddenWithoutCascade()
+    {
+        var user = IdentityTestHelpers.User("owner");
+        var userData = new Mock<IUserDataService>();
+        userData.Setup(u => u.GetForEditAsync("owner", It.IsAny<CancellationToken>())).ReturnsAsync(user);
+        userData.Setup(u => u.IsAccountOwnerAsync("owner", It.IsAny<CancellationToken>())).ReturnsAsync(true);
+
+        var service = NewService(userData, new Mock<IEmailSender>(), out _);
+
+        var outcome = await service.DeleteUserAsync("owner", Principal("Admin"), CancellationToken.None);
+
+        outcome.Success.Should().BeFalse();
+        outcome.Error.Should().Be(UserMutationErrors.Forbidden);
+        userData.Verify(u => u.DeleteUserWithCascadeAsync(It.IsAny<ApplicationUser>(), It.IsAny<CancellationToken>()), Times.Never);
+    }
+
     [Fact]
     public async Task DeleteUser_NonAdmin_ReturnsForbiddenWithoutCascade()
     {
@@ -138,6 +155,26 @@ public class UserServiceTests
         outcome.Error.Should().Be(UserMutationErrors.UserNotFound);
     }
 
+    [Fact]
+    public async Task EditUser_AccountOwner_ReturnsForbiddenWithoutMutation()
+    {
+        var user = IdentityTestHelpers.User("owner");
+        var userData = new Mock<IUserDataService>();
+        userData.Setup(u => u.GetForEditAsync("owner", It.IsAny<CancellationToken>())).ReturnsAsync(user);
+        userData.Setup(u => u.IsAccountOwnerAsync("owner", It.IsAny<CancellationToken>())).ReturnsAsync(true);
+
+        var service = NewService(userData, new Mock<IEmailSender>(), out _);
+
+        var outcome = await service.EditUserAsync(
+            new EditUserRequestDTO { Id = "owner", Email = "owner@example.com", Name = "Owner", Role = "User" },
+            Principal("Admin"),
+            CancellationToken.None);
+
+        outcome.Success.Should().BeFalse();
+        outcome.Error.Should().Be(UserMutationErrors.Forbidden);
+        userData.Verify(u => u.UpdateUserAsync(It.IsAny<ApplicationUser>(), It.IsAny<CancellationToken>()), Times.Never);
+    }
+
     [Fact]
     public async Task GetUserProfile_MapsCreatedDateToAddedDate()
     {
diff --git a/Api.SeaHavenIndustries/Program.cs b/Api.SeaHavenIndustries/Program.cs
index f220dfa..6baf11f 100644
--- a/Api.SeaHavenIndustries/Program.cs
+++ b/Api.SeaHavenIndustries/Program.cs
@@ -222,6 +222,13 @@ app.UseAuthorization();
 
 app.MapControllers();
 
+using (var ownerScope = app.Services.CreateScope())
+{
+    await ownerScope.ServiceProvider
+        .GetRequiredService<IAccountOwnerDesignationService>()
+        .EnsureConfiguredOwnerAsync(CancellationToken.None);
+}
+
 //if (app.Environment.IsDevelopment())
 //{
 //    using var scope = app.Services.CreateScope();
diff --git a/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs b/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs
index f322ed8..870a127 100644
--- a/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs
+++ b/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs
@@ -170,6 +170,12 @@ namespace Data.SeaHavenIndustries
             builder.Entity<ApplicationUser>()
                 .HasIndex(u => u.AccountId);
 
+            builder.Entity<ApplicationUser>()
+                .HasIndex(u => u.IsAccountOwner)
+                .IsUnique()
+                .HasFilter("IsAccountOwner = 1")
+                .HasDatabaseName("IX_AspNetUsers_IsAccountOwner");
+
             builder.Entity<VendorCompany>()
                 .HasIndex(c => c.NormalizedName)
                 .IsUnique();
@@ -385,6 +391,7 @@ namespace Data.SeaHavenIndustries
         public string? Initials { get; set; }
         public string? Color { get; set; }
         public int? Type { get; set; } // 1 for users 0 for admin
+        public bool IsAccountOwner { get; set; }
         /// <summary>Optional CRM account membership for server-derived media scope (SH-221).</summary>
         public int? AccountId { get; set; }
         [ForeignKey(nameof(AccountId))]
diff --git a/Data.SeaHavenIndustries/Migrations/20260916211933_SH329_PrimaryAccountOwner.Designer.cs b/Data.SeaHavenIndustries/Migrations/20260916211933_SH329_PrimaryAccountOwner.Designer.cs
new file mode 100644
index 0000000..62712c1
--- /dev/null
+++ b/Data.SeaHavenIndustries/Migrations/20260916211933_SH329_PrimaryAccountOwner.Designer.cs
@@ -0,0 +1,4018 @@
+// <auto-generated />
+using System;
+using Data.SeaHavenIndustries;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Metadata;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+
+#nullable disable
+
+namespace Data.SeaHavenIndustries.Migrations
+{
+    [DbContext(typeof(ApplicationDbContext))]
+    [Migration("20260916211933_SH329_PrimaryAccountOwner")]
+    partial class SH329_PrimaryAccountOwner
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasAnnotation("ProductVersion", "8.0.8")
+                .HasAnnotation("Relational:MaxIdentifierLength", 128);
+
+            SqlServerModelBuilderExtensions.UseIdentityColumns(modelBuilder);
+
+            modelBuilder.HasSequence("WorkOrderInternalNumberSequence");
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Accounts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("CurrencyCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Importance")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("IndustryId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("OwnerEmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Phone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PrivacySetting")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ServiceInstructions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Tags")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("TerritoryId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("TimeZone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Type")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Website")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Accounts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Addresses", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AddressType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Country")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("County")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("ContactId");
+
+                    b.ToTable("Addresses");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int>("AccessFailedCount")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Color")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ConcurrencyStamp")
+                        .IsConcurrencyToken()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Contact")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DeletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<bool>("EmailConfirmed")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("FirstName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Initials")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsAccountOwner")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("LastName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Locations")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("LockoutEnabled")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTimeOffset?>("LockoutEnd")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("NormalizedEmail")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("NormalizedUserName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("PasswordHash")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("PhoneNumberConfirmed")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("SecurityStamp")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("TwoFactorEnabled")
+                        .HasColumnType("bit");
+
+                    b.Property<int?>("Type")
+                        .HasColumnType("int");
+
+                    b.Property<string>("UniqueName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserImage")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("IsAccountOwner")
+                        .IsUnique()
+                        .HasDatabaseName("IX_AspNetUsers_IsAccountOwner")
+                        .HasFilter("IsAccountOwner = 1");
+
+                    b.HasIndex("NormalizedEmail")
+                        .HasDatabaseName("EmailIndex");
+
+                    b.HasIndex("NormalizedUserName")
+                        .IsUnique()
+                        .HasDatabaseName("UserNameIndex")
+                        .HasFilter("[NormalizedUserName] IS NOT NULL");
+
+                    b.ToTable("AspNetUsers", (string)null);
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Area", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("Areas");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("AssetCode")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Assets");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Category", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Categories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Comments", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CommentType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Commenter")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Commenttext")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Documents")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalCommentId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("ExternalSourceEmailS3Key")
+                        .HasMaxLength(2048)
+                        .HasColumnType("nvarchar(2048)");
+
+                    b.Property<DateTimeOffset?>("ExternalUpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalVersionHash")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RecordType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int?>("WorkerOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("UserId");
+
+                    b.HasIndex("WorkerOrderId");
+
+                    b.ToTable("Comments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.CompletionDocTemplate", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ServiceKey")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("TemplateUrl")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ServiceKey", "IsActive");
+
+                    b.ToTable("CompletionDocTemplates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ContactDetails", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DateOfBirth")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Gender")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PrivacySetting")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Tags")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Territory")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.ToTable("ContactDetails");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ContactType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FirstName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LastName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("MiddleName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Owner")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("SiteContactOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Title")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Contacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Department", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Departments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AcceptToken")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("AcknowledgedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CommercialStatusUpdatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CompletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DispatchNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DispatchedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("EmailSent")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("EstimatedArrivalAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("EtaManualOverride")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("InvoiceNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("InvoiceStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<decimal?>("NTEAmount")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<string>("PONumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PaymentStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ReplyToAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<DateTime?>("ScheduledDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TechPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("VendorNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<DateTime?>("VerifiedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("VerifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("Dispatches");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchChecklistItem", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CompletedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("CompletedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool>("IsCompleted")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ItemText")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("DispatchChecklistItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchSignoff", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Signature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignatureMethod")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("SignedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("SignoffType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.ToTable("DispatchSignoffs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchUpliftRequest", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<decimal?>("CurrentNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<DateTime?>("DecidedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DecidedByUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DecisionNote")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("EscalatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("EvidenceDocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("ExpiresAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("InitialNotificationSentAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("NotificationError")
+                        .HasMaxLength(500)
+                        .HasColumnType("nvarchar(500)");
+
+                    b.Property<string>("NotificationStatus")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<string>("RequestKey")
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<string>("RequestedByVendorName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<decimal>("RequestedNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<int>("RequiredTier")
+                        .HasColumnType("int");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<string>("Status")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<string>("VendorReason")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId")
+                        .IsUnique()
+                        .HasFilter("[Status] IN ('Pending', 'ChangesRequested')");
+
+                    b.HasIndex("EvidenceDocumentId");
+
+                    b.HasIndex("DispatchId", "RequestKey")
+                        .IsUnique()
+                        .HasFilter("[RequestKey] IS NOT NULL");
+
+                    b.ToTable("DispatchUpliftRequests");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchWorkOrder", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("DispatchWorkOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DropdownOption", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Category")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ParentValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Value")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("DropdownOptions");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("CanChangeProviderNumber")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ConfirmUserName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DateOfBirth")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DepartmentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("EmployeeNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FirstName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Gender")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("HireDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<int?>("JobTitleId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("LastLogin")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LastName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("MiddleName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("PermissionGroupId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("RegionId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("SMSAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TimeZone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Website")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DepartmentId");
+
+                    b.HasIndex("JobTitleId");
+
+                    b.HasIndex("RegionId");
+
+                    b.ToTable("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeAddress", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CountryCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CountyId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("StateCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Street")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("StreetLineTwo")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId")
+                        .IsUnique();
+
+                    b.ToTable("EmployeeAddresses");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeEmail", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<int?>("EmailTypeId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsPrimary")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.ToTable("EmployeeEmails");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeePhone", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Extension")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsPrimary")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Number")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("PhoneTypeId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.ToTable("EmployeePhones");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Events", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("AllDay")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("EndDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("EndTime")
+                        .HasMaxLength(10)
+                        .HasColumnType("nvarchar(10)");
+
+                    b.Property<string>("EventColor")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Location")
+                        .HasMaxLength(150)
+                        .HasColumnType("nvarchar(150)");
+
+                    b.Property<int?>("RecordID")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RecordName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("RecordTargetType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("ReminderMinutes")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime>("StartDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("StartTime")
+                        .HasMaxLength(10)
+                        .HasColumnType("nvarchar(10)");
+
+                    b.Property<string>("Title")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Events");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.FollowUps", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Reason")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("ScheduleDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<TimeSpan>("ScheduleStartTime")
+                        .HasColumnType("time");
+
+                    b.Property<string>("Status")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.HasIndex("LocationId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("FollowUps");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ForgetPasswordCode", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Code")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Email")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("ForgetPasswordCodes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.JobTitle", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("JobTitles");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalLocationId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Latitude")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Longitude")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Title")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.ToTable("Locations");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.PMSchedules", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AssetId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Frequency")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("StartDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AssetId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("PMSchedules");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BillingAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("Date")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ProjectName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("QuotId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ShippingAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("Quotes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.QuotesLineItems", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Descriptions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<decimal?>("Lineitem")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<int?>("LineitemNumber")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("QuoteId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("QuoteId");
+
+                    b.ToTable("QuotesLines");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Region", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Regions");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.SitePreferredVendor", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Trade")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("UpdatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("LocationId", "VendorId")
+                        .IsUnique()
+                        .HasFilter("[Trade] IS NULL");
+
+                    b.HasIndex("LocationId", "VendorId", "Trade")
+                        .IsUnique()
+                        .HasFilter("[Trade] IS NOT NULL");
+
+                    b.ToTable("SitePreferredVendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplate", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("TaskListTemplates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplateItem", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ItemText")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<int>("TaskListTemplateId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("TaskListTemplateId");
+
+                    b.ToTable("TaskListTemplateItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Template", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AfterPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AfterPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AssignTo")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DueDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Priority")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffSignature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderTitle")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AssignTo");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Templates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Trade", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("Trades");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserPermissionOverride", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("PermissionKey")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<int>("State")
+                        .HasColumnType("int");
+
+                    b.HasKey("UserId", "PermissionKey");
+
+                    b.HasIndex("UserId", "PermissionKey")
+                        .IsUnique()
+                        .HasDatabaseName("IX_UserPermissionOverrides_UserId_PermissionKey");
+
+                    b.ToTable("UserPermissionOverrides");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AvailabilityStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("AvailabilityUpdatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CompanyId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CompanyName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CompanyPhone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ContactName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("GoogleMapsUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Phone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PreferredContact")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TradeSpecialties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CompanyId");
+
+                    b.ToTable("Vendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAccessToken", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime>("ExpiresAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime>("IssuedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("LastUsedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("RevokedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Token")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Token")
+                        .IsUnique();
+
+                    b.HasIndex("VendorId");
+
+                    b.ToTable("VendorAccessTokens");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAuditLog", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Actor")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("FieldName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NewValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("OldValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.ToTable("VendorAuditLogs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("AreaId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CompanyPhone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("GoogleMapsUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AreaId");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("VendorCompanies");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompletionDocument", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ContentType")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("OriginalFileName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Purpose")
+                        .IsRequired()
+                        .HasMaxLength(30)
+                        .HasColumnType("nvarchar(30)");
+
+                    b.Property<string>("RejectionReason")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ReplacesDocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ReviewStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ReviewedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ScanStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ScannedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<long>("SizeBytes")
+                        .HasColumnType("bigint");
+
+                    b.Property<string>("StoredFileName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("Version")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("VendorCompletionDocuments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("AdditionalContacts")
+                        .HasMaxLength(4000)
+                        .HasColumnType("nvarchar(4000)");
+
+                    b.Property<string>("AfterPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AfterPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateOnly?>("AssignDate")
+                        .HasColumnType("date");
+
+                    b.Property<string>("AssignTo")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("AvetaRequired")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("AvettaTask")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Building")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("CarriedOver")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CompletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Customer")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DateReported")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("DocStatus")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("DueDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ExternalAssignedTo")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<DateTimeOffset?>("ExternalLastOccurredAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalRecordType")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset?>("ExternalUpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalVersionHash")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("ExternalWorkOrderId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ExtraServices")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<string>("FlagColor")
+                        .HasMaxLength(7)
+                        .HasColumnType("nvarchar(7)");
+
+                    b.Property<string>("FrozenCompany")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FrozenPoc")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FrozenSite")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("InternalWONumber")
+                        .HasMaxLength(11)
+                        .HasColumnType("nvarchar(11)");
+
+                    b.Property<bool>("IsAddOn")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LegacyStatus")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("LifecycleStatus")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("OperationalFlags")
+                        .HasColumnType("int");
+
+                    b.Property<DateOnly?>("OriginalDate")
+                        .HasColumnType("date");
+
+                    b.Property<DateOnly?>("OriginalWeek")
+                        .HasColumnType("date");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PocName")
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("PocNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<string>("PocPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int?>("PrimaryDispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Priority")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Problem")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("RescheduleCount")
+                        .HasColumnType("int");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<bool?>("ScheduleWeekOnly")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("ScheduledDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("ScheduledEnd")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("ScheduledStart")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Service")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("ServiceNotes")
+                        .HasMaxLength(4000)
+                        .HasColumnType("nvarchar(4000)");
+
+                    b.Property<string>("Severity")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffSignature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteCode")
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<string>("Source")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SourceEmailS3Key")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SubTrade")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateOnly?>("TargetWeek")
+                        .HasColumnType("date");
+
+                    b.Property<string>("TechPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<string>("Trade")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<decimal?>("VendorNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<string>("VendorNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<int?>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("WorkerOrderNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderTitle")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("istemplate")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("ExternalWorkOrderId")
+                        .IsUnique()
+                        .HasFilter("[ExternalWorkOrderId] IS NOT NULL AND [ExternalWorkOrderId] <> ''");
+
+                    b.HasIndex("InternalWONumber")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.HasIndex("LocationId");
+
+                    b.HasIndex("PrimaryDispatchId");
+
+                    b.HasIndex("ScheduledDate");
+
+                    b.HasIndex("SiteCode")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.HasIndex("WorkOrderType");
+
+                    b.HasIndex("AssignTo", "ScheduledDate");
+
+                    b.HasIndex("LifecycleStatus", "ScheduledDate")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.ToTable("workOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAttachments", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Category")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("workOrderAttachments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAuditLog", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Action")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ActorType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CorrelationId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("EventType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FieldName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NewValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("OldValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UserId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("WorkOrderAuditLogs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderCategories", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("workOrderCategories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderContacts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("WorkOrderContacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderExternalReceipt", b =>
+                {
+                    b.Property<long>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("bigint");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<long>("Id"));
+
+                    b.Property<string>("ExternalId")
+                        .IsRequired()
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Kind")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<DateTimeOffset>("ProcessedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("Source")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset>("UpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("VersionHash")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Source", "Kind", "ExternalId")
+                        .IsUnique()
+                        .HasDatabaseName("IX_WorkOrderExternalReceipts_Source_Kind_ExternalId");
+
+                    b.ToTable("WorkOrderExternalReceipts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderFieldLock", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("FieldName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<DateTime>("LockedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("LockedByUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkOrderId", "FieldName")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderFieldLocks");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderReconciliationJob", b =>
+                {
+                    b.Property<int>("Id")
+                        .HasColumnType("int");
+
+                    b.Property<int>("CommentsProcessed")
+                        .HasColumnType("int");
+
+                    b.Property<DateTimeOffset?>("CompletedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ErrorCode")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<Guid?>("FenceToken")
+                        .HasColumnType("uniqueidentifier");
+
+                    b.Property<DateTimeOffset?>("LeaseExpiresAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("Reason")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset?>("RequestedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<Guid>("RunId")
+                        .HasColumnType("uniqueidentifier");
+
+                    b.Property<DateTimeOffset?>("StartedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("State")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<int>("WorkOrdersProcessed")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("State");
+
+                    b.ToTable("WorkOrderReconciliationJobs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWebhookDelivery", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BodySha256")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("DeliveryId")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("EventType")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<DateTimeOffset>("OccurredAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<DateTimeOffset>("ProcessedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DeliveryId")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderWebhookDeliveries");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWeekRolledLedger", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CorrelationId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("ProcessedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateOnly>("SourceWeekStart")
+                        .HasColumnType("date");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkOrderId", "SourceWeekStart")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderWeekRolledLedgers");
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRole", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ConcurrencyStamp")
+                        .IsConcurrencyToken()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("NormalizedName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique()
+                        .HasDatabaseName("RoleNameIndex")
+                        .HasFilter("[NormalizedName] IS NOT NULL");
+
+                    b.ToTable("AspNetRoles", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRoleClaim<string>", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ClaimType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ClaimValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("RoleId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AspNetRoleClaims", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserClaim<string>", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ClaimType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ClaimValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UserId");
+
+                    b.ToTable("AspNetUserClaims", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserLogin<string>", b =>
+                {
+                    b.Property<string>("LoginProvider")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ProviderKey")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ProviderDisplayName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("LoginProvider", "ProviderKey");
+
+                    b.HasIndex("UserId");
+
+                    b.ToTable("AspNetUserLogins", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserRole<string>", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("RoleId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("UserId", "RoleId");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AspNetUserRoles", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserToken<string>", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("LoginProvider")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Value")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("UserId", "LoginProvider", "Name");
+
+                    b.ToTable("AspNetUserTokens", (string)null);
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Addresses", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany("Addresses")
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contact")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Contact");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Comments", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("Comments")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "ApplicationUser")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Comments")
+                        .HasForeignKey("WorkerOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("ApplicationUser");
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ContactDetails", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contact")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Contact");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany("Contacts")
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany("Contacts")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("Dispatches")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Dispatches")
+                        .HasForeignKey("WorkOrderId");
+
+                    b.Navigation("Vendor");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchChecklistItem", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("ChecklistItems")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchSignoff", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("Signoffs")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchUpliftRequest", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany()
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.VendorCompletionDocument", "EvidenceDocument")
+                        .WithMany()
+                        .HasForeignKey("EvidenceDocumentId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("EvidenceDocument");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchWorkOrder", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("DispatchWorkOrders")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Department", "Department")
+                        .WithMany("Employees")
+                        .HasForeignKey("DepartmentId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.JobTitle", "JobTitle")
+                        .WithMany("Employees")
+                        .HasForeignKey("JobTitleId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Region", "Region")
+                        .WithMany("Employees")
+                        .HasForeignKey("RegionId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Department");
+
+                    b.Navigation("JobTitle");
+
+                    b.Navigation("Region");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeAddress", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithOne("Address")
+                        .HasForeignKey("Data.SeaHavenIndustries.EmployeeAddress", "EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeEmail", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany("Emails")
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeePhone", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany("Phones")
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.FollowUps", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany()
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Employee");
+
+                    b.Navigation("Location");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.PMSchedules", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Assets", "Asset")
+                        .WithMany("PMSchedules")
+                        .HasForeignKey("AssetId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Asset");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contacts")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Quotes")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Contacts");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.QuotesLineItems", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Quotes", "Quotes")
+                        .WithMany("LineItems")
+                        .HasForeignKey("QuoteId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Quotes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.SitePreferredVendor", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("SitePreferences")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Location");
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplateItem", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.TaskListTemplate", "Template")
+                        .WithMany("Items")
+                        .HasForeignKey("TaskListTemplateId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Template");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Template", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "AssignToUser")
+                        .WithMany("Templates")
+                        .HasForeignKey("AssignTo")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Category", "Category")
+                        .WithMany("Templates")
+                        .HasForeignKey("CategoryId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "POC")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Locations")
+                        .WithMany("Templates")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("AssignToUser");
+
+                    b.Navigation("Category");
+
+                    b.Navigation("Locations");
+
+                    b.Navigation("POC");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserPermissionOverride", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("User");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.VendorCompany", "Company")
+                        .WithMany("Vendors")
+                        .HasForeignKey("CompanyId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Company");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAccessToken", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany()
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAuditLog", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("AuditLogs")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Area", "Area")
+                        .WithMany()
+                        .HasForeignKey("AreaId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Area");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompletionDocument", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("CompletionDocuments")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany()
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("Vendor");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "AssignToUser")
+                        .WithMany("WorkOrders")
+                        .HasForeignKey("AssignTo")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Locations")
+                        .WithMany("workOrders")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "PrimaryDispatch")
+                        .WithMany()
+                        .HasForeignKey("PrimaryDispatchId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("AssignToUser");
+
+                    b.Navigation("Locations");
+
+                    b.Navigation("PrimaryDispatch");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAttachments", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("workOrderAttachments")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAuditLog", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("User");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderCategories", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Category", "Category")
+                        .WithMany("WorkOrderCategories")
+                        .HasForeignKey("CategoryId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("WorkOrderCategories")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Category");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderContacts", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "POC")
+                        .WithMany("WorkOrderContacts")
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("WorkOrderContacts")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("POC");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderFieldLock", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("FieldLocks")
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWeekRolledLedger", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRoleClaim<string>", b =>
+                {
+                    b.HasOne("Microsoft.AspNetCore.Identity.IdentityRole", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserClaim<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserLogin<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserRole<string>", b =>
+                {
+                    b.HasOne("Microsoft.AspNetCore.Identity.IdentityRole", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserToken<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Accounts", b =>
+                {
+                    b.Navigation("Addresses");
+
+                    b.Navigation("Contacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.Navigation("Templates");
+
+                    b.Navigation("WorkOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.Navigation("PMSchedules");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Category", b =>
+                {
+                    b.Navigation("Templates");
+
+                    b.Navigation("WorkOrderCategories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.Navigation("WorkOrderContacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Department", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.Navigation("ChecklistItems");
+
+                    b.Navigation("Comments");
+
+                    b.Navigation("CompletionDocuments");
+
+                    b.Navigation("DispatchWorkOrders");
+
+                    b.Navigation("Signoffs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.Navigation("Address");
+
+                    b.Navigation("Emails");
+
+                    b.Navigation("Phones");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.JobTitle", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.Navigation("Contacts");
+
+                    b.Navigation("Templates");
+
+                    b.Navigation("workOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.Navigation("LineItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Region", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplate", b =>
+                {
+                    b.Navigation("Items");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.Navigation("AuditLogs");
+
+                    b.Navigation("Dispatches");
+
+                    b.Navigation("SitePreferences");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.Navigation("Vendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.Navigation("Comments");
+
+                    b.Navigation("Dispatches");
+
+                    b.Navigation("FieldLocks");
+
+                    b.Navigation("Quotes");
+
+                    b.Navigation("WorkOrderCategories");
+
+                    b.Navigation("WorkOrderContacts");
+
+                    b.Navigation("workOrderAttachments");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/Data.SeaHavenIndustries/Migrations/20260916211933_SH329_PrimaryAccountOwner.cs b/Data.SeaHavenIndustries/Migrations/20260916211933_SH329_PrimaryAccountOwner.cs
new file mode 100644
index 0000000..9a808a0
--- /dev/null
+++ b/Data.SeaHavenIndustries/Migrations/20260916211933_SH329_PrimaryAccountOwner.cs
@@ -0,0 +1,40 @@
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Data.SeaHavenIndustries.Migrations
+{
+    /// <inheritdoc />
+    public partial class SH329_PrimaryAccountOwner : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.AddColumn<bool>(
+                name: "IsAccountOwner",
+                table: "AspNetUsers",
+                type: "bit",
+                nullable: false,
+                defaultValue: false);
+
+            migrationBuilder.CreateIndex(
+                name: "IX_AspNetUsers_IsAccountOwner",
+                table: "AspNetUsers",
+                column: "IsAccountOwner",
+                unique: true,
+                filter: "IsAccountOwner = 1");
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropIndex(
+                name: "IX_AspNetUsers_IsAccountOwner",
+                table: "AspNetUsers");
+
+            migrationBuilder.DropColumn(
+                name: "IsAccountOwner",
+                table: "AspNetUsers");
+        }
+    }
+}
diff --git a/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs b/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
index b68965a..e87b2d4 100644
--- a/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
+++ b/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
@@ -220,6 +220,9 @@ namespace Data.SeaHavenIndustries.Migrations
                     b.Property<string>("Initials")
                         .HasColumnType("nvarchar(max)");
 
+                    b.Property<bool>("IsAccountOwner")
+                        .HasColumnType("bit");
+
                     b.Property<bool?>("IsDeleted")
                         .HasColumnType("bit");
 
@@ -275,6 +278,11 @@ namespace Data.SeaHavenIndustries.Migrations
 
                     b.HasIndex("AccountId");
 
+                    b.HasIndex("IsAccountOwner")
+                        .IsUnique()
+                        .HasDatabaseName("IX_AspNetUsers_IsAccountOwner")
+                        .HasFilter("IsAccountOwner = 1");
+
                     b.HasIndex("NormalizedEmail")
                         .HasDatabaseName("EmailIndex");
 
diff --git a/SeaHaven.DataServices/Implementation/AccountOwnerDataService.cs b/SeaHaven.DataServices/Implementation/AccountOwnerDataService.cs
new file mode 100644
index 0000000..bcd4a33
--- /dev/null
+++ b/SeaHaven.DataServices/Implementation/AccountOwnerDataService.cs
@@ -0,0 +1,54 @@
+using Data.SeaHavenIndustries;
+using Microsoft.EntityFrameworkCore;
+using SeaHaven.DataServices.Interfaces;
+
+namespace SeaHaven.DataServices.Implementation;
+
+public sealed class AccountOwnerDataService : IAccountOwnerDataService
+{
+    private readonly ApplicationDbContext _context;
+
+    public AccountOwnerDataService(ApplicationDbContext context)
+    {
+        _context = context;
+    }
+
+    public async Task<bool> EnsureConfiguredOwnerAsync(
+        string? configuredUserId,
+        CancellationToken cancellationToken)
+    {
+        var ownerId = string.IsNullOrWhiteSpace(configuredUserId)
+            ? null
+            : configuredUserId.Trim();
+
+        if (ownerId is not null)
+        {
+            var configuredUserExists = await _context.Users
+                .AsNoTracking()
+                .AnyAsync(user => user.Id == ownerId, cancellationToken);
+
+            if (!configuredUserExists)
+                throw new InvalidOperationException("The configured account owner user was not found.");
+        }
+
+        var ownerRows = await _context.Users
+            .Where(user => user.IsAccountOwner || (ownerId != null && user.Id == ownerId))
+            .ToListAsync(cancellationToken);
+
+        var changed = false;
+        foreach (var user in ownerRows)
+        {
+            var shouldBeOwner = ownerId is not null && user.Id == ownerId;
+            if (user.IsAccountOwner != shouldBeOwner)
+            {
+                user.IsAccountOwner = shouldBeOwner;
+                changed = true;
+            }
+        }
+
+        if (changed)
+            await _context.SaveChangesAsync(cancellationToken);
+
+        return changed;
+    }
+}
diff --git a/SeaHaven.DataServices/Implementation/UserDataService.cs b/SeaHaven.DataServices/Implementation/UserDataService.cs
index f5dbb70..ccb054f 100644
--- a/SeaHaven.DataServices/Implementation/UserDataService.cs
+++ b/SeaHaven.DataServices/Implementation/UserDataService.cs
@@ -93,6 +93,15 @@ namespace SeaHaven.DataServices.Implementation
                 .FirstOrDefaultAsync(cancellationToken);
         }
 
+        public async Task<bool> IsAccountOwnerAsync(string userId, CancellationToken cancellationToken)
+        {
+            return await _context.Users
+                .AsNoTracking()
+                .Where(user => user.Id == userId)
+                .Select(user => user.IsAccountOwner)
+                .SingleOrDefaultAsync(cancellationToken);
+        }
+
         public async Task<ApplicationUser?> GetByEmailNormalizedAsync(string email, CancellationToken cancellationToken)
         {
             var normalizedEmail = email.Trim().ToUpperInvariant();
diff --git a/SeaHaven.DataServices/Interfaces/IAccountOwnerDataService.cs b/SeaHaven.DataServices/Interfaces/IAccountOwnerDataService.cs
new file mode 100644
index 0000000..f146f3c
--- /dev/null
+++ b/SeaHaven.DataServices/Interfaces/IAccountOwnerDataService.cs
@@ -0,0 +1,6 @@
+namespace SeaHaven.DataServices.Interfaces;
+
+public interface IAccountOwnerDataService
+{
+    Task<bool> EnsureConfiguredOwnerAsync(string? configuredUserId, CancellationToken cancellationToken);
+}
diff --git a/SeaHaven.DataServices/Interfaces/IUserDataService.cs b/SeaHaven.DataServices/Interfaces/IUserDataService.cs
index 40dc64a..0a60d5c 100644
--- a/SeaHaven.DataServices/Interfaces/IUserDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IUserDataService.cs
@@ -14,6 +14,7 @@ namespace SeaHaven.DataServices.Interfaces
         Task<UserProfileData?> GetProfileAsync(string id, CancellationToken cancellationToken);
         Task<bool> UpdateProfileAsync(string id, string? name, string? email, string? contact, CancellationToken cancellationToken);
         Task<ApplicationUser?> GetForEditAsync(string id, CancellationToken cancellationToken);
+        Task<bool> IsAccountOwnerAsync(string userId, CancellationToken cancellationToken);
         Task<ApplicationUser?> GetByEmailNormalizedAsync(string email, CancellationToken cancellationToken);
         Task UpdateUserAsync(ApplicationUser user, CancellationToken cancellationToken);
         Task DeleteUserWithCascadeAsync(ApplicationUser user, CancellationToken cancellationToken);
diff --git a/SeaHaven.Services/Configuration/AccountOwnerOptions.cs b/SeaHaven.Services/Configuration/AccountOwnerOptions.cs
new file mode 100644
index 0000000..cfd428f
--- /dev/null
+++ b/SeaHaven.Services/Configuration/AccountOwnerOptions.cs
@@ -0,0 +1,8 @@
+namespace SeaHaven.Services.Configuration;
+
+public sealed class AccountOwnerOptions
+{
+    public const string SectionName = "TeamMembers:AccountOwner";
+
+    public string? UserId { get; set; }
+}
diff --git a/SeaHaven.Services/DependencyInjection/ServicesModule.cs b/SeaHaven.Services/DependencyInjection/ServicesModule.cs
index f44e262..e24dec3 100644
--- a/SeaHaven.Services/DependencyInjection/ServicesModule.cs
+++ b/SeaHaven.Services/DependencyInjection/ServicesModule.cs
@@ -18,6 +18,7 @@ namespace SeaHaven.Services.DependencyInjection
             services.Configure<ApprovalsOptions>(configuration.GetSection(ApprovalsOptions.SectionName));
             services.Configure<VendorPortalOptions>(configuration.GetSection(VendorPortalOptions.SectionName));
             services.Configure<VendorDocumentsOptions>(configuration.GetSection(VendorDocumentsOptions.SectionName));
+            services.Configure<AccountOwnerOptions>(configuration.GetSection(AccountOwnerOptions.SectionName));
 
             services.AddOptions<WorkOrderWebhookOptions>()
                 .Bind(configuration.GetSection(WorkOrderWebhookOptions.SectionName))
diff --git a/SeaHaven.Services/Implementation/AccountOwnerDesignationService.cs b/SeaHaven.Services/Implementation/AccountOwnerDesignationService.cs
new file mode 100644
index 0000000..c254872
--- /dev/null
+++ b/SeaHaven.Services/Implementation/AccountOwnerDesignationService.cs
@@ -0,0 +1,23 @@
+using Microsoft.Extensions.Options;
+using SeaHaven.DataServices.Interfaces;
+using SeaHaven.Services.Configuration;
+using SeaHaven.Services.Interfaces;
+
+namespace SeaHaven.Services.Implementation;
+
+public sealed class AccountOwnerDesignationService : IAccountOwnerDesignationService
+{
+    private readonly IAccountOwnerDataService _dataService;
+    private readonly IOptions<AccountOwnerOptions> _options;
+
+    public AccountOwnerDesignationService(
+        IAccountOwnerDataService dataService,
+        IOptions<AccountOwnerOptions> options)
+    {
+        _dataService = dataService;
+        _options = options;
+    }
+
+    public Task EnsureConfiguredOwnerAsync(CancellationToken cancellationToken) =>
+        _dataService.EnsureConfiguredOwnerAsync(_options.Value.UserId, cancellationToken);
+}
diff --git a/SeaHaven.Services/Implementation/UserService.cs b/SeaHaven.Services/Implementation/UserService.cs
index 01b19e9..5d35d39 100644
--- a/SeaHaven.Services/Implementation/UserService.cs
+++ b/SeaHaven.Services/Implementation/UserService.cs
@@ -136,6 +136,9 @@ namespace SeaHaven.Services.Implementation
             if (exist == null)
                 return new AddUserOutcomeDTO { Success = false, Error = UserMutationErrors.UserNotFound };
 
+            if (await _userDataService.IsAccountOwnerAsync(exist.Id, cancellationToken))
+                return new AddUserOutcomeDTO { Success = false, Error = UserMutationErrors.Forbidden };
+
             exist.FirstName = dto.Name;
             if (string.IsNullOrWhiteSpace(dto.Email))
                 throw new ArgumentException("Email is required.", nameof(dto));
@@ -174,6 +177,9 @@ namespace SeaHaven.Services.Implementation
             if (data == null)
                 return new AddUserOutcomeDTO { Success = false, Error = UserMutationErrors.UserNotFound };
 
+            if (await _userDataService.IsAccountOwnerAsync(data.Id, cancellationToken))
+                return new AddUserOutcomeDTO { Success = false, Error = UserMutationErrors.Forbidden };
+
             await _userDataService.DeleteUserWithCascadeAsync(data, cancellationToken);
             return new AddUserOutcomeDTO { Success = true };
         }
@@ -181,7 +187,7 @@ namespace SeaHaven.Services.Implementation
         public async Task DeleteCurrentUserAsync(string userId, CancellationToken cancellationToken)
         {
             var exist = await _userDataService.GetForEditAsync(userId, cancellationToken);
-            if (exist != null)
+            if (exist != null && !await _userDataService.IsAccountOwnerAsync(exist.Id, cancellationToken))
             {
                 exist.IsDeleted = true;
                 await _userDataService.UpdateUserAsync(exist, cancellationToken);
diff --git a/SeaHaven.Services/Interfaces/IAccountOwnerDesignationService.cs b/SeaHaven.Services/Interfaces/IAccountOwnerDesignationService.cs
new file mode 100644
index 0000000..8d28fe9
--- /dev/null
+++ b/SeaHaven.Services/Interfaces/IAccountOwnerDesignationService.cs
@@ -0,0 +1,6 @@
+namespace SeaHaven.Services.Interfaces;
+
+public interface IAccountOwnerDesignationService
+{
+    Task EnsureConfiguredOwnerAsync(CancellationToken cancellationToken);
+}
diff --git a/SeaHavenIndustries.Tests/WorkOrderMediaConcurrencyRelationalTests.cs b/SeaHavenIndustries.Tests/WorkOrderMediaConcurrencyRelationalTests.cs
index bfde333..1f2eea6 100644
--- a/SeaHavenIndustries.Tests/WorkOrderMediaConcurrencyRelationalTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderMediaConcurrencyRelationalTests.cs
@@ -208,7 +208,7 @@ public class WorkOrderMediaConcurrencyRelationalTests
 
             foreach (var index in builder.Model.GetEntityTypes().SelectMany(e => e.GetIndexes()))
             {
-                if (index.GetFilter() != null)
+                if (index.GetFilter() != null && index.GetDatabaseName() != "IX_AspNetUsers_IsAccountOwner")
                     index.SetFilter(null);
             }
 

From 8a00476d384dc326256993aa7270033619e14a88 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 19:14:36 -0300
Subject: [PATCH 042/183] feat(team-members): support pending member creation
 (SH-325)

---
 .../TeamMemberServiceTests.cs                 |  153 +
 .../Controllers/TeamMemberController.cs       |   36 +
 .../Auth/ApplicationDbContext.cs              |   24 +
 .../Auth/UserServiceArea.cs                   |    9 +
 ...220437_SH325_PendingTeamMember.Designer.cs | 4056 +++++++++++++++++
 .../20260916220437_SH325_PendingTeamMember.cs |   66 +
 .../ApplicationDbContextModelSnapshot.cs      |   38 +
 SeaHaven.DataServices/Dto/UserReadModels.cs   |    4 +
 .../TeamPermissionOverrideDataService.cs      |   25 +-
 .../Implementation/UserDataService.cs         |   15 +-
 .../UserServiceAreaDataService.cs             |   46 +
 .../ITeamPermissionOverrideDataService.cs     |    5 +
 .../Interfaces/IUserServiceAreaDataService.cs |   15 +
 .../TeamPermissionServiceTests.cs             |   14 +
 .../Constants/TeamMemberConstants.cs          |   31 +
 SeaHaven.Services/DTOs/IdentityDTOs.cs        |    4 +
 SeaHaven.Services/DTOs/TeamMemberDTOs.cs      |   33 +
 .../Implementation/TeamMemberService.cs       |  214 +
 .../Implementation/UserService.cs             |    6 +-
 .../Interfaces/ITeamMemberService.cs          |   12 +
 20 files changed, 4798 insertions(+), 8 deletions(-)
 create mode 100644 Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs
 create mode 100644 Api.SeaHavenIndustries/Controllers/TeamMemberController.cs
 create mode 100644 Data.SeaHavenIndustries/Auth/UserServiceArea.cs
 create mode 100644 Data.SeaHavenIndustries/Migrations/20260916220437_SH325_PendingTeamMember.Designer.cs
 create mode 100644 Data.SeaHavenIndustries/Migrations/20260916220437_SH325_PendingTeamMember.cs
 create mode 100644 SeaHaven.DataServices/Implementation/UserServiceAreaDataService.cs
 create mode 100644 SeaHaven.DataServices/Interfaces/IUserServiceAreaDataService.cs
 create mode 100644 SeaHaven.Services/Constants/TeamMemberConstants.cs
 create mode 100644 SeaHaven.Services/DTOs/TeamMemberDTOs.cs
 create mode 100644 SeaHaven.Services/Implementation/TeamMemberService.cs
 create mode 100644 SeaHaven.Services/Interfaces/ITeamMemberService.cs

diff --git a/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs b/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs
new file mode 100644
index 0000000..4b39ede
--- /dev/null
+++ b/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs
@@ -0,0 +1,153 @@
+using System.Security.Claims;
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using FluentAssertions;
+using Microsoft.AspNetCore.Identity;
+using Microsoft.Extensions.Logging;
+using Microsoft.Extensions.Options;
+using Moq;
+using SeaHaven.DataServices.Interfaces;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Implementation;
+using Xunit;
+
+namespace Api.SeaHavenIndustries.Tests;
+
+public sealed class TeamMemberServiceTests
+{
+    [Fact]
+    public async Task Create_DispatcherRequiresAtLeastOneServiceArea()
+    {
+        var userManager = UserManager();
+        var roleManager = RoleManager();
+        var service = new TeamMemberService(
+            userManager.Object,
+            roleManager.Object,
+            Mock.Of<IUserServiceAreaDataService>(),
+            Mock.Of<ITeamPermissionOverrideDataService>());
+
+        var result = await service.CreateAsync(
+            ValidRequest() with { ServiceAreas = Array.Empty<string>() },
+            Admin(),
+            CancellationToken.None);
+
+        result.Success.Should().BeFalse();
+        result.Error.Should().Be("At least one service area is required for a Dispatcher.");
+        userManager.Verify(manager => manager.CreateAsync(It.IsAny<ApplicationUser>()), Times.Never);
+    }
+
+    [Fact]
+    public async Task Create_RejectsUnknownColorAndPermission()
+    {
+        var service = NewService(out var userManager, out _, out _, out _);
+
+        var badColor = await service.CreateAsync(
+            ValidRequest() with { Color = "#000000" },
+            Admin(),
+            CancellationToken.None);
+        var badPermission = await service.CreateAsync(
+            ValidRequest() with
+            {
+                PermissionOverrides = new Dictionary<string, UserPermissionState>
+                {
+                    ["not-a-permission"] = UserPermissionState.Allow
+                }
+            },
+            Admin(),
+            CancellationToken.None);
+
+        badColor.Error.Should().Be("Color must be selected from the accessible palette.");
+        badPermission.Error.Should().Be("Unknown permission key: not-a-permission.");
+        userManager.Verify(manager => manager.CreateAsync(It.IsAny<ApplicationUser>()), Times.Never);
+    }
+
+    [Fact]
+    public async Task Create_PersistsPendingUserWithoutPasswordAndStoresAreasAndOverrides()
+    {
+        var service = NewService(out var userManager, out var roleManager, out var areas, out var overrides);
+        ApplicationUser? created = null;
+        userManager
+            .Setup(manager => manager.CreateAsync(It.IsAny<ApplicationUser>()))
+            .Callback<ApplicationUser>(user =>
+            {
+                user.Id = "new-user";
+                created = user;
+            })
+            .ReturnsAsync(IdentityResult.Success);
+        userManager
+            .Setup(manager => manager.FindByEmailAsync(It.IsAny<string>()))
+            .ReturnsAsync((ApplicationUser?)null);
+        userManager
+            .Setup(manager => manager.AddToRoleAsync(It.IsAny<ApplicationUser>(), "Dispatcher"))
+            .ReturnsAsync(IdentityResult.Success);
+        roleManager.Setup(manager => manager.RoleExistsAsync("Dispatcher")).ReturnsAsync(true);
+
+        var result = await service.CreateAsync(ValidRequest(), Admin(), CancellationToken.None);
+
+        result.Success.Should().BeTrue();
+        created.Should().NotBeNull();
+        created!.PasswordHash.Should().BeNull();
+        created.EmailConfirmed.Should().BeFalse();
+        created.PendingRegistration.Should().BeTrue();
+        created.PhoneNumber.Should().Be("555-0100");
+        result.Member!.ServiceAreas.Should().Equal("East", "West");
+        areas.Verify(data => data.ReplaceAsync("new-user", It.Is<IReadOnlyCollection<string>>(value => value.SequenceEqual(new[] { "East", "West" })), It.IsAny<CancellationToken>()), Times.Once);
+        overrides.Verify(data => data.SetOverridesAsync("new-user", It.Is<IReadOnlyDictionary<string, UserPermissionState>>(value => value["deleteSites"] == UserPermissionState.Allow), It.IsAny<CancellationToken>()), Times.Once);
+    }
+
+    private static TeamMemberService NewService(
+        out Mock<UserManager<ApplicationUser>> userManager,
+        out Mock<RoleManager<IdentityRole>> roleManager,
+        out Mock<IUserServiceAreaDataService> areas,
+        out Mock<ITeamPermissionOverrideDataService> overrides)
+    {
+        userManager = UserManager();
+        roleManager = RoleManager();
+        areas = new Mock<IUserServiceAreaDataService>();
+        overrides = new Mock<ITeamPermissionOverrideDataService>();
+        return new TeamMemberService(userManager.Object, roleManager.Object, areas.Object, overrides.Object);
+    }
+
+    private static Mock<UserManager<ApplicationUser>> UserManager()
+    {
+        var store = new Mock<IUserStore<ApplicationUser>>();
+        return new Mock<UserManager<ApplicationUser>>(
+            store.Object,
+            Microsoft.Extensions.Options.Options.Create(new IdentityOptions()),
+            Mock.Of<IPasswordHasher<ApplicationUser>>(),
+            Array.Empty<IUserValidator<ApplicationUser>>(),
+            Array.Empty<IPasswordValidator<ApplicationUser>>(),
+            Mock.Of<ILookupNormalizer>(),
+            new IdentityErrorDescriber(),
+            Mock.Of<IServiceProvider>(),
+            Mock.Of<ILogger<UserManager<ApplicationUser>>>());
+    }
+
+    private static Mock<RoleManager<IdentityRole>> RoleManager()
+    {
+        var store = new Mock<IRoleStore<IdentityRole>>();
+        return new Mock<RoleManager<IdentityRole>>(
+            store.Object,
+            Array.Empty<IRoleValidator<IdentityRole>>(),
+            Mock.Of<ILookupNormalizer>(),
+            new IdentityErrorDescriber(),
+            Mock.Of<ILogger<RoleManager<IdentityRole>>>());
+    }
+
+    private static CreateTeamMemberRequestDTO ValidRequest() => new()
+    {
+        Name = "Taylor Dispatcher",
+        Role = "dispatcher",
+        Color = "#F59E0B",
+        Email = "taylor@example.com",
+        Phone = "555-0100",
+        ServiceAreas = new[] { "east", "West" },
+        PermissionOverrides = new Dictionary<string, UserPermissionState>
+        {
+            ["deleteSites"] = UserPermissionState.Allow
+        }
+    };
+
+    private static ClaimsPrincipal Admin() =>
+        new(new ClaimsIdentity(new[] { new Claim(ClaimTypes.Role, "Admin") }, "test"));
+}
diff --git a/Api.SeaHavenIndustries/Controllers/TeamMemberController.cs b/Api.SeaHavenIndustries/Controllers/TeamMemberController.cs
new file mode 100644
index 0000000..d09c6bd
--- /dev/null
+++ b/Api.SeaHavenIndustries/Controllers/TeamMemberController.cs
@@ -0,0 +1,36 @@
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Interfaces;
+
+namespace Api.SeaHavenIndustries.Controllers;
+
+[Authorize]
+[ApiController]
+[Route("api/team-members")]
+public sealed class TeamMemberController : ControllerBase
+{
+    private readonly ITeamMemberService _teamMemberService;
+
+    public TeamMemberController(ITeamMemberService teamMemberService)
+    {
+        _teamMemberService = teamMemberService;
+    }
+
+    [HttpPost]
+    public async Task<IActionResult> Create(
+        CreateTeamMemberRequestDTO request,
+        CancellationToken cancellationToken)
+    {
+        var outcome = await _teamMemberService.CreateAsync(request, User, cancellationToken);
+        if (!outcome.Success)
+        {
+            if (string.Equals(outcome.Error, "Forbidden", StringComparison.Ordinal))
+                return Forbid();
+
+            return BadRequest(new { message = outcome.Error });
+        }
+
+        return Ok(outcome.Member);
+    }
+}
diff --git a/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs b/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs
index 870a127..cfc544b 100644
--- a/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs
+++ b/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs
@@ -257,6 +257,26 @@ namespace Data.SeaHavenIndustries
                     .IsUnique()
                     .HasDatabaseName("IX_UserPermissionOverrides_UserId_PermissionKey");
             });
+
+            builder.Entity<UserServiceArea>(entity =>
+            {
+                entity.HasKey(area => new { area.UserId, area.Area });
+
+                entity.Property(area => area.UserId)
+                    .HasMaxLength(450);
+
+                entity.Property(area => area.Area)
+                    .HasMaxLength(32);
+
+                entity.HasOne(area => area.User)
+                    .WithMany(user => user.ServiceAreas)
+                    .HasForeignKey(area => area.UserId)
+                    .OnDelete(DeleteBehavior.Cascade);
+
+                entity.HasIndex(area => new { area.UserId, area.Area })
+                    .IsUnique()
+                    .HasDatabaseName("IX_UserServiceAreas_UserId_Area");
+            });
         }
         public DbSet<Category> Categories { get; set; }
         public DbSet<Locations> Locations { get; set; }
@@ -312,6 +332,7 @@ namespace Data.SeaHavenIndustries
         public DbSet<JobTitle> JobTitles { get; set; }
         public DbSet<Region> Regions { get; set; }
         public DbSet<UserPermissionOverride> UserPermissionOverrides { get; set; }
+        public DbSet<UserServiceArea> UserServiceAreas { get; set; }
 
         public override int SaveChanges()
         {
@@ -392,12 +413,15 @@ namespace Data.SeaHavenIndustries
         public string? Color { get; set; }
         public int? Type { get; set; } // 1 for users 0 for admin
         public bool IsAccountOwner { get; set; }
+        public bool? PendingRegistration { get; set; }
+        public DateTime? PendingRegistrationCreatedDate { get; set; }
         /// <summary>Optional CRM account membership for server-derived media scope (SH-221).</summary>
         public int? AccountId { get; set; }
         [ForeignKey(nameof(AccountId))]
         public virtual Accounts? Account { get; set; }
         public ICollection<Template>? Templates { get; set; }
         public ICollection<WorkOrder>? WorkOrders { get; set; }
+        public ICollection<UserServiceArea> ServiceAreas { get; set; } = new List<UserServiceArea>();
     }
     public class FullAuditEntity
     {
diff --git a/Data.SeaHavenIndustries/Auth/UserServiceArea.cs b/Data.SeaHavenIndustries/Auth/UserServiceArea.cs
new file mode 100644
index 0000000..f07291c
--- /dev/null
+++ b/Data.SeaHavenIndustries/Auth/UserServiceArea.cs
@@ -0,0 +1,9 @@
+namespace Data.SeaHavenIndustries;
+
+/// <summary>Canonical service area assigned to a team member.</summary>
+public sealed class UserServiceArea
+{
+    public string UserId { get; set; } = null!;
+    public string Area { get; set; } = null!;
+    public ApplicationUser User { get; set; } = null!;
+}
diff --git a/Data.SeaHavenIndustries/Migrations/20260916220437_SH325_PendingTeamMember.Designer.cs b/Data.SeaHavenIndustries/Migrations/20260916220437_SH325_PendingTeamMember.Designer.cs
new file mode 100644
index 0000000..d28a901
--- /dev/null
+++ b/Data.SeaHavenIndustries/Migrations/20260916220437_SH325_PendingTeamMember.Designer.cs
@@ -0,0 +1,4056 @@
+// <auto-generated />
+using System;
+using Data.SeaHavenIndustries;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Metadata;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+
+#nullable disable
+
+namespace Data.SeaHavenIndustries.Migrations
+{
+    [DbContext(typeof(ApplicationDbContext))]
+    [Migration("20260916220437_SH325_PendingTeamMember")]
+    partial class SH325_PendingTeamMember
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasAnnotation("ProductVersion", "8.0.8")
+                .HasAnnotation("Relational:MaxIdentifierLength", 128);
+
+            SqlServerModelBuilderExtensions.UseIdentityColumns(modelBuilder);
+
+            modelBuilder.HasSequence("WorkOrderInternalNumberSequence");
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Accounts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("CurrencyCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Importance")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("IndustryId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("OwnerEmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Phone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PrivacySetting")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ServiceInstructions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Tags")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("TerritoryId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("TimeZone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Type")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Website")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Accounts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Addresses", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AddressType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Country")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("County")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("ContactId");
+
+                    b.ToTable("Addresses");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int>("AccessFailedCount")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Color")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ConcurrencyStamp")
+                        .IsConcurrencyToken()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Contact")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DeletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<bool>("EmailConfirmed")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("FirstName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Initials")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsAccountOwner")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("LastName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Locations")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("LockoutEnabled")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTimeOffset?>("LockoutEnd")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("NormalizedEmail")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("NormalizedUserName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("PasswordHash")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("PendingRegistration")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("PendingRegistrationCreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("PhoneNumberConfirmed")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("SecurityStamp")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("TwoFactorEnabled")
+                        .HasColumnType("bit");
+
+                    b.Property<int?>("Type")
+                        .HasColumnType("int");
+
+                    b.Property<string>("UniqueName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserImage")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("IsAccountOwner")
+                        .IsUnique()
+                        .HasDatabaseName("IX_AspNetUsers_IsAccountOwner")
+                        .HasFilter("IsAccountOwner = 1");
+
+                    b.HasIndex("NormalizedEmail")
+                        .HasDatabaseName("EmailIndex");
+
+                    b.HasIndex("NormalizedUserName")
+                        .IsUnique()
+                        .HasDatabaseName("UserNameIndex")
+                        .HasFilter("[NormalizedUserName] IS NOT NULL");
+
+                    b.ToTable("AspNetUsers", (string)null);
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Area", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("Areas");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("AssetCode")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Assets");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Category", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Categories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Comments", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CommentType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Commenter")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Commenttext")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Documents")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalCommentId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("ExternalSourceEmailS3Key")
+                        .HasMaxLength(2048)
+                        .HasColumnType("nvarchar(2048)");
+
+                    b.Property<DateTimeOffset?>("ExternalUpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalVersionHash")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RecordType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int?>("WorkerOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("UserId");
+
+                    b.HasIndex("WorkerOrderId");
+
+                    b.ToTable("Comments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.CompletionDocTemplate", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ServiceKey")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("TemplateUrl")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ServiceKey", "IsActive");
+
+                    b.ToTable("CompletionDocTemplates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ContactDetails", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DateOfBirth")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Gender")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PrivacySetting")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Tags")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Territory")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.ToTable("ContactDetails");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ContactType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FirstName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LastName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("MiddleName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Owner")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("SiteContactOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Title")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Contacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Department", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Departments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AcceptToken")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("AcknowledgedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CommercialStatusUpdatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CompletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DispatchNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DispatchedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("EmailSent")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("EstimatedArrivalAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("EtaManualOverride")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("InvoiceNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("InvoiceStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<decimal?>("NTEAmount")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<string>("PONumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PaymentStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ReplyToAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<DateTime?>("ScheduledDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TechPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("VendorNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<DateTime?>("VerifiedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("VerifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("Dispatches");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchChecklistItem", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CompletedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("CompletedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool>("IsCompleted")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ItemText")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("DispatchChecklistItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchSignoff", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Signature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignatureMethod")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("SignedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("SignoffType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.ToTable("DispatchSignoffs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchUpliftRequest", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<decimal?>("CurrentNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<DateTime?>("DecidedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DecidedByUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DecisionNote")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("EscalatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("EvidenceDocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("ExpiresAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("InitialNotificationSentAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("NotificationError")
+                        .HasMaxLength(500)
+                        .HasColumnType("nvarchar(500)");
+
+                    b.Property<string>("NotificationStatus")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<string>("RequestKey")
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<string>("RequestedByVendorName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<decimal>("RequestedNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<int>("RequiredTier")
+                        .HasColumnType("int");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<string>("Status")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<string>("VendorReason")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId")
+                        .IsUnique()
+                        .HasFilter("[Status] IN ('Pending', 'ChangesRequested')");
+
+                    b.HasIndex("EvidenceDocumentId");
+
+                    b.HasIndex("DispatchId", "RequestKey")
+                        .IsUnique()
+                        .HasFilter("[RequestKey] IS NOT NULL");
+
+                    b.ToTable("DispatchUpliftRequests");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchWorkOrder", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("DispatchWorkOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DropdownOption", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Category")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ParentValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Value")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("DropdownOptions");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("CanChangeProviderNumber")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ConfirmUserName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DateOfBirth")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DepartmentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("EmployeeNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FirstName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Gender")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("HireDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<int?>("JobTitleId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("LastLogin")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LastName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("MiddleName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("PermissionGroupId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("RegionId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("SMSAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TimeZone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Website")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DepartmentId");
+
+                    b.HasIndex("JobTitleId");
+
+                    b.HasIndex("RegionId");
+
+                    b.ToTable("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeAddress", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CountryCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CountyId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("StateCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Street")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("StreetLineTwo")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId")
+                        .IsUnique();
+
+                    b.ToTable("EmployeeAddresses");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeEmail", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<int?>("EmailTypeId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsPrimary")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.ToTable("EmployeeEmails");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeePhone", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Extension")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsPrimary")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Number")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("PhoneTypeId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.ToTable("EmployeePhones");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Events", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("AllDay")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("EndDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("EndTime")
+                        .HasMaxLength(10)
+                        .HasColumnType("nvarchar(10)");
+
+                    b.Property<string>("EventColor")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Location")
+                        .HasMaxLength(150)
+                        .HasColumnType("nvarchar(150)");
+
+                    b.Property<int?>("RecordID")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RecordName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("RecordTargetType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("ReminderMinutes")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime>("StartDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("StartTime")
+                        .HasMaxLength(10)
+                        .HasColumnType("nvarchar(10)");
+
+                    b.Property<string>("Title")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Events");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.FollowUps", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Reason")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("ScheduleDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<TimeSpan>("ScheduleStartTime")
+                        .HasColumnType("time");
+
+                    b.Property<string>("Status")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.HasIndex("LocationId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("FollowUps");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ForgetPasswordCode", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Code")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Email")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("ForgetPasswordCodes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.JobTitle", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("JobTitles");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalLocationId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Latitude")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Longitude")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Title")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.ToTable("Locations");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.PMSchedules", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AssetId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Frequency")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("StartDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AssetId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("PMSchedules");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BillingAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("Date")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ProjectName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("QuotId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ShippingAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("Quotes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.QuotesLineItems", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Descriptions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<decimal?>("Lineitem")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<int?>("LineitemNumber")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("QuoteId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("QuoteId");
+
+                    b.ToTable("QuotesLines");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Region", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Regions");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.SitePreferredVendor", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Trade")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("UpdatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("LocationId", "VendorId")
+                        .IsUnique()
+                        .HasFilter("[Trade] IS NULL");
+
+                    b.HasIndex("LocationId", "VendorId", "Trade")
+                        .IsUnique()
+                        .HasFilter("[Trade] IS NOT NULL");
+
+                    b.ToTable("SitePreferredVendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplate", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("TaskListTemplates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplateItem", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ItemText")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<int>("TaskListTemplateId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("TaskListTemplateId");
+
+                    b.ToTable("TaskListTemplateItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Template", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AfterPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AfterPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AssignTo")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DueDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Priority")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffSignature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderTitle")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AssignTo");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Templates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Trade", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("Trades");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserPermissionOverride", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("PermissionKey")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<int>("State")
+                        .HasColumnType("int");
+
+                    b.HasKey("UserId", "PermissionKey");
+
+                    b.HasIndex("UserId", "PermissionKey")
+                        .IsUnique()
+                        .HasDatabaseName("IX_UserPermissionOverrides_UserId_PermissionKey");
+
+                    b.ToTable("UserPermissionOverrides");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserServiceArea", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Area")
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.HasKey("UserId", "Area");
+
+                    b.HasIndex("UserId", "Area")
+                        .IsUnique()
+                        .HasDatabaseName("IX_UserServiceAreas_UserId_Area");
+
+                    b.ToTable("UserServiceAreas");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AvailabilityStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("AvailabilityUpdatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CompanyId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CompanyName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CompanyPhone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ContactName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("GoogleMapsUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Phone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PreferredContact")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TradeSpecialties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CompanyId");
+
+                    b.ToTable("Vendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAccessToken", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime>("ExpiresAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime>("IssuedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("LastUsedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("RevokedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Token")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Token")
+                        .IsUnique();
+
+                    b.HasIndex("VendorId");
+
+                    b.ToTable("VendorAccessTokens");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAuditLog", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Actor")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("FieldName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NewValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("OldValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.ToTable("VendorAuditLogs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("AreaId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CompanyPhone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("GoogleMapsUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AreaId");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("VendorCompanies");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompletionDocument", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ContentType")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("OriginalFileName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Purpose")
+                        .IsRequired()
+                        .HasMaxLength(30)
+                        .HasColumnType("nvarchar(30)");
+
+                    b.Property<string>("RejectionReason")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ReplacesDocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ReviewStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ReviewedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ScanStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ScannedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<long>("SizeBytes")
+                        .HasColumnType("bigint");
+
+                    b.Property<string>("StoredFileName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("Version")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("VendorCompletionDocuments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("AdditionalContacts")
+                        .HasMaxLength(4000)
+                        .HasColumnType("nvarchar(4000)");
+
+                    b.Property<string>("AfterPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AfterPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateOnly?>("AssignDate")
+                        .HasColumnType("date");
+
+                    b.Property<string>("AssignTo")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("AvetaRequired")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("AvettaTask")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Building")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("CarriedOver")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CompletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Customer")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DateReported")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("DocStatus")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("DueDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ExternalAssignedTo")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<DateTimeOffset?>("ExternalLastOccurredAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalRecordType")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset?>("ExternalUpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalVersionHash")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("ExternalWorkOrderId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ExtraServices")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<string>("FlagColor")
+                        .HasMaxLength(7)
+                        .HasColumnType("nvarchar(7)");
+
+                    b.Property<string>("FrozenCompany")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FrozenPoc")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FrozenSite")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("InternalWONumber")
+                        .HasMaxLength(11)
+                        .HasColumnType("nvarchar(11)");
+
+                    b.Property<bool>("IsAddOn")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LegacyStatus")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("LifecycleStatus")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("OperationalFlags")
+                        .HasColumnType("int");
+
+                    b.Property<DateOnly?>("OriginalDate")
+                        .HasColumnType("date");
+
+                    b.Property<DateOnly?>("OriginalWeek")
+                        .HasColumnType("date");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PocName")
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("PocNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<string>("PocPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int?>("PrimaryDispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Priority")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Problem")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("RescheduleCount")
+                        .HasColumnType("int");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<bool?>("ScheduleWeekOnly")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("ScheduledDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("ScheduledEnd")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("ScheduledStart")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Service")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("ServiceNotes")
+                        .HasMaxLength(4000)
+                        .HasColumnType("nvarchar(4000)");
+
+                    b.Property<string>("Severity")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffSignature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteCode")
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<string>("Source")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SourceEmailS3Key")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SubTrade")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateOnly?>("TargetWeek")
+                        .HasColumnType("date");
+
+                    b.Property<string>("TechPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<string>("Trade")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<decimal?>("VendorNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<string>("VendorNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<int?>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("WorkerOrderNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderTitle")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("istemplate")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("ExternalWorkOrderId")
+                        .IsUnique()
+                        .HasFilter("[ExternalWorkOrderId] IS NOT NULL AND [ExternalWorkOrderId] <> ''");
+
+                    b.HasIndex("InternalWONumber")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.HasIndex("LocationId");
+
+                    b.HasIndex("PrimaryDispatchId");
+
+                    b.HasIndex("ScheduledDate");
+
+                    b.HasIndex("SiteCode")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.HasIndex("WorkOrderType");
+
+                    b.HasIndex("AssignTo", "ScheduledDate");
+
+                    b.HasIndex("LifecycleStatus", "ScheduledDate")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.ToTable("workOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAttachments", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Category")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("workOrderAttachments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAuditLog", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Action")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ActorType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CorrelationId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("EventType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FieldName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NewValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("OldValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UserId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("WorkOrderAuditLogs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderCategories", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("workOrderCategories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderContacts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("WorkOrderContacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderExternalReceipt", b =>
+                {
+                    b.Property<long>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("bigint");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<long>("Id"));
+
+                    b.Property<string>("ExternalId")
+                        .IsRequired()
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Kind")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<DateTimeOffset>("ProcessedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("Source")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset>("UpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("VersionHash")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Source", "Kind", "ExternalId")
+                        .IsUnique()
+                        .HasDatabaseName("IX_WorkOrderExternalReceipts_Source_Kind_ExternalId");
+
+                    b.ToTable("WorkOrderExternalReceipts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderFieldLock", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("FieldName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<DateTime>("LockedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("LockedByUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkOrderId", "FieldName")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderFieldLocks");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderReconciliationJob", b =>
+                {
+                    b.Property<int>("Id")
+                        .HasColumnType("int");
+
+                    b.Property<int>("CommentsProcessed")
+                        .HasColumnType("int");
+
+                    b.Property<DateTimeOffset?>("CompletedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ErrorCode")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<Guid?>("FenceToken")
+                        .HasColumnType("uniqueidentifier");
+
+                    b.Property<DateTimeOffset?>("LeaseExpiresAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("Reason")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset?>("RequestedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<Guid>("RunId")
+                        .HasColumnType("uniqueidentifier");
+
+                    b.Property<DateTimeOffset?>("StartedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("State")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<int>("WorkOrdersProcessed")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("State");
+
+                    b.ToTable("WorkOrderReconciliationJobs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWebhookDelivery", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BodySha256")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("DeliveryId")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("EventType")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<DateTimeOffset>("OccurredAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<DateTimeOffset>("ProcessedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DeliveryId")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderWebhookDeliveries");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWeekRolledLedger", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CorrelationId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("ProcessedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateOnly>("SourceWeekStart")
+                        .HasColumnType("date");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkOrderId", "SourceWeekStart")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderWeekRolledLedgers");
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRole", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ConcurrencyStamp")
+                        .IsConcurrencyToken()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("NormalizedName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique()
+                        .HasDatabaseName("RoleNameIndex")
+                        .HasFilter("[NormalizedName] IS NOT NULL");
+
+                    b.ToTable("AspNetRoles", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRoleClaim<string>", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ClaimType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ClaimValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("RoleId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AspNetRoleClaims", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserClaim<string>", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ClaimType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ClaimValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UserId");
+
+                    b.ToTable("AspNetUserClaims", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserLogin<string>", b =>
+                {
+                    b.Property<string>("LoginProvider")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ProviderKey")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ProviderDisplayName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("LoginProvider", "ProviderKey");
+
+                    b.HasIndex("UserId");
+
+                    b.ToTable("AspNetUserLogins", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserRole<string>", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("RoleId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("UserId", "RoleId");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AspNetUserRoles", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserToken<string>", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("LoginProvider")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Value")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("UserId", "LoginProvider", "Name");
+
+                    b.ToTable("AspNetUserTokens", (string)null);
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Addresses", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany("Addresses")
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contact")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Contact");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Comments", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("Comments")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "ApplicationUser")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Comments")
+                        .HasForeignKey("WorkerOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("ApplicationUser");
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ContactDetails", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contact")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Contact");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany("Contacts")
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany("Contacts")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("Dispatches")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Dispatches")
+                        .HasForeignKey("WorkOrderId");
+
+                    b.Navigation("Vendor");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchChecklistItem", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("ChecklistItems")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchSignoff", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("Signoffs")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchUpliftRequest", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany()
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.VendorCompletionDocument", "EvidenceDocument")
+                        .WithMany()
+                        .HasForeignKey("EvidenceDocumentId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("EvidenceDocument");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchWorkOrder", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("DispatchWorkOrders")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Department", "Department")
+                        .WithMany("Employees")
+                        .HasForeignKey("DepartmentId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.JobTitle", "JobTitle")
+                        .WithMany("Employees")
+                        .HasForeignKey("JobTitleId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Region", "Region")
+                        .WithMany("Employees")
+                        .HasForeignKey("RegionId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Department");
+
+                    b.Navigation("JobTitle");
+
+                    b.Navigation("Region");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeAddress", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithOne("Address")
+                        .HasForeignKey("Data.SeaHavenIndustries.EmployeeAddress", "EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeEmail", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany("Emails")
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeePhone", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany("Phones")
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.FollowUps", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany()
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Employee");
+
+                    b.Navigation("Location");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.PMSchedules", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Assets", "Asset")
+                        .WithMany("PMSchedules")
+                        .HasForeignKey("AssetId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Asset");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contacts")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Quotes")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Contacts");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.QuotesLineItems", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Quotes", "Quotes")
+                        .WithMany("LineItems")
+                        .HasForeignKey("QuoteId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Quotes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.SitePreferredVendor", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("SitePreferences")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Location");
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplateItem", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.TaskListTemplate", "Template")
+                        .WithMany("Items")
+                        .HasForeignKey("TaskListTemplateId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Template");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Template", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "AssignToUser")
+                        .WithMany("Templates")
+                        .HasForeignKey("AssignTo")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Category", "Category")
+                        .WithMany("Templates")
+                        .HasForeignKey("CategoryId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "POC")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Locations")
+                        .WithMany("Templates")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("AssignToUser");
+
+                    b.Navigation("Category");
+
+                    b.Navigation("Locations");
+
+                    b.Navigation("POC");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserPermissionOverride", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("User");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserServiceArea", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany("ServiceAreas")
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("User");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.VendorCompany", "Company")
+                        .WithMany("Vendors")
+                        .HasForeignKey("CompanyId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Company");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAccessToken", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany()
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAuditLog", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("AuditLogs")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Area", "Area")
+                        .WithMany()
+                        .HasForeignKey("AreaId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Area");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompletionDocument", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("CompletionDocuments")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany()
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("Vendor");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "AssignToUser")
+                        .WithMany("WorkOrders")
+                        .HasForeignKey("AssignTo")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Locations")
+                        .WithMany("workOrders")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "PrimaryDispatch")
+                        .WithMany()
+                        .HasForeignKey("PrimaryDispatchId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("AssignToUser");
+
+                    b.Navigation("Locations");
+
+                    b.Navigation("PrimaryDispatch");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAttachments", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("workOrderAttachments")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAuditLog", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("User");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderCategories", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Category", "Category")
+                        .WithMany("WorkOrderCategories")
+                        .HasForeignKey("CategoryId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("WorkOrderCategories")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Category");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderContacts", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "POC")
+                        .WithMany("WorkOrderContacts")
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("WorkOrderContacts")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("POC");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderFieldLock", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("FieldLocks")
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWeekRolledLedger", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRoleClaim<string>", b =>
+                {
+                    b.HasOne("Microsoft.AspNetCore.Identity.IdentityRole", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserClaim<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserLogin<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserRole<string>", b =>
+                {
+                    b.HasOne("Microsoft.AspNetCore.Identity.IdentityRole", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserToken<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Accounts", b =>
+                {
+                    b.Navigation("Addresses");
+
+                    b.Navigation("Contacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.Navigation("ServiceAreas");
+
+                    b.Navigation("Templates");
+
+                    b.Navigation("WorkOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.Navigation("PMSchedules");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Category", b =>
+                {
+                    b.Navigation("Templates");
+
+                    b.Navigation("WorkOrderCategories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.Navigation("WorkOrderContacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Department", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.Navigation("ChecklistItems");
+
+                    b.Navigation("Comments");
+
+                    b.Navigation("CompletionDocuments");
+
+                    b.Navigation("DispatchWorkOrders");
+
+                    b.Navigation("Signoffs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.Navigation("Address");
+
+                    b.Navigation("Emails");
+
+                    b.Navigation("Phones");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.JobTitle", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.Navigation("Contacts");
+
+                    b.Navigation("Templates");
+
+                    b.Navigation("workOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.Navigation("LineItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Region", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplate", b =>
+                {
+                    b.Navigation("Items");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.Navigation("AuditLogs");
+
+                    b.Navigation("Dispatches");
+
+                    b.Navigation("SitePreferences");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.Navigation("Vendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.Navigation("Comments");
+
+                    b.Navigation("Dispatches");
+
+                    b.Navigation("FieldLocks");
+
+                    b.Navigation("Quotes");
+
+                    b.Navigation("WorkOrderCategories");
+
+                    b.Navigation("WorkOrderContacts");
+
+                    b.Navigation("workOrderAttachments");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/Data.SeaHavenIndustries/Migrations/20260916220437_SH325_PendingTeamMember.cs b/Data.SeaHavenIndustries/Migrations/20260916220437_SH325_PendingTeamMember.cs
new file mode 100644
index 0000000..7ed4270
--- /dev/null
+++ b/Data.SeaHavenIndustries/Migrations/20260916220437_SH325_PendingTeamMember.cs
@@ -0,0 +1,66 @@
+using System;
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Data.SeaHavenIndustries.Migrations
+{
+    /// <inheritdoc />
+    public partial class SH325_PendingTeamMember : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.AddColumn<bool>(
+                name: "PendingRegistration",
+                table: "AspNetUsers",
+                type: "bit",
+                nullable: true);
+
+            migrationBuilder.AddColumn<DateTime>(
+                name: "PendingRegistrationCreatedDate",
+                table: "AspNetUsers",
+                type: "datetime2",
+                nullable: true);
+
+            migrationBuilder.CreateTable(
+                name: "UserServiceAreas",
+                columns: table => new
+                {
+                    UserId = table.Column<string>(type: "nvarchar(450)", maxLength: 450, nullable: false),
+                    Area = table.Column<string>(type: "nvarchar(32)", maxLength: 32, nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("PK_UserServiceAreas", x => new { x.UserId, x.Area });
+                    table.ForeignKey(
+                        name: "FK_UserServiceAreas_AspNetUsers_UserId",
+                        column: x => x.UserId,
+                        principalTable: "AspNetUsers",
+                        principalColumn: "Id",
+                        onDelete: ReferentialAction.Cascade);
+                });
+
+            migrationBuilder.CreateIndex(
+                name: "IX_UserServiceAreas_UserId_Area",
+                table: "UserServiceAreas",
+                columns: new[] { "UserId", "Area" },
+                unique: true);
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropTable(
+                name: "UserServiceAreas");
+
+            migrationBuilder.DropColumn(
+                name: "PendingRegistration",
+                table: "AspNetUsers");
+
+            migrationBuilder.DropColumn(
+                name: "PendingRegistrationCreatedDate",
+                table: "AspNetUsers");
+        }
+    }
+}
diff --git a/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs b/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
index e87b2d4..7ccd8ce 100644
--- a/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
+++ b/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
@@ -249,6 +249,12 @@ namespace Data.SeaHavenIndustries.Migrations
                     b.Property<string>("PasswordHash")
                         .HasColumnType("nvarchar(max)");
 
+                    b.Property<bool?>("PendingRegistration")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("PendingRegistrationCreatedDate")
+                        .HasColumnType("datetime2");
+
                     b.Property<string>("PhoneNumber")
                         .HasColumnType("nvarchar(max)");
 
@@ -2102,6 +2108,25 @@ namespace Data.SeaHavenIndustries.Migrations
                     b.ToTable("UserPermissionOverrides");
                 });
 
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserServiceArea", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Area")
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.HasKey("UserId", "Area");
+
+                    b.HasIndex("UserId", "Area")
+                        .IsUnique()
+                        .HasDatabaseName("IX_UserServiceAreas_UserId_Area");
+
+                    b.ToTable("UserServiceAreas");
+                });
+
             modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
                 {
                     b.Property<int>("Id")
@@ -3657,6 +3682,17 @@ namespace Data.SeaHavenIndustries.Migrations
                     b.Navigation("User");
                 });
 
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserServiceArea", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany("ServiceAreas")
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("User");
+                });
+
             modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
                 {
                     b.HasOne("Data.SeaHavenIndustries.VendorCompany", "Company")
@@ -3901,6 +3937,8 @@ namespace Data.SeaHavenIndustries.Migrations
 
             modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
                 {
+                    b.Navigation("ServiceAreas");
+
                     b.Navigation("Templates");
 
                     b.Navigation("WorkOrders");
diff --git a/SeaHaven.DataServices/Dto/UserReadModels.cs b/SeaHaven.DataServices/Dto/UserReadModels.cs
index c3cb153..c619d14 100644
--- a/SeaHaven.DataServices/Dto/UserReadModels.cs
+++ b/SeaHaven.DataServices/Dto/UserReadModels.cs
@@ -8,6 +8,10 @@ namespace SeaHaven.DataServices.Dto
         public string? Name { get; init; }
         public DateTime? CreatedDate { get; init; }
         public string? Status { get; init; }
+        public string? Phone { get; init; }
+        public string? Color { get; init; }
+        public bool? PendingRegistration { get; init; }
+        public IReadOnlyList<string> ServiceAreas { get; init; } = Array.Empty<string>();
     }
 
     public sealed class UserProfileData
diff --git a/SeaHaven.DataServices/Implementation/TeamPermissionOverrideDataService.cs b/SeaHaven.DataServices/Implementation/TeamPermissionOverrideDataService.cs
index b968a8b..ba176af 100644
--- a/SeaHaven.DataServices/Implementation/TeamPermissionOverrideDataService.cs
+++ b/SeaHaven.DataServices/Implementation/TeamPermissionOverrideDataService.cs
@@ -51,7 +51,25 @@ public sealed class TeamPermissionOverrideDataService : ITeamPermissionOverrideD
         };
     }
 
-    public async Task SetOverrideAsync(
+    public Task SetOverrideAsync(
+        string userId,
+        string permissionKey,
+        UserPermissionState state,
+        CancellationToken cancellationToken)
+    {
+        return SetOverrideCoreAsync(userId, permissionKey, state, cancellationToken);
+    }
+
+    public async Task SetOverridesAsync(
+        string userId,
+        IReadOnlyDictionary<string, UserPermissionState> overrides,
+        CancellationToken cancellationToken)
+    {
+        foreach (var pair in overrides)
+            await SetOverrideCoreAsync(userId, pair.Key, pair.Value, cancellationToken);
+    }
+
+    private async Task SetOverrideCoreAsync(
         string userId,
         string permissionKey,
         UserPermissionState state,
@@ -84,11 +102,8 @@ public sealed class TeamPermissionOverrideDataService : ITeamPermissionOverrideD
         }
         catch (DbUpdateException)
         {
-            // A concurrent PUT inserted the same (UserId, PermissionKey) between our
-            // existence check and this save, violating PK_UserPermissionOverrides.
-            // Converge on the caller's intent by updating the persisted row.
+            // A concurrent PUT inserted the same composite key between the read and save.
             _context.Entry(addition).State = EntityState.Detached;
-
             var winner = await _context.UserPermissionOverrides
                 .SingleAsync(
                     permission => permission.UserId == userId
diff --git a/SeaHaven.DataServices/Implementation/UserDataService.cs b/SeaHaven.DataServices/Implementation/UserDataService.cs
index ccb054f..374d34e 100644
--- a/SeaHaven.DataServices/Implementation/UserDataService.cs
+++ b/SeaHaven.DataServices/Implementation/UserDataService.cs
@@ -42,11 +42,22 @@ namespace SeaHaven.DataServices.Implementation
                 .Select(user => new UserListRowData
                 {
                     Id = user.Id,
-                    RoleName = user.PhoneNumber,
+                    RoleName = (
+                        from userRole in _context.UserRoles
+                        join role in _context.Roles on userRole.RoleId equals role.Id
+                        where userRole.UserId == user.Id
+                        select role.Name).FirstOrDefault() ?? user.PhoneNumber,
                     Email = user.Email,
                     Name = ((user.FirstName ?? "") + " " + (user.LastName ?? "")).Trim(),
                     CreatedDate = user.CreatedDate,
-                    Status = user.UniqueName
+                    Status = user.UniqueName,
+                    Phone = user.Contact ?? user.PhoneNumber,
+                    Color = user.Color,
+                    PendingRegistration = user.PendingRegistration,
+                    ServiceAreas = user.ServiceAreas
+                        .OrderBy(area => area.Area)
+                        .Select(area => area.Area)
+                        .ToList()
                 })
                 .ToListAsync(cancellationToken);
         }
diff --git a/SeaHaven.DataServices/Implementation/UserServiceAreaDataService.cs b/SeaHaven.DataServices/Implementation/UserServiceAreaDataService.cs
new file mode 100644
index 0000000..5e746e3
--- /dev/null
+++ b/SeaHaven.DataServices/Implementation/UserServiceAreaDataService.cs
@@ -0,0 +1,46 @@
+using Data.SeaHavenIndustries;
+using Microsoft.EntityFrameworkCore;
+using SeaHaven.DataServices.Interfaces;
+
+namespace SeaHaven.DataServices.Implementation;
+
+public sealed class UserServiceAreaDataService : IUserServiceAreaDataService
+{
+    private readonly ApplicationDbContext _context;
+
+    public UserServiceAreaDataService(ApplicationDbContext context)
+    {
+        _context = context;
+    }
+
+    public async Task ReplaceAsync(
+        string userId,
+        IReadOnlyCollection<string> areas,
+        CancellationToken cancellationToken)
+    {
+        var existing = await _context.UserServiceAreas
+            .Where(area => area.UserId == userId)
+            .ToListAsync(cancellationToken);
+
+        if (existing.Count > 0)
+            _context.UserServiceAreas.RemoveRange(existing);
+
+        await _context.UserServiceAreas.AddRangeAsync(
+            areas.Select(area => new UserServiceArea { UserId = userId, Area = area }),
+            cancellationToken);
+
+        await _context.SaveChangesAsync(cancellationToken);
+    }
+
+    public async Task<IReadOnlyList<string>> GetForUserAsync(
+        string userId,
+        CancellationToken cancellationToken)
+    {
+        return await _context.UserServiceAreas
+            .AsNoTracking()
+            .Where(area => area.UserId == userId)
+            .OrderBy(area => area.Area)
+            .Select(area => area.Area)
+            .ToListAsync(cancellationToken);
+    }
+}
diff --git a/SeaHaven.DataServices/Interfaces/ITeamPermissionOverrideDataService.cs b/SeaHaven.DataServices/Interfaces/ITeamPermissionOverrideDataService.cs
index 49d57e2..416c6c9 100644
--- a/SeaHaven.DataServices/Interfaces/ITeamPermissionOverrideDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/ITeamPermissionOverrideDataService.cs
@@ -11,4 +11,9 @@ public interface ITeamPermissionOverrideDataService
         string permissionKey,
         UserPermissionState state,
         CancellationToken cancellationToken);
+
+    Task SetOverridesAsync(
+        string userId,
+        IReadOnlyDictionary<string, UserPermissionState> overrides,
+        CancellationToken cancellationToken);
 }
diff --git a/SeaHaven.DataServices/Interfaces/IUserServiceAreaDataService.cs b/SeaHaven.DataServices/Interfaces/IUserServiceAreaDataService.cs
new file mode 100644
index 0000000..c222dee
--- /dev/null
+++ b/SeaHaven.DataServices/Interfaces/IUserServiceAreaDataService.cs
@@ -0,0 +1,15 @@
+using Data.SeaHavenIndustries;
+
+namespace SeaHaven.DataServices.Interfaces;
+
+public interface IUserServiceAreaDataService
+{
+    Task ReplaceAsync(
+        string userId,
+        IReadOnlyCollection<string> areas,
+        CancellationToken cancellationToken);
+
+    Task<IReadOnlyList<string>> GetForUserAsync(
+        string userId,
+        CancellationToken cancellationToken);
+}
diff --git a/SeaHaven.Services.Tests/TeamPermissionServiceTests.cs b/SeaHaven.Services.Tests/TeamPermissionServiceTests.cs
index 048c94b..b22042f 100644
--- a/SeaHaven.Services.Tests/TeamPermissionServiceTests.cs
+++ b/SeaHaven.Services.Tests/TeamPermissionServiceTests.cs
@@ -126,5 +126,19 @@ public sealed class TeamPermissionServiceTests
             LastSet = (userId, permissionKey, state);
             return Task.CompletedTask;
         }
+
+        public Task SetOverridesAsync(
+            string userId,
+            IReadOnlyDictionary<string, UserPermissionState> overrides,
+            CancellationToken cancellationToken)
+        {
+            foreach (var (permissionKey, state) in overrides)
+            {
+                _overrides[permissionKey] = state;
+                LastSet = (userId, permissionKey, state);
+            }
+
+            return Task.CompletedTask;
+        }
     }
 }
diff --git a/SeaHaven.Services/Constants/TeamMemberConstants.cs b/SeaHaven.Services/Constants/TeamMemberConstants.cs
new file mode 100644
index 0000000..64b1c83
--- /dev/null
+++ b/SeaHaven.Services/Constants/TeamMemberConstants.cs
@@ -0,0 +1,31 @@
+namespace SeaHaven.Services.Constants;
+
+public static class TeamMemberConstants
+{
+    public static readonly IReadOnlyList<string> Roles =
+        new[] { "Dispatcher", "Scheduler", "Admin" };
+
+    public static readonly IReadOnlyList<string> ServiceAreas =
+        new[] { "East", "Central", "West", "California" };
+
+    public static readonly IReadOnlySet<string> Colors = new HashSet<string>(
+        new[]
+        {
+            "#F59E0B", "#0D9488", "#6366F1", "#F43F5E", "#7C3AED",
+            "#0EA5E9", "#16A34A", "#EA580C", "#0891B2", "#C026D3"
+        },
+        StringComparer.OrdinalIgnoreCase);
+
+    public static string? CanonicalRole(string? value) => Canonical(value, Roles);
+
+    public static string? CanonicalArea(string? value) => Canonical(value, ServiceAreas);
+
+    private static string? Canonical(string? value, IReadOnlyList<string> allowed)
+    {
+        if (string.IsNullOrWhiteSpace(value))
+            return null;
+
+        return allowed.FirstOrDefault(item =>
+            string.Equals(item, value.Trim(), StringComparison.OrdinalIgnoreCase));
+    }
+}
diff --git a/SeaHaven.Services/DTOs/IdentityDTOs.cs b/SeaHaven.Services/DTOs/IdentityDTOs.cs
index 9afc76c..ad3b8cb 100644
--- a/SeaHaven.Services/DTOs/IdentityDTOs.cs
+++ b/SeaHaven.Services/DTOs/IdentityDTOs.cs
@@ -57,6 +57,10 @@ namespace SeaHaven.Services.DTOs
         public string Date { get; set; } = string.Empty;
         public string? Status { get; set; }
         public string? Id { get; set; }
+        public string? Phone { get; set; }
+        public string? Color { get; set; }
+        public bool? PendingRegistration { get; set; }
+        public IReadOnlyList<string> ServiceAreas { get; set; } = Array.Empty<string>();
     }
 
     public class UserProfileRowDTO
diff --git a/SeaHaven.Services/DTOs/TeamMemberDTOs.cs b/SeaHaven.Services/DTOs/TeamMemberDTOs.cs
new file mode 100644
index 0000000..8c430b9
--- /dev/null
+++ b/SeaHaven.Services/DTOs/TeamMemberDTOs.cs
@@ -0,0 +1,33 @@
+using Data.SeaHavenIndustries.Enums;
+
+namespace SeaHaven.Services.DTOs;
+
+public sealed record CreateTeamMemberRequestDTO
+{
+    public string? Name { get; init; }
+    public string? Role { get; init; }
+    public string? Color { get; init; }
+    public string? Email { get; init; }
+    public string? Phone { get; init; }
+    public IReadOnlyList<string>? ServiceAreas { get; init; }
+    public IReadOnlyDictionary<string, UserPermissionState>? PermissionOverrides { get; init; }
+}
+
+public sealed class TeamMemberCreatedDTO
+{
+    public required string Id { get; init; }
+    public required string Name { get; init; }
+    public required string Role { get; init; }
+    public required string Color { get; init; }
+    public string? Email { get; init; }
+    public string? Phone { get; init; }
+    public required IReadOnlyList<string> ServiceAreas { get; init; }
+    public bool PendingRegistration { get; init; }
+}
+
+public sealed class CreateTeamMemberOutcomeDTO
+{
+    public bool Success { get; init; }
+    public string? Error { get; init; }
+    public TeamMemberCreatedDTO? Member { get; init; }
+}
diff --git a/SeaHaven.Services/Implementation/TeamMemberService.cs b/SeaHaven.Services/Implementation/TeamMemberService.cs
new file mode 100644
index 0000000..ad01254
--- /dev/null
+++ b/SeaHaven.Services/Implementation/TeamMemberService.cs
@@ -0,0 +1,214 @@
+using System.Net.Mail;
+using System.Security.Claims;
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using Microsoft.AspNetCore.Identity;
+using SeaHaven.DataServices.Interfaces;
+using SeaHaven.Services.Constants;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Interfaces;
+
+namespace SeaHaven.Services.Implementation;
+
+public sealed class TeamMemberService : ITeamMemberService
+{
+    private const string ActiveStatus = "Active";
+    private readonly UserManager<ApplicationUser> _userManager;
+    private readonly RoleManager<IdentityRole> _roleManager;
+    private readonly IUserServiceAreaDataService _areaDataService;
+    private readonly ITeamPermissionOverrideDataService _permissionDataService;
+
+    public TeamMemberService(
+        UserManager<ApplicationUser> userManager,
+        RoleManager<IdentityRole> roleManager,
+        IUserServiceAreaDataService areaDataService,
+        ITeamPermissionOverrideDataService permissionDataService)
+    {
+        _userManager = userManager;
+        _roleManager = roleManager;
+        _areaDataService = areaDataService;
+        _permissionDataService = permissionDataService;
+    }
+
+    public async Task<CreateTeamMemberOutcomeDTO> CreateAsync(
+        CreateTeamMemberRequestDTO request,
+        ClaimsPrincipal caller,
+        CancellationToken cancellationToken)
+    {
+        if (caller?.IsInRole("Admin") != true)
+            return Failure("Forbidden");
+
+        var validation = Validate(request, out var role, out var color, out var email, out var areas, out var overrides);
+        if (validation is not null)
+            return Failure(validation);
+
+        if (await _userManager.FindByEmailAsync(email!) is not null)
+            return Failure("Email is already in use.");
+
+        if (!await _roleManager.RoleExistsAsync(role!))
+        {
+            var roleResult = await _roleManager.CreateAsync(new IdentityRole(role!));
+            if (!roleResult.Succeeded)
+                return Failure(roleResult.Errors.FirstOrDefault()?.Description ?? "Unable to create role.");
+        }
+
+        var now = DateTime.UtcNow;
+        var user = new ApplicationUser
+        {
+            UserName = email,
+            Email = email,
+            EmailConfirmed = false,
+            FirstName = request.Name!.Trim(),
+            Contact = request.Phone?.Trim(),
+            PhoneNumber = request.Phone?.Trim(),
+            Color = color,
+            UniqueName = ActiveStatus,
+            CreatedDate = now,
+            PendingRegistration = true,
+            PendingRegistrationCreatedDate = now
+        };
+
+        var createResult = await _userManager.CreateAsync(user);
+        if (!createResult.Succeeded)
+            return Failure(createResult.Errors.FirstOrDefault()?.Description ?? "Unable to create team member.");
+
+        var addRoleResult = await _userManager.AddToRoleAsync(user, role!);
+        if (!addRoleResult.Succeeded)
+        {
+            await _userManager.DeleteAsync(user);
+            return Failure(addRoleResult.Errors.FirstOrDefault()?.Description ?? "Unable to assign role.");
+        }
+
+        try
+        {
+            await _areaDataService.ReplaceAsync(user.Id, areas!, cancellationToken);
+            await _permissionDataService.SetOverridesAsync(user.Id, overrides!, cancellationToken);
+        }
+        catch
+        {
+            await _userManager.DeleteAsync(user);
+            throw;
+        }
+
+        return new CreateTeamMemberOutcomeDTO
+        {
+            Success = true,
+            Member = new TeamMemberCreatedDTO
+            {
+                Id = user.Id,
+                Name = user.FirstName!,
+                Role = role!,
+                Color = color!,
+                Email = user.Email,
+                Phone = user.PhoneNumber,
+                ServiceAreas = areas!,
+                PendingRegistration = true
+            }
+        };
+    }
+
+    private static string? Validate(
+        CreateTeamMemberRequestDTO request,
+        out string? role,
+        out string? color,
+        out string? email,
+        out IReadOnlyList<string>? areas,
+        out IReadOnlyDictionary<string, UserPermissionState>? overrides)
+    {
+        role = TeamMemberConstants.CanonicalRole(request.Role);
+        color = request.Color?.Trim();
+        email = request.Email?.Trim();
+        areas = NormalizeAreas(request.ServiceAreas, out var invalidArea);
+        overrides = NormalizeOverrides(request.PermissionOverrides, out var invalidPermission);
+
+        if (string.IsNullOrWhiteSpace(request.Name))
+            return "Name is required.";
+        if (role is null)
+            return "Role must be Dispatcher, Scheduler, or Admin.";
+        if (color is null || !TeamMemberConstants.Colors.Contains(color))
+            return "Color must be selected from the accessible palette.";
+        if (!IsValidEmail(email))
+            return "A valid email is required.";
+        if (invalidArea is not null)
+            return $"Unknown service area: {invalidArea}.";
+        if (string.Equals(role, "Dispatcher", StringComparison.Ordinal)
+            && (areas is null || areas.Count == 0))
+            return "At least one service area is required for a Dispatcher.";
+        if (!string.Equals(role, "Dispatcher", StringComparison.Ordinal)
+            && areas is { Count: > 0 })
+            return "Service areas are only available for Dispatchers.";
+        if (invalidPermission is not null)
+            return $"Unknown permission key: {invalidPermission}.";
+
+        return null;
+    }
+
+    private static IReadOnlyList<string> NormalizeAreas(
+        IReadOnlyList<string>? values,
+        out string? invalidArea)
+    {
+        invalidArea = null;
+        var normalized = new List<string>();
+        foreach (var value in values ?? Array.Empty<string>())
+        {
+            var canonical = TeamMemberConstants.CanonicalArea(value);
+            if (canonical is null)
+            {
+                invalidArea = value;
+                return Array.Empty<string>();
+            }
+
+            if (!normalized.Contains(canonical, StringComparer.Ordinal))
+                normalized.Add(canonical);
+        }
+
+        return normalized;
+    }
+
+    private static IReadOnlyDictionary<string, UserPermissionState> NormalizeOverrides(
+        IReadOnlyDictionary<string, UserPermissionState>? values,
+        out string? invalidPermission)
+    {
+        invalidPermission = null;
+        var normalized = new Dictionary<string, UserPermissionState>(StringComparer.OrdinalIgnoreCase);
+        foreach (var pair in values ?? new Dictionary<string, UserPermissionState>())
+        {
+            var canonical = TeamPermissionKeys.All.FirstOrDefault(key =>
+                string.Equals(key, pair.Key, StringComparison.OrdinalIgnoreCase));
+            if (canonical is null)
+            {
+                invalidPermission = pair.Key;
+                return new Dictionary<string, UserPermissionState>();
+            }
+
+            if (!Enum.IsDefined(pair.Value))
+            {
+                invalidPermission = pair.Key;
+                return new Dictionary<string, UserPermissionState>();
+            }
+
+            normalized[canonical] = pair.Value;
+        }
+
+        return normalized;
+    }
+
+    private static bool IsValidEmail(string? value)
+    {
+        if (string.IsNullOrWhiteSpace(value))
+            return false;
+
+        try
+        {
+            var address = new MailAddress(value);
+            return string.Equals(address.Address, value, StringComparison.OrdinalIgnoreCase);
+        }
+        catch (FormatException)
+        {
+            return false;
+        }
+    }
+
+    private static CreateTeamMemberOutcomeDTO Failure(string error) =>
+        new() { Success = false, Error = error };
+}
diff --git a/SeaHaven.Services/Implementation/UserService.cs b/SeaHaven.Services/Implementation/UserService.cs
index 5d35d39..99105a3 100644
--- a/SeaHaven.Services/Implementation/UserService.cs
+++ b/SeaHaven.Services/Implementation/UserService.cs
@@ -38,7 +38,11 @@ namespace SeaHaven.Services.Implementation
                 Name = s.Name,
                 Date = s.CreatedDate != null ? s.CreatedDate.Value.Date.ToString("MMM dd yyyy") : "",
                 Status = s.Status,
-                Id = s.Id
+                Id = s.Id,
+                Phone = s.Phone,
+                Color = s.Color,
+                PendingRegistration = s.PendingRegistration,
+                ServiceAreas = s.ServiceAreas
             });
         }
 
diff --git a/SeaHaven.Services/Interfaces/ITeamMemberService.cs b/SeaHaven.Services/Interfaces/ITeamMemberService.cs
new file mode 100644
index 0000000..36016cf
--- /dev/null
+++ b/SeaHaven.Services/Interfaces/ITeamMemberService.cs
@@ -0,0 +1,12 @@
+using System.Security.Claims;
+using SeaHaven.Services.DTOs;
+
+namespace SeaHaven.Services.Interfaces;
+
+public interface ITeamMemberService
+{
+    Task<CreateTeamMemberOutcomeDTO> CreateAsync(
+        CreateTeamMemberRequestDTO request,
+        ClaimsPrincipal caller,
+        CancellationToken cancellationToken);
+}

From b9c916cb22b01e756e454979c6d63c65b4a4b8a6 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 20:01:46 -0300
Subject: [PATCH 043/183] feat(team-members): add member detail editing
 (SH-326)

---
 .../TeamMemberServiceTests.cs                 | 132 +++++++++++++++-
 .../Controllers/TeamMemberController.cs       |  31 ++++
 .../TeamPermissionOverrideDataService.cs      |   7 +
 .../ITeamPermissionOverrideDataService.cs     |   2 +
 .../TeamPermissionServiceTests.cs             |   6 +
 SeaHaven.Services/DTOs/TeamMemberDTOs.cs      |  28 +++-
 .../Implementation/TeamMemberService.cs       | 142 +++++++++++++++++-
 .../Interfaces/ITeamMemberService.cs          |   9 ++
 8 files changed, 344 insertions(+), 13 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs b/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs
index 4b39ede..e2295ff 100644
--- a/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs
@@ -9,6 +9,7 @@ using Moq;
 using SeaHaven.DataServices.Interfaces;
 using SeaHaven.Services.DTOs;
 using SeaHaven.Services.Implementation;
+using SeaHaven.Services.Interfaces;
 using Xunit;
 
 namespace Api.SeaHavenIndustries.Tests;
@@ -24,7 +25,9 @@ public sealed class TeamMemberServiceTests
             userManager.Object,
             roleManager.Object,
             Mock.Of<IUserServiceAreaDataService>(),
-            Mock.Of<ITeamPermissionOverrideDataService>());
+            Mock.Of<ITeamPermissionOverrideDataService>(),
+            Mock.Of<IUserDataService>(),
+            Mock.Of<ITeamPermissionService>());
 
         var result = await service.CreateAsync(
             ValidRequest() with { ServiceAreas = Array.Empty<string>() },
@@ -39,7 +42,7 @@ public sealed class TeamMemberServiceTests
     [Fact]
     public async Task Create_RejectsUnknownColorAndPermission()
     {
-        var service = NewService(out var userManager, out _, out _, out _);
+        var service = NewService(out var userManager, out _, out _, out _, out _, out _);
 
         var badColor = await service.CreateAsync(
             ValidRequest() with { Color = "#000000" },
@@ -64,7 +67,7 @@ public sealed class TeamMemberServiceTests
     [Fact]
     public async Task Create_PersistsPendingUserWithoutPasswordAndStoresAreasAndOverrides()
     {
-        var service = NewService(out var userManager, out var roleManager, out var areas, out var overrides);
+        var service = NewService(out var userManager, out var roleManager, out var areas, out var overrides, out _, out _);
         ApplicationUser? created = null;
         userManager
             .Setup(manager => manager.CreateAsync(It.IsAny<ApplicationUser>()))
@@ -95,17 +98,136 @@ public sealed class TeamMemberServiceTests
         overrides.Verify(data => data.SetOverridesAsync("new-user", It.Is<IReadOnlyDictionary<string, UserPermissionState>>(value => value["deleteSites"] == UserPermissionState.Allow), It.IsAny<CancellationToken>()), Times.Once);
     }
 
+    [Fact]
+    public async Task Update_ProtectsAccountOwnerFromRoleChangeAndDeactivation()
+    {
+        var service = NewService(
+            out var userManager,
+            out _,
+            out _,
+            out _,
+            out var userData,
+            out _);
+        var owner = new ApplicationUser
+        {
+            Id = "owner",
+            FirstName = "Primary",
+            Email = "owner@example.com",
+            IsAccountOwner = true
+        };
+        userManager.Setup(manager => manager.FindByIdAsync(owner.Id)).ReturnsAsync(owner);
+        userManager.Setup(manager => manager.GetRolesAsync(owner)).ReturnsAsync(new List<string> { "Admin" });
+        userData.Setup(data => data.IsAccountOwnerAsync(owner.Id, It.IsAny<CancellationToken>())).ReturnsAsync(true);
+
+        var result = await service.UpdateAsync(
+            owner.Id,
+            new UpdateTeamMemberRequestDTO
+            {
+                Name = "Primary",
+                Role = "Dispatcher",
+                Color = "#F59E0B",
+                Email = owner.Email,
+                ServiceAreas = new[] { "East" },
+                IsActive = false
+            },
+            Admin(),
+            CancellationToken.None);
+
+        result.Success.Should().BeFalse();
+        result.Error.Should().Be("Forbidden");
+        userData.Verify(data => data.UpdateUserAsync(It.IsAny<ApplicationUser>(), It.IsAny<CancellationToken>()), Times.Never);
+    }
+
+    [Fact]
+    public async Task Update_ReplacesAreasAndOverridesAndReturnsFullDetail()
+    {
+        var service = NewService(
+            out var userManager,
+            out var roleManager,
+            out var areas,
+            out var overrides,
+            out var userData,
+            out var permissions);
+        var user = new ApplicationUser
+        {
+            Id = "dispatcher",
+            FirstName = "Taylor",
+            Email = "old@example.com",
+            Color = "#F59E0B",
+            UniqueName = "Active"
+        };
+        userManager.Setup(manager => manager.FindByIdAsync(user.Id)).ReturnsAsync(user);
+        userManager.Setup(manager => manager.GetRolesAsync(user)).ReturnsAsync(new List<string> { "Dispatcher" });
+        userManager.Setup(manager => manager.FindByEmailAsync("new@example.com")).ReturnsAsync((ApplicationUser?)null);
+        roleManager.Setup(manager => manager.RoleExistsAsync("Dispatcher")).ReturnsAsync(true);
+        areas.Setup(data => data.GetForUserAsync(user.Id, It.IsAny<CancellationToken>()))
+            .ReturnsAsync(new[] { "Central" });
+        permissions.Setup(data => data.GetProfileAsync(user.Id, It.IsAny<ClaimsPrincipal>(), It.IsAny<CancellationToken>()))
+            .ReturnsAsync(TeamPermissionResult<TeamPermissionProfileDTO>.Success(new TeamPermissionProfileDTO
+            {
+                UserId = user.Id,
+                RoleName = "Dispatcher",
+                Permissions = new[]
+                {
+                    new TeamPermissionValueDTO
+                    {
+                        PermissionKey = "createSites",
+                        OverrideState = UserPermissionState.Deny,
+                        IsGranted = false
+                    }
+                }
+            }));
+
+        var result = await service.UpdateAsync(
+            user.Id,
+            new UpdateTeamMemberRequestDTO
+            {
+                Name = "Taylor Updated",
+                Role = "Dispatcher",
+                Color = "#0D9488",
+                Email = "new@example.com",
+                Phone = "555-0101",
+                ServiceAreas = new[] { "West" },
+                PermissionOverrides = new Dictionary<string, UserPermissionState>
+                {
+                    ["createSites"] = UserPermissionState.Deny
+                }
+            },
+            Admin(),
+            CancellationToken.None);
+
+        result.Success.Should().BeTrue();
+        result.Member!.Name.Should().Be("Taylor Updated");
+        result.Member.Email.Should().Be("new@example.com");
+        result.Member.ServiceAreas.Should().Equal("Central");
+        result.Member.Permissions.Should().ContainSingle(permission => permission.PermissionKey == "createSites");
+        userData.Verify(data => data.UpdateUserAsync(user, It.IsAny<CancellationToken>()), Times.Once);
+        areas.Verify(data => data.ReplaceAsync(user.Id, It.Is<IReadOnlyCollection<string>>(value => value.SequenceEqual(new[] { "West" })), It.IsAny<CancellationToken>()), Times.Once);
+        overrides.Verify(data => data.ClearOverridesAsync(user.Id, It.IsAny<CancellationToken>()), Times.Once);
+        overrides.Verify(data => data.SetOverridesAsync(user.Id, It.Is<IReadOnlyDictionary<string, UserPermissionState>>(value => value["createSites"] == UserPermissionState.Deny), It.IsAny<CancellationToken>()), Times.Once);
+    }
+
     private static TeamMemberService NewService(
         out Mock<UserManager<ApplicationUser>> userManager,
         out Mock<RoleManager<IdentityRole>> roleManager,
         out Mock<IUserServiceAreaDataService> areas,
-        out Mock<ITeamPermissionOverrideDataService> overrides)
+        out Mock<ITeamPermissionOverrideDataService> overrides,
+        out Mock<IUserDataService> userData,
+        out Mock<ITeamPermissionService> permissions)
     {
         userManager = UserManager();
         roleManager = RoleManager();
         areas = new Mock<IUserServiceAreaDataService>();
         overrides = new Mock<ITeamPermissionOverrideDataService>();
-        return new TeamMemberService(userManager.Object, roleManager.Object, areas.Object, overrides.Object);
+        userData = new Mock<IUserDataService>();
+        permissions = new Mock<ITeamPermissionService>();
+        return new TeamMemberService(
+            userManager.Object,
+            roleManager.Object,
+            areas.Object,
+            overrides.Object,
+            userData.Object,
+            permissions.Object);
     }
 
     private static Mock<UserManager<ApplicationUser>> UserManager()
diff --git a/Api.SeaHavenIndustries/Controllers/TeamMemberController.cs b/Api.SeaHavenIndustries/Controllers/TeamMemberController.cs
index d09c6bd..f6537b6 100644
--- a/Api.SeaHavenIndustries/Controllers/TeamMemberController.cs
+++ b/Api.SeaHavenIndustries/Controllers/TeamMemberController.cs
@@ -33,4 +33,35 @@ public sealed class TeamMemberController : ControllerBase
 
         return Ok(outcome.Member);
     }
+
+    [HttpGet("{userId}")]
+    public async Task<IActionResult> Get(string userId, CancellationToken cancellationToken)
+    {
+        var outcome = await _teamMemberService.GetAsync(userId, User, cancellationToken);
+        return ToActionResult(outcome);
+    }
+
+    [HttpPut("{userId}")]
+    public async Task<IActionResult> Update(
+        string userId,
+        UpdateTeamMemberRequestDTO request,
+        CancellationToken cancellationToken)
+    {
+        var outcome = await _teamMemberService.UpdateAsync(userId, request, User, cancellationToken);
+        return ToActionResult(outcome);
+    }
+
+    private IActionResult ToActionResult(TeamMemberOperationOutcomeDTO outcome)
+    {
+        if (outcome.Success)
+            return Ok(outcome.Member);
+
+        if (string.Equals(outcome.Error, "Forbidden", StringComparison.Ordinal))
+            return Forbid();
+
+        if (string.Equals(outcome.Error, "Team member not found.", StringComparison.Ordinal))
+            return NotFound(new { message = outcome.Error });
+
+        return BadRequest(new { message = outcome.Error });
+    }
 }
diff --git a/SeaHaven.DataServices/Implementation/TeamPermissionOverrideDataService.cs b/SeaHaven.DataServices/Implementation/TeamPermissionOverrideDataService.cs
index ba176af..26b9d82 100644
--- a/SeaHaven.DataServices/Implementation/TeamPermissionOverrideDataService.cs
+++ b/SeaHaven.DataServices/Implementation/TeamPermissionOverrideDataService.cs
@@ -113,4 +113,11 @@ public sealed class TeamPermissionOverrideDataService : ITeamPermissionOverrideD
             await _context.SaveChangesAsync(cancellationToken);
         }
     }
+
+    public async Task ClearOverridesAsync(string userId, CancellationToken cancellationToken)
+    {
+        await _context.UserPermissionOverrides
+            .Where(item => item.UserId == userId)
+            .ExecuteDeleteAsync(cancellationToken);
+    }
 }
diff --git a/SeaHaven.DataServices/Interfaces/ITeamPermissionOverrideDataService.cs b/SeaHaven.DataServices/Interfaces/ITeamPermissionOverrideDataService.cs
index 416c6c9..79d9b9b 100644
--- a/SeaHaven.DataServices/Interfaces/ITeamPermissionOverrideDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/ITeamPermissionOverrideDataService.cs
@@ -16,4 +16,6 @@ public interface ITeamPermissionOverrideDataService
         string userId,
         IReadOnlyDictionary<string, UserPermissionState> overrides,
         CancellationToken cancellationToken);
+
+    Task ClearOverridesAsync(string userId, CancellationToken cancellationToken);
 }
diff --git a/SeaHaven.Services.Tests/TeamPermissionServiceTests.cs b/SeaHaven.Services.Tests/TeamPermissionServiceTests.cs
index b22042f..33bda2f 100644
--- a/SeaHaven.Services.Tests/TeamPermissionServiceTests.cs
+++ b/SeaHaven.Services.Tests/TeamPermissionServiceTests.cs
@@ -140,5 +140,11 @@ public sealed class TeamPermissionServiceTests
 
             return Task.CompletedTask;
         }
+
+        public Task ClearOverridesAsync(string userId, CancellationToken cancellationToken)
+        {
+            _overrides.Clear();
+            return Task.CompletedTask;
+        }
     }
 }
diff --git a/SeaHaven.Services/DTOs/TeamMemberDTOs.cs b/SeaHaven.Services/DTOs/TeamMemberDTOs.cs
index 8c430b9..814e279 100644
--- a/SeaHaven.Services/DTOs/TeamMemberDTOs.cs
+++ b/SeaHaven.Services/DTOs/TeamMemberDTOs.cs
@@ -13,7 +13,7 @@ public sealed record CreateTeamMemberRequestDTO
     public IReadOnlyDictionary<string, UserPermissionState>? PermissionOverrides { get; init; }
 }
 
-public sealed class TeamMemberCreatedDTO
+public class TeamMemberCreatedDTO
 {
     public required string Id { get; init; }
     public required string Name { get; init; }
@@ -25,6 +25,32 @@ public sealed class TeamMemberCreatedDTO
     public bool PendingRegistration { get; init; }
 }
 
+public sealed class TeamMemberDetailDTO : TeamMemberCreatedDTO
+{
+    public string Status { get; init; } = "Active";
+    public bool IsAccountOwner { get; init; }
+    public IReadOnlyList<TeamPermissionValueDTO> Permissions { get; init; } = Array.Empty<TeamPermissionValueDTO>();
+}
+
+public sealed record UpdateTeamMemberRequestDTO
+{
+    public string? Name { get; init; }
+    public string? Role { get; init; }
+    public string? Color { get; init; }
+    public string? Email { get; init; }
+    public string? Phone { get; init; }
+    public IReadOnlyList<string>? ServiceAreas { get; init; }
+    public IReadOnlyDictionary<string, UserPermissionState>? PermissionOverrides { get; init; }
+    public bool IsActive { get; init; } = true;
+}
+
+public sealed class TeamMemberOperationOutcomeDTO
+{
+    public bool Success { get; init; }
+    public string? Error { get; init; }
+    public TeamMemberDetailDTO? Member { get; init; }
+}
+
 public sealed class CreateTeamMemberOutcomeDTO
 {
     public bool Success { get; init; }
diff --git a/SeaHaven.Services/Implementation/TeamMemberService.cs b/SeaHaven.Services/Implementation/TeamMemberService.cs
index ad01254..5e85e89 100644
--- a/SeaHaven.Services/Implementation/TeamMemberService.cs
+++ b/SeaHaven.Services/Implementation/TeamMemberService.cs
@@ -17,17 +17,23 @@ public sealed class TeamMemberService : ITeamMemberService
     private readonly RoleManager<IdentityRole> _roleManager;
     private readonly IUserServiceAreaDataService _areaDataService;
     private readonly ITeamPermissionOverrideDataService _permissionDataService;
+    private readonly IUserDataService _userDataService;
+    private readonly ITeamPermissionService _permissionService;
 
     public TeamMemberService(
         UserManager<ApplicationUser> userManager,
         RoleManager<IdentityRole> roleManager,
         IUserServiceAreaDataService areaDataService,
-        ITeamPermissionOverrideDataService permissionDataService)
+        ITeamPermissionOverrideDataService permissionDataService,
+        IUserDataService userDataService,
+        ITeamPermissionService permissionService)
     {
         _userManager = userManager;
         _roleManager = roleManager;
         _areaDataService = areaDataService;
         _permissionDataService = permissionDataService;
+        _userDataService = userDataService;
+        _permissionService = permissionService;
     }
 
     public async Task<CreateTeamMemberOutcomeDTO> CreateAsync(
@@ -45,12 +51,9 @@ public sealed class TeamMemberService : ITeamMemberService
         if (await _userManager.FindByEmailAsync(email!) is not null)
             return Failure("Email is already in use.");
 
-        if (!await _roleManager.RoleExistsAsync(role!))
-        {
-            var roleResult = await _roleManager.CreateAsync(new IdentityRole(role!));
-            if (!roleResult.Succeeded)
-                return Failure(roleResult.Errors.FirstOrDefault()?.Description ?? "Unable to create role.");
-        }
+        var roleError = await EnsureRoleAsync(role!);
+        if (roleError is not null)
+            return Failure(roleError);
 
         var now = DateTime.UtcNow;
         var user = new ApplicationUser
@@ -107,6 +110,128 @@ public sealed class TeamMemberService : ITeamMemberService
         };
     }
 
+    public async Task<TeamMemberOperationOutcomeDTO> GetAsync(
+        string userId,
+        ClaimsPrincipal caller,
+        CancellationToken cancellationToken)
+    {
+        if (caller?.IsInRole("Admin") != true)
+            return OperationFailure("Forbidden");
+
+        var user = await _userManager.FindByIdAsync(userId);
+        if (user is null)
+            return OperationFailure("Team member not found.");
+
+        return await OperationSuccessAsync(user, caller, cancellationToken);
+    }
+
+    public async Task<TeamMemberOperationOutcomeDTO> UpdateAsync(
+        string userId,
+        UpdateTeamMemberRequestDTO request,
+        ClaimsPrincipal caller,
+        CancellationToken cancellationToken)
+    {
+        if (caller?.IsInRole("Admin") != true)
+            return OperationFailure("Forbidden");
+
+        var user = await _userManager.FindByIdAsync(userId);
+        if (user is null)
+            return OperationFailure("Team member not found.");
+
+        var existingRoles = await _userManager.GetRolesAsync(user);
+        var existingRole = existingRoles.FirstOrDefault();
+        var candidate = new CreateTeamMemberRequestDTO
+        {
+            Name = request.Name,
+            Role = request.Role,
+            Color = request.Color,
+            Email = request.Email,
+            Phone = request.Phone,
+            ServiceAreas = request.ServiceAreas,
+            PermissionOverrides = request.PermissionOverrides
+        };
+        var validation = Validate(candidate, out var role, out var color, out var email, out var areas, out var overrides);
+        if (validation is not null)
+            return OperationFailure(validation);
+
+        var roleChanged = !string.Equals(existingRole, role, StringComparison.OrdinalIgnoreCase);
+        var isOwner = await _userDataService.IsAccountOwnerAsync(user.Id, cancellationToken);
+        if (isOwner && (roleChanged || !request.IsActive))
+            return OperationFailure("Forbidden");
+
+        var duplicate = await _userManager.FindByEmailAsync(email!);
+        if (duplicate is not null && !string.Equals(duplicate.Id, user.Id, StringComparison.Ordinal))
+            return OperationFailure("Email is already in use.");
+
+        var roleError = await EnsureRoleAsync(role!);
+        if (roleError is not null)
+            return OperationFailure(roleError);
+
+        user.FirstName = candidate.Name!.Trim();
+        user.Email = email;
+        user.UserName = email;
+        user.NormalizedEmail = email!.ToUpperInvariant();
+        user.NormalizedUserName = email.ToUpperInvariant();
+        user.Contact = candidate.Phone?.Trim();
+        user.PhoneNumber = candidate.Phone?.Trim();
+        user.Color = color;
+        user.UniqueName = request.IsActive ? ActiveStatus : "Inactive";
+        user.IsDeleted = !request.IsActive;
+
+        if (roleChanged)
+        {
+            if (existingRoles.Count > 0)
+                await _userManager.RemoveFromRolesAsync(user, existingRoles);
+            await _userManager.AddToRoleAsync(user, role!);
+        }
+
+        await _userDataService.UpdateUserAsync(user, cancellationToken);
+        await _areaDataService.ReplaceAsync(user.Id, areas!, cancellationToken);
+        await _permissionDataService.ClearOverridesAsync(user.Id, cancellationToken);
+        await _permissionDataService.SetOverridesAsync(user.Id, overrides!, cancellationToken);
+
+        return await OperationSuccessAsync(user, caller, cancellationToken);
+    }
+
+    private async Task<string?> EnsureRoleAsync(string role)
+    {
+        if (await _roleManager.RoleExistsAsync(role))
+            return null;
+
+        var roleResult = await _roleManager.CreateAsync(new IdentityRole(role));
+        return roleResult.Succeeded
+            ? null
+            : roleResult.Errors.FirstOrDefault()?.Description ?? "Unable to create role.";
+    }
+
+    private async Task<TeamMemberOperationOutcomeDTO> OperationSuccessAsync(
+        ApplicationUser user,
+        ClaimsPrincipal caller,
+        CancellationToken cancellationToken)
+    {
+        var roles = await _userManager.GetRolesAsync(user);
+        var profile = await _permissionService.GetProfileAsync(user.Id, caller, cancellationToken);
+        var areas = await _areaDataService.GetForUserAsync(user.Id, cancellationToken);
+        return new TeamMemberOperationOutcomeDTO
+        {
+            Success = true,
+            Member = new TeamMemberDetailDTO
+            {
+                Id = user.Id,
+                Name = $"{user.FirstName ?? ""} {user.LastName ?? ""}".Trim(),
+                Role = TeamMemberConstants.CanonicalRole(roles.FirstOrDefault()) ?? roles.FirstOrDefault() ?? "",
+                Color = user.Color ?? "",
+                Email = user.Email,
+                Phone = user.Contact ?? user.PhoneNumber,
+                ServiceAreas = areas,
+                PendingRegistration = user.PendingRegistration == true,
+                Status = user.UniqueName ?? "Active",
+                IsAccountOwner = user.IsAccountOwner,
+                Permissions = profile?.Value?.Permissions ?? Array.Empty<TeamPermissionValueDTO>()
+            }
+        };
+    }
+
     private static string? Validate(
         CreateTeamMemberRequestDTO request,
         out string? role,
@@ -211,4 +336,7 @@ public sealed class TeamMemberService : ITeamMemberService
 
     private static CreateTeamMemberOutcomeDTO Failure(string error) =>
         new() { Success = false, Error = error };
+
+    private static TeamMemberOperationOutcomeDTO OperationFailure(string error) =>
+        new() { Success = false, Error = error };
 }
diff --git a/SeaHaven.Services/Interfaces/ITeamMemberService.cs b/SeaHaven.Services/Interfaces/ITeamMemberService.cs
index 36016cf..702625f 100644
--- a/SeaHaven.Services/Interfaces/ITeamMemberService.cs
+++ b/SeaHaven.Services/Interfaces/ITeamMemberService.cs
@@ -9,4 +9,13 @@ public interface ITeamMemberService
         CreateTeamMemberRequestDTO request,
         ClaimsPrincipal caller,
         CancellationToken cancellationToken);
+    Task<TeamMemberOperationOutcomeDTO> GetAsync(
+        string userId,
+        ClaimsPrincipal caller,
+        CancellationToken cancellationToken);
+    Task<TeamMemberOperationOutcomeDTO> UpdateAsync(
+        string userId,
+        UpdateTeamMemberRequestDTO request,
+        ClaimsPrincipal caller,
+        CancellationToken cancellationToken);
 }

From a0b9fabb696425ae03a3570cce33ea74fa96a9f3 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 21:48:21 -0300
Subject: [PATCH 044/183] fix(team-members): preserve update semantics and
 validate identity results (SH-326)

---
 .../TeamMemberServiceTests.cs                 | 57 +++++++++++++++++++
 .../Implementation/TeamMemberService.cs       | 38 ++++++++++---
 2 files changed, 87 insertions(+), 8 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs b/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs
index e2295ff..04024f6 100644
--- a/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs
@@ -159,6 +159,14 @@ public sealed class TeamMemberServiceTests
         userManager.Setup(manager => manager.FindByIdAsync(user.Id)).ReturnsAsync(user);
         userManager.Setup(manager => manager.GetRolesAsync(user)).ReturnsAsync(new List<string> { "Dispatcher" });
         userManager.Setup(manager => manager.FindByEmailAsync("new@example.com")).ReturnsAsync((ApplicationUser?)null);
+        userManager.Setup(manager => manager.SetEmailAsync(user, "new@example.com"))
+            .Callback<ApplicationUser, string>((member, email) => member.Email = email)
+            .ReturnsAsync(IdentityResult.Success);
+        userManager.Setup(manager => manager.SetUserNameAsync(user, "new@example.com"))
+            .Callback<ApplicationUser, string>((member, email) => member.UserName = email)
+            .ReturnsAsync(IdentityResult.Success);
+        userManager.Setup(manager => manager.UpdateSecurityStampAsync(user))
+            .ReturnsAsync(IdentityResult.Success);
         roleManager.Setup(manager => manager.RoleExistsAsync("Dispatcher")).ReturnsAsync(true);
         areas.Setup(data => data.GetForUserAsync(user.Id, It.IsAny<CancellationToken>()))
             .ReturnsAsync(new[] { "Central" });
@@ -202,11 +210,60 @@ public sealed class TeamMemberServiceTests
         result.Member.ServiceAreas.Should().Equal("Central");
         result.Member.Permissions.Should().ContainSingle(permission => permission.PermissionKey == "createSites");
         userData.Verify(data => data.UpdateUserAsync(user, It.IsAny<CancellationToken>()), Times.Once);
+        userManager.Verify(manager => manager.UpdateSecurityStampAsync(user), Times.Once);
         areas.Verify(data => data.ReplaceAsync(user.Id, It.Is<IReadOnlyCollection<string>>(value => value.SequenceEqual(new[] { "West" })), It.IsAny<CancellationToken>()), Times.Once);
         overrides.Verify(data => data.ClearOverridesAsync(user.Id, It.IsAny<CancellationToken>()), Times.Once);
         overrides.Verify(data => data.SetOverridesAsync(user.Id, It.Is<IReadOnlyDictionary<string, UserPermissionState>>(value => value["createSites"] == UserPermissionState.Deny), It.IsAny<CancellationToken>()), Times.Once);
     }
 
+    [Fact]
+    public async Task Update_LeavesOmittedOverridesUnchanged()
+    {
+        var service = NewService(
+            out var userManager,
+            out var roleManager,
+            out var areas,
+            out var overrides,
+            out var userData,
+            out var permissions);
+        var user = new ApplicationUser
+        {
+            Id = "dispatcher",
+            FirstName = "Taylor",
+            Email = "taylor@example.com",
+            Color = "#F59E0B",
+            UniqueName = "Active"
+        };
+        userManager.Setup(manager => manager.FindByIdAsync(user.Id)).ReturnsAsync(user);
+        userManager.Setup(manager => manager.GetRolesAsync(user)).ReturnsAsync(new List<string> { "Dispatcher" });
+        roleManager.Setup(manager => manager.RoleExistsAsync("Dispatcher")).ReturnsAsync(true);
+        areas.Setup(data => data.GetForUserAsync(user.Id, It.IsAny<CancellationToken>())).ReturnsAsync(Array.Empty<string>());
+        permissions.Setup(data => data.GetProfileAsync(user.Id, It.IsAny<ClaimsPrincipal>(), It.IsAny<CancellationToken>()))
+            .ReturnsAsync(TeamPermissionResult<TeamPermissionProfileDTO>.Success(new TeamPermissionProfileDTO
+            {
+                UserId = user.Id,
+                Permissions = Array.Empty<TeamPermissionValueDTO>()
+            }));
+
+        var result = await service.UpdateAsync(
+            user.Id,
+            new UpdateTeamMemberRequestDTO
+            {
+                Name = "Taylor",
+                Role = "Dispatcher",
+                Color = "#F59E0B",
+                Email = user.Email,
+                ServiceAreas = new[] { "East" }
+            },
+            Admin(),
+            CancellationToken.None);
+
+        result.Success.Should().BeTrue();
+        overrides.Verify(data => data.ClearOverridesAsync(It.IsAny<string>(), It.IsAny<CancellationToken>()), Times.Never);
+        overrides.Verify(data => data.SetOverridesAsync(It.IsAny<string>(), It.IsAny<IReadOnlyDictionary<string, UserPermissionState>>(), It.IsAny<CancellationToken>()), Times.Never);
+        userData.Verify(data => data.UpdateUserAsync(user, It.IsAny<CancellationToken>()), Times.Once);
+    }
+
     private static TeamMemberService NewService(
         out Mock<UserManager<ApplicationUser>> userManager,
         out Mock<RoleManager<IdentityRole>> roleManager,
diff --git a/SeaHaven.Services/Implementation/TeamMemberService.cs b/SeaHaven.Services/Implementation/TeamMemberService.cs
index 5e85e89..aeeef94 100644
--- a/SeaHaven.Services/Implementation/TeamMemberService.cs
+++ b/SeaHaven.Services/Implementation/TeamMemberService.cs
@@ -168,27 +168,49 @@ public sealed class TeamMemberService : ITeamMemberService
             return OperationFailure(roleError);
 
         user.FirstName = candidate.Name!.Trim();
-        user.Email = email;
-        user.UserName = email;
-        user.NormalizedEmail = email!.ToUpperInvariant();
-        user.NormalizedUserName = email.ToUpperInvariant();
         user.Contact = candidate.Phone?.Trim();
         user.PhoneNumber = candidate.Phone?.Trim();
         user.Color = color;
         user.UniqueName = request.IsActive ? ActiveStatus : "Inactive";
         user.IsDeleted = !request.IsActive;
 
+        if (!string.Equals(user.Email, email, StringComparison.OrdinalIgnoreCase))
+        {
+            var emailResult = await _userManager.SetEmailAsync(user, email!);
+            if (!emailResult.Succeeded)
+                return OperationFailure(emailResult.Errors.FirstOrDefault()?.Description ?? "Unable to update email.");
+
+            var userNameResult = await _userManager.SetUserNameAsync(user, email!);
+            if (!userNameResult.Succeeded)
+                return OperationFailure(userNameResult.Errors.FirstOrDefault()?.Description ?? "Unable to update email.");
+
+            var securityStampResult = await _userManager.UpdateSecurityStampAsync(user);
+            if (!securityStampResult.Succeeded)
+                return OperationFailure(securityStampResult.Errors.FirstOrDefault()?.Description ?? "Unable to update email.");
+        }
+
         if (roleChanged)
         {
             if (existingRoles.Count > 0)
-                await _userManager.RemoveFromRolesAsync(user, existingRoles);
-            await _userManager.AddToRoleAsync(user, role!);
+            {
+                var removeRoleResult = await _userManager.RemoveFromRolesAsync(user, existingRoles);
+                if (!removeRoleResult.Succeeded)
+                    return OperationFailure(removeRoleResult.Errors.FirstOrDefault()?.Description ?? "Unable to update role.");
+            }
+
+            var addRoleResult = await _userManager.AddToRoleAsync(user, role!);
+            if (!addRoleResult.Succeeded)
+                return OperationFailure(addRoleResult.Errors.FirstOrDefault()?.Description ?? "Unable to update role.");
         }
 
         await _userDataService.UpdateUserAsync(user, cancellationToken);
         await _areaDataService.ReplaceAsync(user.Id, areas!, cancellationToken);
-        await _permissionDataService.ClearOverridesAsync(user.Id, cancellationToken);
-        await _permissionDataService.SetOverridesAsync(user.Id, overrides!, cancellationToken);
+        if (roleChanged || request.PermissionOverrides is not null)
+        {
+            await _permissionDataService.ClearOverridesAsync(user.Id, cancellationToken);
+            if (request.PermissionOverrides is not null)
+                await _permissionDataService.SetOverridesAsync(user.Id, overrides!, cancellationToken);
+        }
 
         return await OperationSuccessAsync(user, caller, cancellationToken);
     }

From 60e006e8d7ab8e04cdf0adac2b5c434580741a0b Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 22:17:59 -0300
Subject: [PATCH 045/183] fix(uplifts): calculate granted exposure amounts
 (SH-207)

---
 .../UpliftQueueReadTests.cs                   | 33 ++++++++++++++++++-
 .../Implementation/UpliftDataService.cs       | 10 ++++--
 2 files changed, 39 insertions(+), 4 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs b/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
index ad539bd..09beca4 100644
--- a/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
+++ b/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
@@ -86,7 +86,8 @@ public sealed class UpliftQueueReadTests
         var vendor = new Vendor { CompanyName = vendorName, IsActive = true };
         var workOrder = new WorkOrder
         {
-            WorkerOrderNumber = number,
+            InternalWONumber = number,
+            WorkerOrderNumber = $"legacy-{number}",
             SiteCode = site,
             Service = service,
             WorkerOrderTitle = "Repair"
@@ -407,6 +408,36 @@ public sealed class UpliftQueueReadTests
         itemB.WorkOrderApprovedExposureTotal.Should().Be(75m);
     }
 
+    [Fact]
+    public async Task Exposure_UsesGrantedAmountForVendorPortalAndRequestedAmountForWorkOrderRequests()
+    {
+        using var context = NewContext();
+        var (vendor, workOrder) = await SeedWorkOrderAsync(context, "WO-ORIGIN", "SITE-A", "HVAC");
+        var dispatch = await SeedDispatchAsync(context, vendor, workOrder, "DIS-ORIGIN");
+        context.DispatchUpliftRequests.AddRange(
+            Request(
+                dispatch,
+                "Approved",
+                new DateTime(2026, 3, 1),
+                decided: new DateTime(2026, 3, 2),
+                requested: 400m,
+                currentNte: 100m),
+            Request(
+                dispatch,
+                "Approved",
+                new DateTime(2026, 3, 3),
+                decided: new DateTime(2026, 3, 4),
+                requested: 250m,
+                createdBy: "internal-user",
+                currentNte: 100m));
+        await context.SaveChangesAsync();
+
+        var exposure = await new UpliftDataService(context)
+            .GetApprovedExposureForWorkOrdersAsync(new[] { workOrder.Id }, CancellationToken.None);
+
+        exposure.Should().ContainSingle().Which.AdminApprovedTotal.Should().Be(550m);
+    }
+
     [Fact]
     public async Task Exposure_IncludesLinkedDispatchesViaServerDerivedWorkOrderLinks()
     {
diff --git a/SeaHaven.DataServices/Implementation/UpliftDataService.cs b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
index 8d7ac66..658c8a7 100644
--- a/SeaHaven.DataServices/Implementation/UpliftDataService.cs
+++ b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
@@ -61,7 +61,7 @@ namespace SeaHaven.DataServices.Implementation
                     PONumber = x.d.PONumber,
                     WorkOrderId = x.d.WorkOrderId,
                     VendorCompanyName = x.v != null ? x.v.CompanyName : x.u.RequestedByVendorName,
-                    WorkOrderNumber = x.wo != null ? x.wo.WorkerOrderNumber : null,
+                    WorkOrderNumber = x.wo != null ? x.wo.InternalWONumber : null,
                     WorkOrderSiteCode = x.wo != null ? x.wo.SiteCode : null,
                     WorkOrderService = x.wo != null ? x.wo.Service : null,
                     RequestedByVendorName = x.u.RequestedByVendorName,
@@ -317,9 +317,13 @@ namespace SeaHaven.DataServices.Implementation
                 {
                     DispatchId = g.Key,
                     AutoApproved = g.Where(x => x.Status == "NoApprovalRequired")
-                        .Sum(x => (decimal?)x.RequestedNTE),
+                        .Sum(x => (decimal?)(x.createdby == null
+                            ? x.RequestedNTE - (x.CurrentNTE ?? 0m)
+                            : x.RequestedNTE)),
                     AdminApproved = g.Where(x => x.Status == "Approved")
-                        .Sum(x => (decimal?)x.RequestedNTE)
+                        .Sum(x => (decimal?)(x.createdby == null
+                            ? x.RequestedNTE - (x.CurrentNTE ?? 0m)
+                            : x.RequestedNTE))
                 })
                 .ToListAsync(cancellationToken);
 

From 316d1e6a6390ea52042633f41d9a114b2e6fcd4c Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 22:19:43 -0300
Subject: [PATCH 046/183] fix(uplifts): correct queue exposure projections
 (SH-210)

---
 .../UpliftQueueReadTests.cs                   | 62 ++++++++++++++++++-
 .../Implementation/UpliftDataService.cs       | 16 ++++-
 2 files changed, 74 insertions(+), 4 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs b/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
index ad539bd..39d8d91 100644
--- a/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
+++ b/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
@@ -86,6 +86,7 @@ public sealed class UpliftQueueReadTests
         var vendor = new Vendor { CompanyName = vendorName, IsActive = true };
         var workOrder = new WorkOrder
         {
+            InternalWONumber = number,
             WorkerOrderNumber = number,
             SiteCode = site,
             Service = service,
@@ -280,6 +281,35 @@ public sealed class UpliftQueueReadTests
         item.Status.Should().Be("Pending");
     }
 
+    [Fact]
+    public async Task List_WorkOrderNumber_RendersInternalShNumber_NotTheCrmExternalId()
+    {
+        using var context = NewContext();
+        var vendor = new Vendor { CompanyName = "Gateway", IsActive = true };
+        // Synced work orders carry the CRM external id in WorkerOrderNumber; the SH
+        // display number the board renders is stamped on InternalWONumber.
+        var workOrder = new WorkOrder
+        {
+            InternalWONumber = "10000000001",
+            WorkerOrderNumber = "CRM-EXT-77",
+            SiteCode = "SITE-EAST",
+            Service = "HVAC",
+            WorkerOrderTitle = "Repair"
+        };
+        context.AddRange(vendor, workOrder);
+        await context.SaveChangesAsync();
+        var dispatch = await SeedDispatchAsync(context, vendor, workOrder, "DIS-1");
+        context.DispatchUpliftRequests.Add(Request(dispatch, "Pending", new DateTime(2026, 3, 2)));
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        var result = await service.ListAsync(UserWithRoles("Approver"), "Pending", null, 1, 25, CancellationToken.None);
+
+        var item = result.Items.Should().ContainSingle().Subject;
+        item.WorkOrderNumber.Should().Be("10000000001");
+        item.WorkOrderNumber.Should().NotBe("CRM-EXT-77");
+    }
+
     [Fact]
     public async Task List_RequesterLabelFallsBackToCreatingUserName()
     {
@@ -353,7 +383,9 @@ public sealed class UpliftQueueReadTests
         var dispatchA = await SeedDispatchAsync(context, vendorA, workOrderA, "DIS-A");
         var dispatchB = await SeedDispatchAsync(context, vendorB, workOrderB, "DIS-B");
         context.DispatchUpliftRequests.AddRange(
-            Request(dispatchA, "Approved", new DateTime(2026, 3, 1), decided: new DateTime(2026, 3, 2), requested: 300m),
+            // Vendor-portal row (createdby null): stores the requested new NTE total,
+            // so the granted amount is 400 - 100 = 300.
+            Request(dispatchA, "Approved", new DateTime(2026, 3, 1), decided: new DateTime(2026, 3, 2), requested: 400m, currentNte: 100m),
             new DispatchUpliftRequest
             {
                 DispatchId = dispatchA.Id,
@@ -390,7 +422,7 @@ public sealed class UpliftQueueReadTests
                 RequiredTier = 1,
                 RequestedNTE = 999m
             },
-            Request(dispatchB, "Approved", new DateTime(2026, 3, 5), decided: new DateTime(2026, 3, 6), requested: 75m));
+            Request(dispatchB, "Approved", new DateTime(2026, 3, 5), decided: new DateTime(2026, 3, 6), requested: 75m, currentNte: 0m));
         await context.SaveChangesAsync();
         var service = NewService(context);
 
@@ -440,6 +472,32 @@ public sealed class UpliftQueueReadTests
         total.AutoApprovedTotal.Should().Be(0m);
     }
 
+    [Fact]
+    public async Task Exposure_AdminApprovedSumsGrantedAmountsPerCreationPath()
+    {
+        using var context = NewContext();
+        var (vendor, workOrder) = await SeedWorkOrderAsync(context, "WO-A", "SITE-A", "HVAC");
+        var dispatch = await SeedDispatchAsync(context, vendor, workOrder, "DIS-A");
+        context.DispatchUpliftRequests.AddRange(
+            // Vendor-portal rows (createdby null) store the requested new NTE total:
+            // 1000 -> 1500 grants 500, then 1500 -> 1800 grants 300.
+            Request(dispatch, "Approved", new DateTime(2026, 3, 1), decided: new DateTime(2026, 3, 2), requested: 1500m, currentNte: 1000m),
+            Request(dispatch, "Approved", new DateTime(2026, 3, 3), decided: new DateTime(2026, 3, 4), requested: 1800m, currentNte: 1500m),
+            // Work-order-path rows (createdby set) store the granted increment: 200.
+            Request(dispatch, "Approved", new DateTime(2026, 3, 5), decided: new DateTime(2026, 3, 6), requested: 200m, currentNte: 1800m, createdBy: "user-7"));
+        await context.SaveChangesAsync();
+        var data = new UpliftDataService(context);
+
+        var exposure = await data.GetApprovedExposureForWorkOrdersAsync(
+            new[] { workOrder.Id }, CancellationToken.None);
+
+        // Granted exposure is 500 + 300 + 200; summing raw RequestedNTE would
+        // double-count whole NTE totals and report 3500.
+        var total = exposure.Should().ContainSingle(e => e.WorkOrderId == workOrder.Id).Subject;
+        total.AdminApprovedTotal.Should().Be(1000m);
+        total.AutoApprovedTotal.Should().Be(0m);
+    }
+
     // --- Read authorization (tier roles) ---
 
     [Fact]
diff --git a/SeaHaven.DataServices/Implementation/UpliftDataService.cs b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
index 6c52434..5cb7013 100644
--- a/SeaHaven.DataServices/Implementation/UpliftDataService.cs
+++ b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
@@ -61,7 +61,10 @@ namespace SeaHaven.DataServices.Implementation
                     PONumber = x.d.PONumber,
                     WorkOrderId = x.d.WorkOrderId,
                     VendorCompanyName = x.v != null ? x.v.CompanyName : x.u.RequestedByVendorName,
-                    WorkOrderNumber = x.wo != null ? x.wo.WorkerOrderNumber : null,
+                    // The queue renders the internal display number (InternalWONumber, what the
+                    // board shows); WorkerOrderNumber holds the CRM external id on synced
+                    // work orders and must not leak into the queue display.
+                    WorkOrderNumber = x.wo != null ? x.wo.InternalWONumber : null,
                     WorkOrderSiteCode = x.wo != null ? x.wo.SiteCode : null,
                     WorkOrderService = x.wo != null ? x.wo.Service : null,
                     RequestedByVendorName = x.u.RequestedByVendorName,
@@ -339,8 +342,17 @@ namespace SeaHaven.DataServices.Implementation
                     DispatchId = g.Key,
                     AutoApproved = g.Where(x => x.Status == "NoApprovalRequired")
                         .Sum(x => (decimal?)x.RequestedNTE),
+                    // The two creation paths store different meanings in RequestedNTE.
+                    // Vendor-portal rows store the requested new NTE total, so the
+                    // granted amount is RequestedNTE - CurrentNTE; work-order-path rows
+                    // store the granted increment directly. Vendor sessions have no
+                    // identity user, so createdby is null only on vendor-portal rows. Summing
+                    // granted amounts keeps sequential approvals from double-counting whole
+                    // NTE totals.
                     AdminApproved = g.Where(x => x.Status == "Approved")
-                        .Sum(x => (decimal?)x.RequestedNTE)
+                        .Sum(x => (decimal?)(x.createdby == null
+                            ? x.RequestedNTE - (x.CurrentNTE ?? 0m)
+                            : x.RequestedNTE))
                 })
                 .ToListAsync(cancellationToken);
 

From b3e9a2eec3f8aa350162200d49f7217568930214 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 22:30:32 -0300
Subject: [PATCH 047/183] fix(services): allow admins to reactivate services

---
 .../ServicesRegistryServiceTests.cs           | 32 +++++++++++++++++++
 .../DTOs/ServicesRegistryDTOs.cs              |  1 +
 .../Implementation/ServicesRegistryService.cs | 11 +++++++
 3 files changed, 44 insertions(+)

diff --git a/Api.SeaHavenIndustries.Tests/ServicesRegistryServiceTests.cs b/Api.SeaHavenIndustries.Tests/ServicesRegistryServiceTests.cs
index 6d7086d..9eba754 100644
--- a/Api.SeaHavenIndustries.Tests/ServicesRegistryServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/ServicesRegistryServiceTests.cs
@@ -260,6 +260,38 @@ public class ServicesRegistryServiceTests
         updated.IsActive.Should().BeFalse("update preserves the persisted active state");
     }
 
+    [Fact]
+    public async Task Update_WhenAdminRequestsActiveState_ReactivatesService()
+    {
+        using var ctx = NewContext();
+        var service = NewService(ctx);
+        var created = await service.CreateAsync(Admin(), Input("Inactive service"), CancellationToken.None);
+        await service.DeactivateAsync(Admin(), created.Id, CancellationToken.None);
+
+        var input = Input("Inactive service");
+        input.IsActive = true;
+        var updated = await service.UpdateAsync(Admin(), created.Id, input, CancellationToken.None);
+
+        updated.IsActive.Should().BeTrue();
+        ctx.Services.Single().IsActive.Should().BeTrue();
+    }
+
+    [Fact]
+    public async Task Update_WhenSchedulerRequestsActiveState_ThrowsForbidden()
+    {
+        using var ctx = NewContext();
+        var service = NewService(ctx);
+        var created = await service.CreateAsync(Admin(), Input("Inactive service"), CancellationToken.None);
+        await service.DeactivateAsync(Admin(), created.Id, CancellationToken.None);
+
+        var input = Input("Inactive service");
+        input.IsActive = true;
+        var act = () => service.UpdateAsync(Scheduler(), created.Id, input, CancellationToken.None);
+
+        (await act.Should().ThrowAsync<ServicesRegistryValidationException>()).Which.Code.Should().Be("Forbidden");
+        ctx.Services.Single().IsActive.Should().BeFalse();
+    }
+
     [Fact]
     public async Task Update_WhenNotFound_ThrowsNotFound()
     {
diff --git a/SeaHaven.Services/DTOs/ServicesRegistryDTOs.cs b/SeaHaven.Services/DTOs/ServicesRegistryDTOs.cs
index 70fe43b..acb1bb4 100644
--- a/SeaHaven.Services/DTOs/ServicesRegistryDTOs.cs
+++ b/SeaHaven.Services/DTOs/ServicesRegistryDTOs.cs
@@ -28,6 +28,7 @@ namespace SeaHaven.Services.DTOs
         public bool RequiresCompletionDocument { get; set; }
         public int? CompletionDocTemplateId { get; set; }
         public List<WorkOrderType>? SupportedWorkOrderTypes { get; set; }
+        public bool? IsActive { get; set; }
     }
 
     public class ServicesRegistryValidationErrorDto
diff --git a/SeaHaven.Services/Implementation/ServicesRegistryService.cs b/SeaHaven.Services/Implementation/ServicesRegistryService.cs
index b6c7dd0..1a702bb 100644
--- a/SeaHaven.Services/Implementation/ServicesRegistryService.cs
+++ b/SeaHaven.Services/Implementation/ServicesRegistryService.cs
@@ -108,6 +108,11 @@ namespace SeaHaven.Services.Implementation
             service.IconKey = iconKey;
             service.RequiresCompletionDocument = input.RequiresCompletionDocument;
             service.CompletionDocTemplateId = template?.Id;
+            if (input.IsActive.HasValue)
+            {
+                EnsureCanChangeActiveState(user);
+                service.IsActive = input.IsActive.Value;
+            }
 
             try
             {
@@ -138,6 +143,12 @@ namespace SeaHaven.Services.Implementation
                 throw new ServicesRegistryValidationException("Forbidden", "Scheduler or Admin role is required.");
         }
 
+        private static void EnsureCanChangeActiveState(ClaimsPrincipal user)
+        {
+            if (user is null || !user.IsInRole(AdminRole))
+                throw new ServicesRegistryValidationException("Forbidden", "Only administrators can change service active state.");
+        }
+
         private static ServicesRegistryValidationException DuplicateName() =>
             new("DuplicateName", "A service with this name already exists.");
 

From 65b04687bcba801ae9015c1ae6912e4d69d25986 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 22:30:32 -0300
Subject: [PATCH 048/183] fix(work-orders): honor edited service labels

---
 .../Implementation/WorkOrderBoardService.cs    |  2 +-
 .../WorkOrderBoardServiceTests.cs              | 18 ++++++++++++++++++
 2 files changed, 19 insertions(+), 1 deletion(-)

diff --git a/SeaHaven.Services/Implementation/WorkOrderBoardService.cs b/SeaHaven.Services/Implementation/WorkOrderBoardService.cs
index 085e3db..7a7f1b7 100644
--- a/SeaHaven.Services/Implementation/WorkOrderBoardService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderBoardService.cs
@@ -138,7 +138,7 @@ namespace SeaHaven.Services.Implementation
                 TechPhone = row.TechPhone,
                 ApptDate = row.DispatchApptDate ?? row.ScheduledDate,
                 ApptTime = WorkOrderDerivedFields.FormatApptTime(apptStart, apptEnd),
-                Pm = row.ServiceNameSnapshot ?? row.Trade ?? row.Problem,
+                Pm = row.Trade ?? row.ServiceNameSnapshot ?? row.Problem,
                 ServiceNotes = row.ServiceNotes,
                 ExtraServices = ParseExtraServices(row.ExtraServices),
                 AdditionalContacts = MapAdditionalContacts(row),
diff --git a/SeaHavenIndustries.Tests/WorkOrderBoardServiceTests.cs b/SeaHavenIndustries.Tests/WorkOrderBoardServiceTests.cs
index 9e35213..96acd1b 100644
--- a/SeaHavenIndustries.Tests/WorkOrderBoardServiceTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderBoardServiceTests.cs
@@ -1043,6 +1043,24 @@ public class WorkOrderBoardServiceTests
         Assert.Equal("09:00", dto.ApptTime);
     }
 
+    [Fact]
+    public void MapRawRow_PmEditTakesPrecedenceOverServiceSnapshot()
+    {
+        var row = RawRow(
+            scheduledDate: new DateTime(2026, 6, 23),
+            scheduledStart: null,
+            scheduledEnd: null,
+            dispatchApptDate: null) with
+        {
+            Trade = "Updated service label",
+            ServiceNameSnapshot = "Original service label"
+        };
+
+        var dto = WorkOrderBoardService.MapRawRow(row, DateTime.UtcNow);
+
+        Assert.Equal("Updated service label", dto.Pm);
+    }
+
     private static WorkOrderBoardRawRow RawRow(
         DateTime? scheduledDate,
         DateTime? scheduledStart,

From e0e45d5ed35e45354d4f53f60f3b731b9bccabae Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 22:32:23 -0300
Subject: [PATCH 049/183] feat(uplifts): expose approval queue contract fields
 (SH-208)

---
 .../Models/VendorPortalReadModels.cs          |  4 +++
 .../Implementation/UpliftDataService.cs       | 25 +++++++++++++++++--
 .../Interfaces/IUpliftDataService.cs          |  1 +
 SeaHaven.Services/DTOs/UpliftDTOs.cs          |  4 +++
 .../Implementation/UpliftService.cs           |  7 +++++-
 5 files changed, 38 insertions(+), 3 deletions(-)

diff --git a/Data.SeaHavenIndustries/Models/VendorPortalReadModels.cs b/Data.SeaHavenIndustries/Models/VendorPortalReadModels.cs
index 05ea0ab..12c4781 100644
--- a/Data.SeaHavenIndustries/Models/VendorPortalReadModels.cs
+++ b/Data.SeaHavenIndustries/Models/VendorPortalReadModels.cs
@@ -88,6 +88,8 @@ namespace Data.SeaHavenIndustries
         public string? RequestedByVendorName { get; set; }
         public string? RequestedByFirstName { get; set; }
         public string? RequestedByLastName { get; set; }
+        public string? DecidedByFirstName { get; set; }
+        public string? DecidedByLastName { get; set; }
         public decimal? CurrentNTE { get; set; }
         public decimal RequestedNTE { get; set; }
         public string? VendorReason { get; set; }
@@ -104,6 +106,8 @@ namespace Data.SeaHavenIndustries
         public DateTime? ExpiresAt { get; set; }
         public string? NotificationStatus { get; set; }
         public string? NotificationError { get; set; }
+        public int AttachmentCount { get; set; }
+        public bool WorkOrderClosed { get; set; }
     }
 
     public class UpliftForWorkOrderData : UpliftForDispatchData
diff --git a/SeaHaven.DataServices/Implementation/UpliftDataService.cs b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
index 658c8a7..3bb7297 100644
--- a/SeaHaven.DataServices/Implementation/UpliftDataService.cs
+++ b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
@@ -1,5 +1,6 @@
 using System.Collections.Concurrent;
 using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
 using Microsoft.EntityFrameworkCore;
 using SeaHaven.DataServices.Interfaces;
 
@@ -28,9 +29,11 @@ namespace SeaHaven.DataServices.Implementation
                         from wo in workOrders.DefaultIfEmpty()
                         join reqUser in _context.Users on u.createdby equals reqUser.Id into requestUsers
                         from reqUser in requestUsers.DefaultIfEmpty()
+                        join decUser in _context.Users on u.DecidedByUserId equals decUser.Id into decisionUsers
+                        from decUser in decisionUsers.DefaultIfEmpty()
                         where (u.IsDeleted == null || u.IsDeleted == false)
                             && (d.IsDeleted == null || d.IsDeleted == false)
-                        select new { u, d, v, ev, wo, reqUser };
+                        select new { u, d, v, ev, wo, reqUser, decUser };
 
             if (!string.IsNullOrWhiteSpace(status))
                 query = query.Where(x => x.u.Status == status);
@@ -67,6 +70,8 @@ namespace SeaHaven.DataServices.Implementation
                     RequestedByVendorName = x.u.RequestedByVendorName,
                     RequestedByFirstName = x.reqUser != null ? x.reqUser.FirstName : null,
                     RequestedByLastName = x.reqUser != null ? x.reqUser.LastName : null,
+                    DecidedByFirstName = x.decUser != null ? x.decUser.FirstName : null,
+                    DecidedByLastName = x.decUser != null ? x.decUser.LastName : null,
                     CurrentNTE = x.u.CurrentNTE,
                     RequestedNTE = x.u.RequestedNTE,
                     VendorReason = x.u.VendorReason,
@@ -81,13 +86,29 @@ namespace SeaHaven.DataServices.Implementation
                     EvidenceSizeBytes = x.ev != null ? x.ev.SizeBytes : null,
                     ExpiresAt = x.u.ExpiresAt,
                     NotificationStatus = x.u.NotificationStatus,
-                    NotificationError = x.u.NotificationError
+                    NotificationError = x.u.NotificationError,
+                    AttachmentCount = _context.VendorCompletionDocuments.Count(document =>
+                        document.DispatchId == x.d.Id
+                        && (document.IsDeleted == null || document.IsDeleted == false)),
+                    WorkOrderClosed = x.wo != null
+                        && (x.wo.LifecycleStatus == LifecycleStatus.Completed
+                            || x.wo.LifecycleStatus == LifecycleStatus.Canceled)
                 })
                 .ToListAsync(cancellationToken);
 
             return (total, items);
         }
 
+        public Task<decimal> GetPendingExposureAsync(CancellationToken cancellationToken)
+        {
+            return _context.DispatchUpliftRequests
+                .Where(u => (u.IsDeleted == null || u.IsDeleted == false)
+                    && u.Status == "Pending")
+                .SumAsync(u => u.createdby == null
+                    ? u.RequestedNTE - (u.CurrentNTE ?? 0m)
+                    : u.RequestedNTE, cancellationToken);
+        }
+
         public async Task<IReadOnlyList<UpliftForDispatchData>> GetForDispatchAsync(int dispatchId, CancellationToken cancellationToken)
         {
             return await (from u in _context.DispatchUpliftRequests
diff --git a/SeaHaven.DataServices/Interfaces/IUpliftDataService.cs b/SeaHaven.DataServices/Interfaces/IUpliftDataService.cs
index 15be0ab..3133657 100644
--- a/SeaHaven.DataServices/Interfaces/IUpliftDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IUpliftDataService.cs
@@ -6,6 +6,7 @@ namespace SeaHaven.DataServices.Interfaces
     {
         Task<(int TotalCount, IReadOnlyList<UpliftListItemData> Items)> GetPagedAsync(
             string? status, int? tier, int page, int pageSize, CancellationToken cancellationToken);
+        Task<decimal> GetPendingExposureAsync(CancellationToken cancellationToken);
         Task<IReadOnlyList<UpliftForDispatchData>> GetForDispatchAsync(int dispatchId, CancellationToken cancellationToken);
         Task<IReadOnlyList<UpliftForWorkOrderData>> GetForWorkOrderAsync(int workOrderId, CancellationToken cancellationToken);
         Task<DispatchUpliftRequest?> GetByIdAndWorkOrderAsync(int requestId, int workOrderId, CancellationToken cancellationToken);
diff --git a/SeaHaven.Services/DTOs/UpliftDTOs.cs b/SeaHaven.Services/DTOs/UpliftDTOs.cs
index 5333f07..b2b8544 100644
--- a/SeaHaven.Services/DTOs/UpliftDTOs.cs
+++ b/SeaHaven.Services/DTOs/UpliftDTOs.cs
@@ -13,6 +13,7 @@ namespace SeaHaven.Services.DTOs
         public string? WorkOrderSite { get; set; }
         public string? WorkOrderService { get; set; }
         public string? RequestedByName { get; set; }
+        public string? DecidedByName { get; set; }
         public decimal? CurrentNTE { get; set; }
         public decimal RequestedNTE { get; set; }
         public decimal Delta { get; set; }
@@ -31,6 +32,8 @@ namespace SeaHaven.Services.DTOs
         public DateTime? ExpiresAt { get; set; }
         public string? NotificationStatus { get; set; }
         public string? NotificationError { get; set; }
+        public int AttachmentCount { get; set; }
+        public bool WorkOrderClosed { get; set; }
         // Approved-on-WO exposure totals for this item's work order: auto-approved and
         // admin-approved amounts; pending, rejected, cancelled/withdrawn, and revoked
         // requests are excluded.
@@ -44,6 +47,7 @@ namespace SeaHaven.Services.DTOs
         public int Total { get; set; }
         public int Page { get; set; }
         public int PageSize { get; set; }
+        public decimal PendingExposureTotal { get; set; }
         public IEnumerable<UpliftListItemDTO> Items { get; set; } = Enumerable.Empty<UpliftListItemDTO>();
     }
 
diff --git a/SeaHaven.Services/Implementation/UpliftService.cs b/SeaHaven.Services/Implementation/UpliftService.cs
index 034f102..cfc2615 100644
--- a/SeaHaven.Services/Implementation/UpliftService.cs
+++ b/SeaHaven.Services/Implementation/UpliftService.cs
@@ -33,6 +33,7 @@ namespace SeaHaven.Services.Implementation
         public async Task<UpliftListResultDTO> ListAsync(ClaimsPrincipal user, string? status, int? tier, int page, int pageSize, CancellationToken cancellationToken)
         {
             var (total, items) = await _upliftData.GetPagedAsync(status, tier, page, pageSize, cancellationToken);
+            var pendingExposureTotal = await _upliftData.GetPendingExposureAsync(cancellationToken);
 
             var mapped = items.Select(r => new UpliftListItemDTO
             {
@@ -46,6 +47,7 @@ namespace SeaHaven.Services.Implementation
                 WorkOrderSite = r.WorkOrderSiteCode,
                 WorkOrderService = r.WorkOrderService,
                 RequestedByName = ResolveRequestedByName(r.RequestedByVendorName, r.RequestedByFirstName, r.RequestedByLastName),
+                DecidedByName = ResolveRequestedByName(null, r.DecidedByFirstName, r.DecidedByLastName),
                 CurrentNTE = r.CurrentNTE,
                 RequestedNTE = r.RequestedNTE,
                 Delta = r.RequestedNTE - (r.CurrentNTE ?? 0m),
@@ -62,7 +64,9 @@ namespace SeaHaven.Services.Implementation
                 EvidenceSizeBytes = r.EvidenceSizeBytes,
                 ExpiresAt = r.ExpiresAt,
                 NotificationStatus = r.NotificationStatus,
-                NotificationError = r.NotificationError
+                NotificationError = r.NotificationError,
+                AttachmentCount = r.AttachmentCount,
+                WorkOrderClosed = r.WorkOrderClosed
             }).ToList();
 
             // Approved-on-WO exposure totals are aggregated once for the whole page
@@ -90,6 +94,7 @@ namespace SeaHaven.Services.Implementation
                 Total = total,
                 Page = page,
                 PageSize = pageSize,
+                PendingExposureTotal = pendingExposureTotal,
                 Items = mapped
             };
         }

From b5e8f038c1ff984c14c2b3921e54c1b778a67400 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 22:38:23 -0300
Subject: [PATCH 050/183] test(uplifts): cover queue contract fields (SH-208)

Behavior coverage for the new queue read fields so the contract cannot
regress silently: workOrderClosed follows terminal lifecycle statuses,
decidedByName resolves from the deciding user, attachmentCount counts
active dispatch documents, and pendingExposureTotal sums granted amounts
across all pending requests independent of paging.
---
 .../UpliftQueueReadTests.cs                   | 120 ++++++++++++++++++
 1 file changed, 120 insertions(+)

diff --git a/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs b/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
index 09beca4..89ef430 100644
--- a/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
+++ b/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
@@ -1,4 +1,5 @@
 using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
 using FluentAssertions;
 using Microsoft.EntityFrameworkCore;
 using Microsoft.Extensions.Options;
@@ -343,6 +344,125 @@ public sealed class UpliftQueueReadTests
         item.EvidenceSizeBytes.Should().Be(512);
     }
 
+    // --- Queue contract fields (SH-208/SH-213) ---
+
+    [Fact]
+    public async Task List_MarksWorkOrderClosed_OnlyForTerminalLifecycle()
+    {
+        using var context = NewContext();
+        var (vendorA, workOrderA) = await SeedWorkOrderAsync(context, "WO-A", "SITE-A", "HVAC");
+        var (vendorB, workOrderB) = await SeedWorkOrderAsync(context, "WO-B", "SITE-B", "Plumbing");
+        workOrderA.LifecycleStatus = LifecycleStatus.Completed;
+        workOrderB.LifecycleStatus = LifecycleStatus.Canceled;
+        await context.SaveChangesAsync();
+        var dispatchA = await SeedDispatchAsync(context, vendorA, workOrderA, "DIS-A");
+        var dispatchB = await SeedDispatchAsync(context, vendorB, workOrderB, "DIS-B");
+        var (vendorC, workOrderC) = await SeedWorkOrderAsync(context, "WO-C", "SITE-C", "Electrical");
+        var dispatchC = await SeedDispatchAsync(context, vendorC, workOrderC, "DIS-C");
+        context.DispatchUpliftRequests.AddRange(
+            Request(dispatchA, "Approved", new DateTime(2026, 3, 1), decided: new DateTime(2026, 3, 2)),
+            Request(dispatchB, "Approved", new DateTime(2026, 3, 3), decided: new DateTime(2026, 3, 4)),
+            Request(dispatchC, "Approved", new DateTime(2026, 3, 5), decided: new DateTime(2026, 3, 6)));
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        var result = await service.ListAsync(UserWithRoles("Admin"), "Approved", null, 1, 25, CancellationToken.None);
+
+        result.Items.Single(i => i.WorkOrderNumber == "WO-A").WorkOrderClosed.Should().BeTrue();
+        result.Items.Single(i => i.WorkOrderNumber == "WO-B").WorkOrderClosed.Should().BeTrue();
+        result.Items.Single(i => i.WorkOrderNumber == "WO-C").WorkOrderClosed.Should().BeFalse();
+    }
+
+    [Fact]
+    public async Task List_ApprovedRow_CarriesDecidedByNameFromDecidingUser()
+    {
+        using var context = NewContext();
+        var (vendor, workOrder) = await SeedWorkOrderAsync(context, "WO-A", "SITE-A", "HVAC");
+        var dispatch = await SeedDispatchAsync(context, vendor, workOrder, "DIS-A");
+        context.Users.Add(new ApplicationUser { Id = "user-9", FirstName = "Grace", LastName = "Hopper" });
+        await context.SaveChangesAsync();
+        context.DispatchUpliftRequests.Add(new DispatchUpliftRequest
+        {
+            DispatchId = dispatch.Id,
+            Status = "Approved",
+            CreatedDate = new DateTime(2026, 3, 1),
+            DecidedAt = new DateTime(2026, 3, 2),
+            DecidedByUserId = "user-9",
+            RequiredTier = 1,
+            RequestedNTE = 300m,
+            NotificationStatus = "Pending"
+        });
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        var result = await service.ListAsync(UserWithRoles("Approver"), "Approved", null, 1, 25, CancellationToken.None);
+
+        result.Items.Single().DecidedByName.Should().Be("Grace Hopper");
+    }
+
+    [Fact]
+    public async Task List_AttachmentCount_CountsActiveDocumentsOnTheDispatch()
+    {
+        using var context = NewContext();
+        var (vendor, workOrder) = await SeedWorkOrderAsync(context, "WO-A", "SITE-A", "HVAC");
+        var dispatch = await SeedDispatchAsync(context, vendor, workOrder, "DIS-A");
+        context.VendorCompletionDocuments.AddRange(
+            new VendorCompletionDocument
+            {
+                VendorId = vendor.Id, DispatchId = dispatch.Id, WorkOrderId = workOrder.Id,
+                OriginalFileName = "quote.pdf", StoredFileName = "a.bin", ContentType = "application/pdf",
+                SizeBytes = 512, ScanStatus = "Passed", ReviewStatus = "Approved", Purpose = "UpliftEvidence", Version = 1
+            },
+            new VendorCompletionDocument
+            {
+                VendorId = vendor.Id, DispatchId = dispatch.Id, WorkOrderId = workOrder.Id,
+                OriginalFileName = "photo.jpg", StoredFileName = "b.bin", ContentType = "image/jpeg",
+                SizeBytes = 2048, ScanStatus = "Passed", ReviewStatus = "Approved", Purpose = "Completion", Version = 1
+            },
+            new VendorCompletionDocument
+            {
+                VendorId = vendor.Id, DispatchId = dispatch.Id, WorkOrderId = workOrder.Id,
+                OriginalFileName = "old.pdf", StoredFileName = "c.bin", ContentType = "application/pdf",
+                SizeBytes = 128, ScanStatus = "Passed", ReviewStatus = "Approved", Purpose = "Completion", Version = 1,
+                IsDeleted = true
+            });
+        await context.SaveChangesAsync();
+        context.DispatchUpliftRequests.Add(Request(dispatch, "Pending", new DateTime(2026, 3, 2)));
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        var result = await service.ListAsync(UserWithRoles("Approver"), "Pending", null, 1, 25, CancellationToken.None);
+
+        result.Items.Single().AttachmentCount.Should().Be(2);
+    }
+
+    [Fact]
+    public async Task List_PendingExposureTotal_SumsGrantedAmountsAcrossAllPendingRequests()
+    {
+        using var context = NewContext();
+        var (vendor, workOrder) = await SeedWorkOrderAsync(context, "WO-A", "SITE-A", "HVAC");
+        var dispatch = await SeedDispatchAsync(context, vendor, workOrder, "DIS-A");
+        context.Users.Add(new ApplicationUser { Id = "user-7", FirstName = "Ada", LastName = "Smith" });
+        await context.SaveChangesAsync();
+        context.DispatchUpliftRequests.AddRange(
+            // Vendor-portal rows (createdby null) store the requested new NTE total,
+            // so the pending exposure is the delta: 400 - 100 = 300 and 600 - 250 = 350.
+            Request(dispatch, "Pending", new DateTime(2026, 3, 1), requested: 400m, currentNte: 100m),
+            Request(dispatch, "Pending", new DateTime(2026, 3, 2), requested: 600m, currentNte: 250m),
+            // Work-order-path rows (createdby set) store the requested increment: 90.
+            Request(dispatch, "Pending", new DateTime(2026, 3, 3), requested: 90m, currentNte: 600m, createdBy: "user-7"),
+            // Non-pending rows never add pending exposure.
+            Request(dispatch, "Approved", new DateTime(2026, 2, 1), decided: new DateTime(2026, 2, 2), requested: 500m, currentNte: 100m));
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        // Page 1 with a single row still reports the total across ALL pending rows.
+        var result = await service.ListAsync(UserWithRoles("Approver"), "Pending", null, 1, 1, CancellationToken.None);
+
+        result.Items.Should().HaveCount(1);
+        result.PendingExposureTotal.Should().Be(740m);
+    }
+
     // --- Approved-on-WO exposure totals ---
 
     [Fact]

From 1b73593189700a5fb4c2c7d5cbb19ecce049c4f5 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 22:43:51 -0300
Subject: [PATCH 051/183] style(uplifts): format queue contract tests (SH-208)

---
 .../UpliftQueueReadTests.cs                   | 42 +++++++++++++++----
 1 file changed, 33 insertions(+), 9 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs b/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
index 89ef430..46ea048 100644
--- a/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
+++ b/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
@@ -409,21 +409,45 @@ public sealed class UpliftQueueReadTests
         context.VendorCompletionDocuments.AddRange(
             new VendorCompletionDocument
             {
-                VendorId = vendor.Id, DispatchId = dispatch.Id, WorkOrderId = workOrder.Id,
-                OriginalFileName = "quote.pdf", StoredFileName = "a.bin", ContentType = "application/pdf",
-                SizeBytes = 512, ScanStatus = "Passed", ReviewStatus = "Approved", Purpose = "UpliftEvidence", Version = 1
+                VendorId = vendor.Id,
+                DispatchId = dispatch.Id,
+                WorkOrderId = workOrder.Id,
+                OriginalFileName = "quote.pdf",
+                StoredFileName = "a.bin",
+                ContentType = "application/pdf",
+                SizeBytes = 512,
+                ScanStatus = "Passed",
+                ReviewStatus = "Approved",
+                Purpose = "UpliftEvidence",
+                Version = 1
             },
             new VendorCompletionDocument
             {
-                VendorId = vendor.Id, DispatchId = dispatch.Id, WorkOrderId = workOrder.Id,
-                OriginalFileName = "photo.jpg", StoredFileName = "b.bin", ContentType = "image/jpeg",
-                SizeBytes = 2048, ScanStatus = "Passed", ReviewStatus = "Approved", Purpose = "Completion", Version = 1
+                VendorId = vendor.Id,
+                DispatchId = dispatch.Id,
+                WorkOrderId = workOrder.Id,
+                OriginalFileName = "photo.jpg",
+                StoredFileName = "b.bin",
+                ContentType = "image/jpeg",
+                SizeBytes = 2048,
+                ScanStatus = "Passed",
+                ReviewStatus = "Approved",
+                Purpose = "Completion",
+                Version = 1
             },
             new VendorCompletionDocument
             {
-                VendorId = vendor.Id, DispatchId = dispatch.Id, WorkOrderId = workOrder.Id,
-                OriginalFileName = "old.pdf", StoredFileName = "c.bin", ContentType = "application/pdf",
-                SizeBytes = 128, ScanStatus = "Passed", ReviewStatus = "Approved", Purpose = "Completion", Version = 1,
+                VendorId = vendor.Id,
+                DispatchId = dispatch.Id,
+                WorkOrderId = workOrder.Id,
+                OriginalFileName = "old.pdf",
+                StoredFileName = "c.bin",
+                ContentType = "application/pdf",
+                SizeBytes = 128,
+                ScanStatus = "Passed",
+                ReviewStatus = "Approved",
+                Purpose = "Completion",
+                Version = 1,
                 IsDeleted = true
             });
         await context.SaveChangesAsync();

From fbae09136b8a1a9de98c22d26d5f42d21a32253a Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Wed, 16 Sep 2026 22:48:07 -0300
Subject: [PATCH 052/183] fix(uplifts): update test data service contract
 (SH-208)

---
 SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs | 1 +
 1 file changed, 1 insertion(+)

diff --git a/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs b/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs
index 12ddd97..6cc2fd0 100644
--- a/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs
@@ -431,6 +431,7 @@ public class WorkOrderBoardCancelServiceTests
         public Task<(int TotalCount, IReadOnlyList<UpliftListItemData> Items)> GetPagedAsync(
             string? status, int? tier, int page, int pageSize, CancellationToken cancellationToken) =>
             throw new NotSupportedException();
+        public Task<decimal> GetPendingExposureAsync(CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<IReadOnlyList<UpliftForDispatchData>> GetForDispatchAsync(int dispatchId, CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<IReadOnlyList<UpliftForWorkOrderData>> GetForWorkOrderAsync(int workOrderId, CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<DispatchUpliftRequest?> GetByIdAndWorkOrderAsync(int requestId, int workOrderId, CancellationToken cancellationToken) => throw new NotSupportedException();

From dfd248cfcbc9fe629be96a4fdbc17b592bc40c6b Mon Sep 17 00:00:00 2001
From: albrand <albrand@users.noreply.github.com>
Date: Wed, 16 Sep 2026 22:48:47 -0300
Subject: [PATCH 053/183] feat(uplifts): expose queue closed flag, attachments,
 decider, pending exposure (SH-207, SH-208)

The approvals queue frontend needs four list-contract additions the read
contract PRs do not carry yet: workOrderClosed so the Approved tab can
disable Revoke on terminal work orders (mirroring the SH-196 revoke
guard), attachmentCount from non-deleted UpliftEvidence documents so the
+N chip renders, decidedByName for the Approved By column, and the
queue-wide pendingExposureTotal for the header total.
---
 .../UpliftControllerTests.cs                  |  16 ++-
 .../UpliftQueueReadTests.cs                   | 135 ++++++++++++++++++
 .../Models/VendorPortalReadModels.cs          |   4 +
 .../Implementation/UpliftDataService.cs       |  30 +++-
 .../Interfaces/IUpliftDataService.cs          |   3 +
 SeaHaven.Services/DTOs/UpliftDTOs.cs          |   5 +
 .../Implementation/UpliftService.cs           |   9 ++
 .../WorkOrderBoardCancelServiceTests.cs       |   1 +
 8 files changed, 201 insertions(+), 2 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/UpliftControllerTests.cs b/Api.SeaHavenIndustries.Tests/UpliftControllerTests.cs
index 7d49f24..7b3f0ec 100644
--- a/Api.SeaHavenIndustries.Tests/UpliftControllerTests.cs
+++ b/Api.SeaHavenIndustries.Tests/UpliftControllerTests.cs
@@ -79,13 +79,23 @@ public class UpliftControllerTests
             WorkOrderNumber = "WO-77",
             WorkOrderSite = "SITE-EAST",
             WorkOrderService = "HVAC",
+            WorkOrderClosed = true,
+            AttachmentCount = 2,
             RequestedByName = "Gateway",
+            DecidedByName = "Grace Hopper",
             WorkOrderAutoApprovedTotal = 150m,
             WorkOrderAdminApprovedTotal = 300m,
             WorkOrderApprovedExposureTotal = 450m
         };
         service.Setup(x => x.ListAsync(It.IsAny<ClaimsPrincipal>(), It.IsAny<string?>(), It.IsAny<int?>(), It.IsAny<int>(), It.IsAny<int>(), It.IsAny<CancellationToken>()))
-            .ReturnsAsync(new UpliftListResultDTO { Total = 1, Page = 1, PageSize = 25, Items = new[] { item } });
+            .ReturnsAsync(new UpliftListResultDTO
+            {
+                Total = 1,
+                Page = 1,
+                PageSize = 25,
+                PendingExposureTotal = 200m,
+                Items = new[] { item }
+            });
 
         var controller = NewController(service);
 
@@ -98,8 +108,12 @@ public class UpliftControllerTests
         returned.WorkOrderNumber.Should().Be("WO-77");
         returned.WorkOrderSite.Should().Be("SITE-EAST");
         returned.WorkOrderService.Should().Be("HVAC");
+        returned.WorkOrderClosed.Should().BeTrue();
+        returned.AttachmentCount.Should().Be(2);
         returned.RequestedByName.Should().Be("Gateway");
+        returned.DecidedByName.Should().Be("Grace Hopper");
         returned.WorkOrderApprovedExposureTotal.Should().Be(450m);
+        data!.PendingExposureTotal.Should().Be(200m);
     }
 
     [Fact]
diff --git a/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs b/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
index ad539bd..ad3edd6 100644
--- a/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
+++ b/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
@@ -1,4 +1,5 @@
 using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
 using FluentAssertions;
 using Microsoft.EntityFrameworkCore;
 using Microsoft.Extensions.Options;
@@ -462,4 +463,138 @@ public sealed class UpliftQueueReadTests
         tier2User.Items.Single(i => i.RequiredTier == 2).CanDecide.Should().BeTrue();
         tier2User.Items.Single(i => i.RequiredTier == 1).CanDecide.Should().BeFalse();
     }
+
+    // --- Closed-work-order flag and decider (SH-208) ---
+
+    [Fact]
+    public async Task List_MarksWorkOrderClosedOnlyForTerminalLifecycleStatuses()
+    {
+        using var context = NewContext();
+        var (vendorA, workOrderA) = await SeedWorkOrderAsync(context, "WO-OPEN", "SITE-A", "HVAC");
+        var (vendorB, workOrderB) = await SeedWorkOrderAsync(context, "WO-DONE", "SITE-B", "HVAC");
+        var (vendorC, workOrderC) = await SeedWorkOrderAsync(context, "WO-CANCEL", "SITE-C", "HVAC");
+        workOrderA.LifecycleStatus = LifecycleStatus.InProgress;
+        workOrderB.LifecycleStatus = LifecycleStatus.Completed;
+        workOrderC.LifecycleStatus = LifecycleStatus.Canceled;
+        await context.SaveChangesAsync();
+        var dispatchA = await SeedDispatchAsync(context, vendorA, workOrderA, "DIS-A");
+        var dispatchB = await SeedDispatchAsync(context, vendorB, workOrderB, "DIS-B");
+        var dispatchC = await SeedDispatchAsync(context, vendorC, workOrderC, "DIS-C");
+        context.DispatchUpliftRequests.AddRange(
+            Request(dispatchA, "Approved", new DateTime(2026, 3, 1), decided: new DateTime(2026, 3, 2)),
+            Request(dispatchB, "Approved", new DateTime(2026, 3, 1), decided: new DateTime(2026, 3, 2)),
+            Request(dispatchC, "Approved", new DateTime(2026, 3, 1), decided: new DateTime(2026, 3, 2)));
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        var result = await service.ListAsync(UserWithRoles("Approver"), "Approved", null, 1, 25, CancellationToken.None);
+
+        result.Items.Single(i => i.WorkOrderNumber == "WO-OPEN").WorkOrderClosed.Should().BeFalse();
+        result.Items.Single(i => i.WorkOrderNumber == "WO-DONE").WorkOrderClosed.Should().BeTrue();
+        result.Items.Single(i => i.WorkOrderNumber == "WO-CANCEL").WorkOrderClosed.Should().BeTrue();
+    }
+
+    [Fact]
+    public async Task List_MapsDecidedByNameFromTheDecidingUser()
+    {
+        using var context = NewContext();
+        var (vendor, workOrder) = await SeedWorkOrderAsync(context, "WO-77", "SITE-EAST", "HVAC");
+        var dispatch = await SeedDispatchAsync(context, vendor, workOrder, "DIS-1");
+        context.Users.Add(new ApplicationUser { Id = "user-9", FirstName = "Grace", LastName = "Hopper" });
+        await context.SaveChangesAsync();
+        var request = Request(dispatch, "Approved", new DateTime(2026, 3, 1), decided: new DateTime(2026, 3, 2));
+        request.DecidedByUserId = "user-9";
+        context.DispatchUpliftRequests.Add(request);
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        var result = await service.ListAsync(UserWithRoles("Approver"), "Approved", null, 1, 25, CancellationToken.None);
+
+        result.Items.Single().DecidedByName.Should().Be("Grace Hopper");
+    }
+
+    // --- Attachment count (SH-207) ---
+
+    [Fact]
+    public async Task List_CountsOnlyNonDeletedUpliftEvidenceAttachments()
+    {
+        using var context = NewContext();
+        var (vendor, workOrder) = await SeedWorkOrderAsync(context, "WO-77", "SITE-EAST", "HVAC");
+        var dispatch = await SeedDispatchAsync(context, vendor, workOrder, "DIS-1");
+        context.VendorCompletionDocuments.AddRange(
+            Document(dispatch, vendor, workOrder, "quote.pdf"),
+            Document(dispatch, vendor, workOrder, "photo.jpg"),
+            Document(dispatch, vendor, workOrder, "signed-completion.pdf", purpose: "Completion"),
+            Document(dispatch, vendor, workOrder, "deleted-estimate.pdf", isDeleted: true));
+        await context.SaveChangesAsync();
+        context.DispatchUpliftRequests.Add(new DispatchUpliftRequest
+        {
+            DispatchId = dispatch.Id,
+            Status = "Pending",
+            CreatedDate = new DateTime(2026, 3, 2),
+            RequiredTier = 1,
+            RequestedNTE = 200m
+        });
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        var result = await service.ListAsync(UserWithRoles("Approver"), "Pending", null, 1, 25, CancellationToken.None);
+
+        result.Items.Single().AttachmentCount.Should().Be(2);
+    }
+
+    private static VendorCompletionDocument Document(
+        Dispatch dispatch,
+        Vendor vendor,
+        WorkOrder workOrder,
+        string fileName,
+        string purpose = "UpliftEvidence",
+        bool isDeleted = false) => new()
+    {
+        VendorId = vendor.Id,
+        DispatchId = dispatch.Id,
+        WorkOrderId = workOrder.Id,
+        OriginalFileName = fileName,
+        StoredFileName = $"{fileName}.bin",
+        ContentType = "application/octet-stream",
+        SizeBytes = 128,
+        ScanStatus = "Passed",
+        ReviewStatus = "Approved",
+        Purpose = purpose,
+        Version = 1,
+        IsDeleted = isDeleted
+    };
+
+    // --- Queue-wide pending exposure (SH-207) ---
+
+    [Fact]
+    public async Task List_PendingExposureTotal_SumsPendingRequestsAcrossTheQueueRegardlessOfFilter()
+    {
+        using var context = NewContext();
+        var (vendorA, workOrderA) = await SeedWorkOrderAsync(context, "WO-A", "SITE-A", "HVAC");
+        var (vendorB, workOrderB) = await SeedWorkOrderAsync(context, "WO-B", "SITE-B", "HVAC");
+        var dispatchA = await SeedDispatchAsync(context, vendorA, workOrderA, "DIS-A");
+        var dispatchB = await SeedDispatchAsync(context, vendorB, workOrderB, "DIS-B");
+        context.DispatchUpliftRequests.AddRange(
+            Request(dispatchA, "Pending", new DateTime(2026, 3, 1), requested: 125m),
+            Request(dispatchB, "Pending", new DateTime(2026, 3, 2), requested: 75m),
+            Request(dispatchA, "Approved", new DateTime(2026, 3, 3), decided: new DateTime(2026, 3, 4), requested: 999m),
+            new DispatchUpliftRequest
+            {
+                DispatchId = dispatchA.Id,
+                Status = "Pending",
+                CreatedDate = new DateTime(2026, 3, 5),
+                RequiredTier = 1,
+                RequestedNTE = 500m,
+                IsDeleted = true
+            });
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        // Even when the caller reads the Approved decision log, the header total
+        // still reflects the whole pending queue.
+        var result = await service.ListAsync(UserWithRoles("Approver"), "Approved", null, 1, 25, CancellationToken.None);
+
+        result.PendingExposureTotal.Should().Be(200m);
+    }
 }
diff --git a/Data.SeaHavenIndustries/Models/VendorPortalReadModels.cs b/Data.SeaHavenIndustries/Models/VendorPortalReadModels.cs
index 05ea0ab..885419d 100644
--- a/Data.SeaHavenIndustries/Models/VendorPortalReadModels.cs
+++ b/Data.SeaHavenIndustries/Models/VendorPortalReadModels.cs
@@ -85,9 +85,13 @@ namespace Data.SeaHavenIndustries
         public string? WorkOrderNumber { get; set; }
         public string? WorkOrderSiteCode { get; set; }
         public string? WorkOrderService { get; set; }
+        public bool WorkOrderClosed { get; set; }
+        public int AttachmentCount { get; set; }
         public string? RequestedByVendorName { get; set; }
         public string? RequestedByFirstName { get; set; }
         public string? RequestedByLastName { get; set; }
+        public string? DecidedByFirstName { get; set; }
+        public string? DecidedByLastName { get; set; }
         public decimal? CurrentNTE { get; set; }
         public decimal RequestedNTE { get; set; }
         public string? VendorReason { get; set; }
diff --git a/SeaHaven.DataServices/Implementation/UpliftDataService.cs b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
index 6c52434..3535e0e 100644
--- a/SeaHaven.DataServices/Implementation/UpliftDataService.cs
+++ b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
@@ -1,5 +1,6 @@
 using System.Collections.Concurrent;
 using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
 using Microsoft.EntityFrameworkCore;
 using SeaHaven.DataServices.Interfaces;
 
@@ -28,9 +29,11 @@ namespace SeaHaven.DataServices.Implementation
                         from wo in workOrders.DefaultIfEmpty()
                         join reqUser in _context.Users on u.createdby equals reqUser.Id into requestUsers
                         from reqUser in requestUsers.DefaultIfEmpty()
+                        join decUser in _context.Users on u.DecidedByUserId equals decUser.Id into decUsers
+                        from decUser in decUsers.DefaultIfEmpty()
                         where (u.IsDeleted == null || u.IsDeleted == false)
                             && (d.IsDeleted == null || d.IsDeleted == false)
-                        select new { u, d, v, ev, wo, reqUser };
+                        select new { u, d, v, ev, wo, reqUser, decUser };
 
             if (!string.IsNullOrWhiteSpace(status))
                 query = query.Where(x => x.u.Status == status);
@@ -64,9 +67,21 @@ namespace SeaHaven.DataServices.Implementation
                     WorkOrderNumber = x.wo != null ? x.wo.WorkerOrderNumber : null,
                     WorkOrderSiteCode = x.wo != null ? x.wo.SiteCode : null,
                     WorkOrderService = x.wo != null ? x.wo.Service : null,
+                    // SH-208: a work order is closed for uplift decisions once its
+                    // lifecycle reaches a terminal state; mirrors the SH-196 revoke guard.
+                    WorkOrderClosed = x.wo != null
+                        && (x.wo.LifecycleStatus == LifecycleStatus.Completed
+                            || x.wo.LifecycleStatus == LifecycleStatus.Canceled),
+                    // SH-207: every non-deleted UpliftEvidence document on the dispatch is
+                    // an attachment reviewers can open; the linked evidence is one of them.
+                    AttachmentCount = x.d.CompletionDocuments.Count(doc =>
+                        doc.Purpose == "UpliftEvidence"
+                        && (doc.IsDeleted == null || doc.IsDeleted == false)),
                     RequestedByVendorName = x.u.RequestedByVendorName,
                     RequestedByFirstName = x.reqUser != null ? x.reqUser.FirstName : null,
                     RequestedByLastName = x.reqUser != null ? x.reqUser.LastName : null,
+                    DecidedByFirstName = x.decUser != null ? x.decUser.FirstName : null,
+                    DecidedByLastName = x.decUser != null ? x.decUser.LastName : null,
                     CurrentNTE = x.u.CurrentNTE,
                     RequestedNTE = x.u.RequestedNTE,
                     VendorReason = x.u.VendorReason,
@@ -366,6 +381,19 @@ namespace SeaHaven.DataServices.Implementation
             return totals.Values.ToList();
         }
 
+        // SH-207: queue-wide pending exposure for the approvals header. Mirrors the
+        // approved-exposure convention (sum of RequestedNTE) over every non-deleted
+        // Pending request on a non-deleted dispatch, independent of page or filters.
+        public async Task<decimal> GetPendingExposureTotalAsync(CancellationToken cancellationToken)
+        {
+            return await _context.DispatchUpliftRequests
+                .Where(u => (u.IsDeleted == null || u.IsDeleted == false)
+                    && u.Status == "Pending"
+                    && u.Dispatch != null
+                    && (u.Dispatch.IsDeleted == null || u.Dispatch.IsDeleted == false))
+                .SumAsync(u => (decimal?)u.RequestedNTE, cancellationToken) ?? 0m;
+        }
+
         public Task<List<DispatchUpliftRequest>> GetPendingForWorkOrderAsync(
             int workOrderId,
             CancellationToken cancellationToken)
diff --git a/SeaHaven.DataServices/Interfaces/IUpliftDataService.cs b/SeaHaven.DataServices/Interfaces/IUpliftDataService.cs
index 9ca8a5d..3909447 100644
--- a/SeaHaven.DataServices/Interfaces/IUpliftDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IUpliftDataService.cs
@@ -25,6 +25,9 @@ namespace SeaHaven.DataServices.Interfaces
         // from the result have no approved exposure.
         Task<IReadOnlyList<WorkOrderUpliftExposureData>> GetApprovedExposureForWorkOrdersAsync(
             IReadOnlyCollection<int> workOrderIds, CancellationToken cancellationToken);
+        // SH-207: queue-wide pending exposure for the approvals header (sum of
+        // RequestedNTE over non-deleted Pending requests on non-deleted dispatches).
+        Task<decimal> GetPendingExposureTotalAsync(CancellationToken cancellationToken);
         Task<List<DispatchUpliftRequest>> GetPendingForWorkOrderAsync(int workOrderId, CancellationToken cancellationToken);
         // SH-101: active = Pending or ChangesRequested (the only states that block a new request).
         Task<bool> HasActiveAsync(int dispatchId, CancellationToken cancellationToken);
diff --git a/SeaHaven.Services/DTOs/UpliftDTOs.cs b/SeaHaven.Services/DTOs/UpliftDTOs.cs
index 5333f07..ad1e2a9 100644
--- a/SeaHaven.Services/DTOs/UpliftDTOs.cs
+++ b/SeaHaven.Services/DTOs/UpliftDTOs.cs
@@ -12,7 +12,10 @@ namespace SeaHaven.Services.DTOs
         public string? WorkOrderNumber { get; set; }
         public string? WorkOrderSite { get; set; }
         public string? WorkOrderService { get; set; }
+        public bool WorkOrderClosed { get; set; }
+        public int AttachmentCount { get; set; }
         public string? RequestedByName { get; set; }
+        public string? DecidedByName { get; set; }
         public decimal? CurrentNTE { get; set; }
         public decimal RequestedNTE { get; set; }
         public decimal Delta { get; set; }
@@ -44,6 +47,8 @@ namespace SeaHaven.Services.DTOs
         public int Total { get; set; }
         public int Page { get; set; }
         public int PageSize { get; set; }
+        // SH-207: queue-wide pending exposure for the approvals header.
+        public decimal PendingExposureTotal { get; set; }
         public IEnumerable<UpliftListItemDTO> Items { get; set; } = Enumerable.Empty<UpliftListItemDTO>();
     }
 
diff --git a/SeaHaven.Services/Implementation/UpliftService.cs b/SeaHaven.Services/Implementation/UpliftService.cs
index 9e86960..39e3b6b 100644
--- a/SeaHaven.Services/Implementation/UpliftService.cs
+++ b/SeaHaven.Services/Implementation/UpliftService.cs
@@ -48,7 +48,10 @@ namespace SeaHaven.Services.Implementation
                 WorkOrderNumber = r.WorkOrderNumber,
                 WorkOrderSite = r.WorkOrderSiteCode,
                 WorkOrderService = r.WorkOrderService,
+                WorkOrderClosed = r.WorkOrderClosed,
+                AttachmentCount = r.AttachmentCount,
                 RequestedByName = ResolveRequestedByName(r.RequestedByVendorName, r.RequestedByFirstName, r.RequestedByLastName),
+                DecidedByName = ComposeDisplayName(r.DecidedByFirstName, r.DecidedByLastName),
                 CurrentNTE = r.CurrentNTE,
                 RequestedNTE = r.RequestedNTE,
                 Delta = r.RequestedNTE - (r.CurrentNTE ?? 0m),
@@ -93,6 +96,7 @@ namespace SeaHaven.Services.Implementation
                 Total = total,
                 Page = page,
                 PageSize = pageSize,
+                PendingExposureTotal = await _upliftData.GetPendingExposureTotalAsync(cancellationToken),
                 Items = mapped
             };
         }
@@ -345,6 +349,11 @@ namespace SeaHaven.Services.Implementation
             if (!string.IsNullOrWhiteSpace(vendorName))
                 return vendorName;
 
+            return ComposeDisplayName(firstName, lastName);
+        }
+
+        private static string? ComposeDisplayName(string? firstName, string? lastName)
+        {
             var composed = string.Join(" ", new[] { firstName, lastName }
                 .Where(s => !string.IsNullOrWhiteSpace(s))).Trim();
             return composed.Length > 0 ? composed : null;
diff --git a/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs b/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs
index bfc163f..eccc526 100644
--- a/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs
@@ -443,6 +443,7 @@ public class WorkOrderBoardCancelServiceTests
         public Task<bool> HasPendingForWorkOrderAsync(int workOrderId, CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<decimal> SumAutoApprovedAmountForWorkOrderAsync(int workOrderId, CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<IReadOnlyList<WorkOrderUpliftExposureData>> GetApprovedExposureForWorkOrdersAsync(IReadOnlyCollection<int> workOrderIds, CancellationToken cancellationToken) => throw new NotSupportedException();
+        public Task<decimal> GetPendingExposureTotalAsync(CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<List<DispatchUpliftRequest>> GetPendingForWorkOrderAsync(int workOrderId, CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<bool> HasActiveAsync(int dispatchId, CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<DispatchUpliftRequest?> GetActiveRequestAsync(int dispatchId, CancellationToken cancellationToken) => throw new NotSupportedException();

From 039a9c8d7ece631cacb4529276a946fa3e8b6ef4 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Thu, 17 Sep 2026 00:08:42 -0300
Subject: [PATCH 054/183] style(tests): fix whitespace formatting in
 UpliftQueueReadTests

The Document(...) helper object initializer was under-indented, failing the G3 dotnet format changed-file gate in the architecture and deployable-bundle checks. Reindented to satisfy dotnet format --verify-no-changes.
---
 .../UpliftQueueReadTests.cs                   | 28 +++++++++----------
 1 file changed, 14 insertions(+), 14 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs b/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
index ad3edd6..a45f0e1 100644
--- a/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
+++ b/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
@@ -550,20 +550,20 @@ public sealed class UpliftQueueReadTests
         string fileName,
         string purpose = "UpliftEvidence",
         bool isDeleted = false) => new()
-    {
-        VendorId = vendor.Id,
-        DispatchId = dispatch.Id,
-        WorkOrderId = workOrder.Id,
-        OriginalFileName = fileName,
-        StoredFileName = $"{fileName}.bin",
-        ContentType = "application/octet-stream",
-        SizeBytes = 128,
-        ScanStatus = "Passed",
-        ReviewStatus = "Approved",
-        Purpose = purpose,
-        Version = 1,
-        IsDeleted = isDeleted
-    };
+        {
+            VendorId = vendor.Id,
+            DispatchId = dispatch.Id,
+            WorkOrderId = workOrder.Id,
+            OriginalFileName = fileName,
+            StoredFileName = $"{fileName}.bin",
+            ContentType = "application/octet-stream",
+            SizeBytes = 128,
+            ScanStatus = "Passed",
+            ReviewStatus = "Approved",
+            Purpose = purpose,
+            Version = 1,
+            IsDeleted = isDeleted
+        };
 
     // --- Queue-wide pending exposure (SH-207) ---
 

From daf3ed921041ff3cd3ea0709acb5698c9f858ed1 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Thu, 17 Sep 2026 01:40:40 -0300
Subject: [PATCH 055/183] fix(team-members): map duplicate-email race to
 conflict error (SH-325)

CreateAsync checks FindByEmailAsync and then inserts, so two concurrent
creates with the same email can both pass the check and hit the unique
user-name index. That DbUpdateException was unhandled and surfaced as a
500. Catch it at the CreateAsync call and return the existing
"Email is already in use." message, matching the check-then-insert
converge pattern already used by SetOverrideCoreAsync.
---
 .../TeamMemberServiceTests.cs                 | 21 +++++++++++++++++++
 .../Implementation/TeamMemberService.cs       | 16 +++++++++++++-
 2 files changed, 36 insertions(+), 1 deletion(-)

diff --git a/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs b/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs
index 4b39ede..d9ce2d7 100644
--- a/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs
@@ -3,6 +3,7 @@ using Data.SeaHavenIndustries;
 using Data.SeaHavenIndustries.Enums;
 using FluentAssertions;
 using Microsoft.AspNetCore.Identity;
+using Microsoft.EntityFrameworkCore;
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
 using Moq;
@@ -95,6 +96,26 @@ public sealed class TeamMemberServiceTests
         overrides.Verify(data => data.SetOverridesAsync("new-user", It.Is<IReadOnlyDictionary<string, UserPermissionState>>(value => value["deleteSites"] == UserPermissionState.Allow), It.IsAny<CancellationToken>()), Times.Once);
     }
 
+    [Fact]
+    public async Task Create_ConcurrentDuplicateEmail_ReturnsAlreadyInUseInsteadOf500()
+    {
+        var service = NewService(out var userManager, out var roleManager, out _, out _);
+        userManager
+            .Setup(manager => manager.FindByEmailAsync(It.IsAny<string>()))
+            .ReturnsAsync((ApplicationUser?)null);
+        roleManager.Setup(manager => manager.RoleExistsAsync("Dispatcher")).ReturnsAsync(true);
+        userManager
+            .Setup(manager => manager.CreateAsync(It.IsAny<ApplicationUser>()))
+            .ThrowsAsync(new DbUpdateException("duplicate key", new Exception()));
+
+        var result = await service.CreateAsync(ValidRequest(), Admin(), CancellationToken.None);
+
+        result.Success.Should().BeFalse();
+        result.Error.Should().Be("Email is already in use.");
+        userManager.Verify(manager => manager.AddToRoleAsync(It.IsAny<ApplicationUser>(), It.IsAny<string>()), Times.Never);
+        userManager.Verify(manager => manager.DeleteAsync(It.IsAny<ApplicationUser>()), Times.Never);
+    }
+
     private static TeamMemberService NewService(
         out Mock<UserManager<ApplicationUser>> userManager,
         out Mock<RoleManager<IdentityRole>> roleManager,
diff --git a/SeaHaven.Services/Implementation/TeamMemberService.cs b/SeaHaven.Services/Implementation/TeamMemberService.cs
index ad01254..7382c3c 100644
--- a/SeaHaven.Services/Implementation/TeamMemberService.cs
+++ b/SeaHaven.Services/Implementation/TeamMemberService.cs
@@ -3,6 +3,7 @@ using System.Security.Claims;
 using Data.SeaHavenIndustries;
 using Data.SeaHavenIndustries.Enums;
 using Microsoft.AspNetCore.Identity;
+using Microsoft.EntityFrameworkCore;
 using SeaHaven.DataServices.Interfaces;
 using SeaHaven.Services.Constants;
 using SeaHaven.Services.DTOs;
@@ -68,7 +69,20 @@ public sealed class TeamMemberService : ITeamMemberService
             PendingRegistrationCreatedDate = now
         };
 
-        var createResult = await _userManager.CreateAsync(user);
+        IdentityResult createResult;
+        try
+        {
+            createResult = await _userManager.CreateAsync(user);
+        }
+        catch (DbUpdateException)
+        {
+            // A concurrent create won the race on the unique user-name index
+            // between the FindByEmailAsync check above and this insert. Surface
+            // the same conflict message instead of letting the database
+            // exception bubble up as a 500.
+            return Failure("Email is already in use.");
+        }
+
         if (!createResult.Succeeded)
             return Failure(createResult.Errors.FirstOrDefault()?.Description ?? "Unable to create team member.");
 

From 146fe6fdb016f844989e76f827d596fa6c9c905e Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Thu, 17 Sep 2026 02:26:19 -0300
Subject: [PATCH 056/183] style: satisfy dotnet format whitespace gate for
 region board files

Break collection initializer entries onto one line each in
WorkOrderBoardRegions and WorkOrderBoardSearchTests so the changed-file
formatting gate (dotnet format --verify-no-changes) passes.
---
 .../Helpers/WorkOrderBoardRegions.cs          | 63 +++++++++++++++----
 .../WorkOrderBoardSearchTests.cs              |  3 +-
 2 files changed, 52 insertions(+), 14 deletions(-)

diff --git a/SeaHaven.DataServices/Helpers/WorkOrderBoardRegions.cs b/SeaHaven.DataServices/Helpers/WorkOrderBoardRegions.cs
index 0ca39ec..17a2d5e 100644
--- a/SeaHaven.DataServices/Helpers/WorkOrderBoardRegions.cs
+++ b/SeaHaven.DataServices/Helpers/WorkOrderBoardRegions.cs
@@ -17,19 +17,56 @@ namespace SeaHaven.DataServices.Helpers
         private static readonly IReadOnlyDictionary<string, string> StateNames =
             new Dictionary<string, string>(StringComparer.Ordinal)
             {
-                ["AL"] = "ALABAMA", ["AK"] = "ALASKA", ["AZ"] = "ARIZONA", ["AR"] = "ARKANSAS",
-                ["CA"] = "CALIFORNIA", ["CO"] = "COLORADO", ["CT"] = "CONNECTICUT", ["DE"] = "DELAWARE",
-                ["FL"] = "FLORIDA", ["GA"] = "GEORGIA", ["HI"] = "HAWAII", ["ID"] = "IDAHO",
-                ["IL"] = "ILLINOIS", ["IN"] = "INDIANA", ["IA"] = "IOWA", ["KS"] = "KANSAS",
-                ["KY"] = "KENTUCKY", ["LA"] = "LOUISIANA", ["ME"] = "MAINE", ["MD"] = "MARYLAND",
-                ["MA"] = "MASSACHUSETTS", ["MI"] = "MICHIGAN", ["MN"] = "MINNESOTA", ["MS"] = "MISSISSIPPI",
-                ["MO"] = "MISSOURI", ["MT"] = "MONTANA", ["NE"] = "NEBRASKA", ["NV"] = "NEVADA",
-                ["NH"] = "NEW HAMPSHIRE", ["NJ"] = "NEW JERSEY", ["NM"] = "NEW MEXICO", ["NY"] = "NEW YORK",
-                ["NC"] = "NORTH CAROLINA", ["ND"] = "NORTH DAKOTA", ["OH"] = "OHIO", ["OK"] = "OKLAHOMA",
-                ["OR"] = "OREGON", ["PA"] = "PENNSYLVANIA", ["RI"] = "RHODE ISLAND", ["SC"] = "SOUTH CAROLINA",
-                ["SD"] = "SOUTH DAKOTA", ["TN"] = "TENNESSEE", ["TX"] = "TEXAS", ["UT"] = "UTAH",
-                ["VT"] = "VERMONT", ["VA"] = "VIRGINIA", ["WA"] = "WASHINGTON", ["WV"] = "WEST VIRGINIA",
-                ["WI"] = "WISCONSIN", ["WY"] = "WYOMING"
+                ["AL"] = "ALABAMA",
+                ["AK"] = "ALASKA",
+                ["AZ"] = "ARIZONA",
+                ["AR"] = "ARKANSAS",
+                ["CA"] = "CALIFORNIA",
+                ["CO"] = "COLORADO",
+                ["CT"] = "CONNECTICUT",
+                ["DE"] = "DELAWARE",
+                ["FL"] = "FLORIDA",
+                ["GA"] = "GEORGIA",
+                ["HI"] = "HAWAII",
+                ["ID"] = "IDAHO",
+                ["IL"] = "ILLINOIS",
+                ["IN"] = "INDIANA",
+                ["IA"] = "IOWA",
+                ["KS"] = "KANSAS",
+                ["KY"] = "KENTUCKY",
+                ["LA"] = "LOUISIANA",
+                ["ME"] = "MAINE",
+                ["MD"] = "MARYLAND",
+                ["MA"] = "MASSACHUSETTS",
+                ["MI"] = "MICHIGAN",
+                ["MN"] = "MINNESOTA",
+                ["MS"] = "MISSISSIPPI",
+                ["MO"] = "MISSOURI",
+                ["MT"] = "MONTANA",
+                ["NE"] = "NEBRASKA",
+                ["NV"] = "NEVADA",
+                ["NH"] = "NEW HAMPSHIRE",
+                ["NJ"] = "NEW JERSEY",
+                ["NM"] = "NEW MEXICO",
+                ["NY"] = "NEW YORK",
+                ["NC"] = "NORTH CAROLINA",
+                ["ND"] = "NORTH DAKOTA",
+                ["OH"] = "OHIO",
+                ["OK"] = "OKLAHOMA",
+                ["OR"] = "OREGON",
+                ["PA"] = "PENNSYLVANIA",
+                ["RI"] = "RHODE ISLAND",
+                ["SC"] = "SOUTH CAROLINA",
+                ["SD"] = "SOUTH DAKOTA",
+                ["TN"] = "TENNESSEE",
+                ["TX"] = "TEXAS",
+                ["UT"] = "UTAH",
+                ["VT"] = "VERMONT",
+                ["VA"] = "VIRGINIA",
+                ["WA"] = "WASHINGTON",
+                ["WV"] = "WEST VIRGINIA",
+                ["WI"] = "WISCONSIN",
+                ["WY"] = "WYOMING"
             };
 
         public static IReadOnlyCollection<string> StorageValuesFor(string region)
diff --git a/SeaHavenIndustries.Tests/WorkOrderBoardSearchTests.cs b/SeaHavenIndustries.Tests/WorkOrderBoardSearchTests.cs
index 033d3fb..cd47e05 100644
--- a/SeaHavenIndustries.Tests/WorkOrderBoardSearchTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderBoardSearchTests.cs
@@ -251,7 +251,8 @@ public class WorkOrderAdvancedSearchServiceTests
         var query = new SeaHaven.Services.DTOs.WorkOrderAdvancedSearchQueryDto
         {
             DatePreset = SeaHaven.Services.Helpers.WorkOrderAdvancedSearchDatePreset.Custom,
-            DateFrom = new DateOnly(2026, 6, 22), DateTo = new DateOnly(2026, 6, 30),
+            DateFrom = new DateOnly(2026, 6, 22),
+            DateTo = new DateOnly(2026, 6, 30),
             PageSize = 50
         };
 

From 564bd70301d57b100291223c6157dadcb6c35118 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Thu, 17 Sep 2026 03:37:36 -0300
Subject: [PATCH 057/183] fix(dashboard): scope Trend by picker and admit
 Scheduler to dispatcher picker

ResolveDispatcherScope now admits the Scheduler role, which owns the
viewAllDispatchersOnDashboard permission, so it can load Stats, Workload,
Performance, Regions and Trend instead of being denied.

GetTrendAsync now resolves scope via the shared ResolveDispatcherScope so a
picker DispatcherId selection scopes Trend consistently with the other
endpoints and unauthorized roles fail closed.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 .../DashboardServiceTests.cs                  | 22 +++++++++++++++++++
 .../Implementation/DashboardService.cs        |  8 ++-----
 2 files changed, 24 insertions(+), 6 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs b/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
index b1bb099..2cc73ee 100644
--- a/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
@@ -517,6 +517,23 @@ public class DashboardServiceTests
         stats.Total.Should().Be(1);
     }
 
+    [Fact]
+    public async Task GetStatsAsync_SchedulerSelectionScopesStats()
+    {
+        using var ctx = NewContext();
+        ctx.workOrders.AddRange(
+            new WorkOrder { AccountId = 1, Status = "Open", AssignTo = "dispatcher-1" },
+            new WorkOrder { AccountId = 1, Status = "Open", AssignTo = "dispatcher-2" });
+        ctx.SaveChanges();
+
+        var stats = await NewService(ctx).GetStatsAsync(
+            AccountUser(1, "scheduler-1", "Scheduler"),
+            new DashboardStatsQueryDTO { DispatcherId = "dispatcher-2" },
+            CancellationToken.None);
+
+        stats.Total.Should().Be(1);
+    }
+
     [Fact]
     public async Task GetDashboardAsync_UnauthorizedRoleFailsClosed()
     {
@@ -543,6 +560,11 @@ public class DashboardServiceTests
             user, new DashboardStatsQueryDTO(), CancellationToken.None);
         var regionsException = await regionsAct.Should().ThrowAsync<WorkOrderBoardValidationException>();
         regionsException.Which.Code.Should().Be("Forbidden");
+
+        var trendAct = () => service.GetTrendAsync(
+            user, new DashboardTrendQueryDTO(), CancellationToken.None);
+        var trendException = await trendAct.Should().ThrowAsync<WorkOrderBoardValidationException>();
+        trendException.Which.Code.Should().Be("Forbidden");
     }
 
     [Fact]
diff --git a/SeaHaven.Services/Implementation/DashboardService.cs b/SeaHaven.Services/Implementation/DashboardService.cs
index 68c4a5f..02642dc 100644
--- a/SeaHaven.Services/Implementation/DashboardService.cs
+++ b/SeaHaven.Services/Implementation/DashboardService.cs
@@ -183,11 +183,7 @@ namespace SeaHaven.Services.Implementation
             CancellationToken cancellationToken)
         {
             var accountId = _accountResolver.ResolveAccountFilter(user);
-            var dispatcherId = user.IsInRole("Dispatcher")
-                ? user.FindFirstValue(ClaimTypes.NameIdentifier)
-                : null;
-            if (user.IsInRole("Dispatcher") && string.IsNullOrWhiteSpace(dispatcherId))
-                throw new WorkOrderBoardValidationException("Forbidden", "Dispatcher identity is required.");
+            var dispatcherId = ResolveDispatcherScope(user, query);
 
             var today = DashboardBusinessTime.Today();
             var (windowFrom, windowTo, granularity) = ResolveTrendWindow(query, today);
@@ -402,7 +398,7 @@ namespace SeaHaven.Services.Implementation
                 return dispatcherId;
             }
 
-            if (user.IsInRole("Admin") || user.IsInRole("Manager"))
+            if (user.IsInRole("Admin") || user.IsInRole("Manager") || user.IsInRole("Scheduler"))
             {
                 var selected = query.DispatcherId;
                 if (string.IsNullOrWhiteSpace(selected))

From 468522c3f7912a69060f5f588d24f6904db2b614 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Thu, 17 Sep 2026 03:47:09 -0300
Subject: [PATCH 058/183] fix(uplift): resolve linked-only work order in queue
 list read

GetPagedAsync resolved WorkOrderNumber/Site/Service, WorkOrderClosed, and
WorkOrderId only through Dispatch.WorkOrderId, so a dispatch linked to its
work order solely through DispatchWorkOrders surfaced blank WO context,
workOrderClosed:false, and zero exposure. Resolve the effective work order
using the same primary-plus-linked convention as GetWorkOrderIdForUpliftAsync
and GetApprovedExposureForWorkOrdersAsync via a single work-order lookup.
---
 .../UpliftQueueReadTests.cs                   |  42 +++++++
 .../Implementation/UpliftDataService.cs       |  29 +++--
 .../UpliftQueueReadRelationalTests.cs         | 107 ++++++++++++++++++
 3 files changed, 168 insertions(+), 10 deletions(-)
 create mode 100644 SeaHavenIndustries.Tests/UpliftQueueReadRelationalTests.cs

diff --git a/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs b/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
index a45f0e1..0973536 100644
--- a/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
+++ b/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
@@ -281,6 +281,48 @@ public sealed class UpliftQueueReadTests
         item.Status.Should().Be("Pending");
     }
 
+    [Fact]
+    public async Task List_ResolvesWorkOrderContext_ForDispatchLinkedOnlyThroughDispatchWorkOrders()
+    {
+        // A dispatch can carry no primary WorkOrderId yet be linked to a work order
+        // through DispatchWorkOrders (the supported shape exercised by
+        // Exposure_IncludesLinkedDispatchesViaServerDerivedWorkOrderLinks). The queue
+        // read must resolve the same effective work order the sibling reads use, or the
+        // Approved tab surfaces blank WO context, workOrderClosed:false, and zero
+        // exposure on a terminal work order.
+        using var context = NewContext();
+        var (vendor, workOrder) = await SeedWorkOrderAsync(context, "WO-LINKED", "SITE-Z", "Electrical");
+        workOrder.LifecycleStatus = LifecycleStatus.Completed;
+        var linkedDispatch = new Dispatch
+        {
+            VendorId = vendor.Id,
+            DispatchNumber = "DIS-LINKED",
+            Status = "Completed"
+        };
+        context.Dispatches.Add(linkedDispatch);
+        await context.SaveChangesAsync();
+        context.DispatchWorkOrders.Add(new DispatchWorkOrder
+        {
+            DispatchId = linkedDispatch.Id,
+            WorkOrderId = workOrder.Id
+        });
+        context.DispatchUpliftRequests.Add(Request(
+            linkedDispatch, "Approved", new DateTime(2026, 3, 1),
+            decided: new DateTime(2026, 3, 2), requested: 90m));
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        var result = await service.ListAsync(UserWithRoles("Approver"), "Approved", null, 1, 25, CancellationToken.None);
+
+        var item = result.Items.Should().ContainSingle().Subject;
+        item.WorkOrderId.Should().Be(workOrder.Id);
+        item.WorkOrderNumber.Should().Be("WO-LINKED");
+        item.WorkOrderSite.Should().Be("SITE-Z");
+        item.WorkOrderService.Should().Be("Electrical");
+        item.WorkOrderClosed.Should().BeTrue();
+        item.WorkOrderApprovedExposureTotal.Should().Be(90m);
+    }
+
     [Fact]
     public async Task List_RequesterLabelFallsBackToCreatingUserName()
     {
diff --git a/SeaHaven.DataServices/Implementation/UpliftDataService.cs b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
index 3535e0e..b6f9940 100644
--- a/SeaHaven.DataServices/Implementation/UpliftDataService.cs
+++ b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
@@ -25,15 +25,24 @@ namespace SeaHaven.DataServices.Implementation
                         from v in vendors.DefaultIfEmpty()
                         join ev in _context.VendorCompletionDocuments on u.EvidenceDocumentId equals ev.Id into evidences
                         from ev in evidences.DefaultIfEmpty()
-                        join wo in _context.workOrders on d.WorkOrderId equals wo.Id into workOrders
-                        from wo in workOrders.DefaultIfEmpty()
+                        // SH-207: resolve the work order through the same primary-plus-linked
+                        // convention the sibling reads use (GetWorkOrderIdForUpliftAsync,
+                        // GetApprovedExposureForWorkOrdersAsync). A dispatch whose work order is
+                        // linked only through DispatchWorkOrders still surfaces its work-order id,
+                        // flattened WO context, the closed flag, and approved exposure. The
+                        // effective id feeds a single work-order lookup so every field resolves
+                        // from one row.
+                        let effectiveWorkOrderId = d.WorkOrderId
+                            ?? d.DispatchWorkOrders!.Select(link => (int?)link.WorkOrderId).FirstOrDefault()
+                        let workOrder = _context.workOrders
+                            .FirstOrDefault(candidate => candidate.Id == effectiveWorkOrderId)
                         join reqUser in _context.Users on u.createdby equals reqUser.Id into requestUsers
                         from reqUser in requestUsers.DefaultIfEmpty()
                         join decUser in _context.Users on u.DecidedByUserId equals decUser.Id into decUsers
                         from decUser in decUsers.DefaultIfEmpty()
                         where (u.IsDeleted == null || u.IsDeleted == false)
                             && (d.IsDeleted == null || d.IsDeleted == false)
-                        select new { u, d, v, ev, wo, reqUser, decUser };
+                        select new { u, d, v, ev, effectiveWorkOrderId, workOrder, reqUser, decUser };
 
             if (!string.IsNullOrWhiteSpace(status))
                 query = query.Where(x => x.u.Status == status);
@@ -62,16 +71,16 @@ namespace SeaHaven.DataServices.Implementation
                     DispatchId = x.d.Id,
                     DispatchNumber = x.d.DispatchNumber,
                     PONumber = x.d.PONumber,
-                    WorkOrderId = x.d.WorkOrderId,
+                    WorkOrderId = x.effectiveWorkOrderId,
                     VendorCompanyName = x.v != null ? x.v.CompanyName : x.u.RequestedByVendorName,
-                    WorkOrderNumber = x.wo != null ? x.wo.WorkerOrderNumber : null,
-                    WorkOrderSiteCode = x.wo != null ? x.wo.SiteCode : null,
-                    WorkOrderService = x.wo != null ? x.wo.Service : null,
+                    WorkOrderNumber = x.workOrder != null ? x.workOrder.WorkerOrderNumber : null,
+                    WorkOrderSiteCode = x.workOrder != null ? x.workOrder.SiteCode : null,
+                    WorkOrderService = x.workOrder != null ? x.workOrder.Service : null,
                     // SH-208: a work order is closed for uplift decisions once its
                     // lifecycle reaches a terminal state; mirrors the SH-196 revoke guard.
-                    WorkOrderClosed = x.wo != null
-                        && (x.wo.LifecycleStatus == LifecycleStatus.Completed
-                            || x.wo.LifecycleStatus == LifecycleStatus.Canceled),
+                    WorkOrderClosed = x.workOrder != null
+                        && (x.workOrder.LifecycleStatus == LifecycleStatus.Completed
+                            || x.workOrder.LifecycleStatus == LifecycleStatus.Canceled),
                     // SH-207: every non-deleted UpliftEvidence document on the dispatch is
                     // an attachment reviewers can open; the linked evidence is one of them.
                     AttachmentCount = x.d.CompletionDocuments.Count(doc =>
diff --git a/SeaHavenIndustries.Tests/UpliftQueueReadRelationalTests.cs b/SeaHavenIndustries.Tests/UpliftQueueReadRelationalTests.cs
new file mode 100644
index 0000000..b4b6be5
--- /dev/null
+++ b/SeaHavenIndustries.Tests/UpliftQueueReadRelationalTests.cs
@@ -0,0 +1,107 @@
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using Microsoft.Data.Sqlite;
+using Microsoft.EntityFrameworkCore;
+using SeaHaven.DataServices.Implementation;
+
+namespace SeaHavenIndustries.Tests;
+
+// Relational (SQLite) coverage for the uplift queue read. The in-memory provider
+// evaluates LINQ in memory and cannot prove the query translates to SQL, so this
+// executes GetPagedAsync against a real relational provider and asserts a dispatch
+// linked only through DispatchWorkOrders still resolves its work-order context and
+// closed flag through the effective primary-plus-linked work order.
+public sealed class UpliftQueueReadRelationalTests
+{
+    [Fact]
+    public async Task GetPagedAsync_ResolvesWorkOrder_ForDispatchLinkedOnlyThroughDispatchWorkOrders()
+    {
+        await using var connection = new SqliteConnection("DataSource=:memory:");
+        await connection.OpenAsync();
+
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseSqlite(connection)
+            .Options;
+
+        await using var context = new SqliteUpliftTestDbContext(options);
+        await context.Database.EnsureCreatedAsync();
+
+        var vendor = new Vendor { CompanyName = "Gateway", IsActive = true };
+        var workOrder = new WorkOrder
+        {
+            WorkerOrderNumber = "WO-LINKED",
+            SiteCode = "SITE-Z",
+            Service = "Electrical",
+            WorkerOrderTitle = "Repair",
+            LifecycleStatus = LifecycleStatus.Completed
+        };
+        context.AddRange(vendor, workOrder);
+        await context.SaveChangesAsync();
+
+        var dispatch = new Dispatch
+        {
+            VendorId = vendor.Id,
+            DispatchNumber = "DIS-LINKED",
+            Status = "Completed"
+        };
+        context.Dispatches.Add(dispatch);
+        await context.SaveChangesAsync();
+
+        context.DispatchWorkOrders.Add(new DispatchWorkOrder
+        {
+            DispatchId = dispatch.Id,
+            WorkOrderId = workOrder.Id
+        });
+        context.DispatchUpliftRequests.Add(new DispatchUpliftRequest
+        {
+            DispatchId = dispatch.Id,
+            Status = "Approved",
+            CreatedDate = new DateTime(2026, 3, 1),
+            DecidedAt = new DateTime(2026, 3, 2),
+            RequiredTier = 1,
+            RequestedNTE = 90m,
+            NotificationStatus = "Pending"
+        });
+        await context.SaveChangesAsync();
+
+        var data = new UpliftDataService(context);
+
+        var (total, items) = await data.GetPagedAsync("Approved", null, 1, 25, CancellationToken.None);
+
+        Assert.Equal(1, total);
+        var item = Assert.Single(items);
+        Assert.Equal(workOrder.Id, item.WorkOrderId);
+        Assert.Equal("WO-LINKED", item.WorkOrderNumber);
+        Assert.Equal("SITE-Z", item.WorkOrderSiteCode);
+        Assert.Equal("Electrical", item.WorkOrderService);
+        Assert.True(item.WorkOrderClosed);
+    }
+
+    private sealed class SqliteUpliftTestDbContext : ApplicationDbContext
+    {
+        public SqliteUpliftTestDbContext(DbContextOptions<ApplicationDbContext> options)
+            : base(options)
+        {
+        }
+
+        protected override void OnModelCreating(ModelBuilder builder)
+        {
+            base.OnModelCreating(builder);
+
+            // SQL Server filtered index syntax is invalid on SQLite.
+            foreach (var index in builder.Model.GetEntityTypes().SelectMany(e => e.GetIndexes()))
+            {
+                if (index.GetFilter() != null)
+                    index.SetFilter(null);
+            }
+
+            // SQLite has no rowversion type; treat as plain nullable blobs.
+            foreach (var entityType in new[] { typeof(WorkOrder), typeof(Dispatch) })
+            {
+                var property = builder.Entity(entityType).Property("RowVersion").Metadata;
+                property.ValueGenerated = Microsoft.EntityFrameworkCore.Metadata.ValueGenerated.Never;
+                property.IsConcurrencyToken = false;
+            }
+        }
+    }
+}

From 9388e7a987bab6a6ad80deff1980e88d1a0e2cd9 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Thu, 17 Sep 2026 03:56:18 -0300
Subject: [PATCH 059/183] style(uplift): fix comment indentation in queue list
 query

---
 .../Implementation/UpliftDataService.cs            | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/SeaHaven.DataServices/Implementation/UpliftDataService.cs b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
index b6f9940..48c0391 100644
--- a/SeaHaven.DataServices/Implementation/UpliftDataService.cs
+++ b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
@@ -25,13 +25,13 @@ namespace SeaHaven.DataServices.Implementation
                         from v in vendors.DefaultIfEmpty()
                         join ev in _context.VendorCompletionDocuments on u.EvidenceDocumentId equals ev.Id into evidences
                         from ev in evidences.DefaultIfEmpty()
-                        // SH-207: resolve the work order through the same primary-plus-linked
-                        // convention the sibling reads use (GetWorkOrderIdForUpliftAsync,
-                        // GetApprovedExposureForWorkOrdersAsync). A dispatch whose work order is
-                        // linked only through DispatchWorkOrders still surfaces its work-order id,
-                        // flattened WO context, the closed flag, and approved exposure. The
-                        // effective id feeds a single work-order lookup so every field resolves
-                        // from one row.
+                            // SH-207: resolve the work order through the same primary-plus-linked
+                            // convention the sibling reads use (GetWorkOrderIdForUpliftAsync,
+                            // GetApprovedExposureForWorkOrdersAsync). A dispatch whose work order is
+                            // linked only through DispatchWorkOrders still surfaces its work-order id,
+                            // flattened WO context, the closed flag, and approved exposure. The
+                            // effective id feeds a single work-order lookup so every field resolves
+                            // from one row.
                         let effectiveWorkOrderId = d.WorkOrderId
                             ?? d.DispatchWorkOrders!.Select(link => (int?)link.WorkOrderId).FirstOrDefault()
                         let workOrder = _context.workOrders

From ba8907fad0cdf8e35f519498e8905ef6c29b46c5 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Thu, 17 Sep 2026 04:22:02 -0300
Subject: [PATCH 060/183] fix(team-members): keep full-name round-trip stable
 on update

Storing the submitted full name in FirstName while leaving a seeded
LastName intact made an unchanged save project a duplicated name
(e.g. "Legacy Manager Manager"). Leave FirstName/LastName untouched when
the submitted name already matches the stored first+last projection, and
otherwise split the submitted name across FirstName/LastName so renames
round-trip cleanly.
---
 .../TeamMemberServiceTests.cs                 | 51 +++++++++++++++++++
 .../Implementation/TeamMemberService.cs       | 20 +++++++-
 2 files changed, 70 insertions(+), 1 deletion(-)

diff --git a/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs b/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs
index 04024f6..d005ed6 100644
--- a/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs
@@ -216,6 +216,57 @@ public sealed class TeamMemberServiceTests
         overrides.Verify(data => data.SetOverridesAsync(user.Id, It.Is<IReadOnlyDictionary<string, UserPermissionState>>(value => value["createSites"] == UserPermissionState.Deny), It.IsAny<CancellationToken>()), Times.Once);
     }
 
+    [Fact]
+    public async Task Update_SavesUnchangedNameWithoutDuplicatingRoleLikeLastName()
+    {
+        var service = NewService(
+            out var userManager,
+            out var roleManager,
+            out var areas,
+            out _,
+            out var userData,
+            out var permissions);
+        var user = new ApplicationUser
+        {
+            Id = "admin",
+            FirstName = "Legacy",
+            LastName = "Manager",
+            Email = "legacy@example.com",
+            Color = "#F59E0B",
+            UniqueName = "Active"
+        };
+        userManager.Setup(manager => manager.FindByIdAsync(user.Id)).ReturnsAsync(user);
+        userManager.Setup(manager => manager.GetRolesAsync(user)).ReturnsAsync(new List<string> { "Admin" });
+        userManager.Setup(manager => manager.FindByEmailAsync(user.Email!)).ReturnsAsync(user);
+        roleManager.Setup(manager => manager.RoleExistsAsync("Admin")).ReturnsAsync(true);
+        areas.Setup(data => data.GetForUserAsync(user.Id, It.IsAny<CancellationToken>()))
+            .ReturnsAsync(Array.Empty<string>());
+        permissions.Setup(data => data.GetProfileAsync(user.Id, It.IsAny<ClaimsPrincipal>(), It.IsAny<CancellationToken>()))
+            .ReturnsAsync(TeamPermissionResult<TeamPermissionProfileDTO>.Success(new TeamPermissionProfileDTO
+            {
+                UserId = user.Id,
+                Permissions = Array.Empty<TeamPermissionValueDTO>()
+            }));
+
+        var result = await service.UpdateAsync(
+            user.Id,
+            new UpdateTeamMemberRequestDTO
+            {
+                Name = "Legacy Manager",
+                Role = "Admin",
+                Color = "#F59E0B",
+                Email = user.Email
+            },
+            Admin(),
+            CancellationToken.None);
+
+        result.Success.Should().BeTrue();
+        user.FirstName.Should().Be("Legacy");
+        user.LastName.Should().Be("Manager");
+        result.Member!.Name.Should().Be("Legacy Manager");
+        userData.Verify(data => data.UpdateUserAsync(user, It.IsAny<CancellationToken>()), Times.Once);
+    }
+
     [Fact]
     public async Task Update_LeavesOmittedOverridesUnchanged()
     {
diff --git a/SeaHaven.Services/Implementation/TeamMemberService.cs b/SeaHaven.Services/Implementation/TeamMemberService.cs
index aeeef94..8933bac 100644
--- a/SeaHaven.Services/Implementation/TeamMemberService.cs
+++ b/SeaHaven.Services/Implementation/TeamMemberService.cs
@@ -167,7 +167,7 @@ public sealed class TeamMemberService : ITeamMemberService
         if (roleError is not null)
             return OperationFailure(roleError);
 
-        user.FirstName = candidate.Name!.Trim();
+        ApplyName(user, candidate.Name!.Trim());
         user.Contact = candidate.Phone?.Trim();
         user.PhoneNumber = candidate.Phone?.Trim();
         user.Color = color;
@@ -215,6 +215,24 @@ public sealed class TeamMemberService : ITeamMemberService
         return await OperationSuccessAsync(user, caller, cancellationToken);
     }
 
+    private static void ApplyName(ApplicationUser user, string fullName)
+    {
+        var current = $"{user.FirstName ?? ""} {user.LastName ?? ""}".Trim();
+        if (string.Equals(fullName, current, StringComparison.Ordinal))
+            return;
+
+        var separator = fullName.IndexOf(' ');
+        if (separator < 0)
+        {
+            user.FirstName = fullName;
+            user.LastName = null;
+            return;
+        }
+
+        user.FirstName = fullName[..separator].Trim();
+        user.LastName = fullName[(separator + 1)..].Trim();
+    }
+
     private async Task<string?> EnsureRoleAsync(string role)
     {
         if (await _roleManager.RoleExistsAsync(role))

From 8f4fa3664705819bec59c9b12b5868820c6f9814 Mon Sep 17 00:00:00 2001
From: Adam Moussa <adam@seahavenind.com>
Date: Wed, 16 Sep 2026 14:02:46 -0400
Subject: [PATCH 061/183] refactor(cd): ship Elastic Beanstalk versions from
 GitHub on main

Keep application and Terraform changes in separate PRs so a merge cannot race an HCP apply against an app deploy.
---
 .github/workflows/architecture-quality.yml    |   6 +-
 .github/workflows/ci-terraform.yaml           |  60 +++
 .github/workflows/ci.yml                      |  33 +-
 .github/workflows/deploy-tag.yaml             |  43 ++
 .github/workflows/deploy.yaml                 | 403 ++++++++++++++++++
 .github/workflows/release.yaml                |  90 ++++
 QUALITY_GATES.md                              |  41 +-
 REVIEW_AND_PR_FRAMEWORK.md                    |   9 +-
 scripts/check_app_terraform_isolation.py      |  69 +++
 scripts/governance-check.sh                   |  22 +-
 scripts/next_release_tag.py                   |  95 +++++
 scripts/require_commit_checks.py              | 123 ++++++
 scripts/test_check_app_terraform_isolation.py |  59 +++
 scripts/test_next_release_tag.py              |  62 +++
 scripts/test_require_commit_checks.py         | 112 +++++
 terraform/README.md                           |  11 +-
 terraform/live/README.md                      |  95 ++---
 terraform/live/dev/main.tf                    |   2 +-
 terraform/live/dev/variables.tf               |  15 -
 .../live/modules/environment-owned/main.tf    |  71 ++-
 .../modules/environment-owned/variables.tf    |  17 +-
 terraform/live/staging/main.tf                |   2 +-
 terraform/live/staging/variables.tf           |  15 -
 23 files changed, 1280 insertions(+), 175 deletions(-)
 create mode 100644 .github/workflows/ci-terraform.yaml
 create mode 100644 .github/workflows/deploy-tag.yaml
 create mode 100644 .github/workflows/deploy.yaml
 create mode 100644 .github/workflows/release.yaml
 create mode 100644 scripts/check_app_terraform_isolation.py
 create mode 100644 scripts/next_release_tag.py
 create mode 100644 scripts/require_commit_checks.py
 create mode 100644 scripts/test_check_app_terraform_isolation.py
 create mode 100644 scripts/test_next_release_tag.py
 create mode 100644 scripts/test_require_commit_checks.py
 delete mode 100644 terraform/live/dev/variables.tf
 delete mode 100644 terraform/live/staging/variables.tf

diff --git a/.github/workflows/architecture-quality.yml b/.github/workflows/architecture-quality.yml
index 14018b5..4df5842 100644
--- a/.github/workflows/architecture-quality.yml
+++ b/.github/workflows/architecture-quality.yml
@@ -2,6 +2,8 @@ name: Architecture and changed-file quality
 
 on:
   pull_request:
+  push:
+    branches: [main]
 
 permissions:
   contents: read
@@ -24,6 +26,6 @@ jobs:
       - name: Repository quality gate
         shell: bash
         env:
-          BASE_REF: ${{ github.event.pull_request.base.sha }}
-          HEAD_REF: ${{ github.event.pull_request.head.sha }}
+          BASE_REF: ${{ github.event.pull_request.base.sha || github.event.before }}
+          HEAD_REF: ${{ github.event.pull_request.head.sha || github.sha }}
         run: bash scripts/governance-check.sh
diff --git a/.github/workflows/ci-terraform.yaml b/.github/workflows/ci-terraform.yaml
new file mode 100644
index 0000000..cc937fb
--- /dev/null
+++ b/.github/workflows/ci-terraform.yaml
@@ -0,0 +1,60 @@
+name: Terraform CI
+
+# Static checks only. Plans run in HCP Terraform as speculative VCS runs on the
+# PR (shoc-backend-dev and shoc-backend-staging). Applies are HCP auto-apply
+# on merge to main (dev) and on a vX.Y.Z-staging tag (staging).
+
+on:
+  pull_request:
+    branches: [main, dev]
+    paths:
+      - "terraform/**"
+      - "scripts/**"
+      - ".github/workflows/ci-terraform.yaml"
+      - ".github/workflows/deploy.yaml"
+      - ".github/workflows/deploy-tag.yaml"
+      - ".github/workflows/release.yaml"
+  push:
+    branches: [main]
+    paths:
+      - "terraform/**"
+      - "scripts/**"
+      - ".github/workflows/ci-terraform.yaml"
+
+permissions:
+  contents: read
+
+jobs:
+  terraform:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+
+      - uses: hashicorp/setup-terraform@dfe3c3f87815947d99a8997f908cb6525fc44e9e # v4.0.1
+        with:
+          terraform_version: "1.9.8"
+          terraform_wrapper: false
+
+      - name: Terraform fmt
+        run: terraform fmt -check -recursive terraform
+
+      - name: Validate live/dev
+        run: |
+          terraform -chdir=terraform/live/dev init -backend=false
+          terraform -chdir=terraform/live/dev validate
+
+      - name: Validate live/staging
+        run: |
+          terraform -chdir=terraform/live/staging init -backend=false
+          terraform -chdir=terraform/live/staging validate
+
+      - name: Import plan guard tests
+        run: python3 scripts/test-terraform-import-plan-check.py
+
+      - name: Release promotion script tests
+        run: |
+          python3 scripts/test_next_release_tag.py
+          python3 scripts/test_require_commit_checks.py
+          python3 scripts/test_check_app_terraform_isolation.py
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 24a071d..6e50e2a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -3,6 +3,8 @@ name: Backend CI
 on:
   pull_request:
     branches: [main, dev, staging]
+  push:
+    branches: [main]
 
 permissions:
   contents: read
@@ -24,11 +26,6 @@ jobs:
         with:
           dotnet-version: "8.0.x"
 
-      - name: Set up Terraform
-        uses: hashicorp/setup-terraform@dfe3c3f87815947d99a8997f908cb6525fc44e9e # v4.0.1
-        with:
-          terraform_version: "1.9.8"
-
       - name: Restore
         run: dotnet restore SeaHavenIndustries.sln
 
@@ -37,29 +34,3 @@ jobs:
 
       - name: Test
         run: dotnet test SeaHavenIndustries.sln --no-build --configuration Release
-
-      - name: Terraform fmt and validate
-        run: |
-          set -euo pipefail
-
-          directories=()
-          case "${{ github.base_ref }}" in
-            dev)
-              directories+=(terraform/live/dev)
-              ;;
-            staging)
-              directories+=(terraform/live/staging)
-              ;;
-          esac
-
-          for dir in "${directories[@]}"; do
-            terraform -chdir="$dir" fmt -check -recursive
-            terraform -chdir="$dir" init -backend=false
-            terraform -chdir="$dir" validate
-          done
-
-      - name: Terraform import plan guard tests
-        run: python scripts/test-terraform-import-plan-check.py
-
-      - name: Terraform release plan guard tests
-        run: python scripts/test-terraform-release-plan-check.py
diff --git a/.github/workflows/deploy-tag.yaml b/.github/workflows/deploy-tag.yaml
new file mode 100644
index 0000000..581fe97
--- /dev/null
+++ b/.github/workflows/deploy-tag.yaml
@@ -0,0 +1,43 @@
+name: Deploy API from tag
+
+# Human CLI escape hatch. GITHUB_TOKEN tag pushes from release.yaml do not
+# start this workflow. No path filters.
+
+on:
+  push:
+    tags:
+      - "v*.*.*"
+
+permissions:
+  contents: read
+
+jobs:
+  target:
+    name: Resolve tag
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    outputs:
+      environment: ${{ steps.resolve.outputs.environment }}
+      ref: ${{ steps.resolve.outputs.ref }}
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - id: resolve
+        env:
+          TAG: ${{ github.ref_name }}
+        run: |
+          set -euo pipefail
+          environment="$(python3 -c 'import os, sys; sys.path.insert(0, "scripts"); from next_release_tag import parse_environment_from_tag; print(parse_environment_from_tag(os.environ["TAG"]))')"
+          {
+            echo "environment=${environment}"
+            echo "ref=${TAG}"
+          } >> "${GITHUB_OUTPUT}"
+
+  deploy:
+    needs: target
+    uses: ./.github/workflows/deploy.yaml
+    with:
+      environment: ${{ needs.target.outputs.environment }}
+      ref: ${{ needs.target.outputs.ref }}
+    secrets: inherit
diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
new file mode 100644
index 0000000..59791dc
--- /dev/null
+++ b/.github/workflows/deploy.yaml
@@ -0,0 +1,403 @@
+name: Deploy API
+
+# GitHub owns Elastic Beanstalk application versions. Terraform ignores
+# version_label. Do not put path filters on tag events; those live in
+# deploy-tag.yaml.
+
+on:
+  workflow_call:
+    inputs:
+      environment:
+        required: true
+        type: string
+      ref:
+        required: true
+        type: string
+  workflow_dispatch:
+    inputs:
+      environment:
+        description: Target Environment
+        required: true
+        type: choice
+        options: [dev, staging, prod]
+      ref:
+        description: Git ref to build (tag, branch, or SHA). Empty means this run's SHA.
+        required: false
+        type: string
+        default: ""
+  push:
+    branches: [main]
+    paths-ignore:
+      - "terraform/**"
+      - "**/*.md"
+      - ".github/workflows/ci.yml"
+      - ".github/workflows/ci-terraform.yaml"
+      - ".github/workflows/architecture-quality.yml"
+      - ".github/workflows/release.yaml"
+      - ".github/workflows/deploy-tag.yaml"
+
+permissions:
+  contents: read
+
+jobs:
+  target:
+    name: Resolve target
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    outputs:
+      environment: ${{ steps.resolve.outputs.environment }}
+      ref: ${{ steps.resolve.outputs.ref }}
+    steps:
+      - id: resolve
+        env:
+          EVENT_NAME: ${{ github.event_name }}
+          CALL_ENVIRONMENT: ${{ inputs.environment }}
+          CALL_REF: ${{ inputs.ref }}
+          INPUT_ENVIRONMENT: ${{ github.event.inputs.environment }}
+          INPUT_REF: ${{ github.event.inputs.ref }}
+          GITHUB_SHA_IN: ${{ github.sha }}
+        run: |
+          set -euo pipefail
+          case "${EVENT_NAME}" in
+            workflow_call)
+              environment="${CALL_ENVIRONMENT}"
+              ref="${CALL_REF}"
+              ;;
+            workflow_dispatch)
+              environment="${INPUT_ENVIRONMENT}"
+              ref="${INPUT_REF:-${GITHUB_SHA_IN}}"
+              ;;
+            push)
+              environment=dev
+              ref="${GITHUB_SHA_IN}"
+              ;;
+            *)
+              echo "unsupported event ${EVENT_NAME}" >&2
+              exit 1
+              ;;
+          esac
+          case "${environment}" in
+            dev|staging|prod) ;;
+            *)
+              echo "unknown environment ${environment}" >&2
+              exit 1
+              ;;
+          esac
+          {
+            echo "environment=${environment}"
+            echo "ref=${ref}"
+          } >> "${GITHUB_OUTPUT}"
+          echo "Deploying ${ref} to ${environment}"
+
+  deploy:
+    name: Deploy ${{ needs.target.outputs.environment }}
+    needs: target
+    runs-on: ubuntu-latest
+    timeout-minutes: 180
+    environment: ${{ needs.target.outputs.environment }}
+    concurrency:
+      group: deploy-api-${{ needs.target.outputs.environment }}
+      cancel-in-progress: false
+    permissions:
+      contents: read
+      id-token: write
+      checks: read
+    env:
+      AWS_REGION: us-east-1
+      DEPLOY_ROLE_ARN: ${{ vars.DEPLOY_ROLE_ARN }}
+      TARGET_ENVIRONMENT: ${{ needs.target.outputs.environment }}
+      TARGET_REF: ${{ needs.target.outputs.ref }}
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          ref: ${{ needs.target.outputs.ref }}
+          persist-credentials: false
+          fetch-depth: 0
+
+      - name: Resolve commit
+        id: commit
+        run: |
+          set -euo pipefail
+          sha="$(git rev-parse HEAD)"
+          echo "sha=${sha}" >> "${GITHUB_OUTPUT}"
+          echo "Building ${sha}"
+
+      - name: Require tag on main
+        if: needs.target.outputs.environment != 'dev'
+        env:
+          REPO: ${{ github.repository }}
+          GH_TOKEN: ${{ github.token }}
+          TAG_OR_REF: ${{ needs.target.outputs.ref }}
+        run: |
+          set -euo pipefail
+          status="$(gh api "repos/${REPO}/compare/main...${TAG_OR_REF}" --jq .status)"
+          if [ "${status}" != "behind" ] && [ "${status}" != "identical" ]; then
+            echo "ref ${TAG_OR_REF} is not on main (compare status: ${status})" >&2
+            exit 1
+          fi
+
+      - name: Require CI on the SHA
+        if: needs.target.outputs.environment != 'dev'
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
+        run: |
+          python3 scripts/require_commit_checks.py \
+            --repo "${{ github.repository }}" \
+            --sha "${{ steps.commit.outputs.sha }}" \
+            --timeout-seconds 60
+
+      - name: Skip prod AWS until live/prod exists
+        id: prod-gate
+        if: needs.target.outputs.environment == 'prod'
+        run: |
+          set -euo pipefail
+          if [ "${{ vars.PROD_APP_CD_ENABLED }}" = "true" ]; then
+            echo "skip_aws=false" >> "${GITHUB_OUTPUT}"
+          else
+            echo "PROD_APP_CD_ENABLED is not true; reviewers already approved; skipping AWS."
+            echo "skip_aws=true" >> "${GITHUB_OUTPUT}"
+          fi
+
+      - name: Set up .NET
+        if: needs.target.outputs.environment != 'prod' || steps.prod-gate.outputs.skip_aws != 'true'
+        uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
+        with:
+          dotnet-version: "8.0.x"
+
+      - name: Build Elastic Beanstalk source bundle
+        if: needs.target.outputs.environment != 'prod' || steps.prod-gate.outputs.skip_aws != 'true'
+        run: bash scripts/package-elastic-beanstalk.sh
+
+      - name: Validate exact release bundle
+        if: needs.target.outputs.environment != 'prod' || steps.prod-gate.outputs.skip_aws != 'true'
+        run: bash scripts/validate-elastic-beanstalk-bundle.sh
+
+      - name: Configure AWS credentials using OIDC
+        if: needs.target.outputs.environment != 'prod' || steps.prod-gate.outputs.skip_aws != 'true'
+        uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6.2.3
+        with:
+          role-to-assume: ${{ env.DEPLOY_ROLE_ARN }}
+          aws-region: us-east-1
+          audience: sts.amazonaws.com
+
+      - name: Get deploy parameters
+        id: deploy
+        if: needs.target.outputs.environment != 'prod' || steps.prod-gate.outputs.skip_aws != 'true'
+        run: |
+          set -euo pipefail
+          prefix="/shoc-backend/${TARGET_ENVIRONMENT}/deploy"
+          APPLICATION=$(aws ssm get-parameter --name "${prefix}/application-name" --query Parameter.Value --output text)
+          ENVIRONMENT_NAME=$(aws ssm get-parameter --name "${prefix}/environment-name" --query Parameter.Value --output text)
+          ARTIFACTS_BUCKET=$(aws ssm get-parameter --name "${prefix}/artifacts-bucket" --query Parameter.Value --output text)
+          SMOKE_URL=$(aws ssm get-parameter --name "${prefix}/smoke-url" --query Parameter.Value --output text)
+          {
+            echo "application=${APPLICATION}"
+            echo "environment_name=${ENVIRONMENT_NAME}"
+            echo "artifacts_bucket=${ARTIFACTS_BUCKET}"
+            echo "smoke_url=${SMOKE_URL}"
+          } >> "${GITHUB_OUTPUT}"
+
+      - name: Capture current environment version
+        if: needs.target.outputs.environment != 'prod' || steps.prod-gate.outputs.skip_aws != 'true'
+        env:
+          ENVIRONMENT_NAME: ${{ steps.deploy.outputs.environment_name }}
+        run: |
+          set -euo pipefail
+          prev="$(aws elasticbeanstalk describe-environments \
+            --environment-names "${ENVIRONMENT_NAME}" \
+            --region us-east-1 \
+            --query 'Environments[0].VersionLabel' \
+            --output text)"
+          echo "previous_version_label=${prev}" >> "${GITHUB_ENV}"
+          echo "Previous version label: ${prev}"
+
+      - name: Upload bundle and update environment
+        if: needs.target.outputs.environment != 'prod' || steps.prod-gate.outputs.skip_aws != 'true'
+        env:
+          APPLICATION: ${{ steps.deploy.outputs.application }}
+          ENVIRONMENT_NAME: ${{ steps.deploy.outputs.environment_name }}
+          ARTIFACTS_BUCKET: ${{ steps.deploy.outputs.artifacts_bucket }}
+          GIT_SHA: ${{ steps.commit.outputs.sha }}
+        run: |
+          set -euo pipefail
+          version_label="${GIT_SHA}-${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}"
+          s3_key="shoc-backend/releases/${TARGET_ENVIRONMENT}/${GIT_SHA}/${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}/site.zip"
+          aws s3 cp .artifacts/elastic-beanstalk/site.zip \
+            "s3://${ARTIFACTS_BUCKET}/${s3_key}" \
+            --region us-east-1
+          aws elasticbeanstalk create-application-version \
+            --application-name "${APPLICATION}" \
+            --version-label "${version_label}" \
+            --description "GitHub Actions ${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}/actions/runs/${GITHUB_RUN_ID}" \
+            --source-bundle "S3Bucket=${ARTIFACTS_BUCKET},S3Key=${s3_key}" \
+            --process \
+            --region us-east-1
+          status="UNPROCESSED"
+          for _ in $(seq 1 36); do
+            status="$(aws elasticbeanstalk describe-application-versions \
+              --application-name "${APPLICATION}" \
+              --version-labels "${version_label}" \
+              --region us-east-1 \
+              --query 'ApplicationVersions[0].Status' \
+              --output text)"
+            echo "application version status: $status"
+            if [ "$status" = "PROCESSED" ]; then
+              break
+            fi
+            if [ "$status" = "FAILED" ]; then
+              echo "Elastic Beanstalk failed to process ${version_label}." >&2
+              exit 1
+            fi
+            sleep 5
+          done
+          if [ "$status" != "PROCESSED" ]; then
+            echo "Application version did not become PROCESSED." >&2
+            exit 1
+          fi
+          aws elasticbeanstalk update-environment \
+            --environment-name "${ENVIRONMENT_NAME}" \
+            --version-label "${version_label}" \
+            --region us-east-1
+          echo "version_label=${version_label}" >> "${GITHUB_ENV}"
+          echo "environment_updated=true" >> "${GITHUB_ENV}"
+
+      - name: Verify exact application version is active
+        if: needs.target.outputs.environment != 'prod' || steps.prod-gate.outputs.skip_aws != 'true'
+        env:
+          ENVIRONMENT_NAME: ${{ steps.deploy.outputs.environment_name }}
+        run: |
+          set -euo pipefail
+          expected="${version_label}"
+          status="Unknown"
+          current="Unknown"
+          health="Unknown"
+          for _ in $(seq 1 80); do
+            read -r status current health < <(
+              aws elasticbeanstalk describe-environments \
+                --environment-names "${ENVIRONMENT_NAME}" \
+                --region us-east-1 \
+                --query 'Environments[0].[Status,VersionLabel,Health]' \
+                --output text
+            )
+            echo "environment status: $status; version: $current; health: $health"
+            if [ "$status" = "Ready" ]; then
+              if [ "$current" != "$expected" ]; then
+                echo "Environment became Ready on version $current, not the expected $expected." >&2
+                exit 1
+              fi
+              if [ "$health" = "Green" ] || [ "$health" = "Yellow" ]; then
+                echo "Expected application version is Ready and healthy."
+                exit 0
+              fi
+              echo "Expected version is active; waiting for health to leave $health."
+            fi
+            sleep 15
+          done
+          echo "Expected application version did not become Ready and healthy within the deployment window (last seen: status=$status version=$current health=$health)." >&2
+          exit 1
+
+      - name: Post-deploy smoke
+        if: needs.target.outputs.environment != 'prod' || steps.prod-gate.outputs.skip_aws != 'true'
+        run: bash scripts/smoke-elastic-beanstalk.sh "${{ steps.deploy.outputs.smoke_url }}"
+
+      - name: Verify webhook secret source is operational
+        if: needs.target.outputs.environment != 'prod' || steps.prod-gate.outputs.skip_aws != 'true'
+        env:
+          SMOKE_URL: ${{ steps.deploy.outputs.smoke_url }}
+        run: |
+          set -euo pipefail
+          response_file="$(mktemp)"
+          trap 'rm -f "$response_file"' EXIT
+          status="$(curl --silent --show-error \
+            --output "$response_file" \
+            --write-out '%{http_code}' \
+            --request POST \
+            --header 'Content-Type: application/json' \
+            --header "X-SH-Timestamp: $(date +%s)" \
+            --header 'X-SH-Key-Id: deployment-smoke-invalid-key' \
+            --header "X-SH-Signature: v1=$(printf '0%.0s' {1..64})" \
+            --data '{}' \
+            "${SMOKE_URL}/api/webhooks/work-orders")"
+          if [ "$status" != "401" ]; then
+            echo "Expected 401 from enabled webhook; received $status." >&2
+            sed -n '1,20p' "$response_file" >&2
+            exit 1
+          fi
+
+      - name: Restore previous application version on failure (schema is not reverted)
+        if: ${{ failure() && !cancelled() && (needs.target.outputs.environment != 'prod' || steps.prod-gate.outputs.skip_aws != 'true') }}
+        env:
+          ENVIRONMENT_NAME: ${{ steps.deploy.outputs.environment_name }}
+        run: |
+          set -euo pipefail
+          prev="${previous_version_label:-}"
+          if [ "${environment_updated:-}" != "true" ]; then
+            echo "Environment was not updated; nothing to roll back."
+            exit 0
+          fi
+          if [ -z "$prev" ] || [ "$prev" = "null" ] || [ "$prev" = "None" ] || [ "$prev" = "N/A" ]; then
+            echo "No previous version recorded; nothing to roll back." >&2
+            exit 0
+          fi
+          if [ "$prev" = "${version_label:-}" ]; then
+            echo "Previous version is the failed release; nothing to roll back." >&2
+            exit 0
+          fi
+
+          echo "Waiting for any in-flight environment update to settle..."
+          status="Unknown"
+          current="Unknown"
+          health="Unknown"
+          for _ in $(seq 1 80); do
+            read -r status current health < <(
+              aws elasticbeanstalk describe-environments \
+                --environment-names "${ENVIRONMENT_NAME}" \
+                --region us-east-1 \
+                --query 'Environments[0].[Status,VersionLabel,Health]' \
+                --output text
+            )
+            echo "environment status: $status; version: $current; health: $health"
+            if [ "$status" = "Ready" ]; then
+              break
+            fi
+            sleep 15
+          done
+          if [ "$status" != "Ready" ]; then
+            echo "Environment did not settle before rollback." >&2
+            exit 1
+          fi
+          if [ "$current" = "$prev" ]; then
+            echo "Environment is already on previous version $prev."
+            exit 0
+          fi
+
+          echo "Restoring previous application version $prev."
+          aws elasticbeanstalk update-environment \
+            --environment-name "${ENVIRONMENT_NAME}" \
+            --version-label "${prev}" \
+            --region us-east-1
+
+          for _ in $(seq 1 80); do
+            read -r status current health < <(
+              aws elasticbeanstalk describe-environments \
+                --environment-names "${ENVIRONMENT_NAME}" \
+                --region us-east-1 \
+                --query 'Environments[0].[Status,VersionLabel,Health]' \
+                --output text
+            )
+            echo "environment status: $status; version: $current; health: $health"
+            if [ "$status" = "Ready" ]; then
+              if [ "$current" != "$prev" ]; then
+                echo "Environment became Ready on version $current, not the previous $prev." >&2
+                exit 1
+              fi
+              if [ "$health" = "Green" ] || [ "$health" = "Yellow" ]; then
+                echo "Previous application version is Ready and healthy."
+                exit 0
+              fi
+              echo "Previous version is active; waiting for health to leave $health."
+            fi
+            sleep 15
+          done
+          echo "Environment did not return to Ready and healthy within the rollback window (last seen: status=$status version=$current health=$health)." >&2
+          exit 1
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
new file mode 100644
index 0000000..777a11c
--- /dev/null
+++ b/.github/workflows/release.yaml
@@ -0,0 +1,90 @@
+name: Release
+
+# Cut a SemVer tag from main HEAD, then call deploy. GITHUB_TOKEN is enough;
+# it cannot start other workflows via the tag push, so this file calls deploy.
+
+on:
+  workflow_dispatch:
+    inputs:
+      environment:
+        description: Target environment
+        required: true
+        type: choice
+        options: [staging, prod]
+      bump:
+        description: SemVer bump from the last prod core tag
+        required: true
+        type: choice
+        options: [patch, minor, major]
+      message:
+        description: Annotated tag message and GitHub Release body
+        required: true
+        type: string
+
+permissions:
+  contents: write
+  checks: read
+
+jobs:
+  cut:
+    name: Cut tag
+    runs-on: ubuntu-latest
+    timeout-minutes: 40
+    outputs:
+      tag: ${{ steps.tag.outputs.tag }}
+      sha: ${{ steps.tag.outputs.sha }}
+      environment: ${{ github.event.inputs.environment }}
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          fetch-depth: 0
+          persist-credentials: true
+
+      - name: Require main
+        run: |
+          set -euo pipefail
+          if [ "${GITHUB_REF}" != "refs/heads/main" ]; then
+            echo "Release must run from main (Use workflow from: main). Got ${GITHUB_REF}." >&2
+            exit 1
+          fi
+
+      - name: Require CI
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
+        run: |
+          python3 scripts/require_commit_checks.py \
+            --repo "${{ github.repository }}" \
+            --sha "$(git rev-parse HEAD)" \
+            --timeout-seconds 1200
+
+      - name: Compute and push tag
+        id: tag
+        env:
+          ENVIRONMENT: ${{ github.event.inputs.environment }}
+          BUMP: ${{ github.event.inputs.bump }}
+          MESSAGE: ${{ github.event.inputs.message }}
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          set -euo pipefail
+          git fetch --tags origin
+          sha="$(git rev-parse HEAD)"
+          tag="$(git tag | python3 scripts/next_release_tag.py --environment "${ENVIRONMENT}" --bump "${BUMP}")"
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git tag -a "${tag}" -m "${MESSAGE}" "${sha}"
+          git push origin "refs/tags/${tag}"
+          gh release create "${tag}" --target "${sha}" --notes "${MESSAGE}" --title "${tag}"
+          {
+            echo "tag=${tag}"
+            echo "sha=${sha}"
+          } >> "${GITHUB_OUTPUT}"
+          echo "Created ${tag} at ${sha}"
+
+  deploy:
+    name: Deploy release
+    needs: cut
+    uses: ./.github/workflows/deploy.yaml
+    with:
+      environment: ${{ needs.cut.outputs.environment }}
+      ref: ${{ needs.cut.outputs.tag }}
+    secrets: inherit
diff --git a/QUALITY_GATES.md b/QUALITY_GATES.md
index 9dd5b0a..9d6609e 100644
--- a/QUALITY_GATES.md
+++ b/QUALITY_GATES.md
@@ -25,8 +25,8 @@
 | G8 | Error disclosure | §5 | `SanitizedErrorsTests` (part of G5) | `ci` |
 | G9 | Board-backed regression | review framework | `REVIEW_AND_PR_FRAMEWORK.md` inventory | review-enforced |
 | G10 | Terraform import plan safety | live infrastructure adoption | `python scripts/test-terraform-import-plan-check.py` | `architecture-quality` → `governance-check.sh` |
-| G11 | Terraform static validation | import configuration integrity | commands below | `ci` on the matching PR base |
-| G12 | Terraform release plan safety | dev application CD version_label | `python scripts/test-terraform-release-plan-check.py` | `architecture-quality` → `governance-check.sh` |
+| G11 | Terraform static validation | import configuration integrity | commands below | `ci-terraform` on PRs to `main` or `dev` |
+| G13 | App/Terraform isolation | separate delivery lanes | `python3 scripts/check_app_terraform_isolation.py` | `architecture-quality` → `governance-check.sh` |
 
 ## How to run locally
 
@@ -36,44 +36,49 @@ bash scripts/governance-check.sh
 
 # By default it compares against the default branch for changed-file formatting.
 # Override the comparison point:
-BASE_REF=origin/dev bash scripts/governance-check.sh
+BASE_REF=origin/main bash scripts/governance-check.sh
 BASE_REF=main         bash scripts/governance-check.sh
 ```
 
 The script:
 1. `dotnet restore` (G1)
 2. runs the `ArchitectureTests` filter with `--no-restore` (G2)
-3. computes changed `.cs` files vs `BASE_REF` (default `origin/dev`) and runs
+3. computes changed `.cs` files vs `BASE_REF` (default `origin/main`) and runs
    `dotnet format --verify-no-changes --include ...` (G3). When there are no
    changed C# files it skips G3 with an explicit "skipped: no changed C#" line.
 4. builds the complete solution in Release with no restore (G4).
 5. runs the complete solution test suite in Release with no rebuild (G5).
 6. verifies that the Terraform plan guard rejects create, delete, replacement,
    unmanaged resource types, and updates not allowlisted by exact address (G10).
-7. verifies that the release plan guard accepts only a version-only update of
-   `module.environment.aws_elastic_beanstalk_environment.this` (G12).
+7. runs the release-tag, commit-check, and isolation unit tests.
+8. rejects a diff that contains both `terraform/` and deployable application
+   files (G13).
 
 G10 permits only exact approved resource address/type pairs for the
 environment-owned boundary: Elastic
 Beanstalk environment, IAM role/inline policy/managed-policy attachment/
 instance profile, Secrets Manager secret metadata, and Route 53 record.
-Initial mode permits no update. Controlled mode requires one
+SSM `/shoc-backend/<env>/deploy/*` parameters are created after adoption and
+are not part of the import allowlist. Initial mode permits no update.
+Controlled mode requires one
 `--allow-update-address` argument per reviewed in-place update. Every invocation
 also requires `--environment dev` or `--environment staging`; an empty or
 incomplete environment plan fails.
 
-G11 runs `terraform fmt -check -recursive`, `terraform init -backend=false`,
-and `terraform validate`. PRs to `dev` validate `live/dev`.
-PRs to `staging` validate only `live/staging`. Org-baseline CloudFormation owns
-the HCP role substrate, and Terraform owns the dev deploy role, so no backend
-CDK or bootstrap root remains in the matrix.
+G11 runs `terraform fmt -check -recursive terraform`, `terraform init -backend=false`,
+and `terraform validate` for both `live/dev` and `live/staging` on every PR to
+`main` or `dev`. Org-baseline CloudFormation owns the HCP role substrate, and Terraform
+owns the environment GitHub deploy roles, so no backend CDK or bootstrap root
+remains in the matrix. HCP plan/apply roles stay in org-baseline; this
+repository never manages `hcptf-*` roles.
 
-G12 accepts only a local or downloaded plan JSON whose sole managed update is
-`module.environment.aws_elastic_beanstalk_environment.this` with
-`version_label` as the only changed attribute. Counts of `0` add / `1` change /
-`0` destroy are not a substitute. The optional download uses
-`GET /api/v2/plans/:id/json-output` on `app.terraform.io` with one redirect to
-`archivist.terraform.io` and does not create, apply, discard, or poll runs.
+The former G12 version-only HCP apply guard is not part of the repository gate.
+`scripts/check-terraform-release-plan.py` remains only while
+`.github/workflows/deploy.yml` is still present.
+
+G13 fails when the same diff contains both `terraform/` and deployable
+application files. Workflow, documentation, and gate-script changes may share
+a PR with either side.
 
 ## Migration gates (G6)
 
diff --git a/REVIEW_AND_PR_FRAMEWORK.md b/REVIEW_AND_PR_FRAMEWORK.md
index 3b32672..d0ea942 100644
--- a/REVIEW_AND_PR_FRAMEWORK.md
+++ b/REVIEW_AND_PR_FRAMEWORK.md
@@ -109,9 +109,12 @@ Suppressions are single-diagnostic and cite the ADR — **no wildcard
 suppressions** (no global `[SuppressMessage]`, no `.editorconfig` severity
 sweeps, no `#pragma` swaths). See architecture §10.
 
-Do not mix deployable application changes with Terraform or CDK changes. The
-first Terraform-owned application-CD change is the allowed exception because it
-introduces `release_version_label`. Later PRs must keep those diffs separate.
+Infra and application **PRs** stay separate. GitHub Actions owns Elastic
+Beanstalk application versions. HCP Terraform owns infrastructure and ignores
+`version_label`. A change set that includes both `terraform/` and deployable
+application files (`.cs`, `.csproj`, `.razor`, `.ebextensions/`, or the
+Elastic Beanstalk package/smoke scripts) fails the isolation check. Workflow,
+docs, and gate-script changes may travel with either side.
 
 ## 8. PR description contract (minimal)
 
diff --git a/scripts/check_app_terraform_isolation.py b/scripts/check_app_terraform_isolation.py
new file mode 100644
index 0000000..9f87212
--- /dev/null
+++ b/scripts/check_app_terraform_isolation.py
@@ -0,0 +1,69 @@
+#!/usr/bin/env python3
+"""Fail when a change set mixes Terraform with deployable application files.
+
+Workflow, docs, and gate-script changes may travel with either side.
+"""
+
+from __future__ import annotations
+
+import argparse
+import sys
+
+APP_SCRIPT_NAMES = {
+    "scripts/package-elastic-beanstalk.sh",
+    "scripts/validate-elastic-beanstalk-bundle.sh",
+    "scripts/smoke-elastic-beanstalk.sh",
+}
+
+APP_SUFFIXES = (".cs", ".csproj", ".razor")
+
+
+def is_terraform_path(path: str) -> bool:
+    return path == "terraform" or path.startswith("terraform/")
+
+
+def is_app_path(path: str) -> bool:
+    normalized = path.replace("\\", "/")
+    if normalized in APP_SCRIPT_NAMES:
+        return True
+    if normalized.startswith(".ebextensions/"):
+        return True
+    return normalized.endswith(APP_SUFFIXES)
+
+
+def isolation_violation(paths: list[str]) -> tuple[list[str], list[str]] | None:
+    terraform_files = sorted({path for path in paths if is_terraform_path(path)})
+    app_files = sorted({path for path in paths if is_app_path(path)})
+    if terraform_files and app_files:
+        return terraform_files, app_files
+    return None
+
+
+def main() -> int:
+    parser = argparse.ArgumentParser()
+    parser.add_argument(
+        "paths",
+        nargs="*",
+        help="Changed paths. Omit and pass newline-separated paths on stdin.",
+    )
+    args = parser.parse_args()
+    paths = list(args.paths)
+    if not paths and not sys.stdin.isatty():
+        paths = [line.strip() for line in sys.stdin if line.strip()]
+    violation = isolation_violation(paths)
+    if violation is None:
+        print("PASS: application and Terraform changes are isolated")
+        return 0
+    terraform_files, app_files = violation
+    print("FAIL: do not mix deployable application files with terraform/", file=sys.stderr)
+    print("terraform:", file=sys.stderr)
+    for path in terraform_files:
+        print(f"  {path}", file=sys.stderr)
+    print("application:", file=sys.stderr)
+    for path in app_files:
+        print(f"  {path}", file=sys.stderr)
+    return 1
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())
diff --git a/scripts/governance-check.sh b/scripts/governance-check.sh
index a3b8416..b0a9dfb 100755
--- a/scripts/governance-check.sh
+++ b/scripts/governance-check.sh
@@ -8,7 +8,7 @@
 #
 # Usage:
 #   bash scripts/governance-check.sh
-#   BASE_REF=origin/dev bash scripts/governance-check.sh
+#   BASE_REF=origin/main bash scripts/governance-check.sh
 #   BASE_REF=<base-sha> HEAD_REF=<head-sha> bash scripts/governance-check.sh
 set -euo pipefail
 
@@ -30,9 +30,9 @@ else
   exit 1
 fi
 
-# Comparison point for changed-file formatting. Default to the dev integration
-# branch locally; CI overrides BASE_REF/HEAD_REF with the PR base/head SHAs.
-BASE_REF="${BASE_REF:-origin/dev}"
+# Comparison point for changed-file formatting. Default to main locally; CI
+# overrides BASE_REF/HEAD_REF with the PR base/head SHAs.
+BASE_REF="${BASE_REF:-origin/main}"
 HEAD_REF="${HEAD_REF:-HEAD}"
 
 # Resolve the base ref before using it for a diff.
@@ -83,8 +83,16 @@ log "G10: Terraform import plan safety"
 python scripts/test-terraform-import-plan-check.py
 ok "G10: Terraform import plan safety"
 
-log "G12: Terraform release plan safety"
-python scripts/test-terraform-release-plan-check.py
-ok "G12: Terraform release plan safety"
+log "Release promotion scripts"
+python3 scripts/test_next_release_tag.py
+python3 scripts/test_require_commit_checks.py
+python3 scripts/test_check_app_terraform_isolation.py
+ok "Release promotion scripts"
+
+log "G13: application and Terraform isolation (${BASE_REF}..${HEAD_REF})"
+python3 scripts/check_app_terraform_isolation.py < <(
+  git diff --name-only --diff-filter=ACMR "${BASE_REF}" "${HEAD_REF}"
+)
+ok "G13: application and Terraform isolation"
 
 log "governance-check: all required repository gates passed"
diff --git a/scripts/next_release_tag.py b/scripts/next_release_tag.py
new file mode 100644
index 0000000..df203e0
--- /dev/null
+++ b/scripts/next_release_tag.py
@@ -0,0 +1,95 @@
+#!/usr/bin/env python3
+"""Compute the next SemVer git tag for a staging or prod cut.
+
+Base version is the highest existing core prod tag vX.Y.Z (not -staging).
+Missing tags start at 0.0.0. Staging gets v{next}-staging; prod gets v{next}.
+"""
+
+from __future__ import annotations
+
+import argparse
+import re
+import sys
+
+PROD_TAG = re.compile(r"^v(\d+)\.(\d+)\.(\d+)$")
+STAGING_TAG = re.compile(r"^v(\d+)\.(\d+)\.(\d+)-staging$")
+
+
+def parse_environment_from_tag(tag: str) -> str:
+    if STAGING_TAG.fullmatch(tag):
+        return "staging"
+    if PROD_TAG.fullmatch(tag):
+        return "prod"
+    raise ValueError(
+        f"tag {tag!r} is not vX.Y.Z or vX.Y.Z-staging"
+    )
+
+
+def highest_prod_core(tags: list[str]) -> tuple[int, int, int]:
+    cores: list[tuple[int, int, int]] = []
+    for tag in tags:
+        match = PROD_TAG.fullmatch(tag)
+        if match:
+            cores.append(tuple(int(part) for part in match.groups()))  # type: ignore[arg-type]
+    if not cores:
+        return (0, 0, 0)
+    return max(cores)
+
+
+def bump_core(core: tuple[int, int, int], bump: str) -> tuple[int, int, int]:
+    major, minor, patch = core
+    if bump == "major":
+        return (major + 1, 0, 0)
+    if bump == "minor":
+        return (major, minor + 1, 0)
+    if bump == "patch":
+        return (major, minor, patch + 1)
+    raise ValueError(f"bump must be major, minor, or patch, got {bump!r}")
+
+
+def format_tag(core: tuple[int, int, int], environment: str) -> str:
+    name = f"v{core[0]}.{core[1]}.{core[2]}"
+    if environment == "staging":
+        return f"{name}-staging"
+    if environment == "prod":
+        return name
+    raise ValueError(f"environment must be staging or prod, got {environment!r}")
+
+
+def next_release_tag(
+    tags: list[str], environment: str, bump: str
+) -> str:
+    if environment not in {"staging", "prod"}:
+        raise ValueError(f"environment must be staging or prod, got {environment!r}")
+    nxt = bump_core(highest_prod_core(tags), bump)
+    tag = format_tag(nxt, environment)
+    if tag in tags:
+        raise ValueError(f"tag {tag} already exists")
+    return tag
+
+
+def main() -> int:
+    parser = argparse.ArgumentParser()
+    parser.add_argument("--environment", required=True, choices=("staging", "prod"))
+    parser.add_argument("--bump", required=True, choices=("major", "minor", "patch"))
+    parser.add_argument(
+        "--tag",
+        action="append",
+        default=[],
+        dest="tags",
+        help="Existing git tag. Repeat, or omit and pass tags on stdin.",
+    )
+    args = parser.parse_args()
+    tags = list(args.tags)
+    if not tags and not sys.stdin.isatty():
+        tags = [line.strip() for line in sys.stdin if line.strip()]
+    try:
+        print(next_release_tag(tags, args.environment, args.bump))
+    except ValueError as exc:
+        print(f"FAIL: {exc}", file=sys.stderr)
+        return 1
+    return 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())
diff --git a/scripts/require_commit_checks.py b/scripts/require_commit_checks.py
new file mode 100644
index 0000000..c2d6bdd
--- /dev/null
+++ b/scripts/require_commit_checks.py
@@ -0,0 +1,123 @@
+#!/usr/bin/env python3
+"""Fail unless required GitHub check runs succeeded on a commit SHA."""
+
+from __future__ import annotations
+
+import argparse
+import json
+import sys
+import time
+import urllib.error
+import urllib.parse
+import urllib.request
+
+REQUIRED_CHECK_NAMES = (
+    "Build and test",
+    "architecture",
+)
+
+
+def _run_recency(run: dict) -> tuple:
+    """Order check runs so a later rerun wins over an earlier result."""
+    started = run.get("started_at") or ""
+    completed = run.get("completed_at") or ""
+    run_id = run.get("id") or 0
+    return (started, completed, run_id)
+
+
+def classify_checks(
+    check_runs: list[dict], required_names: tuple[str, ...] = REQUIRED_CHECK_NAMES
+) -> tuple[str, list[str]]:
+    """Return ('success'|'pending'|'failure', detail lines)."""
+    by_name: dict[str, dict] = {}
+    for run in check_runs:
+        name = run.get("name")
+        if name not in required_names:
+            continue
+        current = by_name.get(name)
+        if current is None or _run_recency(run) > _run_recency(current):
+            by_name[name] = run
+
+    missing = [name for name in required_names if name not in by_name]
+    if missing:
+        return "pending", [f"missing: {name}" for name in missing]
+
+    details: list[str] = []
+    pending = False
+    failed = False
+    for name in required_names:
+        run = by_name[name]
+        status = run.get("status")
+        conclusion = run.get("conclusion")
+        details.append(f"{name} status={status} conclusion={conclusion}")
+        if status != "completed":
+            pending = True
+        elif conclusion != "success":
+            failed = True
+    if failed:
+        return "failure", details
+    if pending:
+        return "pending", details
+    return "success", details
+
+
+def fetch_check_runs(repo: str, sha: str, token: str) -> list[dict]:
+    url = (
+        f"https://api.github.com/repos/{repo}/commits/{urllib.parse.quote(sha)}"
+        "/check-runs?per_page=100"
+    )
+    request = urllib.request.Request(
+        url,
+        headers={
+            "Accept": "application/vnd.github+json",
+            "Authorization": f"Bearer {token}",
+            "X-GitHub-Api-Version": "2022-11-28",
+        },
+    )
+    try:
+        with urllib.request.urlopen(request) as response:
+            payload = json.load(response)
+    except urllib.error.HTTPError as exc:
+        body = exc.read().decode("utf-8", "replace")
+        raise SystemExit(f"GitHub check-runs HTTP {exc.code}: {body}") from exc
+    return payload.get("check_runs") or []
+
+
+def main() -> int:
+    parser = argparse.ArgumentParser()
+    parser.add_argument("--repo", required=True)
+    parser.add_argument("--sha", required=True)
+    parser.add_argument("--timeout-seconds", type=int, default=1200)
+    parser.add_argument("--poll-seconds", type=int, default=15)
+    args = parser.parse_args()
+    token = __import__("os").environ.get("GITHUB_TOKEN") or __import__("os").environ.get(
+        "GH_TOKEN"
+    )
+    if not token:
+        print("FAIL: GITHUB_TOKEN or GH_TOKEN is required", file=sys.stderr)
+        return 1
+
+    deadline = time.time() + args.timeout_seconds
+    while True:
+        runs = fetch_check_runs(args.repo, args.sha, token)
+        state, details = classify_checks(runs)
+        for line in details:
+            print(line)
+        if state == "success":
+            print(f"PASS: required checks succeeded on {args.sha}")
+            return 0
+        if state == "failure":
+            print(f"FAIL: required checks did not succeed on {args.sha}", file=sys.stderr)
+            return 1
+        if time.time() >= deadline:
+            print(
+                f"FAIL: timed out waiting for required checks on {args.sha}",
+                file=sys.stderr,
+            )
+            return 1
+        print(f"waiting {args.poll_seconds}s for checks...")
+        time.sleep(args.poll_seconds)
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())
diff --git a/scripts/test_check_app_terraform_isolation.py b/scripts/test_check_app_terraform_isolation.py
new file mode 100644
index 0000000..94899a6
--- /dev/null
+++ b/scripts/test_check_app_terraform_isolation.py
@@ -0,0 +1,59 @@
+#!/usr/bin/env python3
+"""Tests for check_app_terraform_isolation.isolation_violation."""
+
+from __future__ import annotations
+
+import unittest
+
+from check_app_terraform_isolation import isolation_violation
+
+
+class IsolationTests(unittest.TestCase):
+    def test_terraform_only(self) -> None:
+        self.assertIsNone(
+            isolation_violation(
+                [
+                    "terraform/live/dev/main.tf",
+                    "terraform/live/README.md",
+                ]
+            )
+        )
+
+    def test_app_only(self) -> None:
+        self.assertIsNone(
+            isolation_violation(
+                [
+                    "Api.SeaHavenIndustries/Controllers/WorkOrderController.cs",
+                    ".ebextensions/01_migrations.config",
+                    "scripts/package-elastic-beanstalk.sh",
+                ]
+            )
+        )
+
+    def test_docs_and_workflows_with_terraform(self) -> None:
+        self.assertIsNone(
+            isolation_violation(
+                [
+                    "terraform/live/modules/environment-owned/main.tf",
+                    ".github/workflows/deploy.yaml",
+                    "QUALITY_GATES.md",
+                    "scripts/governance-check.sh",
+                ]
+            )
+        )
+
+    def test_mixed_app_and_terraform_fails(self) -> None:
+        violation = isolation_violation(
+            [
+                "terraform/live/dev/main.tf",
+                "SeaHaven.Services/Implementation/WorkOrderService.cs",
+            ]
+        )
+        self.assertIsNotNone(violation)
+        terraform_files, app_files = violation or ([], [])
+        self.assertEqual(terraform_files, ["terraform/live/dev/main.tf"])
+        self.assertTrue(any(path.endswith(".cs") for path in app_files))
+
+
+if __name__ == "__main__":
+    unittest.main()
diff --git a/scripts/test_next_release_tag.py b/scripts/test_next_release_tag.py
new file mode 100644
index 0000000..88a65f6
--- /dev/null
+++ b/scripts/test_next_release_tag.py
@@ -0,0 +1,62 @@
+#!/usr/bin/env python3
+"""Tests for next_release_tag.py."""
+
+from __future__ import annotations
+
+import unittest
+
+from next_release_tag import (
+    next_release_tag,
+    parse_environment_from_tag,
+)
+
+
+class NextReleaseTagTests(unittest.TestCase):
+    def test_first_patch_staging(self) -> None:
+        self.assertEqual(next_release_tag([], "staging", "patch"), "v0.0.1-staging")
+
+    def test_first_minor_prod(self) -> None:
+        self.assertEqual(next_release_tag([], "prod", "minor"), "v0.1.0")
+
+    def test_first_major_prod(self) -> None:
+        self.assertEqual(next_release_tag([], "prod", "major"), "v1.0.0")
+
+    def test_staging_then_prod_same_core(self) -> None:
+        tags = ["v1.2.3"]
+        staging = next_release_tag(tags, "staging", "patch")
+        self.assertEqual(staging, "v1.2.4-staging")
+        prod = next_release_tag(tags + [staging], "prod", "patch")
+        self.assertEqual(prod, "v1.2.4")
+
+    def test_staging_prerelease_does_not_raise_prod_base(self) -> None:
+        tags = ["v1.2.3", "v9.9.9-staging"]
+        self.assertEqual(next_release_tag(tags, "staging", "patch"), "v1.2.4-staging")
+
+    def test_duplicate_staging_fails(self) -> None:
+        tags = ["v1.2.3", "v1.2.4-staging"]
+        with self.assertRaises(ValueError):
+            next_release_tag(tags, "staging", "patch")
+
+    def test_prod_after_staging_uses_same_core(self) -> None:
+        tags = ["v1.2.3", "v9.9.9-staging"]
+        self.assertEqual(next_release_tag(tags, "prod", "patch"), "v1.2.4")
+
+    def test_parse_environment(self) -> None:
+        self.assertEqual(parse_environment_from_tag("v1.2.3-staging"), "staging")
+        self.assertEqual(parse_environment_from_tag("v1.2.3"), "prod")
+
+    def test_reject_prefixed_and_prod_prerelease(self) -> None:
+        for tag in (
+            "staging-v1.2.3",
+            "prod-v1.2.3",
+            "v1.2.3-prod",
+            "v1.2.3-staging.1",
+            "v1.2",
+            "1.2.3",
+        ):
+            with self.assertRaises(ValueError):
+                parse_environment_from_tag(tag)
+
+
+if __name__ == "__main__":
+    unittest.main()
diff --git a/scripts/test_require_commit_checks.py b/scripts/test_require_commit_checks.py
new file mode 100644
index 0000000..e3089d2
--- /dev/null
+++ b/scripts/test_require_commit_checks.py
@@ -0,0 +1,112 @@
+#!/usr/bin/env python3
+"""Tests for require_commit_checks.classify_checks."""
+
+from __future__ import annotations
+
+import unittest
+
+from require_commit_checks import classify_checks
+
+
+class ClassifyChecksTests(unittest.TestCase):
+    def test_success(self) -> None:
+        state, _ = classify_checks(
+            [
+                {"name": "Build and test", "status": "completed", "conclusion": "success"},
+                {"name": "architecture", "status": "completed", "conclusion": "success"},
+            ]
+        )
+        self.assertEqual(state, "success")
+
+    def test_pending_missing(self) -> None:
+        state, details = classify_checks(
+            [
+                {"name": "Build and test", "status": "completed", "conclusion": "success"},
+            ]
+        )
+        self.assertEqual(state, "pending")
+        self.assertTrue(any("architecture" in line for line in details))
+
+    def test_pending_in_progress(self) -> None:
+        state, _ = classify_checks(
+            [
+                {"name": "Build and test", "status": "in_progress", "conclusion": None},
+                {"name": "architecture", "status": "completed", "conclusion": "success"},
+            ]
+        )
+        self.assertEqual(state, "pending")
+
+    def test_failure(self) -> None:
+        state, _ = classify_checks(
+            [
+                {"name": "Build and test", "status": "completed", "conclusion": "failure"},
+                {"name": "architecture", "status": "completed", "conclusion": "success"},
+            ]
+        )
+        self.assertEqual(state, "failure")
+
+    def test_latest_rerun_success_wins_over_older_failure(self) -> None:
+        state, _ = classify_checks(
+            [
+                {
+                    "name": "Build and test",
+                    "id": 1,
+                    "started_at": "2026-09-16T12:00:00Z",
+                    "completed_at": "2026-09-16T12:05:00Z",
+                    "status": "completed",
+                    "conclusion": "failure",
+                },
+                {
+                    "name": "Build and test",
+                    "id": 3,
+                    "started_at": "2026-09-16T12:10:00Z",
+                    "completed_at": "2026-09-16T12:12:00Z",
+                    "status": "completed",
+                    "conclusion": "success",
+                },
+                {
+                    "name": "architecture",
+                    "id": 2,
+                    "started_at": "2026-09-16T12:00:00Z",
+                    "completed_at": "2026-09-16T12:04:00Z",
+                    "status": "completed",
+                    "conclusion": "success",
+                },
+            ]
+        )
+        self.assertEqual(state, "success")
+
+    def test_latest_rerun_failure_wins_over_older_success(self) -> None:
+        state, _ = classify_checks(
+            [
+                {
+                    "name": "architecture",
+                    "id": 9,
+                    "started_at": "2026-09-16T13:00:00Z",
+                    "completed_at": "2026-09-16T13:02:00Z",
+                    "status": "completed",
+                    "conclusion": "failure",
+                },
+                {
+                    "name": "architecture",
+                    "id": 4,
+                    "started_at": "2026-09-16T12:00:00Z",
+                    "completed_at": "2026-09-16T12:01:00Z",
+                    "status": "completed",
+                    "conclusion": "success",
+                },
+                {
+                    "name": "Build and test",
+                    "id": 5,
+                    "started_at": "2026-09-16T12:00:00Z",
+                    "completed_at": "2026-09-16T12:03:00Z",
+                    "status": "completed",
+                    "conclusion": "success",
+                },
+            ]
+        )
+        self.assertEqual(state, "failure")
+
+
+if __name__ == "__main__":
+    unittest.main()
diff --git a/terraform/README.md b/terraform/README.md
index 9821ba7..d4d2023 100644
--- a/terraform/README.md
+++ b/terraform/README.md
@@ -36,17 +36,20 @@ update, delete, or replacement actions. The second reviewed phase may update
 only explicitly allowlisted ownership metadata and the narrowed dev deploy S3
 policy.
 
-The GitHub Environment secret `AWS_DEPLOY_ROLE_ARN` retains the existing role
-ARN throughout adoption.
+The GitHub Environment **variable** `DEPLOY_ROLE_ARN` is the OIDC role used
+by application CD after cutover. Adoption may still have the older
+`AWS_DEPLOY_ROLE_ARN` secret until that cutover.
 
 ## Local validation
 
 ```bash
-terraform -chdir=terraform fmt -check -recursive
+terraform fmt -check -recursive terraform
 terraform -chdir=terraform/live/dev init -backend=false
 terraform -chdir=terraform/live/dev validate
 terraform -chdir=terraform/live/staging init -backend=false
 terraform -chdir=terraform/live/staging validate
 python scripts/test-terraform-import-plan-check.py
-python scripts/test-terraform-release-plan-check.py
+python3 scripts/test_next_release_tag.py
+python3 scripts/test_require_commit_checks.py
+python3 scripts/test_check_app_terraform_isolation.py
 ```
diff --git a/terraform/live/README.md b/terraform/live/README.md
index 07a6f25..ae77fcf 100644
--- a/terraform/live/README.md
+++ b/terraform/live/README.md
@@ -127,59 +127,45 @@ The measured self-contained .NET/EF bundle is approximately 199.5 MB and
 separate builds are not byte-identical. Each deploy job therefore validates the
 exact bundle it uploads; bundle bytes never enter Terraform plans or state.
 
-## Dev application CD
+## Application CD
 
-GitHub compiles, validates, and uploads the bundle, then creates the immutable
-Elastic Beanstalk application version. HCP Terraform is the only caller of
-`UpdateEnvironment`, by setting `version_label` on
-`module.environment.aws_elastic_beanstalk_environment.this`. GitHub then
-health-checks, smokes, and requests one guarded Terraform rollback. Terraform
-does not manage `aws_elastic_beanstalk_application_version`; retained versions
-are the rollback inventory.
+GitHub Actions owns application versions. It compiles the bundle, uploads it,
+creates the Elastic Beanstalk application version, and calls
+`UpdateEnvironment`. Terraform ignores `version_label` so those deploys are not
+drift. If health, smoke, or the webhook probe fails after that update, the job
+restores the previous Elastic Beanstalk version label. Database migrations
+already applied by the failed bundle are not reverted. Deploy parameters are read from `/shoc-backend/<env>/deploy/*` SSM
+parameters this module writes.
 
-`release_version_label` is a nullable root and module variable. Null VCS plans
-leave the live version unchanged. Application-CD runs pass the immutable
-`<full-sha>-<run-id>-<attempt>` label only as a run-specific
-`TF_VAR_release_version_label` HCL string. Do not set this variable on the
-workspace, in a variable set, or in `terraform.tfvars`. Do not upload a new
-configuration version on application releases; `create-run` reuses the
-workspace's last applied VCS config. Global auto-apply stays off. GitHub
-`apply-run` treats an already-applied run as success so a mis-set auto-apply
-cannot start a false-failure rollback. The workspace stays branch-based on
-`dev` with Automatic Speculative Plans enabled and trigger patterns
-`terraform/live/dev/**` and `terraform/live/modules/**`. GitHub discards a
-leftover non-speculative VCS run before `create-run`, so a merge to `dev`
-cannot lock the workspace out from under GitHub CD. GitHub applies only after
-`plan-output` counts are `0/1/0` and
-`scripts/check-terraform-release-plan.py` accepts a version-only plan JSON.
+Merge to `main` deploys **dev** unless the push is terraform-only. Staging and
+prod are cut from **Actions → Release** (`environment`, `bump`, `message`).
+That workflow waits for CI, tags `vX.Y.Z-staging` or `vX.Y.Z` from main HEAD
+with `GITHUB_TOKEN`, then calls deploy. Prod waits on GitHub Environment
+reviewers; AWS steps stay skipped until `PROD_APP_CD_ENABLED` is true.
+Staging remains `adoption_complete=false` with a pinned API CNAME until its
+import apply is proven.
 
-Staging application CD uses the same guarded lane against workspace
-`shoc-backend-staging`. The workspace stays branch-based on `staging` with
-trigger patterns `terraform/live/staging/**` and `terraform/live/modules/**`,
-and GitHub deploys on pushes to `staging` and on manual `workflow_dispatch`.
+HCP workspaces stay VCS-driven with auto-apply on after cutover. Speculative
+plans on every PR are the infra gate. Do not point `TFC_AWS_*` at
+`hcptf-bootstrap`. Org-baseline CloudFormation owns the HCP plan/apply roles.
+GitHub Actions does not create, wait on, or apply HCP runs. Application and
+Terraform changes stay in separate PRs so a merge cannot race an HCP apply
+against an app deploy. Terraform-only merges skip `deploy.yaml`. App-only
+tags skip HCP when trigger patterns do not match.
 
-### Credentials and enablement
+Until cutover, `.github/workflows/deploy.yml` still uses `TF_API_TOKEN` and
+`TERRAFORM_APP_CD_ENABLED`. Keep those secrets and the version-only plan guard
+on that leftover path only.
 
-Store dedicated HCP team tokens as the GitHub environment secret `TF_API_TOKEN`:
+### Credentials
 
-- `dev`: use a token scoped only to workspace `shoc-backend-dev`.
-- `staging`: use a separate token scoped only to workspace
-  `shoc-backend-staging`.
-
-Plan JSON download requires workspace admin on the corresponding workspace. Do
-not grant project admin or workspace create/move/delete permissions. Do not rely
-on a repository-level token or reuse the dev-scoped token for staging. Rotate
-each token at least every 90 days.
-
-Repository variable `TERRAFORM_APP_CD_ENABLED` starts unset/false so pushes to
-`dev` do not deploy. `workflow_dispatch` on `dev` still runs a release for the
-first manual proof. Set the variable to `true` only after that proof confirms
-the exact version, a version-only plan, apply, `efbundle`, Ready/Green, smokes,
-and a retained previous version.
-
-This change is the allowed exception that mixes deployable application CD with
-the Terraform variable that application CD needs. Later PRs must not mix
-deployable application changes with Terraform or CDK changes.
+Store `DEPLOY_ROLE_ARN` as a GitHub Environment **variable** (`dev`,
+`staging`, later `prod`). OIDC trust is
+`repo:Sea-Haven-Industries/shoc-backend:environment:<env>` plus
+`job_workflow_ref` for `.github/workflows/deploy.yaml` at `refs/heads/main`
+and `refs/tags/v*`. Adding another deploy workflow is a cross-family IAM
+change. After cutover, drop `TF_API_TOKEN` from GitHub Environments. The new
+CD path does not use it.
 
 ## Pinned live identities
 
@@ -194,11 +180,12 @@ identifiers make accidental cross-environment reuse fail review and planning.
 
 ## Safety invariants
 
-- Auto-apply remains off.
-- VCS stays branch-based on `dev` for `shoc-backend-dev` and on `staging` for
-  `shoc-backend-staging`, with speculative PR plans enabled and trigger
-  patterns `terraform/live/dev/**` (dev) and `terraform/live/staging/**`
-  (staging), each alongside `terraform/live/modules/**`. Do not switch
-  Automatic Run Triggering to tag-based.
-- Org baseline owns final HCP plan/apply permissions and manager tags.
+- After cutover, auto-apply is on. Speculative PR plans stay on.
+- `shoc-backend-dev` is branch-based on `main` with trigger patterns
+  `terraform/live/dev/**` and `terraform/live/modules/**`.
+- `shoc-backend-staging` is tag-based on `^v\d+\.\d+\.\d+-staging$` with
+  trigger patterns `terraform/live/staging/**` and `terraform/live/modules/**`.
+- Org baseline owns HCP plan/apply permissions and manager tags. Never manage
+  `hcptf-*` in this repository.
 - Every imported Terraform resource has `prevent_destroy`.
+- Elastic Beanstalk `version_label` is ignored so GitHub deploys are not drift.
diff --git a/terraform/live/dev/main.tf b/terraform/live/dev/main.tf
index 8d1ce47..33e1416 100644
--- a/terraform/live/dev/main.tf
+++ b/terraform/live/dev/main.tf
@@ -67,7 +67,7 @@ module "environment" {
   github_deploy_role_name    = "githubdeploy-shoc-backend-dev"
   github_deploy_policy_name  = "GithubDeployRoleDefaultPolicyE8F540D1"
   legacy_dev_s3_policy       = true
-  release_version_label      = var.release_version_label
+  smoke_url                  = "https://api.dev.seahaven.com"
   hosted_zone_id             = "Z07671212N75U4YLPWZR8"
   api_domain                 = local.api_domain
   api_record_type            = "A"
diff --git a/terraform/live/dev/variables.tf b/terraform/live/dev/variables.tf
deleted file mode 100644
index 3f21d9b..0000000
--- a/terraform/live/dev/variables.tf
+++ /dev/null
@@ -1,15 +0,0 @@
-variable "release_version_label" {
-  type     = string
-  default  = null
-  nullable = true
-
-  description = "Immutable Elastic Beanstalk application version. Null VCS plans leave the live version unchanged."
-
-  validation {
-    condition = (
-      var.release_version_label == null ||
-      can(regex("^[0-9a-f]{40}-[0-9]+-[0-9]+$", var.release_version_label))
-    )
-    error_message = "release_version_label must be <full-sha>-<run-id>-<attempt>."
-  }
-}
diff --git a/terraform/live/modules/environment-owned/main.tf b/terraform/live/modules/environment-owned/main.tf
index 29b42f2..cc01dc4 100644
--- a/terraform/live/modules/environment-owned/main.tf
+++ b/terraform/live/modules/environment-owned/main.tf
@@ -11,6 +11,7 @@ locals {
   eb_bucket_name            = "elasticbeanstalk-${var.aws_region}-${var.aws_account_id}"
   use_legacy_s3_policy      = var.legacy_dev_s3_policy
   app_config_secret_pattern = "arn:aws:secretsmanager:${var.aws_region}:${var.aws_account_id}:secret:${var.app_config_secret_name}-*"
+  deploy_ssm_prefix         = "/shoc-backend/${var.environment}/deploy"
 }
 
 data "aws_iam_policy_document" "runtime_assume" {
@@ -177,6 +178,18 @@ data "aws_iam_policy_document" "deploy_assume" {
       variable = "token.actions.githubusercontent.com:sub"
       values   = ["repo:${var.github_repo}:environment:${var.github_environment}"]
     }
+
+    # StringLike: a tag-loaded reusable workflow uses @refs/tags/v*, while
+    # push and workflow_dispatch use @refs/heads/main. Adding a deploy
+    # workflow means adding its ref here (cross-family IAM).
+    condition {
+      test     = "StringLike"
+      variable = "token.actions.githubusercontent.com:job_workflow_ref"
+      values = [
+        "${var.github_repo}/.github/workflows/deploy.yaml@refs/heads/main",
+        "${var.github_repo}/.github/workflows/deploy.yaml@refs/tags/v*",
+      ]
+    }
   }
 }
 
@@ -293,6 +306,18 @@ data "aws_iam_policy_document" "deploy" {
       resources = ["arn:aws:s3:::${local.eb_bucket_name}"]
     }
   }
+
+  statement {
+    sid    = "ReadDeployParameters"
+    effect = "Allow"
+    actions = [
+      "ssm:GetParameter",
+      "ssm:GetParameters",
+    ]
+    resources = [
+      "arn:aws:ssm:${var.aws_region}:${var.aws_account_id}:parameter/shoc-backend/${var.environment}/deploy/*",
+    ]
+  }
 }
 
 resource "aws_iam_role_policy" "github_deploy" {
@@ -305,6 +330,34 @@ resource "aws_iam_role_policy" "github_deploy" {
   }
 }
 
+resource "aws_ssm_parameter" "deploy_application_name" {
+  name        = "${local.deploy_ssm_prefix}/application-name"
+  type        = "String"
+  value       = var.eb_application_name
+  description = "Elastic Beanstalk application name; GitHub CD creates application versions here"
+}
+
+resource "aws_ssm_parameter" "deploy_environment_name" {
+  name        = "${local.deploy_ssm_prefix}/environment-name"
+  type        = "String"
+  value       = var.eb_environment_name
+  description = "Elastic Beanstalk environment name; GitHub CD calls UpdateEnvironment"
+}
+
+resource "aws_ssm_parameter" "deploy_artifacts_bucket" {
+  name        = "${local.deploy_ssm_prefix}/artifacts-bucket"
+  type        = "String"
+  value       = local.eb_bucket_name
+  description = "Bucket for release zips; GitHub CD uploads site.zip here"
+}
+
+resource "aws_ssm_parameter" "deploy_smoke_url" {
+  name        = "${local.deploy_ssm_prefix}/smoke-url"
+  type        = "String"
+  value       = var.smoke_url
+  description = "HTTPS origin for post-deploy smoke checks"
+}
+
 locals {
   managed_eb_settings = concat(
     [
@@ -444,16 +497,13 @@ locals {
 }
 
 resource "aws_elastic_beanstalk_environment" "this" {
-  # Null VCS plans omit this Optional+Computed argument, so the provider
-  # refreshes the live label without reverting releases. Application-CD runs
-  # pass an immutable <full-sha>-<run-id>-<attempt> value as a run-specific
-  # TF_VAR_release_version_label.
-  name          = var.eb_environment_name
-  application   = var.eb_application_name
-  platform_arn  = var.platform_arn
-  version_label = var.release_version_label
-  tier          = "WebServer"
-  cname_prefix  = var.eb_environment_name
+  # GitHub Actions owns application versions via UpdateEnvironment.
+  # version_label is ignored so app deploys are not Terraform drift.
+  name         = var.eb_environment_name
+  application  = var.eb_application_name
+  platform_arn = var.platform_arn
+  tier         = "WebServer"
+  cname_prefix = var.eb_environment_name
 
   dynamic "setting" {
     for_each = var.manage_eb_settings ? local.managed_eb_settings : []
@@ -471,6 +521,7 @@ resource "aws_elastic_beanstalk_environment" "this" {
     prevent_destroy = true
     ignore_changes = [
       wait_for_ready_timeout,
+      version_label,
     ]
   }
 }
diff --git a/terraform/live/modules/environment-owned/variables.tf b/terraform/live/modules/environment-owned/variables.tf
index 71a97cd..d72d630 100644
--- a/terraform/live/modules/environment-owned/variables.tf
+++ b/terraform/live/modules/environment-owned/variables.tf
@@ -200,20 +200,9 @@ variable "legacy_dev_s3_policy" {
   default     = false
 }
 
-variable "release_version_label" {
-  type     = string
-  default  = null
-  nullable = true
-
-  description = "Immutable Elastic Beanstalk application version. Null VCS plans leave the live version unchanged."
-
-  validation {
-    condition = (
-      var.release_version_label == null ||
-      can(regex("^[0-9a-f]{40}-[0-9]+-[0-9]+$", var.release_version_label))
-    )
-    error_message = "release_version_label must be <full-sha>-<run-id>-<attempt>."
-  }
+variable "smoke_url" {
+  type        = string
+  description = "HTTPS origin used by post-deploy smoke checks. Written to SSM for GitHub Actions."
 }
 
 variable "hosted_zone_id" {
diff --git a/terraform/live/staging/main.tf b/terraform/live/staging/main.tf
index 01391d5..0368da2 100644
--- a/terraform/live/staging/main.tf
+++ b/terraform/live/staging/main.tf
@@ -58,11 +58,11 @@ module "environment" {
   github_deploy_role_name   = "githubdeploy-shoc-backend-staging"
   github_deploy_policy_name = "GithubDeployRoleDefaultPolicyE8F540D1"
   legacy_dev_s3_policy      = false
+  smoke_url                 = "https://api.staging.seahaven.com"
   hosted_zone_id            = "Z02602739VQWBWCAGXP4"
   api_domain                = local.api_domain
   api_record_type           = "CNAME"
   api_cname_target          = "awseb--AWSEB-pPXqiRgNnZe8-16996010.us-east-1.elb.amazonaws.com"
-  release_version_label     = var.release_version_label
   metadata_before_adoption = {
     runtime_role_description = "SHOC backend staging compute role (EB instance profile)"
     runtime_role_tags = {
diff --git a/terraform/live/staging/variables.tf b/terraform/live/staging/variables.tf
deleted file mode 100644
index 3f21d9b..0000000
--- a/terraform/live/staging/variables.tf
+++ /dev/null
@@ -1,15 +0,0 @@
-variable "release_version_label" {
-  type     = string
-  default  = null
-  nullable = true
-
-  description = "Immutable Elastic Beanstalk application version. Null VCS plans leave the live version unchanged."
-
-  validation {
-    condition = (
-      var.release_version_label == null ||
-      can(regex("^[0-9a-f]{40}-[0-9]+-[0-9]+$", var.release_version_label))
-    )
-    error_message = "release_version_label must be <full-sha>-<run-id>-<attempt>."
-  }
-}

From 7eaa7fb3f93021c8b70c0181499d3839561a1987 Mon Sep 17 00:00:00 2001
From: Adam Moussa <adam@seahavenind.com>
Date: Fri, 18 Sep 2026 11:22:50 -0400
Subject: [PATCH 062/183] docs(cd): document GitHub Environment branch and tag
 policies

---
 terraform/live/README.md | 31 +++++++++++++++++++++++++------
 1 file changed, 25 insertions(+), 6 deletions(-)

diff --git a/terraform/live/README.md b/terraform/live/README.md
index ae77fcf..0c78f8f 100644
--- a/terraform/live/README.md
+++ b/terraform/live/README.md
@@ -137,11 +137,11 @@ restores the previous Elastic Beanstalk version label. Database migrations
 already applied by the failed bundle are not reverted. Deploy parameters are read from `/shoc-backend/<env>/deploy/*` SSM
 parameters this module writes.
 
-Merge to `main` deploys **dev** unless the push is terraform-only. Staging and
-prod are cut from **Actions → Release** (`environment`, `bump`, `message`).
-That workflow waits for CI, tags `vX.Y.Z-staging` or `vX.Y.Z` from main HEAD
-with `GITHUB_TOKEN`, then calls deploy. Prod waits on GitHub Environment
-reviewers; AWS steps stay skipped until `PROD_APP_CD_ENABLED` is true.
+Merge to `main` deploys **dev** unless the push is terraform-only. Staging is
+cut from **Actions → Release** (`environment`, `bump`, `message`). That
+workflow waits for CI, tags `vX.Y.Z-staging` from main HEAD with
+`GITHUB_TOKEN`, then calls deploy. Do not cut prod yet; leave
+`PROD_APP_CD_ENABLED` unset and do not create the `prod` GitHub Environment.
 Staging remains `adoption_complete=false` with a pinned API CNAME until its
 import apply is proven.
 
@@ -160,13 +160,32 @@ on that leftover path only.
 ### Credentials
 
 Store `DEPLOY_ROLE_ARN` as a GitHub Environment **variable** (`dev`,
-`staging`, later `prod`). OIDC trust is
+`staging`). OIDC trust is
 `repo:Sea-Haven-Industries/shoc-backend:environment:<env>` plus
 `job_workflow_ref` for `.github/workflows/deploy.yaml` at `refs/heads/main`
 and `refs/tags/v*`. Adding another deploy workflow is a cross-family IAM
 change. After cutover, drop `TF_API_TOKEN` from GitHub Environments. The new
 CD path does not use it.
 
+GitHub Environment deployment branch and tag policies are repository
+settings, not this diff. Update them before the first merge to `main` and
+the first staging cut. The policy matches `GITHUB_REF` of the workflow run.
+Branch patterns never match tag refs; adding `v*` as a branch pattern fails
+the same way as an empty allowlist.
+
+1. `dev` — allow branch `main`. Keep `dev` allowed while leftover
+   `.github/workflows/deploy.yml` still deploys from that branch.
+2. `staging` — add a **tag-type** policy matching `v*.*.*-staging` for
+   `deploy-tag.yaml`. Allow branch `main` because Actions → Release is
+   `workflow_dispatch` on `main` and then calls `deploy.yaml`
+   (`GITHUB_TOKEN` tag pushes do not start `deploy-tag.yaml`). Keep
+   `staging` allowed while leftover `deploy.yml` still deploys from that
+   branch.
+
+Do not create the `prod` environment yet. Leave `PROD_APP_CD_ENABLED`
+unset. Do not run Actions → Release with `environment=prod`; the first
+prod dispatch would auto-create an unprotected environment.
+
 ## Pinned live identities
 
 - Dev: workspace `shoc-backend-dev`; EB environment `shoc-backend-dev`

From 396b1c690bfbc776ece47d5a609e48ffccbc860d Mon Sep 17 00:00:00 2001
From: Adam Moussa <adam@seahavenind.com>
Date: Fri, 18 Sep 2026 11:33:34 -0400
Subject: [PATCH 063/183] fix(cd): honor reusable workflow inputs when
 resolving deploy target

---
 .github/workflows/deploy.yaml | 40 +++++++++++++++++++----------------
 terraform/live/README.md      |  7 ++++--
 2 files changed, 27 insertions(+), 20 deletions(-)

diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
index 59791dc..7ff766e 100644
--- a/.github/workflows/deploy.yaml
+++ b/.github/workflows/deploy.yaml
@@ -58,24 +58,28 @@ jobs:
           GITHUB_SHA_IN: ${{ github.sha }}
         run: |
           set -euo pipefail
-          case "${EVENT_NAME}" in
-            workflow_call)
-              environment="${CALL_ENVIRONMENT}"
-              ref="${CALL_REF}"
-              ;;
-            workflow_dispatch)
-              environment="${INPUT_ENVIRONMENT}"
-              ref="${INPUT_REF:-${GITHUB_SHA_IN}}"
-              ;;
-            push)
-              environment=dev
-              ref="${GITHUB_SHA_IN}"
-              ;;
-            *)
-              echo "unsupported event ${EVENT_NAME}" >&2
-              exit 1
-              ;;
-          esac
+          # A called reusable workflow keeps the caller's github.event_name
+          # (push or workflow_dispatch), not workflow_call. Prefer the call
+          # inputs whenever they are set.
+          if [ -n "${CALL_ENVIRONMENT}" ]; then
+            environment="${CALL_ENVIRONMENT}"
+            ref="${CALL_REF:-${GITHUB_SHA_IN}}"
+          else
+            case "${EVENT_NAME}" in
+              workflow_dispatch)
+                environment="${INPUT_ENVIRONMENT}"
+                ref="${INPUT_REF:-${GITHUB_SHA_IN}}"
+                ;;
+              push)
+                environment=dev
+                ref="${GITHUB_SHA_IN}"
+                ;;
+              *)
+                echo "unsupported event ${EVENT_NAME}" >&2
+                exit 1
+                ;;
+            esac
+          fi
           case "${environment}" in
             dev|staging|prod) ;;
             *)
diff --git a/terraform/live/README.md b/terraform/live/README.md
index 0c78f8f..a1bbdf4 100644
--- a/terraform/live/README.md
+++ b/terraform/live/README.md
@@ -183,8 +183,11 @@ the same way as an empty allowlist.
    branch.
 
 Do not create the `prod` environment yet. Leave `PROD_APP_CD_ENABLED`
-unset. Do not run Actions → Release with `environment=prod`; the first
-prod dispatch would auto-create an unprotected environment.
+unset. Until the `prod` environment exists with reviewers, do not run
+Actions → Release with `environment=prod`, do not push a bare `vX.Y.Z`
+tag, and do not `workflow_dispatch` deploy with `environment=prod`. Any
+of those declares `environment: prod` and would auto-create an
+unprotected environment.
 
 ## Pinned live identities
 

From da0b29f76927bea468b93b629e14257ed872d6ea Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 18 Sep 2026 12:40:33 -0300
Subject: [PATCH 064/183] feat(notifications): serve the Notification Center
 feed grouped by reason

Adds GET /api/notifications, a per-user read model derived from live
work-order state: Unassigned (grouped, High), No Vendor and Aveta Missing
(per work order, Medium) and Vendor Conflict, account-scoped from claims
and ordered by section severity with a fixed reason tie-break.
---
 .../NotificationFeedServiceTests.cs           | 530 ++++++++++++++++++
 .../Controllers/NotificationsController.cs    |  37 ++
 .../NotificationFeedDataService.cs            | 112 ++++
 .../VendorOperationsDataService.cs            |  25 +-
 .../INotificationFeedDataService.cs           |  29 +
 .../IVendorOperationsDataService.cs           |   2 +
 .../Models/NotificationFeedReadModels.cs      |  27 +
 .../Models/VendorOperationsReadModels.cs      |   1 +
 .../DTOs/NotificationFeedDTOs.cs              | 131 +++++
 .../Helpers/NotificationFeedOrdering.cs       |  57 ++
 .../Helpers/VendorConflictPairs.cs            |  34 ++
 .../Implementation/NotificationFeedService.cs | 180 ++++++
 .../Implementation/VendorOperationsService.cs |  26 +-
 .../Interfaces/INotificationFeedService.cs    |  14 +
 14 files changed, 1176 insertions(+), 29 deletions(-)
 create mode 100644 Api.SeaHavenIndustries.Tests/NotificationFeedServiceTests.cs
 create mode 100644 Api.SeaHavenIndustries/Controllers/NotificationsController.cs
 create mode 100644 SeaHaven.DataServices/Implementation/NotificationFeedDataService.cs
 create mode 100644 SeaHaven.DataServices/Interfaces/INotificationFeedDataService.cs
 create mode 100644 SeaHaven.DataServices/Models/NotificationFeedReadModels.cs
 create mode 100644 SeaHaven.Services/DTOs/NotificationFeedDTOs.cs
 create mode 100644 SeaHaven.Services/Helpers/NotificationFeedOrdering.cs
 create mode 100644 SeaHaven.Services/Helpers/VendorConflictPairs.cs
 create mode 100644 SeaHaven.Services/Implementation/NotificationFeedService.cs
 create mode 100644 SeaHaven.Services/Interfaces/INotificationFeedService.cs

diff --git a/Api.SeaHavenIndustries.Tests/NotificationFeedServiceTests.cs b/Api.SeaHavenIndustries.Tests/NotificationFeedServiceTests.cs
new file mode 100644
index 0000000..cb702a4
--- /dev/null
+++ b/Api.SeaHavenIndustries.Tests/NotificationFeedServiceTests.cs
@@ -0,0 +1,530 @@
+using System.Security.Claims;
+using Api.SeaHavenIndustries.Controllers;
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using FluentAssertions;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.EntityFrameworkCore;
+using SeaHaven.DataServices.Implementation;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Exceptions;
+using SeaHaven.Services.Helpers;
+using SeaHaven.Services.Implementation;
+using Xunit;
+
+namespace Api.SeaHavenIndustries.Tests;
+
+public class NotificationFeedServiceTests
+{
+    // 12:00 in New York, so the business date is 2026-09-18.
+    private static readonly DateTime Now = new(2026, 9, 18, 16, 0, 0, DateTimeKind.Utc);
+    private static readonly DateTime Today = new(2026, 9, 18);
+
+    private sealed class FixedTimeProvider : TimeProvider
+    {
+        public override DateTimeOffset GetUtcNow() => new(Now);
+    }
+
+    private static ApplicationDbContext NewContext()
+    {
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseInMemoryDatabase(Guid.NewGuid().ToString())
+            .Options;
+        return new ApplicationDbContext(options);
+    }
+
+    private static NotificationFeedService NewService(ApplicationDbContext context)
+    {
+        var resolver = new WorkOrderAccountResolver(new AccountDataService(context), new LocationDataService(context));
+        return new NotificationFeedService(
+            new NotificationFeedDataService(context),
+            new VendorOperationsDataService(context, new DispatchDataService(context)),
+            resolver,
+            new FixedTimeProvider());
+    }
+
+    private static ClaimsPrincipal User(int accountId, string role, string userId = "user-1")
+        => new(new ClaimsIdentity(new[]
+        {
+            new Claim(SeaHavenClaimTypes.AccountId, accountId.ToString()),
+            new Claim(ClaimTypes.NameIdentifier, userId),
+            new Claim(ClaimTypes.Role, role)
+        }, "test"));
+
+    private static ClaimsPrincipal OrgWideAdmin()
+        => new(new ClaimsIdentity(new[]
+        {
+            new Claim(SeaHavenClaimTypes.OrgScope, SeaHavenClaimTypes.OrgScopeAll),
+            new Claim(ClaimTypes.NameIdentifier, "admin-1"),
+            new Claim(ClaimTypes.Role, "Admin")
+        }, "test"));
+
+    private static WorkOrder Open(int accountId, string? assignTo = null, DateTime? scheduled = null, string? number = null)
+        => new()
+        {
+            AccountId = accountId,
+            AssignTo = assignTo,
+            ScheduledDate = scheduled,
+            InternalWONumber = number,
+            LifecycleStatus = LifecycleStatus.Scheduled,
+            CreatedDate = Now.AddDays(-3)
+        };
+
+    private static WorkOrder AvetaDue(int accountId, string assignTo, DateTime scheduled, string number)
+    {
+        var workOrder = Open(accountId, assignTo, scheduled, number);
+        workOrder.AvetaRequired = true;
+        return workOrder;
+    }
+
+    private static NotificationSectionDto Section(NotificationFeedDto feed, string reason)
+        => feed.Sections.Single(section => section.Reason == reason);
+
+    private static void AddActiveDispatch(ApplicationDbContext context, WorkOrder workOrder)
+    {
+        var vendor = new Vendor { CompanyName = "Gateway", IsActive = true };
+        context.Vendors.Add(vendor);
+        context.SaveChanges();
+        context.Dispatches.Add(new Dispatch
+        {
+            VendorId = vendor.Id,
+            WorkOrderId = workOrder.Id,
+            Status = "Sent",
+            ScheduledDate = workOrder.ScheduledDate
+        });
+        context.SaveChanges();
+    }
+
+    [Fact]
+    public async Task Unassigned_GroupsEveryOpenUnassignedWorkOrderIntoOneHighItem()
+    {
+        using var context = NewContext();
+        var newest = Open(1);
+        newest.CreatedDate = Now.AddHours(-1);
+        var completed = Open(1);
+        completed.LifecycleStatus = LifecycleStatus.Completed;
+        var canceled = Open(1);
+        canceled.LifecycleStatus = LifecycleStatus.Canceled;
+        var legacyDone = Open(1);
+        legacyDone.LifecycleStatus = null;
+        legacyDone.Status = "Done";
+        var template = Open(1);
+        template.istemplate = true;
+        var deleted = Open(1);
+        deleted.IsDeleted = true;
+        context.workOrders.AddRange(
+            Open(1), Open(1, assignTo: ""), newest, Open(1, assignTo: "dispatcher-1"),
+            completed, canceled, legacyDone, template, deleted);
+        await context.SaveChangesAsync();
+
+        var feed = await NewService(context).GetFeedAsync(User(1, "Scheduler"), CancellationToken.None);
+
+        var section = Section(feed, NotificationReasons.Unassigned);
+        section.Label.Should().Be("Unassigned");
+        section.Count.Should().Be(3);
+        var item = section.Items.Should().ContainSingle().Subject;
+        item.Id.Should().Be("unassigned");
+        item.Severity.Should().Be(NotificationSeverities.High);
+        item.RowType.Should().Be(NotificationRowTypes.Dismissable);
+        item.Title.Should().Be("3 work orders are unassigned");
+        item.Count.Should().Be(3);
+        item.TriggeredAt.Should().Be(newest.CreatedDate);
+        item.Target.Kind.Should().Be(NotificationTargetKinds.Queue);
+        item.Target.Queue.Should().Be(NotificationQueues.Unassigned);
+    }
+
+    [Fact]
+    public async Task Unassigned_CountFollowsAssignmentAndSectionDisappearsAtZero()
+    {
+        using var context = NewContext();
+        var first = Open(1);
+        var second = Open(1);
+        context.workOrders.AddRange(first, second);
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        first.AssignTo = "dispatcher-1";
+        await context.SaveChangesAsync();
+        var afterOne = await service.GetFeedAsync(User(1, "Admin"), CancellationToken.None);
+        var item = Section(afterOne, NotificationReasons.Unassigned).Items.Single();
+        item.Title.Should().Be("1 work order is unassigned");
+        item.Id.Should().Be("unassigned", "the id stays stable so a session dismissal survives count changes");
+
+        second.AssignTo = "dispatcher-2";
+        await context.SaveChangesAsync();
+        var afterAll = await service.GetFeedAsync(User(1, "Admin"), CancellationToken.None);
+        afterAll.Sections.Should().NotContain(section => section.Reason == NotificationReasons.Unassigned);
+    }
+
+    [Theory]
+    [InlineData("Admin")]
+    [InlineData("Manager")]
+    [InlineData("Scheduler")]
+    public async Task Unassigned_IsShownToRolesThatSeeEveryDispatcher(string role)
+    {
+        using var context = NewContext();
+        context.workOrders.Add(Open(1));
+        await context.SaveChangesAsync();
+
+        var feed = await NewService(context).GetFeedAsync(User(1, role), CancellationToken.None);
+
+        Section(feed, NotificationReasons.Unassigned).Count.Should().Be(1);
+    }
+
+    [Fact]
+    public async Task Unassigned_IsNotShownToDispatchers()
+    {
+        using var context = NewContext();
+        context.workOrders.Add(Open(1));
+        await context.SaveChangesAsync();
+
+        var feed = await NewService(context).GetFeedAsync(User(1, "Dispatcher"), CancellationToken.None);
+
+        feed.Sections.Should().BeEmpty();
+    }
+
+    [Fact]
+    public async Task AvetaMissing_OnlyFlagsOpenRequiredWorkOrdersInTheOneDayWindowWithoutTheDocument()
+    {
+        using var context = NewContext();
+        var dueToday = AvetaDue(1, "dispatcher-1", Today.AddHours(9), "A-TODAY");
+        var dueTomorrow = AvetaDue(1, "dispatcher-1", Today.AddDays(1).AddHours(9), "A-TOMORROW");
+        var withDocument = AvetaDue(1, "dispatcher-1", Today.AddHours(10), "A-HAS-DOC");
+        var withDeletedDocument = AvetaDue(1, "dispatcher-1", Today.AddHours(11), "A-DELETED-DOC");
+        var dayAfterTomorrow = AvetaDue(1, "dispatcher-1", Today.AddDays(2).AddHours(9), "A-LATER");
+        var yesterday = AvetaDue(1, "dispatcher-1", Today.AddDays(-1).AddHours(9), "A-PAST");
+        var completed = AvetaDue(1, "dispatcher-1", Today.AddHours(12), "A-DONE");
+        completed.LifecycleStatus = LifecycleStatus.Completed;
+        var notRequired = Open(1, "dispatcher-1", Today.AddHours(13), "A-NOT-REQUIRED");
+        context.workOrders.AddRange(
+            dueToday, dueTomorrow, withDocument, withDeletedDocument, dayAfterTomorrow, yesterday, completed, notRequired);
+        await context.SaveChangesAsync();
+        context.workOrderAttachments.AddRange(
+            new WorkOrderAttachments { WorkorderId = withDocument.Id, Category = WorkOrderMediaCategory.Aveta },
+            new WorkOrderAttachments { WorkorderId = withDeletedDocument.Id, Category = WorkOrderMediaCategory.Aveta, IsDeleted = true },
+            new WorkOrderAttachments { WorkorderId = dueToday.Id, Category = WorkOrderMediaCategory.Extra });
+        await context.SaveChangesAsync();
+        AddActiveDispatch(context, dueToday);
+        AddActiveDispatch(context, dueTomorrow);
+        AddActiveDispatch(context, withDeletedDocument);
+
+        var feed = await NewService(context).GetFeedAsync(User(1, "Dispatcher", "dispatcher-1"), CancellationToken.None);
+
+        var section = Section(feed, NotificationReasons.AvetaMissing);
+        section.Label.Should().Be("Aveta Missing");
+        section.Count.Should().Be(3);
+        section.Items.Select(item => item.WorkOrders.Single().Number)
+            .Should().Equal("A-TOMORROW", "A-TODAY", "A-DELETED-DOC");
+        var tomorrowItem = section.Items[0];
+        tomorrowItem.Id.Should().Be($"aveta-missing-{dueTomorrow.Id}");
+        tomorrowItem.Severity.Should().Be(NotificationSeverities.Medium);
+        tomorrowItem.Title.Should().Be("WO #A-TOMORROW is missing the Aveta document");
+        tomorrowItem.Target.Kind.Should().Be(NotificationTargetKinds.WorkOrder);
+        tomorrowItem.Target.WorkOrderId.Should().Be(dueTomorrow.Id);
+        tomorrowItem.Target.Tab.Should().Be(NotificationWorkOrderTabs.Extras);
+    }
+
+    [Fact]
+    public async Task AvetaMissing_ClearsOnceTheDocumentIsAttached()
+    {
+        using var context = NewContext();
+        var workOrder = AvetaDue(1, "dispatcher-1", Today.AddHours(9), "A-1");
+        context.workOrders.Add(workOrder);
+        await context.SaveChangesAsync();
+        AddActiveDispatch(context, workOrder);
+        var service = NewService(context);
+        var dispatcher = User(1, "Dispatcher", "dispatcher-1");
+
+        (await service.GetFeedAsync(dispatcher, CancellationToken.None)).Sections
+            .Should().ContainSingle(section => section.Reason == NotificationReasons.AvetaMissing);
+
+        context.workOrderAttachments.Add(new WorkOrderAttachments { WorkorderId = workOrder.Id, Category = WorkOrderMediaCategory.Aveta });
+        await context.SaveChangesAsync();
+
+        (await service.GetFeedAsync(dispatcher, CancellationToken.None)).Sections.Should().BeEmpty();
+    }
+
+    [Fact]
+    public async Task NoVendor_MatchesTheVendorReminderRuleWithinFortyEightHours()
+    {
+        using var context = NewContext();
+        var noVendor = Open(1, "dispatcher-1", Now.AddHours(24), "NV-1");
+        var withDispatch = Open(1, "dispatcher-1", Now.AddHours(20), "NV-DISPATCHED");
+        var withLinkedDispatch = Open(1, "dispatcher-1", Now.AddHours(22), "NV-LINKED");
+        var withFinishedDispatch = Open(1, "dispatcher-1", Now.AddHours(30), "NV-FINISHED");
+        var tooFar = Open(1, "dispatcher-1", Now.AddHours(72), "NV-LATER");
+        context.workOrders.AddRange(noVendor, withDispatch, withLinkedDispatch, withFinishedDispatch, tooFar);
+        await context.SaveChangesAsync();
+        AddActiveDispatch(context, withDispatch);
+        var vendor = new Vendor { CompanyName = "Linked", IsActive = true };
+        context.Vendors.Add(vendor);
+        await context.SaveChangesAsync();
+        var multi = new Dispatch { VendorId = vendor.Id, WorkOrderId = withDispatch.Id, Status = "Sent" };
+        var finished = new Dispatch { VendorId = vendor.Id, WorkOrderId = withFinishedDispatch.Id, Status = "Completed" };
+        context.Dispatches.AddRange(multi, finished);
+        await context.SaveChangesAsync();
+        context.DispatchWorkOrders.Add(new DispatchWorkOrder { DispatchId = multi.Id, WorkOrderId = withLinkedDispatch.Id });
+        await context.SaveChangesAsync();
+
+        var feed = await NewService(context).GetFeedAsync(User(1, "Dispatcher", "dispatcher-1"), CancellationToken.None);
+
+        var section = Section(feed, NotificationReasons.NoVendor);
+        section.Label.Should().Be("No Vendor");
+        section.Items.Select(item => item.WorkOrders.Single().Number).Should().Equal("NV-FINISHED", "NV-1");
+        var item = section.Items.Single(row => row.Id == $"no-vendor-{noVendor.Id}");
+        item.Severity.Should().Be(NotificationSeverities.Medium);
+        item.Title.Should().Be("WO #NV-1 starts within 48h with no vendor assigned");
+        item.TriggeredAt.Should().Be(noVendor.ScheduledDate!.Value.AddHours(-48));
+        item.Target.WorkOrderId.Should().Be(noVendor.Id);
+    }
+
+    [Fact]
+    public async Task NoVendor_FlagsTheSameWorkOrdersAsTheVendorOperationsReminders()
+    {
+        using var context = NewContext();
+        var first = Open(1, "dispatcher-1", Now.AddHours(10), "P-1");
+        var second = Open(2, "dispatcher-2", Now.AddHours(40), "P-2");
+        var dispatched = Open(1, "dispatcher-1", Now.AddHours(12), "P-3");
+        context.workOrders.AddRange(first, second, dispatched);
+        await context.SaveChangesAsync();
+        AddActiveDispatch(context, dispatched);
+        var vendorService = new VendorOperationsService(
+            new VendorOperationsDataService(context, new DispatchDataService(context)), new FixedTimeProvider());
+
+        var reminders = await vendorService.GetNotificationsAsync(CancellationToken.None);
+        var feed = await NewService(context).GetFeedAsync(OrgWideAdmin(), CancellationToken.None);
+
+        var reminderIds = reminders.Items.OfType<NoVendorNotification>().Select(item => item.Id);
+        Section(feed, NotificationReasons.NoVendor).Items.Select(item => item.Id)
+            .Should().BeEquivalentTo(reminderIds);
+    }
+
+    [Fact]
+    public async Task Sections_OrderBySeverityThenFixedReasonOrder_AndItemsBySeverityThenRecency()
+    {
+        using var context = NewContext();
+        var aveta = AvetaDue(1, "dispatcher-1", Today.AddHours(9), "AV-1");
+        var earlierNoVendor = Open(1, "dispatcher-1", Now.AddHours(5), "NV-EARLY");
+        var laterNoVendor = Open(1, "dispatcher-1", Now.AddHours(30), "NV-LATE");
+        context.workOrders.AddRange(aveta, earlierNoVendor, laterNoVendor, Open(1));
+        await context.SaveChangesAsync();
+
+        var feed = await NewService(context).GetFeedAsync(User(1, "Scheduler"), CancellationToken.None);
+
+        feed.GeneratedAt.Should().Be(Now);
+        feed.Sections.Select(section => section.Reason).Should().Equal(
+            NotificationReasons.Unassigned, NotificationReasons.NoVendor, NotificationReasons.AvetaMissing);
+        feed.Sections.Select(section => section.Severity).Should().Equal(
+            NotificationSeverities.High, NotificationSeverities.Medium, NotificationSeverities.Medium);
+        var noVendorNumbers = Section(feed, NotificationReasons.NoVendor).Items
+            .Select(item => item.WorkOrders.Single().Number);
+        noVendorNumbers.Should().ContainInOrder("NV-LATE", "NV-EARLY");
+    }
+
+    [Fact]
+    public void Ordering_BreaksEqualSeverityTiesByReasonOrderAndPutsHigherSeverityFirst()
+    {
+        static NotificationItemDto Item(string id, string reason, string severity, int minutes) => new()
+        {
+            Id = id,
+            Reason = reason,
+            Severity = severity,
+            Count = 1,
+            TriggeredAt = Now.AddMinutes(minutes)
+        };
+
+        var sections = NotificationFeedOrdering.Order(new (string, int, IReadOnlyList<NotificationItemDto>)[]
+        {
+            (NotificationReasons.AvetaMissing, 1, new[] { Item("a", NotificationReasons.AvetaMissing, NotificationSeverities.Medium, 0) }),
+            (NotificationReasons.Activity, 2, new[]
+            {
+                Item("old-low", NotificationReasons.Activity, NotificationSeverities.Low, -10),
+                Item("new-low", NotificationReasons.Activity, NotificationSeverities.Low, 10),
+                Item("high", NotificationReasons.Activity, NotificationSeverities.High, -20)
+            }),
+            (NotificationReasons.Unassigned, 0, Array.Empty<NotificationItemDto>()),
+            (NotificationReasons.NoVendor, 1, new[] { Item("n", NotificationReasons.NoVendor, NotificationSeverities.Medium, 0) })
+        });
+
+        sections.Select(section => section.Reason).Should().Equal(
+            NotificationReasons.Activity, NotificationReasons.NoVendor, NotificationReasons.AvetaMissing);
+        sections[0].Items.Select(item => item.Id).Should().Equal("high", "new-low", "old-low");
+        sections[0].Label.Should().Be("Recent activity");
+    }
+
+    [Fact]
+    public async Task Dispatcher_OnlySeesTheirOwnWorkOrders()
+    {
+        using var context = NewContext();
+        context.workOrders.AddRange(
+            AvetaDue(1, "dispatcher-1", Today.AddHours(9), "MINE"),
+            AvetaDue(1, "dispatcher-2", Today.AddHours(9), "THEIRS"),
+            Open(1, "dispatcher-2", Now.AddHours(5), "THEIRS-NV"));
+        await context.SaveChangesAsync();
+        foreach (var workOrder in context.workOrders.Where(w => w.AvetaRequired).ToList())
+            AddActiveDispatch(context, workOrder);
+
+        var feed = await NewService(context).GetFeedAsync(User(1, "Dispatcher", "dispatcher-1"), CancellationToken.None);
+
+        feed.Sections.Select(section => section.Reason).Should().Equal(NotificationReasons.AvetaMissing);
+        Section(feed, NotificationReasons.AvetaMissing).Items.Single().WorkOrders.Single().Number.Should().Be("MINE");
+    }
+
+    [Fact]
+    public async Task CrossTenant_AccountUserNeverSeesAnotherAccountsWorkOrders()
+    {
+        using var context = NewContext();
+        var otherAveta = AvetaDue(2, "dispatcher-1", Today.AddHours(9), "OTHER-AV");
+        var otherNoVendor = Open(2, "dispatcher-1", Now.AddHours(5), "OTHER-NV");
+        var otherUnassigned = Open(2);
+        var ownUnassigned = Open(1);
+        context.workOrders.AddRange(otherAveta, otherNoVendor, otherUnassigned, ownUnassigned);
+        await context.SaveChangesAsync();
+        AddActiveDispatch(context, otherAveta);
+        var vendor = context.Vendors.First();
+        var overlapping = Open(2, "dispatcher-1", Now.AddHours(1), "OTHER-OVERLAP");
+        context.workOrders.Add(overlapping);
+        await context.SaveChangesAsync();
+        context.Dispatches.Add(new Dispatch { VendorId = vendor.Id, WorkOrderId = overlapping.Id, Status = "Sent", ScheduledDate = otherAveta.ScheduledDate });
+        await context.SaveChangesAsync();
+
+        var admin = await NewService(context).GetFeedAsync(User(1, "Admin"), CancellationToken.None);
+        var dispatcher = await NewService(context).GetFeedAsync(User(1, "Dispatcher", "dispatcher-1"), CancellationToken.None);
+
+        admin.Sections.Select(section => section.Reason).Should().Equal(NotificationReasons.Unassigned);
+        Section(admin, NotificationReasons.Unassigned).Count.Should().Be(1);
+        dispatcher.Sections.Should().BeEmpty();
+        var orgWide = await NewService(context).GetFeedAsync(OrgWideAdmin(), CancellationToken.None);
+        orgWide.Sections.Select(section => section.Reason).Should().Contain(new[]
+        {
+            NotificationReasons.Unassigned, NotificationReasons.NoVendor,
+            NotificationReasons.AvetaMissing, NotificationReasons.VendorConflict
+        });
+    }
+
+    [Fact]
+    public async Task VendorConflict_KeepsOverlappingAppointmentsAsTheirOwnSection()
+    {
+        using var context = NewContext();
+        var mine = Open(1, "dispatcher-1", Now.AddDays(3), "C-MINE");
+        var theirs = Open(1, "dispatcher-2", Now.AddDays(3), "C-THEIRS");
+        context.workOrders.AddRange(mine, theirs);
+        await context.SaveChangesAsync();
+        AddActiveDispatch(context, mine);
+        var vendor = context.Vendors.Single();
+        context.Dispatches.Add(new Dispatch { VendorId = vendor.Id, WorkOrderId = theirs.Id, Status = "Sent", ScheduledDate = theirs.ScheduledDate });
+        await context.SaveChangesAsync();
+
+        var feed = await NewService(context).GetFeedAsync(User(1, "Dispatcher", "dispatcher-1"), CancellationToken.None);
+        var unrelated = await NewService(context).GetFeedAsync(User(1, "Dispatcher", "dispatcher-3"), CancellationToken.None);
+
+        var section = Section(feed, NotificationReasons.VendorConflict);
+        section.Label.Should().Be("Vendor Conflict");
+        section.Count.Should().Be(2);
+        var item = section.Items.Single();
+        item.Title.Should().Be("Gateway has overlapping appointments");
+        item.WorkOrders.Select(workOrder => workOrder.Number).Should().BeEquivalentTo("C-MINE", "C-THEIRS");
+        unrelated.Sections.Should().BeEmpty();
+    }
+
+    [Fact]
+    public async Task PerWorkOrderSections_AreBoundedButCountEveryWorkOrder()
+    {
+        using var context = NewContext();
+        var total = NotificationFeedService.SectionItemLimit + 5;
+        for (var index = 0; index < total; index++)
+            context.workOrders.Add(Open(1, "dispatcher-1", Now.AddHours(1).AddMinutes(index), $"B-{index}"));
+        await context.SaveChangesAsync();
+
+        var feed = await NewService(context).GetFeedAsync(User(1, "Dispatcher", "dispatcher-1"), CancellationToken.None);
+
+        var section = Section(feed, NotificationReasons.NoVendor);
+        section.Count.Should().Be(total);
+        section.Items.Should().HaveCount(NotificationFeedService.SectionItemLimit);
+    }
+
+    [Fact]
+    public async Task MissingAccountScope_FailsClosed()
+    {
+        using var context = NewContext();
+        var user = new ClaimsPrincipal(new ClaimsIdentity(new[]
+        {
+            new Claim(ClaimTypes.NameIdentifier, "user-1"),
+            new Claim(ClaimTypes.Role, "Admin")
+        }, "test"));
+
+        var act = () => NewService(context).GetFeedAsync(user, CancellationToken.None);
+
+        (await act.Should().ThrowAsync<WorkOrderBoardValidationException>()).Which.Code.Should().Be("Forbidden");
+    }
+
+    [Fact]
+    public async Task UnknownRole_FailsClosed()
+    {
+        using var context = NewContext();
+
+        var act = () => NewService(context).GetFeedAsync(User(1, "Vendor"), CancellationToken.None);
+
+        (await act.Should().ThrowAsync<WorkOrderBoardValidationException>()).Which.Code.Should().Be("Forbidden");
+    }
+
+    [Fact]
+    public async Task Cancellation_ReachesTheFeedQueries()
+    {
+        using var context = NewContext();
+        context.workOrders.Add(Open(1));
+        await context.SaveChangesAsync();
+        using var cancellation = new CancellationTokenSource();
+        cancellation.Cancel();
+
+        var act = () => NewService(context).GetFeedAsync(User(1, "Admin"), cancellation.Token);
+
+        await act.Should().ThrowAsync<OperationCanceledException>();
+    }
+
+    [Fact]
+    public async Task Controller_MapsForbiddenScopeTo403()
+    {
+        using var context = NewContext();
+        var controller = new NotificationsController(NewService(context))
+        {
+            ControllerContext = new ControllerContext
+            {
+                HttpContext = new DefaultHttpContext { User = User(1, "Vendor") }
+            }
+        };
+
+        var result = await controller.GetFeed(CancellationToken.None);
+
+        result.Should().BeOfType<ObjectResult>().Which.StatusCode.Should().Be(StatusCodes.Status403Forbidden);
+    }
+
+    [Fact]
+    public async Task Controller_ReturnsTheFeedForAnAuthorizedUser()
+    {
+        using var context = NewContext();
+        context.workOrders.Add(Open(1));
+        await context.SaveChangesAsync();
+        var controller = new NotificationsController(NewService(context))
+        {
+            ControllerContext = new ControllerContext
+            {
+                HttpContext = new DefaultHttpContext { User = User(1, "Admin") }
+            }
+        };
+
+        var result = await controller.GetFeed(CancellationToken.None);
+
+        var feed = result.Should().BeOfType<OkObjectResult>().Which.Value.Should().BeOfType<NotificationFeedDto>().Subject;
+        feed.Sections.Single().Reason.Should().Be(NotificationReasons.Unassigned);
+    }
+
+    [Fact]
+    public void Controller_RequiresAnAuthenticatedCaller()
+    {
+        typeof(NotificationsController).GetCustomAttributes(typeof(AuthorizeAttribute), inherit: true)
+            .Should().NotBeEmpty();
+    }
+}
diff --git a/Api.SeaHavenIndustries/Controllers/NotificationsController.cs b/Api.SeaHavenIndustries/Controllers/NotificationsController.cs
new file mode 100644
index 0000000..5eff188
--- /dev/null
+++ b/Api.SeaHavenIndustries/Controllers/NotificationsController.cs
@@ -0,0 +1,37 @@
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using SeaHaven.Services.Exceptions;
+using SeaHaven.Services.Interfaces;
+
+namespace Api.SeaHavenIndustries.Controllers
+{
+    [Authorize]
+    [ApiController]
+    [Route("api/notifications")]
+    public class NotificationsController : ControllerBase
+    {
+        private readonly INotificationFeedService _feedService;
+
+        public NotificationsController(INotificationFeedService feedService)
+        {
+            _feedService = feedService;
+        }
+
+        [HttpGet]
+        public async Task<IActionResult> GetFeed(CancellationToken cancellationToken)
+        {
+            try
+            {
+                return Ok(await _feedService.GetFeedAsync(User, cancellationToken));
+            }
+            catch (WorkOrderBoardValidationException ex) when (ex.Code == "Forbidden")
+            {
+                return StatusCode(StatusCodes.Status403Forbidden, new
+                {
+                    code = ex.Code,
+                    message = ex.Message
+                });
+            }
+        }
+    }
+}
diff --git a/SeaHaven.DataServices/Implementation/NotificationFeedDataService.cs b/SeaHaven.DataServices/Implementation/NotificationFeedDataService.cs
new file mode 100644
index 0000000..7741550
--- /dev/null
+++ b/SeaHaven.DataServices/Implementation/NotificationFeedDataService.cs
@@ -0,0 +1,112 @@
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using Microsoft.EntityFrameworkCore;
+using SeaHaven.DataServices.Helpers;
+using SeaHaven.DataServices.Interfaces;
+using SeaHaven.DataServices.Models;
+
+namespace SeaHaven.DataServices.Implementation
+{
+    public class NotificationFeedDataService : INotificationFeedDataService
+    {
+        private static readonly string[] TerminalDispatchStatuses = { "Completed", "Verified", "Cancelled", "Canceled" };
+
+        private readonly ApplicationDbContext _context;
+
+        public NotificationFeedDataService(ApplicationDbContext context)
+        {
+            _context = context;
+        }
+
+        public async Task<UnassignedWorkOrdersSummary> GetUnassignedSummaryAsync(
+            int? accountId, CancellationToken cancellationToken)
+        {
+            var summary = await OpenWorkOrders(new NotificationFeedScope(accountId, null))
+                .Where(w => w.AssignTo == null || w.AssignTo == "")
+                .GroupBy(_ => 1)
+                .Select(group => new UnassignedWorkOrdersSummary
+                {
+                    Count = group.Count(),
+                    LatestCreatedAt = group.Max(w => w.CreatedDate)
+                })
+                .FirstOrDefaultAsync(cancellationToken);
+
+            return summary ?? new UnassignedWorkOrdersSummary();
+        }
+
+        public Task<NotificationCandidatePage> GetAvetaMissingAsync(
+            NotificationFeedScope scope, DateOnly today, int limit, CancellationToken cancellationToken)
+        {
+            // Same rule as the dashboard's Aveta Pending tile so the two counts agree.
+            var windowStart = today.ToDateTime(TimeOnly.MinValue);
+            var windowEnd = today.AddDays(2).ToDateTime(TimeOnly.MinValue);
+            var candidates = OpenWorkOrders(scope)
+                .Where(w => w.AvetaRequired
+                    && w.ScheduledDate >= windowStart
+                    && w.ScheduledDate < windowEnd
+                    && !w.workOrderAttachments!.Any(attachment =>
+                        (attachment.IsDeleted == null || attachment.IsDeleted == false)
+                        && attachment.Category == WorkOrderMediaCategory.Aveta));
+
+            return PageAsync(candidates, limit, cancellationToken);
+        }
+
+        public Task<NotificationCandidatePage> GetNoVendorAsync(
+            NotificationFeedScope scope, DateTime cutoff, int limit, CancellationToken cancellationToken)
+        {
+            // "Has a vendor" matches the vendor reminders: any non-terminal dispatch that
+            // points at the work order directly or links it through DispatchWorkOrders.
+            var candidates = OpenWorkOrders(scope)
+                .Where(w => w.ScheduledDate.HasValue
+                    && w.ScheduledDate.Value <= cutoff
+                    && !_context.Dispatches.Any(d => d.WorkOrderId == w.Id
+                        && !TerminalDispatchStatuses.Contains(d.Status ?? ""))
+                    && !_context.DispatchWorkOrders.Any(link => link.WorkOrderId == w.Id
+                        && link.Dispatch != null
+                        && !TerminalDispatchStatuses.Contains(link.Dispatch.Status ?? "")));
+
+            return PageAsync(candidates, limit, cancellationToken);
+        }
+
+        private IQueryable<WorkOrder> OpenWorkOrders(NotificationFeedScope scope)
+        {
+            var workOrders = WorkOrderBoardQueryFilters.ApplyBaseScope(_context.workOrders.AsNoTracking());
+            if (scope.AccountId is int accountId)
+                workOrders = WorkOrderBoardQueryFilters.ApplyAccountScope(workOrders, accountId);
+            if (scope.DispatcherId != null)
+                workOrders = workOrders.Where(w => w.AssignTo == scope.DispatcherId);
+
+            return workOrders.Where(w => w.LifecycleStatus != LifecycleStatus.Completed
+                && w.LifecycleStatus != LifecycleStatus.Canceled
+                && (w.LifecycleStatus != null
+                    || ((w.LegacyStatus ?? w.Status) != "Done"
+                        && (w.LegacyStatus ?? w.Status) != "Completed"
+                        && (w.LegacyStatus ?? w.Status) != "Complete"
+                        && (w.LegacyStatus ?? w.Status) != "Closed"
+                        && (w.LegacyStatus ?? w.Status) != "Canceled"
+                        && (w.LegacyStatus ?? w.Status) != "Cancelled")));
+        }
+
+        private static async Task<NotificationCandidatePage> PageAsync(
+            IQueryable<WorkOrder> candidates, int limit, CancellationToken cancellationToken)
+        {
+            var total = await candidates.CountAsync(cancellationToken);
+            if (total == 0)
+                return new NotificationCandidatePage();
+
+            var items = await candidates
+                .OrderByDescending(w => w.ScheduledDate)
+                .ThenByDescending(w => w.Id)
+                .Take(limit)
+                .Select(w => new NotificationWorkOrderCandidate
+                {
+                    Id = w.Id,
+                    Number = w.InternalWONumber ?? w.WorkerOrderNumber,
+                    ScheduledDate = w.ScheduledDate!.Value
+                })
+                .ToListAsync(cancellationToken);
+
+            return new NotificationCandidatePage { Total = total, Items = items };
+        }
+    }
+}
diff --git a/SeaHaven.DataServices/Implementation/VendorOperationsDataService.cs b/SeaHaven.DataServices/Implementation/VendorOperationsDataService.cs
index e1eefc3..0468f43 100644
--- a/SeaHaven.DataServices/Implementation/VendorOperationsDataService.cs
+++ b/SeaHaven.DataServices/Implementation/VendorOperationsDataService.cs
@@ -56,14 +56,23 @@ namespace SeaHaven.DataServices.Implementation
                 .ToListAsync(cancellationToken);
         }
 
-        public async Task<IReadOnlyList<ScheduledDispatchReadModel>> GetActiveScheduledDispatchesAsync(CancellationToken cancellationToken)
+        public Task<IReadOnlyList<ScheduledDispatchReadModel>> GetActiveScheduledDispatchesAsync(CancellationToken cancellationToken)
+            => GetActiveScheduledDispatchesAsync(null, cancellationToken);
+
+        public async Task<IReadOnlyList<ScheduledDispatchReadModel>> GetActiveScheduledDispatchesAsync(
+            int? accountId, CancellationToken cancellationToken)
         {
-            var direct = _context.Dispatches.AsNoTracking()
+            var directDispatches = _context.Dispatches.AsNoTracking()
                 .Where(dispatch => !TerminalDispatchStatuses.Contains(dispatch.Status ?? "")
                     && (dispatch.IsDeleted == null || dispatch.IsDeleted == false)
                     && dispatch.WorkOrderId.HasValue
                     && (dispatch.ScheduledDate.HasValue
-                        || (dispatch.WorkOrder != null && dispatch.WorkOrder.ScheduledStart.HasValue)))
+                        || (dispatch.WorkOrder != null && dispatch.WorkOrder.ScheduledStart.HasValue)));
+            if (accountId is int directAccountId)
+                directDispatches = directDispatches.Where(dispatch =>
+                    dispatch.WorkOrder != null && dispatch.WorkOrder.AccountId == directAccountId);
+
+            var direct = directDispatches
                 .Select(dispatch => new ScheduledDispatchReadModel
                 {
                     Id = dispatch.Id,
@@ -71,18 +80,23 @@ namespace SeaHaven.DataServices.Implementation
                     VendorName = dispatch.Vendor!.CompanyName,
                     WorkOrderId = dispatch.WorkOrderId!.Value,
                     WorkOrderNumber = dispatch.WorkOrder!.InternalWONumber ?? dispatch.WorkOrder.WorkerOrderNumber,
+                    AssignTo = dispatch.WorkOrder.AssignTo,
                     Start = dispatch.WorkOrder!.ScheduledStart ?? dispatch.ScheduledDate!.Value,
                     End = dispatch.WorkOrder.ScheduledEnd
                         ?? (dispatch.WorkOrder.ScheduledStart ?? dispatch.ScheduledDate!.Value).AddHours(2)
                 });
 
-            var linked = _context.DispatchWorkOrders.AsNoTracking()
+            var linkedDispatches = _context.DispatchWorkOrders.AsNoTracking()
                 .Where(link => link.Dispatch != null
                     && link.WorkOrder != null
                     && link.Dispatch.WorkOrderId != link.WorkOrderId
                     && !TerminalDispatchStatuses.Contains(link.Dispatch.Status ?? "")
                     && (link.Dispatch.IsDeleted == null || link.Dispatch.IsDeleted == false)
-                    && (link.Dispatch.ScheduledDate.HasValue || link.WorkOrder.ScheduledStart.HasValue))
+                    && (link.Dispatch.ScheduledDate.HasValue || link.WorkOrder.ScheduledStart.HasValue));
+            if (accountId is int linkedAccountId)
+                linkedDispatches = linkedDispatches.Where(link => link.WorkOrder!.AccountId == linkedAccountId);
+
+            var linked = linkedDispatches
                 .Select(link => new ScheduledDispatchReadModel
                 {
                     Id = link.DispatchId,
@@ -90,6 +104,7 @@ namespace SeaHaven.DataServices.Implementation
                     VendorName = link.Dispatch.Vendor!.CompanyName,
                     WorkOrderId = link.WorkOrderId,
                     WorkOrderNumber = link.WorkOrder!.InternalWONumber ?? link.WorkOrder.WorkerOrderNumber,
+                    AssignTo = link.WorkOrder.AssignTo,
                     Start = link.WorkOrder.ScheduledStart ?? link.Dispatch.ScheduledDate!.Value,
                     End = link.WorkOrder.ScheduledEnd
                         ?? (link.WorkOrder.ScheduledStart ?? link.Dispatch.ScheduledDate!.Value).AddHours(2)
diff --git a/SeaHaven.DataServices/Interfaces/INotificationFeedDataService.cs b/SeaHaven.DataServices/Interfaces/INotificationFeedDataService.cs
new file mode 100644
index 0000000..d96e59d
--- /dev/null
+++ b/SeaHaven.DataServices/Interfaces/INotificationFeedDataService.cs
@@ -0,0 +1,29 @@
+using SeaHaven.DataServices.Models;
+
+namespace SeaHaven.DataServices.Interfaces
+{
+    /// <summary>
+    /// Live work-order conditions behind the notification feed. Every query applies the
+    /// base scope (no templates, no deleted rows), the caller's account scope, and the
+    /// shared open rule (not Completed/Canceled, including legacy terminal statuses).
+    /// </summary>
+    public interface INotificationFeedDataService
+    {
+        /// <summary>Open work orders with no dispatcher assigned in <paramref name="accountId"/> (null is org-wide).</summary>
+        Task<UnassignedWorkOrdersSummary> GetUnassignedSummaryAsync(int? accountId, CancellationToken cancellationToken);
+
+        /// <summary>
+        /// Open, Aveta-required work orders scheduled on <paramref name="today"/> or the next day with no
+        /// Aveta document attached. Items are the <paramref name="limit"/> latest scheduled.
+        /// </summary>
+        Task<NotificationCandidatePage> GetAvetaMissingAsync(
+            NotificationFeedScope scope, DateOnly today, int limit, CancellationToken cancellationToken);
+
+        /// <summary>
+        /// Open work orders scheduled at or before <paramref name="cutoff"/> with no active vendor dispatch,
+        /// direct or linked. Items are the <paramref name="limit"/> latest scheduled.
+        /// </summary>
+        Task<NotificationCandidatePage> GetNoVendorAsync(
+            NotificationFeedScope scope, DateTime cutoff, int limit, CancellationToken cancellationToken);
+    }
+}
diff --git a/SeaHaven.DataServices/Interfaces/IVendorOperationsDataService.cs b/SeaHaven.DataServices/Interfaces/IVendorOperationsDataService.cs
index b8c71c1..48e3105 100644
--- a/SeaHaven.DataServices/Interfaces/IVendorOperationsDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IVendorOperationsDataService.cs
@@ -8,6 +8,8 @@ namespace SeaHaven.DataServices.Interfaces
         Task<IReadOnlyList<int>> GetAssignedWorkOrderIdsAsync(CancellationToken cancellationToken);
         Task<IReadOnlyList<NoVendorCandidateReadModel>> GetNoVendorWorkOrdersAsync(DateTime cutoff, IReadOnlyCollection<int> excludeIds, CancellationToken cancellationToken);
         Task<IReadOnlyList<ScheduledDispatchReadModel>> GetActiveScheduledDispatchesAsync(CancellationToken cancellationToken);
+        /// <summary>Same windows limited to work orders of <paramref name="accountId"/>; null is org-wide.</summary>
+        Task<IReadOnlyList<ScheduledDispatchReadModel>> GetActiveScheduledDispatchesAsync(int? accountId, CancellationToken cancellationToken);
         Task<IReadOnlyList<ActiveVendorReadModel>> GetActiveVendorsAsync(CancellationToken cancellationToken);
         Task<IReadOnlyList<SitePreferredVendor>> GetSitePreferredVendorsAsync(int locationId, CancellationToken cancellationToken);
         Task<List<SitePreferredVendor>> GetSitePreferredVendorsForReplaceAsync(int locationId, CancellationToken cancellationToken);
diff --git a/SeaHaven.DataServices/Models/NotificationFeedReadModels.cs b/SeaHaven.DataServices/Models/NotificationFeedReadModels.cs
new file mode 100644
index 0000000..9d6f0ae
--- /dev/null
+++ b/SeaHaven.DataServices/Models/NotificationFeedReadModels.cs
@@ -0,0 +1,27 @@
+namespace SeaHaven.DataServices.Models;
+
+/// <summary>
+/// Server-derived feed scope. <see cref="AccountId"/> null is org-wide;
+/// <see cref="DispatcherId"/> null means every dispatcher's work orders.
+/// </summary>
+public sealed record NotificationFeedScope(int? AccountId, string? DispatcherId);
+
+public sealed class UnassignedWorkOrdersSummary
+{
+    public int Count { get; init; }
+    public DateTime? LatestCreatedAt { get; init; }
+}
+
+public sealed class NotificationWorkOrderCandidate
+{
+    public int Id { get; init; }
+    public string? Number { get; init; }
+    public DateTime ScheduledDate { get; init; }
+}
+
+/// <summary>A bounded slice of candidates plus the unbounded total they were taken from.</summary>
+public sealed class NotificationCandidatePage
+{
+    public int Total { get; init; }
+    public IReadOnlyList<NotificationWorkOrderCandidate> Items { get; init; } = Array.Empty<NotificationWorkOrderCandidate>();
+}
diff --git a/SeaHaven.DataServices/Models/VendorOperationsReadModels.cs b/SeaHaven.DataServices/Models/VendorOperationsReadModels.cs
index 2eb630e..ef0baf5 100644
--- a/SeaHaven.DataServices/Models/VendorOperationsReadModels.cs
+++ b/SeaHaven.DataServices/Models/VendorOperationsReadModels.cs
@@ -7,6 +7,7 @@ public sealed class ScheduledDispatchReadModel
     public string? VendorName { get; set; }
     public int WorkOrderId { get; set; }
     public string? WorkOrderNumber { get; set; }
+    public string? AssignTo { get; set; }
     public DateTime Start { get; set; }
     public DateTime End { get; set; }
 }
diff --git a/SeaHaven.Services/DTOs/NotificationFeedDTOs.cs b/SeaHaven.Services/DTOs/NotificationFeedDTOs.cs
new file mode 100644
index 0000000..d6aacc7
--- /dev/null
+++ b/SeaHaven.Services/DTOs/NotificationFeedDTOs.cs
@@ -0,0 +1,131 @@
+namespace SeaHaven.Services.DTOs
+{
+    /// <summary>
+    /// Feed reasons in their fixed tie-break order. Every reason the Notification Center
+    /// can show is listed here so a new producer only adds items, never a contract change.
+    /// </summary>
+    public static class NotificationReasons
+    {
+        public const string SeverityCritical = "severity-critical";
+        public const string Sla = "sla";
+        public const string Mentions = "mentions";
+        public const string Unassigned = "unassigned";
+        public const string DueSoon = "due-soon";
+        public const string NoVendor = "no-vendor";
+        public const string AvetaMissing = "aveta-missing";
+        public const string Activity = "activity";
+        public const string VendorConflict = "vendor-conflict";
+
+        public static readonly IReadOnlyList<string> Order = new[]
+        {
+            SeverityCritical, Sla, Mentions, Unassigned, DueSoon, NoVendor, AvetaMissing, Activity, VendorConflict
+        };
+
+        public static readonly IReadOnlyDictionary<string, string> Labels = new Dictionary<string, string>
+        {
+            [SeverityCritical] = "Critical severity",
+            [Sla] = "SLA at Risk",
+            [Mentions] = "Mentions",
+            [Unassigned] = "Unassigned",
+            [DueSoon] = "Due Soon",
+            [NoVendor] = "No Vendor",
+            [AvetaMissing] = "Aveta Missing",
+            [Activity] = "Recent activity",
+            [VendorConflict] = "Vendor Conflict"
+        };
+    }
+
+    public static class NotificationSeverities
+    {
+        public const string Critical = "Critical";
+        public const string High = "High";
+        public const string Medium = "Medium";
+        public const string Low = "Low";
+
+        public static int Rank(string severity) => severity switch
+        {
+            Critical => 3,
+            High => 2,
+            Medium => 1,
+            _ => 0
+        };
+    }
+
+    /// <summary>
+    /// How a row leaves the feed. <see cref="Dismissable"/> rows are hidden client-side for the
+    /// session; <see cref="Acknowledge"/> rows (a missed response deadline) are excluded from
+    /// dismiss and dismiss-all and leave only through their own acknowledge action.
+    /// </summary>
+    public static class NotificationRowTypes
+    {
+        public const string Dismissable = "dismissable";
+        public const string Acknowledge = "acknowledge";
+    }
+
+    public static class NotificationTargetKinds
+    {
+        public const string WorkOrder = "workOrder";
+        public const string Queue = "queue";
+    }
+
+    /// <summary>Named work-order queues a grouped item opens.</summary>
+    public static class NotificationQueues
+    {
+        public const string Unassigned = "unassigned";
+    }
+
+    /// <summary>Work-order detail tabs a single-work-order item can open on.</summary>
+    public static class NotificationWorkOrderTabs
+    {
+        public const string Info = "info";
+        public const string Comments = "comments";
+        public const string Extras = "extras";
+    }
+
+    public sealed class NotificationTargetDto
+    {
+        public string Kind { get; init; } = NotificationTargetKinds.WorkOrder;
+        public int? WorkOrderId { get; init; }
+        public string? Tab { get; init; }
+        public string? Queue { get; init; }
+    }
+
+    public sealed class NotificationWorkOrderRefDto
+    {
+        public int Id { get; init; }
+        public string? Number { get; init; }
+    }
+
+    public sealed class NotificationItemDto
+    {
+        /// <summary>Stable across reads while the condition holds; the client dismisses by it.</summary>
+        public string Id { get; init; } = "";
+        public string Reason { get; init; } = "";
+        public string Severity { get; init; } = NotificationSeverities.Low;
+        public string RowType { get; init; } = NotificationRowTypes.Dismissable;
+        public string Title { get; init; } = "";
+        /// <summary>Work orders this item represents.</summary>
+        public int Count { get; init; }
+        /// <summary>When the condition started; drives recency ordering.</summary>
+        public DateTime TriggeredAt { get; init; }
+        public NotificationTargetDto Target { get; init; } = new();
+        public IReadOnlyList<NotificationWorkOrderRefDto> WorkOrders { get; init; } = Array.Empty<NotificationWorkOrderRefDto>();
+    }
+
+    public sealed class NotificationSectionDto
+    {
+        public string Reason { get; init; } = "";
+        public string Label { get; init; } = "";
+        /// <summary>Highest item severity in the section.</summary>
+        public string Severity { get; init; } = NotificationSeverities.Low;
+        /// <summary>Work orders the whole section represents, including items beyond the returned slice.</summary>
+        public int Count { get; init; }
+        public IReadOnlyList<NotificationItemDto> Items { get; init; } = Array.Empty<NotificationItemDto>();
+    }
+
+    public sealed class NotificationFeedDto
+    {
+        public DateTime GeneratedAt { get; init; }
+        public IReadOnlyList<NotificationSectionDto> Sections { get; init; } = Array.Empty<NotificationSectionDto>();
+    }
+}
diff --git a/SeaHaven.Services/Helpers/NotificationFeedOrdering.cs b/SeaHaven.Services/Helpers/NotificationFeedOrdering.cs
new file mode 100644
index 0000000..85a285c
--- /dev/null
+++ b/SeaHaven.Services/Helpers/NotificationFeedOrdering.cs
@@ -0,0 +1,57 @@
+using SeaHaven.Services.DTOs;
+
+namespace SeaHaven.Services.Helpers
+{
+    public static class NotificationFeedOrdering
+    {
+        /// <summary>
+        /// Drops empty sections, orders items by severity then recency, and orders sections by
+        /// their highest severity with the fixed reason order breaking ties.
+        /// </summary>
+        public static IReadOnlyList<NotificationSectionDto> Order(
+            IEnumerable<(string Reason, int Count, IReadOnlyList<NotificationItemDto> Items)> sections)
+        {
+            return sections
+                .Where(section => section.Items.Count > 0)
+                .Select(section =>
+                {
+                    var items = section.Items
+                        .OrderByDescending(item => NotificationSeverities.Rank(item.Severity))
+                        .ThenByDescending(item => item.TriggeredAt)
+                        .ThenBy(item => item.Id, StringComparer.Ordinal)
+                        .ToList();
+                    return new NotificationSectionDto
+                    {
+                        Reason = section.Reason,
+                        Label = NotificationReasons.Labels[section.Reason],
+                        Severity = items[0].Severity,
+                        Count = section.Count,
+                        Items = items
+                    };
+                })
+                .OrderByDescending(section => NotificationSeverities.Rank(section.Severity))
+                .ThenBy(section => ReasonIndex(section.Reason))
+                .ToList();
+        }
+
+        private static int ReasonIndex(string reason)
+        {
+            for (var index = 0; index < NotificationReasons.Order.Count; index++)
+            {
+                if (NotificationReasons.Order[index] == reason)
+                    return index;
+            }
+            return NotificationReasons.Order.Count;
+        }
+    }
+
+    public static class NotificationBusinessTime
+    {
+        /// <summary>Business-calendar date of <paramref name="utcNow"/> in the dashboard's time zone.</summary>
+        public static DateOnly Today(DateTime utcNow)
+        {
+            var timezone = TimeZoneInfo.FindSystemTimeZoneById(DashboardBusinessTime.TimeZoneId);
+            return DateOnly.FromDateTime(TimeZoneInfo.ConvertTimeFromUtc(utcNow, timezone));
+        }
+    }
+}
diff --git a/SeaHaven.Services/Helpers/VendorConflictPairs.cs b/SeaHaven.Services/Helpers/VendorConflictPairs.cs
new file mode 100644
index 0000000..0adaf43
--- /dev/null
+++ b/SeaHaven.Services/Helpers/VendorConflictPairs.cs
@@ -0,0 +1,34 @@
+using SeaHaven.DataServices.Models;
+
+namespace SeaHaven.Services.Helpers
+{
+    public static class VendorConflictPairs
+    {
+        // Group by vendor so cross-vendor intervals are never compared, then sweep the
+        // start-sorted windows within a vendor. Every overlapping pair is still emitted;
+        // output is O(n log n + p) where p is the number of emitted pairs, so the worst
+        // case stays quadratic only when a single vendor has many mutually-overlapping
+        // windows, which is inherent to enumerating all such pairs.
+        public static IEnumerable<(ScheduledDispatchReadModel Left, ScheduledDispatchReadModel Right)> Build(
+            IReadOnlyList<ScheduledDispatchReadModel> dispatches)
+        {
+            foreach (var group in dispatches.GroupBy(dispatch => dispatch.VendorId))
+            {
+                var sorted = group.OrderBy(dispatch => dispatch.Start).ToList();
+                for (var leftIndex = 0; leftIndex < sorted.Count; leftIndex++)
+                {
+                    var left = sorted[leftIndex];
+                    for (var rightIndex = leftIndex + 1; rightIndex < sorted.Count; rightIndex++)
+                    {
+                        var right = sorted[rightIndex];
+                        // Sorted by start: once a window starts at or after left's end, none that follow can overlap it.
+                        if (right.Start >= left.End)
+                            break;
+                        if (left.WorkOrderId != right.WorkOrderId)
+                            yield return (left, right);
+                    }
+                }
+            }
+        }
+    }
+}
diff --git a/SeaHaven.Services/Implementation/NotificationFeedService.cs b/SeaHaven.Services/Implementation/NotificationFeedService.cs
new file mode 100644
index 0000000..84932e4
--- /dev/null
+++ b/SeaHaven.Services/Implementation/NotificationFeedService.cs
@@ -0,0 +1,180 @@
+using System.Security.Claims;
+using SeaHaven.DataServices.Interfaces;
+using SeaHaven.DataServices.Models;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Exceptions;
+using SeaHaven.Services.Helpers;
+using SeaHaven.Services.Interfaces;
+
+namespace SeaHaven.Services.Implementation
+{
+    public class NotificationFeedService : INotificationFeedService
+    {
+        /// <summary>Most items returned per per-work-order section; section counts stay exact.</summary>
+        public const int SectionItemLimit = 50;
+
+        private static readonly TimeSpan NoVendorLeadTime = TimeSpan.FromHours(48);
+
+        private readonly INotificationFeedDataService _data;
+        private readonly IVendorOperationsDataService _vendorData;
+        private readonly IWorkOrderAccountResolver _accountResolver;
+        private readonly TimeProvider _timeProvider;
+
+        public NotificationFeedService(
+            INotificationFeedDataService data,
+            IVendorOperationsDataService vendorData,
+            IWorkOrderAccountResolver accountResolver,
+            TimeProvider timeProvider)
+        {
+            _data = data;
+            _vendorData = vendorData;
+            _accountResolver = accountResolver;
+            _timeProvider = timeProvider;
+        }
+
+        public async Task<NotificationFeedDto> GetFeedAsync(ClaimsPrincipal user, CancellationToken cancellationToken)
+        {
+            var accountId = _accountResolver.ResolveAccountFilter(user);
+            var (dispatcherId, seesUnassigned) = ResolveAudience(user);
+            var scope = new NotificationFeedScope(accountId, dispatcherId);
+            var now = _timeProvider.GetUtcNow().UtcDateTime;
+
+            var sections = new List<(string Reason, int Count, IReadOnlyList<NotificationItemDto> Items)>();
+            if (seesUnassigned)
+                sections.Add(await UnassignedAsync(accountId, now, cancellationToken));
+            sections.Add(await NoVendorAsync(scope, now, cancellationToken));
+            sections.Add(await AvetaMissingAsync(scope, now, cancellationToken));
+            sections.Add(await VendorConflictsAsync(scope, cancellationToken));
+
+            return new NotificationFeedDto
+            {
+                GeneratedAt = now,
+                Sections = NotificationFeedOrdering.Order(sections)
+            };
+        }
+
+        // Dispatchers see their own work orders. Roles that already see every dispatcher's
+        // work on the dashboard see the whole account, including work nobody owns yet.
+        private static (string? DispatcherId, bool SeesUnassigned) ResolveAudience(ClaimsPrincipal user)
+        {
+            if (user.IsInRole("Dispatcher"))
+            {
+                var dispatcherId = user.FindFirstValue(ClaimTypes.NameIdentifier);
+                if (string.IsNullOrWhiteSpace(dispatcherId))
+                    throw new WorkOrderBoardValidationException("Forbidden", "Dispatcher identity is required.");
+                return (dispatcherId, false);
+            }
+
+            if (user.IsInRole("Admin") || user.IsInRole("Manager") || user.IsInRole("Scheduler"))
+                return (null, true);
+
+            throw new WorkOrderBoardValidationException("Forbidden", "Notifications require an authorized role.");
+        }
+
+        private async Task<(string, int, IReadOnlyList<NotificationItemDto>)> UnassignedAsync(
+            int? accountId, DateTime now, CancellationToken cancellationToken)
+        {
+            var summary = await _data.GetUnassignedSummaryAsync(accountId, cancellationToken);
+            if (summary.Count == 0)
+                return (NotificationReasons.Unassigned, 0, Array.Empty<NotificationItemDto>());
+
+            var item = new NotificationItemDto
+            {
+                Id = NotificationReasons.Unassigned,
+                Reason = NotificationReasons.Unassigned,
+                Severity = NotificationSeverities.High,
+                Title = summary.Count == 1
+                    ? "1 work order is unassigned"
+                    : $"{summary.Count} work orders are unassigned",
+                Count = summary.Count,
+                TriggeredAt = summary.LatestCreatedAt ?? now,
+                Target = new NotificationTargetDto
+                {
+                    Kind = NotificationTargetKinds.Queue,
+                    Queue = NotificationQueues.Unassigned
+                }
+            };
+            return (NotificationReasons.Unassigned, summary.Count, new[] { item });
+        }
+
+        private async Task<(string, int, IReadOnlyList<NotificationItemDto>)> NoVendorAsync(
+            NotificationFeedScope scope, DateTime now, CancellationToken cancellationToken)
+        {
+            var page = await _data.GetNoVendorAsync(scope, now.Add(NoVendorLeadTime), SectionItemLimit, cancellationToken);
+            var items = page.Items.Select(candidate => new NotificationItemDto
+            {
+                Id = $"no-vendor-{candidate.Id}",
+                Reason = NotificationReasons.NoVendor,
+                Severity = NotificationSeverities.Medium,
+                Title = $"{WorkOrderLabel(candidate.Id, candidate.Number)} starts within 48h with no vendor assigned",
+                Count = 1,
+                TriggeredAt = candidate.ScheduledDate.Subtract(NoVendorLeadTime),
+                Target = WorkOrderTarget(candidate.Id, NotificationWorkOrderTabs.Info),
+                WorkOrders = new[] { new NotificationWorkOrderRefDto { Id = candidate.Id, Number = candidate.Number } }
+            }).ToList();
+            return (NotificationReasons.NoVendor, page.Total, items);
+        }
+
+        private async Task<(string, int, IReadOnlyList<NotificationItemDto>)> AvetaMissingAsync(
+            NotificationFeedScope scope, DateTime now, CancellationToken cancellationToken)
+        {
+            var today = NotificationBusinessTime.Today(now);
+            var page = await _data.GetAvetaMissingAsync(scope, today, SectionItemLimit, cancellationToken);
+            var items = page.Items.Select(candidate => new NotificationItemDto
+            {
+                Id = $"aveta-missing-{candidate.Id}",
+                Reason = NotificationReasons.AvetaMissing,
+                Severity = NotificationSeverities.Medium,
+                Title = $"{WorkOrderLabel(candidate.Id, candidate.Number)} is missing the Aveta document",
+                Count = 1,
+                // The one-day window opens the day before the scheduled date.
+                TriggeredAt = candidate.ScheduledDate.Date.AddDays(-1),
+                Target = WorkOrderTarget(candidate.Id, NotificationWorkOrderTabs.Extras),
+                WorkOrders = new[] { new NotificationWorkOrderRefDto { Id = candidate.Id, Number = candidate.Number } }
+            }).ToList();
+            return (NotificationReasons.AvetaMissing, page.Total, items);
+        }
+
+        private async Task<(string, int, IReadOnlyList<NotificationItemDto>)> VendorConflictsAsync(
+            NotificationFeedScope scope, CancellationToken cancellationToken)
+        {
+            var dispatches = await _vendorData.GetActiveScheduledDispatchesAsync(scope.AccountId, cancellationToken);
+            var pairs = VendorConflictPairs.Build(dispatches)
+                .Where(pair => scope.DispatcherId == null
+                    || pair.Left.AssignTo == scope.DispatcherId
+                    || pair.Right.AssignTo == scope.DispatcherId)
+                .ToList();
+            var workOrderCount = pairs
+                .SelectMany(pair => new[] { pair.Left.WorkOrderId, pair.Right.WorkOrderId })
+                .Distinct()
+                .Count();
+
+            var items = pairs.Take(SectionItemLimit).Select(pair => new NotificationItemDto
+            {
+                Id = $"vendor-conflict-{pair.Left.Id}-{pair.Right.Id}",
+                Reason = NotificationReasons.VendorConflict,
+                Severity = NotificationSeverities.Medium,
+                Title = $"{(string.IsNullOrWhiteSpace(pair.Left.VendorName) ? "Vendor" : pair.Left.VendorName)} has overlapping appointments",
+                Count = 2,
+                TriggeredAt = pair.Left.Start < pair.Right.Start ? pair.Left.Start : pair.Right.Start,
+                Target = WorkOrderTarget(pair.Left.WorkOrderId, NotificationWorkOrderTabs.Info),
+                WorkOrders = new[]
+                {
+                    new NotificationWorkOrderRefDto { Id = pair.Left.WorkOrderId, Number = pair.Left.WorkOrderNumber },
+                    new NotificationWorkOrderRefDto { Id = pair.Right.WorkOrderId, Number = pair.Right.WorkOrderNumber }
+                }
+            }).ToList();
+            return (NotificationReasons.VendorConflict, workOrderCount, items);
+        }
+
+        private static NotificationTargetDto WorkOrderTarget(int workOrderId, string tab) => new()
+        {
+            Kind = NotificationTargetKinds.WorkOrder,
+            WorkOrderId = workOrderId,
+            Tab = tab
+        };
+
+        private static string WorkOrderLabel(int id, string? number)
+            => $"WO #{(string.IsNullOrWhiteSpace(number) ? id.ToString() : number)}";
+    }
+}
diff --git a/SeaHaven.Services/Implementation/VendorOperationsService.cs b/SeaHaven.Services/Implementation/VendorOperationsService.cs
index 92d5779..11efd04 100644
--- a/SeaHaven.Services/Implementation/VendorOperationsService.cs
+++ b/SeaHaven.Services/Implementation/VendorOperationsService.cs
@@ -3,6 +3,7 @@ using Data.SeaHavenIndustries.Enums;
 using SeaHaven.DataServices.Interfaces;
 using SeaHaven.DataServices.Models;
 using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Helpers;
 using SeaHaven.Services.Interfaces;
 
 namespace SeaHaven.Services.Implementation
@@ -433,32 +434,9 @@ namespace SeaHaven.Services.Implementation
                 .ToList();
         }
 
-        // Group by vendor so cross-vendor intervals are never compared, then sweep the
-        // start-sorted windows within a vendor. Every overlapping pair is still emitted;
-        // output is O(n log n + p) where p is the number of emitted pairs, so the worst
-        // case stays quadratic only when a single vendor has many mutually-overlapping
-        // windows, which is inherent to enumerating all such pairs.
         private static IEnumerable<(ScheduledDispatchReadModel Left, ScheduledDispatchReadModel Right)> BuildConflictPairs(
             IReadOnlyList<ScheduledDispatchReadModel> dispatches)
-        {
-            foreach (var group in dispatches.GroupBy(dispatch => dispatch.VendorId))
-            {
-                var sorted = group.OrderBy(dispatch => dispatch.Start).ToList();
-                for (var leftIndex = 0; leftIndex < sorted.Count; leftIndex++)
-                {
-                    var left = sorted[leftIndex];
-                    for (var rightIndex = leftIndex + 1; rightIndex < sorted.Count; rightIndex++)
-                    {
-                        var right = sorted[rightIndex];
-                        // Sorted by start: once a window starts at or after left's end, none that follow can overlap it.
-                        if (right.Start >= left.End)
-                            break;
-                        if (left.WorkOrderId != right.WorkOrderId)
-                            yield return (left, right);
-                    }
-                }
-            }
-        }
+            => VendorConflictPairs.Build(dispatches);
 
         private static bool WindowsOverlap(DateTime leftStart, DateTime leftEnd, DateTime rightStart, DateTime rightEnd)
             => leftStart < rightEnd && rightStart < leftEnd;
diff --git a/SeaHaven.Services/Interfaces/INotificationFeedService.cs b/SeaHaven.Services/Interfaces/INotificationFeedService.cs
new file mode 100644
index 0000000..46fe195
--- /dev/null
+++ b/SeaHaven.Services/Interfaces/INotificationFeedService.cs
@@ -0,0 +1,14 @@
+using System.Security.Claims;
+using SeaHaven.Services.DTOs;
+
+namespace SeaHaven.Services.Interfaces
+{
+    /// <summary>
+    /// Notification Center feed for the signed-in user: live conditions derived from current
+    /// work-order state at read time, account-scoped from claims and grouped by reason.
+    /// </summary>
+    public interface INotificationFeedService
+    {
+        Task<NotificationFeedDto> GetFeedAsync(ClaimsPrincipal user, CancellationToken cancellationToken);
+    }
+}

From fa979605b42aa5f2e6b1510b05fff8951844559c Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 18 Sep 2026 12:35:35 -0300
Subject: [PATCH 065/183] feat(uplifts): expose dispatcher, technician and
 schedule on queue read (SH-209)

The uplift detail modal needs the work order's assigned dispatcher, the
requesting vendor's technician and the scheduled date. They now resolve
from the same effective work order and vendor as the existing queue row,
so the modal no longer depends on a separate work-order fetch that
account-scoped staff cannot read.
---
 .../UpliftQueueReadTests.cs                   | 86 +++++++++++++++++++
 .../Models/VendorPortalReadModels.cs          |  6 ++
 .../Implementation/UpliftDataService.cs       | 12 +++
 SeaHaven.Services/DTOs/UpliftDTOs.cs          |  4 +
 .../Implementation/UpliftService.cs           |  3 +
 .../UpliftQueueReadRelationalTests.cs         | 85 ++++++++++++++++++
 6 files changed, 196 insertions(+)

diff --git a/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs b/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
index 84b86bc..78fe0ac 100644
--- a/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
+++ b/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
@@ -282,6 +282,92 @@ public sealed class UpliftQueueReadTests
         item.Status.Should().Be("Pending");
     }
 
+    [Fact]
+    public async Task List_MapsDetailModalWorkOrderContext_DispatcherTechnicianAndScheduledDate()
+    {
+        using var context = NewContext();
+        var (vendor, workOrder) = await SeedWorkOrderAsync(context, "WO-81", "SITE-N", "Plumbing");
+        vendor.ContactName = "  Tom Tech ";
+        workOrder.ScheduledDate = new DateTime(2026, 4, 10, 9, 30, 0);
+        workOrder.AssignTo = "dispatcher-1";
+        context.Users.Add(new ApplicationUser { Id = "dispatcher-1", FirstName = "Dana", LastName = "Ruiz" });
+        var dispatch = await SeedDispatchAsync(context, vendor, workOrder, "DIS-81");
+        context.DispatchUpliftRequests.Add(Request(dispatch, "Pending", new DateTime(2026, 4, 1)));
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        var result = await service.ListAsync(UserWithRoles("Approver"), "Pending", null, 1, 25, CancellationToken.None);
+
+        var item = result.Items.Should().ContainSingle().Subject;
+        item.WorkOrderScheduledDate.Should().Be(new DateTime(2026, 4, 10, 9, 30, 0));
+        item.WorkOrderDispatcherName.Should().Be("Dana Ruiz");
+        item.TechnicianName.Should().Be("Tom Tech");
+        item.VendorCompanyName.Should().Be("Gateway");
+    }
+
+    [Fact]
+    public async Task List_DetailModalWorkOrderContext_IsNullForUnassignedUnscheduledWorkOrder()
+    {
+        using var context = NewContext();
+        var (vendor, workOrder) = await SeedWorkOrderAsync(context, "WO-82", "SITE-N", "Plumbing");
+        var dispatch = await SeedDispatchAsync(context, vendor, workOrder, "DIS-82");
+        context.DispatchUpliftRequests.Add(Request(dispatch, "Pending", new DateTime(2026, 4, 1)));
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        var result = await service.ListAsync(UserWithRoles("Approver"), "Pending", null, 1, 25, CancellationToken.None);
+
+        var item = result.Items.Should().ContainSingle().Subject;
+        item.WorkOrderScheduledDate.Should().BeNull();
+        item.WorkOrderDispatcherName.Should().BeNull();
+        item.TechnicianName.Should().BeNull();
+    }
+
+    [Fact]
+    public async Task List_DetailModalWorkOrderContext_NeverCrossesAccounts()
+    {
+        // Two tenants' work orders sit side by side. Each queue row must carry the
+        // dispatcher, technician and schedule of its own work order and vendor only;
+        // another account's work order never supplies them.
+        using var context = NewContext();
+        var accountA = new Accounts { Name = "Account A" };
+        var accountB = new Accounts { Name = "Account B" };
+        context.AddRange(accountA, accountB);
+        context.Users.AddRange(
+            new ApplicationUser { Id = "dispatcher-a", FirstName = "Ann", LastName = "Alpha" },
+            new ApplicationUser { Id = "dispatcher-b", FirstName = "Ben", LastName = "Beta" });
+        await context.SaveChangesAsync();
+
+        var (vendorA, workOrderA) = await SeedWorkOrderAsync(context, "WO-A", "SITE-A", "HVAC", "Vendor A");
+        vendorA.ContactName = "Tech A";
+        workOrderA.AccountId = accountA.Id;
+        workOrderA.AssignTo = "dispatcher-a";
+        workOrderA.ScheduledDate = new DateTime(2026, 5, 1);
+        var (vendorB, workOrderB) = await SeedWorkOrderAsync(context, "WO-B", "SITE-B", "Roofing", "Vendor B");
+        vendorB.ContactName = "Tech B";
+        workOrderB.AccountId = accountB.Id;
+        workOrderB.AssignTo = "dispatcher-b";
+        workOrderB.ScheduledDate = new DateTime(2026, 6, 1);
+        var dispatchA = await SeedDispatchAsync(context, vendorA, workOrderA, "DIS-A");
+        var dispatchB = await SeedDispatchAsync(context, vendorB, workOrderB, "DIS-B");
+        context.DispatchUpliftRequests.AddRange(
+            Request(dispatchA, "Pending", new DateTime(2026, 4, 1)),
+            Request(dispatchB, "Pending", new DateTime(2026, 4, 2)));
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        var result = await service.ListAsync(UserWithRoles("Approver"), "Pending", null, 1, 25, CancellationToken.None);
+
+        var rowA = result.Items.Should().ContainSingle(i => i.WorkOrderId == workOrderA.Id).Subject;
+        rowA.WorkOrderDispatcherName.Should().Be("Ann Alpha");
+        rowA.TechnicianName.Should().Be("Tech A");
+        rowA.WorkOrderScheduledDate.Should().Be(new DateTime(2026, 5, 1));
+        var rowB = result.Items.Should().ContainSingle(i => i.WorkOrderId == workOrderB.Id).Subject;
+        rowB.WorkOrderDispatcherName.Should().Be("Ben Beta");
+        rowB.TechnicianName.Should().Be("Tech B");
+        rowB.WorkOrderScheduledDate.Should().Be(new DateTime(2026, 6, 1));
+    }
+
     [Fact]
     public async Task List_ResolvesWorkOrderContext_ForDispatchLinkedOnlyThroughDispatchWorkOrders()
     {
diff --git a/Data.SeaHavenIndustries/Models/VendorPortalReadModels.cs b/Data.SeaHavenIndustries/Models/VendorPortalReadModels.cs
index 885419d..031cf01 100644
--- a/Data.SeaHavenIndustries/Models/VendorPortalReadModels.cs
+++ b/Data.SeaHavenIndustries/Models/VendorPortalReadModels.cs
@@ -85,6 +85,12 @@ namespace Data.SeaHavenIndustries
         public string? WorkOrderNumber { get; set; }
         public string? WorkOrderSiteCode { get; set; }
         public string? WorkOrderService { get; set; }
+        // SH-209: detail modal context, resolved from the same effective work order
+        // and the requesting dispatch's vendor.
+        public DateTime? WorkOrderScheduledDate { get; set; }
+        public string? WorkOrderDispatcherFirstName { get; set; }
+        public string? WorkOrderDispatcherLastName { get; set; }
+        public string? TechnicianName { get; set; }
         public bool WorkOrderClosed { get; set; }
         public int AttachmentCount { get; set; }
         public string? RequestedByVendorName { get; set; }
diff --git a/SeaHaven.DataServices/Implementation/UpliftDataService.cs b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
index 788c754..7db6a01 100644
--- a/SeaHaven.DataServices/Implementation/UpliftDataService.cs
+++ b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
@@ -79,6 +79,18 @@ namespace SeaHaven.DataServices.Implementation
                     WorkOrderNumber = x.workOrder != null ? x.workOrder.InternalWONumber : null,
                     WorkOrderSiteCode = x.workOrder != null ? x.workOrder.SiteCode : null,
                     WorkOrderService = x.workOrder != null ? x.workOrder.Service : null,
+                    // SH-209: the detail modal reads its work-order context from this row,
+                    // so it never depends on a separate work-order fetch. Technician
+                    // follows the board convention (vendor contact) for the requesting
+                    // dispatch's vendor, the same vendor as VendorCompanyName.
+                    WorkOrderScheduledDate = x.workOrder != null ? x.workOrder.ScheduledDate : null,
+                    WorkOrderDispatcherFirstName = x.workOrder != null && x.workOrder.AssignToUser != null
+                        ? x.workOrder.AssignToUser.FirstName
+                        : null,
+                    WorkOrderDispatcherLastName = x.workOrder != null && x.workOrder.AssignToUser != null
+                        ? x.workOrder.AssignToUser.LastName
+                        : null,
+                    TechnicianName = x.v != null ? x.v.ContactName : null,
                     // SH-208: a work order is closed for uplift decisions once its
                     // lifecycle reaches a terminal state; mirrors the SH-196 revoke guard.
                     WorkOrderClosed = x.workOrder != null
diff --git a/SeaHaven.Services/DTOs/UpliftDTOs.cs b/SeaHaven.Services/DTOs/UpliftDTOs.cs
index b2b8544..24cde20 100644
--- a/SeaHaven.Services/DTOs/UpliftDTOs.cs
+++ b/SeaHaven.Services/DTOs/UpliftDTOs.cs
@@ -12,6 +12,10 @@ namespace SeaHaven.Services.DTOs
         public string? WorkOrderNumber { get; set; }
         public string? WorkOrderSite { get; set; }
         public string? WorkOrderService { get; set; }
+        // SH-209: detail modal work-order context.
+        public DateTime? WorkOrderScheduledDate { get; set; }
+        public string? WorkOrderDispatcherName { get; set; }
+        public string? TechnicianName { get; set; }
         public string? RequestedByName { get; set; }
         public string? DecidedByName { get; set; }
         public decimal? CurrentNTE { get; set; }
diff --git a/SeaHaven.Services/Implementation/UpliftService.cs b/SeaHaven.Services/Implementation/UpliftService.cs
index 5144563..5459c36 100644
--- a/SeaHaven.Services/Implementation/UpliftService.cs
+++ b/SeaHaven.Services/Implementation/UpliftService.cs
@@ -49,6 +49,9 @@ namespace SeaHaven.Services.Implementation
                 WorkOrderNumber = r.WorkOrderNumber,
                 WorkOrderSite = r.WorkOrderSiteCode,
                 WorkOrderService = r.WorkOrderService,
+                WorkOrderScheduledDate = r.WorkOrderScheduledDate,
+                WorkOrderDispatcherName = ResolveRequestedByName(null, r.WorkOrderDispatcherFirstName, r.WorkOrderDispatcherLastName),
+                TechnicianName = string.IsNullOrWhiteSpace(r.TechnicianName) ? null : r.TechnicianName.Trim(),
                 RequestedByName = ResolveRequestedByName(r.RequestedByVendorName, r.RequestedByFirstName, r.RequestedByLastName),
                 DecidedByName = ResolveRequestedByName(null, r.DecidedByFirstName, r.DecidedByLastName),
                 CurrentNTE = r.CurrentNTE,
diff --git a/SeaHavenIndustries.Tests/UpliftQueueReadRelationalTests.cs b/SeaHavenIndustries.Tests/UpliftQueueReadRelationalTests.cs
index 6fdc8e2..d9f2cce 100644
--- a/SeaHavenIndustries.Tests/UpliftQueueReadRelationalTests.cs
+++ b/SeaHavenIndustries.Tests/UpliftQueueReadRelationalTests.cs
@@ -80,6 +80,91 @@ public sealed class UpliftQueueReadRelationalTests
         Assert.True(item.WorkOrderClosed);
     }
 
+    [Fact]
+    public async Task GetPagedAsync_ResolvesDetailModalContext_PerAccountWorkOrder()
+    {
+        // SH-209: dispatcher (work-order assignee navigation), technician (vendor
+        // contact) and scheduled date must translate to SQL through the effective
+        // work-order subquery, and each row resolves them from its own account's
+        // work order only.
+        await using var connection = new SqliteConnection("DataSource=:memory:");
+        await connection.OpenAsync();
+
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseSqlite(connection)
+            .Options;
+
+        await using var context = new SqliteUpliftTestDbContext(options);
+        await context.Database.EnsureCreatedAsync();
+
+        var accountA = new Accounts { Name = "Account A" };
+        var accountB = new Accounts { Name = "Account B" };
+        var dispatcherA = new ApplicationUser { Id = "dispatcher-a", FirstName = "Ann", LastName = "Alpha" };
+        var vendorA = new Vendor { CompanyName = "Vendor A", ContactName = "Tech A", IsActive = true };
+        var vendorB = new Vendor { CompanyName = "Vendor B", ContactName = "Tech B", IsActive = true };
+        context.AddRange(accountA, accountB, dispatcherA, vendorA, vendorB);
+        await context.SaveChangesAsync();
+
+        var workOrderA = new WorkOrder
+        {
+            InternalWONumber = "WO-A",
+            WorkerOrderTitle = "Repair",
+            AccountId = accountA.Id,
+            AssignTo = dispatcherA.Id,
+            ScheduledDate = new DateTime(2026, 5, 1, 8, 0, 0)
+        };
+        var workOrderB = new WorkOrder
+        {
+            InternalWONumber = "WO-B",
+            WorkerOrderTitle = "Repair",
+            AccountId = accountB.Id
+        };
+        context.AddRange(workOrderA, workOrderB);
+        await context.SaveChangesAsync();
+
+        var dispatchA = new Dispatch { VendorId = vendorA.Id, WorkOrderId = workOrderA.Id, DispatchNumber = "DIS-A", Status = "Scheduled" };
+        var dispatchB = new Dispatch { VendorId = vendorB.Id, WorkOrderId = workOrderB.Id, DispatchNumber = "DIS-B", Status = "Scheduled" };
+        context.Dispatches.AddRange(dispatchA, dispatchB);
+        await context.SaveChangesAsync();
+
+        context.DispatchUpliftRequests.AddRange(
+            new DispatchUpliftRequest
+            {
+                DispatchId = dispatchA.Id,
+                Status = "Pending",
+                CreatedDate = new DateTime(2026, 4, 1),
+                RequiredTier = 1,
+                RequestedNTE = 100m,
+                NotificationStatus = "Pending"
+            },
+            new DispatchUpliftRequest
+            {
+                DispatchId = dispatchB.Id,
+                Status = "Pending",
+                CreatedDate = new DateTime(2026, 4, 2),
+                RequiredTier = 1,
+                RequestedNTE = 200m,
+                NotificationStatus = "Pending"
+            });
+        await context.SaveChangesAsync();
+
+        var data = new UpliftDataService(context);
+
+        var (total, items) = await data.GetPagedAsync("Pending", null, 1, 25, CancellationToken.None);
+
+        Assert.Equal(2, total);
+        var rowA = Assert.Single(items, i => i.WorkOrderId == workOrderA.Id);
+        Assert.Equal("Ann", rowA.WorkOrderDispatcherFirstName);
+        Assert.Equal("Alpha", rowA.WorkOrderDispatcherLastName);
+        Assert.Equal("Tech A", rowA.TechnicianName);
+        Assert.Equal(new DateTime(2026, 5, 1, 8, 0, 0), rowA.WorkOrderScheduledDate);
+        var rowB = Assert.Single(items, i => i.WorkOrderId == workOrderB.Id);
+        Assert.Null(rowB.WorkOrderDispatcherFirstName);
+        Assert.Null(rowB.WorkOrderDispatcherLastName);
+        Assert.Equal("Tech B", rowB.TechnicianName);
+        Assert.Null(rowB.WorkOrderScheduledDate);
+    }
+
     private sealed class SqliteUpliftTestDbContext : ApplicationDbContext
     {
         public SqliteUpliftTestDbContext(DbContextOptions<ApplicationDbContext> options)

From aad3facaf1faf1bb5975bff8e5ba9558168bcd59 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 18 Sep 2026 12:59:56 -0300
Subject: [PATCH 066/183] fix(notifications): ignore soft-deleted dispatches
 and cap conflicts by recency

No Vendor treated any non-terminal dispatch as an assigned vendor without
checking IsDeleted, so a soft-deleted dispatch hid the work order from both
No Vendor and Vendor Conflict (the conflict query already drops deleted
dispatches). GetNoVendorAsync and the vendor-reminder assigned-work-order rule
now skip soft-deleted dispatches, keeping the asserted parity between the feed
and the reminders.

Vendor Conflict applied the section cap in vendor-sweep order, so when overlaps
exceeded the limit newer conflicts could be dropped while Count still counted
every work order. VendorConflictsAsync now orders pairs by recency before the
cap, matching the other per-work-order sections.
---
 .../NotificationFeedServiceTests.cs           | 58 +++++++++++++++++++
 .../NotificationFeedDataService.cs            |  7 ++-
 .../VendorOperationsDataService.cs            |  5 +-
 .../Implementation/NotificationFeedService.cs |  9 ++-
 4 files changed, 75 insertions(+), 4 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/NotificationFeedServiceTests.cs b/Api.SeaHavenIndustries.Tests/NotificationFeedServiceTests.cs
index cb702a4..9e8910e 100644
--- a/Api.SeaHavenIndustries.Tests/NotificationFeedServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/NotificationFeedServiceTests.cs
@@ -301,6 +301,31 @@ public class NotificationFeedServiceTests
             .Should().BeEquivalentTo(reminderIds);
     }
 
+    [Fact]
+    public async Task NoVendor_TreatsSoftDeletedDispatchesAsNoVendor()
+    {
+        using var context = NewContext();
+        var deletedDirect = Open(1, "dispatcher-1", Now.AddHours(20), "NV-DEL-DIRECT");
+        var deletedLinked = Open(1, "dispatcher-1", Now.AddHours(22), "NV-DEL-LINKED");
+        context.workOrders.AddRange(deletedDirect, deletedLinked);
+        await context.SaveChangesAsync();
+        var vendor = new Vendor { CompanyName = "Removed", IsActive = true };
+        context.Vendors.Add(vendor);
+        await context.SaveChangesAsync();
+        var direct = new Dispatch { VendorId = vendor.Id, WorkOrderId = deletedDirect.Id, Status = "Sent", IsDeleted = true };
+        var linked = new Dispatch { VendorId = vendor.Id, WorkOrderId = deletedDirect.Id, Status = "Sent", IsDeleted = true };
+        context.Dispatches.AddRange(direct, linked);
+        await context.SaveChangesAsync();
+        context.DispatchWorkOrders.Add(new DispatchWorkOrder { DispatchId = linked.Id, WorkOrderId = deletedLinked.Id });
+        await context.SaveChangesAsync();
+
+        var feed = await NewService(context).GetFeedAsync(User(1, "Dispatcher", "dispatcher-1"), CancellationToken.None);
+
+        Section(feed, NotificationReasons.NoVendor).Items
+            .Select(item => item.WorkOrders.Single().Number)
+            .Should().BeEquivalentTo("NV-DEL-DIRECT", "NV-DEL-LINKED");
+    }
+
     [Fact]
     public async Task Sections_OrderBySeverityThenFixedReasonOrder_AndItemsBySeverityThenRecency()
     {
@@ -429,6 +454,39 @@ public class NotificationFeedServiceTests
         unrelated.Sections.Should().BeEmpty();
     }
 
+    [Fact]
+    public async Task VendorConflict_CapsByRecencyKeepingNewerOverlaps()
+    {
+        using var context = NewContext();
+        // One vendor whose older cluster produces more overlapping pairs than the cap, plus a
+        // single newer overlap. Build sweeps a vendor's windows in start order, so the newer pair
+        // is emitted last and is exactly what an unsorted Take(limit) would drop.
+        var oldStart = Now.AddDays(3);
+        var oldOrders = new List<WorkOrder>();
+        for (var index = 0; index < 11; index++)
+            oldOrders.Add(Open(1, "dispatcher-1", oldStart, $"OLD-{index}"));
+        var newerLeft = Open(1, "dispatcher-1", Now.AddDays(10), "NEW-A");
+        var newerRight = Open(1, "dispatcher-1", Now.AddDays(10), "NEW-B");
+        context.workOrders.AddRange(oldOrders);
+        context.workOrders.AddRange(newerLeft, newerRight);
+        await context.SaveChangesAsync();
+
+        var vendor = new Vendor { CompanyName = "Gateway", IsActive = true };
+        context.Vendors.Add(vendor);
+        await context.SaveChangesAsync();
+        foreach (var workOrder in oldOrders.Append(newerLeft).Append(newerRight))
+            context.Dispatches.Add(new Dispatch { VendorId = vendor.Id, WorkOrderId = workOrder.Id, Status = "Sent", ScheduledDate = workOrder.ScheduledDate });
+        await context.SaveChangesAsync();
+
+        var feed = await NewService(context).GetFeedAsync(User(1, "Scheduler"), CancellationToken.None);
+
+        var section = Section(feed, NotificationReasons.VendorConflict);
+        section.Items.Should().HaveCount(NotificationFeedService.SectionItemLimit);
+        section.Items.Should().Contain(item =>
+            item.WorkOrders.Any(workOrder => workOrder.Number == "NEW-A")
+            && item.WorkOrders.Any(workOrder => workOrder.Number == "NEW-B"));
+    }
+
     [Fact]
     public async Task PerWorkOrderSections_AreBoundedButCountEveryWorkOrder()
     {
diff --git a/SeaHaven.DataServices/Implementation/NotificationFeedDataService.cs b/SeaHaven.DataServices/Implementation/NotificationFeedDataService.cs
index 7741550..3bef86c 100644
--- a/SeaHaven.DataServices/Implementation/NotificationFeedDataService.cs
+++ b/SeaHaven.DataServices/Implementation/NotificationFeedDataService.cs
@@ -54,15 +54,18 @@ namespace SeaHaven.DataServices.Implementation
         public Task<NotificationCandidatePage> GetNoVendorAsync(
             NotificationFeedScope scope, DateTime cutoff, int limit, CancellationToken cancellationToken)
         {
-            // "Has a vendor" matches the vendor reminders: any non-terminal dispatch that
-            // points at the work order directly or links it through DispatchWorkOrders.
+            // "Has a vendor" matches the vendor reminders: any live non-terminal dispatch that
+            // points at the work order directly or links it through DispatchWorkOrders. Soft-deleted
+            // dispatches are ignored so a removed dispatch does not keep the row out of No Vendor.
             var candidates = OpenWorkOrders(scope)
                 .Where(w => w.ScheduledDate.HasValue
                     && w.ScheduledDate.Value <= cutoff
                     && !_context.Dispatches.Any(d => d.WorkOrderId == w.Id
+                        && (d.IsDeleted == null || d.IsDeleted == false)
                         && !TerminalDispatchStatuses.Contains(d.Status ?? ""))
                     && !_context.DispatchWorkOrders.Any(link => link.WorkOrderId == w.Id
                         && link.Dispatch != null
+                        && (link.Dispatch.IsDeleted == null || link.Dispatch.IsDeleted == false)
                         && !TerminalDispatchStatuses.Contains(link.Dispatch.Status ?? "")));
 
             return PageAsync(candidates, limit, cancellationToken);
diff --git a/SeaHaven.DataServices/Implementation/VendorOperationsDataService.cs b/SeaHaven.DataServices/Implementation/VendorOperationsDataService.cs
index 0468f43..4fabfba 100644
--- a/SeaHaven.DataServices/Implementation/VendorOperationsDataService.cs
+++ b/SeaHaven.DataServices/Implementation/VendorOperationsDataService.cs
@@ -23,12 +23,15 @@ namespace SeaHaven.DataServices.Implementation
         {
             var directlyAssignedIds = await _context.Dispatches
                 .AsNoTracking()
-                .Where(d => !TerminalDispatchStatuses.Contains(d.Status ?? "") && d.WorkOrderId.HasValue)
+                .Where(d => !TerminalDispatchStatuses.Contains(d.Status ?? "")
+                    && (d.IsDeleted == null || d.IsDeleted == false)
+                    && d.WorkOrderId.HasValue)
                 .Select(d => d.WorkOrderId!.Value)
                 .ToListAsync(cancellationToken);
             var multiplyAssignedIds = await _context.DispatchWorkOrders
                 .AsNoTracking()
                 .Where(link => link.Dispatch != null
+                    && (link.Dispatch.IsDeleted == null || link.Dispatch.IsDeleted == false)
                     && !TerminalDispatchStatuses.Contains(link.Dispatch.Status ?? ""))
                 .Select(link => link.WorkOrderId)
                 .ToListAsync(cancellationToken);
diff --git a/SeaHaven.Services/Implementation/NotificationFeedService.cs b/SeaHaven.Services/Implementation/NotificationFeedService.cs
index 84932e4..2051e77 100644
--- a/SeaHaven.Services/Implementation/NotificationFeedService.cs
+++ b/SeaHaven.Services/Implementation/NotificationFeedService.cs
@@ -149,7 +149,14 @@ namespace SeaHaven.Services.Implementation
                 .Distinct()
                 .Count();
 
-            var items = pairs.Take(SectionItemLimit).Select(pair => new NotificationItemDto
+            // Cap by recency like the other sections: keep the newest overlaps so a section that
+            // exceeds the limit never drops a more recent conflict in favour of an older one.
+            var items = pairs
+                .OrderByDescending(pair => pair.Left.Start < pair.Right.Start ? pair.Left.Start : pair.Right.Start)
+                .ThenByDescending(pair => pair.Left.Id)
+                .ThenByDescending(pair => pair.Right.Id)
+                .Take(SectionItemLimit)
+                .Select(pair => new NotificationItemDto
             {
                 Id = $"vendor-conflict-{pair.Left.Id}-{pair.Right.Id}",
                 Reason = NotificationReasons.VendorConflict,

From c9fa4a49af20a836aae3fd45c3ce0e10f9c2f77c Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 18 Sep 2026 13:09:46 -0300
Subject: [PATCH 067/183] style(notifications): fix object initializer
 indentation in NotificationFeedService

---
 .../Implementation/NotificationFeedService.cs | 20 +++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/SeaHaven.Services/Implementation/NotificationFeedService.cs b/SeaHaven.Services/Implementation/NotificationFeedService.cs
index 2051e77..e66c82d 100644
--- a/SeaHaven.Services/Implementation/NotificationFeedService.cs
+++ b/SeaHaven.Services/Implementation/NotificationFeedService.cs
@@ -157,20 +157,20 @@ namespace SeaHaven.Services.Implementation
                 .ThenByDescending(pair => pair.Right.Id)
                 .Take(SectionItemLimit)
                 .Select(pair => new NotificationItemDto
-            {
-                Id = $"vendor-conflict-{pair.Left.Id}-{pair.Right.Id}",
-                Reason = NotificationReasons.VendorConflict,
-                Severity = NotificationSeverities.Medium,
-                Title = $"{(string.IsNullOrWhiteSpace(pair.Left.VendorName) ? "Vendor" : pair.Left.VendorName)} has overlapping appointments",
-                Count = 2,
-                TriggeredAt = pair.Left.Start < pair.Right.Start ? pair.Left.Start : pair.Right.Start,
-                Target = WorkOrderTarget(pair.Left.WorkOrderId, NotificationWorkOrderTabs.Info),
-                WorkOrders = new[]
+                {
+                    Id = $"vendor-conflict-{pair.Left.Id}-{pair.Right.Id}",
+                    Reason = NotificationReasons.VendorConflict,
+                    Severity = NotificationSeverities.Medium,
+                    Title = $"{(string.IsNullOrWhiteSpace(pair.Left.VendorName) ? "Vendor" : pair.Left.VendorName)} has overlapping appointments",
+                    Count = 2,
+                    TriggeredAt = pair.Left.Start < pair.Right.Start ? pair.Left.Start : pair.Right.Start,
+                    Target = WorkOrderTarget(pair.Left.WorkOrderId, NotificationWorkOrderTabs.Info),
+                    WorkOrders = new[]
                 {
                     new NotificationWorkOrderRefDto { Id = pair.Left.WorkOrderId, Number = pair.Left.WorkOrderNumber },
                     new NotificationWorkOrderRefDto { Id = pair.Right.WorkOrderId, Number = pair.Right.WorkOrderNumber }
                 }
-            }).ToList();
+                }).ToList();
             return (NotificationReasons.VendorConflict, workOrderCount, items);
         }
 

From e668e13912d65382442ff0abfda02259af475bba Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 18 Sep 2026 13:15:33 -0300
Subject: [PATCH 068/183] feat(notifications): feed assignments, comments,
 mentions and uplift decisions to the user they concern

Adds the personal producers behind GET /api/notifications without changing its shape:
new assignments (SH-288), unanswered comments on work the user takes part in (SH-289),
@mentions, and decisions on uplifts the user requested (SH-215).
---
 .../NotificationActivityFeedTests.cs          | 452 ++++++++++++++++++
 .../NotificationFeedDataService.cs            | 117 ++++-
 .../INotificationFeedDataService.cs           |  23 +
 .../Models/NotificationFeedReadModels.cs      |  39 ++
 .../DTOs/NotificationFeedDTOs.cs              |   3 +
 .../Helpers/NotificationActivityItems.cs      | 220 +++++++++
 .../Implementation/NotificationFeedService.cs |  51 +-
 7 files changed, 901 insertions(+), 4 deletions(-)
 create mode 100644 Api.SeaHavenIndustries.Tests/NotificationActivityFeedTests.cs
 create mode 100644 SeaHaven.Services/Helpers/NotificationActivityItems.cs

diff --git a/Api.SeaHavenIndustries.Tests/NotificationActivityFeedTests.cs b/Api.SeaHavenIndustries.Tests/NotificationActivityFeedTests.cs
new file mode 100644
index 0000000..e81c349
--- /dev/null
+++ b/Api.SeaHavenIndustries.Tests/NotificationActivityFeedTests.cs
@@ -0,0 +1,452 @@
+using System.Security.Claims;
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using FluentAssertions;
+using Microsoft.EntityFrameworkCore;
+using SeaHaven.DataServices.Implementation;
+using SeaHaven.DataServices.Models;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Helpers;
+using SeaHaven.Services.Implementation;
+using Xunit;
+
+namespace Api.SeaHavenIndustries.Tests;
+
+/// <summary>
+/// Items addressed to the signed-in user: new assignments (SH-288), comments (SH-289),
+/// mentions, and decisions on their uplift requests (SH-215).
+/// </summary>
+public class NotificationActivityFeedTests
+{
+    private static readonly DateTime Now = new(2026, 9, 18, 16, 0, 0, DateTimeKind.Utc);
+    private const string Me = "dispatcher-me";
+    private const string Other = "dispatcher-other";
+    private const string Admin = "admin-1";
+
+    private sealed class FixedTimeProvider : TimeProvider
+    {
+        public override DateTimeOffset GetUtcNow() => new(Now);
+    }
+
+    private static ApplicationDbContext NewContext()
+    {
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseInMemoryDatabase(Guid.NewGuid().ToString())
+            .Options;
+        var context = new ApplicationDbContext(options);
+        context.Users.AddRange(
+            new ApplicationUser { Id = Me, FirstName = "Maya", LastName = "Reed" },
+            new ApplicationUser { Id = Other, FirstName = "Omar", LastName = "Diaz" },
+            new ApplicationUser { Id = Admin, FirstName = "Ada", LastName = "Stone" });
+        context.SaveChanges();
+        return context;
+    }
+
+    private static NotificationFeedService NewService(ApplicationDbContext context)
+        => new(
+            new NotificationFeedDataService(context),
+            new VendorOperationsDataService(context, new DispatchDataService(context)),
+            new WorkOrderAccountResolver(new AccountDataService(context), new LocationDataService(context)),
+            new FixedTimeProvider());
+
+    private static ClaimsPrincipal User(int accountId, string role, string userId)
+        => new(new ClaimsIdentity(new[]
+        {
+            new Claim(SeaHavenClaimTypes.AccountId, accountId.ToString()),
+            new Claim(ClaimTypes.NameIdentifier, userId),
+            new Claim(ClaimTypes.Role, role)
+        }, "test"));
+
+    private static ClaimsPrincipal Dispatcher(int accountId = 1, string userId = Me) => User(accountId, "Dispatcher", userId);
+
+    private static WorkOrder AddWorkOrder(ApplicationDbContext context, int accountId, string? assignTo, string number,
+        LifecycleStatus status = LifecycleStatus.Pending)
+    {
+        var workOrder = new WorkOrder
+        {
+            AccountId = accountId,
+            AssignTo = assignTo,
+            InternalWONumber = number,
+            LifecycleStatus = status,
+            CreatedDate = Now.AddDays(-30)
+        };
+        context.workOrders.Add(workOrder);
+        context.SaveChanges();
+        return workOrder;
+    }
+
+    private static void Assigned(ApplicationDbContext context, WorkOrder workOrder, string? by, DateTime at, string field = "AssignTo")
+    {
+        context.WorkOrderAuditLogs.Add(new WorkOrderAuditLog
+        {
+            WorkOrderId = workOrder.Id,
+            UserId = by,
+            FieldName = field,
+            OldValue = "",
+            NewValue = workOrder.AssignTo,
+            Action = "AssignmentChanged",
+            CreatedAt = at
+        });
+        context.SaveChanges();
+    }
+
+    private static Comments Comment(ApplicationDbContext context, WorkOrder workOrder, string? by, string text, DateTime at,
+        string? commenter = null)
+    {
+        var comment = new Comments
+        {
+            WorkerOrderId = workOrder.Id,
+            UserId = by,
+            Commenter = commenter,
+            Commenttext = text,
+            CommentType = "General",
+            RecordType = "WorkOrder",
+            CreatedDate = at
+        };
+        context.Comments.Add(comment);
+        context.SaveChanges();
+        return comment;
+    }
+
+    private static DispatchUpliftRequest Uplift(ApplicationDbContext context, WorkOrder workOrder, string requestedBy,
+        string status, decimal amount, string? decidedBy, DateTime? decidedAt, string? note = null)
+    {
+        var dispatch = new Dispatch { WorkOrderId = workOrder.Id, Status = "Sent" };
+        context.Dispatches.Add(dispatch);
+        context.SaveChanges();
+        var uplift = new DispatchUpliftRequest
+        {
+            DispatchId = dispatch.Id,
+            RequestedNTE = amount,
+            Status = status,
+            createdby = requestedBy,
+            DecidedAt = decidedAt,
+            DecidedByUserId = decidedBy,
+            DecisionNote = note,
+            CreatedDate = Now.AddDays(-2)
+        };
+        context.DispatchUpliftRequests.Add(uplift);
+        context.SaveChanges();
+        return uplift;
+    }
+
+    private static IReadOnlyList<NotificationItemDto> Items(NotificationFeedDto feed, string reason)
+        => feed.Sections.SingleOrDefault(section => section.Reason == reason)?.Items
+           ?? Array.Empty<NotificationItemDto>();
+
+    // ---- SH-288 new assignments ----
+
+    [Fact]
+    public async Task Assignment_BySomeoneElse_IsOneLowActivityItemThatOpensTheWorkOrder()
+    {
+        using var context = NewContext();
+        var workOrder = AddWorkOrder(context, 1, Me, "WO-100");
+        Assigned(context, workOrder, Other, Now.AddHours(-3));
+
+        var feed = await NewService(context).GetFeedAsync(Dispatcher(), CancellationToken.None);
+
+        var item = Items(feed, NotificationReasons.Activity).Should().ContainSingle().Subject;
+        item.Id.Should().Be($"new-assigned-{workOrder.Id}");
+        item.Severity.Should().Be(NotificationSeverities.Low);
+        item.RowType.Should().Be(NotificationRowTypes.Dismissable);
+        item.Title.Should().Be("WO #WO-100 was assigned to you");
+        item.Count.Should().Be(1);
+        item.TriggeredAt.Should().Be(Now.AddHours(-3));
+        item.TriggeredAt.Kind.Should().Be(DateTimeKind.Utc);
+        item.Target.Kind.Should().Be(NotificationTargetKinds.WorkOrder);
+        item.Target.WorkOrderId.Should().Be(workOrder.Id);
+        item.Target.Tab.Should().Be(NotificationWorkOrderTabs.Info);
+        feed.Sections.Single(s => s.Reason == NotificationReasons.Activity).Label.Should().Be("Recent activity");
+    }
+
+    [Fact]
+    public async Task Assignments_MadeInOneAction_BecomeOneGroupedItemThatOpensTheUsersQueue()
+    {
+        using var context = NewContext();
+        var first = AddWorkOrder(context, 1, Me, "WO-1");
+        var second = AddWorkOrder(context, 1, Me, "WO-2");
+        var third = AddWorkOrder(context, 1, Me, "WO-3");
+        var later = AddWorkOrder(context, 1, Me, "WO-4");
+        Assigned(context, first, Other, Now.AddHours(-5));
+        Assigned(context, second, Other, Now.AddHours(-5).AddSeconds(20));
+        Assigned(context, third, Other, Now.AddHours(-5).AddSeconds(50));
+        // Same person, an hour later: a separate action.
+        Assigned(context, later, Other, Now.AddHours(-4));
+
+        var feed = await NewService(context).GetFeedAsync(Dispatcher(), CancellationToken.None);
+
+        var items = Items(feed, NotificationReasons.Activity);
+        items.Should().HaveCount(2);
+        var grouped = items.Single(i => i.Count == 3);
+        grouped.Id.Should().Be($"new-assigned-group-{first.Id}");
+        grouped.Title.Should().Be("3 new work orders assigned to you");
+        grouped.Severity.Should().Be(NotificationSeverities.Low);
+        grouped.Target.Kind.Should().Be(NotificationTargetKinds.Queue);
+        grouped.Target.Queue.Should().Be(NotificationQueues.AssignedToMe);
+        grouped.WorkOrders.Select(w => w.Id).Should().BeEquivalentTo(new[] { first.Id, second.Id, third.Id });
+        items.Single(i => i.Count == 1).Target.WorkOrderId.Should().Be(later.Id);
+    }
+
+    [Fact]
+    public async Task Assignment_IsNotShownWhenSelfMadeStaleClosedOrReassignedAway()
+    {
+        using var context = NewContext();
+        Assigned(context, AddWorkOrder(context, 1, Me, "SELF"), Me, Now.AddHours(-1));
+        Assigned(context, AddWorkOrder(context, 1, Me, "STALE"), Other, Now.AddDays(-8));
+        Assigned(context, AddWorkOrder(context, 1, Me, "DONE", LifecycleStatus.Completed), Other, Now.AddHours(-1));
+        var movedAway = AddWorkOrder(context, 1, Me, "MOVED");
+        Assigned(context, movedAway, Other, Now.AddHours(-2));
+        movedAway.AssignTo = Other;
+        Assigned(context, movedAway, Admin, Now.AddHours(-1));
+        // Reassigned to me earlier, then someone re-saved it to me again recently: the latest entry counts.
+        var reassigned = AddWorkOrder(context, 1, Me, "LATEST");
+        Assigned(context, reassigned, Other, Now.AddDays(-9));
+        Assigned(context, reassigned, Admin, Now.AddMinutes(-10));
+
+        var feed = await NewService(context).GetFeedAsync(Dispatcher(), CancellationToken.None);
+
+        Items(feed, NotificationReasons.Activity).Should().ContainSingle()
+            .Which.Target.WorkOrderId.Should().Be(reassigned.Id);
+    }
+
+    [Fact]
+    public async Task Assignment_CountsLegacyAuditEntriesButNotUnauditedAssignees()
+    {
+        using var context = NewContext();
+        var legacy = AddWorkOrder(context, 1, Me, "LEGACY");
+        Assigned(context, legacy, Other, Now.AddDays(-1), field: "AssignedTo");
+        // Assigned at some point with no audit trail: there is no assignment event to report.
+        var unaudited = AddWorkOrder(context, 1, Me, "UNAUDITED");
+        unaudited.CreatedDate = Now.AddHours(-2);
+        context.SaveChanges();
+
+        var feed = await NewService(context).GetFeedAsync(Dispatcher(), CancellationToken.None);
+
+        Items(feed, NotificationReasons.Activity).Should().ContainSingle()
+            .Which.Target.WorkOrderId.Should().Be(legacy.Id);
+    }
+
+    // ---- SH-289 comments and mentions ----
+
+    [Fact]
+    public async Task Comments_BySomeoneElseOnMyWorkOrder_GroupIntoOneMediumItemOnTheCommentsTab()
+    {
+        using var context = NewContext();
+        var workOrder = AddWorkOrder(context, 1, Me, "WO-7");
+        var first = Comment(context, workOrder, Other, "Vendor is on site", Now.AddHours(-3));
+        var second = Comment(context, workOrder, null, "Reply from the email thread", Now.AddHours(-2), commenter: "Site Lead");
+
+        var feed = await NewService(context).GetFeedAsync(Dispatcher(), CancellationToken.None);
+
+        var item = Items(feed, NotificationReasons.Activity).Should().ContainSingle().Subject;
+        item.Id.Should().Be($"comments-{workOrder.Id}-{second.Id}");
+        item.Title.Should().Be("2 new comments on WO #WO-7");
+        item.Severity.Should().Be(NotificationSeverities.Medium);
+        item.Count.Should().Be(1);
+        // The group starts at its earliest comment; the Comments tab highlights from there.
+        item.TriggeredAt.Should().Be(first.CreatedDate!.Value);
+        item.TriggeredAt.Kind.Should().Be(DateTimeKind.Utc);
+        item.Target.WorkOrderId.Should().Be(workOrder.Id);
+        item.Target.Tab.Should().Be(NotificationWorkOrderTabs.Comments);
+    }
+
+    [Fact]
+    public async Task Comment_Single_ShowsTheCommenterAndAOneLinePreview()
+    {
+        using var context = NewContext();
+        var workOrder = AddWorkOrder(context, 1, Me, "WO-8");
+        var text = "Please ask @[" + Admin + ":Ada Stone] about the gate code\nbefore the vendor arrives, because the "
+            + "site closes early on Fridays and security will not let anyone in after four";
+        Comment(context, workOrder, Other, text, Now.AddHours(-1));
+
+        var feed = await NewService(context).GetFeedAsync(Dispatcher(), CancellationToken.None);
+
+        var title = Items(feed, NotificationReasons.Activity).Should().ContainSingle().Subject.Title;
+        title.Should().StartWith("Omar Diaz commented on WO #WO-8: “Please ask @Ada Stone about the gate code before");
+        title.Should().EndWith("…”");
+        NotificationActivityItems.Preview(text).Should().HaveLength(80);
+    }
+
+    [Fact]
+    public async Task Comments_NeverNotifyTheirAuthorAndClearOnceTheUserReplies()
+    {
+        using var context = NewContext();
+        var workOrder = AddWorkOrder(context, 1, Me, "WO-9");
+        Comment(context, workOrder, Me, "My own note", Now.AddHours(-5));
+        Comment(context, workOrder, Other, "Answered already", Now.AddHours(-4));
+        Comment(context, workOrder, Me, "Thanks", Now.AddHours(-3));
+
+        var feed = await NewService(context).GetFeedAsync(Dispatcher(), CancellationToken.None);
+        Items(feed, NotificationReasons.Activity).Should().BeEmpty();
+
+        var unanswered = Comment(context, workOrder, Other, "One more thing", Now.AddHours(-1));
+        feed = await NewService(context).GetFeedAsync(Dispatcher(), CancellationToken.None);
+        var item = Items(feed, NotificationReasons.Activity).Should().ContainSingle().Subject;
+        item.Title.Should().Be("Omar Diaz commented on WO #WO-9: “One more thing”");
+        item.TriggeredAt.Should().Be(unanswered.CreatedDate!.Value);
+    }
+
+    [Fact]
+    public async Task Comments_ReachPriorCommentersButNotBystanders()
+    {
+        using var context = NewContext();
+        // Someone else's work order that I commented on earlier this month.
+        var joined = AddWorkOrder(context, 1, Other, "JOINED");
+        Comment(context, joined, Me, "Adding context", Now.AddDays(-20));
+        Comment(context, joined, Other, "Follow-up", Now.AddHours(-2));
+        var bystander = AddWorkOrder(context, 1, Other, "NOT-MINE");
+        Comment(context, bystander, Admin, "Internal note", Now.AddHours(-2));
+        var stale = AddWorkOrder(context, 1, Me, "OLD");
+        Comment(context, stale, Other, "Last week", Now.AddDays(-8));
+
+        var feed = await NewService(context).GetFeedAsync(Dispatcher(), CancellationToken.None);
+
+        Items(feed, NotificationReasons.Activity).Should().ContainSingle()
+            .Which.Target.WorkOrderId.Should().Be(joined.Id);
+        // The owner of NOT-MINE is notified of the admin's note, and not of their own follow-up.
+        var ownerFeed = await NewService(context).GetFeedAsync(Dispatcher(userId: Other), CancellationToken.None);
+        Items(ownerFeed, NotificationReasons.Activity).Should().ContainSingle()
+            .Which.Target.WorkOrderId.Should().Be(bystander.Id);
+    }
+
+    [Fact]
+    public async Task Mention_IsAHighMentionsItemAndIsNotAlsoCountedAsAComment()
+    {
+        using var context = NewContext();
+        var workOrder = AddWorkOrder(context, 1, Me, "WO-11");
+        Comment(context, workOrder, Other, "Plain update", Now.AddHours(-3));
+        var mention = Comment(context, workOrder, Other, "@[" + Me + ":Maya Reed] can you confirm?", Now.AddHours(-2));
+        // A mention reaches the user even on a work order they are not otherwise part of.
+        var elsewhere = AddWorkOrder(context, 1, Other, "WO-12");
+        Comment(context, elsewhere, Admin, "Looping in @[" + Me + ":Maya Reed]", Now.AddHours(-1));
+
+        var feed = await NewService(context).GetFeedAsync(Dispatcher(), CancellationToken.None);
+
+        var mentions = Items(feed, NotificationReasons.Mentions);
+        mentions.Should().HaveCount(2);
+        var onMine = mentions.Single(i => i.Target.WorkOrderId == workOrder.Id);
+        onMine.Id.Should().Be($"mention-{mention.Id}");
+        onMine.Title.Should().Be("Omar Diaz mentioned you on WO #WO-11");
+        onMine.Severity.Should().Be(NotificationSeverities.High);
+        onMine.Target.Tab.Should().Be(NotificationWorkOrderTabs.Comments);
+        onMine.TriggeredAt.Should().Be(mention.CreatedDate!.Value);
+        mentions.Single(i => i.Target.WorkOrderId == elsewhere.Id).Title.Should().Be("Ada Stone mentioned you on WO #WO-12");
+
+        var activity = Items(feed, NotificationReasons.Activity).Should().ContainSingle().Subject;
+        activity.Title.Should().Be("Omar Diaz commented on WO #WO-11: “Plain update”");
+        feed.Sections.Select(s => s.Reason).Should().ContainInOrder(NotificationReasons.Mentions, NotificationReasons.Activity);
+    }
+
+    [Fact]
+    public void MentionsUser_MatchesOnlyTheUsersOwnToken()
+    {
+        NotificationActivityItems.MentionsUser("hi @[" + Me + ":Maya Reed]", Me).Should().BeTrue();
+        NotificationActivityItems.MentionsUser("hi @[" + Me + "x:Someone Else]", Me).Should().BeFalse();
+        NotificationActivityItems.MentionsUser("hi @Maya Reed", Me).Should().BeFalse();
+        NotificationActivityItems.MentionsUser(null, Me).Should().BeFalse();
+    }
+
+    // ---- SH-215 uplift decisions ----
+
+    [Fact]
+    public async Task UpliftDecisions_OnMyRequests_ShowAmountAndReasonAndOpenTheUplifts()
+    {
+        using var context = NewContext();
+        var workOrder = AddWorkOrder(context, 1, Other, "WO-20");
+        var approved = Uplift(context, workOrder, Me, "Approved", 1250m, Admin, Now.AddHours(-3));
+        var rejected = Uplift(context, workOrder, Me, "Rejected", 400m, Admin, Now.AddHours(-2), "Quote does not match the scope agreed");
+        var revoked = Uplift(context, workOrder, Me, "Revoked", 90.5m, Admin, Now.AddHours(-1), "Duplicate of an earlier uplift");
+        var legacy = Uplift(context, workOrder, Me, "Denied", 75m, Admin, Now.AddHours(-4), "Old wording");
+
+        var feed = await NewService(context).GetFeedAsync(Dispatcher(), CancellationToken.None);
+
+        var items = Items(feed, NotificationReasons.Activity);
+        items.Should().HaveCount(4);
+        var approvedItem = items.Single(i => i.Id == $"uplift-approved-{approved.Id}");
+        approvedItem.Title.Should().Be("Your $1,250.00 uplift on WO #WO-20 was approved");
+        approvedItem.Severity.Should().Be(NotificationSeverities.Medium);
+        approvedItem.Target.Tab.Should().Be(NotificationWorkOrderTabs.Uplifts);
+        approvedItem.Target.WorkOrderId.Should().Be(workOrder.Id);
+        var rejectedItem = items.Single(i => i.Id == $"uplift-rejected-{rejected.Id}");
+        rejectedItem.Title.Should().Be("Your $400.00 uplift on WO #WO-20 was rejected: “Quote does not match the scope agreed”");
+        rejectedItem.Severity.Should().Be(NotificationSeverities.High);
+        var revokedItem = items.Single(i => i.Id == $"uplift-revoked-{revoked.Id}");
+        revokedItem.Title.Should().Be("Your $90.50 uplift on WO #WO-20 was revoked: “Duplicate of an earlier uplift”");
+        revokedItem.Severity.Should().Be(NotificationSeverities.High);
+        revokedItem.TriggeredAt.Should().Be(Now.AddHours(-1));
+        items.Single(i => i.Id == $"uplift-rejected-{legacy.Id}").Severity.Should().Be(NotificationSeverities.High);
+        // The requester need not be the dispatcher who owns the work order.
+        var ownerFeed = await NewService(context).GetFeedAsync(Dispatcher(userId: Other), CancellationToken.None);
+        Items(ownerFeed, NotificationReasons.Activity).Should().BeEmpty();
+    }
+
+    [Fact]
+    public async Task UpliftDecisions_SkipPendingAutoApprovedSelfRevokedAndStaleRequests()
+    {
+        using var context = NewContext();
+        var workOrder = AddWorkOrder(context, 1, Me, "WO-21");
+        Uplift(context, workOrder, Me, "Pending", 100m, null, null);
+        Uplift(context, workOrder, Me, "NoApprovalRequired", 100m, null, null);
+        Uplift(context, workOrder, Me, "Revoked", 100m, Me, Now.AddHours(-1));
+        Uplift(context, workOrder, Me, "Approved", 100m, Admin, Now.AddDays(-8));
+        var deleted = Uplift(context, workOrder, Me, "Approved", 100m, Admin, Now.AddHours(-1));
+        deleted.IsDeleted = true;
+        context.SaveChanges();
+
+        var feed = await NewService(context).GetFeedAsync(Dispatcher(), CancellationToken.None);
+
+        Items(feed, NotificationReasons.Activity).Should().BeEmpty();
+    }
+
+    // ---- scope ----
+
+    [Fact]
+    public async Task PersonalItems_NeverCrossAccounts()
+    {
+        using var context = NewContext();
+        var foreign = AddWorkOrder(context, 2, Me, "FOREIGN");
+        Assigned(context, foreign, Other, Now.AddHours(-1));
+        Comment(context, foreign, Other, "@[" + Me + ":Maya Reed] hello", Now.AddHours(-1));
+        Uplift(context, foreign, Me, "Approved", 10m, Admin, Now.AddHours(-1));
+
+        var sameUserOtherAccount = await NewService(context).GetFeedAsync(Dispatcher(accountId: 1), CancellationToken.None);
+        sameUserOtherAccount.Sections.Should().BeEmpty();
+
+        var inAccount = await NewService(context).GetFeedAsync(Dispatcher(accountId: 2), CancellationToken.None);
+        Items(inAccount, NotificationReasons.Mentions).Should().ContainSingle();
+        Items(inAccount, NotificationReasons.Activity).Should().HaveCount(2);
+    }
+
+    [Fact]
+    public async Task PersonalItems_ReachEveryFeedRoleByUserId()
+    {
+        using var context = NewContext();
+        var workOrder = AddWorkOrder(context, 1, Other, "WO-30");
+        Comment(context, workOrder, Other, "@[" + Admin + ":Ada Stone] please approve", Now.AddHours(-1));
+
+        var adminFeed = await NewService(context).GetFeedAsync(User(1, "Admin", Admin), CancellationToken.None);
+        Items(adminFeed, NotificationReasons.Mentions).Should().ContainSingle()
+            .Which.Title.Should().Be("Omar Diaz mentioned you on WO #WO-30");
+
+        var managerFeed = await NewService(context).GetFeedAsync(User(1, "Manager", "manager-1"), CancellationToken.None);
+        Items(managerFeed, NotificationReasons.Mentions).Should().BeEmpty();
+        Items(managerFeed, NotificationReasons.Activity).Should().BeEmpty();
+    }
+
+    [Fact]
+    public async Task PersonalQueries_ForwardCancellation()
+    {
+        using var context = NewContext();
+        var data = new NotificationFeedDataService(context);
+        var scope = new NotificationPersonalScope(1, Me);
+        using var cancelled = new CancellationTokenSource();
+        cancelled.Cancel();
+
+        await FluentActions.Awaiting(() => data.GetRecentAssignmentsAsync(scope, Now, 10, cancelled.Token))
+            .Should().ThrowAsync<OperationCanceledException>();
+        await FluentActions.Awaiting(() => data.GetUnansweredCommentsAsync(scope, Now, 10, cancelled.Token))
+            .Should().ThrowAsync<OperationCanceledException>();
+        await FluentActions.Awaiting(() => data.GetUpliftDecisionsAsync(scope, Now, 10, cancelled.Token))
+            .Should().ThrowAsync<OperationCanceledException>();
+    }
+}
diff --git a/SeaHaven.DataServices/Implementation/NotificationFeedDataService.cs b/SeaHaven.DataServices/Implementation/NotificationFeedDataService.cs
index 7741550..eba9cb0 100644
--- a/SeaHaven.DataServices/Implementation/NotificationFeedDataService.cs
+++ b/SeaHaven.DataServices/Implementation/NotificationFeedDataService.cs
@@ -11,6 +11,12 @@ namespace SeaHaven.DataServices.Implementation
     {
         private static readonly string[] TerminalDispatchStatuses = { "Completed", "Verified", "Cancelled", "Canceled" };
 
+        // Uplift outcomes a requester is told about; "Denied" is the legacy spelling of Rejected.
+        private static readonly string[] DecisionStatuses = { "Approved", "Rejected", "Denied", "Revoked" };
+
+        private const string AssignToAuditField = "AssignTo";
+        private const string LegacyAssignedToAuditField = "AssignedTo";
+
         private readonly ApplicationDbContext _context;
 
         public NotificationFeedDataService(ApplicationDbContext context)
@@ -68,11 +74,116 @@ namespace SeaHaven.DataServices.Implementation
             return PageAsync(candidates, limit, cancellationToken);
         }
 
-        private IQueryable<WorkOrder> OpenWorkOrders(NotificationFeedScope scope)
+        public async Task<IReadOnlyList<NotificationAssignmentCandidate>> GetRecentAssignmentsAsync(
+            NotificationPersonalScope scope, DateTime since, int limit, CancellationToken cancellationToken)
+        {
+            // Board create and board edits log "AssignTo" with user ids; the legacy assignment endpoint
+            // logs "AssignedTo" with display names. Only the time and the actor are read, so both count.
+            var assignmentLogs = _context.WorkOrderAuditLogs.AsNoTracking()
+                .Where(log => log.FieldName == AssignToAuditField || log.FieldName == LegacyAssignedToAuditField);
+
+            // The latest assignment entry of each work order the user holds now.
+            var candidates =
+                from log in assignmentLogs
+                join w in OpenWorkOrders(new NotificationFeedScope(scope.AccountId, scope.UserId))
+                    on log.WorkOrderId equals w.Id
+                where log.CreatedAt >= since
+                    && (log.UserId == null || log.UserId != scope.UserId)
+                    && !assignmentLogs.Any(later => later.WorkOrderId == log.WorkOrderId
+                        && (later.CreatedAt > log.CreatedAt || (later.CreatedAt == log.CreatedAt && later.Id > log.Id)))
+                orderby log.CreatedAt descending, w.Id descending
+                select new NotificationAssignmentCandidate
+                {
+                    WorkOrderId = w.Id,
+                    Number = w.InternalWONumber ?? w.WorkerOrderNumber,
+                    AssignedAt = log.CreatedAt,
+                    AssignedBy = log.UserId
+                };
+
+            return await candidates.Take(limit).ToListAsync(cancellationToken);
+        }
+
+        public async Task<IReadOnlyList<NotificationCommentCandidate>> GetUnansweredCommentsAsync(
+            NotificationPersonalScope scope, DateTime since, int limit, CancellationToken cancellationToken)
+        {
+            var userId = scope.UserId;
+            // SH-217 stores a mention as the token "@[userId:Display Name]" inside the comment text.
+            var mentionToken = "@[" + userId + ":";
+            var ownComments = _context.Comments.AsNoTracking()
+                .Where(own => own.UserId == userId && own.IsDeleted != true);
+
+            var candidates =
+                from c in _context.Comments.AsNoTracking()
+                join w in ScopedWorkOrders(scope.AccountId) on c.WorkerOrderId equals w.Id
+                where c.IsDeleted != true
+                    && c.CreatedDate != null
+                    && c.CreatedDate >= since
+                    && (c.UserId == null || c.UserId != userId)
+                    && (w.AssignTo == userId
+                        || (c.Commenttext != null && c.Commenttext.Contains(mentionToken))
+                        || ownComments.Any(own => own.WorkerOrderId == w.Id))
+                    && !ownComments.Any(own => own.WorkerOrderId == w.Id && own.CreatedDate >= c.CreatedDate)
+                orderby c.CreatedDate descending, c.Id descending
+                select new NotificationCommentCandidate
+                {
+                    CommentId = c.Id,
+                    WorkOrderId = w.Id,
+                    WorkOrderNumber = w.InternalWONumber ?? w.WorkerOrderNumber,
+                    AuthorFirstName = c.ApplicationUser != null ? c.ApplicationUser.FirstName : null,
+                    AuthorLastName = c.ApplicationUser != null ? c.ApplicationUser.LastName : null,
+                    Commenter = c.Commenter,
+                    Text = c.Commenttext,
+                    CreatedAt = c.CreatedDate!.Value
+                };
+
+            return await candidates.Take(limit).ToListAsync(cancellationToken);
+        }
+
+        public async Task<IReadOnlyList<NotificationUpliftDecisionCandidate>> GetUpliftDecisionsAsync(
+            NotificationPersonalScope scope, DateTime since, int limit, CancellationToken cancellationToken)
+        {
+            var userId = scope.UserId;
+            // Same work-order resolution as the uplift reads: the dispatch's own work order,
+            // otherwise the first work order linked through DispatchWorkOrders.
+            var candidates =
+                from u in _context.DispatchUpliftRequests.AsNoTracking()
+                join d in _context.Dispatches.AsNoTracking() on u.DispatchId equals d.Id
+                let workOrderId = d.WorkOrderId
+                    ?? d.DispatchWorkOrders!.Select(link => (int?)link.WorkOrderId).FirstOrDefault()
+                join w in ScopedWorkOrders(scope.AccountId) on workOrderId equals (int?)w.Id
+                where u.IsDeleted != true
+                    && d.IsDeleted != true
+                    && u.createdby == userId
+                    && u.DecidedAt != null
+                    && u.DecidedAt >= since
+                    && (u.DecidedByUserId == null || u.DecidedByUserId != userId)
+                    && DecisionStatuses.Contains(u.Status)
+                orderby u.DecidedAt descending, u.Id descending
+                select new NotificationUpliftDecisionCandidate
+                {
+                    UpliftId = u.Id,
+                    WorkOrderId = w.Id,
+                    WorkOrderNumber = w.InternalWONumber ?? w.WorkerOrderNumber,
+                    Status = u.Status,
+                    Amount = u.RequestedNTE,
+                    DecisionNote = u.DecisionNote,
+                    DecidedAt = u.DecidedAt!.Value
+                };
+
+            return await candidates.Take(limit).ToListAsync(cancellationToken);
+        }
+
+        private IQueryable<WorkOrder> ScopedWorkOrders(int? accountId)
         {
             var workOrders = WorkOrderBoardQueryFilters.ApplyBaseScope(_context.workOrders.AsNoTracking());
-            if (scope.AccountId is int accountId)
-                workOrders = WorkOrderBoardQueryFilters.ApplyAccountScope(workOrders, accountId);
+            return accountId is int id
+                ? WorkOrderBoardQueryFilters.ApplyAccountScope(workOrders, id)
+                : workOrders;
+        }
+
+        private IQueryable<WorkOrder> OpenWorkOrders(NotificationFeedScope scope)
+        {
+            var workOrders = ScopedWorkOrders(scope.AccountId);
             if (scope.DispatcherId != null)
                 workOrders = workOrders.Where(w => w.AssignTo == scope.DispatcherId);
 
diff --git a/SeaHaven.DataServices/Interfaces/INotificationFeedDataService.cs b/SeaHaven.DataServices/Interfaces/INotificationFeedDataService.cs
index d96e59d..1976764 100644
--- a/SeaHaven.DataServices/Interfaces/INotificationFeedDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/INotificationFeedDataService.cs
@@ -25,5 +25,28 @@ namespace SeaHaven.DataServices.Interfaces
         /// </summary>
         Task<NotificationCandidatePage> GetNoVendorAsync(
             NotificationFeedScope scope, DateTime cutoff, int limit, CancellationToken cancellationToken);
+
+        /// <summary>
+        /// Open work orders assigned to the user whose latest assignment happened at or after
+        /// <paramref name="since"/> and was made by someone else, read from the latest AssignTo audit
+        /// entry (board create writes one too). Returns at most <paramref name="limit"/>, newest first.
+        /// </summary>
+        Task<IReadOnlyList<NotificationAssignmentCandidate>> GetRecentAssignmentsAsync(
+            NotificationPersonalScope scope, DateTime since, int limit, CancellationToken cancellationToken);
+
+        /// <summary>
+        /// Comments posted at or after <paramref name="since"/> by someone other than the user, on work orders
+        /// the user is assigned to, has commented on, or that mention the user, and that the user has not
+        /// commented after. Returns at most <paramref name="limit"/>, newest first.
+        /// </summary>
+        Task<IReadOnlyList<NotificationCommentCandidate>> GetUnansweredCommentsAsync(
+            NotificationPersonalScope scope, DateTime since, int limit, CancellationToken cancellationToken);
+
+        /// <summary>
+        /// Approve, reject and revoke decisions made at or after <paramref name="since"/> by someone else on
+        /// uplifts the user requested. Returns at most <paramref name="limit"/>, newest first.
+        /// </summary>
+        Task<IReadOnlyList<NotificationUpliftDecisionCandidate>> GetUpliftDecisionsAsync(
+            NotificationPersonalScope scope, DateTime since, int limit, CancellationToken cancellationToken);
     }
 }
diff --git a/SeaHaven.DataServices/Models/NotificationFeedReadModels.cs b/SeaHaven.DataServices/Models/NotificationFeedReadModels.cs
index 9d6f0ae..d404be2 100644
--- a/SeaHaven.DataServices/Models/NotificationFeedReadModels.cs
+++ b/SeaHaven.DataServices/Models/NotificationFeedReadModels.cs
@@ -25,3 +25,42 @@ public sealed class NotificationCandidatePage
     public int Total { get; init; }
     public IReadOnlyList<NotificationWorkOrderCandidate> Items { get; init; } = Array.Empty<NotificationWorkOrderCandidate>();
 }
+
+/// <summary>
+/// Server-derived scope for items addressed to one person: <see cref="UserId"/> is the signed-in
+/// user from claims and <see cref="AccountId"/> null is org-wide.
+/// </summary>
+public sealed record NotificationPersonalScope(int? AccountId, string UserId);
+
+/// <summary>An open work order assigned to the user, with when and by whom it was last assigned.</summary>
+public sealed class NotificationAssignmentCandidate
+{
+    public int WorkOrderId { get; init; }
+    public string? Number { get; init; }
+    public DateTime AssignedAt { get; init; }
+    public string? AssignedBy { get; init; }
+}
+
+public sealed class NotificationCommentCandidate
+{
+    public int CommentId { get; init; }
+    public int WorkOrderId { get; init; }
+    public string? WorkOrderNumber { get; init; }
+    public string? AuthorFirstName { get; init; }
+    public string? AuthorLastName { get; init; }
+    /// <summary>Free-text author for comments with no user (email sync, vendor portal).</summary>
+    public string? Commenter { get; init; }
+    public string? Text { get; init; }
+    public DateTime CreatedAt { get; init; }
+}
+
+public sealed class NotificationUpliftDecisionCandidate
+{
+    public int UpliftId { get; init; }
+    public int WorkOrderId { get; init; }
+    public string? WorkOrderNumber { get; init; }
+    public string Status { get; init; } = "";
+    public decimal Amount { get; init; }
+    public string? DecisionNote { get; init; }
+    public DateTime DecidedAt { get; init; }
+}
diff --git a/SeaHaven.Services/DTOs/NotificationFeedDTOs.cs b/SeaHaven.Services/DTOs/NotificationFeedDTOs.cs
index d6aacc7..a2ab7e9 100644
--- a/SeaHaven.Services/DTOs/NotificationFeedDTOs.cs
+++ b/SeaHaven.Services/DTOs/NotificationFeedDTOs.cs
@@ -72,6 +72,8 @@ namespace SeaHaven.Services.DTOs
     public static class NotificationQueues
     {
         public const string Unassigned = "unassigned";
+        /// <summary>The signed-in user's own open work orders.</summary>
+        public const string AssignedToMe = "assigned-to-me";
     }
 
     /// <summary>Work-order detail tabs a single-work-order item can open on.</summary>
@@ -80,6 +82,7 @@ namespace SeaHaven.Services.DTOs
         public const string Info = "info";
         public const string Comments = "comments";
         public const string Extras = "extras";
+        public const string Uplifts = "uplifts";
     }
 
     public sealed class NotificationTargetDto
diff --git a/SeaHaven.Services/Helpers/NotificationActivityItems.cs b/SeaHaven.Services/Helpers/NotificationActivityItems.cs
new file mode 100644
index 0000000..c7d0493
--- /dev/null
+++ b/SeaHaven.Services/Helpers/NotificationActivityItems.cs
@@ -0,0 +1,220 @@
+using System.Globalization;
+using System.Text.RegularExpressions;
+using SeaHaven.DataServices.Models;
+using SeaHaven.Services.DTOs;
+
+namespace SeaHaven.Services.Helpers
+{
+    /// <summary>
+    /// Builds the feed items addressed to one person: new assignments, comments, mentions and
+    /// uplift decisions. Copy and severities follow the prototype's Notification Center
+    /// (new-assigned Low, new-comment Medium, mention High).
+    /// </summary>
+    public static class NotificationActivityItems
+    {
+        /// <summary>Assignments by one person this close together count as one action.</summary>
+        public static readonly TimeSpan AssignmentActionGap = TimeSpan.FromMinutes(2);
+
+        private const int PreviewLength = 80;
+
+        // SH-217 mention token: "@[userId:Display Name]".
+        private static readonly Regex MentionToken = new(@"@\[([^:\]]+):([^\]]+)\]", RegexOptions.Compiled);
+        private static readonly Regex Whitespace = new(@"\s+", RegexOptions.Compiled);
+        private static readonly CultureInfo Money = CultureInfo.GetCultureInfo("en-US");
+
+        public static bool MentionsUser(string? text, string userId)
+            => !string.IsNullOrEmpty(text)
+               && MentionToken.Matches(text).Any(match => match.Groups[1].Value == userId);
+
+        /// <summary>One High item per comment that mentions the user, opening the work order's Comments tab.</summary>
+        public static IReadOnlyList<NotificationItemDto> Mentions(
+            IEnumerable<NotificationCommentCandidate> comments, string userId)
+        {
+            return comments
+                .Where(comment => MentionsUser(comment.Text, userId))
+                .Select(comment => new NotificationItemDto
+                {
+                    Id = $"mention-{comment.CommentId}",
+                    Reason = NotificationReasons.Mentions,
+                    Severity = NotificationSeverities.High,
+                    Title = $"{AuthorName(comment)} mentioned you on {WorkOrderLabel(comment.WorkOrderId, comment.WorkOrderNumber)}",
+                    Count = 1,
+                    TriggeredAt = Utc(comment.CreatedAt),
+                    Target = WorkOrderTarget(comment.WorkOrderId, NotificationWorkOrderTabs.Comments),
+                    WorkOrders = WorkOrderRefs(comment.WorkOrderId, comment.WorkOrderNumber)
+                })
+                .ToList();
+        }
+
+        /// <summary>
+        /// One Medium item per work order for the comments that do not mention the user; a comment
+        /// that mentions them is a Mention item instead, never both. <c>TriggeredAt</c> is the
+        /// earliest comment in the group, so the Comments tab can highlight the group from it.
+        /// </summary>
+        public static IReadOnlyList<NotificationItemDto> Comments(
+            IEnumerable<NotificationCommentCandidate> comments, string userId)
+        {
+            return comments
+                .Where(comment => !MentionsUser(comment.Text, userId))
+                .GroupBy(comment => comment.WorkOrderId)
+                .Select(group =>
+                {
+                    var ordered = group.OrderBy(c => c.CreatedAt).ThenBy(c => c.CommentId).ToList();
+                    var first = ordered[0];
+                    var latest = ordered[^1];
+                    var label = WorkOrderLabel(first.WorkOrderId, first.WorkOrderNumber);
+                    var preview = Preview(first.Text);
+                    var title = ordered.Count > 1
+                        ? $"{ordered.Count} new comments on {label}"
+                        : preview.Length == 0
+                            ? $"{AuthorName(first)} commented on {label}"
+                            : $"{AuthorName(first)} commented on {label}: “{preview}”";
+                    return new NotificationItemDto
+                    {
+                        // The latest comment is part of the id so a new comment shows again after a dismiss.
+                        Id = $"comments-{first.WorkOrderId}-{latest.CommentId}",
+                        Reason = NotificationReasons.Activity,
+                        Severity = NotificationSeverities.Medium,
+                        Title = title,
+                        Count = 1,
+                        TriggeredAt = Utc(first.CreatedAt),
+                        Target = WorkOrderTarget(first.WorkOrderId, NotificationWorkOrderTabs.Comments),
+                        WorkOrders = WorkOrderRefs(first.WorkOrderId, first.WorkOrderNumber)
+                    };
+                })
+                .ToList();
+        }
+
+        /// <summary>
+        /// Low items for new assignments. Assignments made by the same person within
+        /// <see cref="AssignmentActionGap"/> of each other are one action: a single work order opens
+        /// directly, several become one item that opens the user's own queue.
+        /// </summary>
+        public static IReadOnlyList<NotificationItemDto> Assignments(IEnumerable<NotificationAssignmentCandidate> assignments)
+        {
+            var items = new List<NotificationItemDto>();
+            foreach (var byActor in assignments.GroupBy(a => a.AssignedBy ?? "", StringComparer.Ordinal))
+            {
+                var action = new List<NotificationAssignmentCandidate>();
+                foreach (var assignment in byActor.OrderBy(a => a.AssignedAt).ThenBy(a => a.WorkOrderId))
+                {
+                    if (action.Count > 0 && assignment.AssignedAt - action[^1].AssignedAt > AssignmentActionGap)
+                    {
+                        items.Add(AssignmentItem(action));
+                        action = new List<NotificationAssignmentCandidate>();
+                    }
+                    action.Add(assignment);
+                }
+                if (action.Count > 0)
+                    items.Add(AssignmentItem(action));
+            }
+            return items;
+        }
+
+        /// <summary>
+        /// One item per decision on an uplift the user requested: Medium when approved, High when
+        /// rejected or revoked because the requester may need to act. Opens the work order's uplifts.
+        /// </summary>
+        public static IReadOnlyList<NotificationItemDto> UpliftDecisions(IEnumerable<NotificationUpliftDecisionCandidate> decisions)
+        {
+            return decisions.Select(decision =>
+            {
+                var outcome = decision.Status switch
+                {
+                    "Approved" => "approved",
+                    "Revoked" => "revoked",
+                    _ => "rejected"
+                };
+                var reason = outcome == "approved" ? "" : Preview(decision.DecisionNote);
+                var title = $"Your {decision.Amount.ToString("C2", Money)} uplift on "
+                    + $"{WorkOrderLabel(decision.WorkOrderId, decision.WorkOrderNumber)} was {outcome}";
+                return new NotificationItemDto
+                {
+                    Id = $"uplift-{outcome}-{decision.UpliftId}",
+                    Reason = NotificationReasons.Activity,
+                    Severity = outcome == "approved" ? NotificationSeverities.Medium : NotificationSeverities.High,
+                    Title = reason.Length == 0 ? title : $"{title}: “{reason}”",
+                    Count = 1,
+                    TriggeredAt = Utc(decision.DecidedAt),
+                    Target = WorkOrderTarget(decision.WorkOrderId, NotificationWorkOrderTabs.Uplifts),
+                    WorkOrders = WorkOrderRefs(decision.WorkOrderId, decision.WorkOrderNumber)
+                };
+            }).ToList();
+        }
+
+        public static string WorkOrderLabel(int id, string? number)
+            => $"WO #{(string.IsNullOrWhiteSpace(number) ? id.ToString(CultureInfo.InvariantCulture) : number)}";
+
+        /// <summary>Comment or reason text on one line, mention tokens shown as "@Name", cut to 80 characters.</summary>
+        public static string Preview(string? text)
+        {
+            if (string.IsNullOrWhiteSpace(text))
+                return "";
+            var display = MentionToken.Replace(text, match => "@" + match.Groups[2].Value.Trim());
+            var singleLine = Whitespace.Replace(display, " ").Trim();
+            return singleLine.Length <= PreviewLength
+                ? singleLine
+                : singleLine[..(PreviewLength - 1)].TrimEnd() + "…";
+        }
+
+        private static NotificationItemDto AssignmentItem(IReadOnlyList<NotificationAssignmentCandidate> action)
+        {
+            var first = action[0];
+            if (action.Count == 1)
+            {
+                return new NotificationItemDto
+                {
+                    Id = $"new-assigned-{first.WorkOrderId}",
+                    Reason = NotificationReasons.Activity,
+                    Severity = NotificationSeverities.Low,
+                    Title = $"{WorkOrderLabel(first.WorkOrderId, first.Number)} was assigned to you",
+                    Count = 1,
+                    TriggeredAt = Utc(first.AssignedAt),
+                    Target = WorkOrderTarget(first.WorkOrderId, NotificationWorkOrderTabs.Info),
+                    WorkOrders = WorkOrderRefs(first.WorkOrderId, first.Number)
+                };
+            }
+
+            return new NotificationItemDto
+            {
+                // Keyed on the action's first work order so the id holds while the group is unchanged.
+                Id = $"new-assigned-group-{first.WorkOrderId}",
+                Reason = NotificationReasons.Activity,
+                Severity = NotificationSeverities.Low,
+                Title = $"{action.Count} new work orders assigned to you",
+                Count = action.Count,
+                TriggeredAt = Utc(first.AssignedAt),
+                Target = new NotificationTargetDto
+                {
+                    Kind = NotificationTargetKinds.Queue,
+                    Queue = NotificationQueues.AssignedToMe
+                },
+                WorkOrders = action
+                    .Select(a => new NotificationWorkOrderRefDto { Id = a.WorkOrderId, Number = a.Number })
+                    .ToList()
+            };
+        }
+
+        private static string AuthorName(NotificationCommentCandidate comment)
+        {
+            var name = $"{comment.AuthorFirstName ?? ""} {comment.AuthorLastName ?? ""}".Trim();
+            if (name.Length > 0)
+                return name;
+            return string.IsNullOrWhiteSpace(comment.Commenter) ? "Someone" : comment.Commenter.Trim();
+        }
+
+        private static NotificationTargetDto WorkOrderTarget(int workOrderId, string tab) => new()
+        {
+            Kind = NotificationTargetKinds.WorkOrder,
+            WorkOrderId = workOrderId,
+            Tab = tab
+        };
+
+        private static IReadOnlyList<NotificationWorkOrderRefDto> WorkOrderRefs(int id, string? number)
+            => new[] { new NotificationWorkOrderRefDto { Id = id, Number = number } };
+
+        // Stored times are UTC; marking them so keeps the "Z" on the wire and lets the client
+        // compare them with comment times exactly.
+        private static DateTime Utc(DateTime value) => DateTime.SpecifyKind(value, DateTimeKind.Utc);
+    }
+}
diff --git a/SeaHaven.Services/Implementation/NotificationFeedService.cs b/SeaHaven.Services/Implementation/NotificationFeedService.cs
index 84932e4..695d40f 100644
--- a/SeaHaven.Services/Implementation/NotificationFeedService.cs
+++ b/SeaHaven.Services/Implementation/NotificationFeedService.cs
@@ -13,6 +13,12 @@ namespace SeaHaven.Services.Implementation
         /// <summary>Most items returned per per-work-order section; section counts stay exact.</summary>
         public const int SectionItemLimit = 50;
 
+        /// <summary>How long an assignment, comment, mention or uplift decision stays in the feed.</summary>
+        public static readonly TimeSpan RecentActivityWindow = TimeSpan.FromDays(7);
+
+        /// <summary>Most source rows read per personal event type before grouping.</summary>
+        public const int PersonalCandidateLimit = 500;
+
         private static readonly TimeSpan NoVendorLeadTime = TimeSpan.FromHours(48);
 
         private readonly INotificationFeedDataService _data;
@@ -46,6 +52,10 @@ namespace SeaHaven.Services.Implementation
             sections.Add(await AvetaMissingAsync(scope, now, cancellationToken));
             sections.Add(await VendorConflictsAsync(scope, cancellationToken));
 
+            var userId = user.FindFirstValue(ClaimTypes.NameIdentifier);
+            if (!string.IsNullOrWhiteSpace(userId))
+                sections.AddRange(await PersonalSectionsAsync(new NotificationPersonalScope(accountId, userId), now, cancellationToken));
+
             return new NotificationFeedDto
             {
                 GeneratedAt = now,
@@ -71,6 +81,45 @@ namespace SeaHaven.Services.Implementation
             throw new WorkOrderBoardValidationException("Forbidden", "Notifications require an authorized role.");
         }
 
+        // Items addressed to the signed-in user whatever their role: assignments to them, comments on
+        // work they take part in, mentions of them, and decisions on uplifts they requested. The
+        // account scope still applies; the dispatcher scope does not, because a mention or an uplift
+        // request can concern a work order owned by another dispatcher.
+        private async Task<IReadOnlyList<(string, int, IReadOnlyList<NotificationItemDto>)>> PersonalSectionsAsync(
+            NotificationPersonalScope scope, DateTime now, CancellationToken cancellationToken)
+        {
+            var since = now.Subtract(RecentActivityWindow);
+            var comments = await _data.GetUnansweredCommentsAsync(scope, since, PersonalCandidateLimit, cancellationToken);
+            var assignments = await _data.GetRecentAssignmentsAsync(scope, since, PersonalCandidateLimit, cancellationToken);
+            var decisions = await _data.GetUpliftDecisionsAsync(scope, since, PersonalCandidateLimit, cancellationToken);
+
+            var mentions = NotificationActivityItems.Mentions(comments, scope.UserId);
+            var activity = NotificationActivityItems.Comments(comments, scope.UserId)
+                .Concat(NotificationActivityItems.Assignments(assignments))
+                .Concat(NotificationActivityItems.UpliftDecisions(decisions))
+                .ToList();
+
+            return new[]
+            {
+                BoundedSection(NotificationReasons.Mentions, mentions),
+                BoundedSection(NotificationReasons.Activity, activity)
+            };
+        }
+
+        // Counts every work order the section covers; returns the most severe, most recent items.
+        private static (string, int, IReadOnlyList<NotificationItemDto>) BoundedSection(
+            string reason, IReadOnlyList<NotificationItemDto> items)
+        {
+            var workOrderCount = items.SelectMany(item => item.WorkOrders).Select(w => w.Id).Distinct().Count();
+            var bounded = items
+                .OrderByDescending(item => NotificationSeverities.Rank(item.Severity))
+                .ThenByDescending(item => item.TriggeredAt)
+                .ThenBy(item => item.Id, StringComparer.Ordinal)
+                .Take(SectionItemLimit)
+                .ToList();
+            return (reason, workOrderCount, bounded);
+        }
+
         private async Task<(string, int, IReadOnlyList<NotificationItemDto>)> UnassignedAsync(
             int? accountId, DateTime now, CancellationToken cancellationToken)
         {
@@ -175,6 +224,6 @@ namespace SeaHaven.Services.Implementation
         };
 
         private static string WorkOrderLabel(int id, string? number)
-            => $"WO #{(string.IsNullOrWhiteSpace(number) ? id.ToString() : number)}";
+            => NotificationActivityItems.WorkOrderLabel(id, number);
     }
 }

From f42576e2db40b3a0115f2ee58e27300349f6090e Mon Sep 17 00:00:00 2001
From: Adam Moussa <adam@seahavenind.com>
Date: Fri, 18 Sep 2026 12:38:15 -0400
Subject: [PATCH 069/183] chore(cd): retire leftover Terraform app CD path

---
 .github/workflows/deploy.yml                  | 1238 -----------------
 QUALITY_GATES.md                              |    2 -
 scripts/check-terraform-release-plan.py       |  328 -----
 scripts/test-terraform-release-plan-check.py  |  295 ----
 .../terraform-release-plans/create.json       |   16 -
 .../terraform-release-plans/delete.json       |   16 -
 .../terraform-release-plans/dns-update.json   |   28 -
 .../eb-setting-change.json                    |   34 -
 .../terraform-release-plans/empty.json        |    3 -
 .../terraform-release-plans/iam-update.json   |   18 -
 .../multiple-updates.json                     |   32 -
 .../nested-unknown-tags.json                  |   39 -
 .../terraform-release-plans/replace.json      |   20 -
 .../unknown-only-description.json             |   39 -
 .../terraform-release-plans/version-only.json |   48 -
 .../terraform-release-plans/wrong-label.json  |   22 -
 terraform/live/README.md                      |   21 +-
 17 files changed, 6 insertions(+), 2193 deletions(-)
 delete mode 100644 .github/workflows/deploy.yml
 delete mode 100644 scripts/check-terraform-release-plan.py
 delete mode 100644 scripts/test-terraform-release-plan-check.py
 delete mode 100644 scripts/testdata/terraform-release-plans/create.json
 delete mode 100644 scripts/testdata/terraform-release-plans/delete.json
 delete mode 100644 scripts/testdata/terraform-release-plans/dns-update.json
 delete mode 100644 scripts/testdata/terraform-release-plans/eb-setting-change.json
 delete mode 100644 scripts/testdata/terraform-release-plans/empty.json
 delete mode 100644 scripts/testdata/terraform-release-plans/iam-update.json
 delete mode 100644 scripts/testdata/terraform-release-plans/multiple-updates.json
 delete mode 100644 scripts/testdata/terraform-release-plans/nested-unknown-tags.json
 delete mode 100644 scripts/testdata/terraform-release-plans/replace.json
 delete mode 100644 scripts/testdata/terraform-release-plans/unknown-only-description.json
 delete mode 100644 scripts/testdata/terraform-release-plans/version-only.json
 delete mode 100644 scripts/testdata/terraform-release-plans/wrong-label.json

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
deleted file mode 100644
index ea2d3ef..0000000
--- a/.github/workflows/deploy.yml
+++ /dev/null
@@ -1,1238 +0,0 @@
-name: Validate and deploy
-
-on:
-  pull_request:
-    branches: [dev, staging, main]
-  push:
-    branches: [dev, staging]
-  workflow_dispatch:
-
-permissions:
-  contents: read
-
-jobs:
-  validate:
-    name: Validate deployable source bundle
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-        with:
-          fetch-depth: 0
-
-      - name: Set up .NET
-        uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
-        with:
-          dotnet-version: "8.0.x"
-
-      - name: Repository quality gate
-        env:
-          BASE_REF: ${{ github.event.pull_request.base.sha || 'origin/dev' }}
-          HEAD_REF: ${{ github.event.pull_request.head.sha || github.sha }}
-        run: bash scripts/governance-check.sh
-
-      - name: Build Elastic Beanstalk source bundle
-        run: bash scripts/package-elastic-beanstalk.sh
-
-      - name: Inspect source bundle contract
-        run: bash scripts/validate-elastic-beanstalk-bundle.sh
-
-  deploy-dev:
-    name: Deploy shoc-backend-dev through Terraform
-    if: >
-      (github.event_name == 'push' && github.ref == 'refs/heads/dev' &&
-       vars.TERRAFORM_APP_CD_ENABLED == 'true') ||
-      (github.event_name == 'workflow_dispatch' && github.ref == 'refs/heads/dev')
-    needs: validate
-    runs-on: ubuntu-latest
-    timeout-minutes: 180
-    permissions:
-      contents: read
-      id-token: write
-    environment:
-      name: dev
-    concurrency:
-      group: deploy-dev
-      cancel-in-progress: false
-    env:
-      TF_CLOUD_ORGANIZATION: seahaven
-      TF_API_TOKEN: ${{ secrets.TF_API_TOKEN }}
-      EB_APPLICATION_NAME: shoc-backend
-      EB_ENVIRONMENT_NAME: shoc-backend-dev
-      SMOKE_URL: https://api.dev.seahaven.com
-      EB_BUCKET: elasticbeanstalk-us-east-1-396287094661
-    steps:
-      - name: Checkout
-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-
-      - name: Set up .NET
-        uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
-        with:
-          dotnet-version: "8.0.x"
-
-      - name: Build Elastic Beanstalk source bundle
-        run: bash scripts/package-elastic-beanstalk.sh
-
-      - name: Validate exact release bundle
-        run: bash scripts/validate-elastic-beanstalk-bundle.sh
-
-      - name: Configure AWS credentials (OIDC)
-        uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6.2.3
-        with:
-          role-to-assume: ${{ secrets.AWS_DEPLOY_ROLE_ARN }}
-          aws-region: us-east-1
-          audience: sts.amazonaws.com
-
-      - name: Capture current environment version
-        run: |
-          set -euo pipefail
-          prev="$(aws elasticbeanstalk describe-environments \
-            --environment-names "${EB_ENVIRONMENT_NAME}" \
-            --region us-east-1 \
-            --query 'Environments[0].VersionLabel' \
-            --output text)"
-          echo "$prev" > .artifacts/elastic-beanstalk/previous-version.txt
-          echo "Previous version label: $prev"
-
-      - name: Assign immutable release identity
-        id: release
-        run: |
-          set -euo pipefail
-          version_label="${GITHUB_SHA}-${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}"
-          s3_key="shoc-backend/releases/dev/${GITHUB_SHA}/${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}/site.zip"
-          {
-            echo "version_label=${version_label}"
-            echo "s3_key=${s3_key}"
-          } >> "${GITHUB_OUTPUT}"
-
-      - name: Upload immutable bundle
-        run: |
-          set -euo pipefail
-          aws s3 cp .artifacts/elastic-beanstalk/site.zip \
-            "s3://${EB_BUCKET}/${{ steps.release.outputs.s3_key }}" \
-            --region us-east-1
-
-      - name: Create Elastic Beanstalk application version
-        run: |
-          set -euo pipefail
-          aws elasticbeanstalk create-application-version \
-            --application-name "${EB_APPLICATION_NAME}" \
-            --version-label "${{ steps.release.outputs.version_label }}" \
-            --description "GitHub Actions ${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}/actions/runs/${GITHUB_RUN_ID} attempt ${GITHUB_RUN_ATTEMPT}" \
-            --source-bundle "S3Bucket=${EB_BUCKET},S3Key=${{ steps.release.outputs.s3_key }}" \
-            --process \
-            --region us-east-1
-
-          status="UNPROCESSED"
-          for _ in $(seq 1 36); do
-            status="$(aws elasticbeanstalk describe-application-versions \
-              --application-name "${EB_APPLICATION_NAME}" \
-              --version-labels "${{ steps.release.outputs.version_label }}" \
-              --region us-east-1 \
-              --query 'ApplicationVersions[0].Status' \
-              --output text)"
-            echo "application version status: $status"
-            if [ "$status" = "PROCESSED" ]; then
-              exit 0
-            fi
-            if [ "$status" = "FAILED" ]; then
-              echo "Elastic Beanstalk failed to process ${{ steps.release.outputs.version_label }}." >&2
-              exit 1
-            fi
-            sleep 5
-          done
-          echo "Application version did not become PROCESSED." >&2
-          exit 1
-      - name: Discard blocking VCS run before GitHub CD
-        run: |
-          set -euo pipefail
-          python3 << 'PY'
-          import json, os, urllib.error, urllib.request
-
-          token = os.environ["TF_API_TOKEN"]
-          workspace = "shoc-backend-dev"
-          headers = {
-              "Authorization": f"Bearer {token}",
-              "Content-Type": "application/vnd.api+json",
-          }
-
-          def get(url):
-              req = urllib.request.Request(url, headers=headers)
-              with urllib.request.urlopen(req) as resp:
-                  return json.load(resp)
-
-          def post(url, payload):
-              data = json.dumps(payload).encode()
-              req = urllib.request.Request(
-                  url, data=data, method="POST", headers=headers
-              )
-              try:
-                  with urllib.request.urlopen(req) as resp:
-                      return resp.status
-              except urllib.error.HTTPError as exc:
-                  if exc.code in (409, 404):
-                      body = exc.read().decode("utf-8", "replace")
-                      print(f"discard returned HTTP {exc.code}: {body}")
-                      return exc.code
-                  raise
-
-          ws = get(
-              f"https://app.terraform.io/api/v2/organizations/seahaven/workspaces/{workspace}"
-          )["data"]
-          attrs = ws["attributes"]
-          if attrs.get("auto-apply") is True:
-              raise SystemExit("shoc-backend-dev auto-apply is on; refuse to continue")
-          if not attrs.get("speculative-enabled"):
-              raise SystemExit("speculative plans are off; refuse to continue")
-          if (attrs.get("vcs-repo") or {}).get("tags-regex"):
-              raise SystemExit("tag-based VCS triggering is set; refuse to continue")
-          expected_patterns = [
-              "terraform/live/dev/**",
-              "terraform/live/modules/**",
-          ]
-          if attrs.get("trigger-patterns") != expected_patterns:
-              raise SystemExit(
-                  "trigger-patterns must be "
-                  f"{expected_patterns}; got {attrs.get('trigger-patterns')}"
-              )
-          if not attrs.get("locked"):
-              print("workspace is unlocked")
-              raise SystemExit(0)
-
-          current = (
-              ws.get("relationships", {})
-              .get("current-run", {})
-              .get("data")
-          )
-          if not current:
-              raise SystemExit("workspace is locked without a current run")
-          run_id = current["id"]
-          run = get(f"https://app.terraform.io/api/v2/runs/{run_id}")["data"]
-          run_attrs = run["attributes"]
-          status = run_attrs.get("status")
-          plan_only = run_attrs.get("plan-only")
-          print(f"current run {run_id} status={status} plan-only={plan_only}")
-          if plan_only:
-              print("speculative run does not block GitHub CD")
-              raise SystemExit(0)
-          if status in {"applying", "apply_queued"}:
-              raise SystemExit(f"{run_id} is {status}; wait, do not discard an apply")
-          discardable = {
-              "pending", "planned", "cost_estimated", "policy_checked", "policy_override"
-          }
-          if status not in discardable:
-              raise SystemExit(f"{run_id} status {status} is not discardable")
-          code = post(
-              f"https://app.terraform.io/api/v2/runs/{run_id}/actions/discard",
-              {"comment": "Discarded so GitHub CD can create the version-only applyable run"},
-          )
-          print(f"discarded {run_id} http={code}")
-          PY
-
-      - name: Create Terraform release run
-        id: release-run
-        uses: hashicorp/tfc-workflows-github/actions/create-run@8e08d1ba957673f5fbf971a22b3219639dc45661 # v1.3.2
-        env:
-          TF_VAR_release_version_label: '"${{ steps.release.outputs.version_label }}"'
-        with:
-          workspace: shoc-backend-dev
-          message: "Release ${{ steps.release.outputs.version_label }} from GitHub Actions"
-
-      - name: Read Terraform release plan counts
-        id: release-plan
-        uses: hashicorp/tfc-workflows-github/actions/plan-output@8e08d1ba957673f5fbf971a22b3219639dc45661 # v1.3.2
-        with:
-          plan: ${{ steps.release-run.outputs.plan_id }}
-
-      - name: Reject non-version-only resource counts
-        env:
-          PLAN_ADD: ${{ steps.release-plan.outputs.add }}
-          PLAN_CHANGE: ${{ steps.release-plan.outputs.change }}
-          PLAN_DESTROY: ${{ steps.release-plan.outputs.destroy }}
-        run: |
-          set -euo pipefail
-          if [ "$PLAN_ADD" != "0" ] || [ "$PLAN_CHANGE" != "1" ] || [ "$PLAN_DESTROY" != "0" ]; then
-            echo "HCP plan counts are add=${PLAN_ADD} change=${PLAN_CHANGE} destroy=${PLAN_DESTROY}; expected 0/1/0." >&2
-            exit 1
-          fi
-
-      - name: Guard version-only Terraform plan
-        run: |
-          set -euo pipefail
-          python scripts/check-terraform-release-plan.py \
-            --plan-id "${{ steps.release-run.outputs.plan_id }}" \
-            --expected-version-label "${{ steps.release.outputs.version_label }}"
-
-      - name: Discard release run when the guard fails
-        if: failure() && steps.release-run.outcome == 'success'
-        uses: hashicorp/tfc-workflows-github/actions/discard-run@8e08d1ba957673f5fbf971a22b3219639dc45661 # v1.3.2
-        with:
-          run: ${{ steps.release-run.outputs.run_id }}
-          comment: Rejected by the version-only plan guard from GitHub Actions
-
-      - name: Apply Terraform release run
-        id: release-apply
-        continue-on-error: true
-        uses: hashicorp/tfc-workflows-github/actions/apply-run@8e08d1ba957673f5fbf971a22b3219639dc45661 # v1.3.2
-        with:
-          run: ${{ steps.release-run.outputs.run_id }}
-          comment: Apply version-only release from GitHub Actions ${{ github.sha }}
-
-      - name: Treat already-applied release run as success
-        env:
-          APPLY_OUTCOME: ${{ steps.release-apply.outcome }}
-          RUN_ID: ${{ steps.release-run.outputs.run_id }}
-        run: |
-          set -euo pipefail
-          if [ "$APPLY_OUTCOME" = "success" ]; then
-            echo "Apply succeeded."
-            exit 0
-          fi
-          python3 << 'PY'
-          import json, os, urllib.request
-          run_id = os.environ["RUN_ID"]
-          token = os.environ["TF_API_TOKEN"]
-          req = urllib.request.Request(
-              f"https://app.terraform.io/api/v2/runs/{run_id}",
-              headers={
-                  "Authorization": f"Bearer {token}",
-                  "Content-Type": "application/vnd.api+json",
-              },
-          )
-          with urllib.request.urlopen(req) as resp:
-              status = json.load(resp)["data"]["attributes"]["status"]
-          print(f"HCP run {run_id} status={status}")
-          if status == "applied":
-              raise SystemExit(0)
-          raise SystemExit(
-              f"Apply failed: GitHub outcome={os.environ['APPLY_OUTCOME']} "
-              f"HCP status={status}"
-          )
-          PY
-
-      - name: Verify exact application version is active
-        run: |
-          set -euo pipefail
-          expected="${{ steps.release.outputs.version_label }}"
-          status="Unknown"
-          current="Unknown"
-          health="Unknown"
-
-          for _ in $(seq 1 80); do
-            read -r status current health < <(
-              aws elasticbeanstalk describe-environments \
-                --environment-names "${EB_ENVIRONMENT_NAME}" \
-                --region us-east-1 \
-                --query 'Environments[0].[Status,VersionLabel,Health]' \
-                --output text
-            )
-            echo "environment status: $status; version: $current; health: $health"
-
-            if [ "$status" = "Ready" ]; then
-              if [ "$current" != "$expected" ]; then
-                echo "Environment became Ready on version $current, not the expected $expected." >&2
-                exit 1
-              fi
-              if [ "$health" = "Green" ] || [ "$health" = "Yellow" ]; then
-                echo "Expected application version is Ready and healthy."
-                exit 0
-              fi
-              # The expected version IS active. Elastic Beanstalk reports Ready as
-              # soon as the rollout finishes, before enhanced health has converged,
-              # so deciding on the first Ready poll fails a good release on a health
-              # value that was always going to change. Keep polling; an environment
-              # that is genuinely unhealthy still fails when the window runs out.
-              echo "Expected version is active; waiting for health to leave $health."
-            fi
-            sleep 15
-          done
-
-          echo "Expected application version did not become Ready and healthy within the deployment window (last seen: status=$status version=$current health=$health)." >&2
-          exit 1
-
-      - name: Post-deploy smoke
-        run: bash scripts/smoke-elastic-beanstalk.sh "${SMOKE_URL}"
-
-      - name: Verify webhook secret source is operational
-        run: |
-          set -euo pipefail
-          response_file="$(mktemp)"
-          trap 'rm -f "$response_file"' EXIT
-          status="$(curl --silent --show-error \
-            --output "$response_file" \
-            --write-out '%{http_code}' \
-            --request POST \
-            --header 'Content-Type: application/json' \
-            --header "X-SH-Timestamp: $(date +%s)" \
-            --header 'X-SH-Key-Id: deployment-smoke-invalid-key' \
-            --header "X-SH-Signature: v1=$(printf '0%.0s' {1..64})" \
-            --data '{}' \
-            "${SMOKE_URL}/api/webhooks/work-orders")"
-          if [ "$status" != "401" ]; then
-            echo "Expected enabled webhook with an operational secret source to reject the invalid probe with 401; received $status." >&2
-            sed -n '1,20p' "$response_file" >&2
-            exit 1
-          fi
-
-      - name: Restore previous application version on failure (schema is not reverted)
-        if: failure()
-        run: |
-          set -euo pipefail
-          prev_file=".artifacts/elastic-beanstalk/previous-version.txt"
-          if [ ! -f "$prev_file" ]; then
-            echo "No previous version captured; nothing to roll back." >&2
-            exit 0
-          fi
-          prev="$(cat "$prev_file")"
-          if [ -z "$prev" ] || [ "$prev" = "null" ] || [ "$prev" = "None" ] || [ "$prev" = "N/A" ]; then
-            echo "No previous version recorded; nothing to roll back." >&2
-            exit 0
-          fi
-
-          echo "Waiting for any in-flight environment update to settle..."
-          status="Unknown"
-          current="Unknown"
-          health="Unknown"
-          for _ in $(seq 1 80); do
-            read -r status current health < <(
-              aws elasticbeanstalk describe-environments \
-                --environment-names "${EB_ENVIRONMENT_NAME}" \
-                --region us-east-1 \
-                --query 'Environments[0].[Status,VersionLabel,Health]' \
-                --output text
-            )
-            echo "environment status: $status; version: $current; health: $health"
-            if [ "$status" = "Ready" ]; then
-              break
-            fi
-            sleep 15
-          done
-
-          if [ "$status" != "Ready" ]; then
-            echo "Environment did not settle before rollback." >&2
-            exit 1
-          fi
-          if [ "$current" = "$prev" ]; then
-            echo "Environment is already on previous version $prev."
-            exit 0
-          fi
-          if [[ ! "$prev" =~ ^[0-9a-f]{40}-[0-9]+-[0-9]+$ ]]; then
-            echo "Previous version $prev is not a Terraform-managed release label; cannot roll back through HCP." >&2
-            exit 1
-          fi
-          echo "rollback_label=$prev" >> "${GITHUB_OUTPUT}"
-        id: rollback-prepare
-
-      - name: Discard blocking VCS run before GitHub rollback
-        id: rollback-discard-vcs
-        if: failure() && steps.rollback-prepare.outputs.rollback_label != ''
-        run: |
-          set -euo pipefail
-          python3 << 'PY'
-          import json, os, urllib.error, urllib.request
-
-          token = os.environ["TF_API_TOKEN"]
-          workspace = "shoc-backend-dev"
-          headers = {
-              "Authorization": f"Bearer {token}",
-              "Content-Type": "application/vnd.api+json",
-          }
-
-          def get(url):
-              req = urllib.request.Request(url, headers=headers)
-              with urllib.request.urlopen(req) as resp:
-                  return json.load(resp)
-
-          def post(url, payload):
-              data = json.dumps(payload).encode()
-              req = urllib.request.Request(
-                  url, data=data, method="POST", headers=headers
-              )
-              try:
-                  with urllib.request.urlopen(req) as resp:
-                      return resp.status
-              except urllib.error.HTTPError as exc:
-                  if exc.code in (409, 404):
-                      body = exc.read().decode("utf-8", "replace")
-                      print(f"discard returned HTTP {exc.code}: {body}")
-                      return exc.code
-                  raise
-
-          ws = get(
-              f"https://app.terraform.io/api/v2/organizations/seahaven/workspaces/{workspace}"
-          )["data"]
-          attrs = ws["attributes"]
-          if attrs.get("auto-apply") is True:
-              raise SystemExit("shoc-backend-dev auto-apply is on; refuse to continue")
-          if not attrs.get("speculative-enabled"):
-              raise SystemExit("speculative plans are off; refuse to continue")
-          if (attrs.get("vcs-repo") or {}).get("tags-regex"):
-              raise SystemExit("tag-based VCS triggering is set; refuse to continue")
-          expected_patterns = [
-              "terraform/live/dev/**",
-              "terraform/live/modules/**",
-          ]
-          if attrs.get("trigger-patterns") != expected_patterns:
-              raise SystemExit(
-                  "trigger-patterns must be "
-                  f"{expected_patterns}; got {attrs.get('trigger-patterns')}"
-              )
-          if not attrs.get("locked"):
-              print("workspace is unlocked")
-              raise SystemExit(0)
-
-          current = (
-              ws.get("relationships", {})
-              .get("current-run", {})
-              .get("data")
-          )
-          if not current:
-              raise SystemExit("workspace is locked without a current run")
-          run_id = current["id"]
-          run = get(f"https://app.terraform.io/api/v2/runs/{run_id}")["data"]
-          run_attrs = run["attributes"]
-          status = run_attrs.get("status")
-          plan_only = run_attrs.get("plan-only")
-          print(f"current run {run_id} status={status} plan-only={plan_only}")
-          if plan_only:
-              print("speculative run does not block GitHub CD")
-              raise SystemExit(0)
-          if status in {"applying", "apply_queued"}:
-              raise SystemExit(f"{run_id} is {status}; wait, do not discard an apply")
-          discardable = {
-              "pending", "planned", "cost_estimated", "policy_checked", "policy_override"
-          }
-          if status not in discardable:
-              raise SystemExit(f"{run_id} status {status} is not discardable")
-          code = post(
-              f"https://app.terraform.io/api/v2/runs/{run_id}/actions/discard",
-              {"comment": "Discarded so GitHub CD can create the version-only applyable run"},
-          )
-          print(f"discarded {run_id} http={code}")
-          PY
-
-      - name: Create Terraform rollback run
-        id: rollback-run
-        if: failure() && steps.rollback-prepare.outputs.rollback_label != '' && steps.rollback-discard-vcs.outcome == 'success'
-        uses: hashicorp/tfc-workflows-github/actions/create-run@8e08d1ba957673f5fbf971a22b3219639dc45661 # v1.3.2
-        env:
-          TF_VAR_release_version_label: '"${{ steps.rollback-prepare.outputs.rollback_label }}"'
-        with:
-          workspace: shoc-backend-dev
-          message: "Rollback to ${{ steps.rollback-prepare.outputs.rollback_label }} from GitHub Actions"
-      - name: Read Terraform rollback plan counts
-        id: rollback-plan
-        if: failure() && steps.rollback-run.outcome == 'success'
-        uses: hashicorp/tfc-workflows-github/actions/plan-output@8e08d1ba957673f5fbf971a22b3219639dc45661 # v1.3.2
-        with:
-          plan: ${{ steps.rollback-run.outputs.plan_id }}
-
-      - name: Reject non-version-only rollback counts
-        id: rollback-count-guard
-        if: failure() && steps.rollback-plan.outcome == 'success'
-        env:
-          PLAN_ADD: ${{ steps.rollback-plan.outputs.add }}
-          PLAN_CHANGE: ${{ steps.rollback-plan.outputs.change }}
-          PLAN_DESTROY: ${{ steps.rollback-plan.outputs.destroy }}
-        run: |
-          set -euo pipefail
-          if [ "$PLAN_ADD" != "0" ] || [ "$PLAN_CHANGE" != "1" ] || [ "$PLAN_DESTROY" != "0" ]; then
-            echo "Rollback HCP plan counts are add=${PLAN_ADD} change=${PLAN_CHANGE} destroy=${PLAN_DESTROY}; expected 0/1/0." >&2
-            exit 1
-          fi
-
-      - name: Guard version-only Terraform rollback plan
-        id: rollback-json-guard
-        if: failure() && steps.rollback-count-guard.outcome == 'success'
-        run: |
-          set -euo pipefail
-          python scripts/check-terraform-release-plan.py \
-            --plan-id "${{ steps.rollback-run.outputs.plan_id }}" \
-            --expected-version-label "${{ steps.rollback-prepare.outputs.rollback_label }}"
-
-      - name: Discard rollback run when the guard fails
-        if: failure() && steps.rollback-run.outcome == 'success' && steps.rollback-json-guard.outcome != 'success'
-        uses: hashicorp/tfc-workflows-github/actions/discard-run@8e08d1ba957673f5fbf971a22b3219639dc45661 # v1.3.2
-        with:
-          run: ${{ steps.rollback-run.outputs.run_id }}
-          comment: Rejected by the version-only rollback plan guard from GitHub Actions
-
-      - name: Apply Terraform rollback run
-        id: rollback-apply
-        if: failure() && steps.rollback-json-guard.outcome == 'success'
-        continue-on-error: true
-        uses: hashicorp/tfc-workflows-github/actions/apply-run@8e08d1ba957673f5fbf971a22b3219639dc45661 # v1.3.2
-        with:
-          run: ${{ steps.rollback-run.outputs.run_id }}
-          comment: Apply version-only rollback from GitHub Actions ${{ github.sha }}
-
-      - name: Treat already-applied rollback run as success
-        id: rollback-apply-result
-        if: failure() && steps.rollback-apply.outcome != 'skipped'
-        env:
-          APPLY_OUTCOME: ${{ steps.rollback-apply.outcome }}
-          RUN_ID: ${{ steps.rollback-run.outputs.run_id }}
-        run: |
-          set -euo pipefail
-          if [ "$APPLY_OUTCOME" = "success" ]; then
-            echo "Apply succeeded."
-            exit 0
-          fi
-          python3 << 'PY'
-          import json, os, urllib.request
-          run_id = os.environ["RUN_ID"]
-          token = os.environ["TF_API_TOKEN"]
-          req = urllib.request.Request(
-              f"https://app.terraform.io/api/v2/runs/{run_id}",
-              headers={
-                  "Authorization": f"Bearer {token}",
-                  "Content-Type": "application/vnd.api+json",
-              },
-          )
-          with urllib.request.urlopen(req) as resp:
-              status = json.load(resp)["data"]["attributes"]["status"]
-          print(f"HCP run {run_id} status={status}")
-          if status == "applied":
-              raise SystemExit(0)
-          raise SystemExit(
-              f"Apply failed: GitHub outcome={os.environ['APPLY_OUTCOME']} "
-              f"HCP status={status}"
-          )
-          PY
-
-      - name: Verify previous application version is active
-        if: failure() && steps.rollback-apply-result.outcome == 'success'
-        run: |
-          set -euo pipefail
-          prev="${{ steps.rollback-prepare.outputs.rollback_label }}"
-          echo "Database migrations are not reverted; deployable migrations must follow the expand/contract policy."
-          status="Unknown"
-          current="Unknown"
-          health="Unknown"
-          for _ in $(seq 1 80); do
-            read -r status current health < <(
-              aws elasticbeanstalk describe-environments \
-                --environment-names "${EB_ENVIRONMENT_NAME}" \
-                --region us-east-1 \
-                --query 'Environments[0].[Status,VersionLabel,Health]' \
-                --output text
-            )
-            echo "environment status: $status; version: $current; health: $health"
-            if [ "$status" = "Ready" ]; then
-              if [ "$current" != "$prev" ]; then
-                echo "Rollback reached Ready on version $current, not the previous $prev." >&2
-                exit 1
-              fi
-              if [ "$health" = "Green" ] || [ "$health" = "Yellow" ]; then
-                echo "Application version restore complete; previous code is Ready and healthy."
-                exit 0
-              fi
-              # Same convergence gap as the release check above: the previous version
-              # is back, health has not settled yet, and reporting a failed rollback
-              # here hides the fact that the restore itself worked.
-              echo "Previous version is active; waiting for health to leave $health."
-            fi
-            sleep 15
-          done
-          echo "Environment did not return to Ready and healthy within the rollback window (last seen: status=$status version=$current health=$health)." >&2
-          exit 1
-
-  deploy-staging:
-    name: Deploy shoc-backend-staging through Terraform
-    if: >
-      (github.event_name == 'push' && github.ref == 'refs/heads/staging') ||
-      (github.event_name == 'workflow_dispatch' && github.ref == 'refs/heads/staging')
-    needs: validate
-    runs-on: ubuntu-latest
-    timeout-minutes: 180
-    permissions:
-      contents: read
-      id-token: write
-    environment:
-      name: staging
-    concurrency:
-      group: deploy-staging
-      cancel-in-progress: false
-    env:
-      TF_CLOUD_ORGANIZATION: seahaven
-      TF_API_TOKEN: ${{ secrets.TF_API_TOKEN }}
-      EB_APPLICATION_NAME: shoc-backend
-      EB_ENVIRONMENT_NAME: shoc-backend-staging
-      SMOKE_URL: https://api.staging.seahaven.com
-      EB_BUCKET: elasticbeanstalk-us-east-1-396287094661
-    steps:
-      - name: Checkout
-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-
-      - name: Set up .NET
-        uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
-        with:
-          dotnet-version: "8.0.x"
-
-      - name: Build Elastic Beanstalk source bundle
-        run: bash scripts/package-elastic-beanstalk.sh
-
-      - name: Validate exact release bundle
-        run: bash scripts/validate-elastic-beanstalk-bundle.sh
-
-      - name: Configure AWS credentials (OIDC)
-        uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6.2.3
-        with:
-          role-to-assume: ${{ secrets.AWS_DEPLOY_ROLE_ARN }}
-          aws-region: us-east-1
-          audience: sts.amazonaws.com
-
-      - name: Capture current environment version
-        run: |
-          set -euo pipefail
-          prev="$(aws elasticbeanstalk describe-environments \
-            --environment-names "${EB_ENVIRONMENT_NAME}" \
-            --region us-east-1 \
-            --query 'Environments[0].VersionLabel' \
-            --output text)"
-          echo "$prev" > .artifacts/elastic-beanstalk/previous-version.txt
-          echo "Previous version label: $prev"
-
-      - name: Assign immutable release identity
-        id: release
-        run: |
-          set -euo pipefail
-          version_label="${GITHUB_SHA}-${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}"
-          s3_key="shoc-backend/releases/staging/${GITHUB_SHA}/${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}/site.zip"
-          {
-            echo "version_label=${version_label}"
-            echo "s3_key=${s3_key}"
-          } >> "${GITHUB_OUTPUT}"
-
-      - name: Upload immutable bundle
-        run: |
-          set -euo pipefail
-          aws s3 cp .artifacts/elastic-beanstalk/site.zip \
-            "s3://${EB_BUCKET}/${{ steps.release.outputs.s3_key }}" \
-            --region us-east-1
-
-      - name: Create Elastic Beanstalk application version
-        run: |
-          set -euo pipefail
-          aws elasticbeanstalk create-application-version \
-            --application-name "${EB_APPLICATION_NAME}" \
-            --version-label "${{ steps.release.outputs.version_label }}" \
-            --description "GitHub Actions ${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}/actions/runs/${GITHUB_RUN_ID} attempt ${GITHUB_RUN_ATTEMPT}" \
-            --source-bundle "S3Bucket=${EB_BUCKET},S3Key=${{ steps.release.outputs.s3_key }}" \
-            --process \
-            --region us-east-1
-
-          status="UNPROCESSED"
-          for _ in $(seq 1 36); do
-            status="$(aws elasticbeanstalk describe-application-versions \
-              --application-name "${EB_APPLICATION_NAME}" \
-              --version-labels "${{ steps.release.outputs.version_label }}" \
-              --region us-east-1 \
-              --query 'ApplicationVersions[0].Status' \
-              --output text)"
-            echo "application version status: $status"
-            if [ "$status" = "PROCESSED" ]; then
-              exit 0
-            fi
-            if [ "$status" = "FAILED" ]; then
-              echo "Elastic Beanstalk failed to process ${{ steps.release.outputs.version_label }}." >&2
-              exit 1
-            fi
-            sleep 5
-          done
-          echo "Application version did not become PROCESSED." >&2
-          exit 1
-
-      - name: Discard blocking VCS run before GitHub CD
-        run: |
-          set -euo pipefail
-          python3 << 'PY'
-          import json, os, urllib.error, urllib.request
-
-          token = os.environ["TF_API_TOKEN"]
-          workspace = "shoc-backend-staging"
-          headers = {
-              "Authorization": f"Bearer {token}",
-              "Content-Type": "application/vnd.api+json",
-          }
-
-          def get(url):
-              req = urllib.request.Request(url, headers=headers)
-              with urllib.request.urlopen(req) as resp:
-                  return json.load(resp)
-
-          def post(url, payload):
-              data = json.dumps(payload).encode()
-              req = urllib.request.Request(
-                  url, data=data, method="POST", headers=headers
-              )
-              try:
-                  with urllib.request.urlopen(req) as resp:
-                      return resp.status
-              except urllib.error.HTTPError as exc:
-                  if exc.code in (409, 404):
-                      body = exc.read().decode("utf-8", "replace")
-                      print(f"discard returned HTTP {exc.code}: {body}")
-                      return exc.code
-                  raise
-
-          ws = get(
-              f"https://app.terraform.io/api/v2/organizations/seahaven/workspaces/{workspace}"
-          )["data"]
-          attrs = ws["attributes"]
-          if attrs.get("auto-apply") is True:
-              raise SystemExit("shoc-backend-staging auto-apply is on; refuse to continue")
-          if not attrs.get("speculative-enabled"):
-              raise SystemExit("speculative plans are off; refuse to continue")
-          if (attrs.get("vcs-repo") or {}).get("tags-regex"):
-              raise SystemExit("tag-based VCS triggering is set; refuse to continue")
-          expected_patterns = [
-              "terraform/live/staging/**",
-              "terraform/live/modules/**",
-          ]
-          if attrs.get("trigger-patterns") != expected_patterns:
-              raise SystemExit(
-                  "trigger-patterns must be "
-                  f"{expected_patterns}; got {attrs.get('trigger-patterns')}"
-              )
-          if not attrs.get("locked"):
-              print("workspace is unlocked")
-              raise SystemExit(0)
-
-          current = (
-              ws.get("relationships", {})
-              .get("current-run", {})
-              .get("data")
-          )
-          if not current:
-              raise SystemExit("workspace is locked without a current run")
-          run_id = current["id"]
-          run = get(f"https://app.terraform.io/api/v2/runs/{run_id}")["data"]
-          run_attrs = run["attributes"]
-          status = run_attrs.get("status")
-          plan_only = run_attrs.get("plan-only")
-          print(f"current run {run_id} status={status} plan-only={plan_only}")
-          if plan_only:
-              print("speculative run does not block GitHub CD")
-              raise SystemExit(0)
-          if status in {"applying", "apply_queued"}:
-              raise SystemExit(f"{run_id} is {status}; wait, do not discard an apply")
-          discardable = {
-              "pending", "planned", "cost_estimated", "policy_checked", "policy_override"
-          }
-          if status not in discardable:
-              raise SystemExit(f"{run_id} status {status} is not discardable")
-          code = post(
-              f"https://app.terraform.io/api/v2/runs/{run_id}/actions/discard",
-              {"comment": "Discarded so GitHub CD can create the version-only applyable run"},
-          )
-          print(f"discarded {run_id} http={code}")
-          PY
-
-      - name: Create Terraform release run
-        id: release-run
-        uses: hashicorp/tfc-workflows-github/actions/create-run@8e08d1ba957673f5fbf971a22b3219639dc45661 # v1.3.2
-        env:
-          TF_VAR_release_version_label: '"${{ steps.release.outputs.version_label }}"'
-        with:
-          workspace: shoc-backend-staging
-          message: "Release ${{ steps.release.outputs.version_label }} from GitHub Actions"
-
-      - name: Read Terraform release plan counts
-        id: release-plan
-        uses: hashicorp/tfc-workflows-github/actions/plan-output@8e08d1ba957673f5fbf971a22b3219639dc45661 # v1.3.2
-        with:
-          plan: ${{ steps.release-run.outputs.plan_id }}
-
-      - name: Reject non-version-only resource counts
-        env:
-          PLAN_ADD: ${{ steps.release-plan.outputs.add }}
-          PLAN_CHANGE: ${{ steps.release-plan.outputs.change }}
-          PLAN_DESTROY: ${{ steps.release-plan.outputs.destroy }}
-        run: |
-          set -euo pipefail
-          if [ "$PLAN_ADD" != "0" ] || [ "$PLAN_CHANGE" != "1" ] || [ "$PLAN_DESTROY" != "0" ]; then
-            echo "HCP plan counts are add=${PLAN_ADD} change=${PLAN_CHANGE} destroy=${PLAN_DESTROY}; expected 0/1/0." >&2
-            exit 1
-          fi
-
-      - name: Guard version-only Terraform plan
-        run: |
-          set -euo pipefail
-          python scripts/check-terraform-release-plan.py \
-            --plan-id "${{ steps.release-run.outputs.plan_id }}" \
-            --expected-version-label "${{ steps.release.outputs.version_label }}"
-
-      - name: Discard release run when the guard fails
-        if: failure() && steps.release-run.outcome == 'success'
-        uses: hashicorp/tfc-workflows-github/actions/discard-run@8e08d1ba957673f5fbf971a22b3219639dc45661 # v1.3.2
-        with:
-          run: ${{ steps.release-run.outputs.run_id }}
-          comment: Rejected by the version-only plan guard from GitHub Actions
-
-      - name: Apply Terraform release run
-        id: release-apply
-        continue-on-error: true
-        uses: hashicorp/tfc-workflows-github/actions/apply-run@8e08d1ba957673f5fbf971a22b3219639dc45661 # v1.3.2
-        with:
-          run: ${{ steps.release-run.outputs.run_id }}
-          comment: Apply version-only release from GitHub Actions ${{ github.sha }}
-
-      - name: Treat already-applied release run as success
-        env:
-          APPLY_OUTCOME: ${{ steps.release-apply.outcome }}
-          RUN_ID: ${{ steps.release-run.outputs.run_id }}
-        run: |
-          set -euo pipefail
-          if [ "$APPLY_OUTCOME" = "success" ]; then
-            echo "Apply succeeded."
-            exit 0
-          fi
-          python3 << 'PY'
-          import json, os, urllib.request
-          run_id = os.environ["RUN_ID"]
-          token = os.environ["TF_API_TOKEN"]
-          req = urllib.request.Request(
-              f"https://app.terraform.io/api/v2/runs/{run_id}",
-              headers={
-                  "Authorization": f"Bearer {token}",
-                  "Content-Type": "application/vnd.api+json",
-              },
-          )
-          with urllib.request.urlopen(req) as resp:
-              status = json.load(resp)["data"]["attributes"]["status"]
-          print(f"HCP run {run_id} status={status}")
-          if status == "applied":
-              raise SystemExit(0)
-          raise SystemExit(
-              f"Apply failed: GitHub outcome={os.environ['APPLY_OUTCOME']} "
-              f"HCP status={status}"
-          )
-          PY
-
-      - name: Verify exact application version is active
-        run: |
-          set -euo pipefail
-          expected="${{ steps.release.outputs.version_label }}"
-          status="Unknown"
-          current="Unknown"
-          health="Unknown"
-
-          for _ in $(seq 1 80); do
-            read -r status current health < <(
-              aws elasticbeanstalk describe-environments \
-                --environment-names "${EB_ENVIRONMENT_NAME}" \
-                --region us-east-1 \
-                --query 'Environments[0].[Status,VersionLabel,Health]' \
-                --output text
-            )
-            echo "environment status: $status; version: $current; health: $health"
-
-            if [ "$status" = "Ready" ]; then
-              if [ "$current" != "$expected" ]; then
-                echo "Environment became Ready on version $current, not the expected $expected." >&2
-                exit 1
-              fi
-              if [ "$health" = "Green" ] || [ "$health" = "Yellow" ]; then
-                echo "Expected application version is Ready and healthy."
-                exit 0
-              fi
-              # The expected version IS active. Elastic Beanstalk reports Ready as
-              # soon as the rollout finishes, before enhanced health has converged,
-              # so deciding on the first Ready poll fails a good release on a health
-              # value that was always going to change. Keep polling; an environment
-              # that is genuinely unhealthy still fails when the window runs out.
-              echo "Expected version is active; waiting for health to leave $health."
-            fi
-            sleep 15
-          done
-
-          echo "Expected application version did not become Ready and healthy within the deployment window (last seen: status=$status version=$current health=$health)." >&2
-          exit 1
-
-      - name: Post-deploy smoke
-        run: bash scripts/smoke-elastic-beanstalk.sh "${SMOKE_URL}"
-
-      - name: Verify webhook secret source is operational
-        run: |
-          set -euo pipefail
-          response_file="$(mktemp)"
-          trap 'rm -f "$response_file"' EXIT
-          status="$(curl --silent --show-error \
-            --output "$response_file" \
-            --write-out '%{http_code}' \
-            --request POST \
-            --header 'Content-Type: application/json' \
-            --header "X-SH-Timestamp: $(date +%s)" \
-            --header 'X-SH-Key-Id: deployment-smoke-invalid-key' \
-            --header "X-SH-Signature: v1=$(printf '0%.0s' {1..64})" \
-            --data '{}' \
-            "${SMOKE_URL}/api/webhooks/work-orders")"
-          if [ "$status" != "401" ]; then
-            echo "Expected enabled webhook with an operational secret source to reject the invalid probe with 401; received $status." >&2
-            sed -n '1,20p' "$response_file" >&2
-            exit 1
-          fi
-
-      - name: Restore previous application version on failure (schema is not reverted)
-        if: failure()
-        run: |
-          set -euo pipefail
-          prev_file=".artifacts/elastic-beanstalk/previous-version.txt"
-          if [ ! -f "$prev_file" ]; then
-            echo "No previous version captured; nothing to roll back." >&2
-            exit 0
-          fi
-          prev="$(cat "$prev_file")"
-          if [ -z "$prev" ] || [ "$prev" = "null" ] || [ "$prev" = "None" ] || [ "$prev" = "N/A" ]; then
-            echo "No previous version recorded; nothing to roll back." >&2
-            exit 0
-          fi
-
-          echo "Waiting for any in-flight environment update to settle..."
-          status="Unknown"
-          current="Unknown"
-          health="Unknown"
-          for _ in $(seq 1 80); do
-            read -r status current health < <(
-              aws elasticbeanstalk describe-environments \
-                --environment-names "${EB_ENVIRONMENT_NAME}" \
-                --region us-east-1 \
-                --query 'Environments[0].[Status,VersionLabel,Health]' \
-                --output text
-            )
-            echo "environment status: $status; version: $current; health: $health"
-            if [ "$status" = "Ready" ]; then
-              break
-            fi
-            sleep 15
-          done
-
-          if [ "$status" != "Ready" ]; then
-            echo "Environment did not settle before rollback." >&2
-            exit 1
-          fi
-          if [ "$current" = "$prev" ]; then
-            echo "Environment is already on previous version $prev."
-            exit 0
-          fi
-          if [[ ! "$prev" =~ ^[0-9a-f]{40}-[0-9]+-[0-9]+$ ]]; then
-            echo "Previous version $prev is not a Terraform-managed release label; cannot roll back through HCP." >&2
-            exit 1
-          fi
-          echo "rollback_label=$prev" >> "${GITHUB_OUTPUT}"
-        id: rollback-prepare
-
-      - name: Discard blocking VCS run before GitHub rollback
-        id: rollback-discard-vcs
-        if: failure() && steps.rollback-prepare.outputs.rollback_label != ''
-        run: |
-          set -euo pipefail
-          python3 << 'PY'
-          import json, os, urllib.error, urllib.request
-
-          token = os.environ["TF_API_TOKEN"]
-          workspace = "shoc-backend-staging"
-          headers = {
-              "Authorization": f"Bearer {token}",
-              "Content-Type": "application/vnd.api+json",
-          }
-
-          def get(url):
-              req = urllib.request.Request(url, headers=headers)
-              with urllib.request.urlopen(req) as resp:
-                  return json.load(resp)
-
-          def post(url, payload):
-              data = json.dumps(payload).encode()
-              req = urllib.request.Request(
-                  url, data=data, method="POST", headers=headers
-              )
-              try:
-                  with urllib.request.urlopen(req) as resp:
-                      return resp.status
-              except urllib.error.HTTPError as exc:
-                  if exc.code in (409, 404):
-                      body = exc.read().decode("utf-8", "replace")
-                      print(f"discard returned HTTP {exc.code}: {body}")
-                      return exc.code
-                  raise
-
-          ws = get(
-              f"https://app.terraform.io/api/v2/organizations/seahaven/workspaces/{workspace}"
-          )["data"]
-          attrs = ws["attributes"]
-          if attrs.get("auto-apply") is True:
-              raise SystemExit("shoc-backend-staging auto-apply is on; refuse to continue")
-          if not attrs.get("speculative-enabled"):
-              raise SystemExit("speculative plans are off; refuse to continue")
-          if (attrs.get("vcs-repo") or {}).get("tags-regex"):
-              raise SystemExit("tag-based VCS triggering is set; refuse to continue")
-          expected_patterns = [
-              "terraform/live/staging/**",
-              "terraform/live/modules/**",
-          ]
-          if attrs.get("trigger-patterns") != expected_patterns:
-              raise SystemExit(
-                  "trigger-patterns must be "
-                  f"{expected_patterns}; got {attrs.get('trigger-patterns')}"
-              )
-          if not attrs.get("locked"):
-              print("workspace is unlocked")
-              raise SystemExit(0)
-
-          current = (
-              ws.get("relationships", {})
-              .get("current-run", {})
-              .get("data")
-          )
-          if not current:
-              raise SystemExit("workspace is locked without a current run")
-          run_id = current["id"]
-          run = get(f"https://app.terraform.io/api/v2/runs/{run_id}")["data"]
-          run_attrs = run["attributes"]
-          status = run_attrs.get("status")
-          plan_only = run_attrs.get("plan-only")
-          print(f"current run {run_id} status={status} plan-only={plan_only}")
-          if plan_only:
-              print("speculative run does not block GitHub CD")
-              raise SystemExit(0)
-          if status in {"applying", "apply_queued"}:
-              raise SystemExit(f"{run_id} is {status}; wait, do not discard an apply")
-          discardable = {
-              "pending", "planned", "cost_estimated", "policy_checked", "policy_override"
-          }
-          if status not in discardable:
-              raise SystemExit(f"{run_id} status {status} is not discardable")
-          code = post(
-              f"https://app.terraform.io/api/v2/runs/{run_id}/actions/discard",
-              {"comment": "Discarded so GitHub CD can create the version-only applyable run"},
-          )
-          print(f"discarded {run_id} http={code}")
-          PY
-
-      - name: Create Terraform rollback run
-        id: rollback-run
-        if: failure() && steps.rollback-prepare.outputs.rollback_label != '' && steps.rollback-discard-vcs.outcome == 'success'
-        uses: hashicorp/tfc-workflows-github/actions/create-run@8e08d1ba957673f5fbf971a22b3219639dc45661 # v1.3.2
-        env:
-          TF_VAR_release_version_label: '"${{ steps.rollback-prepare.outputs.rollback_label }}"'
-        with:
-          workspace: shoc-backend-staging
-          message: "Rollback to ${{ steps.rollback-prepare.outputs.rollback_label }} from GitHub Actions"
-      - name: Read Terraform rollback plan counts
-        id: rollback-plan
-        if: failure() && steps.rollback-run.outcome == 'success'
-        uses: hashicorp/tfc-workflows-github/actions/plan-output@8e08d1ba957673f5fbf971a22b3219639dc45661 # v1.3.2
-        with:
-          plan: ${{ steps.rollback-run.outputs.plan_id }}
-
-      - name: Reject non-version-only rollback counts
-        id: rollback-count-guard
-        if: failure() && steps.rollback-plan.outcome == 'success'
-        env:
-          PLAN_ADD: ${{ steps.rollback-plan.outputs.add }}
-          PLAN_CHANGE: ${{ steps.rollback-plan.outputs.change }}
-          PLAN_DESTROY: ${{ steps.rollback-plan.outputs.destroy }}
-        run: |
-          set -euo pipefail
-          if [ "$PLAN_ADD" != "0" ] || [ "$PLAN_CHANGE" != "1" ] || [ "$PLAN_DESTROY" != "0" ]; then
-            echo "Rollback HCP plan counts are add=${PLAN_ADD} change=${PLAN_CHANGE} destroy=${PLAN_DESTROY}; expected 0/1/0." >&2
-            exit 1
-          fi
-
-      - name: Guard version-only Terraform rollback plan
-        id: rollback-json-guard
-        if: failure() && steps.rollback-count-guard.outcome == 'success'
-        run: |
-          set -euo pipefail
-          python scripts/check-terraform-release-plan.py \
-            --plan-id "${{ steps.rollback-run.outputs.plan_id }}" \
-            --expected-version-label "${{ steps.rollback-prepare.outputs.rollback_label }}"
-
-      - name: Discard rollback run when the guard fails
-        if: failure() && steps.rollback-run.outcome == 'success' && steps.rollback-json-guard.outcome != 'success'
-        uses: hashicorp/tfc-workflows-github/actions/discard-run@8e08d1ba957673f5fbf971a22b3219639dc45661 # v1.3.2
-        with:
-          run: ${{ steps.rollback-run.outputs.run_id }}
-          comment: Rejected by the version-only rollback plan guard from GitHub Actions
-
-      - name: Apply Terraform rollback run
-        id: rollback-apply
-        if: failure() && steps.rollback-json-guard.outcome == 'success'
-        continue-on-error: true
-        uses: hashicorp/tfc-workflows-github/actions/apply-run@8e08d1ba957673f5fbf971a22b3219639dc45661 # v1.3.2
-        with:
-          run: ${{ steps.rollback-run.outputs.run_id }}
-          comment: Apply version-only rollback from GitHub Actions ${{ github.sha }}
-
-      - name: Treat already-applied rollback run as success
-        id: rollback-apply-result
-        if: failure() && steps.rollback-apply.outcome != 'skipped'
-        env:
-          APPLY_OUTCOME: ${{ steps.rollback-apply.outcome }}
-          RUN_ID: ${{ steps.rollback-run.outputs.run_id }}
-        run: |
-          set -euo pipefail
-          if [ "$APPLY_OUTCOME" = "success" ]; then
-            echo "Apply succeeded."
-            exit 0
-          fi
-          python3 << 'PY'
-          import json, os, urllib.request
-          run_id = os.environ["RUN_ID"]
-          token = os.environ["TF_API_TOKEN"]
-          req = urllib.request.Request(
-              f"https://app.terraform.io/api/v2/runs/{run_id}",
-              headers={
-                  "Authorization": f"Bearer {token}",
-                  "Content-Type": "application/vnd.api+json",
-              },
-          )
-          with urllib.request.urlopen(req) as resp:
-              status = json.load(resp)["data"]["attributes"]["status"]
-          print(f"HCP run {run_id} status={status}")
-          if status == "applied":
-              raise SystemExit(0)
-          raise SystemExit(
-              f"Apply failed: GitHub outcome={os.environ['APPLY_OUTCOME']} "
-              f"HCP status={status}"
-          )
-          PY
-
-      - name: Verify previous application version is active
-        if: failure() && steps.rollback-apply-result.outcome == 'success'
-        run: |
-          set -euo pipefail
-          prev="${{ steps.rollback-prepare.outputs.rollback_label }}"
-          echo "Database migrations are not reverted; deployable migrations must follow the expand/contract policy."
-          status="Unknown"
-          current="Unknown"
-          health="Unknown"
-          for _ in $(seq 1 80); do
-            read -r status current health < <(
-              aws elasticbeanstalk describe-environments \
-                --environment-names "${EB_ENVIRONMENT_NAME}" \
-                --region us-east-1 \
-                --query 'Environments[0].[Status,VersionLabel,Health]' \
-                --output text
-            )
-            echo "environment status: $status; version: $current; health: $health"
-            if [ "$status" = "Ready" ]; then
-              if [ "$current" != "$prev" ]; then
-                echo "Rollback reached Ready on version $current, not the previous $prev." >&2
-                exit 1
-              fi
-              if [ "$health" = "Green" ] || [ "$health" = "Yellow" ]; then
-                echo "Application version restore complete; previous code is Ready and healthy."
-                exit 0
-              fi
-              # Same convergence gap as the release check above: the previous version
-              # is back, health has not settled yet, and reporting a failed rollback
-              # here hides the fact that the restore itself worked.
-              echo "Previous version is active; waiting for health to leave $health."
-            fi
-            sleep 15
-          done
-          echo "Environment did not return to Ready and healthy within the rollback window (last seen: status=$status version=$current health=$health)." >&2
-          exit 1
diff --git a/QUALITY_GATES.md b/QUALITY_GATES.md
index 9d6609e..c1a83a6 100644
--- a/QUALITY_GATES.md
+++ b/QUALITY_GATES.md
@@ -73,8 +73,6 @@ remains in the matrix. HCP plan/apply roles stay in org-baseline; this
 repository never manages `hcptf-*` roles.
 
 The former G12 version-only HCP apply guard is not part of the repository gate.
-`scripts/check-terraform-release-plan.py` remains only while
-`.github/workflows/deploy.yml` is still present.
 
 G13 fails when the same diff contains both `terraform/` and deployable
 application files. Workflow, documentation, and gate-script changes may share
diff --git a/scripts/check-terraform-release-plan.py b/scripts/check-terraform-release-plan.py
deleted file mode 100644
index e0f8a88..0000000
--- a/scripts/check-terraform-release-plan.py
+++ /dev/null
@@ -1,328 +0,0 @@
-#!/usr/bin/env python3
-"""Reject HCP Terraform plans that are not a version-only Elastic Beanstalk update.
-
-This script may read a local plan JSON file or download plan JSON from the
-documented HashiCorp endpoint:
-
-    GET https://app.terraform.io/api/v2/plans/:id/json-output
-
-The download follows exactly one redirect, and only to archivist.terraform.io.
-It does not create, apply, discard, or poll runs.
-"""
-
-from __future__ import annotations
-
-import argparse
-import json
-import os
-import re
-import ssl
-import sys
-import urllib.error
-import urllib.request
-from pathlib import Path
-from typing import Any, Callable
-from urllib.parse import urlparse
-
-
-RELEASE_ADDRESS = "module.environment.aws_elastic_beanstalk_environment.this"
-API_HOST = "app.terraform.io"
-ARCHIVE_HOST = "archivist.terraform.io"
-PLAN_ID_RE = re.compile(r"^plan-[A-Za-z0-9]+$")
-VERSION_LABEL_RE = re.compile(r"^[0-9a-f]{40}-[0-9]+-[0-9]+$")
-IGNORED_ACTIONS = {"no-op", "read"}
-UNSAFE_ACTIONS = {"create", "delete"}
-# Wholly unknown computed attributes may be ignored. Nested unknowns on any
-# other attribute are treated as changes so the version-only guard fails closed.
-COMPUTED_UNKNOWN_ATTRIBUTES = frozenset({"instances", "load_balancers"})
-REDIRECT_STATUSES = {301, 302, 303, 307, 308}
-
-UrlOpen = Callable[..., Any]
-
-
-class _NoRedirectHandler(urllib.request.HTTPRedirectHandler):
-    """Return the redirect response instead of following it."""
-
-    def http_error_301(self, req, fp, code, msg, headers):
-        return self._capture(req, fp, code, headers)
-
-    http_error_302 = http_error_303 = http_error_307 = http_error_308 = http_error_301
-
-    @staticmethod
-    def _capture(req, fp, code, headers):
-        response = urllib.response.addinfourl(fp, headers, req.full_url, code=code)
-        response.msg = "Redirect"
-        return response
-
-
-def _urlopen_without_redirects(
-    *handlers: urllib.request.BaseHandler,
-) -> UrlOpen:
-    context = ssl.create_default_context()
-    opener = urllib.request.build_opener(
-        urllib.request.HTTPSHandler(context=context),
-        _NoRedirectHandler,
-        *handlers,
-    )
-    return opener.open
-
-
-def parse_args() -> argparse.Namespace:
-    parser = argparse.ArgumentParser()
-    source = parser.add_mutually_exclusive_group(required=True)
-    source.add_argument(
-        "plan_json",
-        type=Path,
-        nargs="?",
-        help="Local Terraform plan JSON. Mutually exclusive with --plan-id.",
-    )
-    source.add_argument(
-        "--plan-id",
-        help="HCP Terraform plan ID. Downloads JSON from app.terraform.io.",
-    )
-    parser.add_argument(
-        "--expected-version-label",
-        required=True,
-        help="Immutable application version the plan must apply.",
-    )
-    parser.add_argument(
-        "--evidence-out",
-        type=Path,
-        help="Write machine-readable proof after every assertion passes.",
-    )
-    return parser.parse_args()
-
-
-def download_plan_json(
-    plan_id: str,
-    token: str,
-    *,
-    urlopen: UrlOpen | None = None,
-    handlers: tuple[urllib.request.BaseHandler, ...] = (),
-) -> dict[str, Any]:
-    if not PLAN_ID_RE.fullmatch(plan_id):
-        raise ValueError(f"plan id {plan_id!r} is not a valid HCP plan id")
-    if not token:
-        raise ValueError("TF_API_TOKEN is required to download plan JSON")
-
-    opener = urlopen or _urlopen_without_redirects(*handlers)
-    api_url = f"https://{API_HOST}/api/v2/plans/{plan_id}/json-output"
-    request = urllib.request.Request(
-        api_url,
-        method="GET",
-        headers={
-            "Authorization": f"Bearer {token}",
-            "Content-Type": "application/vnd.api+json",
-            "Accept": "application/json",
-        },
-    )
-    first = _open_pinned(opener, request, allowed_host=API_HOST)
-    try:
-        if first.status == 204:
-            raise ValueError(
-                "plan JSON is not ready; refusing to poll the plans endpoint"
-            )
-        if first.status not in REDIRECT_STATUSES:
-            raise ValueError(
-                f"expected a redirect from {API_HOST}, got HTTP {first.status}"
-            )
-        location = first.headers.get("Location")
-        if not location:
-            raise ValueError(f"{API_HOST} redirect is missing a Location header")
-        archive = urlparse(location)
-        if archive.scheme != "https" or archive.hostname != ARCHIVE_HOST:
-            raise ValueError(
-                "refusing redirect that is not https://"
-                f"{ARCHIVE_HOST}/"
-            )
-        archive_request = urllib.request.Request(location, method="GET")
-        second = _open_pinned(opener, archive_request, allowed_host=ARCHIVE_HOST)
-        try:
-            if second.status in REDIRECT_STATUSES:
-                raise ValueError(
-                    f"refusing a second redirect from {ARCHIVE_HOST}"
-                )
-            if second.status != 200:
-                raise ValueError(
-                    f"plan JSON download from {ARCHIVE_HOST} returned "
-                    f"HTTP {second.status}"
-                )
-            payload = second.read()
-        finally:
-            second.close()
-    finally:
-        first.close()
-
-    plan = json.loads(payload.decode("utf-8"))
-    if not isinstance(plan, dict):
-        raise ValueError("plan JSON must be an object")
-    return plan
-
-
-def _open_pinned(urlopen: UrlOpen, request: urllib.request.Request, *, allowed_host: str):
-    parsed = urlparse(request.full_url)
-    if parsed.scheme != "https" or parsed.hostname != allowed_host:
-        raise ValueError(
-            f"refusing to contact {parsed.scheme}://{parsed.hostname} "
-            f"(pinned host is {allowed_host})"
-        )
-    context = ssl.create_default_context()
-    try:
-        return urlopen(request, context=context, timeout=30)
-    except TypeError:
-        return urlopen(request, timeout=30)
-
-
-def _is_nested_unknown(value: Any) -> bool:
-    if isinstance(value, dict):
-        return any(item is True or _is_nested_unknown(item) for item in value.values())
-    if isinstance(value, list):
-        return any(item is True or _is_nested_unknown(item) for item in value)
-    return False
-
-
-def changed_attributes(change: dict[str, Any]) -> set[str]:
-    before = change.get("before") or {}
-    after = change.get("after") or {}
-    unknown = change.get("after_unknown") or {}
-    keys = set(before) | set(after) | set(unknown)
-    changed: set[str] = set()
-    for key in keys:
-        unknown_value = unknown.get(key)
-        if unknown_value is True:
-            if key in COMPUTED_UNKNOWN_ATTRIBUTES:
-                continue
-            changed.add(key)
-            continue
-        if _is_nested_unknown(unknown_value):
-            changed.add(key)
-            continue
-        if before.get(key) != after.get(key):
-            changed.add(key)
-    return changed
-
-
-def validate_plan(plan: dict[str, Any], expected_label: str) -> list[str]:
-    violations: list[str] = []
-    if not VERSION_LABEL_RE.fullmatch(expected_label):
-        violations.append(
-            "expected version label must be <full-sha>-<run-id>-<attempt>"
-        )
-        return violations
-
-    updates: list[dict[str, Any]] = []
-    for resource in plan.get("resource_changes", []):
-        if resource.get("mode", "managed") != "managed":
-            continue
-        address = resource.get("address", "<unknown>")
-        change = resource.get("change") or {}
-        actions = list(change.get("actions") or [])
-        action_set = set(actions)
-        if action_set <= IGNORED_ACTIONS:
-            continue
-
-        if change.get("importing"):
-            violations.append(f"{address}: import actions are not allowed")
-
-        unsafe = sorted(action_set & UNSAFE_ACTIONS)
-        if unsafe:
-            violations.append(f"{address}: unsafe actions {unsafe}")
-        if "replace" in action_set or actions in (
-            ["delete", "create"],
-            ["create", "delete"],
-        ):
-            violations.append(f"{address}: replacement is not allowed")
-
-        if "update" in action_set:
-            updates.append(resource)
-            if action_set != {"update"}:
-                violations.append(
-                    f"{address}: update must be the only action, got {actions}"
-                )
-
-        if address != RELEASE_ADDRESS and action_set - IGNORED_ACTIONS:
-            violations.append(
-                f"{address}: managed address is outside the version-only release"
-            )
-
-    if len(updates) != 1:
-        violations.append(
-            f"expected exactly one managed update, found {len(updates)}"
-        )
-        return violations
-
-    resource = updates[0]
-    address = resource.get("address", "<unknown>")
-    if address != RELEASE_ADDRESS:
-        violations.append(
-            f"{address}: expected update address {RELEASE_ADDRESS}"
-        )
-        return violations
-
-    change = resource.get("change") or {}
-    changed = changed_attributes(change)
-    if changed != {"version_label"}:
-        violations.append(
-            f"{address}: expected only version_label to change, found "
-            f"{sorted(changed) if changed else 'no attribute changes'}"
-        )
-
-    after = change.get("after") or {}
-    actual = after.get("version_label")
-    if actual != expected_label:
-        violations.append(
-            f"{address}: after version_label {actual!r} does not match "
-            f"{expected_label!r}"
-        )
-
-    unknown = change.get("after_unknown") or {}
-    if unknown.get("version_label") is True:
-        violations.append(f"{address}: version_label after value is unknown")
-
-    return violations
-
-
-def main() -> int:
-    args = parse_args()
-    if args.plan_id:
-        try:
-            plan = download_plan_json(args.plan_id, os.environ.get("TF_API_TOKEN", ""))
-        except (OSError, ValueError, json.JSONDecodeError, urllib.error.URLError) as exc:
-            print(f"FAIL: could not download plan JSON: {exc}", file=sys.stderr)
-            return 1
-    else:
-        if args.plan_json is None:
-            print("FAIL: plan JSON path or --plan-id is required", file=sys.stderr)
-            return 1
-        plan = json.loads(args.plan_json.read_text(encoding="utf-8"))
-
-    violations = validate_plan(plan, args.expected_version_label)
-    if violations:
-        print("FAIL: Terraform plan is not a version-only release", file=sys.stderr)
-        for violation in violations:
-            print(f"  - {violation}", file=sys.stderr)
-        return 1
-
-    if args.evidence_out:
-        evidence = {
-            "address": RELEASE_ADDRESS,
-            "expected_version_label": args.expected_version_label,
-            "managed_updates": 1,
-            "changed_attributes": ["version_label"],
-            "creates": 0,
-            "deletes": 0,
-            "replacements": 0,
-        }
-        args.evidence_out.write_text(
-            json.dumps(evidence, indent=2, sort_keys=True) + "\n",
-            encoding="utf-8",
-        )
-    print(
-        "PASS: version-only plan updates "
-        f"{RELEASE_ADDRESS} version_label to {args.expected_version_label}"
-    )
-    return 0
-
-
-if __name__ == "__main__":
-    raise SystemExit(main())
diff --git a/scripts/test-terraform-release-plan-check.py b/scripts/test-terraform-release-plan-check.py
deleted file mode 100644
index 5967d6f..0000000
--- a/scripts/test-terraform-release-plan-check.py
+++ /dev/null
@@ -1,295 +0,0 @@
-#!/usr/bin/env python3
-"""Deterministic tests for check-terraform-release-plan.py."""
-
-from __future__ import annotations
-
-import importlib.util
-import io
-import subprocess
-import sys
-import urllib.request
-from email.message import EmailMessage
-from pathlib import Path
-from urllib.request import Request
-
-SCRIPT = Path(__file__).with_name("check-terraform-release-plan.py")
-FIXTURES = Path(__file__).with_name("testdata") / "terraform-release-plans"
-EXPECTED_LABEL = "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb-2-1"
-PLAN_ID = "plan-8F5JFydVYAmtTjET"
-
-
-def run_case(
-    fixture_name: str,
-    *,
-    expected_label: str = EXPECTED_LABEL,
-) -> subprocess.CompletedProcess[str]:
-    return subprocess.run(
-        [
-            sys.executable,
-            str(SCRIPT),
-            str(FIXTURES / fixture_name),
-            "--expected-version-label",
-            expected_label,
-        ],
-        check=False,
-        capture_output=True,
-        text=True,
-    )
-
-
-class FakeResponse:
-    def __init__(
-        self,
-        *,
-        url: str,
-        status: int,
-        headers: dict[str, str] | None = None,
-        body: bytes = b"",
-    ) -> None:
-        self.url = url
-        self.status = status
-        self.headers = headers or {}
-        self._body = body
-
-    def read(self) -> bytes:
-        return self._body
-
-    def close(self) -> None:
-        return None
-
-
-def load_check_module():
-    spec = importlib.util.spec_from_file_location("check_terraform_release_plan", SCRIPT)
-    module = importlib.util.module_from_spec(spec)
-    assert spec.loader is not None
-    spec.loader.exec_module(module)
-    return module
-
-
-def test_download_pinning() -> list[str]:
-    module = load_check_module()
-    fixture = (FIXTURES / "version-only.json").read_bytes()
-    archive_url = "https://archivist.terraform.io/v1/object/example"
-    calls: list[str] = []
-
-    def fake_urlopen(request: Request, **_kwargs):
-        url = request.full_url
-        calls.append(url)
-        host = request.host if hasattr(request, "host") else ""
-        if url.startswith("https://app.terraform.io/api/v2/plans/"):
-            if request.get_header("Authorization") != "Bearer test-token":
-                raise AssertionError("API request is missing the bearer token")
-            if "/runs" in url or "/apply" in url or "/discard" in url:
-                raise AssertionError(f"download contacted a run-control path: {url}")
-            return FakeResponse(
-                url=url,
-                status=307,
-                headers={"Location": archive_url},
-            )
-        if url == archive_url:
-            if request.get_header("Authorization"):
-                raise AssertionError("archivist request must not send TF_API_TOKEN")
-            return FakeResponse(url=url, status=200, body=fixture)
-        raise AssertionError(f"unexpected URL {url} host={host}")
-
-    plan = module.download_plan_json(PLAN_ID, "test-token", urlopen=fake_urlopen)
-    failures: list[str] = []
-    if plan["resource_changes"][1]["address"] != (
-        "module.environment.aws_elastic_beanstalk_environment.this"
-    ):
-        failures.append("download did not return the version-only fixture")
-    if calls != [
-        f"https://app.terraform.io/api/v2/plans/{PLAN_ID}/json-output",
-        archive_url,
-    ]:
-        failures.append(f"download URLs were {calls}")
-
-    try:
-        module.download_plan_json("run-not-a-plan", "test-token", urlopen=fake_urlopen)
-        failures.append("invalid plan id was accepted")
-    except ValueError:
-        pass
-
-    def redirect_elsewhere(request: Request, **_kwargs):
-        return FakeResponse(
-            url=request.full_url,
-            status=307,
-            headers={"Location": "https://evil.example/plan.json"},
-        )
-
-    try:
-        module.download_plan_json(PLAN_ID, "test-token", urlopen=redirect_elsewhere)
-        failures.append("redirect to a non-archivist host was accepted")
-    except ValueError:
-        pass
-
-    def double_redirect(request: Request, **_kwargs):
-        if request.full_url.startswith("https://app.terraform.io/"):
-            return FakeResponse(
-                url=request.full_url,
-                status=307,
-                headers={"Location": archive_url},
-            )
-        return FakeResponse(
-            url=request.full_url,
-            status=307,
-            headers={"Location": "https://archivist.terraform.io/v1/object/other"},
-        )
-
-    try:
-        module.download_plan_json(PLAN_ID, "test-token", urlopen=double_redirect)
-        failures.append("second archivist redirect was accepted")
-    except ValueError:
-        pass
-
-    def not_ready(request: Request, **_kwargs):
-        return FakeResponse(url=request.full_url, status=204)
-
-    try:
-        module.download_plan_json(PLAN_ID, "test-token", urlopen=not_ready)
-        failures.append("HTTP 204 was polled or accepted")
-    except ValueError as exc:
-        if "poll" not in str(exc):
-            failures.append(f"HTTP 204 error was {exc}")
-
-    source = SCRIPT.read_text(encoding="utf-8")
-    for banned in ("/apply", "/discard", "/runs"):
-        if banned in source:
-            failures.append(f"download client contains run-control path {banned}")
-
-    return failures
-
-
-def _scripted_https_handler(fixture: bytes, archive_url: str):
-    calls: list[str] = []
-    api_prefix = "https://app.terraform.io/api/v2/plans/"
-
-    class ScriptedHTTPSHandler(urllib.request.BaseHandler):
-        handler_order = 100
-
-        def https_open(self, req: Request):
-            url = req.full_url
-            calls.append(url)
-            headers = EmailMessage()
-            if url.startswith(api_prefix):
-                headers["Location"] = archive_url
-                body = b""
-                status = 307
-                msg = "Temporary Redirect"
-            elif url == archive_url:
-                body = fixture
-                status = 200
-                msg = "OK"
-            else:
-                raise AssertionError(f"unexpected URL {url}")
-            response = urllib.response.addinfourl(
-                io.BytesIO(body),
-                headers,
-                url,
-                code=status,
-            )
-            response.msg = msg
-            return response
-
-    return ScriptedHTTPSHandler(), calls
-
-
-def test_download_standard_opener_redirect() -> list[str]:
-    """urllib follows the HCP 307; the guard must still inspect that first hop."""
-    module = load_check_module()
-    fixture = (FIXTURES / "version-only.json").read_bytes()
-    archive_url = "https://archivist.terraform.io/v1/object/example"
-    api_url = f"https://app.terraform.io/api/v2/plans/{PLAN_ID}/json-output"
-    failures: list[str] = []
-
-    following_handler, following_calls = _scripted_https_handler(fixture, archive_url)
-    followed = urllib.request.build_opener(following_handler).open(api_url)
-    try:
-        if followed.status != 200:
-            failures.append(
-                f"standard opener first status was {followed.status}, not 200"
-            )
-        if following_calls != [api_url, archive_url]:
-            failures.append(f"standard opener URLs were {following_calls}")
-    finally:
-        followed.close()
-
-    guard_handler, guard_calls = _scripted_https_handler(fixture, archive_url)
-    try:
-        plan = module.download_plan_json(
-            PLAN_ID,
-            "test-token",
-            handlers=(guard_handler,),
-        )
-    except ValueError as exc:
-        failures.append(f"no-redirect download failed: {exc}")
-        return failures
-
-    if plan["resource_changes"][1]["address"] != (
-        "module.environment.aws_elastic_beanstalk_environment.this"
-    ):
-        failures.append("no-redirect download did not return the version-only fixture")
-    if guard_calls != [api_url, archive_url]:
-        failures.append(f"no-redirect download URLs were {guard_calls}")
-
-    following_urlopen_handler, _ = _scripted_https_handler(fixture, archive_url)
-    following_urlopen = urllib.request.build_opener(following_urlopen_handler).open
-    try:
-        module.download_plan_json(
-            PLAN_ID,
-            "test-token",
-            urlopen=following_urlopen,
-        )
-        failures.append("redirect-following urlopen was accepted as the first hop")
-    except ValueError as exc:
-        if "expected a redirect" not in str(exc):
-            failures.append(f"following urlopen error was {exc}")
-
-    return failures
-
-
-def main() -> int:
-    cases = [
-        ("version-only", run_case("version-only.json"), 0),
-        ("wrong-label", run_case("wrong-label.json"), 1),
-        ("eb-setting-change", run_case("eb-setting-change.json"), 1),
-        ("nested-unknown-tags", run_case("nested-unknown-tags.json"), 1),
-        ("unknown-only-description", run_case("unknown-only-description.json"), 1),
-        ("iam-update", run_case("iam-update.json"), 1),
-        ("dns-update", run_case("dns-update.json"), 1),
-        ("create", run_case("create.json"), 1),
-        ("delete", run_case("delete.json"), 1),
-        ("replace", run_case("replace.json"), 1),
-        ("multiple-updates", run_case("multiple-updates.json"), 1),
-        ("empty", run_case("empty.json"), 1),
-    ]
-    failures = [
-        (name, result, expected)
-        for name, result, expected in cases
-        if result.returncode != expected
-    ]
-    download_failures = test_download_pinning()
-    redirect_failures = test_download_standard_opener_redirect()
-    download_failures.extend(redirect_failures)
-    if failures or download_failures:
-        if failures:
-            print(
-                "FAIL: release plan-check cases failed: "
-                + ", ".join(name for name, _, _ in failures),
-                file=sys.stderr,
-            )
-            for name, result, expected in failures:
-                print(
-                    f"{name}: expected {expected}, got {result.returncode}\n"
-                    f"{result.stdout}{result.stderr}",
-                    file=sys.stderr,
-                )
-        for item in download_failures:
-            print(f"FAIL: {item}", file=sys.stderr)
-        return 1
-    print("PASS: Terraform release plan safety checks")
-    return 0
-
-
-if __name__ == "__main__":
-    raise SystemExit(main())
diff --git a/scripts/testdata/terraform-release-plans/create.json b/scripts/testdata/terraform-release-plans/create.json
deleted file mode 100644
index 8ea3979..0000000
--- a/scripts/testdata/terraform-release-plans/create.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
-  "resource_changes": [
-    {
-      "address": "module.environment.aws_elastic_beanstalk_environment.this",
-      "mode": "managed",
-      "type": "aws_elastic_beanstalk_environment",
-      "change": {
-        "actions": ["create"],
-        "before": null,
-        "after": {
-          "version_label": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb-2-1"
-        }
-      }
-    }
-  ]
-}
diff --git a/scripts/testdata/terraform-release-plans/delete.json b/scripts/testdata/terraform-release-plans/delete.json
deleted file mode 100644
index 958c2f6..0000000
--- a/scripts/testdata/terraform-release-plans/delete.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
-  "resource_changes": [
-    {
-      "address": "module.environment.aws_elastic_beanstalk_environment.this",
-      "mode": "managed",
-      "type": "aws_elastic_beanstalk_environment",
-      "change": {
-        "actions": ["delete"],
-        "before": {
-          "version_label": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa-1-1"
-        },
-        "after": null
-      }
-    }
-  ]
-}
diff --git a/scripts/testdata/terraform-release-plans/dns-update.json b/scripts/testdata/terraform-release-plans/dns-update.json
deleted file mode 100644
index 5b2f27c..0000000
--- a/scripts/testdata/terraform-release-plans/dns-update.json
+++ /dev/null
@@ -1,28 +0,0 @@
-{
-  "resource_changes": [
-    {
-      "address": "module.environment.aws_route53_record.api_alias[0]",
-      "mode": "managed",
-      "type": "aws_route53_record",
-      "change": {
-        "actions": ["update"],
-        "before": {
-          "alias": [
-            {
-              "name": "awseb--awseb-cmpb3ypfib53-1654918745.us-east-1.elb.amazonaws.com",
-              "zone_id": "Z35SXDOTRQ7X7K"
-            }
-          ]
-        },
-        "after": {
-          "alias": [
-            {
-              "name": "shoc-backend-dev.us-east-1.elasticbeanstalk.com",
-              "zone_id": "Z117KPS5GTRQ2G"
-            }
-          ]
-        }
-      }
-    }
-  ]
-}
diff --git a/scripts/testdata/terraform-release-plans/eb-setting-change.json b/scripts/testdata/terraform-release-plans/eb-setting-change.json
deleted file mode 100644
index a0a2ecf..0000000
--- a/scripts/testdata/terraform-release-plans/eb-setting-change.json
+++ /dev/null
@@ -1,34 +0,0 @@
-{
-  "resource_changes": [
-    {
-      "address": "module.environment.aws_elastic_beanstalk_environment.this",
-      "mode": "managed",
-      "type": "aws_elastic_beanstalk_environment",
-      "change": {
-        "actions": ["update"],
-        "before": {
-          "version_label": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa-1-1",
-          "setting": [
-            {
-              "namespace": "aws:elasticbeanstalk:application:environment",
-              "name": "ASPNETCORE_ENVIRONMENT",
-              "value": "Production"
-            }
-          ],
-          "tags": { "env": "dev" }
-        },
-        "after": {
-          "version_label": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb-2-1",
-          "setting": [
-            {
-              "namespace": "aws:elasticbeanstalk:application:environment",
-              "name": "ASPNETCORE_ENVIRONMENT",
-              "value": "Development"
-            }
-          ],
-          "tags": { "env": "dev" }
-        }
-      }
-    }
-  ]
-}
diff --git a/scripts/testdata/terraform-release-plans/empty.json b/scripts/testdata/terraform-release-plans/empty.json
deleted file mode 100644
index 360110a..0000000
--- a/scripts/testdata/terraform-release-plans/empty.json
+++ /dev/null
@@ -1,3 +0,0 @@
-{
-  "resource_changes": []
-}
diff --git a/scripts/testdata/terraform-release-plans/iam-update.json b/scripts/testdata/terraform-release-plans/iam-update.json
deleted file mode 100644
index aee8aec..0000000
--- a/scripts/testdata/terraform-release-plans/iam-update.json
+++ /dev/null
@@ -1,18 +0,0 @@
-{
-  "resource_changes": [
-    {
-      "address": "module.environment.aws_iam_role.github_deploy",
-      "mode": "managed",
-      "type": "aws_iam_role",
-      "change": {
-        "actions": ["update"],
-        "before": {
-          "permissions_boundary": "arn:aws:iam::396287094661:policy/shoc-backend-dev-deploy-boundary"
-        },
-        "after": {
-          "permissions_boundary": null
-        }
-      }
-    }
-  ]
-}
diff --git a/scripts/testdata/terraform-release-plans/multiple-updates.json b/scripts/testdata/terraform-release-plans/multiple-updates.json
deleted file mode 100644
index a4c4e0c..0000000
--- a/scripts/testdata/terraform-release-plans/multiple-updates.json
+++ /dev/null
@@ -1,32 +0,0 @@
-{
-  "resource_changes": [
-    {
-      "address": "module.environment.aws_elastic_beanstalk_environment.this",
-      "mode": "managed",
-      "type": "aws_elastic_beanstalk_environment",
-      "change": {
-        "actions": ["update"],
-        "before": {
-          "version_label": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa-1-1",
-          "setting": [],
-          "tags": { "env": "dev" }
-        },
-        "after": {
-          "version_label": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb-2-1",
-          "setting": [],
-          "tags": { "env": "dev" }
-        }
-      }
-    },
-    {
-      "address": "module.environment.aws_iam_role.github_deploy",
-      "mode": "managed",
-      "type": "aws_iam_role",
-      "change": {
-        "actions": ["update"],
-        "before": { "description": "old" },
-        "after": { "description": "new" }
-      }
-    }
-  ]
-}
diff --git a/scripts/testdata/terraform-release-plans/nested-unknown-tags.json b/scripts/testdata/terraform-release-plans/nested-unknown-tags.json
deleted file mode 100644
index a9f2f43..0000000
--- a/scripts/testdata/terraform-release-plans/nested-unknown-tags.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
-  "resource_changes": [
-    {
-      "address": "module.environment.aws_elastic_beanstalk_environment.this",
-      "mode": "managed",
-      "type": "aws_elastic_beanstalk_environment",
-      "change": {
-        "actions": ["update"],
-        "before": {
-          "version_label": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa-1-1",
-          "setting": [
-            {
-              "namespace": "aws:elasticbeanstalk:environment",
-              "name": "EnvironmentType",
-              "value": "LoadBalanced"
-            }
-          ],
-          "tags": { "env": "dev", "project": "shoc" }
-        },
-        "after": {
-          "version_label": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb-2-1",
-          "setting": [
-            {
-              "namespace": "aws:elasticbeanstalk:environment",
-              "name": "EnvironmentType",
-              "value": "LoadBalanced"
-            }
-          ],
-          "tags": { "env": "prod", "project": "shoc" }
-        },
-        "after_unknown": {
-          "instances": true,
-          "load_balancers": true,
-          "tags": { "env": true }
-        }
-      }
-    }
-  ]
-}
diff --git a/scripts/testdata/terraform-release-plans/replace.json b/scripts/testdata/terraform-release-plans/replace.json
deleted file mode 100644
index 73b8030..0000000
--- a/scripts/testdata/terraform-release-plans/replace.json
+++ /dev/null
@@ -1,20 +0,0 @@
-{
-  "resource_changes": [
-    {
-      "address": "module.environment.aws_elastic_beanstalk_environment.this",
-      "mode": "managed",
-      "type": "aws_elastic_beanstalk_environment",
-      "change": {
-        "actions": ["delete", "create"],
-        "before": {
-          "version_label": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa-1-1",
-          "name": "shoc-backend-dev"
-        },
-        "after": {
-          "version_label": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb-2-1",
-          "name": "shoc-backend-dev"
-        }
-      }
-    }
-  ]
-}
diff --git a/scripts/testdata/terraform-release-plans/unknown-only-description.json b/scripts/testdata/terraform-release-plans/unknown-only-description.json
deleted file mode 100644
index e1dd3bc..0000000
--- a/scripts/testdata/terraform-release-plans/unknown-only-description.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
-  "resource_changes": [
-    {
-      "address": "module.environment.aws_elastic_beanstalk_environment.this",
-      "mode": "managed",
-      "type": "aws_elastic_beanstalk_environment",
-      "change": {
-        "actions": ["update"],
-        "before": {
-          "version_label": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa-1-1",
-          "setting": [
-            {
-              "namespace": "aws:elasticbeanstalk:environment",
-              "name": "EnvironmentType",
-              "value": "LoadBalanced"
-            }
-          ],
-          "tags": { "env": "dev", "project": "shoc" }
-        },
-        "after": {
-          "version_label": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb-2-1",
-          "setting": [
-            {
-              "namespace": "aws:elasticbeanstalk:environment",
-              "name": "EnvironmentType",
-              "value": "LoadBalanced"
-            }
-          ],
-          "tags": { "env": "dev", "project": "shoc" }
-        },
-        "after_unknown": {
-          "instances": true,
-          "load_balancers": true,
-          "description": true
-        }
-      }
-    }
-  ]
-}
diff --git a/scripts/testdata/terraform-release-plans/version-only.json b/scripts/testdata/terraform-release-plans/version-only.json
deleted file mode 100644
index 143a924..0000000
--- a/scripts/testdata/terraform-release-plans/version-only.json
+++ /dev/null
@@ -1,48 +0,0 @@
-{
-  "resource_changes": [
-    {
-      "address": "module.environment.aws_iam_role.runtime",
-      "mode": "managed",
-      "type": "aws_iam_role",
-      "change": {
-        "actions": ["no-op"],
-        "before": { "name": "shoc-backend-dev" },
-        "after": { "name": "shoc-backend-dev" }
-      }
-    },
-    {
-      "address": "module.environment.aws_elastic_beanstalk_environment.this",
-      "mode": "managed",
-      "type": "aws_elastic_beanstalk_environment",
-      "change": {
-        "actions": ["update"],
-        "before": {
-          "version_label": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa-1-1",
-          "setting": [
-            {
-              "namespace": "aws:elasticbeanstalk:environment",
-              "name": "EnvironmentType",
-              "value": "LoadBalanced"
-            }
-          ],
-          "tags": { "env": "dev", "project": "shoc" }
-        },
-        "after": {
-          "version_label": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb-2-1",
-          "setting": [
-            {
-              "namespace": "aws:elasticbeanstalk:environment",
-              "name": "EnvironmentType",
-              "value": "LoadBalanced"
-            }
-          ],
-          "tags": { "env": "dev", "project": "shoc" }
-        },
-        "after_unknown": {
-          "instances": true,
-          "load_balancers": true
-        }
-      }
-    }
-  ]
-}
diff --git a/scripts/testdata/terraform-release-plans/wrong-label.json b/scripts/testdata/terraform-release-plans/wrong-label.json
deleted file mode 100644
index bd1c671..0000000
--- a/scripts/testdata/terraform-release-plans/wrong-label.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "resource_changes": [
-    {
-      "address": "module.environment.aws_elastic_beanstalk_environment.this",
-      "mode": "managed",
-      "type": "aws_elastic_beanstalk_environment",
-      "change": {
-        "actions": ["update"],
-        "before": {
-          "version_label": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa-1-1",
-          "setting": [],
-          "tags": { "env": "dev" }
-        },
-        "after": {
-          "version_label": "cccccccccccccccccccccccccccccccccccccccc-9-9",
-          "setting": [],
-          "tags": { "env": "dev" }
-        }
-      }
-    }
-  ]
-}
diff --git a/terraform/live/README.md b/terraform/live/README.md
index a1bbdf4..e7630cd 100644
--- a/terraform/live/README.md
+++ b/terraform/live/README.md
@@ -143,7 +143,7 @@ workflow waits for CI, tags `vX.Y.Z-staging` from main HEAD with
 `GITHUB_TOKEN`, then calls deploy. Do not cut prod yet; leave
 `PROD_APP_CD_ENABLED` unset and do not create the `prod` GitHub Environment.
 Staging remains `adoption_complete=false` with a pinned API CNAME until its
-import apply is proven.
+import apply is proven after the first `vX.Y.Z-staging` GitHub-owned zip.
 
 HCP workspaces stay VCS-driven with auto-apply on after cutover. Speculative
 plans on every PR are the infra gate. Do not point `TFC_AWS_*` at
@@ -153,10 +153,6 @@ Terraform changes stay in separate PRs so a merge cannot race an HCP apply
 against an app deploy. Terraform-only merges skip `deploy.yaml`. App-only
 tags skip HCP when trigger patterns do not match.
 
-Until cutover, `.github/workflows/deploy.yml` still uses `TF_API_TOKEN` and
-`TERRAFORM_APP_CD_ENABLED`. Keep those secrets and the version-only plan guard
-on that leftover path only.
-
 ### Credentials
 
 Store `DEPLOY_ROLE_ARN` as a GitHub Environment **variable** (`dev`,
@@ -164,23 +160,18 @@ Store `DEPLOY_ROLE_ARN` as a GitHub Environment **variable** (`dev`,
 `repo:Sea-Haven-Industries/shoc-backend:environment:<env>` plus
 `job_workflow_ref` for `.github/workflows/deploy.yaml` at `refs/heads/main`
 and `refs/tags/v*`. Adding another deploy workflow is a cross-family IAM
-change. After cutover, drop `TF_API_TOKEN` from GitHub Environments. The new
-CD path does not use it.
+change. The new CD path does not use `TF_API_TOKEN`.
 
 GitHub Environment deployment branch and tag policies are repository
-settings, not this diff. Update them before the first merge to `main` and
-the first staging cut. The policy matches `GITHUB_REF` of the workflow run.
+settings, not this diff. The policy matches `GITHUB_REF` of the workflow run.
 Branch patterns never match tag refs; adding `v*` as a branch pattern fails
 the same way as an empty allowlist.
 
-1. `dev` — allow branch `main`. Keep `dev` allowed while leftover
-   `.github/workflows/deploy.yml` still deploys from that branch.
-2. `staging` — add a **tag-type** policy matching `v*.*.*-staging` for
+1. `dev` — allow branch `main`.
+2. `staging` — **tag-type** policy matching `v*.*.*-staging` for
    `deploy-tag.yaml`. Allow branch `main` because Actions → Release is
    `workflow_dispatch` on `main` and then calls `deploy.yaml`
-   (`GITHUB_TOKEN` tag pushes do not start `deploy-tag.yaml`). Keep
-   `staging` allowed while leftover `deploy.yml` still deploys from that
-   branch.
+   (`GITHUB_TOKEN` tag pushes do not start `deploy-tag.yaml`).
 
 Do not create the `prod` environment yet. Leave `PROD_APP_CD_ENABLED`
 unset. Until the `prod` environment exists with reviewers, do not run

From b696a414a5152560cdaa84bb7927455fa82c4d44 Mon Sep 17 00:00:00 2001
From: Adam Moussa <adam@seahavenind.com>
Date: Fri, 18 Sep 2026 12:42:42 -0400
Subject: [PATCH 070/183] fix(cd): grant caller id-token write for reusable
 deploy workflows

---
 .github/workflows/deploy-tag.yaml | 2 ++
 .github/workflows/release.yaml    | 1 +
 2 files changed, 3 insertions(+)

diff --git a/.github/workflows/deploy-tag.yaml b/.github/workflows/deploy-tag.yaml
index 581fe97..00f9389 100644
--- a/.github/workflows/deploy-tag.yaml
+++ b/.github/workflows/deploy-tag.yaml
@@ -10,6 +10,8 @@ on:
 
 permissions:
   contents: read
+  checks: read
+  id-token: write
 
 jobs:
   target:
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 777a11c..e5830a5 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -24,6 +24,7 @@ on:
 permissions:
   contents: write
   checks: read
+  id-token: write
 
 jobs:
   cut:

From cbecc7b4eaec3becb2f37f50d2346ba26726d415 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 18 Sep 2026 14:30:54 -0300
Subject: [PATCH 071/183] fix(workorders): persist manual POC override with
 audit and site-follow (SH-379)

Editing a work order's POC never reached the backend: no update path wrote
PocName/PocPhone/PocNotes, so the optimistic UI edit was lost on refetch and
the completion freeze captured the Site contact instead of the manual value,
and nothing was audited.

- Add tenant-scoped PATCH api/workorders/{id}/poc via new WorkOrderPocService
  + WorkOrderPocDataService: persists the override, stages FieldChanged audit
  entries (which also write field locks so sync never overwrites a manual POC),
  and enforces row-version concurrency and terminal-status read-only rules.
- Lock semantics (SH-190): a manual POC away from the Site's live contacts is
  stored WO-level; an edit equal to a live Site contact (or blanking name+phone)
  stores nothing so the WO follows the Site. PocCustomized exposes the state.
- Board projection, completion freeze and create now share one Site-contact
  fallback (first non-deleted contact by SiteContactOrder) so a never-overridden
  WO keeps following the Site, including at create when the wizard prefills it.
- Route contract baseline gains PATCH {id:int}/poc.
---
 .../WorkOrderControllerSearchTests.cs         |   1 +
 .../WorkOrderRouteContractTests.cs            |   1 +
 .../Controllers/WorkOrderBoardController.cs   |  53 ++
 .../Helpers/WorkOrderBoardProjection.cs       |  27 +-
 .../WorkOrderBoardMutationDataService.cs      |   3 +-
 .../Implementation/WorkOrderPocDataService.cs |  47 ++
 .../Interfaces/IWorkOrderPocDataService.cs    |  28 +
 .../Interfaces/WorkOrderBoardModels.cs        |   4 +-
 SeaHaven.Services/DTOs/WorkOrderBoardDTOs.cs  |   2 +
 .../DTOs/WorkOrderBoardRequestDTOs.cs         |  14 +
 .../WorkOrderCompletionSnapshotMapper.cs      |   8 +-
 .../Helpers/WorkOrderPocSiteContact.cs        |  54 ++
 .../WorkOrderBoardCreateService.cs            |  12 +
 .../Implementation/WorkOrderBoardService.cs   |   1 +
 .../Implementation/WorkOrderPocService.cs     | 169 ++++++
 .../Interfaces/IWorkOrderPocService.cs        |  18 +
 .../WorkOrderAccountScopeTests.cs             |   4 +-
 .../WorkOrderBoardCreateRelationalTests.cs    |   6 +-
 .../WorkOrderBoardCreateServiceTests.cs       |   2 +-
 .../WorkOrderBoardCreateSyncLockTests.cs      |   6 +-
 .../WorkOrderPhase7CoexistenceTests.cs        |   2 +-
 .../WorkOrderPocServiceTests.cs               | 518 ++++++++++++++++++
 22 files changed, 964 insertions(+), 16 deletions(-)
 create mode 100644 SeaHaven.DataServices/Implementation/WorkOrderPocDataService.cs
 create mode 100644 SeaHaven.DataServices/Interfaces/IWorkOrderPocDataService.cs
 create mode 100644 SeaHaven.Services/Helpers/WorkOrderPocSiteContact.cs
 create mode 100644 SeaHaven.Services/Implementation/WorkOrderPocService.cs
 create mode 100644 SeaHaven.Services/Interfaces/IWorkOrderPocService.cs
 create mode 100644 SeaHavenIndustries.Tests/WorkOrderPocServiceTests.cs

diff --git a/Api.SeaHavenIndustries.Tests/WorkOrderControllerSearchTests.cs b/Api.SeaHavenIndustries.Tests/WorkOrderControllerSearchTests.cs
index d02febc..a458ecf 100644
--- a/Api.SeaHavenIndustries.Tests/WorkOrderControllerSearchTests.cs
+++ b/Api.SeaHavenIndustries.Tests/WorkOrderControllerSearchTests.cs
@@ -23,6 +23,7 @@ public class WorkOrderControllerSearchTests
             Mock.Of<IWorkOrderBoardUpdateService>(),
             Mock.Of<IWorkOrderBoardCreateService>(),
             Mock.Of<IWorkOrderBoardCancelService>(),
+            Mock.Of<IWorkOrderPocService>(),
             advancedSearch);
 
         controller.ControllerContext = new ControllerContext
diff --git a/Api.SeaHavenIndustries.Tests/WorkOrderRouteContractTests.cs b/Api.SeaHavenIndustries.Tests/WorkOrderRouteContractTests.cs
index 1bb17e5..fa023ea 100644
--- a/Api.SeaHavenIndustries.Tests/WorkOrderRouteContractTests.cs
+++ b/Api.SeaHavenIndustries.Tests/WorkOrderRouteContractTests.cs
@@ -71,6 +71,7 @@ public class WorkOrderRouteContractTests
         "PATCH {id:int}/board",
         "PATCH {id:int}/comments/{commentId:int}",
         "PATCH {id:int}/media/{mediaId:int}",
+        "PATCH {id:int}/poc",
         "POST AddChecklistItem",
         "POST AddComment",
         "POST AddCommentJson",
diff --git a/Api.SeaHavenIndustries/Controllers/WorkOrderBoardController.cs b/Api.SeaHavenIndustries/Controllers/WorkOrderBoardController.cs
index f991f56..37e39ea 100644
--- a/Api.SeaHavenIndustries/Controllers/WorkOrderBoardController.cs
+++ b/Api.SeaHavenIndustries/Controllers/WorkOrderBoardController.cs
@@ -24,6 +24,7 @@ namespace Api.SeaHavenIndustries.Controllers
         private readonly IWorkOrderBoardUpdateService _boardUpdateService;
         private readonly IWorkOrderBoardCreateService _boardCreateService;
         private readonly IWorkOrderBoardCancelService _boardCancelService;
+        private readonly IWorkOrderPocService _pocService;
         private readonly IWorkOrderAdvancedSearchService _advancedSearchService;
 
         public WorkOrderBoardController(
@@ -31,12 +32,14 @@ namespace Api.SeaHavenIndustries.Controllers
             IWorkOrderBoardUpdateService boardUpdateService,
             IWorkOrderBoardCreateService boardCreateService,
             IWorkOrderBoardCancelService boardCancelService,
+            IWorkOrderPocService pocService,
             IWorkOrderAdvancedSearchService advancedSearchService)
         {
             _workOrderBoardService = workOrderBoardService;
             _boardUpdateService = boardUpdateService;
             _boardCreateService = boardCreateService;
             _boardCancelService = boardCancelService;
+            _pocService = pocService;
             _advancedSearchService = advancedSearchService;
         }
 
@@ -165,6 +168,56 @@ namespace Api.SeaHavenIndustries.Controllers
             }
         }
 
+        /// <summary>
+        /// SH-379: replaces the WO-level POC (name, phone, notes) with audit entries.
+        /// Blank name+phone clears the override so the work order follows the Site.
+        /// </summary>
+        [HttpPatch("{id:int}/poc")]
+        public async Task<IActionResult> UpdateWorkOrderPoc(int id, [FromBody] WorkOrderPocUpdateRequestDto request)
+        {
+            try
+            {
+                var actorId = User.FindFirstValue(ClaimTypes.NameIdentifier);
+                var row = await _pocService.UpdatePocAsync(id, request, User, actorId);
+                return Ok(row);
+            }
+            catch (WorkOrderBoardConcurrencyException ex)
+            {
+                return Conflict(new WorkOrderBoardConflictDto
+                {
+                    CurrentState = ex.CurrentState
+                });
+            }
+            catch (WorkOrderBoardValidationException ex) when (ex.Code == "Forbidden")
+            {
+                return StatusCode(StatusCodes.Status403Forbidden, new WorkOrderBoardValidationErrorDto
+                {
+                    Code = ex.Code,
+                    Message = ex.Message
+                });
+            }
+            catch (WorkOrderBoardValidationException ex) when (ex.Code == "NotFound")
+            {
+                return NotFound(new WorkOrderBoardValidationErrorDto
+                {
+                    Code = ex.Code,
+                    Message = ex.Message
+                });
+            }
+            catch (WorkOrderBoardValidationException ex)
+            {
+                return UnprocessableEntity(new WorkOrderBoardValidationErrorDto
+                {
+                    Code = ex.Code,
+                    Message = ex.Message
+                });
+            }
+            catch (ArgumentException ex)
+            {
+                return BadRequest(new Response { Status = "Error", Message = ex.Message });
+            }
+        }
+
         [HttpPost("board")]
         public async Task<IActionResult> CreateBoardWorkOrder(
             [FromBody] WorkOrderBoardCreateRequestDto request,
diff --git a/SeaHaven.DataServices/Helpers/WorkOrderBoardProjection.cs b/SeaHaven.DataServices/Helpers/WorkOrderBoardProjection.cs
index db054de..d4557f0 100644
--- a/SeaHaven.DataServices/Helpers/WorkOrderBoardProjection.cs
+++ b/SeaHaven.DataServices/Helpers/WorkOrderBoardProjection.cs
@@ -52,6 +52,20 @@ namespace SeaHaven.DataServices.Helpers
                             c.Notes
                         })
                         .FirstOrDefault(),
+                    // SH-379/SH-190: the Site's live primary contact backs the
+                    // follow-the-site POC display when no override or link exists.
+                    SitePoc = w.Locations != null
+                        ? w.Locations.Contacts!
+                            .Where(c => c.IsDeleted != true)
+                            .OrderBy(c => c.SiteContactOrder)
+                            .ThenBy(c => c.Id)
+                            .Select(c => new
+                            {
+                                Name = ((c.FirstName ?? "") + " " + (c.LastName ?? "")).Trim(),
+                                c.PhoneNumber
+                            })
+                            .FirstOrDefault()
+                        : null,
                     w.LifecycleStatus,
                     w.LegacyStatus,
                     w.Status,
@@ -116,11 +130,11 @@ namespace SeaHaven.DataServices.Helpers
                     : null;
                 var primaryFrozenPoc = frozenPoc?.Contacts.FirstOrDefault();
                 var pocName = primaryFrozenPoc?.Name
-                    ?? (!string.IsNullOrWhiteSpace(w.WoPocName) ? w.WoPocName : w.ContactPoc?.Name);
+                    ?? FirstNotBlank(w.WoPocName, w.ContactPoc?.Name, w.SitePoc?.Name);
                 var pocPhone = primaryFrozenPoc?.Phone
-                    ?? (!string.IsNullOrWhiteSpace(w.WoPocPhone) ? w.WoPocPhone : w.ContactPoc?.PhoneNumber);
+                    ?? FirstNotBlank(w.WoPocPhone, w.ContactPoc?.PhoneNumber, w.SitePoc?.PhoneNumber);
                 var pocNotes = frozenPoc?.Notes
-                    ?? (!string.IsNullOrWhiteSpace(w.WoPocNotes) ? w.WoPocNotes : w.ContactPoc?.Notes);
+                    ?? FirstNotBlank(w.WoPocNotes, w.ContactPoc?.Notes);
                 var techPhone = !string.IsNullOrWhiteSpace(w.DispatchTechPhone)
                     ? w.DispatchTechPhone
                     : (!string.IsNullOrWhiteSpace(w.WoTechPhone) ? w.WoTechPhone : w.VendorPhone);
@@ -188,10 +202,15 @@ namespace SeaHaven.DataServices.Helpers
                     w.MediaCount,
                     frozenSite,
                     frozenCompany,
-                    frozenPoc);
+                    frozenPoc,
+                    w.WoPocName,
+                    w.WoPocPhone);
             }).ToList();
         }
 
+        private static string? FirstNotBlank(params string?[] values)
+            => values.FirstOrDefault(value => !string.IsNullOrWhiteSpace(value))?.Trim();
+
         private static T? Deserialize<T>(string? json)
         {
             if (string.IsNullOrWhiteSpace(json))
diff --git a/SeaHaven.DataServices/Implementation/WorkOrderBoardMutationDataService.cs b/SeaHaven.DataServices/Implementation/WorkOrderBoardMutationDataService.cs
index 81e0fda..4c8d66d 100644
--- a/SeaHaven.DataServices/Implementation/WorkOrderBoardMutationDataService.cs
+++ b/SeaHaven.DataServices/Implementation/WorkOrderBoardMutationDataService.cs
@@ -21,7 +21,8 @@ namespace SeaHaven.DataServices.Implementation
 
         public Task<WorkOrder?> GetTrackedWorkOrderAsync(int workOrderId, CancellationToken cancellationToken)
             => _context.workOrders
-                .Include(workOrder => workOrder.Locations)
+                .Include(workOrder => workOrder.Locations!)
+                    .ThenInclude(location => location.Contacts)
                 .Include(workOrder => workOrder.WorkOrderContacts!)
                     .ThenInclude(contact => contact.POC)
                 .Include(workOrder => workOrder.PrimaryDispatch!)
diff --git a/SeaHaven.DataServices/Implementation/WorkOrderPocDataService.cs b/SeaHaven.DataServices/Implementation/WorkOrderPocDataService.cs
new file mode 100644
index 0000000..8177a3e
--- /dev/null
+++ b/SeaHaven.DataServices/Implementation/WorkOrderPocDataService.cs
@@ -0,0 +1,47 @@
+using Data.SeaHavenIndustries;
+using Microsoft.EntityFrameworkCore;
+using SeaHaven.DataServices.Interfaces;
+
+namespace SeaHaven.DataServices.Implementation
+{
+    public class WorkOrderPocDataService : IWorkOrderPocDataService
+    {
+        private readonly ApplicationDbContext _context;
+
+        public WorkOrderPocDataService(ApplicationDbContext context)
+        {
+            _context = context;
+        }
+
+        public Task<WorkOrder?> GetTrackedWorkOrderAsync(
+            int workOrderId,
+            int? accountId,
+            CancellationToken cancellationToken)
+            => _context.workOrders
+                .Include(workOrder => workOrder.Locations!)
+                    .ThenInclude(location => location.Contacts)
+                .Include(workOrder => workOrder.WorkOrderContacts!)
+                    .ThenInclude(contact => contact.POC)
+                .FirstOrDefaultAsync(
+                    w => w.Id == workOrderId
+                        && w.istemplate != true
+                        && (w.IsDeleted != true || w.IsDeleted == null)
+                        && (accountId == null || w.AccountId == accountId),
+                    cancellationToken);
+
+        public async Task<IReadOnlyList<Contacts>> GetSiteContactsAsync(
+            int? locationId,
+            CancellationToken cancellationToken)
+        {
+            if (locationId == null)
+                return Array.Empty<Contacts>();
+
+            return await _context.Contacts
+                .AsNoTracking()
+                .Where(c => c.LocationId == locationId && c.IsDeleted != true)
+                .OrderBy(c => c.SiteContactOrder)
+                .ThenBy(c => c.Id)
+                .ToListAsync(cancellationToken);
+        }
+    }
+}
diff --git a/SeaHaven.DataServices/Interfaces/IWorkOrderPocDataService.cs b/SeaHaven.DataServices/Interfaces/IWorkOrderPocDataService.cs
new file mode 100644
index 0000000..c940a49
--- /dev/null
+++ b/SeaHaven.DataServices/Interfaces/IWorkOrderPocDataService.cs
@@ -0,0 +1,28 @@
+using Data.SeaHavenIndustries;
+
+namespace SeaHaven.DataServices.Interfaces
+{
+    /// <summary>
+    /// SH-379: data access for the work-order-level POC override.
+    /// </summary>
+    public interface IWorkOrderPocDataService
+    {
+        /// <summary>
+        /// SH-221 account-scoped tracked load for POC updates. Includes the site's
+        /// contacts and the linked WorkOrderContacts POC. Null when the work order
+        /// does not exist or is outside the caller's account scope.
+        /// </summary>
+        Task<WorkOrder?> GetTrackedWorkOrderAsync(
+            int workOrderId,
+            int? accountId,
+            CancellationToken cancellationToken);
+
+        /// <summary>
+        /// The site's live contacts for a location ordered by SiteContactOrder then Id.
+        /// Deleted contacts are excluded. Empty when the location has none.
+        /// </summary>
+        Task<IReadOnlyList<Contacts>> GetSiteContactsAsync(
+            int? locationId,
+            CancellationToken cancellationToken);
+    }
+}
diff --git a/SeaHaven.DataServices/Interfaces/WorkOrderBoardModels.cs b/SeaHaven.DataServices/Interfaces/WorkOrderBoardModels.cs
index 03cbdae..1aea2d8 100644
--- a/SeaHaven.DataServices/Interfaces/WorkOrderBoardModels.cs
+++ b/SeaHaven.DataServices/Interfaces/WorkOrderBoardModels.cs
@@ -71,7 +71,9 @@ namespace SeaHaven.DataServices.Interfaces
         int MediaCount = 0,
         WorkOrderFrozenSite? FrozenSite = null,
         WorkOrderFrozenCompany? FrozenCompany = null,
-        WorkOrderFrozenPoc? FrozenPoc = null);
+        WorkOrderFrozenPoc? FrozenPoc = null,
+        string? WoPocName = null,
+        string? WoPocPhone = null);
 
     public record WorkOrderBoardQueryResult(
         IReadOnlyList<WorkOrderBoardRawRow> ScheduledRows,
diff --git a/SeaHaven.Services/DTOs/WorkOrderBoardDTOs.cs b/SeaHaven.Services/DTOs/WorkOrderBoardDTOs.cs
index 4070b4b..b6ca553 100644
--- a/SeaHaven.Services/DTOs/WorkOrderBoardDTOs.cs
+++ b/SeaHaven.Services/DTOs/WorkOrderBoardDTOs.cs
@@ -92,6 +92,8 @@ namespace SeaHaven.Services.DTOs
         public string? PocName { get; set; }
         public string? PocPhone { get; set; }
         public string? PocNotes { get; set; }
+        /// <summary>SH-190: a manual WO-level POC override is present (locked away from the Site).</summary>
+        public bool PocCustomized { get; set; }
         public List<WorkOrderAdditionalContactDto>? AdditionalContacts { get; set; }
         public WorkOrderFrozenSiteDto? FrozenSite { get; set; }
         public WorkOrderFrozenCompanyDto? FrozenCompany { get; set; }
diff --git a/SeaHaven.Services/DTOs/WorkOrderBoardRequestDTOs.cs b/SeaHaven.Services/DTOs/WorkOrderBoardRequestDTOs.cs
index 540beba..8f2c9df 100644
--- a/SeaHaven.Services/DTOs/WorkOrderBoardRequestDTOs.cs
+++ b/SeaHaven.Services/DTOs/WorkOrderBoardRequestDTOs.cs
@@ -58,6 +58,20 @@ namespace SeaHaven.Services.DTOs
         public int? Severity { get; set; }
     }
 
+    /// <summary>
+    /// SH-379: replaces the work-order-level POC override (PocName/PocPhone/PocNotes).
+    /// Blank name and phone clear the override so the work order follows the Site's
+    /// live contact again. An edit equal to a live Site contact does not lock (SH-190).
+    /// </summary>
+    public class WorkOrderPocUpdateRequestDto
+    {
+        public string? PocName { get; set; }
+        public string? PocPhone { get; set; }
+        public string? PocNotes { get; set; }
+        /// <summary>Base64 row version, same concurrency token as the board patch.</summary>
+        public string? WorkOrderVersion { get; set; }
+    }
+
     /// <summary>Advanced search / filter query for the board.</summary>
     public class WorkOrderAdvancedSearchQueryDto
     {
diff --git a/SeaHaven.Services/Helpers/WorkOrderCompletionSnapshotMapper.cs b/SeaHaven.Services/Helpers/WorkOrderCompletionSnapshotMapper.cs
index 28ef673..798a978 100644
--- a/SeaHaven.Services/Helpers/WorkOrderCompletionSnapshotMapper.cs
+++ b/SeaHaven.Services/Helpers/WorkOrderCompletionSnapshotMapper.cs
@@ -17,10 +17,14 @@ namespace SeaHaven.Services.Helpers
             var contact = workOrder.WorkOrderContacts?
                 .OrderBy(item => item.Id)
                 .FirstOrDefault();
+            // SH-379/SH-190: a work order without an override or link freezes the
+            // Site's live primary contact, matching the board display precedence.
+            var sitePrimary = WorkOrderPocSiteContact.ResolvePrimary(location?.Contacts);
             var pocName = FirstNotBlank(
                 workOrder.PocName,
-                JoinName(contact?.POC?.FirstName, contact?.POC?.MiddleName, contact?.POC?.LastName));
-            var pocPhone = FirstNotBlank(workOrder.PocPhone, contact?.POC?.PhoneNumber);
+                JoinName(contact?.POC?.FirstName, contact?.POC?.MiddleName, contact?.POC?.LastName),
+                WorkOrderPocSiteContact.DisplayName(sitePrimary));
+            var pocPhone = FirstNotBlank(workOrder.PocPhone, contact?.POC?.PhoneNumber, sitePrimary?.PhoneNumber);
             var pocNotes = FirstNotBlank(workOrder.PocNotes, contact?.Notes);
 
             var contacts = new List<WorkOrderFrozenPocContact>();
diff --git a/SeaHaven.Services/Helpers/WorkOrderPocSiteContact.cs b/SeaHaven.Services/Helpers/WorkOrderPocSiteContact.cs
new file mode 100644
index 0000000..6fafb0d
--- /dev/null
+++ b/SeaHaven.Services/Helpers/WorkOrderPocSiteContact.cs
@@ -0,0 +1,54 @@
+using Data.SeaHavenIndustries;
+
+namespace SeaHaven.Services.Helpers
+{
+    /// <summary>
+    /// SH-379 / SH-190: single resolution for "the Site's live contact" used by the
+    /// manual POC override. The same rules back the board projection fallback, the
+    /// completion snapshot fallback, the create-time baseline, and the
+    /// "changing away from the Site's live contact" lock comparison.
+    /// </summary>
+    public static class WorkOrderPocSiteContact
+    {
+        /// <summary>
+        /// The Site's primary live contact: first non-deleted contact ordered by
+        /// SiteContactOrder then Id. Null when the site has no live contacts.
+        /// </summary>
+        public static Contacts? ResolvePrimary(IEnumerable<Contacts>? contacts)
+            => contacts?
+                .Where(c => c.IsDeleted != true)
+                .OrderBy(c => c.SiteContactOrder)
+                .ThenBy(c => c.Id)
+                .FirstOrDefault();
+
+        /// <summary>Display name matching the board projection: trimmed First + Last.</summary>
+        public static string? DisplayName(Contacts? contact)
+            => contact == null
+                ? null
+                : Normalize(((contact.FirstName ?? "") + " " + (contact.LastName ?? "")).Trim());
+
+        /// <summary>
+        /// SH-190: a manual POC equal to one of the Site's live contacts (trimmed
+        /// name + phone) is not a change away from the Site and must not lock.
+        /// </summary>
+        public static bool MatchesAnySiteContact(
+            string? name,
+            string? phone,
+            IEnumerable<Contacts>? contacts)
+        {
+            if (contacts == null)
+                return false;
+
+            var normalizedName = Normalize(name);
+            var normalizedPhone = Normalize(phone);
+
+            return contacts
+                .Where(c => c.IsDeleted != true)
+                .Any(c => string.Equals(Normalize(((c.FirstName ?? "") + " " + (c.LastName ?? "")).Trim()), normalizedName, StringComparison.Ordinal)
+                    && string.Equals(Normalize(c.PhoneNumber), normalizedPhone, StringComparison.Ordinal));
+        }
+
+        private static string? Normalize(string? value)
+            => string.IsNullOrWhiteSpace(value) ? null : value.Trim();
+    }
+}
diff --git a/SeaHaven.Services/Implementation/WorkOrderBoardCreateService.cs b/SeaHaven.Services/Implementation/WorkOrderBoardCreateService.cs
index a0d68d0..a7fa4bc 100644
--- a/SeaHaven.Services/Implementation/WorkOrderBoardCreateService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderBoardCreateService.cs
@@ -20,6 +20,7 @@ namespace SeaHaven.Services.Implementation
         private readonly IWorkOrderAuditService _auditService;
         private readonly IWorkOrderBoardCreateValidation _validator;
         private readonly IWorkOrderAccountResolver _accountResolver;
+        private readonly IWorkOrderPocDataService _pocData;
         private readonly IServicesRegistryService? _servicesRegistryService;
 
         public WorkOrderBoardCreateService(
@@ -29,6 +30,7 @@ namespace SeaHaven.Services.Implementation
             IWorkOrderAuditService auditService,
             IWorkOrderBoardCreateValidation validator,
             IWorkOrderAccountResolver accountResolver,
+            IWorkOrderPocDataService pocData,
             IServicesRegistryService? servicesRegistryService = null)
         {
             _boardDataService = boardDataService;
@@ -37,6 +39,7 @@ namespace SeaHaven.Services.Implementation
             _auditService = auditService;
             _validator = validator;
             _accountResolver = accountResolver;
+            _pocData = pocData;
             _servicesRegistryService = servicesRegistryService;
         }
 
@@ -64,6 +67,15 @@ namespace SeaHaven.Services.Implementation
             var pocName = TrimOrNull(request.PocName);
             var pocPhone = TrimOrNull(request.PocPhone);
             var pocNotes = TrimOrNull(request.PocNotes);
+            // SH-190 AC3: a create-time POC equal to one of the Site's live contacts
+            // is not an override. Store nothing so the work order keeps following
+            // the Site's live contact until a dispatcher edits away from it.
+            var siteContacts = await _pocData.GetSiteContactsAsync(request.LocationId, cancellationToken);
+            if (WorkOrderPocSiteContact.MatchesAnySiteContact(pocName, pocPhone, siteContacts))
+            {
+                pocName = null;
+                pocPhone = null;
+            }
             var additionalContactsJson = WorkOrderAdditionalContactsMapper.SerializeForStorage(request.AdditionalContacts);
             var techPhone = TrimOrNull(request.TechPhone);
             var vendorNotes = TrimOrNull(request.VendorNotes);
diff --git a/SeaHaven.Services/Implementation/WorkOrderBoardService.cs b/SeaHaven.Services/Implementation/WorkOrderBoardService.cs
index 7a7f1b7..f21a21c 100644
--- a/SeaHaven.Services/Implementation/WorkOrderBoardService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderBoardService.cs
@@ -116,6 +116,7 @@ namespace SeaHaven.Services.Implementation
                 PocName = row.PocName,
                 PocPhone = row.PocPhone,
                 PocNotes = row.PocNotes,
+                PocCustomized = !string.IsNullOrWhiteSpace(row.WoPocName) || !string.IsNullOrWhiteSpace(row.WoPocPhone),
                 FrozenSite = MapFrozenSite(row.FrozenSite),
                 FrozenCompany = MapFrozenCompany(row.FrozenCompany),
                 FrozenPoc = MapFrozenPoc(row.FrozenPoc),
diff --git a/SeaHaven.Services/Implementation/WorkOrderPocService.cs b/SeaHaven.Services/Implementation/WorkOrderPocService.cs
new file mode 100644
index 0000000..ba47748
--- /dev/null
+++ b/SeaHaven.Services/Implementation/WorkOrderPocService.cs
@@ -0,0 +1,169 @@
+using System.Security.Claims;
+using Data.SeaHavenIndustries;
+using SeaHaven.DataServices.Interfaces;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Exceptions;
+using SeaHaven.Services.Helpers;
+using SeaHaven.Services.Interfaces;
+
+namespace SeaHaven.Services.Implementation
+{
+    /// <summary>
+    /// SH-379: persists a manual POC override on an existing work order. The manual
+    /// value is stored in the WO-level PocName/PocPhone/PocNotes fields, staged as
+    /// FieldChanged audit entries (which also write field locks so later syncs never
+    /// overwrite a manual POC, SH-190 AC2), and captured by the completion freeze.
+    /// An edit equal to one of the Site's live contacts stores no override, so a
+    /// never-overridden work order keeps following the Site (SH-190 AC3).
+    /// </summary>
+    public class WorkOrderPocService : IWorkOrderPocService
+    {
+        private readonly IWorkOrderPocDataService _pocData;
+        private readonly IWorkOrderBoardMutationDataService _mutationData;
+        private readonly IWorkOrderBoardService _boardService;
+        private readonly IWorkOrderAuditService _auditService;
+        private readonly IWorkOrderAccountResolver _accountResolver;
+
+        public WorkOrderPocService(
+            IWorkOrderPocDataService pocData,
+            IWorkOrderBoardMutationDataService mutationData,
+            IWorkOrderBoardService boardService,
+            IWorkOrderAuditService auditService,
+            IWorkOrderAccountResolver accountResolver)
+        {
+            _pocData = pocData;
+            _mutationData = mutationData;
+            _boardService = boardService;
+            _auditService = auditService;
+            _accountResolver = accountResolver;
+        }
+
+        public async Task<WorkOrderBoardRowDto> UpdatePocAsync(
+            int workOrderId,
+            WorkOrderPocUpdateRequestDto request,
+            ClaimsPrincipal user,
+            string? actorId)
+        {
+            var accountId = _accountResolver.ResolveAccountFilter(user);
+
+            var workOrderVersion = ParseRowVersion(request.WorkOrderVersion);
+            if (workOrderVersion == null)
+                throw new WorkOrderBoardValidationException("WorkOrderVersionRequired", "workOrderVersion is required.");
+
+            ValidateLengths(request);
+
+            await _mutationData.ExecuteTransactionalAsync(async ct =>
+            {
+                var workOrder = await _pocData.GetTrackedWorkOrderAsync(workOrderId, accountId, ct);
+                if (workOrder == null)
+                    throw new WorkOrderBoardValidationException("NotFound", "Work order not found.");
+
+                if (!RowVersionsMatch(workOrder.RowVersion, workOrderVersion))
+                    throw new WorkOrderBoardConcurrencyException(await LoadBoardRowAsync(workOrderId, user));
+
+                if (WorkOrderBoardMutationRules.IsFullyLocked(workOrder.LifecycleStatus))
+                    throw new WorkOrderBoardValidationException("CanceledReadOnly", "Work order is read-only in its current status.");
+                if (WorkOrderBoardMutationRules.IsCoreLocked(workOrder.LifecycleStatus))
+                    throw new WorkOrderBoardValidationException("ReadOnly", "Work order is read-only in its current status.");
+
+                var sitePrimary = WorkOrderPocSiteContact.ResolvePrimary(workOrder.Locations?.Contacts);
+                var linkedContact = workOrder.WorkOrderContacts?
+                    .OrderBy(item => item.Id)
+                    .FirstOrDefault()?.POC;
+
+                var newName = TrimOrNull(request.PocName);
+                var newPhone = TrimOrNull(request.PocPhone);
+                var newNotes = TrimOrNull(request.PocNotes);
+
+                // SH-190: changing away from the Site's live contact locks the POC.
+                // An edit that equals one of the Site's live contacts (and blanking
+                // both fields) stores no override, so the work order follows the Site.
+                var overrideName = newName;
+                var overridePhone = newPhone;
+                if ((overrideName != null || overridePhone != null)
+                    && WorkOrderPocSiteContact.MatchesAnySiteContact(overrideName, overridePhone, workOrder.Locations?.Contacts))
+                {
+                    overrideName = null;
+                    overridePhone = null;
+                }
+
+                var oldEffectiveName = FirstNotBlank(workOrder.PocName, ContactDisplayName(linkedContact), WorkOrderPocSiteContact.DisplayName(sitePrimary));
+                var oldEffectivePhone = FirstNotBlank(workOrder.PocPhone, linkedContact?.PhoneNumber, sitePrimary?.PhoneNumber);
+                var newEffectiveName = FirstNotBlank(overrideName, ContactDisplayName(linkedContact), WorkOrderPocSiteContact.DisplayName(sitePrimary));
+                var newEffectivePhone = FirstNotBlank(overridePhone, linkedContact?.PhoneNumber, sitePrimary?.PhoneNumber);
+
+                var storedChanged = !string.Equals(workOrder.PocName, overrideName, StringComparison.Ordinal)
+                    || !string.Equals(workOrder.PocPhone, overridePhone, StringComparison.Ordinal)
+                    || !string.Equals(workOrder.PocNotes, newNotes, StringComparison.Ordinal);
+
+                var oldNotes = workOrder.PocNotes;
+                workOrder.PocName = overrideName;
+                workOrder.PocPhone = overridePhone;
+                workOrder.PocNotes = newNotes;
+
+                if (!storedChanged)
+                    return;
+
+                _mutationData.SetExpectedWorkOrderVersion(workOrder, workOrderVersion);
+
+                // Audit effective old -> new values with the same field names create
+                // uses, so the trail reads consistently across create and update.
+                if (!string.Equals(oldEffectiveName, newEffectiveName, StringComparison.Ordinal))
+                    await _auditService.StageFieldChangedAsync(workOrderId, "PocName", oldEffectiveName, newEffectiveName, actorId);
+                if (!string.Equals(oldEffectivePhone, newEffectivePhone, StringComparison.Ordinal))
+                    await _auditService.StageFieldChangedAsync(workOrderId, "PocPhone", oldEffectivePhone, newEffectivePhone, actorId);
+                if (!string.Equals(TrimOrNull(oldNotes), newNotes, StringComparison.Ordinal))
+                    await _auditService.StageFieldChangedAsync(workOrderId, "PocNotes", TrimOrNull(oldNotes), newNotes, actorId);
+
+                var outcome = await _mutationData.SaveAsync(ct);
+                if (outcome == BoardSaveOutcome.ConcurrencyConflict)
+                    throw new WorkOrderBoardConcurrencyException(await LoadBoardRowAsync(workOrderId, user));
+            }, CancellationToken.None);
+
+            var row = await LoadBoardRowAsync(workOrderId, user);
+            return row ?? throw new WorkOrderBoardValidationException("NotFound", "Work order not found.");
+        }
+
+        private async Task<WorkOrderBoardRowDto?> LoadBoardRowAsync(int workOrderId, ClaimsPrincipal user)
+            => await _boardService.GetBoardRowAsync(workOrderId, user);
+
+        private static void ValidateLengths(WorkOrderPocUpdateRequestDto request)
+        {
+            if (request.PocName?.Length > 200)
+                throw new WorkOrderBoardValidationException("InvalidValue", "pocName must be at most 200 characters.");
+            if (request.PocPhone?.Length > 50)
+                throw new WorkOrderBoardValidationException("InvalidValue", "pocPhone must be at most 50 characters.");
+            if (request.PocNotes?.Length > 2000)
+                throw new WorkOrderBoardValidationException("InvalidValue", "pocNotes must be at most 2000 characters.");
+        }
+
+        private static string? ContactDisplayName(Contacts? contact)
+            => contact == null
+                ? null
+                : TrimOrNull(((contact.FirstName ?? "") + " " + (contact.LastName ?? "")).Trim());
+
+        private static string? FirstNotBlank(params string?[] values)
+            => values.FirstOrDefault(value => !string.IsNullOrWhiteSpace(value))?.Trim();
+
+        private static string? TrimOrNull(string? value)
+            => string.IsNullOrWhiteSpace(value) ? null : value.Trim();
+
+        private static byte[]? ParseRowVersion(string? base64)
+        {
+            if (string.IsNullOrWhiteSpace(base64))
+                return null;
+
+            try
+            {
+                return Convert.FromBase64String(base64);
+            }
+            catch (FormatException)
+            {
+                throw new WorkOrderBoardValidationException("InvalidRowVersion", "Invalid workOrderVersion format.");
+            }
+        }
+
+        private static bool RowVersionsMatch(byte[]? current, byte[] expected)
+            => current != null && current.AsSpan().SequenceEqual(expected);
+    }
+}
diff --git a/SeaHaven.Services/Interfaces/IWorkOrderPocService.cs b/SeaHaven.Services/Interfaces/IWorkOrderPocService.cs
new file mode 100644
index 0000000..8c9b49a
--- /dev/null
+++ b/SeaHaven.Services/Interfaces/IWorkOrderPocService.cs
@@ -0,0 +1,18 @@
+using System.Security.Claims;
+using SeaHaven.Services.DTOs;
+
+namespace SeaHaven.Services.Interfaces
+{
+    /// <summary>
+    /// SH-379: persists a manual POC override on an existing work order with audit
+    /// entries, and applies the SH-190 follow-site / lock semantics.
+    /// </summary>
+    public interface IWorkOrderPocService
+    {
+        Task<WorkOrderBoardRowDto> UpdatePocAsync(
+            int workOrderId,
+            WorkOrderPocUpdateRequestDto request,
+            ClaimsPrincipal user,
+            string? actorId);
+    }
+}
diff --git a/SeaHavenIndustries.Tests/WorkOrderAccountScopeTests.cs b/SeaHavenIndustries.Tests/WorkOrderAccountScopeTests.cs
index 5acde4c..59bc227 100644
--- a/SeaHavenIndustries.Tests/WorkOrderAccountScopeTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderAccountScopeTests.cs
@@ -33,7 +33,7 @@ public class WorkOrderAccountScopeTests
         var fieldLocks = new WorkOrderFieldLockService(new WorkOrderFieldLockDataService(context));
         var audit = new WorkOrderAuditService(new WorkOrderAuditDataService(context), fieldLocks);
         return new WorkOrderBoardCreateService(
-            boardData, mutationData, boardService, audit, new WorkOrderBoardCreateValidation(), resolver);
+            boardData, mutationData, boardService, audit, new WorkOrderBoardCreateValidation(), resolver, new WorkOrderPocDataService(context));
     }
 
     [Fact]
@@ -232,7 +232,7 @@ public class WorkOrderAccountScopeTests
         var fieldLocks = new WorkOrderFieldLockService(new WorkOrderFieldLockDataService(context));
         var audit = new WorkOrderAuditService(new WorkOrderAuditDataService(context), fieldLocks);
         var create = new WorkOrderBoardCreateService(
-            boardData, mutationData, boardService, audit, new WorkOrderBoardCreateValidation(), resolver);
+            boardData, mutationData, boardService, audit, new WorkOrderBoardCreateValidation(), resolver, new WorkOrderPocDataService(context));
 
         using var cts = new CancellationTokenSource();
         await create.CreateAsync(
diff --git a/SeaHavenIndustries.Tests/WorkOrderBoardCreateRelationalTests.cs b/SeaHavenIndustries.Tests/WorkOrderBoardCreateRelationalTests.cs
index fe1aee0..3269309 100644
--- a/SeaHavenIndustries.Tests/WorkOrderBoardCreateRelationalTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderBoardCreateRelationalTests.cs
@@ -49,7 +49,8 @@ public class WorkOrderBoardCreateRelationalTests
             boardService,
             audit,
             new WorkOrderBoardCreateValidation(),
-            resolver);
+            resolver,
+            new WorkOrderPocDataService(context));
 
         var result = await service.CreateAsync(new WorkOrderBoardCreateRequestDto
         {
@@ -111,7 +112,8 @@ public class WorkOrderBoardCreateRelationalTests
             boardService,
             audit,
             new WorkOrderBoardCreateValidation(),
-            resolver);
+            resolver,
+            new WorkOrderPocDataService(context));
 
         await Assert.ThrowsAsync<DbUpdateException>(() =>
             service.CreateAsync(new WorkOrderBoardCreateRequestDto
diff --git a/SeaHavenIndustries.Tests/WorkOrderBoardCreateServiceTests.cs b/SeaHavenIndustries.Tests/WorkOrderBoardCreateServiceTests.cs
index 8a327e4..a7141b4 100644
--- a/SeaHavenIndustries.Tests/WorkOrderBoardCreateServiceTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderBoardCreateServiceTests.cs
@@ -27,7 +27,7 @@ public class WorkOrderBoardCreateServiceTests
         var fieldLocks = new WorkOrderFieldLockService(new WorkOrderFieldLockDataService(context));
         var audit = new WorkOrderAuditService(new WorkOrderAuditDataService(context), fieldLocks);
         var validator = new WorkOrderBoardCreateValidation();
-        var service = new WorkOrderBoardCreateService(boardData, mutationData, boardService, audit, validator, resolver);
+        var service = new WorkOrderBoardCreateService(boardData, mutationData, boardService, audit, validator, resolver, new WorkOrderPocDataService(context));
         return (context, service);
     }
 
diff --git a/SeaHavenIndustries.Tests/WorkOrderBoardCreateSyncLockTests.cs b/SeaHavenIndustries.Tests/WorkOrderBoardCreateSyncLockTests.cs
index 62ff194..d74c178 100644
--- a/SeaHavenIndustries.Tests/WorkOrderBoardCreateSyncLockTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderBoardCreateSyncLockTests.cs
@@ -32,7 +32,8 @@ public class WorkOrderBoardCreateSyncLockTests
             boardService,
             audit,
             new WorkOrderBoardCreateValidation(),
-            resolver);
+            resolver,
+            new WorkOrderPocDataService(context));
         var policy = new SyncFieldMergePolicy(fieldLocks);
 
         await createService.CreateAsync(new WorkOrderBoardCreateRequestDto
@@ -81,7 +82,8 @@ public class WorkOrderBoardCreateSyncLockTests
             boardService,
             audit,
             new WorkOrderBoardCreateValidation(),
-            resolver);
+            resolver,
+            new WorkOrderPocDataService(context));
         var policy = new SyncFieldMergePolicy(fieldLocks);
 
         await createService.CreateAsync(new WorkOrderBoardCreateRequestDto
diff --git a/SeaHavenIndustries.Tests/WorkOrderPhase7CoexistenceTests.cs b/SeaHavenIndustries.Tests/WorkOrderPhase7CoexistenceTests.cs
index 31ac539..156b714 100644
--- a/SeaHavenIndustries.Tests/WorkOrderPhase7CoexistenceTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderPhase7CoexistenceTests.cs
@@ -74,7 +74,7 @@ public class WorkOrderPhase7CoexistenceTests
         var fieldLocks = new WorkOrderFieldLockService(new WorkOrderFieldLockDataService(context));
         var audit = new WorkOrderAuditService(new WorkOrderAuditDataService(context), fieldLocks);
         var createService = new WorkOrderBoardCreateService(
-            boardData, mutationData, boardService, audit, new WorkOrderBoardCreateValidation(), resolver);
+            boardData, mutationData, boardService, audit, new WorkOrderBoardCreateValidation(), resolver, new WorkOrderPocDataService(context));
         var policy = new SyncFieldMergePolicy(fieldLocks);
         var ingest = new WorkOrderIngestService(new WorkOrderIngestDataService(context), policy, fieldLocks, audit, WorkOrderAccountTestHelpers.Resolver(context));
 
diff --git a/SeaHavenIndustries.Tests/WorkOrderPocServiceTests.cs b/SeaHavenIndustries.Tests/WorkOrderPocServiceTests.cs
new file mode 100644
index 0000000..8ac314f
--- /dev/null
+++ b/SeaHavenIndustries.Tests/WorkOrderPocServiceTests.cs
@@ -0,0 +1,518 @@
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using Microsoft.EntityFrameworkCore;
+using SeaHaven.DataServices.Implementation;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Exceptions;
+using SeaHaven.Services.Helpers;
+using SeaHaven.Services.Implementation;
+using SeaHaven.Services.Interfaces;
+using SeaHaven.Services.Validation;
+
+namespace SeaHavenIndustries.Tests;
+
+public class WorkOrderPocServiceTests
+{
+    [Fact]
+    public async Task ManualOverridePersistsIsAuditedAndLocks()
+    {
+        await using var context = CreateContext();
+        await SeedScopeAsync(context);
+        var workOrder = NewWorkOrder(context);
+        await SeedSiteContactAsync(context, firstName: "Alice", lastName: "Site", phone: "312-555-0100");
+        await context.SaveChangesAsync();
+
+        var service = CreatePocService(context);
+        var row = await service.UpdatePocAsync(
+            workOrder.Id,
+            Poc("Manual POC", "312-555-0001", "Call first", workOrder),
+            WorkOrderAccountTestHelpers.AccountUser(),
+            "actor-1");
+
+        var persisted = await context.workOrders.AsNoTracking().SingleAsync(w => w.Id == workOrder.Id);
+        Assert.Equal("Manual POC", persisted.PocName);
+        Assert.Equal("312-555-0001", persisted.PocPhone);
+        Assert.Equal("Call first", persisted.PocNotes);
+        Assert.Equal("Manual POC", row.PocName);
+        Assert.Equal("312-555-0001", row.PocPhone);
+        Assert.True(row.PocCustomized);
+
+        var auditName = await context.WorkOrderAuditLogs.SingleAsync(a =>
+            a.WorkOrderId == workOrder.Id && a.FieldName == "PocName");
+        Assert.Equal("Alice Site", auditName.OldValue);
+        Assert.Equal("Manual POC", auditName.NewValue);
+        Assert.Equal("FieldChanged", auditName.Action);
+        Assert.True(await context.WorkOrderFieldLocks.AnyAsync(l =>
+            l.WorkOrderId == workOrder.Id && l.FieldName == "PocName"));
+        Assert.True(await context.WorkOrderFieldLocks.AnyAsync(l =>
+            l.WorkOrderId == workOrder.Id && l.FieldName == "PocPhone"));
+    }
+
+    [Fact]
+    public async Task ManualOverrideSurvivesCompleteAndLaterSiteChanges()
+    {
+        await using var context = CreateContext();
+        await SeedScopeAsync(context);
+        var workOrder = NewWorkOrder(context);
+        workOrder.LifecycleStatus = LifecycleStatus.Scheduled;
+        workOrder.ScheduledDate = DateTime.UtcNow.Date.AddDays(1);
+        await SeedSiteContactAsync(context, firstName: "Alice", lastName: "Site", phone: "312-555-0100");
+        await context.SaveChangesAsync();
+
+        var service = CreatePocService(context);
+        await service.UpdatePocAsync(
+            workOrder.Id,
+            Poc("Manual POC", "312-555-0001", null, workOrder),
+            WorkOrderAccountTestHelpers.AccountUser(),
+            "actor-1");
+
+        var updateService = CreateUpdateService(context);
+        var completed = await updateService.PatchFieldAsync(
+            workOrder.Id,
+            Patch(WorkOrderBoardFieldNames.LifecycleStatus, "Complete", workOrder),
+            "actor-1");
+        Assert.Equal("Manual POC", completed.PocName);
+
+        var siteContact = await context.Contacts.SingleAsync(c => c.FirstName == "Alice");
+        siteContact.FirstName = "Changed";
+        siteContact.PhoneNumber = "999-555-0100";
+        await context.SaveChangesAsync();
+
+        var row = await CreateBoardService(context).GetBoardRowAsync(
+            workOrder.Id, WorkOrderAccountTestHelpers.AccountUser());
+        Assert.Equal("Manual POC", row!.PocName);
+        Assert.Equal("312-555-0001", row.PocPhone);
+    }
+
+    [Fact]
+    public async Task SiteContactUpdateDoesNotOverwriteManualOverride()
+    {
+        await using var context = CreateContext();
+        await SeedScopeAsync(context);
+        var workOrder = NewWorkOrder(context);
+        var siteContact = await SeedSiteContactAsync(context, firstName: "Alice", lastName: "Site", phone: "312-555-0100");
+        await context.SaveChangesAsync();
+
+        var service = CreatePocService(context);
+        await service.UpdatePocAsync(
+            workOrder.Id,
+            Poc("Manual POC", "312-555-0001", null, workOrder),
+            WorkOrderAccountTestHelpers.AccountUser(),
+            "actor-1");
+
+        siteContact.FirstName = "Rotated";
+        siteContact.PhoneNumber = "999-555-0100";
+        await context.SaveChangesAsync();
+
+        var row = await CreateBoardService(context).GetBoardRowAsync(
+            workOrder.Id, WorkOrderAccountTestHelpers.AccountUser());
+        Assert.Equal("Manual POC", row!.PocName);
+        Assert.Equal("312-555-0001", row.PocPhone);
+        Assert.True(row.PocCustomized);
+    }
+
+    [Fact]
+    public async Task UnlockedWorkOrderFollowsSiteContact()
+    {
+        await using var context = CreateContext();
+        await SeedScopeAsync(context);
+        var workOrder = NewWorkOrder(context);
+        var primary = await SeedSiteContactAsync(context, firstName: "Alice", lastName: "Site", phone: "312-555-0100", order: 0);
+        await SeedSiteContactAsync(context, firstName: "Bob", lastName: "Backup", phone: "312-555-0200", order: 1);
+        await context.SaveChangesAsync();
+
+        var boardService = CreateBoardService(context);
+        var before = await boardService.GetBoardRowAsync(workOrder.Id, WorkOrderAccountTestHelpers.AccountUser());
+        Assert.Equal("Alice Site", before!.PocName);
+        Assert.Equal("312-555-0100", before.PocPhone);
+        Assert.False(before.PocCustomized);
+
+        primary.PhoneNumber = "312-555-0999";
+        await context.SaveChangesAsync();
+
+        var after = await boardService.GetBoardRowAsync(workOrder.Id, WorkOrderAccountTestHelpers.AccountUser());
+        Assert.Equal("Alice Site", after!.PocName);
+        Assert.Equal("312-555-0999", after.PocPhone);
+        Assert.False(after.PocCustomized);
+    }
+
+    [Fact]
+    public async Task EditEqualToSiteContactDoesNotLock()
+    {
+        await using var context = CreateContext();
+        await SeedScopeAsync(context);
+        var workOrder = NewWorkOrder(context);
+        await SeedSiteContactAsync(context, firstName: "Alice", lastName: "Site", phone: "312-555-0100");
+        await context.SaveChangesAsync();
+
+        var service = CreatePocService(context);
+        await service.UpdatePocAsync(
+            workOrder.Id,
+            Poc("Manual POC", "312-555-0001", null, workOrder),
+            WorkOrderAccountTestHelpers.AccountUser(),
+            "actor-1");
+
+        var row = await service.UpdatePocAsync(
+            workOrder.Id,
+            Poc("Alice Site", "312-555-0100", null, workOrder),
+            WorkOrderAccountTestHelpers.AccountUser(),
+            "actor-1");
+
+        var persisted = await context.workOrders.AsNoTracking().SingleAsync(w => w.Id == workOrder.Id);
+        Assert.Null(persisted.PocName);
+        Assert.Null(persisted.PocPhone);
+        Assert.Equal("Alice Site", row.PocName);
+        Assert.Equal("312-555-0100", row.PocPhone);
+        Assert.False(row.PocCustomized);
+
+        var auditName = await context.WorkOrderAuditLogs.Where(a =>
+            a.WorkOrderId == workOrder.Id && a.FieldName == "PocName")
+            .OrderByDescending(a => a.Id)
+            .FirstAsync();
+        Assert.Equal("Manual POC", auditName.OldValue);
+        Assert.Equal("Alice Site", auditName.NewValue);
+    }
+
+    [Fact]
+    public async Task ClearingBothFieldsFollowsSiteAgain()
+    {
+        await using var context = CreateContext();
+        await SeedScopeAsync(context);
+        var workOrder = NewWorkOrder(context);
+        await SeedSiteContactAsync(context, firstName: "Alice", lastName: "Site", phone: "312-555-0100");
+        await context.SaveChangesAsync();
+
+        var service = CreatePocService(context);
+        await service.UpdatePocAsync(
+            workOrder.Id,
+            Poc("Manual POC", "312-555-0001", "keep notes", workOrder),
+            WorkOrderAccountTestHelpers.AccountUser(),
+            "actor-1");
+        var row = await service.UpdatePocAsync(
+            workOrder.Id,
+            Poc(null, null, null, workOrder),
+            WorkOrderAccountTestHelpers.AccountUser(),
+            "actor-1");
+
+        var persisted = await context.workOrders.AsNoTracking().SingleAsync(w => w.Id == workOrder.Id);
+        Assert.Null(persisted.PocName);
+        Assert.Null(persisted.PocPhone);
+        Assert.Equal("Alice Site", row.PocName);
+        Assert.False(row.PocCustomized);
+    }
+
+    [Fact]
+    public async Task CrossTenantUpdateIsRejected()
+    {
+        await using var context = CreateContext();
+        await SeedScopeAsync(context);
+        var workOrder = NewWorkOrder(context, accountId: 2);
+        await context.SaveChangesAsync();
+
+        var service = CreatePocService(context);
+        var ex = await Assert.ThrowsAsync<WorkOrderBoardValidationException>(() =>
+            service.UpdatePocAsync(
+                workOrder.Id,
+                Poc("Manual POC", "312-555-0001", null, workOrder),
+                WorkOrderAccountTestHelpers.AccountUser(accountId: 1),
+                "actor-1"));
+
+        Assert.Equal("NotFound", ex.Code);
+        var persisted = await context.workOrders.AsNoTracking().SingleAsync(w => w.Id == workOrder.Id);
+        Assert.Null(persisted.PocName);
+        Assert.Empty(await context.WorkOrderAuditLogs.ToListAsync());
+    }
+
+    [Fact]
+    public async Task MissingAccountScopeIsForbidden()
+    {
+        await using var context = CreateContext();
+        await SeedScopeAsync(context);
+        var workOrder = NewWorkOrder(context);
+        await context.SaveChangesAsync();
+
+        var service = CreatePocService(context);
+        var ex = await Assert.ThrowsAsync<WorkOrderBoardValidationException>(() =>
+            service.UpdatePocAsync(
+                workOrder.Id,
+                Poc("Manual POC", "312-555-0001", null, workOrder),
+                WorkOrderAccountTestHelpers.MissingScope(),
+                "actor-1"));
+
+        Assert.Equal("Forbidden", ex.Code);
+    }
+
+    [Fact]
+    public async Task CompletedWorkOrderIsReadOnly()
+    {
+        await using var context = CreateContext();
+        await SeedScopeAsync(context);
+        var workOrder = NewWorkOrder(context);
+        workOrder.LifecycleStatus = LifecycleStatus.Completed;
+        workOrder.CompletedDate = DateTime.UtcNow;
+        await context.SaveChangesAsync();
+
+        var service = CreatePocService(context);
+        var ex = await Assert.ThrowsAsync<WorkOrderBoardValidationException>(() =>
+            service.UpdatePocAsync(
+                workOrder.Id,
+                Poc("Manual POC", "312-555-0001", null, workOrder),
+                WorkOrderAccountTestHelpers.AccountUser(),
+                "actor-1"));
+
+        Assert.Equal("ReadOnly", ex.Code);
+        var persisted = await context.workOrders.AsNoTracking().SingleAsync(w => w.Id == workOrder.Id);
+        Assert.Null(persisted.PocName);
+    }
+
+    [Fact]
+    public async Task CanceledWorkOrderIsReadOnly()
+    {
+        await using var context = CreateContext();
+        await SeedScopeAsync(context);
+        var workOrder = NewWorkOrder(context);
+        workOrder.LifecycleStatus = LifecycleStatus.Canceled;
+        await context.SaveChangesAsync();
+
+        var service = CreatePocService(context);
+        var ex = await Assert.ThrowsAsync<WorkOrderBoardValidationException>(() =>
+            service.UpdatePocAsync(
+                workOrder.Id,
+                Poc("Manual POC", "312-555-0001", null, workOrder),
+                WorkOrderAccountTestHelpers.AccountUser(),
+                "actor-1"));
+
+        Assert.Equal("CanceledReadOnly", ex.Code);
+    }
+
+    [Fact]
+    public async Task StaleVersionThrowsConflict()
+    {
+        await using var context = CreateContext();
+        await SeedScopeAsync(context);
+        var workOrder = NewWorkOrder(context);
+        await context.SaveChangesAsync();
+
+        var service = CreatePocService(context);
+        var stale = new WorkOrderPocUpdateRequestDto
+        {
+            PocName = "Manual POC",
+            PocPhone = "312-555-0001",
+            WorkOrderVersion = Convert.ToBase64String(new byte[] { 9, 9, 9, 9 })
+        };
+
+        await Assert.ThrowsAsync<WorkOrderBoardConcurrencyException>(() =>
+            service.UpdatePocAsync(workOrder.Id, stale, WorkOrderAccountTestHelpers.AccountUser(), "actor-1"));
+
+        var persisted = await context.workOrders.AsNoTracking().SingleAsync(w => w.Id == workOrder.Id);
+        Assert.Null(persisted.PocName);
+    }
+
+    [Fact]
+    public async Task CompletionFreezesSiteContactWhenNoOverrideOrLink()
+    {
+        await using var context = CreateContext();
+        await SeedScopeAsync(context);
+        var workOrder = NewWorkOrder(context);
+        workOrder.LifecycleStatus = LifecycleStatus.Scheduled;
+        workOrder.ScheduledDate = DateTime.UtcNow.Date.AddDays(1);
+        await SeedSiteContactAsync(context, firstName: "Alice", lastName: "Site", phone: "312-555-0100");
+        await context.SaveChangesAsync();
+
+        var updateService = CreateUpdateService(context);
+        var completed = await updateService.PatchFieldAsync(
+            workOrder.Id,
+            Patch(WorkOrderBoardFieldNames.LifecycleStatus, "Complete", workOrder),
+            "actor-1");
+
+        Assert.Equal(LifecycleStatus.Completed, completed.LifecycleStatus);
+        Assert.Equal("Alice Site", completed.PocName);
+        Assert.Equal("312-555-0100", completed.PocPhone);
+
+        var contact = await context.Contacts.SingleAsync();
+        contact.PhoneNumber = "999-555-0100";
+        await context.SaveChangesAsync();
+
+        var row = await CreateBoardService(context).GetBoardRowAsync(
+            workOrder.Id, WorkOrderAccountTestHelpers.AccountUser());
+        Assert.Equal("Alice Site", row!.PocName);
+        Assert.Equal("312-555-0100", row.PocPhone);
+    }
+
+    [Fact]
+    public async Task BoardCreateWithPocEqualToSiteContactFollowsSite()
+    {
+        await using var context = CreateContext();
+        WorkOrderAccountTestHelpers.SeedBoardCreateScope(context);
+        context.Contacts.Add(new Contacts
+        {
+            FirstName = "Alice",
+            LastName = "Site",
+            PhoneNumber = "312-555-0100",
+            LocationId = 1,
+            SiteContactOrder = 0
+        });
+        await context.SaveChangesAsync();
+
+        var service = CreateCreateService(context);
+        var row = await service.CreateAsync(new WorkOrderBoardCreateRequestDto
+        {
+            WorkOrderType = WorkOrderType.PM,
+            SiteCode = "BK5",
+            LocationId = 1,
+            PocName = "Alice Site",
+            PocPhone = "312-555-0100"
+        }, WorkOrderAccountTestHelpers.AccountUser(), "actor-1");
+
+        var persisted = await context.workOrders.AsNoTracking().SingleAsync(w => w.Id == row.Id);
+        Assert.Null(persisted.PocName);
+        Assert.Null(persisted.PocPhone);
+        Assert.Equal("Alice Site", row.PocName);
+        Assert.False(row.PocCustomized);
+    }
+
+    [Fact]
+    public async Task BoardCreateWithPocAwayFromSiteContactIsStored()
+    {
+        await using var context = CreateContext();
+        WorkOrderAccountTestHelpers.SeedBoardCreateScope(context);
+        context.Contacts.Add(new Contacts
+        {
+            FirstName = "Alice",
+            LastName = "Site",
+            PhoneNumber = "312-555-0100",
+            LocationId = 1,
+            SiteContactOrder = 0
+        });
+        await context.SaveChangesAsync();
+
+        var service = CreateCreateService(context);
+        var row = await service.CreateAsync(new WorkOrderBoardCreateRequestDto
+        {
+            WorkOrderType = WorkOrderType.PM,
+            SiteCode = "BK5",
+            LocationId = 1,
+            PocName = "Manual POC",
+            PocPhone = "312-555-0001"
+        }, WorkOrderAccountTestHelpers.AccountUser(), "actor-1");
+
+        var persisted = await context.workOrders.AsNoTracking().SingleAsync(w => w.Id == row.Id);
+        Assert.Equal("Manual POC", persisted.PocName);
+        Assert.Equal("312-555-0001", persisted.PocPhone);
+        Assert.True(row.PocCustomized);
+    }
+
+    private static ApplicationDbContext CreateContext()
+    {
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseInMemoryDatabase(Guid.NewGuid().ToString())
+            .Options;
+        return new ApplicationDbContext(options);
+    }
+
+    private static async Task SeedScopeAsync(ApplicationDbContext context)
+    {
+        WorkOrderAccountTestHelpers.SeedBoardCreateScope(context);
+        await context.SaveChangesAsync();
+    }
+
+    private static WorkOrder NewWorkOrder(ApplicationDbContext context, int accountId = 1)
+    {
+        var location = context.Locations.Local.Single(l => l.Id == 1);
+        var workOrder = new WorkOrder
+        {
+            Id = 1,
+            InternalWONumber = "00000012345",
+            SiteCode = "BK5",
+            LocationId = location.Id,
+            Locations = location,
+            AccountId = accountId,
+            LifecycleStatus = LifecycleStatus.Incomplete,
+            RowVersion = Version()
+        };
+        context.workOrders.Add(workOrder);
+        return workOrder;
+    }
+
+    private static async Task<Contacts> SeedSiteContactAsync(
+        ApplicationDbContext context,
+        string firstName,
+        string lastName,
+        string phone,
+        int order = 0)
+    {
+        var contact = new Contacts
+        {
+            FirstName = firstName,
+            LastName = lastName,
+            PhoneNumber = phone,
+            LocationId = 1,
+            SiteContactOrder = order
+        };
+        context.Contacts.Add(contact);
+        await context.SaveChangesAsync();
+        return contact;
+    }
+
+    private static WorkOrderPocService CreatePocService(ApplicationDbContext context)
+        => new(
+            new WorkOrderPocDataService(context),
+            new WorkOrderBoardMutationDataService(context),
+            CreateBoardService(context),
+            new WorkOrderAuditService(
+                new WorkOrderAuditDataService(context),
+                new WorkOrderFieldLockService(new WorkOrderFieldLockDataService(context))),
+            WorkOrderAccountTestHelpers.Resolver(context));
+
+    private static WorkOrderBoardService CreateBoardService(ApplicationDbContext context)
+        => new(
+            new WorkOrderBoardDataService(context),
+            WorkOrderAccountTestHelpers.Resolver(context));
+
+    private static WorkOrderBoardUpdateService CreateUpdateService(ApplicationDbContext context)
+    {
+        var fieldLocks = new WorkOrderFieldLockService(new WorkOrderFieldLockDataService(context));
+        return new WorkOrderBoardUpdateService(
+            new WorkOrderBoardDataService(context),
+            new WorkOrderBoardMutationDataService(context),
+            new WorkOrderAuditService(new WorkOrderAuditDataService(context), fieldLocks));
+    }
+
+    private static WorkOrderBoardCreateService CreateCreateService(ApplicationDbContext context)
+        => new(
+            new WorkOrderBoardDataService(context),
+            new WorkOrderBoardMutationDataService(context),
+            CreateBoardService(context),
+            new WorkOrderAuditService(
+                new WorkOrderAuditDataService(context),
+                new WorkOrderFieldLockService(new WorkOrderFieldLockDataService(context))),
+            new WorkOrderBoardCreateValidation(),
+            WorkOrderAccountTestHelpers.Resolver(context),
+            new WorkOrderPocDataService(context));
+
+    private static WorkOrderPocUpdateRequestDto Poc(
+        string? name,
+        string? phone,
+        string? notes,
+        WorkOrder workOrder)
+        => new()
+        {
+            PocName = name,
+            PocPhone = phone,
+            PocNotes = notes,
+            WorkOrderVersion = Convert.ToBase64String(workOrder.RowVersion ?? Version())
+        };
+
+    private static WorkOrderBoardPatchRequestDto Patch(
+        string field,
+        string value,
+        WorkOrder workOrder)
+        => new()
+        {
+            Field = field,
+            Value = value,
+            WorkOrderVersion = Convert.ToBase64String(workOrder.RowVersion ?? Version())
+        };
+
+    private static byte[] Version() => new byte[] { 1, 0, 0, 0, 0, 0, 0, 1 };
+}

From facc6ef71e6aa2abd253268ab1872b0d7626c9a6 Mon Sep 17 00:00:00 2001
From: Adam Moussa <166072409+amoussa1229@users.noreply.github.com>
Date: Fri, 18 Sep 2026 14:29:15 -0400
Subject: [PATCH 072/183] fix(iam): let staging githubdeploy GetObject the
 release zip (#154)

* fix(iam): let staging githubdeploy GetObject the release zip

* fix(iam): allow staging githubdeploy to cache EB processed extensions

* fix(iam): allow staging githubdeploy GetObjectAcl for EB updates

* fix(iam): grant staging githubdeploy named S3 reads on EB resources prefix

* fix(iam): allow staging githubdeploy to delete EB version cache objects

* fix(iam): scope staging githubdeploy S3 object access to the EB bucket

* fix(iam): allow staging githubdeploy PutObjectVersionAcl on EB artifacts

* fix(iam): allow staging githubdeploy GetBucketPolicy on the EB bucket

* fix(iam): scope staging githubdeploy S3 objects to SHOC and staging EB prefixes
---
 .../live/modules/environment-owned/main.tf    | 30 +++++++++++++++----
 1 file changed, 25 insertions(+), 5 deletions(-)

diff --git a/terraform/live/modules/environment-owned/main.tf b/terraform/live/modules/environment-owned/main.tf
index cc01dc4..8bf364b 100644
--- a/terraform/live/modules/environment-owned/main.tf
+++ b/terraform/live/modules/environment-owned/main.tf
@@ -292,17 +292,37 @@ data "aws_iam_policy_document" "deploy" {
   dynamic "statement" {
     for_each = local.use_legacy_s3_policy ? [] : [1]
     content {
-      effect    = "Allow"
-      actions   = ["s3:PutObject"]
-      resources = ["arn:aws:s3:::${local.eb_bucket_name}/${var.eb_application_name}/*"]
+      effect = "Allow"
+      actions = [
+        "s3:PutObject",
+        "s3:PutObjectAcl",
+        "s3:PutObjectVersionAcl",
+        "s3:GetObject",
+        "s3:GetObjectAcl",
+        "s3:GetObjectVersion",
+        "s3:GetObjectVersionAcl",
+        "s3:DeleteObject",
+      ]
+      resources = [
+        "arn:aws:s3:::${local.eb_bucket_name}/${var.eb_application_name}/*",
+        "arn:aws:s3:::${local.eb_bucket_name}/resources/_runtime/_embedded_extensions/${var.eb_application_name}/*",
+        "arn:aws:s3:::${local.eb_bucket_name}/resources/environments/${var.eb_environment_id}/*",
+      ]
     }
   }
 
   dynamic "statement" {
     for_each = local.use_legacy_s3_policy ? [] : [1]
     content {
-      effect    = "Allow"
-      actions   = ["s3:GetBucketLocation", "s3:ListBucket"]
+      effect = "Allow"
+      actions = [
+        "s3:GetBucketLocation",
+        "s3:ListBucket",
+        "s3:GetBucketPolicy",
+        "s3:GetBucketAcl",
+        "s3:GetBucketVersioning",
+        "s3:GetBucketOwnershipControls",
+      ]
       resources = ["arn:aws:s3:::${local.eb_bucket_name}"]
     }
   }

From 9eb51b528f9a41aafbd85a9dda79c260c9fbc15c Mon Sep 17 00:00:00 2001
From: Adam Moussa <166072409+amoussa1229@users.noreply.github.com>
Date: Fri, 18 Sep 2026 15:13:18 -0400
Subject: [PATCH 073/183] chore(terraform): complete staging environment
 adoption (#156)

* chore(terraform): complete staging environment adoption

* test(terraform): include deploy SSM parameters in the import ownership boundary
---
 scripts/terraform_import_plan_resources.py | 28 ++++++++++++++++++++++
 terraform/README.md                        |  4 ++--
 terraform/live/README.md                   |  5 ++--
 terraform/live/staging/main.tf             |  4 ++--
 4 files changed, 35 insertions(+), 6 deletions(-)

diff --git a/scripts/terraform_import_plan_resources.py b/scripts/terraform_import_plan_resources.py
index dc66365..2feb00d 100644
--- a/scripts/terraform_import_plan_resources.py
+++ b/scripts/terraform_import_plan_resources.py
@@ -9,6 +9,10 @@ COMMON_RESOURCES = {
     "module.environment.aws_iam_role_policy.runtime_app_config": "aws_iam_role_policy",
     "module.environment.aws_iam_role_policy_attachment.web_tier": "aws_iam_role_policy_attachment",
     "module.environment.aws_secretsmanager_secret.app_config": "aws_secretsmanager_secret",
+    "module.environment.aws_ssm_parameter.deploy_application_name": "aws_ssm_parameter",
+    "module.environment.aws_ssm_parameter.deploy_artifacts_bucket": "aws_ssm_parameter",
+    "module.environment.aws_ssm_parameter.deploy_environment_name": "aws_ssm_parameter",
+    "module.environment.aws_ssm_parameter.deploy_smoke_url": "aws_ssm_parameter",
 }
 
 REQUIRED_RESOURCES = {
@@ -52,6 +56,18 @@ DEV_IMPORT_IDS = {
     "module.environment.aws_route53_record.api_alias[0]": (
         "Z07671212N75U4YLPWZR8_api.dev.seahaven.com_A"
     ),
+    "module.environment.aws_ssm_parameter.deploy_application_name": (
+        "/shoc-backend/dev/deploy/application-name"
+    ),
+    "module.environment.aws_ssm_parameter.deploy_artifacts_bucket": (
+        "/shoc-backend/dev/deploy/artifacts-bucket"
+    ),
+    "module.environment.aws_ssm_parameter.deploy_environment_name": (
+        "/shoc-backend/dev/deploy/environment-name"
+    ),
+    "module.environment.aws_ssm_parameter.deploy_smoke_url": (
+        "/shoc-backend/dev/deploy/smoke-url"
+    ),
 }
 
 DEV_IMPORT_BASELINE = {
@@ -92,6 +108,18 @@ STAGING_IMPORT_IDS = {
     "module.environment.aws_route53_record.api_cname[0]": (
         "Z02602739VQWBWCAGXP4_api.staging.seahaven.com_CNAME"
     ),
+    "module.environment.aws_ssm_parameter.deploy_application_name": (
+        "/shoc-backend/staging/deploy/application-name"
+    ),
+    "module.environment.aws_ssm_parameter.deploy_artifacts_bucket": (
+        "/shoc-backend/staging/deploy/artifacts-bucket"
+    ),
+    "module.environment.aws_ssm_parameter.deploy_environment_name": (
+        "/shoc-backend/staging/deploy/environment-name"
+    ),
+    "module.environment.aws_ssm_parameter.deploy_smoke_url": (
+        "/shoc-backend/staging/deploy/smoke-url"
+    ),
 }
 
 STAGING_IMPORT_BASELINE = {
diff --git a/terraform/README.md b/terraform/README.md
index d4d2023..d11938b 100644
--- a/terraform/README.md
+++ b/terraform/README.md
@@ -37,8 +37,8 @@ only explicitly allowlisted ownership metadata and the narrowed dev deploy S3
 policy.
 
 The GitHub Environment **variable** `DEPLOY_ROLE_ARN` is the OIDC role used
-by application CD after cutover. Adoption may still have the older
-`AWS_DEPLOY_ROLE_ARN` secret until that cutover.
+by application CD. Environment secrets `TF_API_TOKEN` and
+`AWS_DEPLOY_ROLE_ARN` were removed at cutover.
 
 ## Local validation
 
diff --git a/terraform/live/README.md b/terraform/live/README.md
index e7630cd..8f3850b 100644
--- a/terraform/live/README.md
+++ b/terraform/live/README.md
@@ -142,8 +142,9 @@ cut from **Actions → Release** (`environment`, `bump`, `message`). That
 workflow waits for CI, tags `vX.Y.Z-staging` from main HEAD with
 `GITHUB_TOKEN`, then calls deploy. Do not cut prod yet; leave
 `PROD_APP_CD_ENABLED` unset and do not create the `prod` GitHub Environment.
-Staging remains `adoption_complete=false` with a pinned API CNAME until its
-import apply is proven after the first `vX.Y.Z-staging` GitHub-owned zip.
+Staging import is proven after the first GitHub-owned zip
+(`v0.0.1-staging`). Terraform now manages the declared Elastic Beanstalk
+settings. The API CNAME stays pinned to the imported ALB target.
 
 HCP workspaces stay VCS-driven with auto-apply on after cutover. Speculative
 plans on every PR are the infra gate. Do not point `TFC_AWS_*` at
diff --git a/terraform/live/staging/main.tf b/terraform/live/staging/main.tf
index 0368da2..cd64267 100644
--- a/terraform/live/staging/main.tf
+++ b/terraform/live/staging/main.tf
@@ -26,8 +26,8 @@ module "environment" {
   aws_account_id                         = local.aws_account_id
   aws_region                             = local.aws_region
   environment                            = "staging"
-  adoption_complete                      = false
-  manage_eb_settings                     = false
+  adoption_complete                      = true
+  manage_eb_settings                     = true
   eb_application_name                    = local.eb_application_name
   eb_environment_name                    = local.eb_environment_name
   eb_environment_id                      = local.eb_environment_id

From 46eed22707aad9321eacb4002d6b8bcc4bb0ed05 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 18 Sep 2026 16:33:24 -0300
Subject: [PATCH 074/183] fix(work-orders): accept mobile media whose declared
 MIME is foreign (SH-381)

Mobile browsers attach an unreliable Content-Type to a picked file: empty or
application/octet-stream when the OS cannot classify it, and sometimes a
foreign-but-plausible type for a supported container (video/3gpp for an .mp4,
video/x-quicktime for a .mov). The media allowlist already resolved empty and
octet-stream types from the extension, but a concrete foreign type was rejected
outright, so a real .MP4/.MOV picked on a phone passed the client dialog and was
refused by the API.

Any declared type that is not itself on the allowlist now falls back to the
extension. The extension pairing and magic-byte signature still decide, so the
accepted set of files is unchanged; an allowlisted declared type stays
authoritative and must still match its own extension.
---
 .../Helpers/WorkOrderMediaFileRules.cs        | 19 +++++-----
 .../WorkOrderPhase6Tests.cs                   | 35 +++++++++++++++++--
 2 files changed, 42 insertions(+), 12 deletions(-)

diff --git a/SeaHaven.Services/Helpers/WorkOrderMediaFileRules.cs b/SeaHaven.Services/Helpers/WorkOrderMediaFileRules.cs
index e1281d4..aa6439a 100644
--- a/SeaHaven.Services/Helpers/WorkOrderMediaFileRules.cs
+++ b/SeaHaven.Services/Helpers/WorkOrderMediaFileRules.cs
@@ -32,17 +32,18 @@ namespace SeaHaven.Services.Helpers
                     new HashSet<string>(StringComparer.OrdinalIgnoreCase) { ".docx" }
             };
 
-        // A browser fills the multipart part's Content-Type from File.type, which mobile
-        // browsers leave empty (or the client sends octet-stream) when the OS cannot
-        // classify a picked file. Only then is the type resolved from the extension; the
-        // category rule, extension pairing, and magic-byte signature still decide.
-        private static readonly HashSet<string> UndeterminedContentTypes =
-            new(StringComparer.OrdinalIgnoreCase) { string.Empty, "application/octet-stream" };
-
+        // The multipart part's Content-Type comes from the browser's File.type, which is
+        // unreliable on mobile: it is left empty or sent as application/octet-stream when the
+        // OS cannot classify a picked file, and is sometimes a foreign-but-plausible video
+        // type the OS attaches to a supported container (e.g. video/3gpp for an .mp4,
+        // video/x-quicktime for a .mov). An allowlisted declared type stays authoritative and
+        // pairs against its own extension; anything else falls back to the extension. The
+        // extension pairing and magic-byte signature below still decide, so this never widens
+        // the accepted set of files.
         private static string? ResolveContentType(string declaredType, string extension)
         {
-            if (!UndeterminedContentTypes.Contains(declaredType))
-                return AllowedContentTypes.Contains(declaredType) ? declaredType : null;
+            if (AllowedContentTypes.Contains(declaredType))
+                return declaredType;
 
             foreach (var (contentType, extensions) in ExtensionsByContentType)
             {
diff --git a/SeaHavenIndustries.Tests/WorkOrderPhase6Tests.cs b/SeaHavenIndustries.Tests/WorkOrderPhase6Tests.cs
index 468e2b0..cd24883 100644
--- a/SeaHavenIndustries.Tests/WorkOrderPhase6Tests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderPhase6Tests.cs
@@ -2084,11 +2084,40 @@ public class WorkOrderMediaFileRulesTests
     }
 
     [Fact]
-    public void IsAllowed_DeclaredMimeMismatchingExtension_StillRejected()
+    public void IsAllowed_AllowlistedDeclaredMimeMismatchingExtension_StillRejected()
     {
-        // A concrete declared type is authoritative; only an undetermined one falls back to the extension.
+        // An allowlisted declared type stays authoritative and pairs against its own
+        // extension, so declaring video/mp4 for a .mov (or the reverse) is still a spoof.
         Assert.False(WorkOrderMediaFileRules.IsAllowed(FormFile(RealMov, "clip.mov", "video/mp4")));
-        Assert.False(WorkOrderMediaFileRules.IsAllowed(FormFile(RealJpeg, "photo.jpg", "image/heic")));
+        Assert.False(WorkOrderMediaFileRules.IsAllowed(FormFile(RealMp4, "clip.mp4", "video/quicktime")));
+    }
+
+    [Theory]
+    // SH-381: mobile browsers attach a foreign-but-plausible type to a supported container.
+    // The extension plus magic bytes must decide, not the unreliable declared MIME.
+    [InlineData("clip.mp4", "video/3gpp")]
+    [InlineData("VID_0001.MP4", "video/3gpp")]
+    [InlineData("IMG_1587.MOV", "video/x-quicktime")]
+    [InlineData("IMG_1587.mov", "video/mpeg")]
+    [InlineData("photo.jpg", "image/heic")]
+    public void IsAllowed_ForeignDeclaredMime_ResolvesFromExtensionAndSignature(
+        string fileName,
+        string contentType)
+    {
+        Assert.True(WorkOrderMediaFileRules.IsAllowed(
+            FormFile(BytesFor(fileName), fileName, contentType), WorkOrderMediaCategory.Before));
+    }
+
+    [Fact]
+    public void IsAllowed_ForeignDeclaredMime_StillRequiresMatchingSignatureAndExtension()
+    {
+        // Falling back to the extension does not weaken the gate: the bytes must still match
+        // the resolved type, the extension must still be supported, and a resolved document
+        // stays out of photo/video categories.
+        Assert.False(WorkOrderMediaFileRules.IsAllowed(FormFile(RealJpeg, "clip.mp4", "video/3gpp")));
+        Assert.False(WorkOrderMediaFileRules.IsAllowed(FormFile(RealMp4, "clip.exe", "video/3gpp")));
+        Assert.False(WorkOrderMediaFileRules.IsAllowed(
+            FormFile(RealPdf, "report.pdf", "application/x-unknown"), WorkOrderMediaCategory.Before));
     }
 
     private static byte[] BytesFor(string fileName)

From 4fb4159df2463b41f0eeba26c55d4696c52ae1d0 Mon Sep 17 00:00:00 2001
From: Adam Moussa <166072409+amoussa1229@users.noreply.github.com>
Date: Fri, 18 Sep 2026 17:10:13 -0400
Subject: [PATCH 075/183] fix(iam): scope staging githubdeploy uploads to the
 staging release prefix (#158)

---
 terraform/live/README.md                      | 10 ++++++--
 .../live/modules/environment-owned/main.tf    | 24 ++++++++++++++++++-
 terraform/live/staging/main.tf                |  2 +-
 3 files changed, 32 insertions(+), 4 deletions(-)

diff --git a/terraform/live/README.md b/terraform/live/README.md
index 8f3850b..e4af673 100644
--- a/terraform/live/README.md
+++ b/terraform/live/README.md
@@ -15,7 +15,10 @@ shared or Elastic Beanstalk-generated infrastructure.
 The shared `shoc-backend` Elastic Beanstalk application and
 `shoc-sqlserver-shared` RDS instance, VPC, subnets, EB service role, shared
 certificate, shared RDS security group, and EB-generated SG/ALB/ASG/CloudFormation
-resources must never enter an environment state.
+resources must never enter an environment state. Both roots leave
+`instance_security_group_id` null: the AWS provider reports the EB-generated
+`awseb-*-AWSEBSecurityGroup` as an empty `SecurityGroups` setting, so pinning it
+produces a permanent update diff.
 
 Secret values are not Terraform resources, variables, outputs, or managed EB
 settings. Terraform manages the app-config secret shell and maps approved JSON
@@ -132,7 +135,10 @@ exact bundle it uploads; bundle bytes never enter Terraform plans or state.
 GitHub Actions owns application versions. It compiles the bundle, uploads it,
 creates the Elastic Beanstalk application version, and calls
 `UpdateEnvironment`. Terraform ignores `version_label` so those deploys are not
-drift. If health, smoke, or the webhook probe fails after that update, the job
+drift. The non-legacy deploy policy writes bundles only under
+`shoc-backend/releases/<environment>/*`; the Elastic Beanstalk staging
+prefixes (`resources/_runtime/_embedded_extensions/shoc-backend/*` and
+`resources/environments/<env-id>/*`) keep the full object and ACL action set. If health, smoke, or the webhook probe fails after that update, the job
 restores the previous Elastic Beanstalk version label. Database migrations
 already applied by the failed bundle are not reverted. Deploy parameters are read from `/shoc-backend/<env>/deploy/*` SSM
 parameters this module writes.
diff --git a/terraform/live/modules/environment-owned/main.tf b/terraform/live/modules/environment-owned/main.tf
index 8bf364b..713f7fa 100644
--- a/terraform/live/modules/environment-owned/main.tf
+++ b/terraform/live/modules/environment-owned/main.tf
@@ -289,9 +289,32 @@ data "aws_iam_policy_document" "deploy" {
     }
   }
 
+  # deploy.yaml uploads each bundle to
+  # <app>/releases/<environment>/<sha>/<run>/site.zip and Elastic Beanstalk
+  # reads it back from there. The deploy role never writes another
+  # environment's release prefix.
   dynamic "statement" {
     for_each = local.use_legacy_s3_policy ? [] : [1]
     content {
+      sid    = "UploadReleaseBundle"
+      effect = "Allow"
+      actions = [
+        "s3:PutObject",
+        "s3:GetObject",
+      ]
+      resources = [
+        "arn:aws:s3:::${local.eb_bucket_name}/${var.eb_application_name}/releases/${var.environment}/*",
+      ]
+    }
+  }
+
+  # Elastic Beanstalk stages the processed version, embedded extensions,
+  # and manifests under environment-scoped prefixes and requires object ACLs
+  # on this BucketOwnerPreferred bucket.
+  dynamic "statement" {
+    for_each = local.use_legacy_s3_policy ? [] : [1]
+    content {
+      sid    = "ManageEnvironmentArtifacts"
       effect = "Allow"
       actions = [
         "s3:PutObject",
@@ -304,7 +327,6 @@ data "aws_iam_policy_document" "deploy" {
         "s3:DeleteObject",
       ]
       resources = [
-        "arn:aws:s3:::${local.eb_bucket_name}/${var.eb_application_name}/*",
         "arn:aws:s3:::${local.eb_bucket_name}/resources/_runtime/_embedded_extensions/${var.eb_application_name}/*",
         "arn:aws:s3:::${local.eb_bucket_name}/resources/environments/${var.eb_environment_id}/*",
       ]
diff --git a/terraform/live/staging/main.tf b/terraform/live/staging/main.tf
index cd64267..1964ad5 100644
--- a/terraform/live/staging/main.tf
+++ b/terraform/live/staging/main.tf
@@ -35,7 +35,7 @@ module "environment" {
   vpc_id                                 = "vpc-0d16336143f3da25e"
   instance_subnet_ids                    = ["subnet-02946ccd6735742e9", "subnet-0bedaa6e0c750be4f", "subnet-09eaf2bfa468d206f"]
   load_balancer_subnet_ids               = ["subnet-09eaf2bfa468d206f", "subnet-02946ccd6735742e9", "subnet-0bedaa6e0c750be4f"]
-  instance_security_group_id             = "sg-02ea36a6719217fa2"
+  instance_security_group_id             = null
   eb_service_role_name                   = "shoc-eb-service-role"
   shared_certificate_arn                 = "arn:aws:acm:us-east-1:396287094661:certificate/2b78e74f-7b65-4b82-a413-7a498b102f00"
   runtime_role_name                      = "shoc-backend-staging"

From 582af8fb2ceda51cd16eed4e220202f4d07b1e2f Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 18 Sep 2026 18:56:29 -0300
Subject: [PATCH 076/183] fix(workorders): compare manual POC against the
 followed contact, not any site contact
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The manual POC "follow the site" clear-rule compared the edit against every
live Site contact. A work order only ever displays one of them, so editing to
a different live contact (Site has Alice primary and Bob; WO shows Alice; edit
to Bob) matched, cleared the override, and left the row showing Alice with no
audit row written — the SH-379 symptom on a different input. A work order with
a linked WorkOrderContacts POC hit the same bug when the dispatcher typed the
Site's primary: the override cleared and the linked contact showed instead.

Compare the edit against the single contact the work order actually follows —
the linked WorkOrderContacts POC, or else the Site primary (ResolvePrimary) —
matching the board projection's override -> linked -> site precedence, and
store the override whenever the edit differs from it. The create path in
WorkOrderBoardCreateService had the same any-contact rule and gets the same
fix; a supplied PocContactId that is not a live Site contact leaves no follow
target, so the typed POC is stored.

Replaces MatchesAnySiteContact with Matches(name, phone, contact); comment and
PR-body wording updated to state the followed-contact rule. Adds tests for the
second-site-contact edit, the linked-contact-differs edit, and the
second-site-contact create case.
---
 .../Helpers/WorkOrderPocSiteContact.cs        |  27 ++--
 .../WorkOrderBoardCreateService.cs            |  18 ++-
 .../Implementation/WorkOrderPocService.cs     |  17 ++-
 .../WorkOrderPocServiceTests.cs               | 123 ++++++++++++++++++
 4 files changed, 161 insertions(+), 24 deletions(-)

diff --git a/SeaHaven.Services/Helpers/WorkOrderPocSiteContact.cs b/SeaHaven.Services/Helpers/WorkOrderPocSiteContact.cs
index 6fafb0d..207a46b 100644
--- a/SeaHaven.Services/Helpers/WorkOrderPocSiteContact.cs
+++ b/SeaHaven.Services/Helpers/WorkOrderPocSiteContact.cs
@@ -6,7 +6,7 @@ namespace SeaHaven.Services.Helpers
     /// SH-379 / SH-190: single resolution for "the Site's live contact" used by the
     /// manual POC override. The same rules back the board projection fallback, the
     /// completion snapshot fallback, the create-time baseline, and the
-    /// "changing away from the Site's live contact" lock comparison.
+    /// "changing away from the contact the work order follows" lock comparison.
     /// </summary>
     public static class WorkOrderPocSiteContact
     {
@@ -28,24 +28,21 @@ namespace SeaHaven.Services.Helpers
                 : Normalize(((contact.FirstName ?? "") + " " + (contact.LastName ?? "")).Trim());
 
         /// <summary>
-        /// SH-190: a manual POC equal to one of the Site's live contacts (trimmed
-        /// name + phone) is not a change away from the Site and must not lock.
+        /// SH-190: true when a manual POC (trimmed name + phone) equals the single
+        /// contact the work order currently follows — the linked WorkOrderContacts
+        /// POC, or else the Site primary. Such an edit is not a change away from
+        /// that contact, so it must not lock or store an override. Comparing against
+        /// only the followed contact (rather than any live Site contact) means an
+        /// edit to a different live contact is still stored, since the work order
+        /// only ever displays the one it follows.
         /// </summary>
-        public static bool MatchesAnySiteContact(
-            string? name,
-            string? phone,
-            IEnumerable<Contacts>? contacts)
+        public static bool Matches(string? name, string? phone, Contacts? contact)
         {
-            if (contacts == null)
+            if (contact == null)
                 return false;
 
-            var normalizedName = Normalize(name);
-            var normalizedPhone = Normalize(phone);
-
-            return contacts
-                .Where(c => c.IsDeleted != true)
-                .Any(c => string.Equals(Normalize(((c.FirstName ?? "") + " " + (c.LastName ?? "")).Trim()), normalizedName, StringComparison.Ordinal)
-                    && string.Equals(Normalize(c.PhoneNumber), normalizedPhone, StringComparison.Ordinal));
+            return string.Equals(DisplayName(contact), Normalize(name), StringComparison.Ordinal)
+                && string.Equals(Normalize(contact.PhoneNumber), Normalize(phone), StringComparison.Ordinal);
         }
 
         private static string? Normalize(string? value)
diff --git a/SeaHaven.Services/Implementation/WorkOrderBoardCreateService.cs b/SeaHaven.Services/Implementation/WorkOrderBoardCreateService.cs
index a7fa4bc..dd2d06f 100644
--- a/SeaHaven.Services/Implementation/WorkOrderBoardCreateService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderBoardCreateService.cs
@@ -67,11 +67,21 @@ namespace SeaHaven.Services.Implementation
             var pocName = TrimOrNull(request.PocName);
             var pocPhone = TrimOrNull(request.PocPhone);
             var pocNotes = TrimOrNull(request.PocNotes);
-            // SH-190 AC3: a create-time POC equal to one of the Site's live contacts
-            // is not an override. Store nothing so the work order keeps following
-            // the Site's live contact until a dispatcher edits away from it.
+            // SH-190 AC3: a create-time POC equal to the single contact the work
+            // order will follow is not an override. Store nothing so the work order
+            // keeps following that contact until a dispatcher edits away from it.
+            // The followed contact is the linked POC (PocContactId) when one is
+            // supplied, otherwise the Site primary. Comparing against the followed
+            // contact rather than any live Site contact means a create-time POC that
+            // matches a *different* Site contact is stored, since the board only
+            // shows the one the work order follows. A supplied PocContactId that is
+            // not among the Site's live contacts leaves no follow target, so the
+            // typed POC is stored.
             var siteContacts = await _pocData.GetSiteContactsAsync(request.LocationId, cancellationToken);
-            if (WorkOrderPocSiteContact.MatchesAnySiteContact(pocName, pocPhone, siteContacts))
+            var followContact = request.PocContactId.HasValue
+                ? siteContacts.FirstOrDefault(c => c.Id == request.PocContactId.Value)
+                : WorkOrderPocSiteContact.ResolvePrimary(siteContacts);
+            if (WorkOrderPocSiteContact.Matches(pocName, pocPhone, followContact))
             {
                 pocName = null;
                 pocPhone = null;
diff --git a/SeaHaven.Services/Implementation/WorkOrderPocService.cs b/SeaHaven.Services/Implementation/WorkOrderPocService.cs
index ba47748..866dddc 100644
--- a/SeaHaven.Services/Implementation/WorkOrderPocService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderPocService.cs
@@ -13,7 +13,8 @@ namespace SeaHaven.Services.Implementation
     /// value is stored in the WO-level PocName/PocPhone/PocNotes fields, staged as
     /// FieldChanged audit entries (which also write field locks so later syncs never
     /// overwrite a manual POC, SH-190 AC2), and captured by the completion freeze.
-    /// An edit equal to one of the Site's live contacts stores no override, so a
+    /// An edit equal to the contact the work order currently follows (its linked
+    /// WorkOrderContacts POC, or else the Site primary) stores no override, so a
     /// never-overridden work order keeps following the Site (SH-190 AC3).
     /// </summary>
     public class WorkOrderPocService : IWorkOrderPocService
@@ -75,13 +76,19 @@ namespace SeaHaven.Services.Implementation
                 var newPhone = TrimOrNull(request.PocPhone);
                 var newNotes = TrimOrNull(request.PocNotes);
 
-                // SH-190: changing away from the Site's live contact locks the POC.
-                // An edit that equals one of the Site's live contacts (and blanking
-                // both fields) stores no override, so the work order follows the Site.
+                // SH-190: changing away from the contact the work order follows
+                // locks the POC. An edit that equals that single contact — the
+                // linked WorkOrderContacts POC, or else the Site primary — (and
+                // blanking both fields) stores no override, so the work order keeps
+                // following it. Comparing against the followed contact rather than
+                // any live Site contact means editing to a *different* Site contact
+                // is stored as an override, since the board only ever shows the one
+                // the work order follows.
+                var followContact = linkedContact ?? sitePrimary;
                 var overrideName = newName;
                 var overridePhone = newPhone;
                 if ((overrideName != null || overridePhone != null)
-                    && WorkOrderPocSiteContact.MatchesAnySiteContact(overrideName, overridePhone, workOrder.Locations?.Contacts))
+                    && WorkOrderPocSiteContact.Matches(overrideName, overridePhone, followContact))
                 {
                     overrideName = null;
                     overridePhone = null;
diff --git a/SeaHavenIndustries.Tests/WorkOrderPocServiceTests.cs b/SeaHavenIndustries.Tests/WorkOrderPocServiceTests.cs
index 8ac314f..ad1ffa2 100644
--- a/SeaHavenIndustries.Tests/WorkOrderPocServiceTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderPocServiceTests.cs
@@ -402,6 +402,129 @@ public class WorkOrderPocServiceTests
         Assert.True(row.PocCustomized);
     }
 
+    [Fact]
+    public async Task EditToSecondSiteContactStoresOverride()
+    {
+        await using var context = CreateContext();
+        await SeedScopeAsync(context);
+        var workOrder = NewWorkOrder(context);
+        await SeedSiteContactAsync(context, firstName: "Alice", lastName: "Site", phone: "312-555-0100", order: 0);
+        await SeedSiteContactAsync(context, firstName: "Bob", lastName: "Backup", phone: "312-555-0200", order: 1);
+        await context.SaveChangesAsync();
+
+        // The WO follows the Site primary (Alice). Editing to the second live Site
+        // contact (Bob) is a change away from what the board shows and must be
+        // stored and locked, not silently cleared back to Alice.
+        var service = CreatePocService(context);
+        var row = await service.UpdatePocAsync(
+            workOrder.Id,
+            Poc("Bob Backup", "312-555-0200", null, workOrder),
+            WorkOrderAccountTestHelpers.AccountUser(),
+            "actor-1");
+
+        var persisted = await context.workOrders.AsNoTracking().SingleAsync(w => w.Id == workOrder.Id);
+        Assert.Equal("Bob Backup", persisted.PocName);
+        Assert.Equal("312-555-0200", persisted.PocPhone);
+        Assert.Equal("Bob Backup", row.PocName);
+        Assert.Equal("312-555-0200", row.PocPhone);
+        Assert.True(row.PocCustomized);
+
+        var auditName = await context.WorkOrderAuditLogs.SingleAsync(a =>
+            a.WorkOrderId == workOrder.Id && a.FieldName == "PocName");
+        Assert.Equal("Alice Site", auditName.OldValue);
+        Assert.Equal("Bob Backup", auditName.NewValue);
+        Assert.True(await context.WorkOrderFieldLocks.AnyAsync(l =>
+            l.WorkOrderId == workOrder.Id && l.FieldName == "PocName"));
+        Assert.True(await context.WorkOrderFieldLocks.AnyAsync(l =>
+            l.WorkOrderId == workOrder.Id && l.FieldName == "PocPhone"));
+    }
+
+    [Fact]
+    public async Task EditToSitePrimaryWhenLinkedContactDiffersStoresOverride()
+    {
+        await using var context = CreateContext();
+        await SeedScopeAsync(context);
+        var workOrder = NewWorkOrder(context);
+        await SeedSiteContactAsync(context, firstName: "Alice", lastName: "Site", phone: "312-555-0100", order: 0);
+        var linked = new Contacts
+        {
+            FirstName = "Carol",
+            LastName = "Linked",
+            PhoneNumber = "312-555-0300"
+        };
+        context.Contacts.Add(linked);
+        await context.SaveChangesAsync();
+        context.WorkOrderContacts.Add(new WorkOrderContacts
+        {
+            WorkorderId = workOrder.Id,
+            ContactId = linked.Id
+        });
+        await context.SaveChangesAsync();
+
+        // The WO follows its linked contact (Carol). Typing the Site's primary
+        // (Alice) is a change away from what the board shows and must be stored,
+        // not cleared back to Carol.
+        var service = CreatePocService(context);
+        var row = await service.UpdatePocAsync(
+            workOrder.Id,
+            Poc("Alice Site", "312-555-0100", null, workOrder),
+            WorkOrderAccountTestHelpers.AccountUser(),
+            "actor-1");
+
+        var persisted = await context.workOrders.AsNoTracking().SingleAsync(w => w.Id == workOrder.Id);
+        Assert.Equal("Alice Site", persisted.PocName);
+        Assert.Equal("312-555-0100", persisted.PocPhone);
+        Assert.Equal("Alice Site", row.PocName);
+        Assert.Equal("312-555-0100", row.PocPhone);
+        Assert.True(row.PocCustomized);
+
+        var auditName = await context.WorkOrderAuditLogs.SingleAsync(a =>
+            a.WorkOrderId == workOrder.Id && a.FieldName == "PocName");
+        Assert.Equal("Carol Linked", auditName.OldValue);
+        Assert.Equal("Alice Site", auditName.NewValue);
+    }
+
+    [Fact]
+    public async Task BoardCreateWithPocEqualToSecondSiteContactIsStored()
+    {
+        await using var context = CreateContext();
+        WorkOrderAccountTestHelpers.SeedBoardCreateScope(context);
+        context.Contacts.Add(new Contacts
+        {
+            FirstName = "Alice",
+            LastName = "Site",
+            PhoneNumber = "312-555-0100",
+            LocationId = 1,
+            SiteContactOrder = 0
+        });
+        context.Contacts.Add(new Contacts
+        {
+            FirstName = "Bob",
+            LastName = "Backup",
+            PhoneNumber = "312-555-0200",
+            LocationId = 1,
+            SiteContactOrder = 1
+        });
+        await context.SaveChangesAsync();
+
+        // Create-time POC equal to the second Site contact (Bob) is not the contact
+        // the WO would follow (the primary, Alice), so it must be stored.
+        var service = CreateCreateService(context);
+        var row = await service.CreateAsync(new WorkOrderBoardCreateRequestDto
+        {
+            WorkOrderType = WorkOrderType.PM,
+            SiteCode = "BK5",
+            LocationId = 1,
+            PocName = "Bob Backup",
+            PocPhone = "312-555-0200"
+        }, WorkOrderAccountTestHelpers.AccountUser(), "actor-1");
+
+        var persisted = await context.workOrders.AsNoTracking().SingleAsync(w => w.Id == row.Id);
+        Assert.Equal("Bob Backup", persisted.PocName);
+        Assert.Equal("312-555-0200", persisted.PocPhone);
+        Assert.True(row.PocCustomized);
+    }
+
     private static ApplicationDbContext CreateContext()
     {
         var options = new DbContextOptionsBuilder<ApplicationDbContext>()

From 1888b66940d03d82ec7326f37bf57ebb9196107f Mon Sep 17 00:00:00 2001
From: Adam Moussa <166072409+amoussa1229@users.noreply.github.com>
Date: Fri, 18 Sep 2026 18:16:10 -0400
Subject: [PATCH 077/183] ci: run required checks on merge_group for the merge
 queue (#159)

Build and test, architecture, and dependency-review are the required checks
on main. A merge queue only counts checks that ran on the merge_group event,
so each workflow now triggers on it. The architecture gate reads the merge
group's own base and head because github.event.before is empty there. The
dependency-review action cannot diff a merge group, so that event reports the
same check name from a pass-through job; the real review already gated the
pull request before it could be queued.
---
 .github/workflows/architecture-quality.yml |  8 ++++++--
 .github/workflows/ci.yml                   |  3 +++
 .github/workflows/dependency-review.yml    | 13 +++++++++++++
 3 files changed, 22 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/architecture-quality.yml b/.github/workflows/architecture-quality.yml
index 4df5842..709e88e 100644
--- a/.github/workflows/architecture-quality.yml
+++ b/.github/workflows/architecture-quality.yml
@@ -2,6 +2,8 @@ name: Architecture and changed-file quality
 
 on:
   pull_request:
+  # Required by the merge queue; see ci.yml.
+  merge_group:
   push:
     branches: [main]
 
@@ -26,6 +28,8 @@ jobs:
       - name: Repository quality gate
         shell: bash
         env:
-          BASE_REF: ${{ github.event.pull_request.base.sha || github.event.before }}
-          HEAD_REF: ${{ github.event.pull_request.head.sha || github.sha }}
+          # A merge group carries its own base and head; github.event.before is
+          # empty on that event.
+          BASE_REF: ${{ github.event.pull_request.base.sha || github.event.merge_group.base_sha || github.event.before }}
+          HEAD_REF: ${{ github.event.pull_request.head.sha || github.event.merge_group.head_sha || github.sha }}
         run: bash scripts/governance-check.sh
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6e50e2a..075965d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -3,6 +3,9 @@ name: Backend CI
 on:
   pull_request:
     branches: [main, dev, staging]
+  # The merge queue builds main plus the queued pull requests on a temporary
+  # branch and only counts checks that ran on the merge_group event.
+  merge_group:
   push:
     branches: [main]
 
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index 8639143..9b9e6fd 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -1,8 +1,21 @@
 name: Dependency Review
 on:
   pull_request:
+  merge_group:
 permissions:
   contents: read
 jobs:
   review:
+    if: github.event_name == 'pull_request'
     uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@4a6cbfd362140a68810f0f46d338026863b8e827 # v1.0.10
+
+  # The dependency-review action only diffs a pull request, and the org callable
+  # does not take explicit base and head refs. Every pull request in a merge
+  # group already passed the real review above before it could be queued, so the
+  # merge group reports the same required check name and passes.
+  review-merge-group:
+    if: github.event_name == 'merge_group'
+    name: review / dependency-review
+    runs-on: ubuntu-latest
+    steps:
+      - run: echo "Dependency review ran on the pull request before it entered the merge queue."

From b270543d0d7c31414e13804597ee7fd1e2e11272 Mon Sep 17 00:00:00 2001
From: Adam Moussa <adam@seahavenind.com>
Date: Fri, 18 Sep 2026 18:48:12 -0400
Subject: [PATCH 078/183] chore(renovate): widen the schedule, track the EF
 tool pin, hold EF majors

The org window (before 6am on Monday) has produced no PRs in this repository
since the overlay landed, so the overlay now opens every weekday morning. A
regex manager tracks EF_VERSION in the Elastic Beanstalk packaging script,
which installs dotnet-ef at deploy time and would otherwise fall behind the
tool manifest and EF Core packages; it joins the nuget minor and patch group.
ASP.NET Core, EF Core and dotnet-ef majors are disabled while the target is
net8.0 so the dashboard approval list only shows updates that can be taken.
---
 .github/renovate.json | 34 +++++++++++++++++++++++++++++++---
 1 file changed, 31 insertions(+), 3 deletions(-)

diff --git a/.github/renovate.json b/.github/renovate.json
index 230da6d..70bff15 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -1,8 +1,22 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "enabledManagers": ["nuget", "github-actions", "terraform"],
+  "enabledManagers": ["nuget", "github-actions", "terraform", "custom.regex"],
+  "schedule": ["before 6am every weekday"],
   "minimumReleaseAge": "3 days",
   "internalChecksFilter": "strict",
+  "customManagers": [
+    {
+      "customType": "regex",
+      "description": [
+        "EF_VERSION in the Elastic Beanstalk packaging script installs dotnet-ef at deploy time and must move with the tool manifest and EF Core packages"
+      ],
+      "managerFilePatterns": ["/^scripts/package-elastic-beanstalk\\.sh$/"],
+      "matchStrings": ["EF_VERSION=\"(?<currentValue>\\d+\\.\\d+\\.\\d+)\""],
+      "datasourceTemplate": "nuget",
+      "depNameTemplate": "dotnet-ef",
+      "versioningTemplate": "nuget"
+    }
+  ],
   "packageRules": [
     {
       "description": [
@@ -12,8 +26,10 @@
       "dependencyDashboardApproval": true
     },
     {
-      "description": ["Group non-major nuget updates"],
-      "matchManagers": ["nuget"],
+      "description": [
+        "Group non-major nuget updates, including the dotnet-ef pin in the packaging script"
+      ],
+      "matchManagers": ["nuget", "custom.regex"],
       "matchUpdateTypes": ["minor", "patch"],
       "groupName": "nuget minor and patch"
     },
@@ -35,6 +51,18 @@
       "matchUpdateTypes": ["major"],
       "groupName": "aspnetcore and ef core"
     },
+    {
+      "description": [
+        "net8.0 target: hold ASP.NET Core, EF Core, and dotnet-ef at 8.x until the TargetFramework moves; the group above takes over then"
+      ],
+      "matchPackageNames": [
+        "Microsoft.AspNetCore{/,}**",
+        "Microsoft.EntityFrameworkCore{/,}**",
+        "dotnet-ef"
+      ],
+      "matchUpdateTypes": ["major"],
+      "enabled": false
+    },
     {
       "description": ["Keep AWS SDK majors together"],
       "matchPackageNames": ["/^AWSSDK\\./"],

From b7b22a8893cbd82e28a7a539a2df91f53fa00e69 Mon Sep 17 00:00:00 2001
From: Adam Moussa <adam@seahavenind.com>
Date: Fri, 18 Sep 2026 19:05:30 -0400
Subject: [PATCH 079/183] chore(repo): add PR template and README, retire stale
 root files

The org PR template pre-filled Summary / Validation / Tests / Notes here while
REVIEW_AND_PR_FRAMEWORK.md section 8 prescribes Summary / Changes and value /
Ticket. A repo template now overrides the org one, and the framework notes the
divergence from the org pr-policy workflow, which is not wired in.

README.md orients a reader: environments, architecture in one line, project
map, local commands, the governance gate, deployment, and a documentation map.

Cleanup: TODO.md is removed because Jira owns work status and its items are
stale or done. BACKEND_ARCHITECTURE.md is removed as superseded; the two
references now point at git history. .env.example loses its BOM and mojibake
dashes. .gitattributes keeps its one active rule.
---
 .env.example                     |   4 +-
 .gitattributes                   |  63 +----------------
 .github/PULL_REQUEST_TEMPLATE.md |  22 ++++++
 AGENTS.md                        |   4 +-
 ARCHITECTURE_AND_CODE_QUALITY.md |   5 +-
 BACKEND_ARCHITECTURE.md          | 106 ----------------------------
 README.md                        | 115 +++++++++++++++++++++++++++++++
 REVIEW_AND_PR_FRAMEWORK.md       |   5 ++
 TODO.md                          |  52 --------------
 9 files changed, 148 insertions(+), 228 deletions(-)
 create mode 100644 .github/PULL_REQUEST_TEMPLATE.md
 delete mode 100644 BACKEND_ARCHITECTURE.md
 create mode 100644 README.md
 delete mode 100644 TODO.md

diff --git a/.env.example b/.env.example
index 885a0c6..9743d07 100644
--- a/.env.example
+++ b/.env.example
@@ -1,11 +1,11 @@
-# Sea Haven Industries ÔÇö shoc-backend required configuration
+# Sea Haven Industries — shoc-backend required configuration
 #
 # This file documents the secrets that used to be hardcoded in appsettings*.json
 # and source files. Copy the values into one of the supported configuration sources;
 # do NOT commit real values.
 #
 # .NET resolves configuration in this order (later wins):
-#   1. appsettings.json / appsettings.{Environment}.json  (committed ÔÇö placeholders only)
+#   1. appsettings.json / appsettings.{Environment}.json  (committed — placeholders only)
 #   2. User Secrets (local dev):  dotnet user-secrets set "Key:Sub" "value"
 #   3. Environment variables       (use "__" as the section separator)
 #
diff --git a/.gitattributes b/.gitattributes
index 1ff0c42..52cd8b4 100644
--- a/.gitattributes
+++ b/.gitattributes
@@ -1,63 +1,2 @@
-###############################################################################
-# Set default behavior to automatically normalize line endings.
-###############################################################################
+# Normalize line endings on checkout and checkin.
 * text=auto
-
-###############################################################################
-# Set default behavior for command prompt diff.
-#
-# This is need for earlier builds of msysgit that does not have it on by
-# default for csharp files.
-# Note: This is only used by command line
-###############################################################################
-#*.cs     diff=csharp
-
-###############################################################################
-# Set the merge driver for project and solution files
-#
-# Merging from the command prompt will add diff markers to the files if there
-# are conflicts (Merging from VS is not affected by the settings below, in VS
-# the diff markers are never inserted). Diff markers may cause the following 
-# file extensions to fail to load in VS. An alternative would be to treat
-# these files as binary and thus will always conflict and require user
-# intervention with every merge. To do so, just uncomment the entries below
-###############################################################################
-#*.sln       merge=binary
-#*.csproj    merge=binary
-#*.vbproj    merge=binary
-#*.vcxproj   merge=binary
-#*.vcproj    merge=binary
-#*.dbproj    merge=binary
-#*.fsproj    merge=binary
-#*.lsproj    merge=binary
-#*.wixproj   merge=binary
-#*.modelproj merge=binary
-#*.sqlproj   merge=binary
-#*.wwaproj   merge=binary
-
-###############################################################################
-# behavior for image files
-#
-# image files are treated as binary by default.
-###############################################################################
-#*.jpg   binary
-#*.png   binary
-#*.gif   binary
-
-###############################################################################
-# diff behavior for common document formats
-# 
-# Convert binary document formats to text before diffing them. This feature
-# is only available from the command line. Turn it on by uncommenting the 
-# entries below.
-###############################################################################
-#*.doc   diff=astextplain
-#*.DOC   diff=astextplain
-#*.docx  diff=astextplain
-#*.DOCX  diff=astextplain
-#*.dot   diff=astextplain
-#*.DOT   diff=astextplain
-#*.pdf   diff=astextplain
-#*.PDF   diff=astextplain
-#*.rtf   diff=astextplain
-#*.RTF   diff=astextplain
diff --git a/.github/PULL_REQUEST_TEMPLATE.md b/.github/PULL_REQUEST_TEMPLATE.md
new file mode 100644
index 0000000..15f9114
--- /dev/null
+++ b/.github/PULL_REQUEST_TEMPLATE.md
@@ -0,0 +1,22 @@
+<!--
+Title: type(scope): description (SH-123)
+  type is one of feat, fix, docs, style, refactor, perf, test, build, ci, chore, revert, release.
+  Product work carries its SH key at the end of the title. Platform or security work carries PLAT or SEC.
+  Docs-only and configuration-only chores may omit the key.
+Branch: feature/, fix/, hotfix/, chore/, docs/, refactor/, release/ plus a kebab-case description. No Jira keys in branch names.
+Scope: one logical change per PR. If the title needs "and", split it.
+Body: verifiable facts about the change. No validation transcripts, no deployment notes, no AI attribution footers.
+The layout below is this repository's contract (REVIEW_AND_PR_FRAMEWORK.md, section 8). Keep the three headings.
+-->
+
+## Summary
+
+<!-- What changed and why, in plain language. Two to four sentences. -->
+
+## Changes and value
+
+<!-- Grouped by area, each with the value it delivers. Bullets, bold lead-in per bullet. -->
+
+## Ticket
+
+<!-- The board key(s) this PR delivers, one per line. "None" when nothing applies. -->
diff --git a/AGENTS.md b/AGENTS.md
index 03e95fe..f5c54f1 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -6,9 +6,7 @@ may add stricter backend rules but may never weaken the workspace baseline.
 
 ## Canonical governance documents (precedence)
 
-1. `ARCHITECTURE_AND_CODE_QUALITY.md` — *what* the rules mean (canonical;
-   supersedes the older `BACKEND_ARCHITECTURE.md`, which is retained only as
-   historical reference).
+1. `ARCHITECTURE_AND_CODE_QUALITY.md` — *what* the rules mean (canonical).
 2. `QUALITY_GATES.md` — *how* rules are enforced (commands + CI mapping).
 3. `REVIEW_AND_PR_FRAMEWORK.md` — *who* reviews, in what order, with what
    evidence.
diff --git a/ARCHITECTURE_AND_CODE_QUALITY.md b/ARCHITECTURE_AND_CODE_QUALITY.md
index 54b35a1..f032028 100644
--- a/ARCHITECTURE_AND_CODE_QUALITY.md
+++ b/ARCHITECTURE_AND_CODE_QUALITY.md
@@ -1,9 +1,8 @@
 # Architecture and Code Quality (canonical)
 
 > **Status: canonical.** This document owns the *meaning* of the backend's
-> architecture and code-quality rules. On any conflict with the older
-> `BACKEND_ARCHITECTURE.md`, **this document governs**; that file is retained
-> only as historical reference pending removal.
+> architecture and code-quality rules. It replaced the earlier
+> `BACKEND_ARCHITECTURE.md`, which now lives only in git history.
 >
 > Companion documents:
 > - `QUALITY_GATES.md` — *how* each rule is enforced (commands + CI mapping).
diff --git a/BACKEND_ARCHITECTURE.md b/BACKEND_ARCHITECTURE.md
deleted file mode 100644
index ca27a73..0000000
--- a/BACKEND_ARCHITECTURE.md
+++ /dev/null
@@ -1,106 +0,0 @@
-# Backend Architecture and Quality Rules
-
-This repository uses a feature-oriented service boundary over Entity Framework Core:
-
-```text
-HTTP controller -> I{Feature}Service -> I{Feature}DataService -> ApplicationDbContext
-```
-
-The interfaces are architectural seams, not a requirement to wrap every class or every
-EF method. Add an interface when it separates HTTP, business, persistence, or external
-I/O responsibilities and enables behavior-focused testing.
-
-## Layer responsibilities
-
-### API controllers
-
-- Parse HTTP input, authorize the caller, invoke a business-service interface, and map
-  the result to the established HTTP contract.
-- Do not inject `ApplicationDbContext`, concrete service implementations, or concrete
-  data-service implementations.
-- Do not contain persistence queries or business workflows.
-- Do not expose exception messages to clients. Map known failures explicitly and let the
-  centralized exception boundary handle unexpected failures.
-
-### Business services
-
-- Own validation, business decisions, orchestration, and transaction intent.
-- Depend on interfaces for persistence and external I/O.
-- Use `IOptions<T>` for typed configuration. Do not inject `IConfiguration`.
-- Keep feature responsibilities cohesive. Split a service when it has independently
-  changing business reasons, not because it crossed an arbitrary line count.
-- Preserve existing API and board-backed behavior unless the accepted requirement
-  explicitly changes it.
-
-### Data services
-
-- Own EF Core query shape, persistence, batching, and transaction implementation.
-- Accept cancellation tokens on new I/O methods and pass them to EF Core.
-- Use `AsNoTracking()` for read-only queries.
-- Project only required columns for list/read models; include full graphs only when the
-  caller needs them.
-- Page unbounded collections at the database.
-- Avoid query-in-loop and save-in-loop patterns. Prefer set-based reads and batched writes
-  while preserving the workflow's failure and transaction semantics.
-- Do not introduce a generic repository over EF Core. Feature data services should expose
-  intent-revealing operations.
-
-## Performance review
-
-For each changed hot path, document and test:
-
-- input size variables;
-- CPU and memory complexity;
-- database round trips;
-- whether filtering, ordering, and paging execute in SQL;
-- whether tracking is necessary;
-- whether repeated work can be hoisted out of loops;
-- the partial-failure and transaction behavior.
-
-Prefer dictionary or hash-set reconstruction when database results must follow caller
-order. A query followed by dictionary reconstruction is normally `O(n)` CPU and memory;
-repeated `First`/`Single` scans over the result are `O(n²)`.
-
-Do not optimize by weakening correctness. In particular, batching all writes into one
-final save can change partial-success behavior, and adding a transaction can change
-locking and retry semantics. Those are business decisions, not mechanical cleanup.
-
-## Configuration
-
-Configuration is bound once during composition in
-`SeaHaven.Services/DependencyInjection/ServicesModule.cs`. Business services receive
-typed options such as `FrontendOptions`, `JwtOptions`, `ApprovalsOptions`, and
-`VendorPortalOptions`.
-
-Defaults must preserve current behavior. Startup validation should be introduced only
-when every deployed environment is known to provide the required value.
-
-## Enforcement
-
-`ArchitectureTests` enforces mechanical dependency rules:
-
-- controllers cannot inject EF contexts or concrete service/data-service classes;
-- business services cannot inject EF contexts or raw `IConfiguration`.
-
-The pull-request quality workflow runs those tests and verifies formatting for changed
-C# files. The normal CI workflow builds the solution and runs the full test suite.
-
-Architecture tests are appropriate for dependency direction. Behavior belongs in tests
-through public interfaces. Do not add tests merely to prove a linter or analyzer itself
-works; test the product behavior the rule protects.
-
-## Review checklist
-
-- Controller depends only on service abstractions.
-- Business logic is in a cohesive feature service.
-- EF operations are behind a feature data-service abstraction.
-- No raw `IConfiguration` in a business service.
-- No unbounded load followed by in-memory filtering.
-- No query/save loop where a set-based operation preserves semantics.
-- Read-only EF queries use no tracking.
-- New async I/O accepts and propagates cancellation where the public contract permits.
-- Errors do not leak internal exception details.
-- Tests cover behavior, authorization, data contracts, ordering, duplicates, missing
-  records, and relevant failure boundaries.
-- Changed behavior has been checked against the authoritative ticket board. Missing board
-  access blocks readiness and merge claims.
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..2215fb6
--- /dev/null
+++ b/README.md
@@ -0,0 +1,115 @@
+# SHOC Backend (`shoc-backend`)
+
+[![CI](https://github.com/Sea-Haven-Industries/shoc-backend/actions/workflows/ci.yml/badge.svg?branch=main)](https://github.com/Sea-Haven-Industries/shoc-backend/actions/workflows/ci.yml)
+[![Deploy](https://github.com/Sea-Haven-Industries/shoc-backend/actions/workflows/deploy.yaml/badge.svg)](https://github.com/Sea-Haven-Industries/shoc-backend/actions/workflows/deploy.yaml)
+![.NET 8](https://img.shields.io/badge/.NET-8.0-512BD4?logo=dotnet&logoColor=white)
+![SQL Server](https://img.shields.io/badge/SQL%20Server-CC2927?logo=microsoftsqlserver&logoColor=white)
+![Terraform](https://img.shields.io/badge/Terraform-844FBA?logo=terraform&logoColor=white)
+
+ASP.NET Core 8 API for Sea Haven facility management (SHOC): work orders, the
+work-order board, dispatches and the vendor portal, uplift approvals,
+notifications, and the dashboard. It is the backend for
+[`shoc-frontend-new`](https://github.com/Sea-Haven-Industries/shoc-frontend-new),
+which calls it directly over HTTPS.
+
+| Environment | API | Elastic Beanstalk environment | Deployed by |
+|---|---|---|---|
+| dev | `https://api.dev.seahaven.com` | `shoc-backend-dev` | every push to `main` |
+| staging | `https://api.staging.seahaven.com` | `shoc-backend-staging` | a `vX.Y.Z-staging` tag cut with `release.yaml` |
+
+Both run in `us-east-1` on the .NET 8 Amazon Linux 2023 platform. Terraform in
+`terraform/live/` owns the environments; GitHub Actions owns the application
+versions. There is no production environment yet.
+
+## Architecture
+
+```text
+Controller -> I{Feature}Service -> I{Feature}DataService -> ApplicationDbContext
+```
+
+Controllers depend on feature service interfaces only. Business services depend
+on feature data-service interfaces, never on `DbContext`. Data services own
+Entity Framework Core and are the atomic commit boundary. Tenant scope is
+derived on the server from claims, and authorization is enforced at service
+entry. The rules and their reasons are in
+[`ARCHITECTURE_AND_CODE_QUALITY.md`](ARCHITECTURE_AND_CODE_QUALITY.md).
+
+| Project | Role |
+|---|---|
+| `Api.SeaHavenIndustries` | The deployed API: controllers, hosted services, infrastructure adapters, `Program.cs` |
+| `SeaHaven.Services` | Business services, DTOs, validation, helpers |
+| `SeaHaven.DataServices` | Feature data services over EF Core |
+| `Data.SeaHavenIndustries` | Entities, `ApplicationDbContext`, Identity, migrations |
+| `SeaHavenIndustries` | Legacy Blazor Server app sharing the data layer; not part of the API deployment |
+| `Api.SeaHavenIndustries.Tests`, `SeaHaven.Services.Tests`, `SeaHavenIndustries.Tests` | xunit test projects |
+
+## Local development
+
+Requires the .NET 8 SDK and a reachable SQL Server. Configuration comes from
+`appsettings*.json` placeholders, then user secrets, then environment
+variables. `.env.example` lists every key, including the connection string, JWT
+secret, SendGrid key and Sentry DSN. Do not commit real values.
+
+```bash
+dotnet restore SeaHavenIndustries.sln
+dotnet build SeaHavenIndustries.sln --configuration Release
+dotnet test SeaHavenIndustries.sln --configuration Release
+dotnet run --project Api.SeaHavenIndustries
+```
+
+The full repository gate that CI runs, including architecture discovery, the
+changed-file maintainability check, Terraform checks and app/Terraform
+isolation:
+
+```bash
+BASE_REF=origin/main bash scripts/governance-check.sh
+```
+
+Migrations live in `Data.SeaHavenIndustries/Migrations` and are applied at
+deploy time from a bundle the packaging script builds with `dotnet-ef`. Adding
+one follows the G6 rules in [`QUALITY_GATES.md`](QUALITY_GATES.md).
+
+## Contributing
+
+- Branch from `main` with a `feature/`, `fix/`, `chore/`, `docs/` or
+  `refactor/` prefix and a kebab-case description.
+- Commit subjects follow Conventional Commits. PR titles end with the Jira
+  key for product work.
+- The PR body uses the three-section layout the template pre-fills: Summary,
+  Changes and value, Ticket. The reasoning is in
+  [`REVIEW_AND_PR_FRAMEWORK.md`](REVIEW_AND_PR_FRAMEWORK.md).
+- `main` requires a code-owner review and the `Build and test`,
+  `architecture` and `review / dependency-review` checks. PRs merge through the
+  merge queue, so a branch does not need to be updated with `main` before it
+  merges.
+- Application code and `terraform/` do not change in the same PR (G13).
+
+## Deployment
+
+`deploy.yaml` packages the API with `scripts/package-elastic-beanstalk.sh`,
+uploads the bundle to the Elastic Beanstalk bucket, updates the environment,
+verifies the exact version is active, and smoke-tests it. The bundle carries a
+self-contained EF Core migrations bundle that Elastic Beanstalk runs on the
+leader instance before the new version starts
+(`.ebextensions/01_migrations.config`). A push to `main` targets dev.
+`release.yaml` cuts a SemVer tag from `main` and calls the same workflow for
+staging. Both are described in the workflow headers and in
+[`terraform/live/README.md`](terraform/live/README.md).
+
+Renovate opens dependency PRs on the schedule in `.github/renovate.json`;
+majors wait for approval on the Dependency Dashboard issue.
+
+## Documentation
+
+- [`AGENTS.md`](AGENTS.md): repo-specific rules for coding agents and the order
+  of precedence between the governance documents.
+- [`ARCHITECTURE_AND_CODE_QUALITY.md`](ARCHITECTURE_AND_CODE_QUALITY.md): what
+  the architecture rules mean.
+- [`QUALITY_GATES.md`](QUALITY_GATES.md): every gate, the command that runs it
+  locally, and where CI runs it.
+- [`REVIEW_AND_PR_FRAMEWORK.md`](REVIEW_AND_PR_FRAMEWORK.md): review order,
+  evidence, and the PR description contract.
+- [`docs/adr/`](docs/adr/): architecture decision records.
+- [`docs/work-orders/`](docs/work-orders/): work-order board phase notes.
+- [`postman/`](postman/): generated Postman collection and dev environment.
+- [`terraform/README.md`](terraform/README.md): infrastructure runbook.
diff --git a/REVIEW_AND_PR_FRAMEWORK.md b/REVIEW_AND_PR_FRAMEWORK.md
index d0ea942..0ef1def 100644
--- a/REVIEW_AND_PR_FRAMEWORK.md
+++ b/REVIEW_AND_PR_FRAMEWORK.md
@@ -130,6 +130,11 @@ Avoid boilerplate: no deployment notes, no validation transcripts, no
 "residual-risk" theatre, no AI signatures. The validation story lives in the
 check run results and the close-out, not in the PR body.
 
+`.github/PULL_REQUEST_TEMPLATE.md` pre-fills this layout and overrides the org
+template, whose Summary / Validation / Tests / Notes headings this repository
+does not use. The org `callable-pr-policy` workflow hard-codes those four
+headings; it is not wired into this repository, and this layout is the reason.
+
 ## 9. Merge readiness
 
 Merge requires: exact-head review done; board-backed regression check pass (or
diff --git a/TODO.md b/TODO.md
deleted file mode 100644
index 68fc21b..0000000
--- a/TODO.md
+++ /dev/null
@@ -1,52 +0,0 @@
-# SHOC — TODO
-
-## Vendor Portal (Next Priority)
-- [ ] Change dispatch email Accept button to "View Work Order" linking to vendor portal
-- [ ] Vendor web portal — public pages authenticated by dispatch token
-- [ ] Vendor can view their dispatches, accept, update status, complete sign-offs, fill checklists
-- [ ] No login required — token-based access from email link
-- [ ] Per-WO template selection in multi-WO dispatch
-
-## Dispatch & Vendor Communication
-- [x] Dispatch detail modal — view/edit status, dates, NTE, description
-- [x] Dispatch number — auto-generated DSP-00001
-- [x] DispatchId on Comments — tie vendor comments to specific dispatches
-- [x] Vendor activity feed per dispatch
-- [x] Internal user → vendor email
-- [x] Cancel dispatch button
-- [x] Checklist items with template support
-- [x] Two-party sign-offs (Customer + Vendor)
-- [x] Dispatcher verification gate
-- [x] Vendor accept via email link
-- [x] Time tracking / wait indicators
-- [x] Multi-WO dispatch
-- [ ] **Front API integration** — replace SendGrid/SES with Front inbox (vendors@seahaven.com)
-- [ ] Add ability for dispatcher to assign a template checklist after initial dispatch
-- [ ] Resend dispatch email button
-
-## Work Order List
-- [ ] Pinned Actions column — CSS grid doesn't support sticky horizontal scroll, revisit
-
-## Pages Not Yet Built
-- [ ] `/profile` — My Profile page (linked from user dropdown)
-- [ ] `/settings` — Account Settings page (linked from user dropdown)
-- [ ] `/change-password` — Change Password page (linked from user dropdown)
-
-## Controllers Not Yet Built
-- [ ] `CalendarController` — backend CRUD for calendar/events (frontend pages exist)
-
-## Dashboard
-- [ ] Priority Analysis table — needs backend endpoint to calculate age buckets by severity
-- [ ] Invoice Analysis table — placeholder data, no backend yet
-
-## Data & Integration
-- [ ] Customer NTE — wire to PO database (placeholder on WO view page)
-- [ ] Vendor PO detailed format — line items, billing address, payment terms, expiration, T&C
-- [ ] PDF generation for Vendor PO — QuestPDF or similar
-- [ ] Address-based distance calculation — upgrade from zip-to-zip to geocoded addresses
-- [ ] Backfill location zip codes from address strings during sync
-
-## Deployment
-- [ ] When SHOC deploys, switch workorder-ingest Lambda from DynamoDB to direct SHOC API calls
-- [ ] Retire DynamoDB sync bridge
-- [ ] GitHub branch protection — requires paid plan for private repos

From 24e4f2b7f787352287486f912d5872825b20a2d7 Mon Sep 17 00:00:00 2001
From: Adam Moussa <adam@seahavenind.com>
Date: Fri, 18 Sep 2026 19:12:21 -0400
Subject: [PATCH 080/183] fix(governance): diff G3 and G13 from the merge base,
 not the base tip

The gate computed changed files with a two-dot diff against the PR base tip,
so everything main gained after the branch point counted as this change. A
branch behind main that touched C# failed G13 whenever main had merged
Terraform in between, which is how #152 failed after #154, #156 and #158
landed. The merge queue no longer requires branches to be current, so the
false positive would have hit every stale PR. Both diffs now start at the
merge base. Push and merge-group runs are unchanged because their base is an
ancestor of the head.
---
 scripts/governance-check.sh | 20 +++++++++++++++-----
 1 file changed, 15 insertions(+), 5 deletions(-)

diff --git a/scripts/governance-check.sh b/scripts/governance-check.sh
index b0a9dfb..effae29 100755
--- a/scripts/governance-check.sh
+++ b/scripts/governance-check.sh
@@ -41,6 +41,16 @@ if ! git rev-parse --verify --quiet "${BASE_REF}^{commit}" >/dev/null; then
   exit 1
 fi
 
+# Diff the change set from the merge base, not from the base tip. A two-dot
+# diff against a moving base reports everything the base gained after the
+# branch point as if this change reverted it, so a branch behind main that
+# touches C# would fail G13 whenever main had merged Terraform in the meantime.
+# The merge queue no longer requires branches to be current, so this matters.
+DIFF_BASE="$(git merge-base "${BASE_REF}" "${HEAD_REF}")" || {
+  bad "G3: no merge base between '${BASE_REF}' and '${HEAD_REF}'."
+  exit 1
+}
+
 log "G1: restore"
 "$DOTNET" restore "$SOLUTION"
 ok "G1: restore"
@@ -52,16 +62,16 @@ log "G2: architecture boundary tests (dependency direction)"
   --nologo
 ok "G2: ArchitectureTests"
 
-log "G3: changed-file formatting (${BASE_REF}..${HEAD_REF})"
+log "G3: changed-file formatting (${BASE_REF}...${HEAD_REF}, merge base ${DIFF_BASE:0:7})"
 changed_cs=()
 while IFS= read -r f; do
   changed_cs+=("$f")
 done < <(
-  git diff --name-only --diff-filter=ACMR "${BASE_REF}" "${HEAD_REF}" -- '*.cs'
+  git diff --name-only --diff-filter=ACMR "${DIFF_BASE}" "${HEAD_REF}" -- '*.cs'
 )
 
 if (( ${#changed_cs[@]} == 0 )); then
-  printf '\033[33mSKIP\033[0m  G3: no changed C# files between %s..%s\n' "${BASE_REF}" "${HEAD_REF}"
+  printf '\033[33mSKIP\033[0m  G3: no changed C# files between %s...%s\n' "${BASE_REF}" "${HEAD_REF}"
 else
   printf '  checking %d changed C# file(s)\n' "${#changed_cs[@]}"
   "$DOTNET" format "$SOLUTION" \
@@ -89,9 +99,9 @@ python3 scripts/test_require_commit_checks.py
 python3 scripts/test_check_app_terraform_isolation.py
 ok "Release promotion scripts"
 
-log "G13: application and Terraform isolation (${BASE_REF}..${HEAD_REF})"
+log "G13: application and Terraform isolation (${BASE_REF}...${HEAD_REF}, merge base ${DIFF_BASE:0:7})"
 python3 scripts/check_app_terraform_isolation.py < <(
-  git diff --name-only --diff-filter=ACMR "${BASE_REF}" "${HEAD_REF}"
+  git diff --name-only --diff-filter=ACMR "${DIFF_BASE}" "${HEAD_REF}"
 )
 ok "G13: application and Terraform isolation"
 

From 38588ac33e2d5aa90497b8f38c109017e858d6c0 Mon Sep 17 00:00:00 2001
From: Adam Moussa <adam@seahavenind.com>
Date: Fri, 18 Sep 2026 19:15:24 -0400
Subject: [PATCH 081/183] chore(ci): run dependency review as one job on pull
 requests and merge groups

The merge_group pass-through added in #159 produced a second, skipped check
run with the same name on every pull request, because GitHub reports a check
for a job whose if: is false. The pinned dependency-review action resolves its
refs from merge_group.base_sha and head_sha itself, so the single real job now
triggers on both events with no conditions. Pull requests and merge groups
each get one check run, and the required check is still satisfied in the
queue.
---
 .github/workflows/dependency-review.yml | 15 +++------------
 1 file changed, 3 insertions(+), 12 deletions(-)

diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index 9b9e6fd..8daba8b 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -1,21 +1,12 @@
 name: Dependency Review
 on:
   pull_request:
+  # The dependency-review action resolves the diff from merge_group.base_sha and
+  # head_sha itself, so the same job satisfies the required check in the merge
+  # queue. One job, no conditions, one check run per event.
   merge_group:
 permissions:
   contents: read
 jobs:
   review:
-    if: github.event_name == 'pull_request'
     uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@4a6cbfd362140a68810f0f46d338026863b8e827 # v1.0.10
-
-  # The dependency-review action only diffs a pull request, and the org callable
-  # does not take explicit base and head refs. Every pull request in a merge
-  # group already passed the real review above before it could be queued, so the
-  # merge group reports the same required check name and passes.
-  review-merge-group:
-    if: github.event_name == 'merge_group'
-    name: review / dependency-review
-    runs-on: ubuntu-latest
-    steps:
-      - run: echo "Dependency review ran on the pull request before it entered the merge queue."

From 0f6b72e68ac983361b58d104efbf7b24c166af63 Mon Sep 17 00:00:00 2001
From: Adam Moussa <166072409+amoussa1229@users.noreply.github.com>
Date: Sat, 19 Sep 2026 20:07:50 +0000
Subject: [PATCH 082/183] fix(terraform): add CI platform hashes to the AWS
 provider lockfile

---
 terraform/live/dev/.terraform.lock.hcl     | 4 ++++
 terraform/live/staging/.terraform.lock.hcl | 4 ++++
 2 files changed, 8 insertions(+)

diff --git a/terraform/live/dev/.terraform.lock.hcl b/terraform/live/dev/.terraform.lock.hcl
index 479237a..7f17123 100644
--- a/terraform/live/dev/.terraform.lock.hcl
+++ b/terraform/live/dev/.terraform.lock.hcl
@@ -5,7 +5,11 @@ provider "registry.terraform.io/hashicorp/aws" {
   version     = "6.62.0"
   constraints = "~> 6.57"
   hashes = [
+    "h1:4qcuRkosNKYxV2y69uJ6zAfTEO1Op04L4KUuWBrUvBo=",
     "h1:OthB9UeoBgmy348EpDjs5GDGk6p6UxAMQD5cXn7u9Ho=",
+    "h1:lTKd2c1EunGxt2XROLgEeSXA2Jk+WiiG9BTcp+L/0xY=",
+    "h1:nWSI/kgPk9aieiY01TEKOGXRX3+L889GSkEq0SMCL6E=",
+    "h1:yOSEz5G8b/n5uhFCZ0gbEsKkAQATtVuhXJEXR3OM5qs=",
     "zh:35a9e4bc6fd622c5a99561b882025f2745f1256bbf1a8da8d6b39319b75ae0b5",
     "zh:405927d470ff16201e40aa0fa2d0ab1de477360a0926d20719cd029179682ecd",
     "zh:4ab7866593a90bcf18f066b0092a209b9f42852acd783b504031ae74cb6f7010",
diff --git a/terraform/live/staging/.terraform.lock.hcl b/terraform/live/staging/.terraform.lock.hcl
index 479237a..7f17123 100644
--- a/terraform/live/staging/.terraform.lock.hcl
+++ b/terraform/live/staging/.terraform.lock.hcl
@@ -5,7 +5,11 @@ provider "registry.terraform.io/hashicorp/aws" {
   version     = "6.62.0"
   constraints = "~> 6.57"
   hashes = [
+    "h1:4qcuRkosNKYxV2y69uJ6zAfTEO1Op04L4KUuWBrUvBo=",
     "h1:OthB9UeoBgmy348EpDjs5GDGk6p6UxAMQD5cXn7u9Ho=",
+    "h1:lTKd2c1EunGxt2XROLgEeSXA2Jk+WiiG9BTcp+L/0xY=",
+    "h1:nWSI/kgPk9aieiY01TEKOGXRX3+L889GSkEq0SMCL6E=",
+    "h1:yOSEz5G8b/n5uhFCZ0gbEsKkAQATtVuhXJEXR3OM5qs=",
     "zh:35a9e4bc6fd622c5a99561b882025f2745f1256bbf1a8da8d6b39319b75ae0b5",
     "zh:405927d470ff16201e40aa0fa2d0ab1de477360a0926d20719cd029179682ecd",
     "zh:4ab7866593a90bcf18f066b0092a209b9f42852acd783b504031ae74cb6f7010",

From 1188a4c1cb755002723a9e03dbb92bfe196dbe6e Mon Sep 17 00:00:00 2001
From: Adam Moussa <adam@seahavenind.com>
Date: Sat, 19 Sep 2026 15:36:40 -0400
Subject: [PATCH 083/183] ci: consolidate required checks behind ci-complete

---
 .github/workflows/architecture-quality.yml | 35 ---------
 .github/workflows/ci-terraform.yaml        | 60 ---------------
 .github/workflows/ci.yml                   | 85 +++++++++++++++++++++-
 .github/workflows/dependency-review.yml    | 12 ---
 .github/workflows/deploy.yaml              |  2 -
 AGENTS.md                                  |  5 +-
 QUALITY_GATES.md                           | 48 ++++++------
 README.md                                  |  7 +-
 scripts/governance-check.sh                | 51 +++++++++----
 scripts/require_commit_checks.py           |  3 +-
 scripts/test_require_commit_checks.py      | 41 +++--------
 11 files changed, 161 insertions(+), 188 deletions(-)
 delete mode 100644 .github/workflows/architecture-quality.yml
 delete mode 100644 .github/workflows/ci-terraform.yaml
 delete mode 100644 .github/workflows/dependency-review.yml

diff --git a/.github/workflows/architecture-quality.yml b/.github/workflows/architecture-quality.yml
deleted file mode 100644
index 709e88e..0000000
--- a/.github/workflows/architecture-quality.yml
+++ /dev/null
@@ -1,35 +0,0 @@
-name: Architecture and changed-file quality
-
-on:
-  pull_request:
-  # Required by the merge queue; see ci.yml.
-  merge_group:
-  push:
-    branches: [main]
-
-permissions:
-  contents: read
-
-jobs:
-  architecture:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v7
-        with:
-          fetch-depth: 0
-
-      - name: Set up .NET
-        uses: actions/setup-dotnet@v6
-        with:
-          dotnet-version: "8.0.x"
-
-      # CI and local run the same complete repository gate.
-      - name: Repository quality gate
-        shell: bash
-        env:
-          # A merge group carries its own base and head; github.event.before is
-          # empty on that event.
-          BASE_REF: ${{ github.event.pull_request.base.sha || github.event.merge_group.base_sha || github.event.before }}
-          HEAD_REF: ${{ github.event.pull_request.head.sha || github.event.merge_group.head_sha || github.sha }}
-        run: bash scripts/governance-check.sh
diff --git a/.github/workflows/ci-terraform.yaml b/.github/workflows/ci-terraform.yaml
deleted file mode 100644
index cc937fb..0000000
--- a/.github/workflows/ci-terraform.yaml
+++ /dev/null
@@ -1,60 +0,0 @@
-name: Terraform CI
-
-# Static checks only. Plans run in HCP Terraform as speculative VCS runs on the
-# PR (shoc-backend-dev and shoc-backend-staging). Applies are HCP auto-apply
-# on merge to main (dev) and on a vX.Y.Z-staging tag (staging).
-
-on:
-  pull_request:
-    branches: [main, dev]
-    paths:
-      - "terraform/**"
-      - "scripts/**"
-      - ".github/workflows/ci-terraform.yaml"
-      - ".github/workflows/deploy.yaml"
-      - ".github/workflows/deploy-tag.yaml"
-      - ".github/workflows/release.yaml"
-  push:
-    branches: [main]
-    paths:
-      - "terraform/**"
-      - "scripts/**"
-      - ".github/workflows/ci-terraform.yaml"
-
-permissions:
-  contents: read
-
-jobs:
-  terraform:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-        with:
-          persist-credentials: false
-
-      - uses: hashicorp/setup-terraform@dfe3c3f87815947d99a8997f908cb6525fc44e9e # v4.0.1
-        with:
-          terraform_version: "1.9.8"
-          terraform_wrapper: false
-
-      - name: Terraform fmt
-        run: terraform fmt -check -recursive terraform
-
-      - name: Validate live/dev
-        run: |
-          terraform -chdir=terraform/live/dev init -backend=false
-          terraform -chdir=terraform/live/dev validate
-
-      - name: Validate live/staging
-        run: |
-          terraform -chdir=terraform/live/staging init -backend=false
-          terraform -chdir=terraform/live/staging validate
-
-      - name: Import plan guard tests
-        run: python3 scripts/test-terraform-import-plan-check.py
-
-      - name: Release promotion script tests
-        run: |
-          python3 scripts/test_next_release_tag.py
-          python3 scripts/test_require_commit_checks.py
-          python3 scripts/test_check_app_terraform_isolation.py
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 075965d..f8d95dc 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -2,7 +2,6 @@ name: Backend CI
 
 on:
   pull_request:
-    branches: [main, dev, staging]
   # The merge queue builds main plus the queued pull requests on a temporary
   # branch and only counts checks that ran on the merge_group event.
   merge_group:
@@ -12,14 +11,15 @@ on:
 permissions:
   contents: read
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
 jobs:
   build-and-test:
     name: Build and test
     runs-on: ubuntu-latest
     timeout-minutes: 20
-    concurrency:
-      group: backend-ci-${{ github.workflow }}-${{ github.ref }}
-      cancel-in-progress: true
     steps:
       - name: Checkout
         uses: actions/checkout@v7
@@ -29,6 +29,14 @@ jobs:
         with:
           dotnet-version: "8.0.x"
 
+      - name: Cache NuGet packages
+        uses: actions/cache@v4
+        with:
+          path: ~/.nuget/packages
+          key: nuget-${{ runner.os }}-${{ hashFiles('**/*.csproj', '**/*.props') }}
+          restore-keys: |
+            nuget-${{ runner.os }}-
+
       - name: Restore
         run: dotnet restore SeaHavenIndustries.sln
 
@@ -37,3 +45,72 @@ jobs:
 
       - name: Test
         run: dotnet test SeaHavenIndustries.sln --no-build --configuration Release
+
+  architecture:
+    name: architecture
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v7
+        with:
+          fetch-depth: 0
+
+      - name: Set up .NET
+        uses: actions/setup-dotnet@v6
+        with:
+          dotnet-version: "8.0.x"
+
+      - name: Cache NuGet packages
+        uses: actions/cache@v4
+        with:
+          path: ~/.nuget/packages
+          key: nuget-${{ runner.os }}-${{ hashFiles('**/*.csproj', '**/*.props') }}
+          restore-keys: |
+            nuget-${{ runner.os }}-
+
+      - name: Set up Terraform
+        uses: hashicorp/setup-terraform@dfe3c3f87815947d99a8997f908cb6525fc44e9e # v4.0.1
+        with:
+          terraform_version: "1.9.8"
+          terraform_wrapper: false
+
+      - name: Repository quality gate
+        shell: bash
+        env:
+          GOVERNANCE_SKIP_BUILD_TEST: "1"
+          # A merge group carries its own base and head; github.event.before is
+          # empty on that event.
+          BASE_REF: ${{ github.event.pull_request.base.sha || github.event.merge_group.base_sha || github.event.before }}
+          HEAD_REF: ${{ github.event.pull_request.head.sha || github.event.merge_group.head_sha || github.sha }}
+        run: bash scripts/governance-check.sh
+
+  review:
+    name: review
+    if: github.event_name != 'push'
+    uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@4a6cbfd362140a68810f0f46d338026863b8e827 # v1.0.10
+
+  ci-complete:
+    name: ci-complete
+    if: always()
+    needs: [build-and-test, architecture, review]
+    runs-on: ubuntu-latest
+    steps:
+      - name: All required jobs passed
+        shell: bash
+        env:
+          BUILD: ${{ needs.build-and-test.result }}
+          ARCH: ${{ needs.architecture.result }}
+          REVIEW: ${{ needs.review.result }}
+        run: |
+          set -euo pipefail
+          if [[ "${BUILD}" != "success" || "${ARCH}" != "success" ]]; then
+            echo "Build and test or architecture did not succeed: build=${BUILD} architecture=${ARCH}"
+            exit 1
+          fi
+          # review is skipped on push to main; it must succeed on pull_request
+          # and merge_group.
+          if [[ "${REVIEW}" != "success" && "${REVIEW}" != "skipped" ]]; then
+            echo "review did not succeed: ${REVIEW}"
+            exit 1
+          fi
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
deleted file mode 100644
index 8daba8b..0000000
--- a/.github/workflows/dependency-review.yml
+++ /dev/null
@@ -1,12 +0,0 @@
-name: Dependency Review
-on:
-  pull_request:
-  # The dependency-review action resolves the diff from merge_group.base_sha and
-  # head_sha itself, so the same job satisfies the required check in the merge
-  # queue. One job, no conditions, one check run per event.
-  merge_group:
-permissions:
-  contents: read
-jobs:
-  review:
-    uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@4a6cbfd362140a68810f0f46d338026863b8e827 # v1.0.10
diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
index 7ff766e..a8ecefc 100644
--- a/.github/workflows/deploy.yaml
+++ b/.github/workflows/deploy.yaml
@@ -31,8 +31,6 @@ on:
       - "terraform/**"
       - "**/*.md"
       - ".github/workflows/ci.yml"
-      - ".github/workflows/ci-terraform.yaml"
-      - ".github/workflows/architecture-quality.yml"
       - ".github/workflows/release.yaml"
       - ".github/workflows/deploy-tag.yaml"
 
diff --git a/AGENTS.md b/AGENTS.md
index f5c54f1..1adc0e8 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -44,8 +44,9 @@ bash scripts/governance-check.sh
 ```
 
 The command restores, verifies architecture and changed-file formatting, builds
-Release, and runs the full test suite. CI (`architecture-quality` workflow)
-calls the same script. See `QUALITY_GATES.md`.
+Release, runs the full test suite, and validates Terraform. CI (`ci.yml`)
+calls the same script from the `architecture` job (skipping G4/G5) and
+aggregates results as `ci-complete`. See `QUALITY_GATES.md`.
 
 ## Hard rules (deviation needs an ADR; no wildcard suppressions)
 
diff --git a/QUALITY_GATES.md b/QUALITY_GATES.md
index c1a83a6..835ef97 100644
--- a/QUALITY_GATES.md
+++ b/QUALITY_GATES.md
@@ -6,32 +6,32 @@
 > rule lives in `ARCHITECTURE_AND_CODE_QUALITY.md`.
 >
 > **CI and local run the same check.** Every gate below is executed by
-> `scripts/governance-check.sh`. The `architecture-quality` workflow calls that
-> script so a green run means the same thing locally and in CI. Do not add a
-> check to CI that is not also runnable locally through the script (and vice
-> versa).
+> `scripts/governance-check.sh` locally. The `architecture` job in `ci.yml`
+> calls that script (skipping G4/G5, which the `Build and test` job owns). Do
+> not add a check to CI that is not also runnable locally through the script
+> (and vice versa), except G4/G5 which the local script still runs.
 
 ## Gate inventory
 
 | # | Gate | Protects (architecture §) | Local command | CI step |
 |---|------|---------------------------|---------------|---------|
-| G1 | Restore | build integrity | `dotnet restore SeaHavenIndustries.sln` | `architecture-quality` → `governance-check.sh` |
+| G1 | Restore | build integrity | `dotnet restore SeaHavenIndustries.sln` | `ci.yml` `architecture` → `governance-check.sh` |
 | G2 | Architecture boundary tests | §1, §3 (dependency direction) | `dotnet test Api.SeaHavenIndustries.Tests ... --filter FullyQualifiedName~ArchitectureTests --no-restore` | same script |
 | G3 | Changed-file formatting | §1 (conventions) | `dotnet format SeaHavenIndustries.sln --no-restore --verify-no-changes --include <changed .cs>` | same script |
-| G4 | Release build | compile correctness | `dotnet build SeaHavenIndustries.sln -c Release --no-restore` | `architecture-quality` and `ci` |
-| G5 | Full test suite | behavior | `dotnet test SeaHavenIndustries.sln -c Release --no-build` | `architecture-quality` and `ci` |
+| G4 | Release build | compile correctness | `dotnet build SeaHavenIndustries.sln -c Release --no-restore` | `ci.yml` `Build and test` (local script still runs it) |
+| G5 | Full test suite | behavior | `dotnet test SeaHavenIndustries.sln -c Release --no-build` | `ci.yml` `Build and test` (local script still runs it) |
 | G6 | Migration gates | §7 | see §"Migration gates" below | on-demand / release |
 | G7 | Cancellation forwarding | §6 | behavior tests on changed I/O paths + analyzer | review-enforced on changed paths |
-| G8 | Error disclosure | §5 | `SanitizedErrorsTests` (part of G5) | `ci` |
+| G8 | Error disclosure | §5 | `SanitizedErrorsTests` (part of G5) | `ci.yml` `Build and test` |
 | G9 | Board-backed regression | review framework | `REVIEW_AND_PR_FRAMEWORK.md` inventory | review-enforced |
-| G10 | Terraform import plan safety | live infrastructure adoption | `python scripts/test-terraform-import-plan-check.py` | `architecture-quality` → `governance-check.sh` |
-| G11 | Terraform static validation | import configuration integrity | commands below | `ci-terraform` on PRs to `main` or `dev` |
-| G13 | App/Terraform isolation | separate delivery lanes | `python3 scripts/check_app_terraform_isolation.py` | `architecture-quality` → `governance-check.sh` |
+| G10 | Terraform import plan safety | live infrastructure adoption | `python scripts/test-terraform-import-plan-check.py` | `ci.yml` `architecture` → `governance-check.sh` |
+| G11 | Terraform static validation | import configuration integrity | commands below | `ci.yml` `architecture` → `governance-check.sh` |
+| G13 | App/Terraform isolation | separate delivery lanes | `python3 scripts/check_app_terraform_isolation.py` | `ci.yml` `architecture` (live classifier: PR + local) |
 
 ## How to run locally
 
 ```bash
-# Complete local repository gate (mirrors the architecture-quality workflow):
+# Complete local repository gate (G1–G5, G10, G11, G13):
 bash scripts/governance-check.sh
 
 # By default it compares against the default branch for changed-file formatting.
@@ -51,8 +51,11 @@ The script:
 6. verifies that the Terraform plan guard rejects create, delete, replacement,
    unmanaged resource types, and updates not allowlisted by exact address (G10).
 7. runs the release-tag, commit-check, and isolation unit tests.
-8. rejects a diff that contains both `terraform/` and deployable application
-   files (G13).
+8. runs Terraform fmt/validate for `live/dev` and `live/staging` (G11).
+9. rejects a diff that contains both `terraform/` and deployable application
+   files (G13). Live G13 skips on `merge_group` and `push`. The architecture
+   job in CI sets `GOVERNANCE_SKIP_BUILD_TEST=1` so steps 4–5 run only locally
+   and in the Build and test job.
 
 G10 permits only exact approved resource address/type pairs for the
 environment-owned boundary: Elastic
@@ -65,9 +68,10 @@ Controlled mode requires one
 also requires `--environment dev` or `--environment staging`; an empty or
 incomplete environment plan fails.
 
-G11 runs `terraform fmt -check -recursive terraform`, `terraform init -backend=false`,
-and `terraform validate` for both `live/dev` and `live/staging` on every PR to
-`main` or `dev`. Org-baseline CloudFormation owns the HCP role substrate, and Terraform
+G11 runs `terraform fmt -check -recursive terraform`, `terraform init -backend=false
+-input=false -lockfile=readonly`, and `terraform validate` for both `live/dev`
+and `live/staging` from `governance-check.sh` on every CI event, including
+merge groups. Org-baseline CloudFormation owns the HCP role substrate, and Terraform
 owns the environment GitHub deploy roles, so no backend CDK or bootstrap root
 remains in the matrix. HCP plan/apply roles stay in org-baseline; this
 repository never manages `hcptf-*` roles.
@@ -129,8 +133,9 @@ non-empty. A future namespace move that makes reflection return zero types will
   Runtime/semantic properties (cancellation actually cancelling, a query
   executing in SQL, a transaction actually committing atomically) are proven by
   behavior tests or provider evidence, never by reflection.
-- A passing script proves G1–G5 ran in sequence. It does not prove the
-  provider-backed or review-owned gates G6–G9.
+- A passing local script proves G1–G5, G10, G11, and G13 ran (G4/G5 are skipped
+  in the CI architecture job). It does not prove the provider-backed or
+  review-owned gates G6–G9.
 
 ## Pass / fail / skip / not-run reporting
 
@@ -149,8 +154,9 @@ or not-run. Never infer a pass from silence.
 ## Adding or changing a gate
 
 - Any new executable check goes into `scripts/governance-check.sh` **and** the
-  `architecture-quality` workflow together (or into the full CI for G4/G5-type
-  checks). One source of truth for local and CI.
+  `architecture` job in `ci.yml` together (or into the Build and test job for
+  G4/G5-type checks). One source of truth for local and CI. The required
+  merge-queue check is `ci-complete`.
 - A new rule documents its meaning in `ARCHITECTURE_AND_CODE_QUALITY.md` and its
   command/mapping here.
 - Explicit, documented exceptions only — no wildcard suppressions (see
diff --git a/README.md b/README.md
index 2215fb6..30598d7 100644
--- a/README.md
+++ b/README.md
@@ -78,10 +78,9 @@ one follows the G6 rules in [`QUALITY_GATES.md`](QUALITY_GATES.md).
 - The PR body uses the three-section layout the template pre-fills: Summary,
   Changes and value, Ticket. The reasoning is in
   [`REVIEW_AND_PR_FRAMEWORK.md`](REVIEW_AND_PR_FRAMEWORK.md).
-- `main` requires a code-owner review and the `Build and test`,
-  `architecture` and `review / dependency-review` checks. PRs merge through the
-  merge queue, so a branch does not need to be updated with `main` before it
-  merges.
+- `main` requires a code-owner review and the `ci-complete` check. PRs merge
+  through the merge queue, so a branch does not need to be updated with `main`
+  before it merges.
 - Application code and `terraform/` do not change in the same PR (G13).
 
 ## Deployment
diff --git a/scripts/governance-check.sh b/scripts/governance-check.sh
index effae29..9744c3e 100755
--- a/scripts/governance-check.sh
+++ b/scripts/governance-check.sh
@@ -2,9 +2,10 @@
 #
 # governance-check.sh — local/CI parity governance gate for the Seahaven backend.
 #
-# Runs G1 restore, G2 ArchitectureTests, G3 changed-file formatting, G4 Release
-# build, and G5 full tests exactly as the `architecture-quality` workflow does.
-# A green run here means the same thing locally and in that CI workflow.
+# Locally this runs G1–G5, G10, G11, promotion-script tests, and live G13.
+# The architecture job in ci.yml sets GOVERNANCE_SKIP_BUILD_TEST=1 so G4/G5
+# run only in the Build and test job. Live G13 runs on pull_request and local
+# invocations; it skips merge_group and push.
 #
 # Usage:
 #   bash scripts/governance-check.sh
@@ -14,6 +15,7 @@ set -euo pipefail
 
 SOLUTION="SeaHavenIndustries.sln"
 ARCH_TEST_PROJECT="Api.SeaHavenIndustries.Tests/Api.SeaHavenIndustries.Tests.csproj"
+LIVE_ROOTS=(terraform/live/dev terraform/live/staging)
 
 log() { printf '\n\033[1m== %s ==\033[0m\n' "$1"; }
 ok()  { printf '\033[32mPASS\033[0m  %s\n' "$1"; }
@@ -81,13 +83,18 @@ else
   ok "G3: changed-file formatting"
 fi
 
-log "G4: Release build"
-"$DOTNET" build "$SOLUTION" -c Release --no-restore --nologo
-ok "G4: Release build"
+if [[ "${GOVERNANCE_SKIP_BUILD_TEST:-}" == "1" ]]; then
+  printf '\033[33mSKIP\033[0m  G4: Release build (CI Build and test job owns it)\n'
+  printf '\033[33mSKIP\033[0m  G5: full test suite (CI Build and test job owns it)\n'
+else
+  log "G4: Release build"
+  "$DOTNET" build "$SOLUTION" -c Release --no-restore --nologo
+  ok "G4: Release build"
 
-log "G5: full test suite"
-"$DOTNET" test "$SOLUTION" -c Release --no-build --nologo
-ok "G5: full test suite"
+  log "G5: full test suite"
+  "$DOTNET" test "$SOLUTION" -c Release --no-build --nologo
+  ok "G5: full test suite"
+fi
 
 log "G10: Terraform import plan safety"
 python scripts/test-terraform-import-plan-check.py
@@ -99,10 +106,26 @@ python3 scripts/test_require_commit_checks.py
 python3 scripts/test_check_app_terraform_isolation.py
 ok "Release promotion scripts"
 
-log "G13: application and Terraform isolation (${BASE_REF}...${HEAD_REF}, merge base ${DIFF_BASE:0:7})"
-python3 scripts/check_app_terraform_isolation.py < <(
-  git diff --name-only --diff-filter=ACMR "${DIFF_BASE}" "${HEAD_REF}"
-)
-ok "G13: application and Terraform isolation"
+log "G11: Terraform formatting and validation"
+if ! command -v terraform >/dev/null 2>&1; then
+  bad "G11: terraform is unavailable; install Terraform or set PATH."
+  exit 1
+fi
+terraform fmt -check -recursive terraform
+for live_root in "${LIVE_ROOTS[@]}"; do
+  terraform -chdir="${live_root}" init -backend=false -input=false -lockfile=readonly -no-color
+  terraform -chdir="${live_root}" validate -no-color
+done
+ok "G11: Terraform formatting and validation"
+
+if [[ -n "${GITHUB_EVENT_NAME:-}" && "${GITHUB_EVENT_NAME}" != "pull_request" ]]; then
+  printf '\033[33mSKIP\033[0m  G13: live isolation is a pull-request property (event: %s)\n' "${GITHUB_EVENT_NAME}"
+else
+  log "G13: application and Terraform isolation (${BASE_REF}...${HEAD_REF}, merge base ${DIFF_BASE:0:7})"
+  python3 scripts/check_app_terraform_isolation.py < <(
+    git diff --name-only --diff-filter=ACMR "${DIFF_BASE}" "${HEAD_REF}"
+  )
+  ok "G13: application and Terraform isolation"
+fi
 
 log "governance-check: all required repository gates passed"
diff --git a/scripts/require_commit_checks.py b/scripts/require_commit_checks.py
index c2d6bdd..5dad928 100644
--- a/scripts/require_commit_checks.py
+++ b/scripts/require_commit_checks.py
@@ -12,8 +12,7 @@ import urllib.parse
 import urllib.request
 
 REQUIRED_CHECK_NAMES = (
-    "Build and test",
-    "architecture",
+    "ci-complete",
 )
 
 
diff --git a/scripts/test_require_commit_checks.py b/scripts/test_require_commit_checks.py
index e3089d2..2722a85 100644
--- a/scripts/test_require_commit_checks.py
+++ b/scripts/test_require_commit_checks.py
@@ -12,26 +12,20 @@ class ClassifyChecksTests(unittest.TestCase):
     def test_success(self) -> None:
         state, _ = classify_checks(
             [
-                {"name": "Build and test", "status": "completed", "conclusion": "success"},
-                {"name": "architecture", "status": "completed", "conclusion": "success"},
+                {"name": "ci-complete", "status": "completed", "conclusion": "success"},
             ]
         )
         self.assertEqual(state, "success")
 
     def test_pending_missing(self) -> None:
-        state, details = classify_checks(
-            [
-                {"name": "Build and test", "status": "completed", "conclusion": "success"},
-            ]
-        )
+        state, details = classify_checks([])
         self.assertEqual(state, "pending")
-        self.assertTrue(any("architecture" in line for line in details))
+        self.assertTrue(any("ci-complete" in line for line in details))
 
     def test_pending_in_progress(self) -> None:
         state, _ = classify_checks(
             [
-                {"name": "Build and test", "status": "in_progress", "conclusion": None},
-                {"name": "architecture", "status": "completed", "conclusion": "success"},
+                {"name": "ci-complete", "status": "in_progress", "conclusion": None},
             ]
         )
         self.assertEqual(state, "pending")
@@ -39,8 +33,7 @@ class ClassifyChecksTests(unittest.TestCase):
     def test_failure(self) -> None:
         state, _ = classify_checks(
             [
-                {"name": "Build and test", "status": "completed", "conclusion": "failure"},
-                {"name": "architecture", "status": "completed", "conclusion": "success"},
+                {"name": "ci-complete", "status": "completed", "conclusion": "failure"},
             ]
         )
         self.assertEqual(state, "failure")
@@ -49,7 +42,7 @@ class ClassifyChecksTests(unittest.TestCase):
         state, _ = classify_checks(
             [
                 {
-                    "name": "Build and test",
+                    "name": "ci-complete",
                     "id": 1,
                     "started_at": "2026-09-16T12:00:00Z",
                     "completed_at": "2026-09-16T12:05:00Z",
@@ -57,21 +50,13 @@ class ClassifyChecksTests(unittest.TestCase):
                     "conclusion": "failure",
                 },
                 {
-                    "name": "Build and test",
+                    "name": "ci-complete",
                     "id": 3,
                     "started_at": "2026-09-16T12:10:00Z",
                     "completed_at": "2026-09-16T12:12:00Z",
                     "status": "completed",
                     "conclusion": "success",
                 },
-                {
-                    "name": "architecture",
-                    "id": 2,
-                    "started_at": "2026-09-16T12:00:00Z",
-                    "completed_at": "2026-09-16T12:04:00Z",
-                    "status": "completed",
-                    "conclusion": "success",
-                },
             ]
         )
         self.assertEqual(state, "success")
@@ -80,7 +65,7 @@ class ClassifyChecksTests(unittest.TestCase):
         state, _ = classify_checks(
             [
                 {
-                    "name": "architecture",
+                    "name": "ci-complete",
                     "id": 9,
                     "started_at": "2026-09-16T13:00:00Z",
                     "completed_at": "2026-09-16T13:02:00Z",
@@ -88,21 +73,13 @@ class ClassifyChecksTests(unittest.TestCase):
                     "conclusion": "failure",
                 },
                 {
-                    "name": "architecture",
+                    "name": "ci-complete",
                     "id": 4,
                     "started_at": "2026-09-16T12:00:00Z",
                     "completed_at": "2026-09-16T12:01:00Z",
                     "status": "completed",
                     "conclusion": "success",
                 },
-                {
-                    "name": "Build and test",
-                    "id": 5,
-                    "started_at": "2026-09-16T12:00:00Z",
-                    "completed_at": "2026-09-16T12:03:00Z",
-                    "status": "completed",
-                    "conclusion": "success",
-                },
             ]
         )
         self.assertEqual(state, "failure")

From a615be28e5af40a0b14908c9675876a5c929a718 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Mon, 21 Sep 2026 14:58:43 -0300
Subject: [PATCH 084/183] fix(workorders): raise media upload limit to 200 MB

---
 .../WorkOrderMediaControllerTests.cs                      | 8 ++++----
 .../Controllers/WorkOrderMediaController.cs               | 4 ++--
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/WorkOrderMediaControllerTests.cs b/Api.SeaHavenIndustries.Tests/WorkOrderMediaControllerTests.cs
index b377b40..cccc694 100644
--- a/Api.SeaHavenIndustries.Tests/WorkOrderMediaControllerTests.cs
+++ b/Api.SeaHavenIndustries.Tests/WorkOrderMediaControllerTests.cs
@@ -31,7 +31,7 @@ public class WorkOrderMediaControllerTests
     }
 
     [Fact]
-    public void AddMedia_HasFiftyMegabyteRequestLimit()
+    public void AddMedia_HasTwoHundredMegabyteRequestLimit()
     {
         var method = typeof(WorkOrderMediaController).GetMethod(nameof(WorkOrderMediaController.AddMedia));
         var attribute = Assert.Single(
@@ -39,14 +39,14 @@ public class WorkOrderMediaControllerTests
             candidate => candidate.AttributeType == typeof(RequestSizeLimitAttribute));
         var bytes = Assert.Single(attribute.ConstructorArguments);
 
-        Assert.Equal(50_000_000L, bytes.Value);
+        Assert.Equal(200_000_000L, bytes.Value);
     }
 
     [Fact]
     public async Task AddMedia_FileOverLimit_ReturnsStableUnprocessableEntity()
     {
         var file = new Mock<IFormFile>();
-        file.SetupGet(candidate => candidate.Length).Returns(50_000_001);
+        file.SetupGet(candidate => candidate.Length).Returns(200_000_001);
         var storage = new Mock<IFileStoragePort>(MockBehavior.Strict);
         var controller = CreateController(storage: storage);
 
@@ -55,7 +55,7 @@ public class WorkOrderMediaControllerTests
         var response = Assert.IsType<UnprocessableEntityObjectResult>(result);
         var error = Assert.IsType<WorkOrderBoardValidationErrorDto>(response.Value);
         Assert.Equal("FileTooLarge", error.Code);
-        Assert.Equal("The uploaded file must not exceed 50 MB.", error.Message);
+        Assert.Equal("The uploaded file must not exceed 200 MB.", error.Message);
         storage.VerifyNoOtherCalls();
     }
 
diff --git a/Api.SeaHavenIndustries/Controllers/WorkOrderMediaController.cs b/Api.SeaHavenIndustries/Controllers/WorkOrderMediaController.cs
index 62f81df..e1fb049 100644
--- a/Api.SeaHavenIndustries/Controllers/WorkOrderMediaController.cs
+++ b/Api.SeaHavenIndustries/Controllers/WorkOrderMediaController.cs
@@ -17,7 +17,7 @@ namespace Api.SeaHavenIndustries.Controllers
     [Route("api/workorders")]
     public class WorkOrderMediaController : Controller
     {
-        public const long MaxUploadBytes = 50_000_000;
+        public const long MaxUploadBytes = 200_000_000;
 
         private readonly IWorkOrderMediaService _workOrderMediaService;
         private readonly IFileStoragePort _fileStorage;
@@ -91,7 +91,7 @@ namespace Api.SeaHavenIndustries.Controllers
                 {
                     throw new WorkOrderBoardValidationException(
                         "FileTooLarge",
-                        "The uploaded file must not exceed 50 MB.");
+                        "The uploaded file must not exceed 200 MB.");
                 }
 
                 WorkOrderMediaFileRules.EnsureAllowed(file, category);

From 06b88b60063e24d5a09be937b5273a135dd78840 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Mon, 21 Sep 2026 15:32:53 -0300
Subject: [PATCH 085/183] fix(workorders): align media multipart limit

---
 .../WorkOrderMediaControllerTests.cs                   | 10 ++++++++++
 .../Controllers/WorkOrderMediaController.cs            |  1 +
 2 files changed, 11 insertions(+)

diff --git a/Api.SeaHavenIndustries.Tests/WorkOrderMediaControllerTests.cs b/Api.SeaHavenIndustries.Tests/WorkOrderMediaControllerTests.cs
index cccc694..a29b332 100644
--- a/Api.SeaHavenIndustries.Tests/WorkOrderMediaControllerTests.cs
+++ b/Api.SeaHavenIndustries.Tests/WorkOrderMediaControllerTests.cs
@@ -42,6 +42,16 @@ public class WorkOrderMediaControllerTests
         Assert.Equal(200_000_000L, bytes.Value);
     }
 
+    [Fact]
+    public void AddMedia_HasTwoHundredMegabyteMultipartBodyLimit()
+    {
+        var method = typeof(WorkOrderMediaController).GetMethod(nameof(WorkOrderMediaController.AddMedia));
+        var attribute = Assert.IsType<RequestFormLimitsAttribute>(Assert.Single(
+            method!.GetCustomAttributes(typeof(RequestFormLimitsAttribute), inherit: true)));
+
+        Assert.Equal(200_000_000L, attribute.MultipartBodyLengthLimit);
+    }
+
     [Fact]
     public async Task AddMedia_FileOverLimit_ReturnsStableUnprocessableEntity()
     {
diff --git a/Api.SeaHavenIndustries/Controllers/WorkOrderMediaController.cs b/Api.SeaHavenIndustries/Controllers/WorkOrderMediaController.cs
index e1fb049..17b3ba3 100644
--- a/Api.SeaHavenIndustries/Controllers/WorkOrderMediaController.cs
+++ b/Api.SeaHavenIndustries/Controllers/WorkOrderMediaController.cs
@@ -75,6 +75,7 @@ namespace Api.SeaHavenIndustries.Controllers
 
         [HttpPost("{id:int}/media")]
         [RequestSizeLimit(MaxUploadBytes)]
+        [RequestFormLimits(MultipartBodyLengthLimit = MaxUploadBytes)]
         public async Task<IActionResult> AddMedia(
             int id,
             [FromForm] WorkOrderMediaCategory? category,

From d2827991279762aef3a72736aaeb69a5ad3ebd27 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <cwestall@gmail.com>
Date: Tue, 22 Sep 2026 16:43:39 -0300
Subject: [PATCH 086/183] Fix SH-387 uplift creation without primary dispatch

---
 .../Implementation/DispatchDataService.cs     | 10 ++--
 .../Interfaces/IDispatchDataService.cs        |  4 +-
 .../Implementation/WorkOrderUpliftService.cs  | 26 +++++++--
 .../WorkOrderUpliftServiceTests.cs            | 53 ++++++++++++++++++-
 4 files changed, 81 insertions(+), 12 deletions(-)

diff --git a/SeaHaven.DataServices/Implementation/DispatchDataService.cs b/SeaHaven.DataServices/Implementation/DispatchDataService.cs
index 16d5747..6511ad6 100644
--- a/SeaHaven.DataServices/Implementation/DispatchDataService.cs
+++ b/SeaHaven.DataServices/Implementation/DispatchDataService.cs
@@ -122,25 +122,27 @@ namespace SeaHaven.DataServices.Implementation
             return await _context.Dispatches.CountAsync();
         }
 
-        public async Task<IEnumerable<Dispatch>> GetByWorkOrderIdAsync(int workOrderId)
+        public async Task<IEnumerable<Dispatch>> GetByWorkOrderIdAsync(
+            int workOrderId,
+            CancellationToken cancellationToken = default)
         {
             var dispatchIds = await _context.DispatchWorkOrders
                 .Where(dwo => dwo.WorkOrderId == workOrderId)
                 .Select(dwo => dwo.DispatchId)
                 .Distinct()
-                .ToListAsync();
+                .ToListAsync(cancellationToken);
 
             var directIds = await _context.Dispatches
                 .Where(d => d.WorkOrderId == workOrderId)
                 .Select(d => d.Id)
-                .ToListAsync();
+                .ToListAsync(cancellationToken);
 
             var allIds = dispatchIds.Union(directIds).Distinct().ToList();
 
             return await _context.Dispatches
                 .Where(d => allIds.Contains(d.Id))
                 .Include(d => d.Vendor)
-                .ToListAsync();
+                .ToListAsync(cancellationToken);
         }
 
         public async Task<IEnumerable<Dispatch>> GetByWorkOrderIdsAsync(IEnumerable<int> workOrderIds)
diff --git a/SeaHaven.DataServices/Interfaces/IDispatchDataService.cs b/SeaHaven.DataServices/Interfaces/IDispatchDataService.cs
index efe7dcc..56f3581 100644
--- a/SeaHaven.DataServices/Interfaces/IDispatchDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IDispatchDataService.cs
@@ -11,7 +11,9 @@ namespace SeaHaven.DataServices.Interfaces
         Task<Dispatch?> GetByIdWithVendorAndWorkOrderAsync(int id);
         Task<IEnumerable<Dispatch>> GetAllAsync();
         Task<IEnumerable<Dispatch>> GetByVendorIdAsync(int vendorId);
-        Task<IEnumerable<Dispatch>> GetByWorkOrderIdAsync(int workOrderId);
+        Task<IEnumerable<Dispatch>> GetByWorkOrderIdAsync(
+            int workOrderId,
+            CancellationToken cancellationToken = default);
         Task<IEnumerable<Dispatch>> GetByWorkOrderIdsAsync(IEnumerable<int> workOrderIds);
         Task<IEnumerable<Dispatch>> GetByStatusAsync(string status);
         Task<(IEnumerable<Dispatch> Items, int TotalCount)> GetPagedAsync(int page, int pageSize, string? search = null, string? status = null);
diff --git a/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs b/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs
index 6a2c388..9d4f08b 100644
--- a/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs
@@ -95,7 +95,7 @@ namespace SeaHaven.Services.Implementation
                 workOrderId,
                 cancellationToken,
                 accountFilter);
-            if (workOrder?.PrimaryDispatchId is not int dispatchId)
+            if (workOrder == null)
                 throw new InvalidOperationException("Work order has no primary dispatch for uplift requests");
 
             if (workOrder.LifecycleStatus is LifecycleStatus.Completed or LifecycleStatus.Canceled)
@@ -104,14 +104,30 @@ namespace SeaHaven.Services.Implementation
                     $"Cannot create an uplift on a '{workOrder.LifecycleStatus}' work order");
             }
 
-            var dispatch = await _dispatchData.GetByIdAsync(dispatchId);
-            if (dispatch == null)
-                throw new KeyNotFoundException("Dispatch not found");
+            Dispatch? dispatch;
+            if (workOrder.PrimaryDispatchId is int primaryDispatchId)
+            {
+                dispatch = await _dispatchData.GetByIdAsync(primaryDispatchId);
+                if (dispatch == null)
+                    throw new KeyNotFoundException("Dispatch not found");
+            }
+            else
+            {
+                dispatch = (await _dispatchData.GetByWorkOrderIdAsync(workOrderId, cancellationToken))
+                    .Where(candidate => candidate.IsDeleted != true)
+                    .OrderByDescending(candidate => candidate.DispatchedAt ?? candidate.CreatedDate)
+                    .ThenByDescending(candidate => candidate.Id)
+                    .FirstOrDefault();
+
+                if (dispatch == null)
+                    throw new InvalidOperationException("Work order has no primary dispatch for uplift requests");
+            }
 
             if (IsTerminalForUplift(dispatch.Status))
                 throw new InvalidOperationException($"Cannot request uplift on a '{dispatch.Status}' dispatch");
 
-            if (await _upliftData.HasPendingForWorkOrderAsync(workOrderId, cancellationToken))
+            if (await _upliftData.HasPendingForWorkOrderAsync(workOrderId, cancellationToken)
+                || await _upliftData.HasActiveAsync(dispatch.Id, cancellationToken))
                 throw new InvalidOperationException("An open uplift request already exists for this work order");
 
             var now = _timeProvider.GetUtcNow().UtcDateTime;
diff --git a/SeaHavenIndustries.Tests/WorkOrderUpliftServiceTests.cs b/SeaHavenIndustries.Tests/WorkOrderUpliftServiceTests.cs
index 7ec8856..9546fbf 100644
--- a/SeaHavenIndustries.Tests/WorkOrderUpliftServiceTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderUpliftServiceTests.cs
@@ -46,7 +46,8 @@ public sealed class WorkOrderUpliftServiceTests
 
     private static async Task<(WorkOrder WorkOrder, Dispatch Dispatch)> SeedWorkOrderAsync(
         ApplicationDbContext context,
-        WorkOrderType type = WorkOrderType.PM)
+        WorkOrderType type = WorkOrderType.PM,
+        int? primaryDispatchId = 10)
     {
         await WorkOrderAccountTestHelpers.EnsureAccountAsync(context);
         context.Users.Add(new ApplicationUser
@@ -70,7 +71,7 @@ public sealed class WorkOrderUpliftServiceTests
         {
             Id = 1,
             InternalWONumber = "10000000001",
-            PrimaryDispatchId = 10,
+            PrimaryDispatchId = primaryDispatchId,
             AccountId = 1,
             WorkOrderType = type,
         };
@@ -123,6 +124,25 @@ public sealed class WorkOrderUpliftServiceTests
         Assert.Equal(1400m, context.Dispatches.Single(d => d.Id == 10).NTEAmount);
     }
 
+    [Fact]
+    public async Task CreateAsync_WithoutPrimaryDispatch_UsesWorkOrderDispatch()
+    {
+        await using var context = CreateContext();
+        var (workOrder, dispatch) = await SeedWorkOrderAsync(context, primaryDispatchId: null);
+        var service = NewService(context);
+
+        var created = await service.CreateAsync(
+            workOrder.Id,
+            new CreateWorkOrderUpliftRequestDto { Amount = 400m, Notes = "Missing primary" },
+            Dispatcher(),
+            CancellationToken.None);
+
+        Assert.NotNull(created);
+        Assert.Equal("auto_approved", created!.Status);
+        Assert.Equal(1400m, context.Dispatches.Single(d => d.Id == dispatch.Id).NTEAmount);
+        Assert.Equal(1, await context.DispatchUpliftRequests.CountAsync());
+    }
+
     [Fact]
     public async Task CreateAsync_PmAmountAboveCap_CreatesPendingRequest()
     {
@@ -233,6 +253,35 @@ public sealed class WorkOrderUpliftServiceTests
         Assert.Contains("open uplift request", ex.Message, StringComparison.OrdinalIgnoreCase);
     }
 
+    [Fact]
+    public async Task CreateAsync_ActiveRequestOnPrimaryDispatch_BlocksDuplicate()
+    {
+        await using var context = CreateContext();
+        var (workOrder, dispatch) = await SeedWorkOrderAsync(context);
+        dispatch.WorkOrderId = null;
+        context.DispatchUpliftRequests.Add(new DispatchUpliftRequest
+        {
+            Id = 100,
+            DispatchId = dispatch.Id,
+            RequestedNTE = 300m,
+            Status = "Pending",
+            RequiredTier = 1,
+            NotificationStatus = "Pending",
+        });
+        await context.SaveChangesAsync();
+
+        var service = NewService(context);
+        var ex = await Assert.ThrowsAsync<InvalidOperationException>(() =>
+            service.CreateAsync(
+                workOrder.Id,
+                new CreateWorkOrderUpliftRequestDto { Amount = 100m, Notes = "Duplicate open" },
+                Dispatcher(),
+                CancellationToken.None));
+
+        Assert.Contains("open uplift request", ex.Message, StringComparison.OrdinalIgnoreCase);
+        Assert.Single(context.DispatchUpliftRequests);
+    }
+
     [Fact]
     public async Task WithdrawPendingForWorkOrderAsync_CancelsOpenRequestsAndAudits()
     {

From adb192cad7abcff3774865ec57acdec8497a2e48 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <cwestall@gmail.com>
Date: Tue, 22 Sep 2026 16:54:47 -0300
Subject: [PATCH 087/183] Release uplift gate when transaction setup fails

---
 .../Implementation/UpliftDataService.cs       | 31 ++++----
 .../UpliftDataServiceTransactionTests.cs      | 77 +++++++++++++++++++
 2 files changed, 94 insertions(+), 14 deletions(-)
 create mode 100644 SeaHavenIndustries.Tests/UpliftDataServiceTransactionTests.cs

diff --git a/SeaHaven.DataServices/Implementation/UpliftDataService.cs b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
index 7db6a01..1d72cf5 100644
--- a/SeaHaven.DataServices/Implementation/UpliftDataService.cs
+++ b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
@@ -535,22 +535,25 @@ namespace SeaHaven.DataServices.Implementation
         {
             var gate = WorkOrderGates.GetOrAdd(workOrderId, _ => new SemaphoreSlim(1, 1));
             await gate.WaitAsync(cancellationToken);
-            await using var transaction = _context.Database.IsRelational()
-                ? await _context.Database.BeginTransactionAsync(cancellationToken)
-                : null;
             try
             {
-                await LockWorkOrderRowAsync(workOrderId, cancellationToken);
-                var result = await work(cancellationToken);
-                if (transaction is not null)
-                    await transaction.CommitAsync(cancellationToken);
-                return result;
-            }
-            catch
-            {
-                if (transaction is not null)
-                    await transaction.RollbackAsync(cancellationToken);
-                throw;
+                await using var transaction = _context.Database.IsRelational()
+                    ? await _context.Database.BeginTransactionAsync(cancellationToken)
+                    : null;
+                try
+                {
+                    await LockWorkOrderRowAsync(workOrderId, cancellationToken);
+                    var result = await work(cancellationToken);
+                    if (transaction is not null)
+                        await transaction.CommitAsync(cancellationToken);
+                    return result;
+                }
+                catch
+                {
+                    if (transaction is not null)
+                        await transaction.RollbackAsync(cancellationToken);
+                    throw;
+                }
             }
             finally
             {
diff --git a/SeaHavenIndustries.Tests/UpliftDataServiceTransactionTests.cs b/SeaHavenIndustries.Tests/UpliftDataServiceTransactionTests.cs
new file mode 100644
index 0000000..f585766
--- /dev/null
+++ b/SeaHavenIndustries.Tests/UpliftDataServiceTransactionTests.cs
@@ -0,0 +1,77 @@
+using System.Data.Common;
+using Data.SeaHavenIndustries;
+using Microsoft.Data.Sqlite;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Diagnostics;
+using SeaHaven.DataServices.Implementation;
+
+namespace SeaHavenIndustries.Tests;
+
+public sealed class UpliftDataServiceTransactionTests
+{
+    [Fact]
+    public async Task ExecuteWorkOrderMutationAsync_ReleasesGate_WhenTransactionInitializationFails()
+    {
+        await using var connection = new SqliteConnection("DataSource=:memory:");
+        await connection.OpenAsync();
+
+        var failingOptions = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseSqlite(connection)
+            .AddInterceptors(new ThrowOnceTransactionInterceptor())
+            .Options;
+
+        await using (var failedContext = new ApplicationDbContext(failingOptions))
+        {
+            var failedService = new UpliftDataService(failedContext);
+
+            await Assert.ThrowsAsync<InvalidOperationException>(() =>
+                failedService.ExecuteWorkOrderMutationAsync(
+                    387,
+                    _ => Task.FromResult(true),
+                    CancellationToken.None));
+        }
+
+        var retryOptions = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseSqlite(connection)
+            .Options;
+        await using var retryContext = new ApplicationDbContext(retryOptions);
+        var retryService = new UpliftDataService(retryContext);
+
+        var retry = retryService.ExecuteWorkOrderMutationAsync(
+            387,
+            _ => Task.FromResult("entered"),
+            CancellationToken.None);
+
+        Assert.Equal("entered", await retry.WaitAsync(TimeSpan.FromSeconds(1)));
+    }
+
+    private sealed class ThrowOnceTransactionInterceptor : DbTransactionInterceptor
+    {
+        private int _remaining = 1;
+
+        public override InterceptionResult<DbTransaction> TransactionStarting(
+            DbConnection connection,
+            TransactionStartingEventData eventData,
+            InterceptionResult<DbTransaction> result)
+        {
+            ThrowOnce();
+            return base.TransactionStarting(connection, eventData, result);
+        }
+
+        public override ValueTask<InterceptionResult<DbTransaction>> TransactionStartingAsync(
+            DbConnection connection,
+            TransactionStartingEventData eventData,
+            InterceptionResult<DbTransaction> result,
+            CancellationToken cancellationToken = default)
+        {
+            ThrowOnce();
+            return base.TransactionStartingAsync(connection, eventData, result, cancellationToken);
+        }
+
+        private void ThrowOnce()
+        {
+            if (Interlocked.Exchange(ref _remaining, 0) == 1)
+                throw new InvalidOperationException("Forced transaction initialization failure");
+        }
+    }
+}

From 5c5c01b2e82ce9efbbc03f8945a98a5cbea86c7b Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <cwestall@gmail.com>
Date: Tue, 22 Sep 2026 21:29:35 -0300
Subject: [PATCH 088/183] fix(uplifts): attribute audit to requested work order

Use the operation work order when staging uplift audit logs so a dispatch linked through DispatchWorkOrders cannot write the event to its primary work order. Add coverage for the cross-work-order fallback case.
---
 .../Implementation/WorkOrderUpliftService.cs  |  2 +-
 .../WorkOrderUpliftServiceTests.cs            | 31 +++++++++++++++++++
 2 files changed, 32 insertions(+), 1 deletion(-)

diff --git a/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs b/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs
index 9d4f08b..149aeaa 100644
--- a/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs
@@ -437,7 +437,7 @@ namespace SeaHaven.Services.Implementation
         {
             await _dispatchData.StageAuditLogAsync(new WorkOrderAuditLog
             {
-                WorkOrderId = dispatch.WorkOrderId ?? workOrderId,
+                WorkOrderId = workOrderId,
                 UserId = userId,
                 FieldName = $"Dispatch {dispatch.DispatchNumber} Uplift",
                 OldValue = isStatusTransition ? oldValue.ToString() : $"${Convert.ToDecimal(oldValue):F2}",
diff --git a/SeaHavenIndustries.Tests/WorkOrderUpliftServiceTests.cs b/SeaHavenIndustries.Tests/WorkOrderUpliftServiceTests.cs
index 9546fbf..13e5c22 100644
--- a/SeaHavenIndustries.Tests/WorkOrderUpliftServiceTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderUpliftServiceTests.cs
@@ -143,6 +143,37 @@ public sealed class WorkOrderUpliftServiceTests
         Assert.Equal(1, await context.DispatchUpliftRequests.CountAsync());
     }
 
+    [Fact]
+    public async Task CreateAsync_WithoutPrimaryDispatch_AuditsRequestedWorkOrderWhenDispatchBelongsToAnother()
+    {
+        await using var context = CreateContext();
+        var (workOrder, dispatch) = await SeedWorkOrderAsync(context, primaryDispatchId: null);
+        context.workOrders.Add(new WorkOrder
+        {
+            Id = 2,
+            InternalWONumber = "10000000002",
+            AccountId = 1,
+            WorkOrderType = WorkOrderType.PM,
+        });
+        dispatch.WorkOrderId = 2;
+        context.DispatchWorkOrders.Add(new DispatchWorkOrder
+        {
+            DispatchId = dispatch.Id,
+            WorkOrderId = workOrder.Id,
+        });
+        await context.SaveChangesAsync();
+
+        var service = NewService(context);
+        await service.CreateAsync(
+            workOrder.Id,
+            new CreateWorkOrderUpliftRequestDto { Amount = 400m, Notes = "Associated dispatch" },
+            Dispatcher(),
+            CancellationToken.None);
+
+        var audit = Assert.Single(context.WorkOrderAuditLogs);
+        Assert.Equal(workOrder.Id, audit.WorkOrderId);
+    }
+
     [Fact]
     public async Task CreateAsync_PmAmountAboveCap_CreatesPendingRequest()
     {

From 9156107e725f961fb7408dea4499ac1119b31257 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Tue, 22 Sep 2026 23:09:47 -0300
Subject: [PATCH 089/183] fix(uplifts): enforce request permission at service
 boundary

---
 .../Implementation/WorkOrderUpliftService.cs  | 31 +++++++
 .../WorkOrderBoardCancelServiceTests.cs       |  8 ++
 .../WorkOrderUpliftServiceTests.cs            | 83 +++++++++++++++++++
 3 files changed, 122 insertions(+)

diff --git a/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs b/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs
index 6a2c388..261a8c5 100644
--- a/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs
@@ -4,6 +4,7 @@ using Data.SeaHavenIndustries.Enums;
 using Microsoft.Extensions.Options;
 using SeaHaven.DataServices.Interfaces;
 using SeaHaven.Services.Configuration;
+using SeaHaven.Services.Constants;
 using SeaHaven.Services.DTOs;
 using SeaHaven.Services.Exceptions;
 using SeaHaven.Services.Helpers;
@@ -19,6 +20,8 @@ namespace SeaHaven.Services.Implementation
         private readonly IWorkOrderDetailDataService _detailData;
         private readonly IWorkOrderAccountResolver _accountResolver;
         private readonly IUserDataService _userData;
+        private readonly ITeamPermissionOverrideDataService _permissionOverrideData;
+        private readonly ITeamPermissionPolicy _permissionPolicy;
         private readonly TimeProvider _timeProvider;
         private readonly ApprovalsOptions _approvalsOptions;
 
@@ -28,6 +31,8 @@ namespace SeaHaven.Services.Implementation
             IWorkOrderDetailDataService detailData,
             IWorkOrderAccountResolver accountResolver,
             IUserDataService userData,
+            ITeamPermissionOverrideDataService permissionOverrideData,
+            ITeamPermissionPolicy permissionPolicy,
             TimeProvider timeProvider,
             IOptions<ApprovalsOptions> approvalsOptions)
         {
@@ -36,6 +41,8 @@ namespace SeaHaven.Services.Implementation
             _detailData = detailData;
             _accountResolver = accountResolver;
             _userData = userData;
+            _permissionOverrideData = permissionOverrideData;
+            _permissionPolicy = permissionPolicy;
             _timeProvider = timeProvider;
             _approvalsOptions = approvalsOptions.Value;
         }
@@ -61,6 +68,8 @@ namespace SeaHaven.Services.Implementation
             if (!await HasWorkOrderAccessAsync(workOrderId, user, cancellationToken))
                 return null;
 
+            await EnsureCanRequestUpliftAsync(user, cancellationToken);
+
             if (request.Amount <= 0)
                 throw new InvalidOperationException("Uplift amount must be greater than zero");
 
@@ -82,6 +91,28 @@ namespace SeaHaven.Services.Implementation
                 cancellationToken);
         }
 
+        private async Task EnsureCanRequestUpliftAsync(
+            ClaimsPrincipal user,
+            CancellationToken cancellationToken)
+        {
+            var userId = user.FindFirstValue(ClaimTypes.NameIdentifier);
+            var permissionUser = string.IsNullOrWhiteSpace(userId)
+                ? null
+                : await _permissionOverrideData.GetUserAsync(userId, cancellationToken);
+            var roleName = user.IsInRole("Admin")
+                ? "Admin"
+                : user.FindFirstValue(ClaimTypes.Role);
+
+            if (!_permissionPolicy.IsAllowed(
+                    roleName,
+                    TeamPermissionKeys.RequestUplifts,
+                    permissionUser?.Overrides))
+            {
+                throw new UpliftForbiddenException(
+                    "Your role can't request uplifts on this work order.");
+            }
+        }
+
         private async Task<WorkOrderUpliftDto?> CreateLockedAsync(
             int workOrderId,
             decimal amount,
diff --git a/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs b/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs
index e797a68..c910604 100644
--- a/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs
@@ -203,6 +203,8 @@ public class WorkOrderBoardCancelServiceTests
             new WorkOrderDetailDataService(context),
             WorkOrderAccountTestHelpers.Resolver(context),
             new UserDataService(context),
+            new TeamPermissionOverrideDataService(context),
+            new TeamPermissionPolicy(),
             TimeProvider.System,
             Options.Create(new ApprovalsOptions()));
         var cancel = new WorkOrderBoardCancelService(mutationData, boardService, audit, uplifts, new PassThroughUpliftData());
@@ -264,6 +266,8 @@ public class WorkOrderBoardCancelServiceTests
             new WorkOrderDetailDataService(context),
             WorkOrderAccountTestHelpers.Resolver(context),
             new UserDataService(context),
+            new TeamPermissionOverrideDataService(context),
+            new TeamPermissionPolicy(),
             TimeProvider.System,
             Options.Create(new ApprovalsOptions()));
         var cancel = new WorkOrderBoardCancelService(
@@ -332,6 +336,8 @@ public class WorkOrderBoardCancelServiceTests
             new WorkOrderDetailDataService(createContext),
             WorkOrderAccountTestHelpers.Resolver(createContext),
             new UserDataService(createContext),
+            new TeamPermissionOverrideDataService(createContext),
+            new TeamPermissionPolicy(),
             TimeProvider.System,
             Options.Create(new ApprovalsOptions()));
         var boardData = new WorkOrderBoardDataService(cancelContext);
@@ -345,6 +351,8 @@ public class WorkOrderBoardCancelServiceTests
             new WorkOrderDetailDataService(cancelContext),
             WorkOrderAccountTestHelpers.Resolver(cancelContext),
             new UserDataService(cancelContext),
+            new TeamPermissionOverrideDataService(cancelContext),
+            new TeamPermissionPolicy(),
             TimeProvider.System,
             Options.Create(new ApprovalsOptions()));
         var cancel = new WorkOrderBoardCancelService(
diff --git a/SeaHavenIndustries.Tests/WorkOrderUpliftServiceTests.cs b/SeaHavenIndustries.Tests/WorkOrderUpliftServiceTests.cs
index 7ec8856..bb63d73 100644
--- a/SeaHavenIndustries.Tests/WorkOrderUpliftServiceTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderUpliftServiceTests.cs
@@ -4,6 +4,7 @@ using Microsoft.EntityFrameworkCore;
 using Microsoft.Extensions.Options;
 using SeaHaven.DataServices.Implementation;
 using SeaHaven.Services.Configuration;
+using SeaHaven.Services.Constants;
 using SeaHaven.Services.DTOs;
 using SeaHaven.Services.Implementation;
 using SeaHaven.Services.Interfaces;
@@ -37,6 +38,8 @@ public sealed class WorkOrderUpliftServiceTests
             new WorkOrderDetailDataService(context),
             WorkOrderAccountTestHelpers.Resolver(context),
             new UserDataService(context),
+            new TeamPermissionOverrideDataService(context),
+            new TeamPermissionPolicy(),
             TimeProvider.System,
             Options.Create(NewOptions()));
     }
@@ -123,6 +126,86 @@ public sealed class WorkOrderUpliftServiceTests
         Assert.Equal(1400m, context.Dispatches.Single(d => d.Id == 10).NTEAmount);
     }
 
+    [Fact]
+    public async Task CreateAsync_Admin_RemainsUnrestricted()
+    {
+        await using var context = CreateContext();
+        var (workOrder, _) = await SeedWorkOrderAsync(context);
+        var service = NewService(context);
+
+        var created = await service.CreateAsync(
+            workOrder.Id,
+            new CreateWorkOrderUpliftRequestDto { Amount = 400m },
+            Dispatcher(),
+            CancellationToken.None);
+
+        Assert.NotNull(created);
+    }
+
+    [Theory]
+    [InlineData("Dispatcher", true)]
+    [InlineData("Scheduler", false)]
+    public async Task CreateAsync_UsesRoleDefaultForRequestPermission(string role, bool allowed)
+    {
+        await using var context = CreateContext();
+        var (workOrder, dispatch) = await SeedWorkOrderAsync(context);
+        var service = NewService(context);
+
+        var act = () => service.CreateAsync(
+            workOrder.Id,
+            new CreateWorkOrderUpliftRequestDto { Amount = 400m },
+            WorkOrderAccountTestHelpers.AccountUser("dispatcher-1", 1, role),
+            CancellationToken.None);
+
+        if (allowed)
+        {
+            Assert.NotNull(await act());
+            return;
+        }
+
+        var exception = await Assert.ThrowsAsync<UpliftForbiddenException>(act);
+        Assert.Equal("Your role can't request uplifts on this work order.", exception.Message);
+        Assert.Empty(context.DispatchUpliftRequests);
+        Assert.Equal(1000m, dispatch.NTEAmount);
+    }
+
+    [Theory]
+    [InlineData("Scheduler", UserPermissionState.Allow, true)]
+    [InlineData("Dispatcher", UserPermissionState.Deny, false)]
+    public async Task CreateAsync_AppliesExplicitRequestPermissionOverride(
+        string role,
+        UserPermissionState overrideState,
+        bool allowed)
+    {
+        await using var context = CreateContext();
+        var (workOrder, dispatch) = await SeedWorkOrderAsync(context);
+        context.UserPermissionOverrides.Add(new UserPermissionOverride
+        {
+            UserId = "dispatcher-1",
+            PermissionKey = TeamPermissionKeys.RequestUplifts,
+            State = overrideState,
+        });
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        var act = () => service.CreateAsync(
+            workOrder.Id,
+            new CreateWorkOrderUpliftRequestDto { Amount = 400m },
+            WorkOrderAccountTestHelpers.AccountUser("dispatcher-1", 1, role),
+            CancellationToken.None);
+
+        if (allowed)
+        {
+            Assert.NotNull(await act());
+            return;
+        }
+
+        var exception = await Assert.ThrowsAsync<UpliftForbiddenException>(act);
+        Assert.Equal("Your role can't request uplifts on this work order.", exception.Message);
+        Assert.Empty(context.DispatchUpliftRequests);
+        Assert.Equal(1000m, dispatch.NTEAmount);
+    }
+
     [Fact]
     public async Task CreateAsync_PmAmountAboveCap_CreatesPendingRequest()
     {

From ff6a5945f1381151ad71da5d8f1a9e836d36af7f Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Tue, 22 Sep 2026 23:24:17 -0300
Subject: [PATCH 090/183] fix(uplifts): honor current permissions and denial
 contract

---
 .../VendorPortalControllerTests.cs            | 32 ++++++++++-
 .../Controllers/VendorPortalController.cs     | 10 ++++
 SeaHaven.Services/DTOs/UpliftDTOs.cs          |  3 +
 .../Implementation/WorkOrderUpliftService.cs  | 19 ++++---
 .../WorkOrderBoardCancelServiceTests.cs       |  8 +++
 .../WorkOrderUpliftServiceTests.cs            | 57 +++++++++++++++++--
 6 files changed, 115 insertions(+), 14 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/VendorPortalControllerTests.cs b/Api.SeaHavenIndustries.Tests/VendorPortalControllerTests.cs
index dd9e40e..0e48da5 100644
--- a/Api.SeaHavenIndustries.Tests/VendorPortalControllerTests.cs
+++ b/Api.SeaHavenIndustries.Tests/VendorPortalControllerTests.cs
@@ -306,7 +306,37 @@ public class VendorPortalControllerTests
 
         var result = await controller.RequestUplift(10, new VendorPortalController.UpliftRequestBody { RequestedNTE = 100m });
 
-        result.Should().BeOfType<BadRequestObjectResult>();
+        var badRequest = result.Should().BeOfType<BadRequestObjectResult>().Subject;
+        var response = badRequest.Value.Should().BeOfType<Response>().Subject;
+        response.Message.Should().Contain("reference");
+        response.Message.Should().NotContain("Requested NTE must be greater than the current NTE");
+    }
+
+    [Fact]
+    public async Task RequestUplift_Forbidden_Returns403WithExactPermissionMessage()
+    {
+        var service = new Mock<IVendorPortalService>();
+        service.Setup(x => x.ResolveSessionAsync(It.IsAny<string>(), It.IsAny<CancellationToken>()))
+            .ReturnsAsync(Session);
+        service.Setup(x => x.RequestUpliftAsync(
+                Session,
+                10,
+                500m,
+                It.IsAny<string?>(),
+                It.IsAny<string?>(),
+                It.IsAny<int?>(),
+                It.IsAny<CancellationToken>()))
+            .ThrowsAsync(new UpliftForbiddenException("internal permission detail"));
+        var controller = NewController(service);
+
+        var result = await controller.RequestUplift(
+            10,
+            new VendorPortalController.UpliftRequestBody { RequestedNTE = 500m });
+
+        var forbidden = result.Should().BeOfType<ObjectResult>().Subject;
+        forbidden.StatusCode.Should().Be(StatusCodes.Status403Forbidden);
+        var response = forbidden.Value.Should().BeOfType<Response>().Subject;
+        response.Message.Should().Be("Your role can't request uplifts on this work order.");
     }
 
     [Fact]
diff --git a/Api.SeaHavenIndustries/Controllers/VendorPortalController.cs b/Api.SeaHavenIndustries/Controllers/VendorPortalController.cs
index 39dd90b..9fdeed4 100644
--- a/Api.SeaHavenIndustries/Controllers/VendorPortalController.cs
+++ b/Api.SeaHavenIndustries/Controllers/VendorPortalController.cs
@@ -74,6 +74,16 @@ namespace Api.SeaHavenIndustries.Controllers
             {
                 return NotFound(new Response { Status = "Error", Message = "Dispatch not found" });
             }
+            catch (UpliftForbiddenException)
+            {
+                return StatusCode(
+                    StatusCodes.Status403Forbidden,
+                    new Response
+                    {
+                        Status = "Error",
+                        Message = UpliftForbiddenException.RequestUpliftsDeniedMessage
+                    });
+            }
             catch (InvalidOperationException ex)
             {
                 return BadRequest(new Response { Status = "Error", Message = _logger.Sanitize(ex, "The requested action could not be completed for this dispatch") });
diff --git a/SeaHaven.Services/DTOs/UpliftDTOs.cs b/SeaHaven.Services/DTOs/UpliftDTOs.cs
index 24cde20..d93dd63 100644
--- a/SeaHaven.Services/DTOs/UpliftDTOs.cs
+++ b/SeaHaven.Services/DTOs/UpliftDTOs.cs
@@ -104,6 +104,9 @@ namespace SeaHaven.Services.DTOs
 
     public class UpliftForbiddenException : Exception
     {
+        public const string RequestUpliftsDeniedMessage =
+            "Your role can't request uplifts on this work order.";
+
         public UpliftForbiddenException(string message) : base(message) { }
     }
 
diff --git a/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs b/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs
index 261a8c5..f5548ee 100644
--- a/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs
@@ -99,17 +99,20 @@ namespace SeaHaven.Services.Implementation
             var permissionUser = string.IsNullOrWhiteSpace(userId)
                 ? null
                 : await _permissionOverrideData.GetUserAsync(userId, cancellationToken);
-            var roleName = user.IsInRole("Admin")
-                ? "Admin"
-                : user.FindFirstValue(ClaimTypes.Role);
 
-            if (!_permissionPolicy.IsAllowed(
-                    roleName,
-                    TeamPermissionKeys.RequestUplifts,
-                    permissionUser?.Overrides))
+            if (permissionUser is null)
             {
                 throw new UpliftForbiddenException(
-                    "Your role can't request uplifts on this work order.");
+                    UpliftForbiddenException.RequestUpliftsDeniedMessage);
+            }
+
+            if (!_permissionPolicy.IsAllowed(
+                    permissionUser.RoleName,
+                    TeamPermissionKeys.RequestUplifts,
+                    permissionUser.Overrides))
+            {
+                throw new UpliftForbiddenException(
+                    UpliftForbiddenException.RequestUpliftsDeniedMessage);
             }
         }
 
diff --git a/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs b/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs
index c910604..9f1e3f6 100644
--- a/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs
@@ -1,5 +1,6 @@
 using Data.SeaHavenIndustries;
 using Data.SeaHavenIndustries.Enums;
+using Microsoft.AspNetCore.Identity;
 using Microsoft.EntityFrameworkCore;
 using Microsoft.Extensions.Options;
 using SeaHaven.DataServices.Implementation;
@@ -304,6 +305,13 @@ public class WorkOrderBoardCancelServiceTests
                 FirstName = "Alex",
                 LastName = "Dispatcher",
             });
+            var adminRole = new IdentityRole("Admin");
+            seed.Roles.Add(adminRole);
+            seed.UserRoles.Add(new IdentityUserRole<string>
+            {
+                UserId = "dispatcher-1",
+                RoleId = adminRole.Id,
+            });
             seed.Vendors.Add(new Vendor { Id = 1, CompanyName = "Acme HVAC" });
             seed.Dispatches.Add(new Dispatch
             {
diff --git a/SeaHavenIndustries.Tests/WorkOrderUpliftServiceTests.cs b/SeaHavenIndustries.Tests/WorkOrderUpliftServiceTests.cs
index bb63d73..86a7613 100644
--- a/SeaHavenIndustries.Tests/WorkOrderUpliftServiceTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderUpliftServiceTests.cs
@@ -1,5 +1,6 @@
 using Data.SeaHavenIndustries;
 using Data.SeaHavenIndustries.Enums;
+using Microsoft.AspNetCore.Identity;
 using Microsoft.EntityFrameworkCore;
 using Microsoft.Extensions.Options;
 using SeaHaven.DataServices.Implementation;
@@ -49,7 +50,8 @@ public sealed class WorkOrderUpliftServiceTests
 
     private static async Task<(WorkOrder WorkOrder, Dispatch Dispatch)> SeedWorkOrderAsync(
         ApplicationDbContext context,
-        WorkOrderType type = WorkOrderType.PM)
+        WorkOrderType type = WorkOrderType.PM,
+        string role = "Admin")
     {
         await WorkOrderAccountTestHelpers.EnsureAccountAsync(context);
         context.Users.Add(new ApplicationUser
@@ -59,6 +61,13 @@ public sealed class WorkOrderUpliftServiceTests
             FirstName = "Alex",
             LastName = "Dispatcher",
         });
+        var identityRole = new IdentityRole(role);
+        context.Roles.Add(identityRole);
+        context.UserRoles.Add(new IdentityUserRole<string>
+        {
+            UserId = "dispatcher-1",
+            RoleId = identityRole.Id,
+        });
         context.Vendors.Add(new Vendor { Id = 1, CompanyName = "Acme HVAC" });
         context.Dispatches.Add(new Dispatch
         {
@@ -127,7 +136,7 @@ public sealed class WorkOrderUpliftServiceTests
     }
 
     [Fact]
-    public async Task CreateAsync_Admin_RemainsUnrestricted()
+    public async Task CreateAsync_CurrentDatabaseAdmin_RemainsUnrestricted()
     {
         await using var context = CreateContext();
         var (workOrder, _) = await SeedWorkOrderAsync(context);
@@ -136,19 +145,57 @@ public sealed class WorkOrderUpliftServiceTests
         var created = await service.CreateAsync(
             workOrder.Id,
             new CreateWorkOrderUpliftRequestDto { Amount = 400m },
-            Dispatcher(),
+            WorkOrderAccountTestHelpers.AccountUser("dispatcher-1", 1, "Scheduler"),
             CancellationToken.None);
 
         Assert.NotNull(created);
     }
 
+    [Fact]
+    public async Task CreateAsync_StaleAdminClaim_DeniesWhenDatabaseRoleIsNotAdmin()
+    {
+        await using var context = CreateContext();
+        var (workOrder, dispatch) = await SeedWorkOrderAsync(context, role: "Dispatcher");
+        var service = NewService(context);
+
+        var exception = await Assert.ThrowsAsync<UpliftForbiddenException>(() => service.CreateAsync(
+            workOrder.Id,
+            new CreateWorkOrderUpliftRequestDto { Amount = 400m },
+            Dispatcher(),
+            CancellationToken.None));
+
+        Assert.Equal(UpliftForbiddenException.RequestUpliftsDeniedMessage, exception.Message);
+        Assert.Empty(context.DispatchUpliftRequests);
+        Assert.Equal(1000m, dispatch.NTEAmount);
+    }
+
+    [Fact]
+    public async Task CreateAsync_MissingDatabaseUser_DeniesEvenWithAdminClaim()
+    {
+        await using var context = CreateContext();
+        var (workOrder, dispatch) = await SeedWorkOrderAsync(context);
+        context.Users.Remove(context.Users.Single(user => user.Id == "dispatcher-1"));
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        var exception = await Assert.ThrowsAsync<UpliftForbiddenException>(() => service.CreateAsync(
+            workOrder.Id,
+            new CreateWorkOrderUpliftRequestDto { Amount = 400m },
+            Dispatcher("dispatcher-1"),
+            CancellationToken.None));
+
+        Assert.Equal(UpliftForbiddenException.RequestUpliftsDeniedMessage, exception.Message);
+        Assert.Empty(context.DispatchUpliftRequests);
+        Assert.Equal(1000m, dispatch.NTEAmount);
+    }
+
     [Theory]
     [InlineData("Dispatcher", true)]
     [InlineData("Scheduler", false)]
     public async Task CreateAsync_UsesRoleDefaultForRequestPermission(string role, bool allowed)
     {
         await using var context = CreateContext();
-        var (workOrder, dispatch) = await SeedWorkOrderAsync(context);
+        var (workOrder, dispatch) = await SeedWorkOrderAsync(context, role: role);
         var service = NewService(context);
 
         var act = () => service.CreateAsync(
@@ -178,7 +225,7 @@ public sealed class WorkOrderUpliftServiceTests
         bool allowed)
     {
         await using var context = CreateContext();
-        var (workOrder, dispatch) = await SeedWorkOrderAsync(context);
+        var (workOrder, dispatch) = await SeedWorkOrderAsync(context, role: role);
         context.UserPermissionOverrides.Add(new UserPermissionOverride
         {
             UserId = "dispatcher-1",

From f4284badf2499514af66cc8d643986038047654c Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Tue, 22 Sep 2026 23:30:14 -0300
Subject: [PATCH 091/183] fix(uplifts): place forbidden handler on request
 endpoint

---
 .../Controllers/VendorPortalController.cs     | 20 +++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/Api.SeaHavenIndustries/Controllers/VendorPortalController.cs b/Api.SeaHavenIndustries/Controllers/VendorPortalController.cs
index 9fdeed4..ec48a68 100644
--- a/Api.SeaHavenIndustries/Controllers/VendorPortalController.cs
+++ b/Api.SeaHavenIndustries/Controllers/VendorPortalController.cs
@@ -74,16 +74,6 @@ namespace Api.SeaHavenIndustries.Controllers
             {
                 return NotFound(new Response { Status = "Error", Message = "Dispatch not found" });
             }
-            catch (UpliftForbiddenException)
-            {
-                return StatusCode(
-                    StatusCodes.Status403Forbidden,
-                    new Response
-                    {
-                        Status = "Error",
-                        Message = UpliftForbiddenException.RequestUpliftsDeniedMessage
-                    });
-            }
             catch (InvalidOperationException ex)
             {
                 return BadRequest(new Response { Status = "Error", Message = _logger.Sanitize(ex, "The requested action could not be completed for this dispatch") });
@@ -231,6 +221,16 @@ namespace Api.SeaHavenIndustries.Controllers
             {
                 return NotFound(new Response { Status = "Error", Message = "Dispatch not found" });
             }
+            catch (UpliftForbiddenException)
+            {
+                return StatusCode(
+                    StatusCodes.Status403Forbidden,
+                    new Response
+                    {
+                        Status = "Error",
+                        Message = UpliftForbiddenException.RequestUpliftsDeniedMessage
+                    });
+            }
             catch (InvalidOperationException ex)
             {
                 return BadRequest(new Response { Status = "Error", Message = _logger.Sanitize(ex, "The requested action could not be completed for this dispatch") });

From e1632bc3bf9e2709aba656390a944a11ace93597 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Tue, 22 Sep 2026 23:35:07 -0300
Subject: [PATCH 092/183] fix(uplifts): expose only allowlisted denial copy

---
 .../VendorPortalControllerTests.cs            | 32 +------------
 .../WorkOrderUpliftControllerTests.cs         | 47 +++++++++++++++++++
 .../Controllers/VendorPortalController.cs     | 10 ----
 .../Controllers/WorkOrderDetailController.cs  |  5 +-
 4 files changed, 52 insertions(+), 42 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/VendorPortalControllerTests.cs b/Api.SeaHavenIndustries.Tests/VendorPortalControllerTests.cs
index 0e48da5..dd9e40e 100644
--- a/Api.SeaHavenIndustries.Tests/VendorPortalControllerTests.cs
+++ b/Api.SeaHavenIndustries.Tests/VendorPortalControllerTests.cs
@@ -306,37 +306,7 @@ public class VendorPortalControllerTests
 
         var result = await controller.RequestUplift(10, new VendorPortalController.UpliftRequestBody { RequestedNTE = 100m });
 
-        var badRequest = result.Should().BeOfType<BadRequestObjectResult>().Subject;
-        var response = badRequest.Value.Should().BeOfType<Response>().Subject;
-        response.Message.Should().Contain("reference");
-        response.Message.Should().NotContain("Requested NTE must be greater than the current NTE");
-    }
-
-    [Fact]
-    public async Task RequestUplift_Forbidden_Returns403WithExactPermissionMessage()
-    {
-        var service = new Mock<IVendorPortalService>();
-        service.Setup(x => x.ResolveSessionAsync(It.IsAny<string>(), It.IsAny<CancellationToken>()))
-            .ReturnsAsync(Session);
-        service.Setup(x => x.RequestUpliftAsync(
-                Session,
-                10,
-                500m,
-                It.IsAny<string?>(),
-                It.IsAny<string?>(),
-                It.IsAny<int?>(),
-                It.IsAny<CancellationToken>()))
-            .ThrowsAsync(new UpliftForbiddenException("internal permission detail"));
-        var controller = NewController(service);
-
-        var result = await controller.RequestUplift(
-            10,
-            new VendorPortalController.UpliftRequestBody { RequestedNTE = 500m });
-
-        var forbidden = result.Should().BeOfType<ObjectResult>().Subject;
-        forbidden.StatusCode.Should().Be(StatusCodes.Status403Forbidden);
-        var response = forbidden.Value.Should().BeOfType<Response>().Subject;
-        response.Message.Should().Be("Your role can't request uplifts on this work order.");
+        result.Should().BeOfType<BadRequestObjectResult>();
     }
 
     [Fact]
diff --git a/Api.SeaHavenIndustries.Tests/WorkOrderUpliftControllerTests.cs b/Api.SeaHavenIndustries.Tests/WorkOrderUpliftControllerTests.cs
index b3cdbfc..8dabbcd 100644
--- a/Api.SeaHavenIndustries.Tests/WorkOrderUpliftControllerTests.cs
+++ b/Api.SeaHavenIndustries.Tests/WorkOrderUpliftControllerTests.cs
@@ -78,6 +78,53 @@ public sealed class WorkOrderUpliftControllerTests
         Assert.Equal(12, created.Id);
     }
 
+    [Fact]
+    public async Task CreateUplift_RequestPermissionDenied_ReturnsExact403Message()
+    {
+        var service = new Mock<IWorkOrderUpliftService>();
+        service.Setup(x => x.CreateAsync(
+                7,
+                It.IsAny<CreateWorkOrderUpliftRequestDto>(),
+                It.IsAny<ClaimsPrincipal>(),
+                It.IsAny<CancellationToken>()))
+            .ThrowsAsync(new UpliftForbiddenException(UpliftForbiddenException.RequestUpliftsDeniedMessage));
+
+        var controller = NewController(service, "Dispatcher");
+        var result = await controller.CreateUplift(
+            7,
+            new CreateWorkOrderUpliftRequestDto { Amount = 750m },
+            CancellationToken.None);
+
+        var forbidden = result.Should().BeOfType<ObjectResult>().Subject;
+        forbidden.StatusCode.Should().Be(StatusCodes.Status403Forbidden);
+        var response = forbidden.Value.Should().BeOfType<Response>().Subject;
+        response.Message.Should().Be(UpliftForbiddenException.RequestUpliftsDeniedMessage);
+    }
+
+    [Fact]
+    public async Task CreateUplift_UnrelatedForbiddenException_ReturnsSanitized403()
+    {
+        var service = new Mock<IWorkOrderUpliftService>();
+        service.Setup(x => x.CreateAsync(
+                7,
+                It.IsAny<CreateWorkOrderUpliftRequestDto>(),
+                It.IsAny<ClaimsPrincipal>(),
+                It.IsAny<CancellationToken>()))
+            .ThrowsAsync(new UpliftForbiddenException("SECRET-internal-tier-detail"));
+
+        var controller = NewController(service, "Dispatcher");
+        var result = await controller.CreateUplift(
+            7,
+            new CreateWorkOrderUpliftRequestDto { Amount = 750m },
+            CancellationToken.None);
+
+        var forbidden = result.Should().BeOfType<ObjectResult>().Subject;
+        forbidden.StatusCode.Should().Be(StatusCodes.Status403Forbidden);
+        var response = forbidden.Value.Should().BeOfType<Response>().Subject;
+        response.Message.Should().NotContain("SECRET-internal-tier-detail");
+        response.Message.Should().Contain("reference");
+    }
+
     [Fact]
     public async Task CancelUplift_NotFound_Returns404()
     {
diff --git a/Api.SeaHavenIndustries/Controllers/VendorPortalController.cs b/Api.SeaHavenIndustries/Controllers/VendorPortalController.cs
index ec48a68..39dd90b 100644
--- a/Api.SeaHavenIndustries/Controllers/VendorPortalController.cs
+++ b/Api.SeaHavenIndustries/Controllers/VendorPortalController.cs
@@ -221,16 +221,6 @@ namespace Api.SeaHavenIndustries.Controllers
             {
                 return NotFound(new Response { Status = "Error", Message = "Dispatch not found" });
             }
-            catch (UpliftForbiddenException)
-            {
-                return StatusCode(
-                    StatusCodes.Status403Forbidden,
-                    new Response
-                    {
-                        Status = "Error",
-                        Message = UpliftForbiddenException.RequestUpliftsDeniedMessage
-                    });
-            }
             catch (InvalidOperationException ex)
             {
                 return BadRequest(new Response { Status = "Error", Message = _logger.Sanitize(ex, "The requested action could not be completed for this dispatch") });
diff --git a/Api.SeaHavenIndustries/Controllers/WorkOrderDetailController.cs b/Api.SeaHavenIndustries/Controllers/WorkOrderDetailController.cs
index d975b32..be0a708 100644
--- a/Api.SeaHavenIndustries/Controllers/WorkOrderDetailController.cs
+++ b/Api.SeaHavenIndustries/Controllers/WorkOrderDetailController.cs
@@ -170,7 +170,10 @@ namespace Api.SeaHavenIndustries.Controllers
             }
             catch (UpliftForbiddenException ex)
             {
-                return StatusCode(StatusCodes.Status403Forbidden, new Response { Status = "Error", Message = _logger.Sanitize(ex, "You are not authorized to perform this action") });
+                var message = ex.Message == UpliftForbiddenException.RequestUpliftsDeniedMessage
+                    ? UpliftForbiddenException.RequestUpliftsDeniedMessage
+                    : _logger.Sanitize(ex, "You are not authorized to perform this action");
+                return StatusCode(StatusCodes.Status403Forbidden, new Response { Status = "Error", Message = message });
             }
             catch (InvalidOperationException ex)
             {

From 50a2cbab5fd912287eaaab81aba6e6ef5e20c1cc Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Tue, 22 Sep 2026 23:39:51 -0300
Subject: [PATCH 093/183] test(uplifts): correct current-role denial fixtures

---
 SeaHavenIndustries.Tests/WorkOrderUpliftServiceTests.cs | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/SeaHavenIndustries.Tests/WorkOrderUpliftServiceTests.cs b/SeaHavenIndustries.Tests/WorkOrderUpliftServiceTests.cs
index 86a7613..1740334 100644
--- a/SeaHavenIndustries.Tests/WorkOrderUpliftServiceTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderUpliftServiceTests.cs
@@ -155,7 +155,7 @@ public sealed class WorkOrderUpliftServiceTests
     public async Task CreateAsync_StaleAdminClaim_DeniesWhenDatabaseRoleIsNotAdmin()
     {
         await using var context = CreateContext();
-        var (workOrder, dispatch) = await SeedWorkOrderAsync(context, role: "Dispatcher");
+        var (workOrder, dispatch) = await SeedWorkOrderAsync(context, role: "Scheduler");
         var service = NewService(context);
 
         var exception = await Assert.ThrowsAsync<UpliftForbiddenException>(() => service.CreateAsync(
@@ -174,6 +174,7 @@ public sealed class WorkOrderUpliftServiceTests
     {
         await using var context = CreateContext();
         var (workOrder, dispatch) = await SeedWorkOrderAsync(context);
+        context.UserRoles.RemoveRange(context.UserRoles.Where(userRole => userRole.UserId == "dispatcher-1"));
         context.Users.Remove(context.Users.Single(user => user.Id == "dispatcher-1"));
         await context.SaveChangesAsync();
         var service = NewService(context);

From 8af9ad076fdf5a063b1a547a78bd1c7076f2085c Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <cwestall@gmail.com>
Date: Wed, 23 Sep 2026 01:24:43 -0300
Subject: [PATCH 094/183] fix: map concurrent uplift inserts to conflict

---
 .../UpliftWorkflowTests.cs                    |  35 +++++-
 .../VendorPortalControllerTests.cs            |  29 +++++
 .../WorkOrderUpliftControllerTests.cs         |  23 ++++
 .../WorkOrderUpliftServiceConflictTests.cs    | 113 ++++++++++++++++++
 .../Controllers/VendorPortalController.cs     |   5 +
 .../Controllers/WorkOrderDetailController.cs  |   4 +
 .../UpliftDispatchConflictException.cs        |   9 ++
 .../Implementation/UpliftDataService.cs       |  50 +++++++-
 .../Exceptions/UpliftConflictException.cs     |   9 ++
 .../Implementation/VendorPortalService.cs     |  10 +-
 .../Implementation/WorkOrderUpliftService.cs  |  27 +++--
 .../UpliftDataServiceTransactionTests.cs      | 101 ++++++++++++++++
 12 files changed, 401 insertions(+), 14 deletions(-)
 create mode 100644 Api.SeaHavenIndustries.Tests/WorkOrderUpliftServiceConflictTests.cs
 create mode 100644 SeaHaven.DataServices/Exceptions/UpliftDispatchConflictException.cs
 create mode 100644 SeaHaven.Services/Exceptions/UpliftConflictException.cs

diff --git a/Api.SeaHavenIndustries.Tests/UpliftWorkflowTests.cs b/Api.SeaHavenIndustries.Tests/UpliftWorkflowTests.cs
index 9b3f220..b57d36f 100644
--- a/Api.SeaHavenIndustries.Tests/UpliftWorkflowTests.cs
+++ b/Api.SeaHavenIndustries.Tests/UpliftWorkflowTests.cs
@@ -139,7 +139,8 @@ public sealed class UpliftWorkflowTests
     private static VendorPortalService NewPortalService(
         ApplicationDbContext context,
         IEmailSender emailSender,
-        IVendorDocumentStoragePort? storage = null)
+        IVendorDocumentStoragePort? storage = null,
+        IUpliftDataService? upliftData = null)
     {
         var vendorData = new VendorDataService(context);
         var tokenService = new VendorPortalTokenService(vendorData, Microsoft.Extensions.Options.Options.Create(new VendorPortalOptions()));
@@ -150,7 +151,7 @@ public sealed class UpliftWorkflowTests
         return new VendorPortalService(
             tokenService,
             new DispatchDataService(context),
-            new UpliftDataService(context),
+            upliftData ?? new UpliftDataService(context),
             commentData.Object,
             Mock.Of<IUserDataService>(),
             emailSender,
@@ -214,6 +215,36 @@ public sealed class UpliftWorkflowTests
         result.RequiredTier.Should().Be(2);
     }
 
+    [Fact]
+    public async Task RequestUplift_ConcurrentActiveRequest_MapsPersistenceConflict()
+    {
+        using var context = NewContext();
+        var (vendor, workOrder, dispatch) = await SeedAsync(context, nte: 1000m);
+        context.VendorCompletionDocuments.Add(EvidenceDocument(vendor.Id, dispatch.Id, workOrder.Id));
+        await context.SaveChangesAsync();
+
+        var upliftData = new Mock<IUpliftDataService>();
+        upliftData.Setup(x => x.HasActiveAsync(dispatch.Id, It.IsAny<CancellationToken>()))
+            .ReturnsAsync(false);
+        upliftData.Setup(x => x.StageAsync(It.IsAny<DispatchUpliftRequest>(), It.IsAny<CancellationToken>()))
+            .Returns(Task.CompletedTask);
+        upliftData.Setup(x => x.SaveChangesAsync(It.IsAny<CancellationToken>()))
+            .ThrowsAsync(new SeaHaven.DataServices.Exceptions.UpliftDispatchConflictException());
+
+        var service = NewPortalService(context, new FakeEmailSender(deliver: true), upliftData: upliftData.Object);
+        var session = await service.ResolveSessionAsync(Token, CancellationToken.None);
+        var act = () => service.RequestUpliftAsync(
+            session!,
+            dispatch.Id,
+            1500m,
+            "reason",
+            null,
+            1,
+            CancellationToken.None);
+
+        await act.Should().ThrowAsync<SeaHaven.Services.Exceptions.UpliftConflictException>();
+    }
+
     // --- Evidence scan + cross-vendor/dispatch scoping ---
 
     [Fact]
diff --git a/Api.SeaHavenIndustries.Tests/VendorPortalControllerTests.cs b/Api.SeaHavenIndustries.Tests/VendorPortalControllerTests.cs
index dd9e40e..bc097b5 100644
--- a/Api.SeaHavenIndustries.Tests/VendorPortalControllerTests.cs
+++ b/Api.SeaHavenIndustries.Tests/VendorPortalControllerTests.cs
@@ -6,6 +6,7 @@ using Microsoft.AspNetCore.Mvc;
 using Microsoft.Extensions.Logging;
 using Moq;
 using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Exceptions;
 using SeaHaven.Services.Interfaces;
 using Xunit;
 
@@ -309,6 +310,34 @@ public class VendorPortalControllerTests
         result.Should().BeOfType<BadRequestObjectResult>();
     }
 
+    [Fact]
+    public async Task RequestUplift_ConcurrentActiveRequest_ReturnsConflict()
+    {
+        var service = new Mock<IVendorPortalService>();
+        service.Setup(x => x.ResolveSessionAsync(It.IsAny<string>(), It.IsAny<CancellationToken>()))
+            .ReturnsAsync(Session);
+        service.Setup(x => x.RequestUpliftAsync(
+                Session,
+                10,
+                1500m,
+                "Need more parts",
+                It.IsAny<string?>(),
+                It.IsAny<int?>(),
+                It.IsAny<CancellationToken>()))
+            .ThrowsAsync(new UpliftConflictException());
+        var controller = NewController(service);
+
+        var result = await controller.RequestUplift(10, new VendorPortalController.UpliftRequestBody
+        {
+            RequestedNTE = 1500m,
+            Reason = "Need more parts",
+        });
+
+        var conflict = result.Should().BeOfType<ConflictObjectResult>().Subject;
+        conflict.StatusCode.Should().Be(StatusCodes.Status409Conflict);
+        conflict.Value.Should().NotBeNull();
+    }
+
     [Fact]
     public async Task RequestUplift_Success_ReturnsResult()
     {
diff --git a/Api.SeaHavenIndustries.Tests/WorkOrderUpliftControllerTests.cs b/Api.SeaHavenIndustries.Tests/WorkOrderUpliftControllerTests.cs
index b3cdbfc..3784558 100644
--- a/Api.SeaHavenIndustries.Tests/WorkOrderUpliftControllerTests.cs
+++ b/Api.SeaHavenIndustries.Tests/WorkOrderUpliftControllerTests.cs
@@ -6,6 +6,7 @@ using Microsoft.AspNetCore.Mvc;
 using Microsoft.Extensions.Logging;
 using Moq;
 using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Exceptions;
 using SeaHaven.Services.Interfaces;
 using System.Security.Claims;
 using Xunit;
@@ -78,6 +79,28 @@ public sealed class WorkOrderUpliftControllerTests
         Assert.Equal(12, created.Id);
     }
 
+    [Fact]
+    public async Task CreateUplift_ConcurrentActiveRequest_ReturnsConflict()
+    {
+        var service = new Mock<IWorkOrderUpliftService>();
+        service.Setup(x => x.CreateAsync(
+                7,
+                It.IsAny<CreateWorkOrderUpliftRequestDto>(),
+                It.IsAny<ClaimsPrincipal>(),
+                It.IsAny<CancellationToken>()))
+            .ThrowsAsync(new UpliftConflictException());
+
+        var controller = NewController(service);
+        var result = await controller.CreateUplift(
+            7,
+            new CreateWorkOrderUpliftRequestDto { Amount = 750m, Notes = "Extra labor" },
+            CancellationToken.None);
+
+        var conflict = result.Should().BeOfType<ConflictObjectResult>().Subject;
+        conflict.StatusCode.Should().Be(StatusCodes.Status409Conflict);
+        conflict.Value.Should().NotBeNull();
+    }
+
     [Fact]
     public async Task CancelUplift_NotFound_Returns404()
     {
diff --git a/Api.SeaHavenIndustries.Tests/WorkOrderUpliftServiceConflictTests.cs b/Api.SeaHavenIndustries.Tests/WorkOrderUpliftServiceConflictTests.cs
new file mode 100644
index 0000000..129e360
--- /dev/null
+++ b/Api.SeaHavenIndustries.Tests/WorkOrderUpliftServiceConflictTests.cs
@@ -0,0 +1,113 @@
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using Moq;
+using SeaHaven.DataServices.Exceptions;
+using SeaHaven.DataServices.Interfaces;
+using SeaHaven.Services.Configuration;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Exceptions;
+using SeaHaven.Services.Implementation;
+using SeaHaven.Services.Interfaces;
+using System.Security.Claims;
+using Xunit;
+
+namespace Api.SeaHavenIndustries.Tests;
+
+public sealed class WorkOrderUpliftServiceConflictTests
+{
+    [Fact]
+    public async Task CreateAsync_DifferentWorkOrdersSharingDispatch_MapsConcurrentInsertConflict()
+    {
+        var upliftData = new Mock<IUpliftDataService>();
+        var bothAtInsert = new TaskCompletionSource(TaskCreationOptions.RunContinuationsAsynchronously);
+        var savesArrived = 0;
+        var winner = 0;
+
+        upliftData.Setup(x => x.ExecuteWorkOrderMutationAsync(
+                It.IsAny<int>(),
+                It.IsAny<Func<CancellationToken, Task<WorkOrderUpliftDto?>>>(),
+                It.IsAny<CancellationToken>()))
+            .Returns<int, Func<CancellationToken, Task<WorkOrderUpliftDto?>>, CancellationToken>(
+                (_, work, cancellationToken) => work(cancellationToken));
+        upliftData.Setup(x => x.HasPendingForWorkOrderAsync(It.IsAny<int>(), It.IsAny<CancellationToken>()))
+            .ReturnsAsync(false);
+        upliftData.Setup(x => x.HasActiveAsync(10, It.IsAny<CancellationToken>()))
+            .ReturnsAsync(false);
+        upliftData.Setup(x => x.SumAutoApprovedAmountForWorkOrderAsync(It.IsAny<int>(), It.IsAny<CancellationToken>()))
+            .ReturnsAsync(0m);
+        upliftData.Setup(x => x.StageAsync(It.IsAny<DispatchUpliftRequest>(), It.IsAny<CancellationToken>()))
+            .Returns(Task.CompletedTask);
+        upliftData.Setup(x => x.SaveChangesAsync(It.IsAny<CancellationToken>()))
+            .Returns(async () =>
+            {
+                if (Interlocked.Increment(ref savesArrived) == 2)
+                    bothAtInsert.TrySetResult();
+
+                await bothAtInsert.Task.WaitAsync(TimeSpan.FromSeconds(5));
+                if (Interlocked.Exchange(ref winner, 1) != 0)
+                    throw new UpliftDispatchConflictException();
+            });
+
+        var detailData = new Mock<IWorkOrderDetailDataService>();
+        detailData.Setup(x => x.ExistsAsync(It.IsAny<int>(), It.IsAny<CancellationToken>(), It.IsAny<int?>()))
+            .ReturnsAsync(true);
+        detailData.Setup(x => x.GetWorkOrderForMediaAsync(It.IsAny<int>(), It.IsAny<CancellationToken>(), It.IsAny<int?>()))
+            .ReturnsAsync((int workOrderId, CancellationToken _, int? _) => new WorkOrder
+            {
+                Id = workOrderId,
+                PrimaryDispatchId = 10,
+                WorkOrderType = WorkOrderType.PM,
+                LifecycleStatus = LifecycleStatus.Scheduled,
+            });
+
+        var dispatchData = new Mock<IDispatchDataService>();
+        dispatchData.Setup(x => x.GetByIdAsync(10))
+            .ReturnsAsync(new Dispatch { Id = 10, Status = "Scheduled", NTEAmount = 1000m });
+        dispatchData.Setup(x => x.StageAuditLogAsync(It.IsAny<WorkOrderAuditLog>(), It.IsAny<CancellationToken>()))
+            .Returns(Task.CompletedTask);
+
+        var accountResolver = new Mock<IWorkOrderAccountResolver>();
+        accountResolver.Setup(x => x.ResolveAccountFilter(It.IsAny<ClaimsPrincipal>())).Returns((int?)null);
+        var userData = new Mock<IUserDataService>();
+        userData.Setup(x => x.GetDisplayNamesByIdsAsync(It.IsAny<IEnumerable<string>>()))
+            .ReturnsAsync(new Dictionary<string, string>());
+
+        var service = new WorkOrderUpliftService(
+            upliftData.Object,
+            dispatchData.Object,
+            detailData.Object,
+            accountResolver.Object,
+            userData.Object,
+            TimeProvider.System,
+            Microsoft.Extensions.Options.Options.Create(new ApprovalsOptions
+            {
+                UpliftTier1MaxUsd = 2500m,
+                Tier1Roles = new[] { "Approver" },
+                Tier2Roles = new[] { "Manager" },
+            }));
+        var user = new ClaimsPrincipal(new ClaimsIdentity(
+            new[] { new Claim(ClaimTypes.NameIdentifier, "dispatcher-1") },
+            "test"));
+
+        static async Task<(WorkOrderUpliftDto? Result, Exception? Error)> Capture(
+            Func<Task<WorkOrderUpliftDto?>> create)
+        {
+            try
+            {
+                return (await create(), null);
+            }
+            catch (Exception exception)
+            {
+                return (null, exception);
+            }
+        }
+
+        var outcomes = await Task.WhenAll(
+            Capture(() => service.CreateAsync(1, new CreateWorkOrderUpliftRequestDto { Amount = 500m }, user, CancellationToken.None)),
+            Capture(() => service.CreateAsync(2, new CreateWorkOrderUpliftRequestDto { Amount = 500m }, user, CancellationToken.None)));
+
+        Assert.Single(outcomes, outcome => outcome.Result != null);
+        Assert.IsType<UpliftConflictException>(Assert.Single(outcomes, outcome => outcome.Error != null).Error);
+        upliftData.Verify(x => x.HasActiveAsync(10, It.IsAny<CancellationToken>()), Times.Exactly(2));
+    }
+}
diff --git a/Api.SeaHavenIndustries/Controllers/VendorPortalController.cs b/Api.SeaHavenIndustries/Controllers/VendorPortalController.cs
index 39dd90b..636f963 100644
--- a/Api.SeaHavenIndustries/Controllers/VendorPortalController.cs
+++ b/Api.SeaHavenIndustries/Controllers/VendorPortalController.cs
@@ -4,6 +4,7 @@ using Microsoft.AspNetCore.Http;
 using Microsoft.AspNetCore.Mvc;
 using Microsoft.Extensions.Logging;
 using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Exceptions;
 using SeaHaven.Services.Interfaces;
 
 namespace Api.SeaHavenIndustries.Controllers
@@ -217,6 +218,10 @@ namespace Api.SeaHavenIndustries.Controllers
                 var result = await _portalService.RequestUpliftAsync(session, id, body?.RequestedNTE ?? 0m, body?.Reason, body?.RequestKey, body?.EvidenceDocumentId, cancellationToken);
                 return Ok(new DataResponse { Status = "Success", Data = result });
             }
+            catch (UpliftConflictException ex)
+            {
+                return Conflict(new Response { Status = "Error", Message = ex.Message });
+            }
             catch (KeyNotFoundException)
             {
                 return NotFound(new Response { Status = "Error", Message = "Dispatch not found" });
diff --git a/Api.SeaHavenIndustries/Controllers/WorkOrderDetailController.cs b/Api.SeaHavenIndustries/Controllers/WorkOrderDetailController.cs
index d975b32..742eaaf 100644
--- a/Api.SeaHavenIndustries/Controllers/WorkOrderDetailController.cs
+++ b/Api.SeaHavenIndustries/Controllers/WorkOrderDetailController.cs
@@ -164,6 +164,10 @@ namespace Api.SeaHavenIndustries.Controllers
                     return NotFound(new Response { Status = "Error", Message = "Work order not found." });
                 return Ok(new DataResponse { Status = "Success", Data = created });
             }
+            catch (UpliftConflictException ex)
+            {
+                return Conflict(new Response { Status = "Error", Message = ex.Message });
+            }
             catch (KeyNotFoundException ex)
             {
                 return NotFound(new Response { Status = "Error", Message = _logger.Sanitize(ex, "Resource not found") });
diff --git a/SeaHaven.DataServices/Exceptions/UpliftDispatchConflictException.cs b/SeaHaven.DataServices/Exceptions/UpliftDispatchConflictException.cs
new file mode 100644
index 0000000..0063ebd
--- /dev/null
+++ b/SeaHaven.DataServices/Exceptions/UpliftDispatchConflictException.cs
@@ -0,0 +1,9 @@
+namespace SeaHaven.DataServices.Exceptions;
+
+public sealed class UpliftDispatchConflictException : Exception
+{
+    public UpliftDispatchConflictException()
+        : base("An active uplift request already exists for this dispatch.")
+    {
+    }
+}
diff --git a/SeaHaven.DataServices/Implementation/UpliftDataService.cs b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
index 1d72cf5..a41d487 100644
--- a/SeaHaven.DataServices/Implementation/UpliftDataService.cs
+++ b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
@@ -2,6 +2,7 @@ using System.Collections.Concurrent;
 using Data.SeaHavenIndustries;
 using Data.SeaHavenIndustries.Enums;
 using Microsoft.EntityFrameworkCore;
+using SeaHaven.DataServices.Exceptions;
 using SeaHaven.DataServices.Interfaces;
 
 namespace SeaHaven.DataServices.Implementation
@@ -525,7 +526,54 @@ namespace SeaHaven.DataServices.Implementation
 
         public async Task SaveChangesAsync(CancellationToken cancellationToken)
         {
-            await _context.SaveChangesAsync(cancellationToken);
+            try
+            {
+                await _context.SaveChangesAsync(cancellationToken);
+            }
+            catch (DbUpdateException exception) when (IsActiveDispatchUniqueIndexViolation(exception))
+            {
+                throw new UpliftDispatchConflictException();
+            }
+        }
+
+        private bool IsActiveDispatchUniqueIndexViolation(DbUpdateException exception)
+        {
+            var provider = _context.Database.ProviderName;
+            var databaseException = exception.GetBaseException();
+            var exceptionType = databaseException.GetType();
+
+            if (provider?.Contains("SqlServer", StringComparison.OrdinalIgnoreCase) == true
+                && exceptionType.FullName == "Microsoft.Data.SqlClient.SqlException")
+            {
+                var number = exceptionType.GetProperty("Number")?.GetValue(databaseException) as int?;
+                return number is 2601 or 2627
+                    && databaseException.Message.Contains(
+                        "IX_DispatchUpliftRequests_DispatchId",
+                        StringComparison.OrdinalIgnoreCase);
+            }
+
+            if (provider?.Contains("Sqlite", StringComparison.OrdinalIgnoreCase) == true
+                && exceptionType.FullName == "Microsoft.Data.Sqlite.SqliteException")
+            {
+                var extendedCode = exceptionType.GetProperty("SqliteExtendedErrorCode")?.GetValue(databaseException) as int?;
+                const string uniqueConstraintPrefix = "UNIQUE constraint failed: ";
+                var message = databaseException.Message;
+                var prefixIndex = message.IndexOf(uniqueConstraintPrefix, StringComparison.OrdinalIgnoreCase);
+                if (extendedCode != 2067 || prefixIndex < 0)
+                    return false;
+
+                var columnsStart = prefixIndex + uniqueConstraintPrefix.Length;
+                var columnsEnd = message.IndexOf('\'', columnsStart);
+                if (columnsEnd < 0)
+                    columnsEnd = message.Length;
+                var columns = message[columnsStart..columnsEnd].Trim();
+                return string.Equals(
+                    columns,
+                    "DispatchUpliftRequests.DispatchId",
+                    StringComparison.OrdinalIgnoreCase);
+            }
+
+            return false;
         }
 
         public async Task<T> ExecuteWorkOrderMutationAsync<T>(
diff --git a/SeaHaven.Services/Exceptions/UpliftConflictException.cs b/SeaHaven.Services/Exceptions/UpliftConflictException.cs
new file mode 100644
index 0000000..9e21b4e
--- /dev/null
+++ b/SeaHaven.Services/Exceptions/UpliftConflictException.cs
@@ -0,0 +1,9 @@
+namespace SeaHaven.Services.Exceptions;
+
+public sealed class UpliftConflictException : Exception
+{
+    public UpliftConflictException()
+        : base("An active uplift request already exists for the associated dispatch. Refresh and retry.")
+    {
+    }
+}
diff --git a/SeaHaven.Services/Implementation/VendorPortalService.cs b/SeaHaven.Services/Implementation/VendorPortalService.cs
index 5fc5140..c595809 100644
--- a/SeaHaven.Services/Implementation/VendorPortalService.cs
+++ b/SeaHaven.Services/Implementation/VendorPortalService.cs
@@ -4,6 +4,7 @@ using Microsoft.Extensions.Options;
 using SeaHaven.DataServices.Interfaces;
 using SeaHaven.Services.Configuration;
 using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Exceptions;
 using SeaHaven.Services.Interfaces;
 
 namespace SeaHaven.Services.Implementation
@@ -651,7 +652,14 @@ namespace SeaHaven.Services.Implementation
                 CreatedAt = now
             }, cancellationToken);
 
-            await _upliftData.SaveChangesAsync(cancellationToken);
+            try
+            {
+                await _upliftData.SaveChangesAsync(cancellationToken);
+            }
+            catch (SeaHaven.DataServices.Exceptions.UpliftDispatchConflictException)
+            {
+                throw new UpliftConflictException();
+            }
 
             // Notification is best-effort and persisted separately from workflow state: a failure
             // never destroys the actionable request (the lifecycle sweep retries by sentinel).
diff --git a/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs b/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs
index 149aeaa..cb05911 100644
--- a/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs
@@ -69,17 +69,24 @@ namespace SeaHaven.Services.Implementation
             var notes = request.Notes?.Trim() ?? "";
             var accountFilter = _accountResolver.ResolveAccountFilter(user);
 
-            return await _upliftData.ExecuteWorkOrderMutationAsync(
-                workOrderId,
-                ct => CreateLockedAsync(
+            try
+            {
+                return await _upliftData.ExecuteWorkOrderMutationAsync(
                     workOrderId,
-                    request.Amount,
-                    notes,
-                    userId,
-                    requesterName,
-                    accountFilter,
-                    ct),
-                cancellationToken);
+                    ct => CreateLockedAsync(
+                        workOrderId,
+                        request.Amount,
+                        notes,
+                        userId,
+                        requesterName,
+                        accountFilter,
+                        ct),
+                    cancellationToken);
+            }
+            catch (SeaHaven.DataServices.Exceptions.UpliftDispatchConflictException)
+            {
+                throw new UpliftConflictException();
+            }
         }
 
         private async Task<WorkOrderUpliftDto?> CreateLockedAsync(
diff --git a/SeaHavenIndustries.Tests/UpliftDataServiceTransactionTests.cs b/SeaHavenIndustries.Tests/UpliftDataServiceTransactionTests.cs
index f585766..1742f32 100644
--- a/SeaHavenIndustries.Tests/UpliftDataServiceTransactionTests.cs
+++ b/SeaHavenIndustries.Tests/UpliftDataServiceTransactionTests.cs
@@ -9,6 +9,107 @@ namespace SeaHavenIndustries.Tests;
 
 public sealed class UpliftDataServiceTransactionTests
 {
+    [Fact]
+    public async Task SaveChangesAsync_ActiveUpliftOnSameDispatch_MapsConcurrentInsertConflict()
+    {
+        await using var connection = new SqliteConnection("DataSource=:memory:");
+        await connection.OpenAsync();
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseSqlite(connection)
+            .Options;
+
+        await using var context = new ApplicationDbContext(options);
+        await context.Database.EnsureCreatedAsync();
+        context.Vendors.Add(new Vendor { Id = 1, CompanyName = "Acme HVAC" });
+        context.Dispatches.Add(new Dispatch
+        {
+            Id = 10,
+            VendorId = 1,
+            DispatchNumber = "DIS-10",
+            Status = "Scheduled",
+        });
+        await context.SaveChangesAsync();
+
+        var data = new UpliftDataService(context);
+        await data.StageAsync(new DispatchUpliftRequest
+        {
+            DispatchId = 10,
+            RequestedNTE = 1500m,
+            Status = "Pending",
+            RequiredTier = 1,
+            NotificationStatus = "Pending",
+        }, CancellationToken.None);
+        await data.SaveChangesAsync(CancellationToken.None);
+
+        // The database index is the final guard when competing requests pass
+        // their dispatch-scoped active-request checks.
+        var exception = await Assert.ThrowsAsync<SeaHaven.DataServices.Exceptions.UpliftDispatchConflictException>(
+            () => data.ExecuteWorkOrderMutationAsync(
+                2,
+                async cancellationToken =>
+                {
+                    await data.StageAsync(new DispatchUpliftRequest
+                    {
+                        DispatchId = 10,
+                        RequestedNTE = 1700m,
+                        Status = "Pending",
+                        RequiredTier = 1,
+                        NotificationStatus = "Pending",
+                    }, cancellationToken);
+                    await data.SaveChangesAsync(cancellationToken);
+                    return true;
+                },
+                CancellationToken.None));
+        Assert.Equal("An active uplift request already exists for this dispatch.", exception.Message);
+        Assert.Equal(1, await context.DispatchUpliftRequests.CountAsync());
+    }
+
+    [Fact]
+    public async Task SaveChangesAsync_RequestKeyConflict_IsNotMappedToActiveDispatchConflict()
+    {
+        await using var connection = new SqliteConnection("DataSource=:memory:");
+        await connection.OpenAsync();
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseSqlite(connection)
+            .Options;
+
+        await using var context = new ApplicationDbContext(options);
+        await context.Database.EnsureCreatedAsync();
+        context.Vendors.Add(new Vendor { Id = 1, CompanyName = "Acme HVAC" });
+        context.Dispatches.Add(new Dispatch
+        {
+            Id = 10,
+            VendorId = 1,
+            DispatchNumber = "DIS-10",
+            Status = "Scheduled",
+        });
+        await context.SaveChangesAsync();
+
+        var data = new UpliftDataService(context);
+        await data.StageAsync(new DispatchUpliftRequest
+        {
+            DispatchId = 10,
+            RequestKey = "same-key",
+            RequestedNTE = 1500m,
+            Status = "Approved",
+            RequiredTier = 1,
+            NotificationStatus = "Sent",
+        }, CancellationToken.None);
+        await data.SaveChangesAsync(CancellationToken.None);
+        await data.StageAsync(new DispatchUpliftRequest
+        {
+            DispatchId = 10,
+            RequestKey = "same-key",
+            RequestedNTE = 1700m,
+            Status = "Approved",
+            RequiredTier = 1,
+            NotificationStatus = "Sent",
+        }, CancellationToken.None);
+
+        await Assert.ThrowsAsync<DbUpdateException>(
+            () => data.SaveChangesAsync(CancellationToken.None));
+    }
+
     [Fact]
     public async Task ExecuteWorkOrderMutationAsync_ReleasesGate_WhenTransactionInitializationFails()
     {

From 0ca9b767edafe5eb6d92452e5a14d0de4dc89fa7 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <cwestall@gmail.com>
Date: Wed, 23 Sep 2026 01:39:16 -0300
Subject: [PATCH 095/183] fix: distinguish uplift request key conflicts

---
 .../Implementation/UpliftDataService.cs                | 10 +++++++---
 SeaHaven.DataServices/Properties/AssemblyInfo.cs       |  1 +
 .../UpliftDataServiceTransactionTests.cs               | 10 ++++++++++
 3 files changed, 18 insertions(+), 3 deletions(-)

diff --git a/SeaHaven.DataServices/Implementation/UpliftDataService.cs b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
index a41d487..64df777 100644
--- a/SeaHaven.DataServices/Implementation/UpliftDataService.cs
+++ b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
@@ -547,9 +547,7 @@ namespace SeaHaven.DataServices.Implementation
             {
                 var number = exceptionType.GetProperty("Number")?.GetValue(databaseException) as int?;
                 return number is 2601 or 2627
-                    && databaseException.Message.Contains(
-                        "IX_DispatchUpliftRequests_DispatchId",
-                        StringComparison.OrdinalIgnoreCase);
+                    && IsActiveDispatchIndexViolationMessage(databaseException.Message);
             }
 
             if (provider?.Contains("Sqlite", StringComparison.OrdinalIgnoreCase) == true
@@ -576,6 +574,12 @@ namespace SeaHaven.DataServices.Implementation
             return false;
         }
 
+        internal static bool IsActiveDispatchIndexViolationMessage(string message)
+        {
+            const string activeDispatchIndex = "'IX_DispatchUpliftRequests_DispatchId'";
+            return message.Contains(activeDispatchIndex, StringComparison.OrdinalIgnoreCase);
+        }
+
         public async Task<T> ExecuteWorkOrderMutationAsync<T>(
             int workOrderId,
             Func<CancellationToken, Task<T>> work,
diff --git a/SeaHaven.DataServices/Properties/AssemblyInfo.cs b/SeaHaven.DataServices/Properties/AssemblyInfo.cs
index 75fc406..15ea248 100644
--- a/SeaHaven.DataServices/Properties/AssemblyInfo.cs
+++ b/SeaHaven.DataServices/Properties/AssemblyInfo.cs
@@ -1,3 +1,4 @@
 using System.Runtime.CompilerServices;
 
 [assembly: InternalsVisibleTo("Api.SeaHavenIndustries.Tests")]
+[assembly: InternalsVisibleTo("SeaHavenIndustries.Tests")]
diff --git a/SeaHavenIndustries.Tests/UpliftDataServiceTransactionTests.cs b/SeaHavenIndustries.Tests/UpliftDataServiceTransactionTests.cs
index 1742f32..2825fcd 100644
--- a/SeaHavenIndustries.Tests/UpliftDataServiceTransactionTests.cs
+++ b/SeaHavenIndustries.Tests/UpliftDataServiceTransactionTests.cs
@@ -9,6 +9,16 @@ namespace SeaHavenIndustries.Tests;
 
 public sealed class UpliftDataServiceTransactionTests
 {
+    [Theory]
+    [InlineData("Cannot insert duplicate key row with unique index 'IX_DispatchUpliftRequests_DispatchId'.", true)]
+    [InlineData("Cannot insert duplicate key row with unique index 'IX_DispatchUpliftRequests_DispatchId_RequestKey'.", false)]
+    public void IsActiveDispatchIndexViolationMessage_MatchesOnlyTheActiveDispatchIndex(
+        string message,
+        bool expected)
+    {
+        Assert.Equal(expected, UpliftDataService.IsActiveDispatchIndexViolationMessage(message));
+    }
+
     [Fact]
     public async Task SaveChangesAsync_ActiveUpliftOnSameDispatch_MapsConcurrentInsertConflict()
     {

From 3b626cca58e92aec5701a2f69803af5e0768c428 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <cwestall@gmail.com>
Date: Wed, 23 Sep 2026 03:35:23 -0300
Subject: [PATCH 096/183] fix: make team member creation atomic

---
 .../TeamMemberServiceTests.cs                 |  54 +++++-
 .../Implementation/UserDataService.cs         |  19 ++
 .../Interfaces/IUserDataService.cs            |   1 +
 .../Implementation/TeamMemberService.cs       |  68 ++++----
 .../TeamMemberCreateTransactionTests.cs       | 162 ++++++++++++++++++
 5 files changed, 273 insertions(+), 31 deletions(-)
 create mode 100644 SeaHavenIndustries.Tests/TeamMemberCreateTransactionTests.cs

diff --git a/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs b/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs
index 5f5204b..cd2ced8 100644
--- a/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs
@@ -319,7 +319,7 @@ public sealed class TeamMemberServiceTests
     [Fact]
     public async Task Create_ConcurrentDuplicateEmail_ReturnsAlreadyInUseInsteadOf500()
     {
-        var service = NewService(out var userManager, out var roleManager, out _, out _, out _, out _);
+        var service = NewService(out var userManager, out var roleManager, out _, out _, out var userData, out _);
         userManager
             .Setup(manager => manager.FindByEmailAsync(It.IsAny<string>()))
             .ReturnsAsync((ApplicationUser?)null);
@@ -332,10 +332,57 @@ public sealed class TeamMemberServiceTests
 
         result.Success.Should().BeFalse();
         result.Error.Should().Be("Email is already in use.");
+        userData.Verify(
+            data => data.ExecuteTransactionalAsync(It.IsAny<Func<CancellationToken, Task>>(), It.IsAny<CancellationToken>()),
+            Times.Once);
         userManager.Verify(manager => manager.AddToRoleAsync(It.IsAny<ApplicationUser>(), It.IsAny<string>()), Times.Never);
         userManager.Verify(manager => manager.DeleteAsync(It.IsAny<ApplicationUser>()), Times.Never);
     }
 
+    [Fact]
+    public async Task Create_MidSequencePersistenceFailure_PropagatesWithoutCompensation()
+    {
+        var service = NewService(out var userManager, out var roleManager, out var areas, out var overrides, out _, out _);
+        ApplicationUser? created = null;
+        userManager
+            .Setup(manager => manager.FindByEmailAsync(It.IsAny<string>()))
+            .ReturnsAsync((ApplicationUser?)null);
+        userManager
+            .Setup(manager => manager.CreateAsync(It.IsAny<ApplicationUser>()))
+            .Callback<ApplicationUser>(user =>
+            {
+                user.Id = "mid-fail-user";
+                created = user;
+            })
+            .ReturnsAsync(IdentityResult.Success);
+        userManager
+            .Setup(manager => manager.AddToRoleAsync(It.IsAny<ApplicationUser>(), "Dispatcher"))
+            .ReturnsAsync(IdentityResult.Success);
+        roleManager.Setup(manager => manager.RoleExistsAsync("Dispatcher")).ReturnsAsync(true);
+        areas
+            .Setup(data => data.ReplaceAsync(
+                "mid-fail-user",
+                It.Is<IReadOnlyCollection<string>>(value => value.SequenceEqual(new[] { "East", "West" })),
+                It.IsAny<CancellationToken>()))
+            .Returns(Task.CompletedTask);
+        overrides
+            .Setup(data => data.SetOverridesAsync(
+                "mid-fail-user",
+                It.IsAny<IReadOnlyDictionary<string, UserPermissionState>>(),
+                It.IsAny<CancellationToken>()))
+            .ThrowsAsync(new InvalidOperationException("injected mid-sequence failure"));
+
+        var failure = await Record.ExceptionAsync(() => service.CreateAsync(ValidRequest(), Admin(), CancellationToken.None));
+
+        failure.Should().BeOfType<InvalidOperationException>()
+            .Which.Message.Should().Be("injected mid-sequence failure");
+        created.Should().NotBeNull();
+        areas.Verify(
+            data => data.ReplaceAsync("mid-fail-user", It.IsAny<IReadOnlyCollection<string>>(), It.IsAny<CancellationToken>()),
+            Times.Once);
+        userManager.Verify(manager => manager.DeleteAsync(It.IsAny<ApplicationUser>()), Times.Never);
+    }
+
     private static TeamMemberService NewService(
         out Mock<UserManager<ApplicationUser>> userManager,
         out Mock<RoleManager<IdentityRole>> roleManager,
@@ -350,6 +397,11 @@ public sealed class TeamMemberServiceTests
         overrides = new Mock<ITeamPermissionOverrideDataService>();
         userData = new Mock<IUserDataService>();
         permissions = new Mock<ITeamPermissionService>();
+        userData
+            .Setup(data => data.ExecuteTransactionalAsync(
+                It.IsAny<Func<CancellationToken, Task>>(),
+                It.IsAny<CancellationToken>()))
+            .Returns<Func<CancellationToken, Task>, CancellationToken>((callback, token) => callback(token));
         return new TeamMemberService(
             userManager.Object,
             roleManager.Object,
diff --git a/SeaHaven.DataServices/Implementation/UserDataService.cs b/SeaHaven.DataServices/Implementation/UserDataService.cs
index 374d34e..32ac851 100644
--- a/SeaHaven.DataServices/Implementation/UserDataService.cs
+++ b/SeaHaven.DataServices/Implementation/UserDataService.cs
@@ -166,6 +166,25 @@ namespace SeaHaven.DataServices.Implementation
             await transaction.CommitAsync(cancellationToken);
         }
 
+        public async Task ExecuteTransactionalAsync(
+            Func<CancellationToken, Task> callback,
+            CancellationToken cancellationToken)
+        {
+            ArgumentNullException.ThrowIfNull(callback);
+
+            await using var transaction = await _context.Database.BeginTransactionAsync(cancellationToken);
+            try
+            {
+                await callback(cancellationToken);
+                await transaction.CommitAsync(cancellationToken);
+            }
+            catch
+            {
+                await transaction.RollbackAsync(CancellationToken.None);
+                throw;
+            }
+        }
+
         public async Task<string?> GetEmailByIdAsync(
             string userId, CancellationToken cancellationToken)
         {
diff --git a/SeaHaven.DataServices/Interfaces/IUserDataService.cs b/SeaHaven.DataServices/Interfaces/IUserDataService.cs
index 0a60d5c..3c74dcf 100644
--- a/SeaHaven.DataServices/Interfaces/IUserDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IUserDataService.cs
@@ -18,6 +18,7 @@ namespace SeaHaven.DataServices.Interfaces
         Task<ApplicationUser?> GetByEmailNormalizedAsync(string email, CancellationToken cancellationToken);
         Task UpdateUserAsync(ApplicationUser user, CancellationToken cancellationToken);
         Task DeleteUserWithCascadeAsync(ApplicationUser user, CancellationToken cancellationToken);
+        Task ExecuteTransactionalAsync(Func<CancellationToken, Task> callback, CancellationToken cancellationToken);
         Task<string?> GetEmailByIdAsync(string userId, CancellationToken cancellationToken);
         Task<IReadOnlyDictionary<string, string>> GetDisplayNamesByIdsAsync(IEnumerable<string> ids);
     }
diff --git a/SeaHaven.Services/Implementation/TeamMemberService.cs b/SeaHaven.Services/Implementation/TeamMemberService.cs
index ba2cd2b..faf64f3 100644
--- a/SeaHaven.Services/Implementation/TeamMemberService.cs
+++ b/SeaHaven.Services/Implementation/TeamMemberService.cs
@@ -52,10 +52,6 @@ public sealed class TeamMemberService : ITeamMemberService
         if (await _userManager.FindByEmailAsync(email!) is not null)
             return Failure("Email is already in use.");
 
-        var roleError = await EnsureRoleAsync(role!);
-        if (roleError is not null)
-            return Failure(roleError);
-
         var now = DateTime.UtcNow;
         var user = new ApplicationUser
         {
@@ -72,39 +68,44 @@ public sealed class TeamMemberService : ITeamMemberService
             PendingRegistrationCreatedDate = now
         };
 
-        IdentityResult createResult;
         try
         {
-            createResult = await _userManager.CreateAsync(user);
-        }
-        catch (DbUpdateException)
-        {
-            // A concurrent create won the race on the unique user-name index
-            // between the FindByEmailAsync check above and this insert. Surface
-            // the same conflict message instead of letting the database
-            // exception bubble up as a 500.
-            return Failure("Email is already in use.");
-        }
+            await _userDataService.ExecuteTransactionalAsync(
+                async transactionCancellationToken =>
+                {
+                    var roleError = await EnsureRoleAsync(role!);
+                    if (roleError is not null)
+                        throw new TeamMemberCreateException(roleError);
 
-        if (!createResult.Succeeded)
-            return Failure(createResult.Errors.FirstOrDefault()?.Description ?? "Unable to create team member.");
+                    IdentityResult createResult;
+                    try
+                    {
+                        createResult = await _userManager.CreateAsync(user);
+                    }
+                    catch (DbUpdateException)
+                    {
+                        // A concurrent create won the race on the unique user-name index
+                        // between the FindByEmailAsync check above and this insert. Surface
+                        // the same conflict message instead of letting the database
+                        // exception bubble up as a 500.
+                        throw new TeamMemberCreateException("Email is already in use.");
+                    }
 
-        var addRoleResult = await _userManager.AddToRoleAsync(user, role!);
-        if (!addRoleResult.Succeeded)
-        {
-            await _userManager.DeleteAsync(user);
-            return Failure(addRoleResult.Errors.FirstOrDefault()?.Description ?? "Unable to assign role.");
-        }
+                    if (!createResult.Succeeded)
+                        throw new TeamMemberCreateException(createResult.Errors.FirstOrDefault()?.Description ?? "Unable to create team member.");
 
-        try
-        {
-            await _areaDataService.ReplaceAsync(user.Id, areas!, cancellationToken);
-            await _permissionDataService.SetOverridesAsync(user.Id, overrides!, cancellationToken);
+                    var addRoleResult = await _userManager.AddToRoleAsync(user, role!);
+                    if (!addRoleResult.Succeeded)
+                        throw new TeamMemberCreateException(addRoleResult.Errors.FirstOrDefault()?.Description ?? "Unable to assign role.");
+
+                    await _areaDataService.ReplaceAsync(user.Id, areas!, transactionCancellationToken);
+                    await _permissionDataService.SetOverridesAsync(user.Id, overrides!, transactionCancellationToken);
+                },
+                cancellationToken);
         }
-        catch
+        catch (TeamMemberCreateException exception)
         {
-            await _userManager.DeleteAsync(user);
-            throw;
+            return Failure(exception.Message);
         }
 
         return new CreateTeamMemberOutcomeDTO
@@ -391,6 +392,13 @@ public sealed class TeamMemberService : ITeamMemberService
     private static CreateTeamMemberOutcomeDTO Failure(string error) =>
         new() { Success = false, Error = error };
 
+    private sealed class TeamMemberCreateException : Exception
+    {
+        public TeamMemberCreateException(string error) : base(error)
+        {
+        }
+    }
+
     private static TeamMemberOperationOutcomeDTO OperationFailure(string error) =>
         new() { Success = false, Error = error };
 }
diff --git a/SeaHavenIndustries.Tests/TeamMemberCreateTransactionTests.cs b/SeaHavenIndustries.Tests/TeamMemberCreateTransactionTests.cs
new file mode 100644
index 0000000..43c2d40
--- /dev/null
+++ b/SeaHavenIndustries.Tests/TeamMemberCreateTransactionTests.cs
@@ -0,0 +1,162 @@
+using System.Security.Claims;
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using Microsoft.AspNetCore.Identity;
+using Microsoft.AspNetCore.Identity.EntityFrameworkCore;
+using Microsoft.Data.Sqlite;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Metadata;
+using Microsoft.Extensions.Logging.Abstractions;
+using SeaHaven.DataServices.Dto;
+using SeaHaven.DataServices.Implementation;
+using SeaHaven.DataServices.Interfaces;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Implementation;
+
+namespace SeaHavenIndustries.Tests;
+
+public sealed class TeamMemberCreateTransactionTests
+{
+    [Fact]
+    public async Task Create_MidSequencePersistenceFailure_RollsBackAllMemberRows()
+    {
+        await using var connection = new SqliteConnection("Data Source=:memory:;Foreign Keys=True");
+        await connection.OpenAsync();
+
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseSqlite(connection)
+            .Options;
+
+        await using (var setup = new SqliteTeamMemberTestDbContext(options))
+            await setup.Database.EnsureCreatedAsync();
+
+        await using (var createScope = new SqliteTeamMemberTestDbContext(options))
+        {
+            var permissionData = new ThrowingAfterPersistPermissionDataService(
+                new TeamPermissionOverrideDataService(createScope));
+            var service = new TeamMemberService(
+                CreateUserManager(createScope),
+                CreateRoleManager(createScope),
+                new UserServiceAreaDataService(createScope),
+                permissionData,
+                new UserDataService(createScope),
+                permissionService: null!);
+
+            var failure = await Record.ExceptionAsync(() => service.CreateAsync(
+                ValidRequest(),
+                Admin(),
+                CancellationToken.None));
+
+            Assert.IsType<InvalidOperationException>(failure);
+            Assert.Equal("injected mid-sequence failure", failure!.Message);
+        }
+
+        await using var verify = new SqliteTeamMemberTestDbContext(options);
+        Assert.Empty(await verify.Users.AsNoTracking().ToListAsync());
+        Assert.Empty(await verify.Roles.AsNoTracking().ToListAsync());
+        Assert.Empty(await verify.UserRoles.AsNoTracking().ToListAsync());
+        Assert.Empty(await verify.UserServiceAreas.AsNoTracking().ToListAsync());
+        Assert.Empty(await verify.UserPermissionOverrides.AsNoTracking().ToListAsync());
+    }
+
+    private static UserManager<ApplicationUser> CreateUserManager(ApplicationDbContext context) =>
+        new(
+            new UserStore<ApplicationUser>(context),
+            Microsoft.Extensions.Options.Options.Create(new IdentityOptions()),
+            new PasswordHasher<ApplicationUser>(),
+            Array.Empty<IUserValidator<ApplicationUser>>(),
+            Array.Empty<IPasswordValidator<ApplicationUser>>(),
+            new UpperInvariantLookupNormalizer(),
+            new IdentityErrorDescriber(),
+            new EmptyServiceProvider(),
+            NullLogger<UserManager<ApplicationUser>>.Instance);
+
+    private static RoleManager<IdentityRole> CreateRoleManager(ApplicationDbContext context) =>
+        new(
+            new RoleStore<IdentityRole>(context),
+            Array.Empty<IRoleValidator<IdentityRole>>(),
+            new UpperInvariantLookupNormalizer(),
+            new IdentityErrorDescriber(),
+            NullLogger<RoleManager<IdentityRole>>.Instance);
+
+    private static CreateTeamMemberRequestDTO ValidRequest() => new()
+    {
+        Name = "Taylor Dispatcher",
+        Role = "dispatcher",
+        Color = "#F59E0B",
+        Email = "taylor@example.com",
+        Phone = "555-0100",
+        ServiceAreas = new[] { "east", "West" },
+        PermissionOverrides = new Dictionary<string, UserPermissionState>
+        {
+            ["deleteSites"] = UserPermissionState.Allow
+        }
+    };
+
+    private static ClaimsPrincipal Admin() =>
+        new(new ClaimsIdentity(new[] { new Claim(ClaimTypes.Role, "Admin") }, "test"));
+
+    private sealed class SqliteTeamMemberTestDbContext : ApplicationDbContext
+    {
+        public SqliteTeamMemberTestDbContext(DbContextOptions<ApplicationDbContext> options)
+            : base(options)
+        {
+        }
+
+        protected override void OnModelCreating(ModelBuilder builder)
+        {
+            base.OnModelCreating(builder);
+
+            foreach (var index in builder.Model.GetEntityTypes().SelectMany(entity => entity.GetIndexes()))
+            {
+                if (index.GetFilter() is not null)
+                    index.SetFilter(null);
+            }
+
+            foreach (var property in builder.Model.GetEntityTypes()
+                         .SelectMany(entity => entity.GetProperties())
+                         .Where(property => property.Name == "RowVersion" && property.ClrType == typeof(byte[])))
+            {
+                property.ValueGenerated = ValueGenerated.Never;
+                property.IsConcurrencyToken = false;
+            }
+        }
+    }
+
+    private sealed class ThrowingAfterPersistPermissionDataService : ITeamPermissionOverrideDataService
+    {
+        private readonly ITeamPermissionOverrideDataService _inner;
+
+        public ThrowingAfterPersistPermissionDataService(ITeamPermissionOverrideDataService inner)
+        {
+            _inner = inner;
+        }
+
+        public Task<TeamPermissionUserData?> GetUserAsync(string userId, CancellationToken cancellationToken) =>
+            _inner.GetUserAsync(userId, cancellationToken);
+
+        public Task SetOverrideAsync(
+            string userId,
+            string permissionKey,
+            UserPermissionState state,
+            CancellationToken cancellationToken) =>
+            _inner.SetOverrideAsync(userId, permissionKey, state, cancellationToken);
+
+        public async Task SetOverridesAsync(
+            string userId,
+            IReadOnlyDictionary<string, UserPermissionState> overrides,
+            CancellationToken cancellationToken)
+        {
+            await _inner.SetOverridesAsync(userId, overrides, cancellationToken);
+            throw new InvalidOperationException("injected mid-sequence failure");
+        }
+
+        public Task ClearOverridesAsync(string userId, CancellationToken cancellationToken) =>
+            _inner.ClearOverridesAsync(userId, cancellationToken);
+    }
+
+    private sealed class EmptyServiceProvider : IServiceProvider
+    {
+        public object? GetService(Type serviceType) => null;
+    }
+}

From 5aa3a6f820bc66814398ef9d7996bc21b8b245c8 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <cwestall@gmail.com>
Date: Wed, 23 Sep 2026 03:44:44 -0300
Subject: [PATCH 097/183] test: exercise team member rollback through DI

---
 .../TeamMemberCreateTransactionTests.cs       | 65 ++++++++-----------
 1 file changed, 28 insertions(+), 37 deletions(-)

diff --git a/SeaHavenIndustries.Tests/TeamMemberCreateTransactionTests.cs b/SeaHavenIndustries.Tests/TeamMemberCreateTransactionTests.cs
index 43c2d40..bc7abe8 100644
--- a/SeaHavenIndustries.Tests/TeamMemberCreateTransactionTests.cs
+++ b/SeaHavenIndustries.Tests/TeamMemberCreateTransactionTests.cs
@@ -6,12 +6,17 @@ using Microsoft.AspNetCore.Identity.EntityFrameworkCore;
 using Microsoft.Data.Sqlite;
 using Microsoft.EntityFrameworkCore;
 using Microsoft.EntityFrameworkCore.Metadata;
-using Microsoft.Extensions.Logging.Abstractions;
+using Microsoft.Extensions.Configuration;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.DependencyInjection.Extensions;
 using SeaHaven.DataServices.Dto;
 using SeaHaven.DataServices.Implementation;
+using SeaHaven.DataServices.DependencyInjection;
 using SeaHaven.DataServices.Interfaces;
 using SeaHaven.Services.DTOs;
+using SeaHaven.Services.DependencyInjection;
 using SeaHaven.Services.Implementation;
+using SeaHaven.Services.Interfaces;
 
 namespace SeaHavenIndustries.Tests;
 
@@ -30,18 +35,27 @@ public sealed class TeamMemberCreateTransactionTests
         await using (var setup = new SqliteTeamMemberTestDbContext(options))
             await setup.Database.EnsureCreatedAsync();
 
-        await using (var createScope = new SqliteTeamMemberTestDbContext(options))
-        {
-            var permissionData = new ThrowingAfterPersistPermissionDataService(
-                new TeamPermissionOverrideDataService(createScope));
-            var service = new TeamMemberService(
-                CreateUserManager(createScope),
-                CreateRoleManager(createScope),
-                new UserServiceAreaDataService(createScope),
-                permissionData,
-                new UserDataService(createScope),
-                permissionService: null!);
+        var configuration = new ConfigurationBuilder().Build();
+        var services = new ServiceCollection();
+        services.AddLogging();
+        services.AddDbContext<ApplicationDbContext>(builder => builder.UseSqlite(connection));
+        services.Replace(ServiceDescriptor.Scoped<ApplicationDbContext>(provider =>
+            new SqliteTeamMemberTestDbContext(
+                provider.GetRequiredService<DbContextOptions<ApplicationDbContext>>())));
+        services.AddIdentity<ApplicationUser, IdentityRole>()
+            .AddEntityFrameworkStores<ApplicationDbContext>()
+            .AddDefaultTokenProviders();
+        services.AddDataServices();
+        services.AddBusinessServices(configuration);
+        services.AddScoped<TeamPermissionOverrideDataService>();
+        services.AddScoped<ITeamPermissionOverrideDataService>(provider =>
+            new ThrowingAfterPersistPermissionDataService(
+                provider.GetRequiredService<TeamPermissionOverrideDataService>()));
 
+        await using var serviceProvider = services.BuildServiceProvider();
+        await using (var createScope = serviceProvider.CreateAsyncScope())
+        {
+            var service = createScope.ServiceProvider.GetRequiredService<ITeamMemberService>();
             var failure = await Record.ExceptionAsync(() => service.CreateAsync(
                 ValidRequest(),
                 Admin(),
@@ -51,7 +65,8 @@ public sealed class TeamMemberCreateTransactionTests
             Assert.Equal("injected mid-sequence failure", failure!.Message);
         }
 
-        await using var verify = new SqliteTeamMemberTestDbContext(options);
+        await using var verifyScope = serviceProvider.CreateAsyncScope();
+        var verify = verifyScope.ServiceProvider.GetRequiredService<ApplicationDbContext>();
         Assert.Empty(await verify.Users.AsNoTracking().ToListAsync());
         Assert.Empty(await verify.Roles.AsNoTracking().ToListAsync());
         Assert.Empty(await verify.UserRoles.AsNoTracking().ToListAsync());
@@ -59,26 +74,6 @@ public sealed class TeamMemberCreateTransactionTests
         Assert.Empty(await verify.UserPermissionOverrides.AsNoTracking().ToListAsync());
     }
 
-    private static UserManager<ApplicationUser> CreateUserManager(ApplicationDbContext context) =>
-        new(
-            new UserStore<ApplicationUser>(context),
-            Microsoft.Extensions.Options.Options.Create(new IdentityOptions()),
-            new PasswordHasher<ApplicationUser>(),
-            Array.Empty<IUserValidator<ApplicationUser>>(),
-            Array.Empty<IPasswordValidator<ApplicationUser>>(),
-            new UpperInvariantLookupNormalizer(),
-            new IdentityErrorDescriber(),
-            new EmptyServiceProvider(),
-            NullLogger<UserManager<ApplicationUser>>.Instance);
-
-    private static RoleManager<IdentityRole> CreateRoleManager(ApplicationDbContext context) =>
-        new(
-            new RoleStore<IdentityRole>(context),
-            Array.Empty<IRoleValidator<IdentityRole>>(),
-            new UpperInvariantLookupNormalizer(),
-            new IdentityErrorDescriber(),
-            NullLogger<RoleManager<IdentityRole>>.Instance);
-
     private static CreateTeamMemberRequestDTO ValidRequest() => new()
     {
         Name = "Taylor Dispatcher",
@@ -155,8 +150,4 @@ public sealed class TeamMemberCreateTransactionTests
             _inner.ClearOverridesAsync(userId, cancellationToken);
     }
 
-    private sealed class EmptyServiceProvider : IServiceProvider
-    {
-        public object? GetService(Type serviceType) => null;
-    }
 }

From fddb7b790909774039b6ebf6c9909c65219b04c3 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <cwestall@gmail.com>
Date: Wed, 23 Sep 2026 03:49:57 -0300
Subject: [PATCH 098/183] test: verify team member commit and rollback

---
 .../TeamMemberCreateTransactionTests.cs       | 121 ++++++++++++++----
 1 file changed, 99 insertions(+), 22 deletions(-)

diff --git a/SeaHavenIndustries.Tests/TeamMemberCreateTransactionTests.cs b/SeaHavenIndustries.Tests/TeamMemberCreateTransactionTests.cs
index bc7abe8..8c5e2bc 100644
--- a/SeaHavenIndustries.Tests/TeamMemberCreateTransactionTests.cs
+++ b/SeaHavenIndustries.Tests/TeamMemberCreateTransactionTests.cs
@@ -35,6 +35,85 @@ public sealed class TeamMemberCreateTransactionTests
         await using (var setup = new SqliteTeamMemberTestDbContext(options))
             await setup.Database.EnsureCreatedAsync();
 
+        await using var serviceProvider = BuildServiceProvider(connection, injectFailure: true);
+        ThrowingAfterPersistPermissionDataService failingPermissionData;
+        await using (var createScope = serviceProvider.CreateAsyncScope())
+        {
+            var service = createScope.ServiceProvider.GetRequiredService<ITeamMemberService>();
+            failingPermissionData = (ThrowingAfterPersistPermissionDataService)createScope.ServiceProvider
+                .GetRequiredService<ITeamPermissionOverrideDataService>();
+            var failure = await Record.ExceptionAsync(() => service.CreateAsync(
+                ValidRequest(),
+                Admin(),
+                CancellationToken.None));
+
+            Assert.IsType<InvalidOperationException>(failure);
+            Assert.Equal("injected mid-sequence failure", failure!.Message);
+        }
+
+        Assert.NotNull(failingPermissionData.RowsAtFailure);
+        var rowsAtFailure = failingPermissionData.RowsAtFailure!.Value;
+        Assert.Equal(1, rowsAtFailure.Users);
+        Assert.Equal(1, rowsAtFailure.Roles);
+        Assert.Equal(1, rowsAtFailure.UserRoles);
+        Assert.Equal(2, rowsAtFailure.ServiceAreas);
+        Assert.Equal(1, rowsAtFailure.PermissionOverrides);
+
+        await using var verifyScope = serviceProvider.CreateAsyncScope();
+        var verify = verifyScope.ServiceProvider.GetRequiredService<ApplicationDbContext>();
+        Assert.Empty(await verify.Users.AsNoTracking().ToListAsync());
+        Assert.Empty(await verify.Roles.AsNoTracking().ToListAsync());
+        Assert.Empty(await verify.UserRoles.AsNoTracking().ToListAsync());
+        Assert.Empty(await verify.UserServiceAreas.AsNoTracking().ToListAsync());
+        Assert.Empty(await verify.UserPermissionOverrides.AsNoTracking().ToListAsync());
+    }
+
+    [Fact]
+    public async Task Create_SuccessfulTransaction_CommitsPendingMemberAndAssociations()
+    {
+        await using var connection = new SqliteConnection("Data Source=:memory:;Foreign Keys=True");
+        await connection.OpenAsync();
+
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseSqlite(connection)
+            .Options;
+
+        await using (var setup = new SqliteTeamMemberTestDbContext(options))
+            await setup.Database.EnsureCreatedAsync();
+
+        await using var serviceProvider = BuildServiceProvider(connection);
+        await using (var createScope = serviceProvider.CreateAsyncScope())
+        {
+            var service = createScope.ServiceProvider.GetRequiredService<ITeamMemberService>();
+            var outcome = await service.CreateAsync(ValidRequest(), Admin(), CancellationToken.None);
+
+            Assert.True(outcome.Success);
+            Assert.True(outcome.Member!.PendingRegistration);
+            Assert.Equal("taylor@example.com", outcome.Member.Email);
+        }
+
+        await using var verifyScope = serviceProvider.CreateAsyncScope();
+        var verify = verifyScope.ServiceProvider.GetRequiredService<ApplicationDbContext>();
+        var user = await verify.Users.AsNoTracking().SingleAsync(user => user.Email == "taylor@example.com");
+        Assert.True(user.PendingRegistration);
+
+        var role = await verify.Roles.AsNoTracking().SingleAsync(role => role.Name == "Dispatcher");
+        Assert.Contains(await verify.UserRoles.AsNoTracking().ToListAsync(), row => row.UserId == user.Id && row.RoleId == role.Id);
+
+        var areas = await verify.UserServiceAreas.AsNoTracking()
+            .Where(area => area.UserId == user.Id)
+            .Select(area => area.Area)
+            .OrderBy(area => area)
+            .ToListAsync();
+        Assert.Equal(new[] { "East", "West" }, areas);
+
+        var permissionOverride = await verify.UserPermissionOverrides.AsNoTracking()
+            .SingleAsync(permission => permission.UserId == user.Id);
+        Assert.Equal("deleteSites", permissionOverride.PermissionKey);
+    }
+
+    private static ServiceProvider BuildServiceProvider(SqliteConnection connection, bool injectFailure = false)
+    {
         var configuration = new ConfigurationBuilder().Build();
         var services = new ServiceCollection();
         services.AddLogging();
@@ -47,31 +126,17 @@ public sealed class TeamMemberCreateTransactionTests
             .AddDefaultTokenProviders();
         services.AddDataServices();
         services.AddBusinessServices(configuration);
-        services.AddScoped<TeamPermissionOverrideDataService>();
-        services.AddScoped<ITeamPermissionOverrideDataService>(provider =>
-            new ThrowingAfterPersistPermissionDataService(
-                provider.GetRequiredService<TeamPermissionOverrideDataService>()));
 
-        await using var serviceProvider = services.BuildServiceProvider();
-        await using (var createScope = serviceProvider.CreateAsyncScope())
+        if (injectFailure)
         {
-            var service = createScope.ServiceProvider.GetRequiredService<ITeamMemberService>();
-            var failure = await Record.ExceptionAsync(() => service.CreateAsync(
-                ValidRequest(),
-                Admin(),
-                CancellationToken.None));
-
-            Assert.IsType<InvalidOperationException>(failure);
-            Assert.Equal("injected mid-sequence failure", failure!.Message);
+            services.AddScoped<TeamPermissionOverrideDataService>();
+            services.AddScoped<ITeamPermissionOverrideDataService>(provider =>
+                new ThrowingAfterPersistPermissionDataService(
+                    provider.GetRequiredService<TeamPermissionOverrideDataService>(),
+                    provider.GetRequiredService<ApplicationDbContext>()));
         }
 
-        await using var verifyScope = serviceProvider.CreateAsyncScope();
-        var verify = verifyScope.ServiceProvider.GetRequiredService<ApplicationDbContext>();
-        Assert.Empty(await verify.Users.AsNoTracking().ToListAsync());
-        Assert.Empty(await verify.Roles.AsNoTracking().ToListAsync());
-        Assert.Empty(await verify.UserRoles.AsNoTracking().ToListAsync());
-        Assert.Empty(await verify.UserServiceAreas.AsNoTracking().ToListAsync());
-        Assert.Empty(await verify.UserPermissionOverrides.AsNoTracking().ToListAsync());
+        return services.BuildServiceProvider();
     }
 
     private static CreateTeamMemberRequestDTO ValidRequest() => new()
@@ -121,12 +186,18 @@ public sealed class TeamMemberCreateTransactionTests
     private sealed class ThrowingAfterPersistPermissionDataService : ITeamPermissionOverrideDataService
     {
         private readonly ITeamPermissionOverrideDataService _inner;
+        private readonly ApplicationDbContext _context;
 
-        public ThrowingAfterPersistPermissionDataService(ITeamPermissionOverrideDataService inner)
+        public ThrowingAfterPersistPermissionDataService(
+            ITeamPermissionOverrideDataService inner,
+            ApplicationDbContext context)
         {
             _inner = inner;
+            _context = context;
         }
 
+        public (int Users, int Roles, int UserRoles, int ServiceAreas, int PermissionOverrides)? RowsAtFailure { get; private set; }
+
         public Task<TeamPermissionUserData?> GetUserAsync(string userId, CancellationToken cancellationToken) =>
             _inner.GetUserAsync(userId, cancellationToken);
 
@@ -143,6 +214,12 @@ public sealed class TeamMemberCreateTransactionTests
             CancellationToken cancellationToken)
         {
             await _inner.SetOverridesAsync(userId, overrides, cancellationToken);
+            RowsAtFailure = (
+                await _context.Users.CountAsync(cancellationToken),
+                await _context.Roles.CountAsync(cancellationToken),
+                await _context.UserRoles.CountAsync(cancellationToken),
+                await _context.UserServiceAreas.CountAsync(cancellationToken),
+                await _context.UserPermissionOverrides.CountAsync(cancellationToken));
             throw new InvalidOperationException("injected mid-sequence failure");
         }
 

From 028908bd5a1d53628230ddf9016baae400aa442e Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Thu, 24 Sep 2026 20:51:44 -0300
Subject: [PATCH 099/183] fix(board-search): make the Advanced Filters date
 range narrow results (SH-391)

An explicit date range let every undated, non-terminal work order through,
so Unassigned plus a range still returned all ~1,780 unassigned rows. The
range now matches Schedule On, or the Target Week for week-only rows
(overlap), the same date the weekly board groups by. Undated rows are added
only when the caller sends includeDateless, which the client uses for
searches with no range selected and for the Unassigned queue.
---
 .../Helpers/WorkOrderBoardQueryFilters.cs     |  20 ++-
 .../WorkOrderAdvancedSearchDataService.cs     |   3 +-
 .../WorkOrderAdvancedSearchModels.cs          |   3 +-
 .../DTOs/WorkOrderBoardRequestDTOs.cs         |   6 +
 .../WorkOrderAdvancedSearchService.cs         |   3 +-
 .../WorkOrderAdvancedSearchDateRangeTests.cs  | 162 ++++++++++++++++++
 .../WorkOrderBoardSearchTests.cs              |  14 +-
 7 files changed, 201 insertions(+), 10 deletions(-)
 create mode 100644 SeaHavenIndustries.Tests/WorkOrderAdvancedSearchDateRangeTests.cs

diff --git a/SeaHaven.DataServices/Helpers/WorkOrderBoardQueryFilters.cs b/SeaHaven.DataServices/Helpers/WorkOrderBoardQueryFilters.cs
index 71c4d94..b665f2c 100644
--- a/SeaHaven.DataServices/Helpers/WorkOrderBoardQueryFilters.cs
+++ b/SeaHaven.DataServices/Helpers/WorkOrderBoardQueryFilters.cs
@@ -220,13 +220,26 @@ namespace SeaHaven.DataServices.Helpers
                 && w.LifecycleStatus != LifecycleStatus.Completed
                 && w.LifecycleStatus != LifecycleStatus.Canceled);
 
+        /// <summary>
+        /// Narrows to rows whose Schedule On date falls in the range, or, for
+        /// week-only rows, whose Target Week overlaps it: the same date the
+        /// weekly board groups by (SH-391). Rows with no date never match a
+        /// range; they are added only when <paramref name="includeDateless"/>
+        /// is set, which callers send for searches with no date range selected.
+        /// Completed and canceled dateless rows stay out, matching
+        /// <see cref="ApplyUnscheduledOnlyFilter"/>.
+        /// </summary>
         public static IQueryable<WorkOrder> ApplyDateRangeFilter(
             IQueryable<WorkOrder> query,
             DateOnly dateFrom,
-            DateOnly dateTo)
+            DateOnly dateTo,
+            bool includeDateless = false)
         {
             var fromDate = dateFrom.ToDateTime(TimeOnly.MinValue).Date;
             var toDate = dateTo.ToDateTime(TimeOnly.MinValue).Date;
+            // A target week (stored as its Monday) overlaps the range when it
+            // starts by the range end and its Sunday is on or after the range start.
+            var earliestWeekStart = dateFrom.DayNumber >= 6 ? dateFrom.AddDays(-6) : dateFrom;
 
             return query.Where(w =>
                 (w.ScheduledDate != null
@@ -234,9 +247,10 @@ namespace SeaHaven.DataServices.Helpers
                  && w.ScheduledDate.Value.Date <= toDate)
                 || (w.ScheduleWeekOnly == true
                     && w.TargetWeek != null
-                    && w.TargetWeek >= dateFrom
+                    && w.TargetWeek >= earliestWeekStart
                     && w.TargetWeek <= dateTo)
-                || (w.ScheduledDate == null
+                || (includeDateless
+                    && w.ScheduledDate == null
                     && w.LifecycleStatus != LifecycleStatus.Completed
                     && w.LifecycleStatus != LifecycleStatus.Canceled));
         }
diff --git a/SeaHaven.DataServices/Implementation/WorkOrderAdvancedSearchDataService.cs b/SeaHaven.DataServices/Implementation/WorkOrderAdvancedSearchDataService.cs
index eeb28c5..74b5fb2 100644
--- a/SeaHaven.DataServices/Implementation/WorkOrderAdvancedSearchDataService.cs
+++ b/SeaHaven.DataServices/Implementation/WorkOrderAdvancedSearchDataService.cs
@@ -22,7 +22,8 @@ namespace SeaHaven.DataServices.Implementation
             if (query.UnscheduledOnly)
                 baseQuery = WorkOrderBoardQueryFilters.ApplyUnscheduledOnlyFilter(baseQuery);
             else
-                baseQuery = WorkOrderBoardQueryFilters.ApplyDateRangeFilter(baseQuery, query.DateFrom, query.DateTo);
+                baseQuery = WorkOrderBoardQueryFilters.ApplyDateRangeFilter(
+                    baseQuery, query.DateFrom, query.DateTo, query.IncludeDateless);
             baseQuery = WorkOrderBoardQueryFilters.ApplySiteFilter(baseQuery, query.Sites);
             baseQuery = WorkOrderBoardQueryFilters.ApplyRegionFilter(baseQuery, query.Regions);
             baseQuery = WorkOrderBoardQueryFilters.ApplyTypeFilter(baseQuery, query.Types, query.Overdue);
diff --git a/SeaHaven.DataServices/Interfaces/WorkOrderAdvancedSearchModels.cs b/SeaHaven.DataServices/Interfaces/WorkOrderAdvancedSearchModels.cs
index 2c0a627..4ee175a 100644
--- a/SeaHaven.DataServices/Interfaces/WorkOrderAdvancedSearchModels.cs
+++ b/SeaHaven.DataServices/Interfaces/WorkOrderAdvancedSearchModels.cs
@@ -32,7 +32,8 @@ namespace SeaHaven.DataServices.Interfaces
         int PageSize,
         string SortBy,
         string SortDir,
-        int? AccountId = null);
+        int? AccountId = null,
+        bool IncludeDateless = false);
 
     public record WorkOrderAdvancedSearchResult(
         IReadOnlyList<WorkOrderBoardRawRow> Rows,
diff --git a/SeaHaven.Services/DTOs/WorkOrderBoardRequestDTOs.cs b/SeaHaven.Services/DTOs/WorkOrderBoardRequestDTOs.cs
index 8f2c9df..e7c3dc6 100644
--- a/SeaHaven.Services/DTOs/WorkOrderBoardRequestDTOs.cs
+++ b/SeaHaven.Services/DTOs/WorkOrderBoardRequestDTOs.cs
@@ -87,6 +87,12 @@ namespace SeaHaven.Services.DTOs
         /// filter; every other facet still applies.
         /// </summary>
         public bool UnscheduledOnly { get; set; }
+        /// <summary>
+        /// When true, rows with no date (no Schedule On) are returned alongside
+        /// the in-range rows. Sent for searches with no date range selected; an
+        /// explicit range leaves it false so the range strictly narrows (SH-391).
+        /// </summary>
+        public bool IncludeDateless { get; set; }
         public List<string>? Sites { get; set; }
         public List<string>? Regions { get; set; }
         public List<WorkOrderType>? Types { get; set; }
diff --git a/SeaHaven.Services/Implementation/WorkOrderAdvancedSearchService.cs b/SeaHaven.Services/Implementation/WorkOrderAdvancedSearchService.cs
index fa97dc5..c428da7 100644
--- a/SeaHaven.Services/Implementation/WorkOrderAdvancedSearchService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderAdvancedSearchService.cs
@@ -72,7 +72,8 @@ namespace SeaHaven.Services.Implementation
                 pageSize,
                 sortBy,
                 query.SortDir ?? "asc",
-                accountId);
+                accountId,
+                query.IncludeDateless);
 
             var result = await _searchDataService.SearchAsync(dataQuery);
             var utcNow = DateTime.UtcNow;
diff --git a/SeaHavenIndustries.Tests/WorkOrderAdvancedSearchDateRangeTests.cs b/SeaHavenIndustries.Tests/WorkOrderAdvancedSearchDateRangeTests.cs
new file mode 100644
index 0000000..4bacc93
--- /dev/null
+++ b/SeaHavenIndustries.Tests/WorkOrderAdvancedSearchDateRangeTests.cs
@@ -0,0 +1,162 @@
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using Microsoft.EntityFrameworkCore;
+using SeaHaven.DataServices.Implementation;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Helpers;
+using SeaHaven.Services.Implementation;
+
+namespace SeaHavenIndustries.Tests;
+
+/// <summary>
+/// SH-391: an Advanced Filters date range narrows GET /board/search to rows
+/// whose Schedule On (or week-only Target Week) is in the range. Rows with no
+/// date come back only when the caller asks for them (no range selected).
+/// </summary>
+public class WorkOrderAdvancedSearchDateRangeTests
+{
+    private static readonly DateOnly RangeFrom = new(2026, 9, 21);
+    private static readonly DateOnly RangeTo = new(2026, 9, 25);
+
+    private static ApplicationDbContext CreateContext()
+    {
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseInMemoryDatabase(Guid.NewGuid().ToString())
+            .Options;
+        return new ApplicationDbContext(options);
+    }
+
+    private static WorkOrderAdvancedSearchService CreateService(ApplicationDbContext context)
+        => new(new WorkOrderAdvancedSearchDataService(context), WorkOrderAccountTestHelpers.Resolver(context));
+
+    private static WorkOrder Wo(
+        int id,
+        DateTime? scheduled,
+        string? assignTo = null,
+        LifecycleStatus status = LifecycleStatus.Scheduled,
+        DateOnly? targetWeek = null,
+        int? accountId = null)
+        => new()
+        {
+            Id = id,
+            InternalWONumber = $"1000000000{id}",
+            AssignTo = assignTo,
+            ScheduledDate = scheduled,
+            ScheduleWeekOnly = targetWeek.HasValue,
+            TargetWeek = targetWeek,
+            LifecycleStatus = status,
+            AccountId = accountId,
+            istemplate = false
+        };
+
+    private static WorkOrderAdvancedSearchQueryDto UnassignedInRange(bool includeDateless = false) => new()
+    {
+        DatePreset = WorkOrderAdvancedSearchDatePreset.Custom,
+        DateFrom = RangeFrom,
+        DateTo = RangeTo,
+        Dispatchers = new List<string> { "__unassigned__" },
+        IncludeDateless = includeDateless,
+        PageSize = 50
+    };
+
+    [Fact]
+    public async Task SearchAsync_UnassignedWithRange_ReturnsOnlyUnassignedRowsScheduledInRange()
+    {
+        await using var context = CreateContext();
+        context.workOrders.AddRange(
+            Wo(1, new DateTime(2026, 9, 23)),
+            Wo(2, new DateTime(2026, 8, 4)),
+            Wo(3, null, status: LifecycleStatus.Incomplete),
+            Wo(4, new DateTime(2026, 9, 24), assignTo: "user-a"),
+            Wo(5, new DateTime(2026, 10, 2)));
+        await context.SaveChangesAsync();
+
+        var result = await CreateService(context).SearchAsync(
+            UnassignedInRange(), WorkOrderAccountTestHelpers.OrgWideAdmin(), null);
+
+        Assert.Equal(1, result.TotalCount);
+        Assert.Equal(new[] { 1 }, result.Items.Select(i => i.Id).ToArray());
+    }
+
+    [Fact]
+    public async Task SearchAsync_RangeWithoutDispatcherFilter_ExcludesUndatedRows()
+    {
+        await using var context = CreateContext();
+        context.workOrders.AddRange(
+            Wo(1, new DateTime(2026, 9, 22), assignTo: "user-a"),
+            Wo(2, null, assignTo: "user-a", status: LifecycleStatus.Incomplete),
+            Wo(3, new DateTime(2026, 9, 14), assignTo: "user-a", status: LifecycleStatus.Incomplete));
+        await context.SaveChangesAsync();
+
+        var result = await CreateService(context).SearchAsync(new WorkOrderAdvancedSearchQueryDto
+        {
+            DatePreset = WorkOrderAdvancedSearchDatePreset.Custom,
+            DateFrom = RangeFrom,
+            DateTo = RangeTo
+        }, WorkOrderAccountTestHelpers.OrgWideAdmin(), null);
+
+        Assert.Equal(new[] { 1 }, result.Items.Select(i => i.Id).ToArray());
+    }
+
+    [Fact]
+    public async Task SearchAsync_WeekOnlyRow_MatchesRangeThatOverlapsItsTargetWeek()
+    {
+        await using var context = CreateContext();
+        context.workOrders.AddRange(
+            Wo(1, null, targetWeek: new DateOnly(2026, 9, 21)),
+            Wo(2, null, targetWeek: new DateOnly(2026, 9, 14)),
+            Wo(3, null, targetWeek: new DateOnly(2026, 9, 28)));
+        await context.SaveChangesAsync();
+
+        // Wed–Fri of the week of 9/21: the week-only row for that week overlaps it.
+        var result = await CreateService(context).SearchAsync(new WorkOrderAdvancedSearchQueryDto
+        {
+            DatePreset = WorkOrderAdvancedSearchDatePreset.Custom,
+            DateFrom = new DateOnly(2026, 9, 23),
+            DateTo = RangeTo,
+            Dispatchers = new List<string> { "__unassigned__" }
+        }, WorkOrderAccountTestHelpers.OrgWideAdmin(), null);
+
+        Assert.Equal(new[] { 1 }, result.Items.Select(i => i.Id).ToArray());
+    }
+
+    [Fact]
+    public async Task SearchAsync_IncludeDateless_AddsOpenUndatedRowsToTheRange()
+    {
+        await using var context = CreateContext();
+        context.workOrders.AddRange(
+            Wo(1, new DateTime(2026, 9, 23)),
+            Wo(2, new DateTime(2026, 8, 4)),
+            Wo(3, null, status: LifecycleStatus.Incomplete),
+            Wo(4, null, status: LifecycleStatus.Completed),
+            Wo(5, null, status: LifecycleStatus.Canceled));
+        await context.SaveChangesAsync();
+
+        var result = await CreateService(context).SearchAsync(
+            UnassignedInRange(includeDateless: true), WorkOrderAccountTestHelpers.OrgWideAdmin(), null);
+
+        Assert.Equal(new[] { 1, 3 }, result.Items.Select(i => i.Id).OrderBy(id => id).ToArray());
+    }
+
+    [Fact]
+    public async Task SearchAsync_RangeForAccountUser_NeverReturnsAnotherAccountsRows()
+    {
+        await using var context = CreateContext();
+        await WorkOrderAccountTestHelpers.EnsureAccountAsync(context, 1, "A");
+        await WorkOrderAccountTestHelpers.EnsureAccountAsync(context, 2, "B");
+        context.workOrders.AddRange(
+            Wo(1, new DateTime(2026, 9, 23), accountId: 1),
+            Wo(2, new DateTime(2026, 9, 23), accountId: 2),
+            Wo(3, null, status: LifecycleStatus.Incomplete, accountId: 2),
+            Wo(4, null, targetWeek: new DateOnly(2026, 9, 21), accountId: 2));
+        await context.SaveChangesAsync();
+
+        var user = WorkOrderAccountTestHelpers.AccountUser("disp-1", 1, "Dispatcher");
+        var strict = await CreateService(context).SearchAsync(UnassignedInRange(), user, "disp-1");
+        var withDateless = await CreateService(context).SearchAsync(
+            UnassignedInRange(includeDateless: true), user, "disp-1");
+
+        Assert.Equal(new[] { 1 }, strict.Items.Select(i => i.Id).ToArray());
+        Assert.Equal(new[] { 1 }, withDateless.Items.Select(i => i.Id).ToArray());
+    }
+}
diff --git a/SeaHavenIndustries.Tests/WorkOrderBoardSearchTests.cs b/SeaHavenIndustries.Tests/WorkOrderBoardSearchTests.cs
index cd47e05..6a1f2e3 100644
--- a/SeaHavenIndustries.Tests/WorkOrderBoardSearchTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderBoardSearchTests.cs
@@ -319,6 +319,7 @@ public class WorkOrderAdvancedSearchServiceTests
             DateFrom = new DateOnly(2000, 1, 1),
             DateTo = new DateOnly(2099, 12, 31),
             Dispatchers = new List<string> { "__unassigned__" },
+            IncludeDateless = true,
             Page = 0,
             PageSize = pageSize
         }, WorkOrderAccountTestHelpers.OrgWideAdmin(), null);
@@ -380,6 +381,7 @@ public class WorkOrderAdvancedSearchServiceTests
             DateFrom = new DateOnly(2000, 1, 1),
             DateTo = new DateOnly(2099, 12, 31),
             Dispatchers = new List<string> { "__unassigned__" },
+            IncludeDateless = true,
             Page = 0,
             PageSize = 50
         }, WorkOrderAccountTestHelpers.OrgWideAdmin(), null);
@@ -436,6 +438,7 @@ public class WorkOrderAdvancedSearchServiceTests
             DateFrom = new DateOnly(2000, 1, 1),
             DateTo = new DateOnly(2099, 12, 31),
             Dispatchers = new List<string> { "__unassigned__" },
+            IncludeDateless = true,
             Page = 0,
             PageSize = 2
         }, WorkOrderAccountTestHelpers.OrgWideAdmin(), null);
@@ -446,6 +449,7 @@ public class WorkOrderAdvancedSearchServiceTests
             DateFrom = new DateOnly(2000, 1, 1),
             DateTo = new DateOnly(2099, 12, 31),
             Dispatchers = new List<string> { "__unassigned__" },
+            IncludeDateless = true,
             Page = 1,
             PageSize = 2
         }, WorkOrderAccountTestHelpers.OrgWideAdmin(), null);
@@ -773,7 +777,7 @@ public class WorkOrderAdvancedSearchServiceTests
     }
 
     [Fact]
-    public async Task SearchAsync_IncludesUnscheduledRows()
+    public async Task SearchAsync_IncludeDateless_IncludesUnscheduledRows()
     {
         await using var context = CreateContext();
         var weekStart = new DateOnly(2026, 6, 22);
@@ -803,7 +807,8 @@ public class WorkOrderAdvancedSearchServiceTests
         {
             DatePreset = SeaHaven.Services.Helpers.WorkOrderAdvancedSearchDatePreset.Custom,
             DateFrom = weekStart,
-            DateTo = weekStart.AddDays(4)
+            DateTo = weekStart.AddDays(4),
+            IncludeDateless = true
         }, WorkOrderAccountTestHelpers.OrgWideAdmin(), null);
 
         Assert.Equal(2, result.TotalCount);
@@ -1193,9 +1198,10 @@ public class WorkOrderAdvancedSearchServiceTests
         Assert.Equal(
             withFlagAbsent.Items.Select(i => i.Id).ToList(),
             withFlagFalse.Items.Select(i => i.Id).ToList());
-        Assert.Equal(2, withFlagFalse.TotalCount);
+        // SH-391: an explicit range narrows strictly, so the undated row 3 is out.
+        Assert.Equal(1, withFlagFalse.TotalCount);
         Assert.Contains(withFlagFalse.Items, i => i.Id == 1);
-        Assert.Contains(withFlagFalse.Items, i => i.Id == 3);
+        Assert.DoesNotContain(withFlagFalse.Items, i => i.Id == 3);
         Assert.DoesNotContain(withFlagFalse.Items, i => i.Id == 2);
     }
 

From dc251c42d42dff0a1d5da8cadb8d6b24c623de77 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Thu, 24 Sep 2026 20:52:44 -0300
Subject: [PATCH 100/183] fix(media): apply SH-116 media contract and lift the
 1 MB proxy body cap

The Elastic Beanstalk nginx proxy kept its 1 MB default body limit, so every
media upload over ~1 MB got an nginx 413 before reaching the API. Ship a
.platform nginx override (120M) in the bundle and assert it in the bundle
contract.

Apply the client-confirmed contract: photos up to 10 MB (JPEG/PNG/HEIC),
videos up to 100 MB (MP4/MOV), at most 10 photos and 3 videos per work order,
with stable generic rejection messages. The request ceiling (110 MB) sits
between the per-kind caps and the proxy so oversize files get the generic
message. The vendor portal accepts the same photo/video types and caps.
---
 .../nginx/conf.d/01_upload_body_size.conf     |   6 +
 .../VendorPortalDocumentTests.cs              | 110 +++++++
 .../WorkOrderMediaControllerTests.cs          | 167 ++++++++++-
 .../Controllers/VendorPortalController.cs     |   3 +-
 .../Controllers/WorkOrderMediaController.cs   |  11 +-
 .../WorkOrderMediaDataService.cs              |  12 +
 .../Interfaces/IWorkOrderMediaDataService.cs  |   5 +
 .../Helpers/WorkOrderMediaContract.cs         |  84 ++++++
 .../Helpers/WorkOrderMediaFileRules.cs        |  28 +-
 .../Implementation/VendorPortalService.cs     |  86 +++---
 .../Implementation/WorkOrderMediaService.cs   |  38 +++
 .../WorkOrderPhase6Tests.cs                   | 283 ++++++++++++++++++
 scripts/check_app_terraform_isolation.py      |   2 +-
 scripts/package-elastic-beanstalk.sh          |   5 +
 scripts/test_check_app_terraform_isolation.py |  11 +
 scripts/validate-elastic-beanstalk-bundle.sh  |   8 +-
 16 files changed, 807 insertions(+), 52 deletions(-)
 create mode 100644 .platform/nginx/conf.d/01_upload_body_size.conf
 create mode 100644 SeaHaven.Services/Helpers/WorkOrderMediaContract.cs

diff --git a/.platform/nginx/conf.d/01_upload_body_size.conf b/.platform/nginx/conf.d/01_upload_body_size.conf
new file mode 100644
index 0000000..a7bd889
--- /dev/null
+++ b/.platform/nginx/conf.d/01_upload_body_size.conf
@@ -0,0 +1,6 @@
+# SH-383: the Elastic Beanstalk nginx proxy defaults client_max_body_size to 1m,
+# which returned 413 for every media upload over ~1 MB before the request reached
+# the API. The cap sits above the API's own request limit
+# (WorkOrderMediaContract.MaxUploadRequestBytes = 110 MB) so oversize uploads get
+# the API's generic per-kind message instead of an nginx error page.
+client_max_body_size 120M;
diff --git a/Api.SeaHavenIndustries.Tests/VendorPortalDocumentTests.cs b/Api.SeaHavenIndustries.Tests/VendorPortalDocumentTests.cs
index 0d8f6e3..83d9d1d 100644
--- a/Api.SeaHavenIndustries.Tests/VendorPortalDocumentTests.cs
+++ b/Api.SeaHavenIndustries.Tests/VendorPortalDocumentTests.cs
@@ -363,6 +363,116 @@ public sealed class VendorPortalDocumentTests : IDisposable
         context.VendorCompletionDocuments.Should().HaveCount(1);
     }
 
+    [Fact]
+    public void UploadCompletionDocument_AdvertisesContractRequestLimit()
+    {
+        var attribute = Assert.Single(
+            typeof(VendorPortalController)
+                .GetMethod(nameof(VendorPortalController.UploadCompletionDocument))!
+                .CustomAttributes,
+            candidate => candidate.AttributeType == typeof(RequestSizeLimitAttribute));
+        var bytes = Assert.Single(attribute.ConstructorArguments);
+
+        bytes.Value.Should().Be(110_000_000L);
+    }
+
+    private static byte[] MediaBytes(int size, params byte[] header)
+    {
+        var bytes = new byte[size];
+        header.AsSpan().CopyTo(bytes);
+        return bytes;
+    }
+
+    private static byte[] FtypVideoBytes(int size) => MediaBytes(
+        size, 0x00, 0x00, 0x00, 0x20, (byte)'f', (byte)'t', (byte)'y', (byte)'p',
+        (byte)'i', (byte)'s', (byte)'o', (byte)'m');
+
+    [Fact]
+    public async Task UploadCompletionDocument_AcceptsSixtyMegabyteVideo()
+    {
+        using var context = NewContext();
+        var (_, dispatch) = await SeedDispatch(context);
+
+        var result = await NewController(context).UploadCompletionDocument(
+            dispatch.Id,
+            FormFile(FtypVideoBytes(60_000_000), "site-clip.mp4", "video/mp4"));
+
+        result.Should().BeOfType<OkObjectResult>();
+        var document = await context.VendorCompletionDocuments.SingleAsync();
+        document.ContentType.Should().Be("video/mp4");
+        document.SizeBytes.Should().Be(60_000_000L);
+    }
+
+    [Fact]
+    public async Task UploadCompletionDocument_AcceptsMovWithEmptyContentType()
+    {
+        using var context = NewContext();
+        var (_, dispatch) = await SeedDispatch(context);
+
+        var result = await NewController(context).UploadCompletionDocument(
+            dispatch.Id,
+            FormFile(FtypVideoBytes(2_048), "site-clip.MOV", ""));
+
+        result.Should().BeOfType<OkObjectResult>();
+        (await context.VendorCompletionDocuments.SingleAsync()).ContentType.Should().Be("video/quicktime");
+    }
+
+    [Fact]
+    public async Task UploadCompletionDocument_AcceptsIosTranscodedJpegLabelledHeic()
+    {
+        using var context = NewContext();
+        var (_, dispatch) = await SeedDispatch(context);
+
+        var result = await NewController(context).UploadCompletionDocument(
+            dispatch.Id,
+            FormFile(MediaBytes(4_096, 0xFF, 0xD8, 0xFF, 0xE0), "IMG_2044.jpg", "image/heic"));
+
+        result.Should().BeOfType<OkObjectResult>();
+        (await context.VendorCompletionDocuments.SingleAsync()).ContentType.Should().Be("image/jpeg");
+    }
+
+    [Fact]
+    public async Task UploadCompletionDocument_RejectsVideoOverHundredMegabytes()
+    {
+        using var context = NewContext();
+        var (_, dispatch) = await SeedDispatch(context);
+
+        var result = await NewController(context).UploadCompletionDocument(
+            dispatch.Id,
+            FormFile(FtypVideoBytes(100_000_001), "site-clip.mp4", "video/mp4"));
+
+        result.Should().BeOfType<BadRequestObjectResult>();
+        context.VendorCompletionDocuments.Should().BeEmpty();
+    }
+
+    [Fact]
+    public async Task UploadCompletionDocument_RejectsPhotoOverTenMegabytes()
+    {
+        using var context = NewContext();
+        var (_, dispatch) = await SeedDispatch(context);
+
+        var result = await NewController(context).UploadCompletionDocument(
+            dispatch.Id,
+            FormFile(MediaBytes(10_000_001, 0xFF, 0xD8, 0xFF, 0xE0), "photo.jpg", "image/jpeg"));
+
+        result.Should().BeOfType<BadRequestObjectResult>();
+        context.VendorCompletionDocuments.Should().BeEmpty();
+    }
+
+    [Fact]
+    public async Task UploadCompletionDocument_RejectsUnsupportedVideoContainer()
+    {
+        using var context = NewContext();
+        var (_, dispatch) = await SeedDispatch(context);
+
+        var result = await NewController(context).UploadCompletionDocument(
+            dispatch.Id,
+            FormFile("not a video at all"u8.ToArray(), "clip.mp4", "video/mp4"));
+
+        result.Should().BeOfType<BadRequestObjectResult>();
+        context.VendorCompletionDocuments.Should().BeEmpty();
+    }
+
     [Fact]
     public async Task GetDispatchDetail_ReturnsUploadedDocumentWithQuarantineAndReplacementMetadata()
     {
diff --git a/Api.SeaHavenIndustries.Tests/WorkOrderMediaControllerTests.cs b/Api.SeaHavenIndustries.Tests/WorkOrderMediaControllerTests.cs
index a29b332..32c70df 100644
--- a/Api.SeaHavenIndustries.Tests/WorkOrderMediaControllerTests.cs
+++ b/Api.SeaHavenIndustries.Tests/WorkOrderMediaControllerTests.cs
@@ -1,5 +1,6 @@
 using Api.SeaHavenIndustries.Controllers;
 using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
 using Microsoft.AspNetCore.Http;
 using Microsoft.AspNetCore.Mvc;
 using Moq;
@@ -31,7 +32,7 @@ public class WorkOrderMediaControllerTests
     }
 
     [Fact]
-    public void AddMedia_HasTwoHundredMegabyteRequestLimit()
+    public void AddMedia_HasContractRequestLimit()
     {
         var method = typeof(WorkOrderMediaController).GetMethod(nameof(WorkOrderMediaController.AddMedia));
         var attribute = Assert.Single(
@@ -39,24 +40,26 @@ public class WorkOrderMediaControllerTests
             candidate => candidate.AttributeType == typeof(RequestSizeLimitAttribute));
         var bytes = Assert.Single(attribute.ConstructorArguments);
 
-        Assert.Equal(200_000_000L, bytes.Value);
+        Assert.Equal(110_000_000L, bytes.Value);
     }
 
     [Fact]
-    public void AddMedia_HasTwoHundredMegabyteMultipartBodyLimit()
+    public void AddMedia_HasContractMultipartBodyLimit()
     {
         var method = typeof(WorkOrderMediaController).GetMethod(nameof(WorkOrderMediaController.AddMedia));
         var attribute = Assert.IsType<RequestFormLimitsAttribute>(Assert.Single(
             method!.GetCustomAttributes(typeof(RequestFormLimitsAttribute), inherit: true)));
 
-        Assert.Equal(200_000_000L, attribute.MultipartBodyLengthLimit);
+        Assert.Equal(110_000_000L, attribute.MultipartBodyLengthLimit);
     }
 
     [Fact]
-    public async Task AddMedia_FileOverLimit_ReturnsStableUnprocessableEntity()
+    public async Task AddMedia_VideoOverHundredMegabytes_ReturnsStableUnprocessableEntity()
     {
         var file = new Mock<IFormFile>();
-        file.SetupGet(candidate => candidate.Length).Returns(200_000_001);
+        file.SetupGet(candidate => candidate.Length).Returns(100_000_001);
+        file.SetupGet(candidate => candidate.FileName).Returns("clip.mp4");
+        file.SetupGet(candidate => candidate.ContentType).Returns("video/mp4");
         var storage = new Mock<IFileStoragePort>(MockBehavior.Strict);
         var controller = CreateController(storage: storage);
 
@@ -65,10 +68,160 @@ public class WorkOrderMediaControllerTests
         var response = Assert.IsType<UnprocessableEntityObjectResult>(result);
         var error = Assert.IsType<WorkOrderBoardValidationErrorDto>(response.Value);
         Assert.Equal("FileTooLarge", error.Code);
-        Assert.Equal("The uploaded file must not exceed 200 MB.", error.Message);
+        Assert.Equal("Videos must be 100 MB or smaller.", error.Message);
         storage.VerifyNoOtherCalls();
     }
 
+    [Fact]
+    public async Task AddMedia_PhotoOverTenMegabytes_ReturnsStableUnprocessableEntity()
+    {
+        var file = new Mock<IFormFile>();
+        file.SetupGet(candidate => candidate.Length).Returns(10_000_001);
+        file.SetupGet(candidate => candidate.FileName).Returns("photo.jpg");
+        file.SetupGet(candidate => candidate.ContentType).Returns("image/jpeg");
+        var storage = new Mock<IFileStoragePort>(MockBehavior.Strict);
+        var controller = CreateController(storage: storage);
+
+        var result = await controller.AddMedia(1, null, file.Object, CancellationToken.None);
+
+        var response = Assert.IsType<UnprocessableEntityObjectResult>(result);
+        var error = Assert.IsType<WorkOrderBoardValidationErrorDto>(response.Value);
+        Assert.Equal("FileTooLarge", error.Code);
+        Assert.Equal("Photos must be 10 MB or smaller.", error.Message);
+        storage.VerifyNoOtherCalls();
+    }
+
+    [Fact]
+    public async Task AddMedia_DocumentOverFiftyMegabytes_ReturnsStableUnprocessableEntity()
+    {
+        var file = new Mock<IFormFile>();
+        file.SetupGet(candidate => candidate.Length).Returns(50_000_001);
+        file.SetupGet(candidate => candidate.FileName).Returns("report.pdf");
+        file.SetupGet(candidate => candidate.ContentType).Returns("application/pdf");
+        var storage = new Mock<IFileStoragePort>(MockBehavior.Strict);
+        var controller = CreateController(storage: storage);
+
+        var result = await controller.AddMedia(1, WorkOrderMediaCategory.Extra, file.Object, CancellationToken.None);
+
+        var response = Assert.IsType<UnprocessableEntityObjectResult>(result);
+        var error = Assert.IsType<WorkOrderBoardValidationErrorDto>(response.Value);
+        Assert.Equal("FileTooLarge", error.Code);
+        Assert.Equal("Documents must be 50 MB or smaller.", error.Message);
+        storage.VerifyNoOtherCalls();
+    }
+
+    private static FormFile VideoFormFile(int size, string fileName, string contentType)
+    {
+        var bytes = new byte[size];
+        // ISO BMFF ftyp box so the media type rules accept the payload as MP4/MOV.
+        bytes[4] = (byte)'f';
+        bytes[5] = (byte)'t';
+        bytes[6] = (byte)'y';
+        bytes[7] = (byte)'p';
+        bytes[8] = (byte)'i';
+        bytes[9] = (byte)'s';
+        bytes[10] = (byte)'o';
+        bytes[11] = (byte)'m';
+        return new FormFile(new MemoryStream(bytes), 0, bytes.Length, "file", fileName)
+        {
+            Headers = new HeaderDictionary(),
+            ContentType = contentType
+        };
+    }
+
+    private static (Mock<IWorkOrderMediaService> Service, Mock<IFileStoragePort> Storage) SetupSuccessfulAddMedia()
+    {
+        var service = new Mock<IWorkOrderMediaService>(MockBehavior.Strict);
+        service
+            .Setup(candidate => candidate.EnsureCanMutateMediaAsync(
+                1, It.IsAny<ClaimsPrincipal>(), It.IsAny<string?>(), It.IsAny<CancellationToken>(), null))
+            .Returns(Task.CompletedTask);
+        service
+            .Setup(candidate => candidate.AddMediaAsync(
+                1, null, "https://storage.test/stored", It.IsAny<ClaimsPrincipal>(), It.IsAny<string?>(),
+                It.IsAny<CancellationToken>()))
+            .ReturnsAsync(new WorkOrderMediaFileDto { Id = 5, Url = "https://storage.test/stored" });
+        var storage = new Mock<IFileStoragePort>(MockBehavior.Strict);
+        storage
+            .Setup(candidate => candidate.SaveFileAsync(It.IsAny<IFormFile>()))
+            .ReturnsAsync("https://storage.test/stored");
+        return (service, storage);
+    }
+
+    [Fact]
+    public async Task AddMedia_SixtyMegabyteMp4_IsAccepted()
+    {
+        var (service, storage) = SetupSuccessfulAddMedia();
+        var controller = CreateController(service, storage);
+        var file = VideoFormFile(60_000_000, "site-clip.mp4", "video/mp4");
+
+        var result = await controller.AddMedia(1, null, file, CancellationToken.None);
+
+        var ok = Assert.IsType<OkObjectResult>(result);
+        Assert.Equal(5, Assert.IsType<WorkOrderMediaFileDto>(ok.Value).Id);
+    }
+
+    [Fact]
+    public async Task AddMedia_SixtyMegabyteQuicktimeMov_IsAccepted()
+    {
+        var (service, storage) = SetupSuccessfulAddMedia();
+        var controller = CreateController(service, storage);
+        var file = VideoFormFile(60_000_000, "site-clip.mov", "video/quicktime");
+
+        var result = await controller.AddMedia(1, null, file, CancellationToken.None);
+
+        Assert.IsType<OkObjectResult>(result);
+    }
+
+    [Fact]
+    public async Task AddMedia_SixtyMegabyteMovWithEmptyContentType_IsAccepted()
+    {
+        var (service, storage) = SetupSuccessfulAddMedia();
+        var controller = CreateController(service, storage);
+        var file = VideoFormFile(60_000_000, "site-clip.MOV", "");
+
+        var result = await controller.AddMedia(1, null, file, CancellationToken.None);
+
+        Assert.IsType<OkObjectResult>(result);
+    }
+
+    [Fact]
+    public async Task AddMedia_SixtyMegabyteMp4WithOctetStreamContentType_IsAccepted()
+    {
+        var (service, storage) = SetupSuccessfulAddMedia();
+        var controller = CreateController(service, storage);
+        var file = VideoFormFile(60_000_000, "site-clip.mp4", "application/octet-stream");
+
+        var result = await controller.AddMedia(1, null, file, CancellationToken.None);
+
+        Assert.IsType<OkObjectResult>(result);
+    }
+
+    [Fact]
+    public async Task AddMedia_HeicPhoto_IsAccepted()
+    {
+        var (service, storage) = SetupSuccessfulAddMedia();
+        var controller = CreateController(service, storage);
+        var bytes = new byte[512];
+        bytes[4] = (byte)'f';
+        bytes[5] = (byte)'t';
+        bytes[6] = (byte)'y';
+        bytes[7] = (byte)'p';
+        bytes[8] = (byte)'h';
+        bytes[9] = (byte)'e';
+        bytes[10] = (byte)'i';
+        bytes[11] = (byte)'c';
+        var file = new FormFile(new MemoryStream(bytes), 0, bytes.Length, "file", "capture.heic")
+        {
+            Headers = new HeaderDictionary(),
+            ContentType = "image/heic"
+        };
+
+        var result = await controller.AddMedia(1, null, file, CancellationToken.None);
+
+        Assert.IsType<OkObjectResult>(result);
+    }
+
     [Fact]
     public async Task AddMedia_UnsupportedType_ReturnsUnprocessableEntity()
     {
diff --git a/Api.SeaHavenIndustries/Controllers/VendorPortalController.cs b/Api.SeaHavenIndustries/Controllers/VendorPortalController.cs
index 39dd90b..1e7e59c 100644
--- a/Api.SeaHavenIndustries/Controllers/VendorPortalController.cs
+++ b/Api.SeaHavenIndustries/Controllers/VendorPortalController.cs
@@ -4,6 +4,7 @@ using Microsoft.AspNetCore.Http;
 using Microsoft.AspNetCore.Mvc;
 using Microsoft.Extensions.Logging;
 using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Helpers;
 using SeaHaven.Services.Interfaces;
 
 namespace Api.SeaHavenIndustries.Controllers
@@ -294,7 +295,7 @@ namespace Api.SeaHavenIndustries.Controllers
 
         [HttpPost("dispatches/{id:int}/completion-documents")]
         [HttpPost("dispatches/{id:int}/documents")]
-        [RequestSizeLimit(10_000_000)]
+        [RequestSizeLimit(WorkOrderMediaContract.MaxUploadRequestBytes)]
         public async Task<IActionResult> UploadCompletionDocument(
             int id,
             [FromForm] IFormFile file,
diff --git a/Api.SeaHavenIndustries/Controllers/WorkOrderMediaController.cs b/Api.SeaHavenIndustries/Controllers/WorkOrderMediaController.cs
index 17b3ba3..4f854ef 100644
--- a/Api.SeaHavenIndustries/Controllers/WorkOrderMediaController.cs
+++ b/Api.SeaHavenIndustries/Controllers/WorkOrderMediaController.cs
@@ -17,7 +17,7 @@ namespace Api.SeaHavenIndustries.Controllers
     [Route("api/workorders")]
     public class WorkOrderMediaController : Controller
     {
-        public const long MaxUploadBytes = 200_000_000;
+        public const long MaxUploadBytes = WorkOrderMediaContract.MaxUploadRequestBytes;
 
         private readonly IWorkOrderMediaService _workOrderMediaService;
         private readonly IFileStoragePort _fileStorage;
@@ -88,11 +88,12 @@ namespace Api.SeaHavenIndustries.Controllers
             string? fileUrl = null;
             try
             {
-                if (file.Length > MaxUploadBytes)
+                // SH-116 contract: per-kind caps (photos 10 MB, videos 100 MB, documents 50 MB).
+                var sizeMessage = WorkOrderMediaContract.ValidateSize(
+                    file.ContentType, file.FileName, file.Length);
+                if (sizeMessage != null)
                 {
-                    throw new WorkOrderBoardValidationException(
-                        "FileTooLarge",
-                        "The uploaded file must not exceed 200 MB.");
+                    throw new WorkOrderBoardValidationException("FileTooLarge", sizeMessage);
                 }
 
                 WorkOrderMediaFileRules.EnsureAllowed(file, category);
diff --git a/SeaHaven.DataServices/Implementation/WorkOrderMediaDataService.cs b/SeaHaven.DataServices/Implementation/WorkOrderMediaDataService.cs
index fd05a45..9ad9dbe 100644
--- a/SeaHaven.DataServices/Implementation/WorkOrderMediaDataService.cs
+++ b/SeaHaven.DataServices/Implementation/WorkOrderMediaDataService.cs
@@ -56,6 +56,18 @@ namespace SeaHaven.DataServices.Implementation
         public void TrackAttachment(WorkOrderAttachments attachment)
             => _context.workOrderAttachments.Add(attachment);
 
+        public async Task<IReadOnlyList<string>> ListActiveAttachmentUrlsAsync(
+            int workOrderId,
+            CancellationToken cancellationToken)
+        {
+            var urls = await _context.workOrderAttachments
+                .AsNoTracking()
+                .Where(a => a.WorkorderId == workOrderId && a.IsDeleted != true && a.Attachments != null)
+                .Select(a => a.Attachments!)
+                .ToListAsync(cancellationToken);
+            return urls;
+        }
+
         public void SetExpectedWorkOrderVersion(WorkOrder workOrder, byte[] version)
             => _context.Entry(workOrder).Property(w => w.RowVersion).OriginalValue = version;
 
diff --git a/SeaHaven.DataServices/Interfaces/IWorkOrderMediaDataService.cs b/SeaHaven.DataServices/Interfaces/IWorkOrderMediaDataService.cs
index 57cbbf3..30d0005 100644
--- a/SeaHaven.DataServices/Interfaces/IWorkOrderMediaDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IWorkOrderMediaDataService.cs
@@ -22,6 +22,11 @@ namespace SeaHaven.DataServices.Interfaces
 
         Task<WorkOrderAttachments?> GetTrackedAttachmentAsync(int mediaId, int workOrderId, CancellationToken cancellationToken);
         void TrackAttachment(WorkOrderAttachments attachment);
+
+        /// <summary>Stored URLs of the work order's non-deleted attachments (SH-116 photo/video counts).</summary>
+        Task<IReadOnlyList<string>> ListActiveAttachmentUrlsAsync(
+            int workOrderId,
+            CancellationToken cancellationToken);
         void SetExpectedWorkOrderVersion(WorkOrder workOrder, byte[] version);
         void MarkWorkOrderModified(WorkOrder workOrder);
         Task SaveAsync(CancellationToken cancellationToken);
diff --git a/SeaHaven.Services/Helpers/WorkOrderMediaContract.cs b/SeaHaven.Services/Helpers/WorkOrderMediaContract.cs
new file mode 100644
index 0000000..243dcc7
--- /dev/null
+++ b/SeaHaven.Services/Helpers/WorkOrderMediaContract.cs
@@ -0,0 +1,84 @@
+namespace SeaHaven.Services.Helpers
+{
+    /// <summary>
+    /// SH-116 client-confirmed media contract (2026-09-22): photos up to 10 MB (JPEG/PNG/HEIC),
+    /// videos up to 100 MB and 90 seconds (MP4/MOV), at most 10 photos and 3 videos per work
+    /// order, across the dispatcher media modal, the completion-doc media tab and the vendor
+    /// portal upload. Documents (PDF/DOC/DOCX) keep the 50 MB document cap. Duration is only
+    /// checkable client-side (the server cannot probe it cheaply), so it is enforced in the
+    /// browser and documented here as part of the same contract.
+    /// </summary>
+    public static class WorkOrderMediaContract
+    {
+        public const long MaxPhotoBytes = 10_000_000;
+        public const long MaxVideoBytes = 100_000_000;
+        public const long MaxDocumentBytes = 50_000_000;
+        public const int MaxPhotosPerWorkOrder = 10;
+        public const int MaxVideosPerWorkOrder = 3;
+        public const int MaxVideoDurationSeconds = 90;
+
+        /// <summary>
+        /// Request-level ceiling for media endpoints (RequestSizeLimit / multipart limit). It sits
+        /// above <see cref="MaxVideoBytes"/> plus multipart overhead so an oversize file reaches the
+        /// per-kind check and gets its generic message instead of a framework 413. The EB nginx
+        /// proxy (.platform/nginx/conf.d/01_upload_body_size.conf) must stay above this value.
+        /// </summary>
+        public const long MaxUploadRequestBytes = 110_000_000;
+
+        public enum UploadKind
+        {
+            Photo,
+            Video,
+            Document,
+            Unknown
+        }
+
+        public static UploadKind ResolveKind(string? contentType, string? fileName)
+        {
+            var type = (contentType ?? string.Empty).Trim();
+            var extension = Path.GetExtension(fileName ?? string.Empty);
+
+            if (type.StartsWith("video/", StringComparison.OrdinalIgnoreCase)
+                || extension.Equals(".mp4", StringComparison.OrdinalIgnoreCase)
+                || extension.Equals(".mov", StringComparison.OrdinalIgnoreCase))
+                return UploadKind.Video;
+
+            if (type.StartsWith("image/", StringComparison.OrdinalIgnoreCase)
+                || extension.Equals(".jpg", StringComparison.OrdinalIgnoreCase)
+                || extension.Equals(".jpeg", StringComparison.OrdinalIgnoreCase)
+                || extension.Equals(".png", StringComparison.OrdinalIgnoreCase)
+                || extension.Equals(".heic", StringComparison.OrdinalIgnoreCase))
+                return UploadKind.Photo;
+
+            if (type.Equals("application/pdf", StringComparison.OrdinalIgnoreCase)
+                || type.Equals("application/msword", StringComparison.OrdinalIgnoreCase)
+                || type.Equals(
+                    "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+                    StringComparison.OrdinalIgnoreCase)
+                || extension.Equals(".pdf", StringComparison.OrdinalIgnoreCase)
+                || extension.Equals(".doc", StringComparison.OrdinalIgnoreCase)
+                || extension.Equals(".docx", StringComparison.OrdinalIgnoreCase))
+                return UploadKind.Document;
+
+            return UploadKind.Unknown;
+        }
+
+        /// <summary>Stable, generic per-kind size message; never echoes file metadata.</summary>
+        public static string? ValidateSize(long length, UploadKind kind)
+        {
+            return kind switch
+            {
+                UploadKind.Photo when length > MaxPhotoBytes => "Photos must be 10 MB or smaller.",
+                UploadKind.Video when length > MaxVideoBytes => "Videos must be 100 MB or smaller.",
+                UploadKind.Document when length > MaxDocumentBytes =>
+                    "Documents must be 50 MB or smaller.",
+                UploadKind.Unknown when length > MaxVideoBytes =>
+                    "Videos must be 100 MB or smaller.",
+                _ => null
+            };
+        }
+
+        public static string? ValidateSize(string? contentType, string? fileName, long length)
+            => ValidateSize(length, ResolveKind(contentType, fileName));
+    }
+}
diff --git a/SeaHaven.Services/Helpers/WorkOrderMediaFileRules.cs b/SeaHaven.Services/Helpers/WorkOrderMediaFileRules.cs
index aa6439a..ee02d9b 100644
--- a/SeaHaven.Services/Helpers/WorkOrderMediaFileRules.cs
+++ b/SeaHaven.Services/Helpers/WorkOrderMediaFileRules.cs
@@ -12,6 +12,7 @@ namespace SeaHaven.Services.Helpers
             "image/jpeg",
             "image/jpg",
             "image/png",
+            "image/heic",
             "video/mp4",
             "video/quicktime",
             "application/pdf",
@@ -24,6 +25,7 @@ namespace SeaHaven.Services.Helpers
             {
                 ["image/jpeg"] = new HashSet<string>(StringComparer.OrdinalIgnoreCase) { ".jpg", ".jpeg" },
                 ["image/png"] = new HashSet<string>(StringComparer.OrdinalIgnoreCase) { ".png" },
+                ["image/heic"] = new HashSet<string>(StringComparer.OrdinalIgnoreCase) { ".heic" },
                 ["video/mp4"] = new HashSet<string>(StringComparer.OrdinalIgnoreCase) { ".mp4" },
                 ["video/quicktime"] = new HashSet<string>(StringComparer.OrdinalIgnoreCase) { ".mov" },
                 ["application/pdf"] = new HashSet<string>(StringComparer.OrdinalIgnoreCase) { ".pdf" },
@@ -42,7 +44,11 @@ namespace SeaHaven.Services.Helpers
         // the accepted set of files.
         private static string? ResolveContentType(string declaredType, string extension)
         {
-            if (AllowedContentTypes.Contains(declaredType))
+            // iOS transcodes a picked HEIC photo to JPEG (named .jpg) but can keep image/heic as
+            // its type, so a declared image/heic is only authoritative on a real .heic file.
+            var isTranscodedHeic = declaredType.Equals("image/heic", StringComparison.OrdinalIgnoreCase)
+                && !extension.Equals(".heic", StringComparison.OrdinalIgnoreCase);
+            if (AllowedContentTypes.Contains(declaredType) && !isTranscodedHeic)
                 return declaredType;
 
             foreach (var (contentType, extensions) in ExtensionsByContentType)
@@ -139,6 +145,11 @@ namespace SeaHaven.Services.Helpers
                     && bytes[4] == 0x0D && bytes[5] == 0x0A && bytes[6] == 0x1A && bytes[7] == 0x0A;
             }
 
+            if (contentType.Equals("image/heic", StringComparison.OrdinalIgnoreCase))
+            {
+                return IsHeifBrand(bytes);
+            }
+
             if (contentType.Equals("image/jpeg", StringComparison.OrdinalIgnoreCase))
             {
                 return bytes.Length >= 3 && bytes[0] == 0xFF && bytes[1] == 0xD8 && bytes[2] == 0xFF;
@@ -206,5 +217,20 @@ namespace SeaHaven.Services.Helpers
                 && bytes[6] == (byte)'y'
                 && bytes[7] == (byte)'p';
         }
+
+        private static bool IsHeifBrand(byte[] bytes)
+        {
+            if (!HasFtypBox(bytes))
+                return false;
+
+            // HEIC/HEIF containers identify by the ftyp major brand (bytes 8..11).
+            var brand = System.Text.Encoding.ASCII.GetString(bytes, 8, 4);
+            return brand switch
+            {
+                "heic" or "heix" or "hevc" or "hevx" or "heim" or "heis" or "hevm" or "hevs"
+                    or "mif1" or "msf1" => true,
+                _ => false
+            };
+        }
     }
 }
diff --git a/SeaHaven.Services/Implementation/VendorPortalService.cs b/SeaHaven.Services/Implementation/VendorPortalService.cs
index 5fc5140..cbe8192 100644
--- a/SeaHaven.Services/Implementation/VendorPortalService.cs
+++ b/SeaHaven.Services/Implementation/VendorPortalService.cs
@@ -4,6 +4,7 @@ using Microsoft.Extensions.Options;
 using SeaHaven.DataServices.Interfaces;
 using SeaHaven.Services.Configuration;
 using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Helpers;
 using SeaHaven.Services.Interfaces;
 
 namespace SeaHaven.Services.Implementation
@@ -12,9 +13,36 @@ namespace SeaHaven.Services.Implementation
     {
         private static readonly HashSet<string> AllowedContentTypes = new(StringComparer.OrdinalIgnoreCase)
         {
-            "application/pdf", "image/jpeg", "image/jpg", "image/png"
+            "application/pdf", "image/jpeg", "image/jpg", "image/png", "image/heic",
+            "video/mp4", "video/quicktime"
         };
 
+        // The browser's File.type is unreliable on mobile (empty or application/octet-stream),
+        // so an extension pairing against the same allowlist resolves the real content type.
+        private static string? ResolveUploadContentType(IFormFile file)
+        {
+            var declaredType = (file.ContentType ?? string.Empty).Trim();
+            var extension = Path.GetExtension(file.FileName ?? string.Empty);
+            // iOS transcodes a picked HEIC photo to JPEG (named .jpg) but can keep image/heic.
+            var isTranscodedHeic = declaredType.Equals("image/heic", StringComparison.OrdinalIgnoreCase)
+                && !extension.Equals(".heic", StringComparison.OrdinalIgnoreCase);
+            if (AllowedContentTypes.Contains(declaredType) && !isTranscodedHeic)
+                return declaredType.Equals("image/jpg", StringComparison.OrdinalIgnoreCase)
+                    ? "image/jpeg"
+                    : declaredType;
+
+            return extension.ToLowerInvariant() switch
+            {
+                ".pdf" => "application/pdf",
+                ".jpg" or ".jpeg" => "image/jpeg",
+                ".png" => "image/png",
+                ".heic" => "image/heic",
+                ".mp4" => "video/mp4",
+                ".mov" => "video/quicktime",
+                _ => null
+            };
+        }
+
         private const int MaxRefusalReasonLength = 500;
 
         private readonly IVendorPortalTokenService _tokens;
@@ -820,15 +848,30 @@ namespace SeaHaven.Services.Implementation
                 throw new InvalidOperationException("A completion document file is required.");
             }
 
-            if (file.Length > _documentOptions.MaxSizeBytes)
+            // SH-116 contract: photos up to 10 MB (JPEG/PNG/HEIC), videos up to 100 MB
+            // (MP4/MOV). Documents keep the configured VendorDocuments cap.
+            var contentType = ResolveUploadContentType(file);
+            if (contentType == null)
             {
-                throw new InvalidOperationException("The uploaded file exceeds the maximum allowed size.");
+                throw new InvalidOperationException("Only PDF, JPG, PNG, HEIC, MP4, and MOV files are accepted.");
             }
 
-            var contentType = (file.ContentType ?? string.Empty).Trim();
-            if (!AllowedContentTypes.Contains(contentType))
+            var kind = WorkOrderMediaContract.ResolveKind(contentType, file.FileName);
+            if (kind == WorkOrderMediaContract.UploadKind.Photo
+                && file.Length > WorkOrderMediaContract.MaxPhotoBytes)
             {
-                throw new InvalidOperationException("Only PDF, JPG, and PNG completion documents are accepted.");
+                throw new InvalidOperationException("Photos must be 10 MB or smaller.");
+            }
+            if (kind == WorkOrderMediaContract.UploadKind.Video
+                && file.Length > WorkOrderMediaContract.MaxVideoBytes)
+            {
+                throw new InvalidOperationException("Videos must be 100 MB or smaller.");
+            }
+            if (kind != WorkOrderMediaContract.UploadKind.Photo
+                && kind != WorkOrderMediaContract.UploadKind.Video
+                && file.Length > _documentOptions.MaxSizeBytes)
+            {
+                throw new InvalidOperationException("The uploaded file exceeds the maximum allowed size.");
             }
 
             var resolvedPurpose = string.IsNullOrWhiteSpace(purpose)
@@ -851,7 +894,7 @@ namespace SeaHaven.Services.Implementation
             await file.CopyToAsync(buffer, cancellationToken);
             var bytes = buffer.ToArray();
 
-            if (!MatchesSignature(contentType, bytes))
+            if (!WorkOrderMediaFileRules.MatchesSignature(contentType, bytes))
             {
                 throw new InvalidOperationException("The uploaded file signature does not match its declared content type.");
             }
@@ -984,35 +1027,6 @@ namespace SeaHaven.Services.Implementation
             };
         }
 
-        private static bool MatchesSignature(string contentType, byte[] bytes)
-        {
-            if (bytes.Length == 0)
-            {
-                return false;
-            }
-
-            if (contentType.Equals("application/pdf", StringComparison.OrdinalIgnoreCase))
-            {
-                return bytes.Length >= 4
-                    && bytes[0] == 0x25 && bytes[1] == 0x50 && bytes[2] == 0x44 && bytes[3] == 0x46; // %PDF
-            }
-
-            if (contentType.Equals("image/png", StringComparison.OrdinalIgnoreCase))
-            {
-                return bytes.Length >= 8
-                    && bytes[0] == 0x89 && bytes[1] == 0x50 && bytes[2] == 0x4E && bytes[3] == 0x47
-                    && bytes[4] == 0x0D && bytes[5] == 0x0A && bytes[6] == 0x1A && bytes[7] == 0x0A;
-            }
-
-            if (contentType.Equals("image/jpeg", StringComparison.OrdinalIgnoreCase)
-                || contentType.Equals("image/jpg", StringComparison.OrdinalIgnoreCase))
-            {
-                return bytes.Length >= 3 && bytes[0] == 0xFF && bytes[1] == 0xD8 && bytes[2] == 0xFF;
-            }
-
-            return false;
-        }
-
         private static string GetSafeExtension(string fileName)
         {
             var extension = Path.GetExtension(fileName);
diff --git a/SeaHaven.Services/Implementation/WorkOrderMediaService.cs b/SeaHaven.Services/Implementation/WorkOrderMediaService.cs
index 0b0e38c..dccbffd 100644
--- a/SeaHaven.Services/Implementation/WorkOrderMediaService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderMediaService.cs
@@ -153,6 +153,8 @@ namespace SeaHaven.Services.Implementation
                 };
             }
 
+            await EnsureWithinMediaCountsAsync(workOrderId, fileUrl, cancellationToken);
+
             var attachment = new WorkOrderAttachments
             {
                 WorkorderId = workOrderId,
@@ -348,6 +350,42 @@ namespace SeaHaven.Services.Implementation
                 throw new WorkOrderBoardValidationException("ReadOnly", "Work order is read-only in its current status.");
         }
 
+        /// <summary>
+        /// SH-116 contract: at most 10 photos and 3 videos per work order, counted over the
+        /// stored attachment rows. Legacy Before/After column slots replace in place and are
+        /// not counted. Documents have no per-work-order count limit.
+        /// </summary>
+        private async Task EnsureWithinMediaCountsAsync(
+            int workOrderId,
+            string fileUrl,
+            CancellationToken cancellationToken)
+        {
+            var kind = WorkOrderMediaContract.ResolveKind(null, fileUrl);
+            if (kind != WorkOrderMediaContract.UploadKind.Photo
+                && kind != WorkOrderMediaContract.UploadKind.Video)
+                return;
+
+            var urls = await _mediaData.ListActiveAttachmentUrlsAsync(workOrderId, cancellationToken);
+            var sameKindCount = urls.Count(url =>
+                WorkOrderMediaContract.ResolveKind(null, url) == kind);
+
+            if (kind == WorkOrderMediaContract.UploadKind.Photo
+                && sameKindCount >= WorkOrderMediaContract.MaxPhotosPerWorkOrder)
+            {
+                throw new WorkOrderBoardValidationException(
+                    "MediaCountExceeded",
+                    "A work order can have at most 10 photos.");
+            }
+
+            if (kind == WorkOrderMediaContract.UploadKind.Video
+                && sameKindCount >= WorkOrderMediaContract.MaxVideosPerWorkOrder)
+            {
+                throw new WorkOrderBoardValidationException(
+                    "MediaCountExceeded",
+                    "A work order can have at most 3 videos.");
+            }
+        }
+
         /// <summary>
         /// Account filter for data queries. Null means org-wide (skip ApplyAccountScope).
         /// Call only after EnsureCan* has verified scope is not Missing.
diff --git a/SeaHavenIndustries.Tests/WorkOrderPhase6Tests.cs b/SeaHavenIndustries.Tests/WorkOrderPhase6Tests.cs
index cd24883..d5771a9 100644
--- a/SeaHavenIndustries.Tests/WorkOrderPhase6Tests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderPhase6Tests.cs
@@ -1309,6 +1309,289 @@ public class WorkOrderMediaServiceTests
         Assert.Equal(WorkOrderMediaCategory.Extra, media.Category);
     }
 
+    [Fact]
+    public async Task AddMedia_EleventhPhoto_ThrowsMediaCountExceeded()
+    {
+        var (context, service) = CreateSut();
+        context.workOrders.Add(new WorkOrder
+        {
+            Id = 1,
+            LifecycleStatus = LifecycleStatus.Scheduled,
+            RowVersion = new byte[] { 1, 0, 0, 0, 0, 0, 0, 1 }
+        });
+        for (var i = 0; i < 10; i++)
+        {
+            context.workOrderAttachments.Add(new WorkOrderAttachments
+            {
+                WorkorderId = 1,
+                Attachments = $"https://example.com/photo-{i}.jpg",
+                Category = WorkOrderMediaCategory.Extra
+            });
+        }
+        await context.SaveChangesAsync();
+
+        var ex = await Assert.ThrowsAsync<WorkOrderBoardValidationException>(() =>
+            service.AddMediaAsync(
+                1,
+                null,
+                "https://example.com/photo-10.jpg",
+                AuthenticatedUser(),
+                "actor-1"));
+
+        Assert.Equal("MediaCountExceeded", ex.Code);
+        Assert.Equal("A work order can have at most 10 photos.", ex.Message);
+        Assert.Equal(10, context.workOrderAttachments.Count(a => a.IsDeleted != true));
+    }
+
+    [Fact]
+    public async Task AddMedia_FourthVideo_CountsStoredPhoneFileUrls()
+    {
+        // Same URL shape FileStorageAdapter.SaveFileAsync returns for an iPhone upload.
+        static string StoredUrl(string name) =>
+            $"https://api.example.com/Assets/Documents/{Guid.NewGuid()}_{name}";
+
+        var (context, service) = CreateSut();
+        context.workOrders.Add(new WorkOrder
+        {
+            Id = 1,
+            LifecycleStatus = LifecycleStatus.Scheduled,
+            RowVersion = new byte[] { 1, 0, 0, 0, 0, 0, 0, 1 }
+        });
+        foreach (var name in new[] { "IMG_0001.MOV", "IMG_0002.mov", "clip.MP4" })
+        {
+            context.workOrderAttachments.Add(new WorkOrderAttachments
+            {
+                WorkorderId = 1,
+                Attachments = StoredUrl(name),
+                Category = WorkOrderMediaCategory.Extra
+            });
+        }
+        await context.SaveChangesAsync();
+
+        var ex = await Assert.ThrowsAsync<WorkOrderBoardValidationException>(() =>
+            service.AddMediaAsync(
+                1,
+                null,
+                StoredUrl("IMG_0004.MOV"),
+                AuthenticatedUser(),
+                "actor-1"));
+
+        Assert.Equal("MediaCountExceeded", ex.Code);
+        Assert.Equal("A work order can have at most 3 videos.", ex.Message);
+    }
+
+    [Fact]
+    public async Task AddMedia_CrossAccount_FullWorkOrder_ThrowsNotFoundNotCount()
+    {
+        var (context, service) = CreateSut();
+        context.workOrders.Add(new WorkOrder
+        {
+            Id = 1,
+            AccountId = 20,
+            LifecycleStatus = LifecycleStatus.Scheduled,
+            RowVersion = new byte[] { 1, 0, 0, 0, 0, 0, 0, 1 }
+        });
+        for (var i = 0; i < 10; i++)
+        {
+            context.workOrderAttachments.Add(new WorkOrderAttachments
+            {
+                WorkorderId = 1,
+                Attachments = $"https://example.com/photo-{i}.jpg",
+                Category = WorkOrderMediaCategory.Extra
+            });
+        }
+        await context.SaveChangesAsync();
+
+        var ex = await Assert.ThrowsAsync<WorkOrderBoardValidationException>(() =>
+            service.AddMediaAsync(
+                1,
+                null,
+                "https://example.com/photo-10.jpg",
+                AuthenticatedUser(accountId: 10),
+                "actor-1"));
+
+        // Another account must not learn the work order exists or how full it is.
+        Assert.Equal("NotFound", ex.Code);
+        Assert.Equal(10, context.workOrderAttachments.Count(a => a.IsDeleted != true));
+    }
+
+    [Fact]
+    public async Task AddMedia_TenthPhoto_Succeeds()
+    {
+        var (context, service) = CreateSut();
+        context.workOrders.Add(new WorkOrder
+        {
+            Id = 1,
+            LifecycleStatus = LifecycleStatus.Scheduled,
+            RowVersion = new byte[] { 1, 0, 0, 0, 0, 0, 0, 1 }
+        });
+        for (var i = 0; i < 9; i++)
+        {
+            context.workOrderAttachments.Add(new WorkOrderAttachments
+            {
+                WorkorderId = 1,
+                Attachments = $"https://example.com/photo-{i}.jpg",
+                Category = WorkOrderMediaCategory.Extra
+            });
+        }
+        await context.SaveChangesAsync();
+
+        var media = await service.AddMediaAsync(
+            1,
+            null,
+            "https://example.com/photo-9.jpg",
+            AuthenticatedUser(),
+            "actor-1");
+
+        Assert.True(media.Id > 0);
+    }
+
+    [Fact]
+    public async Task AddMedia_FourthVideo_ThrowsMediaCountExceeded()
+    {
+        var (context, service) = CreateSut();
+        context.workOrders.Add(new WorkOrder
+        {
+            Id = 1,
+            LifecycleStatus = LifecycleStatus.Scheduled,
+            RowVersion = new byte[] { 1, 0, 0, 0, 0, 0, 0, 1 }
+        });
+        context.workOrderAttachments.Add(new WorkOrderAttachments
+        {
+            WorkorderId = 1,
+            Attachments = "https://example.com/clip-a.mp4",
+            Category = WorkOrderMediaCategory.Extra
+        });
+        context.workOrderAttachments.Add(new WorkOrderAttachments
+        {
+            WorkorderId = 1,
+            Attachments = "https://example.com/clip-b.mov",
+            Category = WorkOrderMediaCategory.Extra
+        });
+        context.workOrderAttachments.Add(new WorkOrderAttachments
+        {
+            WorkorderId = 1,
+            Attachments = "https://example.com/clip-c.mp4",
+            Category = WorkOrderMediaCategory.Extra
+        });
+        await context.SaveChangesAsync();
+
+        var ex = await Assert.ThrowsAsync<WorkOrderBoardValidationException>(() =>
+            service.AddMediaAsync(
+                1,
+                null,
+                "https://example.com/clip-d.mov",
+                AuthenticatedUser(),
+                "actor-1"));
+
+        Assert.Equal("MediaCountExceeded", ex.Code);
+        Assert.Equal("A work order can have at most 3 videos.", ex.Message);
+    }
+
+    [Fact]
+    public async Task AddMedia_ThirdVideo_Succeeds()
+    {
+        var (context, service) = CreateSut();
+        context.workOrders.Add(new WorkOrder
+        {
+            Id = 1,
+            LifecycleStatus = LifecycleStatus.Scheduled,
+            RowVersion = new byte[] { 1, 0, 0, 0, 0, 0, 0, 1 }
+        });
+        context.workOrderAttachments.Add(new WorkOrderAttachments
+        {
+            WorkorderId = 1,
+            Attachments = "https://example.com/clip-a.mp4",
+            Category = WorkOrderMediaCategory.Extra
+        });
+        context.workOrderAttachments.Add(new WorkOrderAttachments
+        {
+            WorkorderId = 1,
+            Attachments = "https://example.com/clip-b.mov",
+            Category = WorkOrderMediaCategory.Extra
+        });
+        await context.SaveChangesAsync();
+
+        var media = await service.AddMediaAsync(
+            1,
+            null,
+            "https://example.com/clip-c.mp4",
+            AuthenticatedUser(),
+            "actor-1");
+
+        Assert.True(media.Id > 0);
+    }
+
+    [Fact]
+    public async Task AddMedia_DeletedPhoto_DoesNotConsumePhotoCount()
+    {
+        var (context, service) = CreateSut();
+        context.workOrders.Add(new WorkOrder
+        {
+            Id = 1,
+            LifecycleStatus = LifecycleStatus.Scheduled,
+            RowVersion = new byte[] { 1, 0, 0, 0, 0, 0, 0, 1 }
+        });
+        for (var i = 0; i < 10; i++)
+        {
+            context.workOrderAttachments.Add(new WorkOrderAttachments
+            {
+                WorkorderId = 1,
+                Attachments = $"https://example.com/photo-{i}.jpg",
+                Category = WorkOrderMediaCategory.Extra,
+                IsDeleted = i == 0
+            });
+        }
+        await context.SaveChangesAsync();
+
+        var media = await service.AddMediaAsync(
+            1,
+            null,
+            "https://example.com/photo-new.jpg",
+            AuthenticatedUser(),
+            "actor-1");
+
+        Assert.True(media.Id > 0);
+    }
+
+    [Fact]
+    public async Task AddMedia_DocumentsDoNotConsumePhotoOrVideoCounts()
+    {
+        var (context, service) = CreateSut();
+        context.workOrders.Add(new WorkOrder
+        {
+            Id = 1,
+            LifecycleStatus = LifecycleStatus.Scheduled,
+            RowVersion = new byte[] { 1, 0, 0, 0, 0, 0, 0, 1 }
+        });
+        for (var i = 0; i < 5; i++)
+        {
+            context.workOrderAttachments.Add(new WorkOrderAttachments
+            {
+                WorkorderId = 1,
+                Attachments = $"https://example.com/report-{i}.pdf",
+                Category = WorkOrderMediaCategory.Extra
+            });
+        }
+        await context.SaveChangesAsync();
+
+        var photo = await service.AddMediaAsync(
+            1,
+            null,
+            "https://example.com/photo.jpg",
+            AuthenticatedUser(),
+            "actor-1");
+        var video = await service.AddMediaAsync(
+            1,
+            null,
+            "https://example.com/clip.mp4",
+            AuthenticatedUser(),
+            "actor-1");
+
+        Assert.True(photo.Id > 0);
+        Assert.True(video.Id > 0);
+    }
+
     [Fact]
     public async Task DeleteMedia_Technician_ThrowsForbidden()
     {
diff --git a/scripts/check_app_terraform_isolation.py b/scripts/check_app_terraform_isolation.py
index 9f87212..11db9a8 100644
--- a/scripts/check_app_terraform_isolation.py
+++ b/scripts/check_app_terraform_isolation.py
@@ -26,7 +26,7 @@ def is_app_path(path: str) -> bool:
     normalized = path.replace("\\", "/")
     if normalized in APP_SCRIPT_NAMES:
         return True
-    if normalized.startswith(".ebextensions/"):
+    if normalized.startswith((".ebextensions/", ".platform/")):
         return True
     return normalized.endswith(APP_SUFFIXES)
 
diff --git a/scripts/package-elastic-beanstalk.sh b/scripts/package-elastic-beanstalk.sh
index bef20cf..5d42d50 100755
--- a/scripts/package-elastic-beanstalk.sh
+++ b/scripts/package-elastic-beanstalk.sh
@@ -8,6 +8,7 @@
 #   ./                          published Api.SeaHavenIndustries (self-contained, linux-x64)
 #   ./efbundle                  self-contained EF Core 8.0.8 migrations bundle (linux-x64, +x)
 #   ./.ebextensions/*           leader-only migration container command
+#   ./.platform/nginx/conf.d/*  nginx proxy overrides (upload body size)
 #
 # The bundle reads ConnectionStrings__DefaultConnection from the runtime
 # environment (Elastic Beanstalk property). No connection string or secret is
@@ -137,6 +138,10 @@ log "copy .ebextensions into bundle root"
 mkdir -p "$STAGING_DIR/.ebextensions"
 cp -R .ebextensions/. "$STAGING_DIR/.ebextensions/"
 
+log "copy .platform (nginx proxy overrides) into bundle root"
+mkdir -p "$STAGING_DIR/.platform"
+cp -R .platform/. "$STAGING_DIR/.platform/"
+
 log "verify no committed secret placeholders survived publish"
 if grep -rIEl -- 'Server=.*;.*Password=|AccountKey=|aws_secret|AKIA[0-9A-Z]{16}' "$STAGING_DIR" 2>/dev/null; then
   die "potential secret detected in publish output; refusing to package."
diff --git a/scripts/test_check_app_terraform_isolation.py b/scripts/test_check_app_terraform_isolation.py
index 94899a6..b13e0e7 100644
--- a/scripts/test_check_app_terraform_isolation.py
+++ b/scripts/test_check_app_terraform_isolation.py
@@ -54,6 +54,17 @@ class IsolationTests(unittest.TestCase):
         self.assertEqual(terraform_files, ["terraform/live/dev/main.tf"])
         self.assertTrue(any(path.endswith(".cs") for path in app_files))
 
+    def test_platform_proxy_config_is_app_side(self) -> None:
+        violation = isolation_violation(
+            [
+                "terraform/live/dev/main.tf",
+                ".platform/nginx/conf.d/01_upload_body_size.conf",
+            ]
+        )
+        self.assertIsNotNone(violation)
+        _, app_files = violation or ([], [])
+        self.assertEqual(app_files, [".platform/nginx/conf.d/01_upload_body_size.conf"])
+
 
 if __name__ == "__main__":
     unittest.main()
diff --git a/scripts/validate-elastic-beanstalk-bundle.sh b/scripts/validate-elastic-beanstalk-bundle.sh
index 139eb6b..1d88367 100755
--- a/scripts/validate-elastic-beanstalk-bundle.sh
+++ b/scripts/validate-elastic-beanstalk-bundle.sh
@@ -15,13 +15,15 @@ die() {
 
 contents_file="$(mktemp)"
 webhook_file="$(mktemp)"
-trap 'rm -f "$contents_file" "$webhook_file"' EXIT
+nginx_file="$(mktemp)"
+trap 'rm -f "$contents_file" "$webhook_file" "$nginx_file"' EXIT
 
 unzip -tq "$BUNDLE"
 unzip -Z1 "$BUNDLE" > "$contents_file"
 grep -Fxq "efbundle" "$contents_file"
 grep -Fxq ".ebextensions/01_migrations.config" "$contents_file"
 grep -Fxq ".ebextensions/02_webhook_config.config" "$contents_file"
+grep -Fxq ".platform/nginx/conf.d/01_upload_body_size.conf" "$contents_file"
 
 unzip -p "$BUNDLE" .ebextensions/02_webhook_config.config > "$webhook_file"
 grep -Fxq '    WorkOrderWebhook__Enabled: "true"' "$webhook_file"
@@ -30,5 +32,9 @@ grep -Fxq \
   '    WorkOrderWebhook__SecretId: arn:aws:secretsmanager:us-east-1:011934824531:secret:workorder-ingest/shoc-webhook-hmac-puYTcB' \
   "$webhook_file"
 
+# Without this override the platform nginx caps request bodies at 1 MB (SH-383).
+unzip -p "$BUNDLE" .platform/nginx/conf.d/01_upload_body_size.conf > "$nginx_file"
+grep -Fxq 'client_max_body_size 120M;' "$nginx_file"
+
 printf 'PASS: Elastic Beanstalk bundle contract (%s bytes)\n' \
   "$(wc -c < "$BUNDLE" | tr -d ' ')"

From 9d5798437d09f867879466bdf8d4b0d4d02c41be Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Thu, 24 Sep 2026 21:11:20 -0300
Subject: [PATCH 101/183] test(workorders): pin the week-only date range rule
 shared with the board page (SH-391)

---
 .../WorkOrderAdvancedSearchDateRangeTests.cs      | 15 +++++++++++++--
 1 file changed, 13 insertions(+), 2 deletions(-)

diff --git a/SeaHavenIndustries.Tests/WorkOrderAdvancedSearchDateRangeTests.cs b/SeaHavenIndustries.Tests/WorkOrderAdvancedSearchDateRangeTests.cs
index 4bacc93..634c12f 100644
--- a/SeaHavenIndustries.Tests/WorkOrderAdvancedSearchDateRangeTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderAdvancedSearchDateRangeTests.cs
@@ -49,6 +49,12 @@ public class WorkOrderAdvancedSearchDateRangeTests
             istemplate = false
         };
 
+    private static WorkOrder NotWeekOnly(WorkOrder wo)
+    {
+        wo.ScheduleWeekOnly = false;
+        return wo;
+    }
+
     private static WorkOrderAdvancedSearchQueryDto UnassignedInRange(bool includeDateless = false) => new()
     {
         DatePreset = WorkOrderAdvancedSearchDatePreset.Custom,
@@ -105,7 +111,12 @@ public class WorkOrderAdvancedSearchDateRangeTests
         context.workOrders.AddRange(
             Wo(1, null, targetWeek: new DateOnly(2026, 9, 21)),
             Wo(2, null, targetWeek: new DateOnly(2026, 9, 14)),
-            Wo(3, null, targetWeek: new DateOnly(2026, 9, 28)));
+            Wo(3, null, targetWeek: new DateOnly(2026, 9, 28)),
+            // Week-only with a leftover date outside the range: the week decides,
+            // as on the board page (SH-391).
+            Wo(4, new DateTime(2026, 10, 2), targetWeek: new DateOnly(2026, 9, 21)),
+            // Not week-only: its date decides, so a target week does not bring it in.
+            NotWeekOnly(Wo(5, new DateTime(2026, 10, 2), targetWeek: new DateOnly(2026, 9, 21))));
         await context.SaveChangesAsync();
 
         // Wed–Fri of the week of 9/21: the week-only row for that week overlaps it.
@@ -117,7 +128,7 @@ public class WorkOrderAdvancedSearchDateRangeTests
             Dispatchers = new List<string> { "__unassigned__" }
         }, WorkOrderAccountTestHelpers.OrgWideAdmin(), null);
 
-        Assert.Equal(new[] { 1 }, result.Items.Select(i => i.Id).ToArray());
+        Assert.Equal(new[] { 1, 4 }, result.Items.Select(i => i.Id).OrderBy(id => id).ToArray());
     }
 
     [Fact]

From 4876fa27175dee7254b08ae164265999977bb34e Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Thu, 24 Sep 2026 21:02:28 -0300
Subject: [PATCH 102/183] feat(dashboard): count open unassigned work orders
 for the period (SH-392)

GET /dashboard/stats now returns unassigned: open (not Completed or
Canceled) work orders with no dispatcher in the selected period, within the
caller's server-derived account scope. It uses the same filters as the
Unassigned board search, so the Dashboard number equals the list it drills
into. A dispatcher-scoped Dashboard has no unassigned work and returns 0.
---
 .../DashboardControllerTests.cs               |   4 +-
 .../DashboardUnassignedTests.cs               | 176 ++++++++++++++++++
 .../Controllers/DashboardController.cs        |   1 +
 .../Implementation/DashboardDataService.cs    |  28 +++
 .../Interfaces/IDashboardDataService.cs       |  12 ++
 SeaHaven.Services/DTOs/DashboardDTOs.cs       |   2 +
 .../Implementation/DashboardService.cs        |   7 +
 7 files changed, 229 insertions(+), 1 deletion(-)
 create mode 100644 Api.SeaHavenIndustries.Tests/DashboardUnassignedTests.cs

diff --git a/Api.SeaHavenIndustries.Tests/DashboardControllerTests.cs b/Api.SeaHavenIndustries.Tests/DashboardControllerTests.cs
index 4ef3b58..ddd6082 100644
--- a/Api.SeaHavenIndustries.Tests/DashboardControllerTests.cs
+++ b/Api.SeaHavenIndustries.Tests/DashboardControllerTests.cs
@@ -40,7 +40,8 @@ public class DashboardControllerTests
             {
                 ScheduledTomorrow = 3,
                 PendingUplifts = 5,
-                AvetaPending = 7
+                AvetaPending = 7,
+                Unassigned = 11
             });
 
         var result = await NewController(service).GetStats(
@@ -50,5 +51,6 @@ public class DashboardControllerTests
         ((int)Prop(body, "scheduledTomorrow")).Should().Be(3);
         ((int)Prop(body, "pendingUplifts")).Should().Be(5);
         ((int)Prop(body, "avetaPending")).Should().Be(7);
+        ((int)Prop(body, "unassigned")).Should().Be(11);
     }
 }
diff --git a/Api.SeaHavenIndustries.Tests/DashboardUnassignedTests.cs b/Api.SeaHavenIndustries.Tests/DashboardUnassignedTests.cs
new file mode 100644
index 0000000..dbdbc7e
--- /dev/null
+++ b/Api.SeaHavenIndustries.Tests/DashboardUnassignedTests.cs
@@ -0,0 +1,176 @@
+using System.Security.Claims;
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using FluentAssertions;
+using Microsoft.EntityFrameworkCore;
+using SeaHaven.DataServices.Implementation;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Helpers;
+using SeaHaven.Services.Implementation;
+using Xunit;
+
+namespace Api.SeaHavenIndustries.Tests;
+
+/// <summary>
+/// SH-392: the Dashboard "Unassigned" count is open work orders with no
+/// dispatcher in the selected period, and it equals the Work Orders list the
+/// tile drills into (GET /board/search, Dispatcher = Unassigned).
+/// </summary>
+public class DashboardUnassignedTests
+{
+    private static readonly DateOnly From = new(2026, 9, 21);
+    private static readonly DateOnly To = new(2026, 9, 25);
+
+    private static readonly List<LifecycleStatus> OpenStatuses = Enum.GetValues<LifecycleStatus>()
+        .Where(s => s != LifecycleStatus.Completed && s != LifecycleStatus.Canceled)
+        .ToList();
+
+    private static ApplicationDbContext NewContext()
+    {
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseInMemoryDatabase(databaseName: Guid.NewGuid().ToString())
+            .Options;
+        return new ApplicationDbContext(options);
+    }
+
+    private static WorkOrderAccountResolver Resolver(ApplicationDbContext ctx)
+        => new(new AccountDataService(ctx), new LocationDataService(ctx));
+
+    private static DashboardService NewDashboard(ApplicationDbContext ctx)
+        => new(new DashboardDataService(ctx), Resolver(ctx));
+
+    private static WorkOrderAdvancedSearchService NewSearch(ApplicationDbContext ctx)
+        => new(new WorkOrderAdvancedSearchDataService(ctx), Resolver(ctx));
+
+    private static ClaimsPrincipal AccountUser(int accountId, string role = "Admin", string userId = "admin-1")
+        => new(new ClaimsIdentity(new[]
+        {
+            new Claim(SeaHavenClaimTypes.AccountId, accountId.ToString()),
+            new Claim(ClaimTypes.NameIdentifier, userId),
+            new Claim(ClaimTypes.Role, role)
+        }, "test"));
+
+    private static WorkOrder Wo(
+        int id,
+        DateTime? scheduled,
+        string? assignTo = null,
+        LifecycleStatus status = LifecycleStatus.Scheduled,
+        DateOnly? targetWeek = null,
+        int accountId = 1)
+        => new()
+        {
+            Id = id,
+            AccountId = accountId,
+            InternalWONumber = $"2000000{id:0000}",
+            AssignTo = assignTo,
+            ScheduledDate = scheduled,
+            ScheduleWeekOnly = targetWeek.HasValue,
+            TargetWeek = targetWeek,
+            LifecycleStatus = status,
+            istemplate = false
+        };
+
+    private static void Seed(ApplicationDbContext ctx)
+    {
+        ctx.workOrders.AddRange(
+            Wo(1, new DateTime(2026, 9, 22)),                                   // counted
+            Wo(2, new DateTime(2026, 9, 23), assignTo: ""),                     // counted: blank assignee
+            Wo(3, null, targetWeek: new DateOnly(2026, 9, 21)),                 // counted: week-only in range
+            Wo(4, new DateTime(2026, 9, 24), assignTo: "disp-1"),               // assigned
+            Wo(5, new DateTime(2026, 9, 24), status: LifecycleStatus.Completed),
+            Wo(6, new DateTime(2026, 9, 24), status: LifecycleStatus.Canceled),
+            Wo(7, new DateTime(2026, 8, 4)),                                    // out of range
+            Wo(8, null, status: LifecycleStatus.Incomplete),                    // undated
+            Wo(9, new DateTime(2026, 9, 22), accountId: 2),                     // other tenant
+            Wo(10, null, status: LifecycleStatus.Incomplete, accountId: 2));    // other tenant, undated
+        ctx.SaveChanges();
+    }
+
+    [Fact]
+    public async Task GetStatsAsync_Range_CountsOpenUnassignedScheduledInPeriod()
+    {
+        using var ctx = NewContext();
+        Seed(ctx);
+
+        var stats = await NewDashboard(ctx).GetStatsAsync(
+            AccountUser(1), new DashboardStatsQueryDTO { DateFrom = From, DateTo = To }, CancellationToken.None);
+
+        stats.Unassigned.Should().Be(3);
+    }
+
+    [Fact]
+    public async Task GetStatsAsync_AllTime_CountsEveryOpenUnassignedIncludingUndated()
+    {
+        using var ctx = NewContext();
+        Seed(ctx);
+
+        var stats = await NewDashboard(ctx).GetStatsAsync(
+            AccountUser(1), new DashboardStatsQueryDTO(), CancellationToken.None);
+
+        // 1, 2, 3, 7 (out of any week but open) and 8 (undated).
+        stats.Unassigned.Should().Be(5);
+    }
+
+    [Fact]
+    public async Task GetStatsAsync_Unassigned_NeverCountsAnotherTenantsWorkOrders()
+    {
+        using var ctx = NewContext();
+        Seed(ctx);
+
+        var accountTwo = await NewDashboard(ctx).GetStatsAsync(
+            AccountUser(2), new DashboardStatsQueryDTO(), CancellationToken.None);
+        var accountTwoInRange = await NewDashboard(ctx).GetStatsAsync(
+            AccountUser(2), new DashboardStatsQueryDTO { DateFrom = From, DateTo = To }, CancellationToken.None);
+
+        accountTwo.Unassigned.Should().Be(2);
+        accountTwoInRange.Unassigned.Should().Be(1);
+    }
+
+    [Fact]
+    public async Task GetStatsAsync_DispatcherScope_HasNoUnassignedWork()
+    {
+        using var ctx = NewContext();
+        Seed(ctx);
+
+        var dispatcher = await NewDashboard(ctx).GetStatsAsync(
+            AccountUser(1, role: "Dispatcher", userId: "disp-1"),
+            new DashboardStatsQueryDTO(),
+            CancellationToken.None);
+        var adminPickingDispatcher = await NewDashboard(ctx).GetStatsAsync(
+            AccountUser(1),
+            new DashboardStatsQueryDTO { DispatcherId = "disp-1" },
+            CancellationToken.None);
+
+        dispatcher.Unassigned.Should().Be(0);
+        adminPickingDispatcher.Unassigned.Should().Be(0);
+    }
+
+    [Theory]
+    [InlineData(true)]
+    [InlineData(false)]
+    public async Task GetStatsAsync_UnassignedMatchesTheDrillDownList(bool withRange)
+    {
+        using var ctx = NewContext();
+        Seed(ctx);
+        var user = AccountUser(1);
+
+        var stats = await NewDashboard(ctx).GetStatsAsync(
+            user,
+            withRange ? new DashboardStatsQueryDTO { DateFrom = From, DateTo = To } : new DashboardStatsQueryDTO(),
+            CancellationToken.None);
+
+        // What the Work Orders board sends for the tile's drill-down link.
+        var list = await NewSearch(ctx).SearchAsync(new WorkOrderAdvancedSearchQueryDto
+        {
+            DatePreset = WorkOrderAdvancedSearchDatePreset.Custom,
+            DateFrom = withRange ? From : new DateOnly(2000, 1, 1),
+            DateTo = withRange ? To : new DateOnly(2099, 12, 31),
+            IncludeDateless = !withRange,
+            Dispatchers = new List<string> { "__unassigned__" },
+            Statuses = OpenStatuses,
+            PageSize = 200
+        }, user, "admin-1");
+
+        stats.Unassigned.Should().Be(list.TotalCount);
+    }
+}
diff --git a/Api.SeaHavenIndustries/Controllers/DashboardController.cs b/Api.SeaHavenIndustries/Controllers/DashboardController.cs
index b53c4bf..e40c9fd 100644
--- a/Api.SeaHavenIndustries/Controllers/DashboardController.cs
+++ b/Api.SeaHavenIndustries/Controllers/DashboardController.cs
@@ -33,6 +33,7 @@ namespace Api.SeaHavenIndustries.Controllers
                 scheduledTomorrow = stats.ScheduledTomorrow,
                 pendingUplifts = stats.PendingUplifts,
                 avetaPending = stats.AvetaPending,
+                unassigned = stats.Unassigned,
                 breakdown = stats.Breakdown,
                 dueCount = stats.DueCount,
                 completedDueCount = stats.CompletedDueCount,
diff --git a/SeaHaven.DataServices/Implementation/DashboardDataService.cs b/SeaHaven.DataServices/Implementation/DashboardDataService.cs
index a6c03f2..7f9767f 100644
--- a/SeaHaven.DataServices/Implementation/DashboardDataService.cs
+++ b/SeaHaven.DataServices/Implementation/DashboardDataService.cs
@@ -39,6 +39,34 @@ namespace SeaHaven.DataServices.Implementation
             };
         }
 
+        private static readonly IReadOnlyList<LifecycleStatus> OpenLifecycleStatuses = Enum
+            .GetValues<LifecycleStatus>()
+            .Where(s => s != LifecycleStatus.Completed && s != LifecycleStatus.Canceled)
+            .ToList();
+
+        public async Task<int> CountOpenUnassignedAsync(
+            int? accountId,
+            string? dispatcherId,
+            DateOnly? dateFrom,
+            DateOnly? dateTo,
+            CancellationToken cancellationToken)
+        {
+            // A dispatcher-scoped Dashboard has no unassigned work by definition.
+            if (dispatcherId != null)
+                return 0;
+
+            var query = WorkOrderBoardQueryFilters.ApplyBaseScope(_context.workOrders.AsNoTracking());
+            if (accountId is int scopedAccountId)
+                query = WorkOrderBoardQueryFilters.ApplyAccountScope(query, scopedAccountId);
+            query = WorkOrderBoardQueryFilters.ApplyDispatcherFilter(
+                query, new[] { "__unassigned__" }, myWorkOrders: false, currentUserId: null);
+            query = WorkOrderBoardQueryFilters.ApplyStatusFilter(query, OpenLifecycleStatuses);
+            if (dateFrom is DateOnly from && dateTo is DateOnly to)
+                query = WorkOrderBoardQueryFilters.ApplyDateRangeFilter(query, from, to);
+
+            return await query.CountAsync(cancellationToken);
+        }
+
         public async Task<IReadOnlyList<DashboardWorkOrder>> GetDashboardWorkOrdersAsync(
             int? accountId,
             string? dispatcherId,
diff --git a/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs b/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs
index 51ef7b5..d55bdea 100644
--- a/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs
@@ -14,6 +14,18 @@ namespace SeaHaven.DataServices.Interfaces
             DateOnly today,
             CancellationToken cancellationToken);
 
+        /// <summary>
+        /// Open work orders with no dispatcher in the period, counted with the
+        /// same filters as GET /board/search for Dispatcher=Unassigned (SH-392),
+        /// so the Dashboard number matches the list it drills into.
+        /// </summary>
+        Task<int> CountOpenUnassignedAsync(
+            int? accountId,
+            string? dispatcherId,
+            DateOnly? dateFrom,
+            DateOnly? dateTo,
+            CancellationToken cancellationToken);
+
         Task<IReadOnlyList<DashboardWorkOrder>> GetDashboardWorkOrdersAsync(
             int? accountId,
             string? dispatcherId,
diff --git a/SeaHaven.Services/DTOs/DashboardDTOs.cs b/SeaHaven.Services/DTOs/DashboardDTOs.cs
index 9cf76c0..146c491 100644
--- a/SeaHaven.Services/DTOs/DashboardDTOs.cs
+++ b/SeaHaven.Services/DTOs/DashboardDTOs.cs
@@ -106,6 +106,8 @@ namespace SeaHaven.Services.DTOs
         public int ScheduledTomorrow { get; set; }
         public int PendingUplifts { get; set; }
         public int AvetaPending { get; set; }
+        /// <summary>Open work orders with no dispatcher in the selected period (SH-392).</summary>
+        public int Unassigned { get; set; }
         public DashboardBreakdownDTO Breakdown { get; set; } = new();
         public int DueCount { get; set; }
         public int CompletedDueCount { get; set; }
diff --git a/SeaHaven.Services/Implementation/DashboardService.cs b/SeaHaven.Services/Implementation/DashboardService.cs
index 02642dc..e528b97 100644
--- a/SeaHaven.Services/Implementation/DashboardService.cs
+++ b/SeaHaven.Services/Implementation/DashboardService.cs
@@ -43,6 +43,12 @@ namespace SeaHaven.Services.Implementation
                 query.DateTo,
                 cancellationToken);
             var metrics = DashboardMetrics.Calculate(workOrders, DashboardBusinessTime.Today());
+            var unassigned = await _dataService.CountOpenUnassignedAsync(
+                accountId,
+                dispatcherId,
+                query.DateFrom,
+                query.DateTo,
+                cancellationToken);
 
             var useMetrics = query.DateFrom.HasValue && query.DateTo.HasValue || dispatcherId is not null;
 
@@ -55,6 +61,7 @@ namespace SeaHaven.Services.Implementation
                 ScheduledTomorrow = kpis.ScheduledTomorrow,
                 PendingUplifts = kpis.PendingUplifts,
                 AvetaPending = kpis.AvetaPending,
+                Unassigned = unassigned,
                 Breakdown = metrics.Breakdown,
                 DueCount = metrics.DueCount,
                 CompletedDueCount = metrics.CompletedDueCount,

From 07bc81cc5270a963edc313bf31e92cdbffd8d91c Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Thu, 24 Sep 2026 21:18:00 -0300
Subject: [PATCH 103/183] fix(media): size uploads by the validated content
 type

A misleading file name could move a file into a larger size class: a real
PDF or JPEG named .mp4/.mov got the 100 MB video cap on the vendor portal,
and a .jpg declared with a foreign video type got it on the media endpoint.
Classify by the same resolved type the signature check validates; the
extension only decides when no allowlisted type is known.
---
 .../VendorPortalDocumentTests.cs              | 22 +++++++
 .../WorkOrderMediaControllerTests.cs          | 21 ++++++
 .../Controllers/WorkOrderMediaController.cs   |  3 +-
 .../Helpers/WorkOrderMediaContract.cs         | 65 ++++++++++++-------
 .../Helpers/WorkOrderMediaFileRules.cs        | 19 ++++--
 .../Implementation/VendorPortalService.cs     |  3 +-
 6 files changed, 103 insertions(+), 30 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/VendorPortalDocumentTests.cs b/Api.SeaHavenIndustries.Tests/VendorPortalDocumentTests.cs
index 83d9d1d..4a6ac0d 100644
--- a/Api.SeaHavenIndustries.Tests/VendorPortalDocumentTests.cs
+++ b/Api.SeaHavenIndustries.Tests/VendorPortalDocumentTests.cs
@@ -431,6 +431,28 @@ public sealed class VendorPortalDocumentTests : IDisposable
         (await context.VendorCompletionDocuments.SingleAsync()).ContentType.Should().Be("image/jpeg");
     }
 
+    [Theory]
+    // Genuine PDF/JPEG bytes and declared type, but a video file name: the size class must
+    // follow the validated type, not the name, or the document/photo caps are bypassed.
+    [InlineData("report.mp4", "application/pdf", 12_000_000, new byte[] { 0x25, 0x50, 0x44, 0x46 })]
+    [InlineData("site.mov", "image/jpeg", 11_000_000, new byte[] { 0xFF, 0xD8, 0xFF, 0xE0 })]
+    public async Task UploadCompletionDocument_VideoExtensionDoesNotWidenSizeCap(
+        string fileName,
+        string contentType,
+        int size,
+        byte[] header)
+    {
+        using var context = NewContext();
+        var (_, dispatch) = await SeedDispatch(context);
+
+        var result = await NewController(context).UploadCompletionDocument(
+            dispatch.Id,
+            FormFile(MediaBytes(size, header), fileName, contentType));
+
+        result.Should().BeOfType<BadRequestObjectResult>();
+        context.VendorCompletionDocuments.Should().BeEmpty();
+    }
+
     [Fact]
     public async Task UploadCompletionDocument_RejectsVideoOverHundredMegabytes()
     {
diff --git a/Api.SeaHavenIndustries.Tests/WorkOrderMediaControllerTests.cs b/Api.SeaHavenIndustries.Tests/WorkOrderMediaControllerTests.cs
index 32c70df..c990b2e 100644
--- a/Api.SeaHavenIndustries.Tests/WorkOrderMediaControllerTests.cs
+++ b/Api.SeaHavenIndustries.Tests/WorkOrderMediaControllerTests.cs
@@ -91,6 +91,27 @@ public class WorkOrderMediaControllerTests
         storage.VerifyNoOtherCalls();
     }
 
+    [Fact]
+    public async Task AddMedia_PhotoDeclaredAsForeignVideoType_IsSizedAsAPhoto()
+    {
+        // A .jpg with a foreign video type resolves to image/jpeg for validation, so it must
+        // also be sized as a photo, not given the 100 MB video allowance.
+        var file = new Mock<IFormFile>();
+        file.SetupGet(candidate => candidate.Length).Returns(60_000_000);
+        file.SetupGet(candidate => candidate.FileName).Returns("photo.jpg");
+        file.SetupGet(candidate => candidate.ContentType).Returns("video/3gpp");
+        var storage = new Mock<IFileStoragePort>(MockBehavior.Strict);
+        var controller = CreateController(storage: storage);
+
+        var result = await controller.AddMedia(1, null, file.Object, CancellationToken.None);
+
+        var response = Assert.IsType<UnprocessableEntityObjectResult>(result);
+        var error = Assert.IsType<WorkOrderBoardValidationErrorDto>(response.Value);
+        Assert.Equal("FileTooLarge", error.Code);
+        Assert.Equal("Photos must be 10 MB or smaller.", error.Message);
+        storage.VerifyNoOtherCalls();
+    }
+
     [Fact]
     public async Task AddMedia_DocumentOverFiftyMegabytes_ReturnsStableUnprocessableEntity()
     {
diff --git a/Api.SeaHavenIndustries/Controllers/WorkOrderMediaController.cs b/Api.SeaHavenIndustries/Controllers/WorkOrderMediaController.cs
index 4f854ef..b19efb9 100644
--- a/Api.SeaHavenIndustries/Controllers/WorkOrderMediaController.cs
+++ b/Api.SeaHavenIndustries/Controllers/WorkOrderMediaController.cs
@@ -89,8 +89,9 @@ namespace Api.SeaHavenIndustries.Controllers
             try
             {
                 // SH-116 contract: per-kind caps (photos 10 MB, videos 100 MB, documents 50 MB).
+                // Classify by the same resolved type EnsureAllowed validates against.
                 var sizeMessage = WorkOrderMediaContract.ValidateSize(
-                    file.ContentType, file.FileName, file.Length);
+                    WorkOrderMediaFileRules.ResolveUploadContentType(file), file.FileName, file.Length);
                 if (sizeMessage != null)
                 {
                     throw new WorkOrderBoardValidationException("FileTooLarge", sizeMessage);
diff --git a/SeaHaven.Services/Helpers/WorkOrderMediaContract.cs b/SeaHaven.Services/Helpers/WorkOrderMediaContract.cs
index 243dcc7..f36fcf9 100644
--- a/SeaHaven.Services/Helpers/WorkOrderMediaContract.cs
+++ b/SeaHaven.Services/Helpers/WorkOrderMediaContract.cs
@@ -33,34 +33,51 @@ namespace SeaHaven.Services.Helpers
             Unknown
         }
 
+        private static readonly Dictionary<string, UploadKind> KindByContentType =
+            new(StringComparer.OrdinalIgnoreCase)
+            {
+                ["image/jpeg"] = UploadKind.Photo,
+                ["image/jpg"] = UploadKind.Photo,
+                ["image/png"] = UploadKind.Photo,
+                ["image/heic"] = UploadKind.Photo,
+                ["video/mp4"] = UploadKind.Video,
+                ["video/quicktime"] = UploadKind.Video,
+                ["application/pdf"] = UploadKind.Document,
+                ["application/msword"] = UploadKind.Document,
+                ["application/vnd.openxmlformats-officedocument.wordprocessingml.document"] =
+                    UploadKind.Document,
+            };
+
+        private static readonly Dictionary<string, UploadKind> KindByExtension =
+            new(StringComparer.OrdinalIgnoreCase)
+            {
+                [".jpg"] = UploadKind.Photo,
+                [".jpeg"] = UploadKind.Photo,
+                [".png"] = UploadKind.Photo,
+                [".heic"] = UploadKind.Photo,
+                [".mp4"] = UploadKind.Video,
+                [".mov"] = UploadKind.Video,
+                [".pdf"] = UploadKind.Document,
+                [".doc"] = UploadKind.Document,
+                [".docx"] = UploadKind.Document,
+            };
+
+        /// <summary>
+        /// Classifies an upload. Pass the validated (resolved) content type: it decides whenever
+        /// it is an allowlisted type, so a misleading file name cannot move a file into a larger
+        /// size class. The extension only decides when no allowlisted type is known (for example
+        /// counting stored attachment URLs).
+        /// </summary>
         public static UploadKind ResolveKind(string? contentType, string? fileName)
         {
             var type = (contentType ?? string.Empty).Trim();
+            if (KindByContentType.TryGetValue(type, out var byType))
+                return byType;
+
             var extension = Path.GetExtension(fileName ?? string.Empty);
-
-            if (type.StartsWith("video/", StringComparison.OrdinalIgnoreCase)
-                || extension.Equals(".mp4", StringComparison.OrdinalIgnoreCase)
-                || extension.Equals(".mov", StringComparison.OrdinalIgnoreCase))
-                return UploadKind.Video;
-
-            if (type.StartsWith("image/", StringComparison.OrdinalIgnoreCase)
-                || extension.Equals(".jpg", StringComparison.OrdinalIgnoreCase)
-                || extension.Equals(".jpeg", StringComparison.OrdinalIgnoreCase)
-                || extension.Equals(".png", StringComparison.OrdinalIgnoreCase)
-                || extension.Equals(".heic", StringComparison.OrdinalIgnoreCase))
-                return UploadKind.Photo;
-
-            if (type.Equals("application/pdf", StringComparison.OrdinalIgnoreCase)
-                || type.Equals("application/msword", StringComparison.OrdinalIgnoreCase)
-                || type.Equals(
-                    "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
-                    StringComparison.OrdinalIgnoreCase)
-                || extension.Equals(".pdf", StringComparison.OrdinalIgnoreCase)
-                || extension.Equals(".doc", StringComparison.OrdinalIgnoreCase)
-                || extension.Equals(".docx", StringComparison.OrdinalIgnoreCase))
-                return UploadKind.Document;
-
-            return UploadKind.Unknown;
+            return KindByExtension.TryGetValue(extension, out var byExtension)
+                ? byExtension
+                : UploadKind.Unknown;
         }
 
         /// <summary>Stable, generic per-kind size message; never echoes file metadata.</summary>
diff --git a/SeaHaven.Services/Helpers/WorkOrderMediaFileRules.cs b/SeaHaven.Services/Helpers/WorkOrderMediaFileRules.cs
index ee02d9b..c438759 100644
--- a/SeaHaven.Services/Helpers/WorkOrderMediaFileRules.cs
+++ b/SeaHaven.Services/Helpers/WorkOrderMediaFileRules.cs
@@ -67,6 +67,19 @@ namespace SeaHaven.Services.Helpers
             return contentType;
         }
 
+        /// <summary>
+        /// The canonical content type <see cref="IsAllowed"/> validates the file as, or null when
+        /// no allowlisted type applies. Size classification must use this same type so a declared
+        /// type or a misleading extension cannot move a file into a larger size class.
+        /// </summary>
+        public static string? ResolveUploadContentType(IFormFile file)
+        {
+            var declaredType = (file.ContentType ?? string.Empty).Trim();
+            var extension = Path.GetExtension(file.FileName ?? string.Empty);
+            var resolvedType = ResolveContentType(declaredType, extension);
+            return resolvedType == null ? null : CanonicalContentType(resolvedType);
+        }
+
         public static bool IsAllowed(
             IFormFile file,
             WorkOrderMediaCategory? category = WorkOrderMediaCategory.Extra)
@@ -74,13 +87,11 @@ namespace SeaHaven.Services.Helpers
             if (file == null || file.Length <= 0)
                 return false;
 
-            var declaredType = (file.ContentType ?? string.Empty).Trim();
             var extension = Path.GetExtension(file.FileName ?? string.Empty);
-            var resolvedType = ResolveContentType(declaredType, extension);
-            if (resolvedType == null)
+            var contentType = ResolveUploadContentType(file);
+            if (contentType == null)
                 return false;
 
-            var contentType = CanonicalContentType(resolvedType);
             var resolvedCategory = category ?? WorkOrderMediaCategory.Extra;
             if (IsDocument(contentType)
                 && resolvedCategory is not WorkOrderMediaCategory.Extra and not WorkOrderMediaCategory.Aveta)
diff --git a/SeaHaven.Services/Implementation/VendorPortalService.cs b/SeaHaven.Services/Implementation/VendorPortalService.cs
index cbe8192..0893fbb 100644
--- a/SeaHaven.Services/Implementation/VendorPortalService.cs
+++ b/SeaHaven.Services/Implementation/VendorPortalService.cs
@@ -856,7 +856,8 @@ namespace SeaHaven.Services.Implementation
                 throw new InvalidOperationException("Only PDF, JPG, PNG, HEIC, MP4, and MOV files are accepted.");
             }
 
-            var kind = WorkOrderMediaContract.ResolveKind(contentType, file.FileName);
+            // Classify by the resolved type the signature check validates, never by the file name.
+            var kind = WorkOrderMediaContract.ResolveKind(contentType, fileName: null);
             if (kind == WorkOrderMediaContract.UploadKind.Photo
                 && file.Length > WorkOrderMediaContract.MaxPhotoBytes)
             {

From 16845a55f3ff7ddc04aab4ab3ba23d06a743f184 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Thu, 24 Sep 2026 21:18:49 -0300
Subject: [PATCH 104/183] test(vendor-portal): use a valid PDF signature in the
 size-class regression

---
 Api.SeaHavenIndustries.Tests/VendorPortalDocumentTests.cs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Api.SeaHavenIndustries.Tests/VendorPortalDocumentTests.cs b/Api.SeaHavenIndustries.Tests/VendorPortalDocumentTests.cs
index 4a6ac0d..132f538 100644
--- a/Api.SeaHavenIndustries.Tests/VendorPortalDocumentTests.cs
+++ b/Api.SeaHavenIndustries.Tests/VendorPortalDocumentTests.cs
@@ -434,7 +434,7 @@ public sealed class VendorPortalDocumentTests : IDisposable
     [Theory]
     // Genuine PDF/JPEG bytes and declared type, but a video file name: the size class must
     // follow the validated type, not the name, or the document/photo caps are bypassed.
-    [InlineData("report.mp4", "application/pdf", 12_000_000, new byte[] { 0x25, 0x50, 0x44, 0x46 })]
+    [InlineData("report.mp4", "application/pdf", 12_000_000, new byte[] { 0x25, 0x50, 0x44, 0x46, 0x2D })]
     [InlineData("site.mov", "image/jpeg", 11_000_000, new byte[] { 0xFF, 0xD8, 0xFF, 0xE0 })]
     public async Task UploadCompletionDocument_VideoExtensionDoesNotWidenSizeCap(
         string fileName,

From 89376e99e492f403caacaee60001a6bbb1774384 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Thu, 24 Sep 2026 21:22:13 -0300
Subject: [PATCH 105/183] fix(uplifts): resolve work-order uplifts through
 owned dispatches (SH-393)

Board create left the new primary dispatch with no WorkOrderId, so uplifts
created on those work orders were written to a dispatch the work order's
uplift reads never resolve: not listed, allowance never consumed, queue WO
number blank. The same orphan made ApptDate/vendor patches fail with
"A primary dispatch is required".

- Board create backfills Dispatch.WorkOrderId after the first save.
- Uplift create resolves its dispatch through the read-side scope
  (non-deleted, owned or linked); otherwise the stable
  "no primary dispatch" error.
- Data-only migration assigns existing orphaned primaries to the single
  work order naming them primary; idempotent.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 ...lBoardCreatedDispatchWorkOrder.Designer.cs | 4213 +++++++++++++++++
 ...3_BackfillBoardCreatedDispatchWorkOrder.cs |   43 +
 .../Implementation/UpliftDataService.cs       |   19 +
 .../Interfaces/IUpliftDataService.cs          |    4 +
 .../WorkOrderBoardCreateService.cs            |   10 +-
 .../Implementation/WorkOrderUpliftService.cs  |   28 +-
 .../WorkOrderBoardCancelServiceTests.cs       |    1 +
 .../WorkOrderUpliftDispatchOwnershipTests.cs  |  344 ++
 .../WorkOrderUpliftServiceTests.cs            |   16 +-
 9 files changed, 4656 insertions(+), 22 deletions(-)
 create mode 100644 Data.SeaHavenIndustries/Migrations/20260925001752_SH393_BackfillBoardCreatedDispatchWorkOrder.Designer.cs
 create mode 100644 Data.SeaHavenIndustries/Migrations/20260925001752_SH393_BackfillBoardCreatedDispatchWorkOrder.cs
 create mode 100644 SeaHavenIndustries.Tests/WorkOrderUpliftDispatchOwnershipTests.cs

diff --git a/Data.SeaHavenIndustries/Migrations/20260925001752_SH393_BackfillBoardCreatedDispatchWorkOrder.Designer.cs b/Data.SeaHavenIndustries/Migrations/20260925001752_SH393_BackfillBoardCreatedDispatchWorkOrder.Designer.cs
new file mode 100644
index 0000000..12e9c2d
--- /dev/null
+++ b/Data.SeaHavenIndustries/Migrations/20260925001752_SH393_BackfillBoardCreatedDispatchWorkOrder.Designer.cs
@@ -0,0 +1,4213 @@
+// <auto-generated />
+using System;
+using Data.SeaHavenIndustries;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Metadata;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+
+#nullable disable
+
+namespace Data.SeaHavenIndustries.Migrations
+{
+    [DbContext(typeof(ApplicationDbContext))]
+    [Migration("20260925001752_SH393_BackfillBoardCreatedDispatchWorkOrder")]
+    partial class SH393_BackfillBoardCreatedDispatchWorkOrder
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasAnnotation("ProductVersion", "8.0.8")
+                .HasAnnotation("Relational:MaxIdentifierLength", 128);
+
+            SqlServerModelBuilderExtensions.UseIdentityColumns(modelBuilder);
+
+            modelBuilder.HasSequence("WorkOrderInternalNumberSequence");
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Accounts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("CurrencyCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Importance")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("IndustryId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("OwnerEmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Phone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PrivacySetting")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ServiceInstructions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Tags")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("TerritoryId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("TimeZone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Type")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Website")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Accounts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Addresses", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AddressType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Country")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("County")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("ContactId");
+
+                    b.ToTable("Addresses");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int>("AccessFailedCount")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Color")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ConcurrencyStamp")
+                        .IsConcurrencyToken()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Contact")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DeletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<bool>("EmailConfirmed")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("FirstName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Initials")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsAccountOwner")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("LastName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Locations")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("LockoutEnabled")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTimeOffset?>("LockoutEnd")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("NormalizedEmail")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("NormalizedUserName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("PasswordHash")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("PendingRegistration")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("PendingRegistrationCreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("PhoneNumberConfirmed")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("SecurityStamp")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("TwoFactorEnabled")
+                        .HasColumnType("bit");
+
+                    b.Property<int?>("Type")
+                        .HasColumnType("int");
+
+                    b.Property<string>("UniqueName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserImage")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("IsAccountOwner")
+                        .IsUnique()
+                        .HasDatabaseName("IX_AspNetUsers_IsAccountOwner")
+                        .HasFilter("IsAccountOwner = 1");
+
+                    b.HasIndex("NormalizedEmail")
+                        .HasDatabaseName("EmailIndex");
+
+                    b.HasIndex("NormalizedUserName")
+                        .IsUnique()
+                        .HasDatabaseName("UserNameIndex")
+                        .HasFilter("[NormalizedUserName] IS NOT NULL");
+
+                    b.ToTable("AspNetUsers", (string)null);
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Area", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("Areas");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("AssetCode")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Assets");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Category", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Categories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Comments", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CommentType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Commenter")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Commenttext")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Documents")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalCommentId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("ExternalSourceEmailS3Key")
+                        .HasMaxLength(2048)
+                        .HasColumnType("nvarchar(2048)");
+
+                    b.Property<DateTimeOffset?>("ExternalUpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalVersionHash")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RecordType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int?>("WorkerOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("UserId");
+
+                    b.HasIndex("WorkerOrderId");
+
+                    b.ToTable("Comments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.CompletionDocTemplate", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ServiceKey")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("TemplateUrl")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ServiceKey", "IsActive");
+
+                    b.ToTable("CompletionDocTemplates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ContactDetails", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DateOfBirth")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Gender")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PrivacySetting")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Tags")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Territory")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.ToTable("ContactDetails");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ContactType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FirstName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LastName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("MiddleName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Owner")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("SiteContactOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Title")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Contacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Department", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Departments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AcceptToken")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("AcknowledgedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CommercialStatusUpdatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CompletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DispatchNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DispatchedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("EmailSent")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("EstimatedArrivalAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("EtaManualOverride")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("InvoiceNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("InvoiceStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<decimal?>("NTEAmount")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<string>("PONumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PaymentStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ReplyToAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<DateTime?>("ScheduledDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TechPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("VendorNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<DateTime?>("VerifiedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("VerifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("Dispatches");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchChecklistItem", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CompletedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("CompletedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool>("IsCompleted")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ItemText")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("DispatchChecklistItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchSignoff", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Signature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignatureMethod")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("SignedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("SignoffType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.ToTable("DispatchSignoffs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchUpliftRequest", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<decimal?>("CurrentNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<DateTime?>("DecidedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DecidedByUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DecisionNote")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("EscalatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("EvidenceDocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("ExpiresAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("InitialNotificationSentAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("NotificationError")
+                        .HasMaxLength(500)
+                        .HasColumnType("nvarchar(500)");
+
+                    b.Property<string>("NotificationStatus")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<string>("RequestKey")
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<string>("RequestedByVendorName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<decimal>("RequestedNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<int>("RequiredTier")
+                        .HasColumnType("int");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<string>("Status")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<string>("VendorReason")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId")
+                        .IsUnique()
+                        .HasFilter("[Status] IN ('Pending', 'ChangesRequested')");
+
+                    b.HasIndex("EvidenceDocumentId");
+
+                    b.HasIndex("DispatchId", "RequestKey")
+                        .IsUnique()
+                        .HasFilter("[RequestKey] IS NOT NULL");
+
+                    b.ToTable("DispatchUpliftRequests");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchWorkOrder", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("DispatchWorkOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DropdownOption", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Category")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ParentValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Value")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("DropdownOptions");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("CanChangeProviderNumber")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ConfirmUserName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DateOfBirth")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DepartmentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("EmployeeNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FirstName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Gender")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("HireDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<int?>("JobTitleId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("LastLogin")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LastName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("MiddleName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("PermissionGroupId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("RegionId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("SMSAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TimeZone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Website")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DepartmentId");
+
+                    b.HasIndex("JobTitleId");
+
+                    b.HasIndex("RegionId");
+
+                    b.ToTable("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeAddress", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CountryCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CountyId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("StateCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Street")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("StreetLineTwo")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId")
+                        .IsUnique();
+
+                    b.ToTable("EmployeeAddresses");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeEmail", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<int?>("EmailTypeId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsPrimary")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.ToTable("EmployeeEmails");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeePhone", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Extension")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsPrimary")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Number")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("PhoneTypeId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.ToTable("EmployeePhones");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Events", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("AllDay")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("EndDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("EndTime")
+                        .HasMaxLength(10)
+                        .HasColumnType("nvarchar(10)");
+
+                    b.Property<string>("EventColor")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Location")
+                        .HasMaxLength(150)
+                        .HasColumnType("nvarchar(150)");
+
+                    b.Property<int?>("RecordID")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RecordName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("RecordTargetType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("ReminderMinutes")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime>("StartDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("StartTime")
+                        .HasMaxLength(10)
+                        .HasColumnType("nvarchar(10)");
+
+                    b.Property<string>("Title")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Events");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.FollowUps", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Reason")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("ScheduleDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<TimeSpan>("ScheduleStartTime")
+                        .HasColumnType("time");
+
+                    b.Property<string>("Status")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.HasIndex("LocationId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("FollowUps");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ForgetPasswordCode", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Code")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Email")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("ForgetPasswordCodes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.JobTitle", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("JobTitles");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalLocationId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Latitude")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Longitude")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Title")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.ToTable("Locations");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.PMSchedules", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AssetId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Frequency")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("StartDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AssetId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("PMSchedules");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BillingAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("Date")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ProjectName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("QuotId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ShippingAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("Quotes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.QuotesLineItems", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Descriptions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<decimal?>("Lineitem")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<int?>("LineitemNumber")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("QuoteId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("QuoteId");
+
+                    b.ToTable("QuotesLines");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Region", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Regions");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Service", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("CompletionDocTemplateId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("IconKey")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<bool>("RequiresCompletionDocument")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Trade")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CompletionDocTemplateId");
+
+                    b.HasIndex("IsActive");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.HasIndex("Trade");
+
+                    b.ToTable("Services");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ServiceWorkOrderType", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("ServiceId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ServiceId", "WorkOrderType")
+                        .IsUnique();
+
+                    b.ToTable("ServiceWorkOrderTypes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.SitePreferredVendor", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Trade")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("UpdatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("LocationId", "VendorId")
+                        .IsUnique()
+                        .HasFilter("[Trade] IS NULL");
+
+                    b.HasIndex("LocationId", "VendorId", "Trade")
+                        .IsUnique()
+                        .HasFilter("[Trade] IS NOT NULL");
+
+                    b.ToTable("SitePreferredVendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplate", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("TaskListTemplates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplateItem", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ItemText")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<int>("TaskListTemplateId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("TaskListTemplateId");
+
+                    b.ToTable("TaskListTemplateItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Template", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AfterPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AfterPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AssignTo")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DueDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Priority")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffSignature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderTitle")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AssignTo");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Templates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Trade", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("Trades");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserPermissionOverride", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("PermissionKey")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<int>("State")
+                        .HasColumnType("int");
+
+                    b.HasKey("UserId", "PermissionKey");
+
+                    b.HasIndex("UserId", "PermissionKey")
+                        .IsUnique()
+                        .HasDatabaseName("IX_UserPermissionOverrides_UserId_PermissionKey");
+
+                    b.ToTable("UserPermissionOverrides");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserServiceArea", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Area")
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.HasKey("UserId", "Area");
+
+                    b.HasIndex("UserId", "Area")
+                        .IsUnique()
+                        .HasDatabaseName("IX_UserServiceAreas_UserId_Area");
+
+                    b.ToTable("UserServiceAreas");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AvailabilityStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("AvailabilityUpdatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CompanyId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CompanyName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CompanyPhone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ContactName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("GoogleMapsUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Phone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PreferredContact")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TradeSpecialties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CompanyId");
+
+                    b.ToTable("Vendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAccessToken", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime>("ExpiresAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime>("IssuedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("LastUsedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("RevokedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Token")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Token")
+                        .IsUnique();
+
+                    b.HasIndex("VendorId");
+
+                    b.ToTable("VendorAccessTokens");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAuditLog", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Actor")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("FieldName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NewValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("OldValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.ToTable("VendorAuditLogs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("AreaId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CompanyPhone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("GoogleMapsUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AreaId");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("VendorCompanies");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompletionDocument", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ContentType")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("OriginalFileName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Purpose")
+                        .IsRequired()
+                        .HasMaxLength(30)
+                        .HasColumnType("nvarchar(30)");
+
+                    b.Property<string>("RejectionReason")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ReplacesDocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ReviewStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ReviewedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ScanStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ScannedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<long>("SizeBytes")
+                        .HasColumnType("bigint");
+
+                    b.Property<string>("StoredFileName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("Version")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("VendorCompletionDocuments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("AdditionalContacts")
+                        .HasMaxLength(4000)
+                        .HasColumnType("nvarchar(4000)");
+
+                    b.Property<string>("AfterPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AfterPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateOnly?>("AssignDate")
+                        .HasColumnType("date");
+
+                    b.Property<string>("AssignTo")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("AvetaRequired")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("AvettaTask")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Building")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("CarriedOver")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CompletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Customer")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DateReported")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("DocStatus")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("DueDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ExternalAssignedTo")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<DateTimeOffset?>("ExternalLastOccurredAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalRecordType")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset?>("ExternalUpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalVersionHash")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("ExternalWorkOrderId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ExtraServices")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<string>("FlagColor")
+                        .HasMaxLength(7)
+                        .HasColumnType("nvarchar(7)");
+
+                    b.Property<string>("FrozenCompany")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FrozenPoc")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FrozenSite")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("InternalWONumber")
+                        .HasMaxLength(11)
+                        .HasColumnType("nvarchar(11)");
+
+                    b.Property<bool>("IsAddOn")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LegacyStatus")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("LifecycleStatus")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("OperationalFlags")
+                        .HasColumnType("int");
+
+                    b.Property<DateOnly?>("OriginalDate")
+                        .HasColumnType("date");
+
+                    b.Property<DateOnly?>("OriginalWeek")
+                        .HasColumnType("date");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PocName")
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("PocNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<string>("PocPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int?>("PrimaryDispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Priority")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Problem")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("RescheduleCount")
+                        .HasColumnType("int");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<bool?>("ScheduleWeekOnly")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("ScheduledDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("ScheduledEnd")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("ScheduledStart")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Service")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<int?>("ServiceId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ServiceNameSnapshot")
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("ServiceNotes")
+                        .HasMaxLength(4000)
+                        .HasColumnType("nvarchar(4000)");
+
+                    b.Property<string>("Severity")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffSignature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteCode")
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<string>("Source")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SourceEmailS3Key")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SubTrade")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateOnly?>("TargetWeek")
+                        .HasColumnType("date");
+
+                    b.Property<string>("TechPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<string>("Trade")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<decimal?>("VendorNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<string>("VendorNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<int?>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("WorkerOrderNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderTitle")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("istemplate")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("ExternalWorkOrderId")
+                        .IsUnique()
+                        .HasFilter("[ExternalWorkOrderId] IS NOT NULL AND [ExternalWorkOrderId] <> ''");
+
+                    b.HasIndex("InternalWONumber")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.HasIndex("LocationId");
+
+                    b.HasIndex("PrimaryDispatchId");
+
+                    b.HasIndex("ScheduledDate");
+
+                    b.HasIndex("ServiceId");
+
+                    b.HasIndex("SiteCode")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.HasIndex("WorkOrderType");
+
+                    b.HasIndex("AssignTo", "ScheduledDate");
+
+                    b.HasIndex("LifecycleStatus", "ScheduledDate")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.ToTable("workOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAttachments", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Category")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("workOrderAttachments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAuditLog", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Action")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ActorType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CorrelationId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("EventType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FieldName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NewValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("OldValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UserId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("WorkOrderAuditLogs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderCategories", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("workOrderCategories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderContacts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("WorkOrderContacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderExternalReceipt", b =>
+                {
+                    b.Property<long>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("bigint");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<long>("Id"));
+
+                    b.Property<string>("ExternalId")
+                        .IsRequired()
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Kind")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<DateTimeOffset>("ProcessedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("Source")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset>("UpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("VersionHash")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Source", "Kind", "ExternalId")
+                        .IsUnique()
+                        .HasDatabaseName("IX_WorkOrderExternalReceipts_Source_Kind_ExternalId");
+
+                    b.ToTable("WorkOrderExternalReceipts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderFieldLock", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("FieldName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<DateTime>("LockedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("LockedByUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkOrderId", "FieldName")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderFieldLocks");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderReconciliationJob", b =>
+                {
+                    b.Property<int>("Id")
+                        .HasColumnType("int");
+
+                    b.Property<int>("CommentsProcessed")
+                        .HasColumnType("int");
+
+                    b.Property<DateTimeOffset?>("CompletedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ErrorCode")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<Guid?>("FenceToken")
+                        .HasColumnType("uniqueidentifier");
+
+                    b.Property<DateTimeOffset?>("LeaseExpiresAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("Reason")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset?>("RequestedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<Guid>("RunId")
+                        .HasColumnType("uniqueidentifier");
+
+                    b.Property<DateTimeOffset?>("StartedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("State")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<int>("WorkOrdersProcessed")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("State");
+
+                    b.ToTable("WorkOrderReconciliationJobs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWebhookDelivery", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BodySha256")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("DeliveryId")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("EventType")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<DateTimeOffset>("OccurredAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<DateTimeOffset>("ProcessedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DeliveryId")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderWebhookDeliveries");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWeekRolledLedger", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CorrelationId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("ProcessedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateOnly>("SourceWeekStart")
+                        .HasColumnType("date");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkOrderId", "SourceWeekStart")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderWeekRolledLedgers");
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRole", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ConcurrencyStamp")
+                        .IsConcurrencyToken()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("NormalizedName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique()
+                        .HasDatabaseName("RoleNameIndex")
+                        .HasFilter("[NormalizedName] IS NOT NULL");
+
+                    b.ToTable("AspNetRoles", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRoleClaim<string>", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ClaimType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ClaimValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("RoleId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AspNetRoleClaims", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserClaim<string>", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ClaimType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ClaimValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UserId");
+
+                    b.ToTable("AspNetUserClaims", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserLogin<string>", b =>
+                {
+                    b.Property<string>("LoginProvider")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ProviderKey")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ProviderDisplayName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("LoginProvider", "ProviderKey");
+
+                    b.HasIndex("UserId");
+
+                    b.ToTable("AspNetUserLogins", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserRole<string>", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("RoleId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("UserId", "RoleId");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AspNetUserRoles", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserToken<string>", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("LoginProvider")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Value")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("UserId", "LoginProvider", "Name");
+
+                    b.ToTable("AspNetUserTokens", (string)null);
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Addresses", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany("Addresses")
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contact")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Contact");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Comments", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("Comments")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "ApplicationUser")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Comments")
+                        .HasForeignKey("WorkerOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("ApplicationUser");
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ContactDetails", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contact")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Contact");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany("Contacts")
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany("Contacts")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("Dispatches")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Dispatches")
+                        .HasForeignKey("WorkOrderId");
+
+                    b.Navigation("Vendor");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchChecklistItem", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("ChecklistItems")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchSignoff", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("Signoffs")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchUpliftRequest", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany()
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.VendorCompletionDocument", "EvidenceDocument")
+                        .WithMany()
+                        .HasForeignKey("EvidenceDocumentId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("EvidenceDocument");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchWorkOrder", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("DispatchWorkOrders")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Department", "Department")
+                        .WithMany("Employees")
+                        .HasForeignKey("DepartmentId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.JobTitle", "JobTitle")
+                        .WithMany("Employees")
+                        .HasForeignKey("JobTitleId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Region", "Region")
+                        .WithMany("Employees")
+                        .HasForeignKey("RegionId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Department");
+
+                    b.Navigation("JobTitle");
+
+                    b.Navigation("Region");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeAddress", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithOne("Address")
+                        .HasForeignKey("Data.SeaHavenIndustries.EmployeeAddress", "EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeEmail", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany("Emails")
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeePhone", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany("Phones")
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.FollowUps", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany()
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Employee");
+
+                    b.Navigation("Location");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.PMSchedules", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Assets", "Asset")
+                        .WithMany("PMSchedules")
+                        .HasForeignKey("AssetId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Asset");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contacts")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Quotes")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Contacts");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.QuotesLineItems", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Quotes", "Quotes")
+                        .WithMany("LineItems")
+                        .HasForeignKey("QuoteId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Quotes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Service", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.CompletionDocTemplate", "CompletionDocTemplate")
+                        .WithMany()
+                        .HasForeignKey("CompletionDocTemplateId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("CompletionDocTemplate");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ServiceWorkOrderType", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Service", "Service")
+                        .WithMany("SupportedWorkOrderTypes")
+                        .HasForeignKey("ServiceId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Service");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.SitePreferredVendor", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("SitePreferences")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Location");
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplateItem", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.TaskListTemplate", "Template")
+                        .WithMany("Items")
+                        .HasForeignKey("TaskListTemplateId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Template");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Template", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "AssignToUser")
+                        .WithMany("Templates")
+                        .HasForeignKey("AssignTo")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Category", "Category")
+                        .WithMany("Templates")
+                        .HasForeignKey("CategoryId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "POC")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Locations")
+                        .WithMany("Templates")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("AssignToUser");
+
+                    b.Navigation("Category");
+
+                    b.Navigation("Locations");
+
+                    b.Navigation("POC");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserPermissionOverride", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("User");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserServiceArea", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany("ServiceAreas")
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("User");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.VendorCompany", "Company")
+                        .WithMany("Vendors")
+                        .HasForeignKey("CompanyId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Company");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAccessToken", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany()
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAuditLog", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("AuditLogs")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Area", "Area")
+                        .WithMany()
+                        .HasForeignKey("AreaId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Area");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompletionDocument", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("CompletionDocuments")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany()
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("Vendor");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "AssignToUser")
+                        .WithMany("WorkOrders")
+                        .HasForeignKey("AssignTo")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Locations")
+                        .WithMany("workOrders")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "PrimaryDispatch")
+                        .WithMany()
+                        .HasForeignKey("PrimaryDispatchId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Service", "ServiceDefinition")
+                        .WithMany()
+                        .HasForeignKey("ServiceId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("AssignToUser");
+
+                    b.Navigation("Locations");
+
+                    b.Navigation("PrimaryDispatch");
+
+                    b.Navigation("ServiceDefinition");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAttachments", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("workOrderAttachments")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAuditLog", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("User");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderCategories", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Category", "Category")
+                        .WithMany("WorkOrderCategories")
+                        .HasForeignKey("CategoryId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("WorkOrderCategories")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Category");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderContacts", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "POC")
+                        .WithMany("WorkOrderContacts")
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("WorkOrderContacts")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("POC");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderFieldLock", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("FieldLocks")
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWeekRolledLedger", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRoleClaim<string>", b =>
+                {
+                    b.HasOne("Microsoft.AspNetCore.Identity.IdentityRole", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserClaim<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserLogin<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserRole<string>", b =>
+                {
+                    b.HasOne("Microsoft.AspNetCore.Identity.IdentityRole", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserToken<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Accounts", b =>
+                {
+                    b.Navigation("Addresses");
+
+                    b.Navigation("Contacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.Navigation("ServiceAreas");
+
+                    b.Navigation("Templates");
+
+                    b.Navigation("WorkOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.Navigation("PMSchedules");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Category", b =>
+                {
+                    b.Navigation("Templates");
+
+                    b.Navigation("WorkOrderCategories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.Navigation("WorkOrderContacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Department", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.Navigation("ChecklistItems");
+
+                    b.Navigation("Comments");
+
+                    b.Navigation("CompletionDocuments");
+
+                    b.Navigation("DispatchWorkOrders");
+
+                    b.Navigation("Signoffs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.Navigation("Address");
+
+                    b.Navigation("Emails");
+
+                    b.Navigation("Phones");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.JobTitle", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.Navigation("Contacts");
+
+                    b.Navigation("Templates");
+
+                    b.Navigation("workOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.Navigation("LineItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Region", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Service", b =>
+                {
+                    b.Navigation("SupportedWorkOrderTypes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplate", b =>
+                {
+                    b.Navigation("Items");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.Navigation("AuditLogs");
+
+                    b.Navigation("Dispatches");
+
+                    b.Navigation("SitePreferences");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.Navigation("Vendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.Navigation("Comments");
+
+                    b.Navigation("Dispatches");
+
+                    b.Navigation("FieldLocks");
+
+                    b.Navigation("Quotes");
+
+                    b.Navigation("WorkOrderCategories");
+
+                    b.Navigation("WorkOrderContacts");
+
+                    b.Navigation("workOrderAttachments");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/Data.SeaHavenIndustries/Migrations/20260925001752_SH393_BackfillBoardCreatedDispatchWorkOrder.cs b/Data.SeaHavenIndustries/Migrations/20260925001752_SH393_BackfillBoardCreatedDispatchWorkOrder.cs
new file mode 100644
index 0000000..c0f0242
--- /dev/null
+++ b/Data.SeaHavenIndustries/Migrations/20260925001752_SH393_BackfillBoardCreatedDispatchWorkOrder.cs
@@ -0,0 +1,43 @@
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Data.SeaHavenIndustries.Migrations
+{
+    /// <summary>
+    /// SH-393: board-created work orders with a vendor stored their primary dispatch with
+    /// no WorkOrderId and no DispatchWorkOrders link, so every owned-or-linked read (uplift
+    /// list, allowance, approval queue WO number, dispatch patches) missed it. Data-only
+    /// heal: assign the dispatch to the single work order that names it as primary. Rows
+    /// already owned or linked, and dispatches named primary by more than one work order,
+    /// are left untouched, so re-running is a no-op.
+    /// </summary>
+    public partial class SH393_BackfillBoardCreatedDispatchWorkOrder : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.Sql(
+                """
+                UPDATE d
+                SET d.[WorkOrderId] = w.[Id]
+                FROM [Dispatches] AS d
+                INNER JOIN [workOrders] AS w ON w.[PrimaryDispatchId] = d.[Id]
+                WHERE d.[WorkOrderId] IS NULL
+                  AND NOT EXISTS (
+                      SELECT 1 FROM [DispatchWorkOrders] AS l
+                      WHERE l.[DispatchId] = d.[Id])
+                  AND (
+                      SELECT COUNT(*) FROM [workOrders] AS owner
+                      WHERE owner.[PrimaryDispatchId] = d.[Id]) = 1;
+                """);
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            // The heal is not reversible: healed rows are indistinguishable from dispatches
+            // that were created with their work order set.
+        }
+    }
+}
diff --git a/SeaHaven.DataServices/Implementation/UpliftDataService.cs b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
index 1d72cf5..42c338f 100644
--- a/SeaHaven.DataServices/Implementation/UpliftDataService.cs
+++ b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
@@ -336,6 +336,25 @@ namespace SeaHaven.DataServices.Implementation
                 .AnyAsync(u => u.Status == "Pending" || u.Status == "ChangesRequested", cancellationToken);
         }
 
+        public async Task<Dispatch?> GetUpliftDispatchForWorkOrderAsync(
+            int workOrderId,
+            int? primaryDispatchId,
+            CancellationToken cancellationToken)
+        {
+            var candidates = await _context.Dispatches
+                .Where(d =>
+                    (d.IsDeleted == null || d.IsDeleted == false)
+                    && (
+                        d.WorkOrderId == workOrderId
+                        || d.DispatchWorkOrders!.Any(link => link.WorkOrderId == workOrderId)))
+                .OrderByDescending(d => d.DispatchedAt ?? d.CreatedDate)
+                .ThenByDescending(d => d.Id)
+                .ToListAsync(cancellationToken);
+
+            return candidates.FirstOrDefault(d => d.Id == primaryDispatchId)
+                ?? candidates.FirstOrDefault();
+        }
+
         public Task<decimal> SumAutoApprovedAmountForWorkOrderAsync(int workOrderId, CancellationToken cancellationToken)
         {
             return ForWorkOrder(workOrderId)
diff --git a/SeaHaven.DataServices/Interfaces/IUpliftDataService.cs b/SeaHaven.DataServices/Interfaces/IUpliftDataService.cs
index 26c968c..ed89f5b 100644
--- a/SeaHaven.DataServices/Interfaces/IUpliftDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IUpliftDataService.cs
@@ -19,6 +19,10 @@ namespace SeaHaven.DataServices.Interfaces
         Task<UpliftEvidenceDownloadData?> GetEvidenceForInternalDownloadAsync(int upliftRequestId, CancellationToken cancellationToken);
         Task<bool> HasPendingAsync(int dispatchId, CancellationToken cancellationToken);
         Task<bool> HasPendingForWorkOrderAsync(int workOrderId, CancellationToken cancellationToken);
+        // SH-393: the tracked dispatch a work-order uplift is written to, resolved through the
+        // same scope the work-order uplift reads use (non-deleted, owned or linked): the
+        // work order's primary dispatch when it qualifies, otherwise its latest qualifying one.
+        Task<Dispatch?> GetUpliftDispatchForWorkOrderAsync(int workOrderId, int? primaryDispatchId, CancellationToken cancellationToken);
         Task<decimal> SumAutoApprovedAmountForWorkOrderAsync(int workOrderId, CancellationToken cancellationToken);
         // Approval queue read contract: set-based per-work-order exposure totals covering
         // auto-approved and admin-approved uplift amounts (pending, rejected,
diff --git a/SeaHaven.Services/Implementation/WorkOrderBoardCreateService.cs b/SeaHaven.Services/Implementation/WorkOrderBoardCreateService.cs
index dd2d06f..149a47b 100644
--- a/SeaHaven.Services/Implementation/WorkOrderBoardCreateService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderBoardCreateService.cs
@@ -249,10 +249,14 @@ namespace SeaHaven.Services.Implementation
                 _mutationData.TrackNewWorkOrder(workOrder);
                 var firstOutcome = await _mutationData.SaveAsync(ct);
 
-                if (dispatch != null && workOrder.PrimaryDispatchId == null)
+                // SH-393: the first save already fixes up PrimaryDispatchId from the
+                // PrimaryDispatch navigation, so the dispatch's own WorkOrderId must be
+                // backfilled independently. Without it the dispatch belongs to no work order
+                // and every owned-or-linked read (uplifts, dispatch patches) misses it.
+                if (dispatch != null)
                 {
-                    workOrder.PrimaryDispatchId = dispatch.Id;
-                    dispatch.WorkOrderId = workOrder.Id;
+                    workOrder.PrimaryDispatchId ??= dispatch.Id;
+                    dispatch.WorkOrderId ??= workOrder.Id;
                 }
 
 
diff --git a/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs b/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs
index 149aeaa..82511d8 100644
--- a/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs
@@ -104,24 +104,16 @@ namespace SeaHaven.Services.Implementation
                     $"Cannot create an uplift on a '{workOrder.LifecycleStatus}' work order");
             }
 
-            Dispatch? dispatch;
-            if (workOrder.PrimaryDispatchId is int primaryDispatchId)
-            {
-                dispatch = await _dispatchData.GetByIdAsync(primaryDispatchId);
-                if (dispatch == null)
-                    throw new KeyNotFoundException("Dispatch not found");
-            }
-            else
-            {
-                dispatch = (await _dispatchData.GetByWorkOrderIdAsync(workOrderId, cancellationToken))
-                    .Where(candidate => candidate.IsDeleted != true)
-                    .OrderByDescending(candidate => candidate.DispatchedAt ?? candidate.CreatedDate)
-                    .ThenByDescending(candidate => candidate.Id)
-                    .FirstOrDefault();
-
-                if (dispatch == null)
-                    throw new InvalidOperationException("Work order has no primary dispatch for uplift requests");
-            }
+            // SH-393: write to a dispatch the work order's uplift reads resolve back to it.
+            // Loading the primary by id alone accepted soft-deleted, unlinked, or other work
+            // orders' dispatches, so the request never showed on this work order and never
+            // consumed its allowance.
+            var dispatch = await _upliftData.GetUpliftDispatchForWorkOrderAsync(
+                workOrderId,
+                workOrder.PrimaryDispatchId,
+                cancellationToken);
+            if (dispatch == null)
+                throw new InvalidOperationException("Work order has no primary dispatch for uplift requests");
 
             if (IsTerminalForUplift(dispatch.Status))
                 throw new InvalidOperationException($"Cannot request uplift on a '{dispatch.Status}' dispatch");
diff --git a/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs b/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs
index e797a68..8e4fb7b 100644
--- a/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs
@@ -442,6 +442,7 @@ public class WorkOrderBoardCancelServiceTests
         public Task<UpliftEvidenceDownloadData?> GetEvidenceForInternalDownloadAsync(int upliftRequestId, CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<bool> HasPendingAsync(int dispatchId, CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<bool> HasPendingForWorkOrderAsync(int workOrderId, CancellationToken cancellationToken) => throw new NotSupportedException();
+        public Task<Dispatch?> GetUpliftDispatchForWorkOrderAsync(int workOrderId, int? primaryDispatchId, CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<decimal> SumAutoApprovedAmountForWorkOrderAsync(int workOrderId, CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<IReadOnlyList<WorkOrderUpliftExposureData>> GetApprovedExposureForWorkOrdersAsync(IReadOnlyCollection<int> workOrderIds, CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<decimal> GetPendingExposureTotalAsync(CancellationToken cancellationToken) => throw new NotSupportedException();
diff --git a/SeaHavenIndustries.Tests/WorkOrderUpliftDispatchOwnershipTests.cs b/SeaHavenIndustries.Tests/WorkOrderUpliftDispatchOwnershipTests.cs
new file mode 100644
index 0000000..840fd28
--- /dev/null
+++ b/SeaHavenIndustries.Tests/WorkOrderUpliftDispatchOwnershipTests.cs
@@ -0,0 +1,344 @@
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Options;
+using SeaHaven.DataServices.Implementation;
+using SeaHaven.Services.Configuration;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Exceptions;
+using SeaHaven.Services.Helpers;
+using SeaHaven.Services.Implementation;
+using SeaHaven.Services.Validation;
+using Xunit;
+
+namespace SeaHavenIndustries.Tests;
+
+/// <summary>
+/// SH-393: an uplift created from a work order must land on a dispatch the work order's
+/// uplift reads resolve back to it (non-deleted, owned or linked), so the request is
+/// listed on that work order, consumes its allowance and carries its WO number in the
+/// approval queue.
+/// </summary>
+public sealed class WorkOrderUpliftDispatchOwnershipTests
+{
+    private const string NoPrimaryDispatchMessage = "Work order has no primary dispatch for uplift requests";
+
+    private static ApplicationDbContext CreateContext()
+    {
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseInMemoryDatabase(Guid.NewGuid().ToString())
+            .Options;
+        var context = new ApplicationDbContext(options);
+        WorkOrderAccountTestHelpers.SeedBoardCreateScope(context);
+        context.Vendors.Add(new Vendor { Id = 5, CompanyName = "Acme HVAC" });
+        context.SaveChanges();
+        return context;
+    }
+
+    private static WorkOrderBoardCreateService NewBoardCreateService(ApplicationDbContext context)
+    {
+        var boardData = new WorkOrderBoardDataService(context);
+        var resolver = WorkOrderAccountTestHelpers.Resolver(context);
+        var fieldLocks = new WorkOrderFieldLockService(new WorkOrderFieldLockDataService(context));
+        return new WorkOrderBoardCreateService(
+            boardData,
+            new WorkOrderBoardMutationDataService(context),
+            new WorkOrderBoardService(boardData, resolver),
+            new WorkOrderAuditService(new WorkOrderAuditDataService(context), fieldLocks),
+            new WorkOrderBoardCreateValidation(),
+            resolver,
+            new WorkOrderPocDataService(context));
+    }
+
+    private static WorkOrderBoardUpdateService NewBoardUpdateService(ApplicationDbContext context)
+    {
+        var fieldLocks = new WorkOrderFieldLockService(new WorkOrderFieldLockDataService(context));
+        return new WorkOrderBoardUpdateService(
+            new WorkOrderBoardDataService(context),
+            new WorkOrderBoardMutationDataService(context),
+            new WorkOrderAuditService(new WorkOrderAuditDataService(context), fieldLocks));
+    }
+
+    private static WorkOrderUpliftService NewUpliftService(ApplicationDbContext context)
+    {
+        return new WorkOrderUpliftService(
+            new UpliftDataService(context),
+            new DispatchDataService(context),
+            new WorkOrderDetailDataService(context),
+            WorkOrderAccountTestHelpers.Resolver(context),
+            new UserDataService(context),
+            TimeProvider.System,
+            Options.Create(new ApprovalsOptions
+            {
+                UpliftTier1MaxUsd = 2500m,
+                Tier1Roles = new[] { "Approver" },
+                Tier2Roles = new[] { "Manager" },
+            }));
+    }
+
+    private static Task<WorkOrderBoardRowDto> BoardCreateWithVendorAsync(
+        ApplicationDbContext context,
+        bool? isAddOn = null)
+    {
+        return NewBoardCreateService(context).CreateAsync(new WorkOrderBoardCreateRequestDto
+        {
+            WorkOrderType = WorkOrderType.PM,
+            SiteCode = "BK5",
+            LocationId = 1,
+            VendorId = 5,
+            IsAddOn = isAddOn,
+        }, WorkOrderAccountTestHelpers.AccountUser(), "actor-1");
+    }
+
+    private static Task<WorkOrderUpliftDto?> CreateUpliftAsync(
+        ApplicationDbContext context,
+        int workOrderId,
+        decimal amount,
+        int accountId = 1)
+    {
+        return NewUpliftService(context).CreateAsync(
+            workOrderId,
+            new CreateWorkOrderUpliftRequestDto { Amount = amount, Notes = "Extra coil work" },
+            WorkOrderAccountTestHelpers.AccountUser(accountId: accountId),
+            CancellationToken.None);
+    }
+
+    private static async Task<(int WorkOrderId, int PrimaryDispatchId)> SeedWorkOrderAsync(
+        ApplicationDbContext context,
+        Dispatch primary,
+        params Dispatch[] others)
+    {
+        context.Dispatches.Add(primary);
+        context.Dispatches.AddRange(others);
+        context.workOrders.Add(new WorkOrder
+        {
+            Id = 1,
+            InternalWONumber = "SH00001",
+            AccountId = 1,
+            WorkOrderType = WorkOrderType.PM,
+            PrimaryDispatchId = primary.Id,
+        });
+        await context.SaveChangesAsync();
+        return (1, primary.Id);
+    }
+
+    [Fact]
+    public async Task BoardCreate_WithVendor_PrimaryDispatchBelongsToWorkOrder()
+    {
+        await using var context = CreateContext();
+
+        var row = await BoardCreateWithVendorAsync(context);
+
+        var dispatch = await context.Dispatches.SingleAsync(d => d.Id == row.PrimaryDispatchId);
+        Assert.Equal(row.Id, dispatch.WorkOrderId);
+    }
+
+    [Fact]
+    public async Task BoardCreatedWorkOrder_PatchApptDate_KeepsPrimaryDispatch()
+    {
+        await using var context = CreateContext();
+        var row = await BoardCreateWithVendorAsync(context);
+        var workOrder = await context.workOrders.SingleAsync(w => w.Id == row.Id);
+        var dispatch = await context.Dispatches.SingleAsync(d => d.Id == row.PrimaryDispatchId);
+        workOrder.RowVersion = new byte[] { 1, 0, 0, 0, 0, 0, 0, 1 };
+        dispatch.RowVersion = new byte[] { 1, 0, 0, 0, 0, 0, 0, 2 };
+        await context.SaveChangesAsync();
+
+        var patched = await NewBoardUpdateService(context).PatchFieldAsync(row.Id, new WorkOrderBoardPatchRequestDto
+        {
+            Field = WorkOrderBoardFieldNames.ApptDate,
+            Value = "2026-10-05",
+            WorkOrderVersion = Convert.ToBase64String(workOrder.RowVersion),
+            DispatchVersion = Convert.ToBase64String(dispatch.RowVersion),
+        }, "actor-1");
+
+        Assert.Equal(row.PrimaryDispatchId, patched.PrimaryDispatchId);
+        Assert.Equal(1, await context.Dispatches.CountAsync());
+    }
+
+    [Fact]
+    public async Task BoardCreatedWorkOrder_AutoApprovedUplift_IsListedAndConsumesAllowance()
+    {
+        await using var context = CreateContext();
+        var row = await BoardCreateWithVendorAsync(context);
+
+        var created = await CreateUpliftAsync(context, row.Id, 400m);
+
+        Assert.Equal("auto_approved", created!.Status);
+        var listed = await NewUpliftService(context).ListAsync(
+            row.Id,
+            WorkOrderAccountTestHelpers.AccountUser(),
+            CancellationToken.None);
+        var uplift = Assert.Single(listed!);
+        Assert.Equal(created.Id, uplift.Id);
+        Assert.Equal(400m, await new UpliftDataService(context)
+            .SumAutoApprovedAmountForWorkOrderAsync(row.Id, CancellationToken.None));
+    }
+
+    [Fact]
+    public async Task BoardCreatedWorkOrder_RequestBeyondRemainingAllowance_GoesToPendingWithWorkOrderNumber()
+    {
+        await using var context = CreateContext();
+        var row = await BoardCreateWithVendorAsync(context);
+        await CreateUpliftAsync(context, row.Id, 400m);
+
+        var second = await CreateUpliftAsync(context, row.Id, 200m);
+
+        Assert.Equal("pending", second!.Status);
+        var (_, queue) = await new UpliftDataService(context)
+            .GetPagedAsync("Pending", null, 1, 25, CancellationToken.None);
+        var queued = Assert.Single(queue);
+        Assert.Equal(second.Id, queued.Id);
+        Assert.Equal(row.Id, queued.WorkOrderId);
+        Assert.Equal(row.WoNumber, queued.WorkOrderNumber);
+    }
+
+    [Fact]
+    public async Task BoardCreatedWorkOrder_OwnerRevokesAutoApprovedUplift()
+    {
+        await using var context = CreateContext();
+        var row = await BoardCreateWithVendorAsync(context);
+        var created = await CreateUpliftAsync(context, row.Id, 1m);
+
+        var revoked = await NewUpliftService(context).RevokeAsync(
+            row.Id,
+            created!.Id,
+            new RevokeWorkOrderUpliftRequestDto(),
+            WorkOrderAccountTestHelpers.AccountUser(),
+            CancellationToken.None);
+
+        Assert.Equal("revoked", revoked!.Status);
+        Assert.Equal(0m, await new UpliftDataService(context)
+            .SumAutoApprovedAmountForWorkOrderAsync(row.Id, CancellationToken.None));
+    }
+
+    [Fact]
+    public async Task ExAddOnWorkOrder_AfterScheduleClearsAddOn_UpliftIsListedOnWorkOrder()
+    {
+        await using var context = CreateContext();
+        var row = await BoardCreateWithVendorAsync(context, isAddOn: true);
+        Assert.True(row.IsAddOn);
+        var workOrder = await context.workOrders.SingleAsync(w => w.Id == row.Id);
+        workOrder.RowVersion = new byte[] { 1, 0, 0, 0, 0, 0, 0, 1 };
+        await context.SaveChangesAsync();
+        var rescheduled = await NewBoardUpdateService(context).PatchFieldAsync(row.Id, new WorkOrderBoardPatchRequestDto
+        {
+            Field = WorkOrderBoardFieldNames.ScheduledDate,
+            Value = DateTime.UtcNow.Date.AddDays(60).ToString("yyyy-MM-dd"),
+            WorkOrderVersion = Convert.ToBase64String(workOrder.RowVersion),
+        }, "actor-1");
+        Assert.False(rescheduled.IsAddOn);
+
+        var created = await CreateUpliftAsync(context, row.Id, 1m);
+
+        var listed = await NewUpliftService(context).ListAsync(
+            row.Id,
+            WorkOrderAccountTestHelpers.AccountUser(),
+            CancellationToken.None);
+        Assert.Equal(created!.Id, Assert.Single(listed!).Id);
+    }
+
+    [Fact]
+    public async Task Create_SoftDeletedPrimaryDispatch_UsesOwnedLiveDispatch()
+    {
+        await using var context = CreateContext();
+        var (workOrderId, _) = await SeedWorkOrderAsync(
+            context,
+            new Dispatch { Id = 10, VendorId = 5, WorkOrderId = 1, NTEAmount = 1000m, IsDeleted = true },
+            new Dispatch { Id = 11, VendorId = 5, WorkOrderId = 1, NTEAmount = 800m });
+
+        var created = await CreateUpliftAsync(context, workOrderId, 100m);
+
+        var request = await context.DispatchUpliftRequests.SingleAsync(u => u.Id == created!.Id);
+        Assert.Equal(11, request.DispatchId);
+        Assert.Equal(1000m, (await context.Dispatches.SingleAsync(d => d.Id == 10)).NTEAmount);
+        Assert.Equal(900m, (await context.Dispatches.SingleAsync(d => d.Id == 11)).NTEAmount);
+    }
+
+    [Fact]
+    public async Task Create_OnlySoftDeletedPrimaryDispatch_IsRejectedWithoutPersisting()
+    {
+        await using var context = CreateContext();
+        var (workOrderId, _) = await SeedWorkOrderAsync(
+            context,
+            new Dispatch { Id = 10, VendorId = 5, WorkOrderId = 1, NTEAmount = 1000m, IsDeleted = true });
+
+        var error = await Assert.ThrowsAsync<InvalidOperationException>(
+            () => CreateUpliftAsync(context, workOrderId, 100m));
+
+        Assert.Equal(NoPrimaryDispatchMessage, error.Message);
+        Assert.Empty(context.DispatchUpliftRequests);
+        Assert.Empty(context.WorkOrderAuditLogs);
+    }
+
+    [Fact]
+    public async Task Create_PrimaryDispatchOwnedByAnotherWorkOrder_IsNotUsed()
+    {
+        await using var context = CreateContext();
+        context.workOrders.Add(new WorkOrder { Id = 2, InternalWONumber = "SH00002", AccountId = 1 });
+        var (workOrderId, _) = await SeedWorkOrderAsync(
+            context,
+            new Dispatch { Id = 10, VendorId = 5, WorkOrderId = 2, NTEAmount = 1000m });
+
+        var error = await Assert.ThrowsAsync<InvalidOperationException>(
+            () => CreateUpliftAsync(context, workOrderId, 100m));
+
+        Assert.Equal(NoPrimaryDispatchMessage, error.Message);
+        Assert.Empty(context.DispatchUpliftRequests);
+        Assert.Equal(1000m, (await context.Dispatches.SingleAsync(d => d.Id == 10)).NTEAmount);
+    }
+
+    [Fact]
+    public async Task Create_UnlinkedPrimaryDispatch_IsRejectedInsteadOfHidingTheUplift()
+    {
+        await using var context = CreateContext();
+        var (workOrderId, _) = await SeedWorkOrderAsync(
+            context,
+            new Dispatch { Id = 10, VendorId = 5, WorkOrderId = null, NTEAmount = 1000m });
+
+        var error = await Assert.ThrowsAsync<InvalidOperationException>(
+            () => CreateUpliftAsync(context, workOrderId, 100m));
+
+        Assert.Equal(NoPrimaryDispatchMessage, error.Message);
+        Assert.Empty(context.DispatchUpliftRequests);
+    }
+
+    [Fact]
+    public async Task Create_PrimaryDispatchLinkedThroughDispatchWorkOrders_IsUsed()
+    {
+        await using var context = CreateContext();
+        context.workOrders.Add(new WorkOrder { Id = 2, InternalWONumber = "SH00002", AccountId = 1 });
+        var (workOrderId, _) = await SeedWorkOrderAsync(
+            context,
+            new Dispatch { Id = 10, VendorId = 5, WorkOrderId = 2, NTEAmount = 1000m });
+        context.DispatchWorkOrders.Add(new DispatchWorkOrder { DispatchId = 10, WorkOrderId = workOrderId });
+        await context.SaveChangesAsync();
+
+        var created = await CreateUpliftAsync(context, workOrderId, 100m);
+
+        var listed = await NewUpliftService(context).ListAsync(
+            workOrderId,
+            WorkOrderAccountTestHelpers.AccountUser(),
+            CancellationToken.None);
+        Assert.Equal(created!.Id, Assert.Single(listed!).Id);
+    }
+
+    [Fact]
+    public async Task CrossTenant_CreateAndList_AreRejected()
+    {
+        await using var context = CreateContext();
+        await WorkOrderAccountTestHelpers.EnsureAccountAsync(context, id: 2, name: "Other Corp");
+        var row = await BoardCreateWithVendorAsync(context);
+        await CreateUpliftAsync(context, row.Id, 1m);
+
+        var created = await CreateUpliftAsync(context, row.Id, 1m, accountId: 2);
+        var listed = await NewUpliftService(context).ListAsync(
+            row.Id,
+            WorkOrderAccountTestHelpers.AccountUser(accountId: 2),
+            CancellationToken.None);
+
+        Assert.Null(created);
+        Assert.Null(listed);
+        Assert.Equal(1, await context.DispatchUpliftRequests.CountAsync());
+    }
+}
diff --git a/SeaHavenIndustries.Tests/WorkOrderUpliftServiceTests.cs b/SeaHavenIndustries.Tests/WorkOrderUpliftServiceTests.cs
index 13e5c22..3ebb7c1 100644
--- a/SeaHavenIndustries.Tests/WorkOrderUpliftServiceTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderUpliftServiceTests.cs
@@ -289,7 +289,21 @@ public sealed class WorkOrderUpliftServiceTests
     {
         await using var context = CreateContext();
         var (workOrder, dispatch) = await SeedWorkOrderAsync(context);
-        dispatch.WorkOrderId = null;
+        // SH-393: an unlinked primary is no longer an uplift target, so the shared-dispatch
+        // case (owned by another work order, linked to this one) carries the duplicate check.
+        context.workOrders.Add(new WorkOrder
+        {
+            Id = 2,
+            InternalWONumber = "10000000002",
+            AccountId = 1,
+            WorkOrderType = WorkOrderType.PM,
+        });
+        dispatch.WorkOrderId = 2;
+        context.DispatchWorkOrders.Add(new DispatchWorkOrder
+        {
+            DispatchId = dispatch.Id,
+            WorkOrderId = workOrder.Id,
+        });
         context.DispatchUpliftRequests.Add(new DispatchUpliftRequest
         {
             Id = 100,

From e15de6e90bde6d1e02dd87fbace6c0376f7d43ac Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Thu, 24 Sep 2026 21:27:01 -0300
Subject: [PATCH 106/183] fix(media): enforce the per-work-order photo/video
 limit across both surfaces

The 10-photo / 3-video limit only counted dispatcher attachments, so vendor
portal uploads could push a work order past it (and vice versa). Count the
work order's current vendor documents alongside its attachments on both the
dispatcher media endpoint and the vendor portal. A new completion version
does not count the version it replaces.
---
 .../VendorPortalDocumentTests.cs              | 56 +++++++++++++++++++
 .../VendorDocumentDataService.cs              | 33 +++++++++++
 .../WorkOrderMediaDataService.cs              | 18 ++++++
 .../Interfaces/IVendorDocumentDataService.cs  | 13 +++++
 .../Interfaces/IWorkOrderMediaDataService.cs  |  8 +++
 .../Helpers/WorkOrderMediaContract.cs         | 23 ++++++++
 .../Implementation/VendorPortalService.cs     | 20 +++++++
 .../Implementation/WorkOrderMediaService.cs   | 27 +++------
 .../WorkOrderPhase6Tests.cs                   | 51 +++++++++++++++++
 9 files changed, 229 insertions(+), 20 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/VendorPortalDocumentTests.cs b/Api.SeaHavenIndustries.Tests/VendorPortalDocumentTests.cs
index 132f538..2ef7eca 100644
--- a/Api.SeaHavenIndustries.Tests/VendorPortalDocumentTests.cs
+++ b/Api.SeaHavenIndustries.Tests/VendorPortalDocumentTests.cs
@@ -453,6 +453,62 @@ public sealed class VendorPortalDocumentTests : IDisposable
         context.VendorCompletionDocuments.Should().BeEmpty();
     }
 
+    [Fact]
+    public async Task UploadCompletionDocument_RejectsFourthVideoAcrossDispatcherAndVendorUploads()
+    {
+        using var context = NewContext();
+        var (_, dispatch) = await SeedDispatch(context);
+        foreach (var name in new[] { "IMG_0001.MOV", "IMG_0002.MOV", "clip.mp4" })
+        {
+            context.workOrderAttachments.Add(new WorkOrderAttachments
+            {
+                WorkorderId = dispatch.WorkOrderId!.Value,
+                Attachments = $"https://api.example.com/Assets/Documents/{Guid.NewGuid()}_{name}",
+            });
+        }
+        await context.SaveChangesAsync();
+
+        var result = await NewController(context).UploadCompletionDocument(
+            dispatch.Id,
+            FormFile(FtypVideoBytes(2_048), "site-clip.MOV", "video/quicktime"));
+
+        result.Should().BeOfType<BadRequestObjectResult>();
+        context.VendorCompletionDocuments.Should().BeEmpty();
+    }
+
+    [Fact]
+    public async Task UploadCompletionDocument_NewVersionDoesNotCountTheVideoItReplaces()
+    {
+        using var context = NewContext();
+        var (vendor, dispatch) = await SeedDispatch(context);
+        foreach (var name in new[] { "IMG_0001.MOV", "IMG_0002.MOV" })
+        {
+            context.workOrderAttachments.Add(new WorkOrderAttachments
+            {
+                WorkorderId = dispatch.WorkOrderId!.Value,
+                Attachments = $"https://api.example.com/Assets/Documents/{Guid.NewGuid()}_{name}",
+            });
+        }
+        context.VendorCompletionDocuments.Add(new VendorCompletionDocument
+        {
+            VendorId = vendor.Id,
+            DispatchId = dispatch.Id,
+            WorkOrderId = dispatch.WorkOrderId!.Value,
+            ContentType = "video/mp4",
+            StoredFileName = "v1.mp4",
+            Version = 1,
+            Purpose = "Completion"
+        });
+        await context.SaveChangesAsync();
+
+        var result = await NewController(context).UploadCompletionDocument(
+            dispatch.Id,
+            FormFile(FtypVideoBytes(2_048), "site-clip-v2.mp4", "video/mp4"));
+
+        result.Should().BeOfType<OkObjectResult>();
+        context.VendorCompletionDocuments.Should().HaveCount(2);
+    }
+
     [Fact]
     public async Task UploadCompletionDocument_RejectsVideoOverHundredMegabytes()
     {
diff --git a/SeaHaven.DataServices/Implementation/VendorDocumentDataService.cs b/SeaHaven.DataServices/Implementation/VendorDocumentDataService.cs
index a952f45..d2a6890 100644
--- a/SeaHaven.DataServices/Implementation/VendorDocumentDataService.cs
+++ b/SeaHaven.DataServices/Implementation/VendorDocumentDataService.cs
@@ -17,6 +17,39 @@ namespace SeaHaven.DataServices.Implementation
         // supporting evidence never participates in completion versioning or replacement.
         private const string CompletionPurpose = "Completion";
 
+        public async Task<IReadOnlyList<string>> ListActiveContentTypesForWorkOrderAsync(
+            int workOrderId,
+            int? excludingDocumentId,
+            CancellationToken cancellationToken)
+        {
+            // Uplift evidence also records the latest completion id in ReplacesDocumentId, so only
+            // a newer completion version supersedes a document.
+            return await _context.VendorCompletionDocuments
+                .AsNoTracking()
+                .Where(document => document.WorkOrderId == workOrderId
+                    && (document.IsDeleted == null || document.IsDeleted == false)
+                    && (excludingDocumentId == null || document.Id != excludingDocumentId)
+                    && !_context.VendorCompletionDocuments.Any(newer =>
+                        newer.ReplacesDocumentId == document.Id
+                        && newer.Purpose == CompletionPurpose
+                        && (newer.IsDeleted == null || newer.IsDeleted == false)))
+                .Select(document => document.ContentType)
+                .ToListAsync(cancellationToken);
+        }
+
+        public async Task<IReadOnlyList<string>> ListActiveWorkOrderAttachmentUrlsAsync(
+            int workOrderId,
+            CancellationToken cancellationToken)
+        {
+            return await _context.workOrderAttachments
+                .AsNoTracking()
+                .Where(attachment => attachment.WorkorderId == workOrderId
+                    && attachment.IsDeleted != true
+                    && attachment.Attachments != null)
+                .Select(attachment => attachment.Attachments!)
+                .ToListAsync(cancellationToken);
+        }
+
         public Task<VendorCompletionDocument?> GetLatestForDispatchAsync(int dispatchId, CancellationToken cancellationToken)
         {
             return _context.VendorCompletionDocuments
diff --git a/SeaHaven.DataServices/Implementation/WorkOrderMediaDataService.cs b/SeaHaven.DataServices/Implementation/WorkOrderMediaDataService.cs
index 9ad9dbe..2d226e6 100644
--- a/SeaHaven.DataServices/Implementation/WorkOrderMediaDataService.cs
+++ b/SeaHaven.DataServices/Implementation/WorkOrderMediaDataService.cs
@@ -68,6 +68,24 @@ namespace SeaHaven.DataServices.Implementation
             return urls;
         }
 
+        public async Task<IReadOnlyList<string>> ListActiveVendorMediaContentTypesAsync(
+            int workOrderId,
+            CancellationToken cancellationToken)
+        {
+            // Uplift evidence also records the latest completion id in ReplacesDocumentId, so only
+            // a newer completion version supersedes a document.
+            return await _context.VendorCompletionDocuments
+                .AsNoTracking()
+                .Where(document => document.WorkOrderId == workOrderId
+                    && (document.IsDeleted == null || document.IsDeleted == false)
+                    && !_context.VendorCompletionDocuments.Any(newer =>
+                        newer.ReplacesDocumentId == document.Id
+                        && newer.Purpose == "Completion"
+                        && (newer.IsDeleted == null || newer.IsDeleted == false)))
+                .Select(document => document.ContentType)
+                .ToListAsync(cancellationToken);
+        }
+
         public void SetExpectedWorkOrderVersion(WorkOrder workOrder, byte[] version)
             => _context.Entry(workOrder).Property(w => w.RowVersion).OriginalValue = version;
 
diff --git a/SeaHaven.DataServices/Interfaces/IVendorDocumentDataService.cs b/SeaHaven.DataServices/Interfaces/IVendorDocumentDataService.cs
index b56948c..6986ef2 100644
--- a/SeaHaven.DataServices/Interfaces/IVendorDocumentDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IVendorDocumentDataService.cs
@@ -9,6 +9,19 @@ namespace SeaHaven.DataServices.Interfaces
         Task<VendorCompletionDocument?> GetMetadataForVendorDispatchAsync(int documentId, int dispatchId, int vendorId, CancellationToken cancellationToken);
         Task<List<VendorCompletionDocument>> ListForVendorDispatchAsync(int dispatchId, int vendorId, CancellationToken cancellationToken);
         Task<VendorCompletionDocument?> GetUpliftEvidenceAsync(int documentId, int dispatchId, int vendorId, CancellationToken cancellationToken);
+        /// <summary>
+        /// Content types of the work order's current vendor documents (not deleted, not replaced by a
+        /// newer completion version), optionally excluding one being replaced. SH-116 photo/video counts.
+        /// </summary>
+        Task<IReadOnlyList<string>> ListActiveContentTypesForWorkOrderAsync(
+            int workOrderId,
+            int? excludingDocumentId,
+            CancellationToken cancellationToken);
+
+        /// <summary>Stored URLs of the work order's non-deleted dispatcher attachments (SH-116 counts).</summary>
+        Task<IReadOnlyList<string>> ListActiveWorkOrderAttachmentUrlsAsync(
+            int workOrderId,
+            CancellationToken cancellationToken);
         Task AddAsync(VendorCompletionDocument document, CancellationToken cancellationToken);
         Task SaveChangesAsync(CancellationToken cancellationToken);
     }
diff --git a/SeaHaven.DataServices/Interfaces/IWorkOrderMediaDataService.cs b/SeaHaven.DataServices/Interfaces/IWorkOrderMediaDataService.cs
index 30d0005..caf6071 100644
--- a/SeaHaven.DataServices/Interfaces/IWorkOrderMediaDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IWorkOrderMediaDataService.cs
@@ -27,6 +27,14 @@ namespace SeaHaven.DataServices.Interfaces
         Task<IReadOnlyList<string>> ListActiveAttachmentUrlsAsync(
             int workOrderId,
             CancellationToken cancellationToken);
+
+        /// <summary>
+        /// Content types of the work order's current vendor-portal documents (not deleted, not
+        /// replaced by a newer completion version). SH-116 counts span both upload surfaces.
+        /// </summary>
+        Task<IReadOnlyList<string>> ListActiveVendorMediaContentTypesAsync(
+            int workOrderId,
+            CancellationToken cancellationToken);
         void SetExpectedWorkOrderVersion(WorkOrder workOrder, byte[] version);
         void MarkWorkOrderModified(WorkOrder workOrder);
         Task SaveAsync(CancellationToken cancellationToken);
diff --git a/SeaHaven.Services/Helpers/WorkOrderMediaContract.cs b/SeaHaven.Services/Helpers/WorkOrderMediaContract.cs
index f36fcf9..5ba60e3 100644
--- a/SeaHaven.Services/Helpers/WorkOrderMediaContract.cs
+++ b/SeaHaven.Services/Helpers/WorkOrderMediaContract.cs
@@ -80,6 +80,29 @@ namespace SeaHaven.Services.Helpers
                 : UploadKind.Unknown;
         }
 
+        /// <summary>
+        /// Per-work-order count check across both upload surfaces: dispatcher attachments
+        /// (classified by stored URL) and vendor-portal documents (classified by validated
+        /// content type). Returns the stable rejection message, or null when there is room.
+        /// </summary>
+        public static string? ValidateCount(
+            UploadKind kind,
+            IEnumerable<string> attachmentUrls,
+            IEnumerable<string> vendorContentTypes)
+        {
+            if (kind != UploadKind.Photo && kind != UploadKind.Video)
+                return null;
+
+            var count = attachmentUrls.Count(url => ResolveKind(null, url) == kind)
+                + vendorContentTypes.Count(type => ResolveKind(type, null) == kind);
+
+            if (kind == UploadKind.Photo && count >= MaxPhotosPerWorkOrder)
+                return "A work order can have at most 10 photos.";
+            if (kind == UploadKind.Video && count >= MaxVideosPerWorkOrder)
+                return "A work order can have at most 3 videos.";
+            return null;
+        }
+
         /// <summary>Stable, generic per-kind size message; never echoes file metadata.</summary>
         public static string? ValidateSize(long length, UploadKind kind)
         {
diff --git a/SeaHaven.Services/Implementation/VendorPortalService.cs b/SeaHaven.Services/Implementation/VendorPortalService.cs
index 0893fbb..0aa4353 100644
--- a/SeaHaven.Services/Implementation/VendorPortalService.cs
+++ b/SeaHaven.Services/Implementation/VendorPortalService.cs
@@ -926,6 +926,26 @@ namespace SeaHaven.Services.Implementation
                         "The completion document could not be replaced.");
                 }
             }
+
+            // SH-116: the 10-photo / 3-video limit is per work order across the dispatcher and
+            // vendor surfaces. A new completion version replaces its predecessor, so that one
+            // does not count against the upload that supersedes it.
+            if (dispatch.WorkOrderId is int workOrderId)
+            {
+                var excluded = resolvedPurpose == VendorDocumentPurpose.Completion
+                    ? replacedDocument?.Id
+                    : null;
+                var vendorTypes = await _documentData.ListActiveContentTypesForWorkOrderAsync(
+                    workOrderId, excluded, cancellationToken);
+                var attachmentUrls = await _documentData.ListActiveWorkOrderAttachmentUrlsAsync(
+                    workOrderId, cancellationToken);
+                var countMessage = WorkOrderMediaContract.ValidateCount(kind, attachmentUrls, vendorTypes);
+                if (countMessage != null)
+                {
+                    throw new InvalidOperationException(countMessage);
+                }
+            }
+
             var version = (latest?.Version ?? 0) + 1;
             var storedFileName = $"{dispatchId}_{version}_{Guid.NewGuid():N}{GetSafeExtension(file.FileName)}";
 
diff --git a/SeaHaven.Services/Implementation/WorkOrderMediaService.cs b/SeaHaven.Services/Implementation/WorkOrderMediaService.cs
index dccbffd..10ad8ff 100644
--- a/SeaHaven.Services/Implementation/WorkOrderMediaService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderMediaService.cs
@@ -352,8 +352,9 @@ namespace SeaHaven.Services.Implementation
 
         /// <summary>
         /// SH-116 contract: at most 10 photos and 3 videos per work order, counted over the
-        /// stored attachment rows. Legacy Before/After column slots replace in place and are
-        /// not counted. Documents have no per-work-order count limit.
+        /// stored attachment rows plus the work order's current vendor-portal documents. Legacy
+        /// Before/After column slots replace in place and are not counted. Documents have no
+        /// per-work-order count limit.
         /// </summary>
         private async Task EnsureWithinMediaCountsAsync(
             int workOrderId,
@@ -366,24 +367,10 @@ namespace SeaHaven.Services.Implementation
                 return;
 
             var urls = await _mediaData.ListActiveAttachmentUrlsAsync(workOrderId, cancellationToken);
-            var sameKindCount = urls.Count(url =>
-                WorkOrderMediaContract.ResolveKind(null, url) == kind);
-
-            if (kind == WorkOrderMediaContract.UploadKind.Photo
-                && sameKindCount >= WorkOrderMediaContract.MaxPhotosPerWorkOrder)
-            {
-                throw new WorkOrderBoardValidationException(
-                    "MediaCountExceeded",
-                    "A work order can have at most 10 photos.");
-            }
-
-            if (kind == WorkOrderMediaContract.UploadKind.Video
-                && sameKindCount >= WorkOrderMediaContract.MaxVideosPerWorkOrder)
-            {
-                throw new WorkOrderBoardValidationException(
-                    "MediaCountExceeded",
-                    "A work order can have at most 3 videos.");
-            }
+            var vendorTypes = await _mediaData.ListActiveVendorMediaContentTypesAsync(workOrderId, cancellationToken);
+            var countMessage = WorkOrderMediaContract.ValidateCount(kind, urls, vendorTypes);
+            if (countMessage != null)
+                throw new WorkOrderBoardValidationException("MediaCountExceeded", countMessage);
         }
 
         /// <summary>
diff --git a/SeaHavenIndustries.Tests/WorkOrderPhase6Tests.cs b/SeaHavenIndustries.Tests/WorkOrderPhase6Tests.cs
index d5771a9..b1fe06f 100644
--- a/SeaHavenIndustries.Tests/WorkOrderPhase6Tests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderPhase6Tests.cs
@@ -1380,6 +1380,57 @@ public class WorkOrderMediaServiceTests
         Assert.Equal("A work order can have at most 3 videos.", ex.Message);
     }
 
+    [Fact]
+    public async Task AddMedia_FourthVideo_CountsVendorPortalVideos()
+    {
+        var (context, service) = CreateSut();
+        context.workOrders.Add(new WorkOrder
+        {
+            Id = 1,
+            LifecycleStatus = LifecycleStatus.Scheduled,
+            RowVersion = new byte[] { 1, 0, 0, 0, 0, 0, 0, 1 }
+        });
+        foreach (var name in new[] { "IMG_0001.MOV", "IMG_0002.MOV" })
+        {
+            context.workOrderAttachments.Add(new WorkOrderAttachments
+            {
+                WorkorderId = 1,
+                Attachments = $"https://api.example.com/Assets/Documents/{Guid.NewGuid()}_{name}",
+                Category = WorkOrderMediaCategory.Extra
+            });
+        }
+        // Vendor v1 video was replaced by v2 (also a video): only v2 is current.
+        context.VendorCompletionDocuments.Add(new VendorCompletionDocument
+        {
+            Id = 50, WorkOrderId = 1, DispatchId = 7, VendorId = 3, Version = 1,
+            ContentType = "video/mp4", Purpose = "Completion"
+        });
+        context.VendorCompletionDocuments.Add(new VendorCompletionDocument
+        {
+            Id = 51, WorkOrderId = 1, DispatchId = 7, VendorId = 3, Version = 2,
+            ContentType = "video/quicktime", Purpose = "Completion", ReplacesDocumentId = 50
+        });
+        // Another work order's vendor video never counts here.
+        context.VendorCompletionDocuments.Add(new VendorCompletionDocument
+        {
+            Id = 60, WorkOrderId = 2, DispatchId = 8, VendorId = 3, Version = 1,
+            ContentType = "video/mp4", Purpose = "Completion"
+        });
+        await context.SaveChangesAsync();
+
+        var ex = await Assert.ThrowsAsync<WorkOrderBoardValidationException>(() =>
+            service.AddMediaAsync(
+                1,
+                null,
+                "https://api.example.com/Assets/Documents/x_IMG_0004.MOV",
+                AuthenticatedUser(),
+                "actor-1"));
+
+        Assert.Equal("MediaCountExceeded", ex.Code);
+        Assert.Equal("A work order can have at most 3 videos.", ex.Message);
+        Assert.Equal(2, context.workOrderAttachments.Count());
+    }
+
     [Fact]
     public async Task AddMedia_CrossAccount_FullWorkOrder_ThrowsNotFoundNotCount()
     {

From a8414cd4fa258fe608691ce35cacc96001275ccc Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Thu, 24 Sep 2026 21:29:51 -0300
Subject: [PATCH 107/183] style(tests): format vendor quota test initializers

---
 .../WorkOrderPhase6Tests.cs                   | 28 +++++++++++++++----
 1 file changed, 22 insertions(+), 6 deletions(-)

diff --git a/SeaHavenIndustries.Tests/WorkOrderPhase6Tests.cs b/SeaHavenIndustries.Tests/WorkOrderPhase6Tests.cs
index b1fe06f..3c299ba 100644
--- a/SeaHavenIndustries.Tests/WorkOrderPhase6Tests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderPhase6Tests.cs
@@ -1402,19 +1402,35 @@ public class WorkOrderMediaServiceTests
         // Vendor v1 video was replaced by v2 (also a video): only v2 is current.
         context.VendorCompletionDocuments.Add(new VendorCompletionDocument
         {
-            Id = 50, WorkOrderId = 1, DispatchId = 7, VendorId = 3, Version = 1,
-            ContentType = "video/mp4", Purpose = "Completion"
+            Id = 50,
+            WorkOrderId = 1,
+            DispatchId = 7,
+            VendorId = 3,
+            Version = 1,
+            ContentType = "video/mp4",
+            Purpose = "Completion"
         });
         context.VendorCompletionDocuments.Add(new VendorCompletionDocument
         {
-            Id = 51, WorkOrderId = 1, DispatchId = 7, VendorId = 3, Version = 2,
-            ContentType = "video/quicktime", Purpose = "Completion", ReplacesDocumentId = 50
+            Id = 51,
+            WorkOrderId = 1,
+            DispatchId = 7,
+            VendorId = 3,
+            Version = 2,
+            ContentType = "video/quicktime",
+            Purpose = "Completion",
+            ReplacesDocumentId = 50
         });
         // Another work order's vendor video never counts here.
         context.VendorCompletionDocuments.Add(new VendorCompletionDocument
         {
-            Id = 60, WorkOrderId = 2, DispatchId = 8, VendorId = 3, Version = 1,
-            ContentType = "video/mp4", Purpose = "Completion"
+            Id = 60,
+            WorkOrderId = 2,
+            DispatchId = 8,
+            VendorId = 3,
+            Version = 1,
+            ContentType = "video/mp4",
+            Purpose = "Completion"
         });
         await context.SaveChangesAsync();
 

From fd59a3da1353988f52e1376486abea89db01de7d Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Thu, 24 Sep 2026 21:38:00 -0300
Subject: [PATCH 108/183] fix(media): enforce the 90-second video limit on the
 server

Read the duration from the MP4/MOV movie header (moov/mvhd) on both the
dispatcher media endpoint and the vendor portal completion upload, so a
direct request cannot bypass the browser check. Unreadable metadata still
never blocks an upload.
---
 .../VendorPortalDocumentTests.cs              |  44 ++++++
 .../WorkOrderMediaControllerTests.cs          |  54 ++++++++
 .../Controllers/WorkOrderMediaController.cs   |   9 ++
 .../Helpers/VideoDurationProbe.cs             | 129 ++++++++++++++++++
 .../Helpers/WorkOrderMediaContract.cs         |  18 ++-
 .../Implementation/VendorPortalService.cs     |  10 ++
 .../VideoDurationProbeTests.cs                | 112 +++++++++++++++
 7 files changed, 373 insertions(+), 3 deletions(-)
 create mode 100644 SeaHaven.Services/Helpers/VideoDurationProbe.cs
 create mode 100644 SeaHavenIndustries.Tests/VideoDurationProbeTests.cs

diff --git a/Api.SeaHavenIndustries.Tests/VendorPortalDocumentTests.cs b/Api.SeaHavenIndustries.Tests/VendorPortalDocumentTests.cs
index 2ef7eca..1258703 100644
--- a/Api.SeaHavenIndustries.Tests/VendorPortalDocumentTests.cs
+++ b/Api.SeaHavenIndustries.Tests/VendorPortalDocumentTests.cs
@@ -453,6 +453,50 @@ public sealed class VendorPortalDocumentTests : IDisposable
         context.VendorCompletionDocuments.Should().BeEmpty();
     }
 
+    /// <summary>ftyp + mdat + moov/mvhd (moov last, as phones write it).</summary>
+    private static byte[] PhoneVideoBytes(uint durationSeconds)
+    {
+        static byte[] Box(string type, byte[] body)
+        {
+            var box = new byte[8 + body.Length];
+            System.Buffers.Binary.BinaryPrimitives.WriteUInt32BigEndian(box, (uint)box.Length);
+            System.Text.Encoding.ASCII.GetBytes(type).CopyTo(box, 4);
+            body.CopyTo(box, 8);
+            return box;
+        }
+
+        var mvhd = new byte[20];
+        System.Buffers.Binary.BinaryPrimitives.WriteUInt32BigEndian(mvhd.AsSpan(12), 600);
+        System.Buffers.Binary.BinaryPrimitives.WriteUInt32BigEndian(mvhd.AsSpan(16), durationSeconds * 600);
+        return Box("ftyp", System.Text.Encoding.ASCII.GetBytes("qt  \0\0\0\0"))
+            .Concat(Box("mdat", new byte[4096]))
+            .Concat(Box("moov", Box("mvhd", mvhd)))
+            .ToArray();
+    }
+
+    [Theory]
+    [InlineData(95u, false)]
+    [InlineData(89u, true)]
+    public async Task UploadCompletionDocument_EnforcesNinetySecondVideoLimit(uint seconds, bool accepted)
+    {
+        using var context = NewContext();
+        var (_, dispatch) = await SeedDispatch(context);
+
+        var result = await NewController(context).UploadCompletionDocument(
+            dispatch.Id,
+            FormFile(PhoneVideoBytes(seconds), "IMG_0042.MOV", "video/quicktime"));
+
+        if (accepted)
+        {
+            result.Should().BeOfType<OkObjectResult>();
+        }
+        else
+        {
+            result.Should().BeOfType<BadRequestObjectResult>();
+            context.VendorCompletionDocuments.Should().BeEmpty();
+        }
+    }
+
     [Fact]
     public async Task UploadCompletionDocument_RejectsFourthVideoAcrossDispatcherAndVendorUploads()
     {
diff --git a/Api.SeaHavenIndustries.Tests/WorkOrderMediaControllerTests.cs b/Api.SeaHavenIndustries.Tests/WorkOrderMediaControllerTests.cs
index c990b2e..8234c92 100644
--- a/Api.SeaHavenIndustries.Tests/WorkOrderMediaControllerTests.cs
+++ b/Api.SeaHavenIndustries.Tests/WorkOrderMediaControllerTests.cs
@@ -182,6 +182,60 @@ public class WorkOrderMediaControllerTests
         Assert.Equal(5, Assert.IsType<WorkOrderMediaFileDto>(ok.Value).Id);
     }
 
+    [Fact]
+    public async Task AddMedia_VideoLongerThanNinetySeconds_ReturnsStableUnprocessableEntity()
+    {
+        var storage = new Mock<IFileStoragePort>(MockBehavior.Strict);
+        var controller = CreateController(storage: storage);
+        var file = PhoneVideo(durationSeconds: 95, "IMG_0042.MOV", "video/quicktime");
+
+        var result = await controller.AddMedia(1, null, file, CancellationToken.None);
+
+        var response = Assert.IsType<UnprocessableEntityObjectResult>(result);
+        var error = Assert.IsType<WorkOrderBoardValidationErrorDto>(response.Value);
+        Assert.Equal("VideoTooLong", error.Code);
+        Assert.Equal("Videos must be 90 seconds or shorter.", error.Message);
+        storage.VerifyNoOtherCalls();
+    }
+
+    [Fact]
+    public async Task AddMedia_VideoWithinNinetySeconds_IsAccepted()
+    {
+        var (service, storage) = SetupSuccessfulAddMedia();
+        var controller = CreateController(service, storage);
+        var file = PhoneVideo(durationSeconds: 60, "IMG_0043.MOV", "");
+
+        var result = await controller.AddMedia(1, null, file, CancellationToken.None);
+
+        Assert.IsType<OkObjectResult>(result);
+    }
+
+    /// <summary>ftyp + mdat + moov/mvhd (moov last, as phones write it).</summary>
+    private static FormFile PhoneVideo(uint durationSeconds, string fileName, string contentType)
+    {
+        static byte[] Box(string type, byte[] body)
+        {
+            var box = new byte[8 + body.Length];
+            System.Buffers.Binary.BinaryPrimitives.WriteUInt32BigEndian(box, (uint)box.Length);
+            System.Text.Encoding.ASCII.GetBytes(type).CopyTo(box, 4);
+            body.CopyTo(box, 8);
+            return box;
+        }
+
+        var mvhd = new byte[20];
+        System.Buffers.Binary.BinaryPrimitives.WriteUInt32BigEndian(mvhd.AsSpan(12), 1000);
+        System.Buffers.Binary.BinaryPrimitives.WriteUInt32BigEndian(mvhd.AsSpan(16), durationSeconds * 1000);
+        var bytes = Box("ftyp", System.Text.Encoding.ASCII.GetBytes("qt  \0\0\0\0"))
+            .Concat(Box("mdat", new byte[4096]))
+            .Concat(Box("moov", Box("mvhd", mvhd)))
+            .ToArray();
+        return new FormFile(new MemoryStream(bytes), 0, bytes.Length, "file", fileName)
+        {
+            Headers = new HeaderDictionary(),
+            ContentType = contentType
+        };
+    }
+
     [Fact]
     public async Task AddMedia_SixtyMegabyteQuicktimeMov_IsAccepted()
     {
diff --git a/Api.SeaHavenIndustries/Controllers/WorkOrderMediaController.cs b/Api.SeaHavenIndustries/Controllers/WorkOrderMediaController.cs
index b19efb9..e795f3c 100644
--- a/Api.SeaHavenIndustries/Controllers/WorkOrderMediaController.cs
+++ b/Api.SeaHavenIndustries/Controllers/WorkOrderMediaController.cs
@@ -98,6 +98,15 @@ namespace Api.SeaHavenIndustries.Controllers
                 }
 
                 WorkOrderMediaFileRules.EnsureAllowed(file, category);
+                if (WorkOrderMediaContract.ResolveKind(
+                        WorkOrderMediaFileRules.ResolveUploadContentType(file), file.FileName)
+                    == WorkOrderMediaContract.UploadKind.Video)
+                {
+                    using var content = file.OpenReadStream();
+                    var durationMessage = WorkOrderMediaContract.ValidateVideoDuration(content);
+                    if (durationMessage != null)
+                        throw new WorkOrderBoardValidationException("VideoTooLong", durationMessage);
+                }
                 var actorId = User.FindFirstValue(ClaimTypes.NameIdentifier);
                 await _workOrderMediaService.EnsureCanMutateMediaAsync(id, User, actorId, cancellationToken, category);
 
diff --git a/SeaHaven.Services/Helpers/VideoDurationProbe.cs b/SeaHaven.Services/Helpers/VideoDurationProbe.cs
new file mode 100644
index 0000000..8355c46
--- /dev/null
+++ b/SeaHaven.Services/Helpers/VideoDurationProbe.cs
@@ -0,0 +1,129 @@
+using System.Buffers.Binary;
+using System.Text;
+
+namespace SeaHaven.Services.Helpers
+{
+    /// <summary>
+    /// Reads a video's duration from the ISO base media (MP4 / QuickTime) movie header:
+    /// top-level <c>moov</c> box → <c>mvhd</c> timescale and duration. It seeks over box
+    /// headers only (the <c>moov</c> box may sit after a large <c>mdat</c>), never decodes
+    /// media and never allocates more than a few bytes. Returns null whenever the structure
+    /// cannot be read, so callers can let unreadable files through (SH-116: unreadable
+    /// metadata never blocks an upload).
+    /// </summary>
+    public static class VideoDurationProbe
+    {
+        private const int MaxBoxesPerLevel = 1024;
+
+        public static double? TryReadDurationSeconds(Stream? stream)
+        {
+            if (stream == null || !stream.CanSeek || !stream.CanRead)
+                return null;
+
+            try
+            {
+                var moov = FindBox(stream, 0, stream.Length, "moov");
+                if (moov == null)
+                    return null;
+
+                var mvhd = FindBox(stream, moov.Value.BodyStart, moov.Value.End, "mvhd");
+                return mvhd == null ? null : ReadMovieHeaderSeconds(stream, mvhd.Value);
+            }
+            catch (IOException)
+            {
+                return null;
+            }
+        }
+
+        private readonly record struct Box(long BodyStart, long End);
+
+        private static Box? FindBox(Stream stream, long start, long end, string type)
+        {
+            var header = new byte[8];
+            var position = start;
+            for (var i = 0; i < MaxBoxesPerLevel && position + 8 <= end; i++)
+            {
+                stream.Position = position;
+                if (!ReadExactly(stream, header, 8))
+                    return null;
+
+                long size = BinaryPrimitives.ReadUInt32BigEndian(header);
+                var boxType = Encoding.ASCII.GetString(header, 4, 4);
+                var headerLength = 8;
+                if (size == 1)
+                {
+                    // 64-bit "largesize" follows the type.
+                    var large = new byte[8];
+                    if (!ReadExactly(stream, large, 8))
+                        return null;
+                    var largeSize = BinaryPrimitives.ReadUInt64BigEndian(large);
+                    if (largeSize > long.MaxValue)
+                        return null;
+                    size = (long)largeSize;
+                    headerLength = 16;
+                }
+                else if (size == 0)
+                {
+                    size = end - position;
+                }
+
+                if (size < headerLength || position + size > end)
+                    return null;
+
+                if (boxType == type)
+                    return new Box(position + headerLength, position + size);
+
+                position += size;
+            }
+
+            return null;
+        }
+
+        private static double? ReadMovieHeaderSeconds(Stream stream, Box mvhd)
+        {
+            // version(1) flags(3), then v0: creation(4) modification(4) timescale(4) duration(4)
+            //                          v1: creation(8) modification(8) timescale(4) duration(8)
+            var body = new byte[32];
+            stream.Position = mvhd.BodyStart;
+            var available = (int)Math.Min(body.Length, mvhd.End - mvhd.BodyStart);
+            if (available < 20 || !ReadExactly(stream, body, available))
+                return null;
+
+            uint timescale;
+            ulong duration;
+            if (body[0] == 0)
+            {
+                timescale = BinaryPrimitives.ReadUInt32BigEndian(body.AsSpan(12, 4));
+                duration = BinaryPrimitives.ReadUInt32BigEndian(body.AsSpan(16, 4));
+            }
+            else if (body[0] == 1 && available >= 32)
+            {
+                timescale = BinaryPrimitives.ReadUInt32BigEndian(body.AsSpan(20, 4));
+                duration = BinaryPrimitives.ReadUInt64BigEndian(body.AsSpan(24, 8));
+            }
+            else
+            {
+                return null;
+            }
+
+            // All-ones duration means "unknown" in the spec.
+            if (timescale == 0 || duration == uint.MaxValue || duration == ulong.MaxValue)
+                return null;
+
+            return (double)duration / timescale;
+        }
+
+        private static bool ReadExactly(Stream stream, byte[] buffer, int count)
+        {
+            var read = 0;
+            while (read < count)
+            {
+                var n = stream.Read(buffer, read, count - read);
+                if (n <= 0)
+                    return false;
+                read += n;
+            }
+            return true;
+        }
+    }
+}
diff --git a/SeaHaven.Services/Helpers/WorkOrderMediaContract.cs b/SeaHaven.Services/Helpers/WorkOrderMediaContract.cs
index 5ba60e3..a0bfa56 100644
--- a/SeaHaven.Services/Helpers/WorkOrderMediaContract.cs
+++ b/SeaHaven.Services/Helpers/WorkOrderMediaContract.cs
@@ -4,9 +4,9 @@ namespace SeaHaven.Services.Helpers
     /// SH-116 client-confirmed media contract (2026-09-22): photos up to 10 MB (JPEG/PNG/HEIC),
     /// videos up to 100 MB and 90 seconds (MP4/MOV), at most 10 photos and 3 videos per work
     /// order, across the dispatcher media modal, the completion-doc media tab and the vendor
-    /// portal upload. Documents (PDF/DOC/DOCX) keep the 50 MB document cap. Duration is only
-    /// checkable client-side (the server cannot probe it cheaply), so it is enforced in the
-    /// browser and documented here as part of the same contract.
+    /// portal upload. Documents (PDF/DOC/DOCX) keep the 50 MB document cap. Duration is read
+    /// from the MP4/MOV movie header (<see cref="VideoDurationProbe"/>); the browser pre-checks
+    /// it and the server enforces it, and unreadable metadata never blocks an upload.
     /// </summary>
     public static class WorkOrderMediaContract
     {
@@ -103,6 +103,18 @@ namespace SeaHaven.Services.Helpers
             return null;
         }
 
+        /// <summary>
+        /// 90-second video limit, read from the MP4/QuickTime movie header. A video whose
+        /// duration cannot be read is not blocked. Returns the stable message or null.
+        /// </summary>
+        public static string? ValidateVideoDuration(Stream? content)
+        {
+            var seconds = VideoDurationProbe.TryReadDurationSeconds(content);
+            return seconds > MaxVideoDurationSeconds
+                ? $"Videos must be {MaxVideoDurationSeconds} seconds or shorter."
+                : null;
+        }
+
         /// <summary>Stable, generic per-kind size message; never echoes file metadata.</summary>
         public static string? ValidateSize(long length, UploadKind kind)
         {
diff --git a/SeaHaven.Services/Implementation/VendorPortalService.cs b/SeaHaven.Services/Implementation/VendorPortalService.cs
index 0aa4353..c1307dc 100644
--- a/SeaHaven.Services/Implementation/VendorPortalService.cs
+++ b/SeaHaven.Services/Implementation/VendorPortalService.cs
@@ -900,6 +900,16 @@ namespace SeaHaven.Services.Implementation
                 throw new InvalidOperationException("The uploaded file signature does not match its declared content type.");
             }
 
+            if (kind == WorkOrderMediaContract.UploadKind.Video)
+            {
+                using var content = new MemoryStream(bytes, writable: false);
+                var durationMessage = WorkOrderMediaContract.ValidateVideoDuration(content);
+                if (durationMessage != null)
+                {
+                    throw new InvalidOperationException(durationMessage);
+                }
+            }
+
             var dispatch = await _dispatchData.GetVendorDispatchForMutationAsync(dispatchId, session.Id, cancellationToken);
             if (dispatch == null)
             {
diff --git a/SeaHavenIndustries.Tests/VideoDurationProbeTests.cs b/SeaHavenIndustries.Tests/VideoDurationProbeTests.cs
new file mode 100644
index 0000000..df5913d
--- /dev/null
+++ b/SeaHavenIndustries.Tests/VideoDurationProbeTests.cs
@@ -0,0 +1,112 @@
+using System.Buffers.Binary;
+using System.Text;
+using SeaHaven.Services.Helpers;
+
+namespace SeaHavenIndustries.Tests;
+
+public class VideoDurationProbeTests
+{
+    internal static byte[] Box(string type, params byte[][] children)
+    {
+        var body = children.SelectMany(child => child).ToArray();
+        var box = new byte[8 + body.Length];
+        BinaryPrimitives.WriteUInt32BigEndian(box, (uint)box.Length);
+        Encoding.ASCII.GetBytes(type).CopyTo(box, 4);
+        body.CopyTo(box, 8);
+        return box;
+    }
+
+    internal static byte[] MovieHeader(uint timescale, ulong duration, bool version1 = false)
+    {
+        var body = new byte[version1 ? 32 : 20];
+        body[0] = version1 ? (byte)1 : (byte)0;
+        if (version1)
+        {
+            BinaryPrimitives.WriteUInt32BigEndian(body.AsSpan(20), timescale);
+            BinaryPrimitives.WriteUInt64BigEndian(body.AsSpan(24), duration);
+        }
+        else
+        {
+            BinaryPrimitives.WriteUInt32BigEndian(body.AsSpan(12), timescale);
+            BinaryPrimitives.WriteUInt32BigEndian(body.AsSpan(16), (uint)duration);
+        }
+        return Box("mvhd", body);
+    }
+
+    /// <summary>A phone-style file: ftyp, a large mdat, then moov at the end (not fast-start).</summary>
+    internal static byte[] Mp4(uint timescale, ulong duration, bool version1 = false, int mediaBytes = 4096)
+    {
+        var ftyp = Box("ftyp", Encoding.ASCII.GetBytes("isom"), new byte[4]);
+        var mdat = Box("mdat", new byte[mediaBytes]);
+        var moov = Box("moov", MovieHeader(timescale, duration, version1));
+        return ftyp.Concat(mdat).Concat(moov).ToArray();
+    }
+
+    [Fact]
+    public void ReadsDurationFromMoovAfterMediaData()
+    {
+        Assert.Equal(95.0, VideoDurationProbe.TryReadDurationSeconds(new MemoryStream(Mp4(600, 57_000))));
+    }
+
+    [Fact]
+    public void ReadsVersionOneMovieHeader()
+    {
+        Assert.Equal(30.5, VideoDurationProbe.TryReadDurationSeconds(
+            new MemoryStream(Mp4(1000, 30_500, version1: true))));
+    }
+
+    [Fact]
+    public void FollowsSixtyFourBitBoxSizes()
+    {
+        var ftyp = Box("ftyp", Encoding.ASCII.GetBytes("qt  "), new byte[4]);
+        var mdatBody = new byte[512];
+        var mdat = new byte[16 + mdatBody.Length];
+        BinaryPrimitives.WriteUInt32BigEndian(mdat, 1);
+        Encoding.ASCII.GetBytes("mdat").CopyTo(mdat, 4);
+        BinaryPrimitives.WriteUInt64BigEndian(mdat.AsSpan(8), (ulong)mdat.Length);
+        var moov = Box("moov", MovieHeader(90_000, 90_000UL * 120));
+        var file = ftyp.Concat(mdat).Concat(moov).ToArray();
+
+        Assert.Equal(120.0, VideoDurationProbe.TryReadDurationSeconds(new MemoryStream(file)));
+    }
+
+    [Theory]
+    [InlineData("no-moov")]
+    [InlineData("truncated")]
+    [InlineData("zero-timescale")]
+    [InlineData("oversized-box")]
+    public void UnreadableStructureReturnsNull(string shape)
+    {
+        var bytes = shape switch
+        {
+            "no-moov" => Box("ftyp", Encoding.ASCII.GetBytes("isom"), new byte[4]).Concat(Box("mdat", new byte[64])).ToArray(),
+            "truncated" => Mp4(600, 57_000)[..^10],
+            "zero-timescale" => Mp4(0, 57_000),
+            _ => Box("ftyp", new byte[8]).Concat(new byte[] { 0x7F, 0xFF, 0xFF, 0xFF, (byte)'m', (byte)'o', (byte)'o', (byte)'v' }).ToArray(),
+        };
+
+        Assert.Null(VideoDurationProbe.TryReadDurationSeconds(new MemoryStream(bytes)));
+    }
+
+    [Fact]
+    public void NonSeekableStreamReturnsNull()
+    {
+        Assert.Null(VideoDurationProbe.TryReadDurationSeconds(new NonSeekableStream(Mp4(600, 57_000))));
+    }
+
+    [Theory]
+    [InlineData(90.0, true)]
+    [InlineData(90.5, false)]
+    public void ContractAllowsUpToNinetySeconds(double seconds, bool allowed)
+    {
+        var message = WorkOrderMediaContract.ValidateVideoDuration(
+            new MemoryStream(Mp4(1000, (ulong)(seconds * 1000))));
+
+        Assert.Equal(allowed ? null : "Videos must be 90 seconds or shorter.", message);
+    }
+
+    private sealed class NonSeekableStream(byte[] bytes) : MemoryStream(bytes)
+    {
+        public override bool CanSeek => false;
+    }
+}

From ce3b241991c9acd33c8fc1632c4cfb6d0f3b22d2 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Thu, 24 Sep 2026 21:45:00 -0300
Subject: [PATCH 109/183] test(uplifts): prove board-create dispatch ownership
 persists relationally (SH-393)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 .../WorkOrderBoardCreateRelationalTests.cs    | 66 +++++++++++++++++++
 1 file changed, 66 insertions(+)

diff --git a/SeaHavenIndustries.Tests/WorkOrderBoardCreateRelationalTests.cs b/SeaHavenIndustries.Tests/WorkOrderBoardCreateRelationalTests.cs
index 3269309..d91794e 100644
--- a/SeaHavenIndustries.Tests/WorkOrderBoardCreateRelationalTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderBoardCreateRelationalTests.cs
@@ -134,6 +134,72 @@ public class WorkOrderBoardCreateRelationalTests
         Assert.Empty(await verify.Dispatches.AsNoTracking().ToListAsync());
     }
 
+    [Fact]
+    public async Task Create_WithVendor_PersistsPrimaryDispatchOwnershipForUpliftResolution()
+    {
+        await using var connection = new SqliteConnection("Data Source=:memory:;Foreign Keys=True");
+        await connection.OpenAsync();
+
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseSqlite(connection)
+            .Options;
+
+        await using (var context = new SqliteBoardTestDbContext(options))
+        {
+            await context.Database.EnsureCreatedAsync();
+            context.Users.Add(new ApplicationUser
+            {
+                Id = "actor-1",
+                UserName = "actor-1",
+                NormalizedUserName = "ACTOR-1",
+                Email = "actor@test.local",
+                NormalizedEmail = "ACTOR@TEST.LOCAL"
+            });
+            await context.SaveChangesAsync();
+            await WorkOrderAccountTestHelpers.EnsureAccountAsync(context);
+            await WorkOrderAccountTestHelpers.EnsureLocationAsync(context);
+            context.Vendors.Add(new Vendor { Id = 5, CompanyName = "Acme HVAC" });
+            await context.SaveChangesAsync();
+        }
+
+        WorkOrderBoardRowDto result;
+        await using (var context = new SqliteBoardTestDbContext(options))
+        {
+            var boardData = new WorkOrderBoardDataService(context);
+            var resolver = WorkOrderAccountTestHelpers.Resolver(context);
+            var fieldLocks = new WorkOrderFieldLockService(new WorkOrderFieldLockDataService(context));
+            var service = new WorkOrderBoardCreateService(
+                boardData,
+                new WorkOrderBoardMutationDataService(context),
+                new WorkOrderBoardService(boardData, resolver),
+                new WorkOrderAuditService(new WorkOrderAuditDataService(context), fieldLocks),
+                new WorkOrderBoardCreateValidation(),
+                resolver,
+                new WorkOrderPocDataService(context));
+
+            result = await service.CreateAsync(new WorkOrderBoardCreateRequestDto
+            {
+                WorkOrderType = WorkOrderType.PM,
+                SiteCode = "BK5",
+                LocationId = 1,
+                VendorId = 5
+            }, WorkOrderAccountTestHelpers.AccountUser(), "actor-1");
+        }
+
+        // SH-393: fresh context, committed state only. The primary dispatch must be owned
+        // by the work order so the uplift create/read scope resolves it.
+        await using var verify = new SqliteBoardTestDbContext(options);
+        var dispatch = await verify.Dispatches.AsNoTracking().SingleAsync();
+        Assert.Equal(result.PrimaryDispatchId, dispatch.Id);
+        Assert.Equal(result.Id, dispatch.WorkOrderId);
+
+        var upliftDispatch = await new UpliftDataService(verify).GetUpliftDispatchForWorkOrderAsync(
+            result.Id,
+            result.PrimaryDispatchId,
+            CancellationToken.None);
+        Assert.Equal(dispatch.Id, upliftDispatch?.Id);
+    }
+
     private sealed class SqliteBoardTestDbContext : ApplicationDbContext
     {
         public SqliteBoardTestDbContext(DbContextOptions<ApplicationDbContext> options)

From 7297e302129f8dbec0c29a74b9db91f6cca65c1d Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Thu, 24 Sep 2026 21:45:06 -0300
Subject: [PATCH 110/183] fix(dashboard): count All time over the same window
 the board lists (SH-392)

The Unassigned drill-down opens the board with no range, which searches
2000-01-01..2099-12-31 plus undated work. The All time count had no
bounds, so a work order dated outside that window was counted but not
listed. The count now uses the same window.
---
 .../DashboardUnassignedTests.cs                       |  3 +++
 .../Helpers/WorkOrderBoardQueryFilters.cs             |  8 ++++++++
 .../Implementation/DashboardDataService.cs            | 11 +++++++++--
 3 files changed, 20 insertions(+), 2 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/DashboardUnassignedTests.cs b/Api.SeaHavenIndustries.Tests/DashboardUnassignedTests.cs
index dbdbc7e..b3cc03e 100644
--- a/Api.SeaHavenIndustries.Tests/DashboardUnassignedTests.cs
+++ b/Api.SeaHavenIndustries.Tests/DashboardUnassignedTests.cs
@@ -152,6 +152,9 @@ public class DashboardUnassignedTests
     {
         using var ctx = NewContext();
         Seed(ctx);
+        // Dated outside the board's all-weeks window: neither side may count them.
+        ctx.workOrders.AddRange(Wo(11, new DateTime(1999, 12, 31)), Wo(12, new DateTime(2100, 1, 1)));
+        ctx.SaveChanges();
         var user = AccountUser(1);
 
         var stats = await NewDashboard(ctx).GetStatsAsync(
diff --git a/SeaHaven.DataServices/Helpers/WorkOrderBoardQueryFilters.cs b/SeaHaven.DataServices/Helpers/WorkOrderBoardQueryFilters.cs
index b665f2c..d4810ca 100644
--- a/SeaHaven.DataServices/Helpers/WorkOrderBoardQueryFilters.cs
+++ b/SeaHaven.DataServices/Helpers/WorkOrderBoardQueryFilters.cs
@@ -5,6 +5,14 @@ namespace SeaHaven.DataServices.Helpers
 {
     public static class WorkOrderBoardQueryFilters
     {
+        /// <summary>
+        /// The window the Work Orders board searches when no date range is selected
+        /// (client ADVANCED_SEARCH_ALL_WEEKS_FROM/TO), used with includeDateless.
+        /// Counts that drill into that list use it too, so both see the same rows.
+        /// </summary>
+        public static readonly DateOnly AllWeeksFrom = new(2000, 1, 1);
+        public static readonly DateOnly AllWeeksTo = new(2099, 12, 31);
+
         public static IQueryable<WorkOrder> ApplyBaseScope(IQueryable<WorkOrder> query)
             => query.Where(w => w.istemplate != true && (w.IsDeleted != true || w.IsDeleted == null));
 
diff --git a/SeaHaven.DataServices/Implementation/DashboardDataService.cs b/SeaHaven.DataServices/Implementation/DashboardDataService.cs
index 7f9767f..02362a2 100644
--- a/SeaHaven.DataServices/Implementation/DashboardDataService.cs
+++ b/SeaHaven.DataServices/Implementation/DashboardDataService.cs
@@ -61,8 +61,15 @@ namespace SeaHaven.DataServices.Implementation
             query = WorkOrderBoardQueryFilters.ApplyDispatcherFilter(
                 query, new[] { "__unassigned__" }, myWorkOrders: false, currentUserId: null);
             query = WorkOrderBoardQueryFilters.ApplyStatusFilter(query, OpenLifecycleStatuses);
-            if (dateFrom is DateOnly from && dateTo is DateOnly to)
-                query = WorkOrderBoardQueryFilters.ApplyDateRangeFilter(query, from, to);
+            // All time counts what the board lists with no range: every week plus
+            // undated work, so the tile and its drill-down agree (SH-392).
+            query = dateFrom is DateOnly from && dateTo is DateOnly to
+                ? WorkOrderBoardQueryFilters.ApplyDateRangeFilter(query, from, to)
+                : WorkOrderBoardQueryFilters.ApplyDateRangeFilter(
+                    query,
+                    WorkOrderBoardQueryFilters.AllWeeksFrom,
+                    WorkOrderBoardQueryFilters.AllWeeksTo,
+                    includeDateless: true);
 
             return await query.CountAsync(cancellationToken);
         }

From eecc2a61bd95284ccc6afd3f77176e0905639e6c Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Thu, 24 Sep 2026 22:24:07 -0300
Subject: [PATCH 111/183] feat(vendor-portal): report work-order media counts
 on the dispatch detail

Adds MediaCounts (limits, current photos/videos, and the counts a new
completion version would see) so the portal can refuse an 11th photo or
4th video before uploading it. Uses the same count and replacement rule
the upload check enforces.
---
 .../VendorPortalDocumentTests.cs              | 40 +++++++++++++++++++
 .../DTOs/VendorPortalServiceDTOs.cs           | 20 ++++++++++
 .../Helpers/WorkOrderMediaContract.cs         | 21 ++++++++--
 .../Implementation/VendorPortalService.cs     | 29 ++++++++++++++
 4 files changed, 106 insertions(+), 4 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/VendorPortalDocumentTests.cs b/Api.SeaHavenIndustries.Tests/VendorPortalDocumentTests.cs
index 1258703..2eefb5c 100644
--- a/Api.SeaHavenIndustries.Tests/VendorPortalDocumentTests.cs
+++ b/Api.SeaHavenIndustries.Tests/VendorPortalDocumentTests.cs
@@ -553,6 +553,46 @@ public sealed class VendorPortalDocumentTests : IDisposable
         context.VendorCompletionDocuments.Should().HaveCount(2);
     }
 
+    [Fact]
+    public async Task GetDispatchDetail_ReportsWorkOrderMediaCountsForThePortalPreCheck()
+    {
+        using var context = NewContext();
+        var (vendor, dispatch) = await SeedDispatch(context);
+        foreach (var name in new[] { "IMG_0001.MOV", "IMG_0002.MOV", "IMG_0003.jpg" })
+        {
+            context.workOrderAttachments.Add(new WorkOrderAttachments
+            {
+                WorkorderId = dispatch.WorkOrderId!.Value,
+                Attachments = $"https://api.example.com/Assets/Documents/{Guid.NewGuid()}_{name}",
+            });
+        }
+        context.VendorCompletionDocuments.Add(new VendorCompletionDocument
+        {
+            VendorId = vendor.Id,
+            DispatchId = dispatch.Id,
+            WorkOrderId = dispatch.WorkOrderId!.Value,
+            ContentType = "video/mp4",
+            StoredFileName = "v1.mp4",
+            Version = 1,
+            Purpose = "Completion"
+        });
+        await context.SaveChangesAsync();
+
+        var service = NewService(context);
+        var session = await service.ResolveSessionAsync(Token, CancellationToken.None);
+        var detail = await service.GetDispatchDetailAsync(session!, dispatch.Id, CancellationToken.None);
+
+        detail!.MediaCounts.Should().BeEquivalentTo(new SeaHaven.Services.DTOs.PortalMediaCountsDTO
+        {
+            MaxPhotos = 10,
+            MaxVideos = 3,
+            Photos = 1,
+            Videos = 3,
+            CompletionPhotos = 1,
+            CompletionVideos = 2,
+        });
+    }
+
     [Fact]
     public async Task UploadCompletionDocument_RejectsVideoOverHundredMegabytes()
     {
diff --git a/SeaHaven.Services/DTOs/VendorPortalServiceDTOs.cs b/SeaHaven.Services/DTOs/VendorPortalServiceDTOs.cs
index afdaf18..ace32c8 100644
--- a/SeaHaven.Services/DTOs/VendorPortalServiceDTOs.cs
+++ b/SeaHaven.Services/DTOs/VendorPortalServiceDTOs.cs
@@ -134,6 +134,26 @@ namespace SeaHaven.Services.DTOs
         public IEnumerable<PortalCommentDTO> Comments { get; set; } = Enumerable.Empty<PortalCommentDTO>();
         public IEnumerable<PortalUpliftDTO> UpliftRequests { get; set; } = Enumerable.Empty<PortalUpliftDTO>();
         public IEnumerable<VendorPortalDocumentDTO> Documents { get; set; } = Enumerable.Empty<VendorPortalDocumentDTO>();
+        public PortalMediaCountsDTO? MediaCounts { get; set; }
+    }
+
+    /// <summary>
+    /// SH-116 per-work-order photo/video usage, so the portal can pre-check an upload
+    /// before sending it. The server still enforces the limit on upload.
+    /// </summary>
+    public class PortalMediaCountsDTO
+    {
+        public int MaxPhotos { get; set; }
+        public int MaxVideos { get; set; }
+        /// <summary>Photos/videos on the work order, counted for evidence uploads.</summary>
+        public int Photos { get; set; }
+        public int Videos { get; set; }
+        /// <summary>
+        /// Photos/videos counted for a new completion version, which replaces the dispatch's
+        /// latest document and so does not count it.
+        /// </summary>
+        public int CompletionPhotos { get; set; }
+        public int CompletionVideos { get; set; }
     }
 
     public class VendorPortalDocumentDTO
diff --git a/SeaHaven.Services/Helpers/WorkOrderMediaContract.cs b/SeaHaven.Services/Helpers/WorkOrderMediaContract.cs
index a0bfa56..34f8862 100644
--- a/SeaHaven.Services/Helpers/WorkOrderMediaContract.cs
+++ b/SeaHaven.Services/Helpers/WorkOrderMediaContract.cs
@@ -93,16 +93,29 @@ namespace SeaHaven.Services.Helpers
             if (kind != UploadKind.Photo && kind != UploadKind.Video)
                 return null;
 
-            var count = attachmentUrls.Count(url => ResolveKind(null, url) == kind)
-                + vendorContentTypes.Count(type => ResolveKind(type, null) == kind);
+            var (photos, videos) = CountKinds(attachmentUrls, vendorContentTypes);
 
-            if (kind == UploadKind.Photo && count >= MaxPhotosPerWorkOrder)
+            if (kind == UploadKind.Photo && photos >= MaxPhotosPerWorkOrder)
                 return "A work order can have at most 10 photos.";
-            if (kind == UploadKind.Video && count >= MaxVideosPerWorkOrder)
+            if (kind == UploadKind.Video && videos >= MaxVideosPerWorkOrder)
                 return "A work order can have at most 3 videos.";
             return null;
         }
 
+        /// <summary>
+        /// Photos and videos on a work order: dispatcher attachments (kind from the stored URL)
+        /// plus current vendor-portal documents (kind from the validated content type).
+        /// </summary>
+        public static (int Photos, int Videos) CountKinds(
+            IEnumerable<string> attachmentUrls,
+            IEnumerable<string> vendorContentTypes)
+        {
+            var kinds = attachmentUrls.Select(url => ResolveKind(null, url))
+                .Concat(vendorContentTypes.Select(type => ResolveKind(type, null)))
+                .ToList();
+            return (kinds.Count(k => k == UploadKind.Photo), kinds.Count(k => k == UploadKind.Video));
+        }
+
         /// <summary>
         /// 90-second video limit, read from the MP4/QuickTime movie header. A video whose
         /// duration cannot be read is not blocked. Returns the stable message or null.
diff --git a/SeaHaven.Services/Implementation/VendorPortalService.cs b/SeaHaven.Services/Implementation/VendorPortalService.cs
index c1307dc..6ddcd95 100644
--- a/SeaHaven.Services/Implementation/VendorPortalService.cs
+++ b/SeaHaven.Services/Implementation/VendorPortalService.cs
@@ -206,8 +206,37 @@ namespace SeaHaven.Services.Implementation
                 }
             }
 
+            PortalMediaCountsDTO? mediaCounts = null;
+            if (dispatch.WorkOrderId is int workOrderId)
+            {
+                // Same basis as the upload check: a new completion version replaces the
+                // dispatch's latest document, so that one is not counted for it.
+                var attachmentUrls = await _documentData.ListActiveWorkOrderAttachmentUrlsAsync(
+                    workOrderId, cancellationToken);
+                var vendorTypes = await _documentData.ListActiveContentTypesForWorkOrderAsync(
+                    workOrderId, null, cancellationToken);
+                var latest = await _documentData.GetLatestForDispatchAsync(id, cancellationToken);
+                var completionTypes = latest == null
+                    ? vendorTypes
+                    : await _documentData.ListActiveContentTypesForWorkOrderAsync(
+                        workOrderId, latest.Id, cancellationToken);
+                var (photos, videos) = WorkOrderMediaContract.CountKinds(attachmentUrls, vendorTypes);
+                var (completionPhotos, completionVideos) =
+                    WorkOrderMediaContract.CountKinds(attachmentUrls, completionTypes);
+                mediaCounts = new PortalMediaCountsDTO
+                {
+                    MaxPhotos = WorkOrderMediaContract.MaxPhotosPerWorkOrder,
+                    MaxVideos = WorkOrderMediaContract.MaxVideosPerWorkOrder,
+                    Photos = photos,
+                    Videos = videos,
+                    CompletionPhotos = completionPhotos,
+                    CompletionVideos = completionVideos
+                };
+            }
+
             return new VendorDispatchDetailDTO
             {
+                MediaCounts = mediaCounts,
                 Id = dispatch.Id,
                 DispatchNumber = dispatch.DispatchNumber,
                 PONumber = dispatch.PONumber,

From 2be74b261f8ea56e0d7ec9cb03450f7b6cd623d5 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Thu, 24 Sep 2026 22:28:04 -0300
Subject: [PATCH 112/183] test(uplifts): share conflict fixture dispatch
 through owned and linked work orders

After SH-393 the uplift dispatch resolves only through dispatches the work
order owns or links through DispatchWorkOrders. Model the shared dispatch
that way so the concurrent-insert conflict test exercises the conflict
mapping again; assertions are unchanged.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 .../WorkOrderUpliftServiceConflictTests.cs    | 20 ++++++++++++++++++-
 1 file changed, 19 insertions(+), 1 deletion(-)

diff --git a/Api.SeaHavenIndustries.Tests/WorkOrderUpliftServiceConflictTests.cs b/Api.SeaHavenIndustries.Tests/WorkOrderUpliftServiceConflictTests.cs
index 129e360..5366d8c 100644
--- a/Api.SeaHavenIndustries.Tests/WorkOrderUpliftServiceConflictTests.cs
+++ b/Api.SeaHavenIndustries.Tests/WorkOrderUpliftServiceConflictTests.cs
@@ -18,7 +18,25 @@ public sealed class WorkOrderUpliftServiceConflictTests
     [Fact]
     public async Task CreateAsync_DifferentWorkOrdersSharingDispatch_MapsConcurrentInsertConflict()
     {
+        // Dispatch 10 is legitimately shared: work order 1 owns it and work order 2 links to
+        // it through DispatchWorkOrders, so the uplift dispatch resolves to it for both.
+        var sharedDispatch = new Dispatch
+        {
+            Id = 10,
+            WorkOrderId = 1,
+            Status = "Scheduled",
+            NTEAmount = 1000m,
+            DispatchWorkOrders = new List<DispatchWorkOrder>
+            {
+                new() { DispatchId = 10, WorkOrderId = 2 },
+            },
+        };
         var upliftData = new Mock<IUpliftDataService>();
+        upliftData.Setup(x => x.GetUpliftDispatchForWorkOrderAsync(
+                It.IsIn(1, 2),
+                10,
+                It.IsAny<CancellationToken>()))
+            .ReturnsAsync(sharedDispatch);
         var bothAtInsert = new TaskCompletionSource(TaskCreationOptions.RunContinuationsAsynchronously);
         var savesArrived = 0;
         var winner = 0;
@@ -62,7 +80,7 @@ public sealed class WorkOrderUpliftServiceConflictTests
 
         var dispatchData = new Mock<IDispatchDataService>();
         dispatchData.Setup(x => x.GetByIdAsync(10))
-            .ReturnsAsync(new Dispatch { Id = 10, Status = "Scheduled", NTEAmount = 1000m });
+            .ReturnsAsync(sharedDispatch);
         dispatchData.Setup(x => x.StageAuditLogAsync(It.IsAny<WorkOrderAuditLog>(), It.IsAny<CancellationToken>()))
             .Returns(Task.CompletedTask);
 

From b116e71d168eb08abf41485ffd65f5f0ecbef3ee Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Thu, 24 Sep 2026 22:31:07 -0300
Subject: [PATCH 113/183] test(uplifts): grant the SH-393 ownership fixture
 actor RequestUplifts

Uplift creation now checks the actor's RequestUplifts permission, so the
ownership tests construct the service with the permission services and seed
their actor as an Admin.
---
 .../WorkOrderUpliftDispatchOwnershipTests.cs              | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/SeaHavenIndustries.Tests/WorkOrderUpliftDispatchOwnershipTests.cs b/SeaHavenIndustries.Tests/WorkOrderUpliftDispatchOwnershipTests.cs
index 840fd28..adba1a7 100644
--- a/SeaHavenIndustries.Tests/WorkOrderUpliftDispatchOwnershipTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderUpliftDispatchOwnershipTests.cs
@@ -1,5 +1,6 @@
 using Data.SeaHavenIndustries;
 using Data.SeaHavenIndustries.Enums;
+using Microsoft.AspNetCore.Identity;
 using Microsoft.EntityFrameworkCore;
 using Microsoft.Extensions.Options;
 using SeaHaven.DataServices.Implementation;
@@ -31,6 +32,11 @@ public sealed class WorkOrderUpliftDispatchOwnershipTests
         var context = new ApplicationDbContext(options);
         WorkOrderAccountTestHelpers.SeedBoardCreateScope(context);
         context.Vendors.Add(new Vendor { Id = 5, CompanyName = "Acme HVAC" });
+        // SH-327: uplift creation checks the actor's RequestUplifts permission.
+        var adminRole = new IdentityRole("Admin");
+        context.Roles.Add(adminRole);
+        context.Users.Add(new ApplicationUser { Id = "actor-1", UserName = "actor-1" });
+        context.UserRoles.Add(new IdentityUserRole<string> { UserId = "actor-1", RoleId = adminRole.Id });
         context.SaveChanges();
         return context;
     }
@@ -67,6 +73,8 @@ public sealed class WorkOrderUpliftDispatchOwnershipTests
             new WorkOrderDetailDataService(context),
             WorkOrderAccountTestHelpers.Resolver(context),
             new UserDataService(context),
+            new TeamPermissionOverrideDataService(context),
+            new TeamPermissionPolicy(),
             TimeProvider.System,
             Options.Create(new ApprovalsOptions
             {

From cfb05a906f2a8014c87288d899b1286034a3f7dd Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Thu, 24 Sep 2026 22:34:32 -0300
Subject: [PATCH 114/183] fix(uplifts): Admin passes uplift approval checks
 regardless of tier config (SH-327)

UserCanApprove only accepted roles listed in Approvals:Tier1Roles/Tier2Roles,
so an environment whose config omits Admin denied every approval surface to
admins: can-approve, per-row CanDecide, approve/reject/request-changes and
evidence download. Admin now short-circuits the check; tier-role config still
governs every other role.
---
 .../UpliftAdminApprovalTests.cs               | 165 ++++++++++++++++++
 .../Implementation/UpliftService.cs           |   4 +
 2 files changed, 169 insertions(+)
 create mode 100644 Api.SeaHavenIndustries.Tests/UpliftAdminApprovalTests.cs

diff --git a/Api.SeaHavenIndustries.Tests/UpliftAdminApprovalTests.cs b/Api.SeaHavenIndustries.Tests/UpliftAdminApprovalTests.cs
new file mode 100644
index 0000000..cbfc971
--- /dev/null
+++ b/Api.SeaHavenIndustries.Tests/UpliftAdminApprovalTests.cs
@@ -0,0 +1,165 @@
+using Data.SeaHavenIndustries;
+using FluentAssertions;
+using Microsoft.EntityFrameworkCore;
+using SeaHaven.DataServices.Implementation;
+using SeaHaven.Services.Configuration;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Implementation;
+using SeaHaven.Services.Interfaces;
+using System.Security.Claims;
+using Xunit;
+
+namespace Api.SeaHavenIndustries.Tests;
+
+// SH-327: Admin passes every permission check regardless of stored configuration.
+// Uplift approval authority is otherwise driven by Approvals:Tier1Roles/Tier2Roles,
+// which may be empty in a deployed environment; Admin must still be able to decide.
+public sealed class UpliftAdminApprovalTests
+{
+    private static ApplicationDbContext NewContext()
+    {
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseInMemoryDatabase(Guid.NewGuid().ToString())
+            .Options;
+        return new ApplicationDbContext(options);
+    }
+
+    private static ClaimsPrincipal UserWithRoles(params string[] roles)
+    {
+        var claims = new List<Claim> { new(ClaimTypes.NameIdentifier, "user-42") };
+        claims.AddRange(roles.Select(r => new Claim(ClaimTypes.Role, r)));
+        return new ClaimsPrincipal(new ClaimsIdentity(claims, "Test"));
+    }
+
+    private static UpliftService NewService(ApplicationDbContext context, ApprovalsOptions? options = null) =>
+        new(new UpliftDataService(context),
+            new DispatchDataService(context),
+            new NoopDocumentStorage(),
+            TimeProvider.System,
+            Microsoft.Extensions.Options.Options.Create(options ?? new ApprovalsOptions()));
+
+    private static async Task<Dispatch> SeedPendingAsync(ApplicationDbContext context, int requiredTier)
+    {
+        var vendor = new Vendor { CompanyName = "Gateway", IsActive = true };
+        var workOrder = new WorkOrder { WorkerOrderTitle = "Repair" };
+        context.AddRange(vendor, workOrder);
+        await context.SaveChangesAsync();
+        var dispatch = new Dispatch
+        {
+            VendorId = vendor.Id,
+            WorkOrderId = workOrder.Id,
+            Status = "Completed",
+            NTEAmount = 1000m,
+            DispatchNumber = "DIS-1"
+        };
+        context.Dispatches.Add(dispatch);
+        await context.SaveChangesAsync();
+        context.DispatchUpliftRequests.Add(new DispatchUpliftRequest
+        {
+            DispatchId = dispatch.Id,
+            CurrentNTE = 1000m,
+            RequestedNTE = 1800m,
+            VendorReason = "reason",
+            Status = UpliftStatus.Pending,
+            RequiredTier = requiredTier,
+            CreatedDate = DateTime.UtcNow
+        });
+        await context.SaveChangesAsync();
+        return dispatch;
+    }
+
+    [Theory]
+    [InlineData(1)]
+    [InlineData(2)]
+    public void CanApprove_Admin_WithEmptyTierConfig_IsTrue(int tier)
+    {
+        using var context = NewContext();
+        var service = NewService(context);
+
+        service.CanApprove(UserWithRoles("Admin"), tier).Should().BeTrue();
+    }
+
+    [Theory]
+    [InlineData(1)]
+    [InlineData(2)]
+    public async Task List_Admin_WithEmptyTierConfig_CanDecidePendingRows(int tier)
+    {
+        using var context = NewContext();
+        var dispatch = await SeedPendingAsync(context, tier);
+        var service = NewService(context);
+
+        var queue = await service.ListAsync(UserWithRoles("Admin"), UpliftStatus.Pending, null, 1, 25, CancellationToken.None);
+        var forDispatch = await service.ListForDispatchAsync(UserWithRoles("Admin"), dispatch.Id, CancellationToken.None);
+
+        queue.Items.Should().ContainSingle().Which.CanDecide.Should().BeTrue();
+        forDispatch.Should().ContainSingle().Which.CanDecide.Should().BeTrue();
+    }
+
+    [Theory]
+    [InlineData(1)]
+    [InlineData(2)]
+    public async Task Approve_Admin_WithEmptyTierConfig_Succeeds(int tier)
+    {
+        using var context = NewContext();
+        await SeedPendingAsync(context, tier);
+        var service = NewService(context);
+
+        var result = await service.ApproveAsync(UserWithRoles("Admin"), 1, "ok", CancellationToken.None);
+
+        result.Status.Should().Be(UpliftStatus.Approved);
+        context.Dispatches.Single().NTEAmount.Should().Be(1800m);
+    }
+
+    [Fact]
+    public async Task Reject_Admin_WithEmptyTierConfig_Succeeds()
+    {
+        using var context = NewContext();
+        await SeedPendingAsync(context, 2);
+        var service = NewService(context);
+
+        var result = await service.RejectAsync(UserWithRoles("Admin"), 1, "no", CancellationToken.None);
+
+        result.Status.Should().Be(UpliftStatus.Rejected);
+        context.Dispatches.Single().NTEAmount.Should().Be(1000m);
+    }
+
+    [Theory]
+    [InlineData("Dispatcher")]
+    [InlineData("Scheduler")]
+    public async Task NonAdminRole_WithEmptyTierConfig_IsStillDenied(string role)
+    {
+        using var context = NewContext();
+        await SeedPendingAsync(context, 1);
+        var service = NewService(context);
+        var user = UserWithRoles(role);
+
+        service.CanApprove(user, 1).Should().BeFalse();
+        service.CanApprove(user, 2).Should().BeFalse();
+        var queue = await service.ListAsync(user, UpliftStatus.Pending, null, 1, 25, CancellationToken.None);
+        queue.Items.Should().ContainSingle().Which.CanDecide.Should().BeFalse();
+
+        var act = () => service.ApproveAsync(user, 1, "ok", CancellationToken.None);
+
+        await act.Should().ThrowAsync<UpliftForbiddenException>();
+        context.Dispatches.Single().NTEAmount.Should().Be(1000m);
+        context.DispatchUpliftRequests.Single().Status.Should().Be(UpliftStatus.Pending);
+    }
+
+    [Fact]
+    public void Tier1OnlyRole_ApprovesTier1_ButNotTier2()
+    {
+        using var context = NewContext();
+        var service = NewService(context, new ApprovalsOptions { Tier1Roles = new[] { "Approver" } });
+        var user = UserWithRoles("Approver");
+
+        service.CanApprove(user, 1).Should().BeTrue();
+        service.CanApprove(user, 2).Should().BeFalse();
+    }
+
+    private sealed class NoopDocumentStorage : IVendorDocumentStoragePort
+    {
+        public Task SaveAsync(int vendorId, int dispatchId, string storedFileName, Stream content, CancellationToken cancellationToken) => Task.CompletedTask;
+        public Stream OpenRead(int vendorId, int dispatchId, string storedFileName) => new MemoryStream();
+        public void Delete(int vendorId, int dispatchId, string storedFileName) { }
+    }
+}
diff --git a/SeaHaven.Services/Implementation/UpliftService.cs b/SeaHaven.Services/Implementation/UpliftService.cs
index 5459c36..801139e 100644
--- a/SeaHaven.Services/Implementation/UpliftService.cs
+++ b/SeaHaven.Services/Implementation/UpliftService.cs
@@ -335,8 +335,12 @@ namespace SeaHaven.Services.Implementation
             return UpliftEvidenceDownloadResultDTO.Ok(content, evidence.ContentType ?? "application/octet-stream", evidence.OriginalFileName ?? "evidence");
         }
 
+        // SH-327: Admin passes every permission check regardless of stored configuration,
+        // so the tier-role lists only govern non-Admin approvers.
         private bool UserCanApprove(ClaimsPrincipal user, int requiredTier)
         {
+            if (user.IsInRole("Admin")) return true;
+
             var roles = RolesForTier(requiredTier);
             foreach (var r in roles)
             {

From 26b4aaf1b2e06767615c34f51019f291920f4e2e Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Thu, 24 Sep 2026 22:51:57 -0300
Subject: [PATCH 115/183] test(uplifts): cover Admin request-changes and
 evidence download with empty tier config (SH-327)

---
 .../UpliftAdminApprovalTests.cs               | 41 +++++++++++++++++++
 1 file changed, 41 insertions(+)

diff --git a/Api.SeaHavenIndustries.Tests/UpliftAdminApprovalTests.cs b/Api.SeaHavenIndustries.Tests/UpliftAdminApprovalTests.cs
index cbfc971..e3fa547 100644
--- a/Api.SeaHavenIndustries.Tests/UpliftAdminApprovalTests.cs
+++ b/Api.SeaHavenIndustries.Tests/UpliftAdminApprovalTests.cs
@@ -123,6 +123,47 @@ public sealed class UpliftAdminApprovalTests
         context.Dispatches.Single().NTEAmount.Should().Be(1000m);
     }
 
+    [Fact]
+    public async Task RequestChanges_Admin_WithEmptyTierConfig_Succeeds()
+    {
+        using var context = NewContext();
+        await SeedPendingAsync(context, 2);
+        var service = NewService(context);
+
+        var result = await service.RequestChangesAsync(UserWithRoles("Admin"), 1, "more detail", CancellationToken.None);
+
+        result.Status.Should().Be(UpliftStatus.ChangesRequested);
+    }
+
+    [Fact]
+    public async Task EvidenceDownload_Admin_WithEmptyTierConfig_ReturnsFile()
+    {
+        using var context = NewContext();
+        var dispatch = await SeedPendingAsync(context, 2);
+        context.VendorCompletionDocuments.Add(new VendorCompletionDocument
+        {
+            VendorId = dispatch.VendorId,
+            DispatchId = dispatch.Id,
+            WorkOrderId = dispatch.WorkOrderId!.Value,
+            OriginalFileName = "invoice.pdf",
+            StoredFileName = "evidence.bin",
+            ContentType = "application/pdf",
+            SizeBytes = 4,
+            ScanStatus = "Passed",
+            ReviewStatus = "Approved",
+            Purpose = "UpliftEvidence",
+            Version = 1
+        });
+        context.DispatchUpliftRequests.Single().EvidenceDocumentId = 1;
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        var result = await service.GetEvidenceForDownloadAsync(UserWithRoles("Admin"), 1, CancellationToken.None);
+
+        result.Outcome.Should().Be(VendorDocumentDownloadOutcome.Ok);
+        result.FileName.Should().Be("invoice.pdf");
+    }
+
     [Theory]
     [InlineData("Dispatcher")]
     [InlineData("Scheduler")]

From 3e3f0f383d0b05ff3b2b1a6188c353721baf2bdb Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Thu, 24 Sep 2026 22:56:21 -0300
Subject: [PATCH 116/183] fix(media): serialize SH-116 media counts under the
 work-order lock and serve HEIC as image/heic

The 10-photo / 3-video cap was a check-then-insert with no lock on both
upload surfaces, so two overlapping uploads could both take the last slot.
The board media upload and the vendor portal upload now run count, insert
and save inside ExecuteWorkOrderMutationAsync. GetMediaContent maps .heic
to image/heic.
---
 .../VendorPortalDocumentTests.cs              |   5 +
 .../WorkOrderMediaControllerTests.cs          |  36 ++++-
 .../Implementation/VendorPortalService.cs     | 126 ++++++++++--------
 .../Implementation/WorkOrderMediaService.cs   |  51 ++++---
 .../WorkOrderCompletedSelectiveLockTests.cs   |   3 +-
 ...orkOrderMediaConcurrencyRelationalTests.cs |   3 +-
 .../WorkOrderPhase6Tests.cs                   |  57 +++++++-
 7 files changed, 200 insertions(+), 81 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/VendorPortalDocumentTests.cs b/Api.SeaHavenIndustries.Tests/VendorPortalDocumentTests.cs
index 2eefb5c..e454b5f 100644
--- a/Api.SeaHavenIndustries.Tests/VendorPortalDocumentTests.cs
+++ b/Api.SeaHavenIndustries.Tests/VendorPortalDocumentTests.cs
@@ -54,6 +54,11 @@ public sealed class VendorPortalDocumentTests : IDisposable
         var upliftData = new Mock<IUpliftDataService>();
         upliftData.Setup(u => u.GetForVendorDispatchAsync(It.IsAny<int>(), It.IsAny<CancellationToken>()))
             .ReturnsAsync(new List<PortalUpliftData>());
+        upliftData.Setup(u => u.ExecuteWorkOrderMutationAsync(
+                It.IsAny<int>(),
+                It.IsAny<Func<CancellationToken, Task<VendorCompletionDocument>>>(),
+                It.IsAny<CancellationToken>()))
+            .Returns((int _, Func<CancellationToken, Task<VendorCompletionDocument>> work, CancellationToken ct) => work(ct));
         var commentData = new Mock<ICommentDataService>();
         commentData.Setup(c => c.GetVendorViewableForDispatchAsync(It.IsAny<int>(), It.IsAny<CancellationToken>()))
             .ReturnsAsync(new List<PortalCommentData>());
diff --git a/Api.SeaHavenIndustries.Tests/WorkOrderMediaControllerTests.cs b/Api.SeaHavenIndustries.Tests/WorkOrderMediaControllerTests.cs
index 8234c92..3aab33e 100644
--- a/Api.SeaHavenIndustries.Tests/WorkOrderMediaControllerTests.cs
+++ b/Api.SeaHavenIndustries.Tests/WorkOrderMediaControllerTests.cs
@@ -395,7 +395,8 @@ public class WorkOrderMediaServiceCancellationTests
             mediaData.Object,
             new Mock<IWorkOrderDetailDataService>(MockBehavior.Strict).Object,
             new Mock<IWorkOrderAuditService>(MockBehavior.Strict).Object,
-            storage.Object);
+            storage.Object,
+            new Mock<IUpliftDataService>(MockBehavior.Strict).Object);
         var user = new ClaimsPrincipal(new ClaimsIdentity(
             new[]
             {
@@ -412,4 +413,37 @@ public class WorkOrderMediaServiceCancellationTests
         mediaData.Verify(candidate => candidate.GetAttachmentForReadAsync(10, 1, token), Times.Once);
         mediaData.VerifyNoOtherCalls();
     }
+
+    [Fact]
+    public async Task GetMediaContent_ServesHeicAsImageHeic()
+    {
+        const string url = "https://example.test/Assets/Images/photo.heic";
+        var mediaData = new Mock<IWorkOrderMediaDataService>(MockBehavior.Strict);
+        mediaData.Setup(candidate => candidate.GetWorkOrderForMediaAuthAsync(1, null, It.IsAny<CancellationToken>()))
+            .ReturnsAsync(new WorkOrder { Id = 1 });
+        mediaData.Setup(candidate => candidate.GetAttachmentForReadAsync(10, 1, It.IsAny<CancellationToken>()))
+            .ReturnsAsync(new WorkOrderAttachments { Id = 10, WorkorderId = 1, Attachments = url });
+        var storage = new Mock<IFileStoragePort>(MockBehavior.Strict);
+        storage.Setup(candidate => candidate.OpenRead(url)).Returns(new MemoryStream([1, 2, 3]));
+        var service = new WorkOrderMediaService(
+            mediaData.Object,
+            new Mock<IWorkOrderDetailDataService>(MockBehavior.Strict).Object,
+            new Mock<IWorkOrderAuditService>(MockBehavior.Strict).Object,
+            storage.Object,
+            new Mock<IUpliftDataService>(MockBehavior.Strict).Object);
+        var user = new ClaimsPrincipal(new ClaimsIdentity(
+            new[]
+            {
+                new Claim(ClaimTypes.NameIdentifier, "actor-1"),
+                new Claim(ClaimTypes.Role, "Admin"),
+                new Claim(SeaHavenClaimTypes.OrgScope, SeaHavenClaimTypes.OrgScopeAll)
+            },
+            "Test"));
+
+        var result = await service.GetMediaContentAsync(1, 10, user, "actor-1");
+        result.Content.Dispose();
+
+        Assert.Equal("image/heic", result.ContentType);
+        Assert.Equal("photo.heic", result.FileName);
+    }
 }
diff --git a/SeaHaven.Services/Implementation/VendorPortalService.cs b/SeaHaven.Services/Implementation/VendorPortalService.cs
index 6ddcd95..b6c8b3c 100644
--- a/SeaHaven.Services/Implementation/VendorPortalService.cs
+++ b/SeaHaven.Services/Implementation/VendorPortalService.cs
@@ -966,69 +966,79 @@ namespace SeaHaven.Services.Implementation
                 }
             }
 
-            // SH-116: the 10-photo / 3-video limit is per work order across the dispatcher and
-            // vendor surfaces. A new completion version replaces its predecessor, so that one
-            // does not count against the upload that supersedes it.
-            if (dispatch.WorkOrderId is int workOrderId)
-            {
-                var excluded = resolvedPurpose == VendorDocumentPurpose.Completion
-                    ? replacedDocument?.Id
-                    : null;
-                var vendorTypes = await _documentData.ListActiveContentTypesForWorkOrderAsync(
-                    workOrderId, excluded, cancellationToken);
-                var attachmentUrls = await _documentData.ListActiveWorkOrderAttachmentUrlsAsync(
-                    workOrderId, cancellationToken);
-                var countMessage = WorkOrderMediaContract.ValidateCount(kind, attachmentUrls, vendorTypes);
-                if (countMessage != null)
-                {
-                    throw new InvalidOperationException(countMessage);
-                }
-            }
-
             var version = (latest?.Version ?? 0) + 1;
             var storedFileName = $"{dispatchId}_{version}_{Guid.NewGuid():N}{GetSafeExtension(file.FileName)}";
-
-            var now = DateTime.UtcNow;
-            var document = new VendorCompletionDocument
-            {
-                VendorId = session.Id,
-                DispatchId = dispatchId,
-                WorkOrderId = dispatch.WorkOrderId ?? 0,
-                OriginalFileName = Path.GetFileName(file.FileName),
-                StoredFileName = storedFileName,
-                ContentType = contentType,
-                SizeBytes = bytes.Length,
-                ScanStatus = "Pending",
-                ReviewStatus = "Processing",
-                Version = version,
-                ReplacesDocumentId = replacedDocument?.Id,
-                Purpose = resolvedPurpose,
-                CreatedDate = now
-            };
-
-            await _documentData.AddAsync(document, cancellationToken);
-
             var isUpliftEvidence = resolvedPurpose == VendorDocumentPurpose.UpliftEvidence;
-            var fieldName = $"Dispatch {dispatch.DispatchNumber} Completion Document";
 
-            await _dispatchData.StageAuditLogAsync(new WorkOrderAuditLog
+            async Task<VendorCompletionDocument> PersistAsync(CancellationToken ct)
             {
-                WorkOrderId = dispatch.WorkOrderId ?? 0,
-                DispatchId = dispatchId,
-                FieldName = fieldName,
-                OldValue = isUpliftEvidence || replacedDocument == null
-                    ? null
-                    : $"v{replacedDocument.Version}",
-                NewValue = isUpliftEvidence
-                    ? $"evidence {document.OriginalFileName}"
-                    : $"v{version}",
-                Action = isUpliftEvidence
-                    ? "vendor_uplift_evidence_uploaded"
-                    : "vendor_completion_document_uploaded",
-                ActorType = "vendor",
-                CreatedAt = now
-            }, cancellationToken);
-            await _documentData.SaveChangesAsync(cancellationToken);
+                // SH-116: the 10-photo / 3-video limit is per work order across the dispatcher and
+                // vendor surfaces. A new completion version replaces its predecessor, so that one
+                // does not count against the upload that supersedes it.
+                if (dispatch.WorkOrderId is int workOrderId)
+                {
+                    var excluded = resolvedPurpose == VendorDocumentPurpose.Completion
+                        ? replacedDocument?.Id
+                        : null;
+                    var vendorTypes = await _documentData.ListActiveContentTypesForWorkOrderAsync(
+                        workOrderId, excluded, ct);
+                    var attachmentUrls = await _documentData.ListActiveWorkOrderAttachmentUrlsAsync(
+                        workOrderId, ct);
+                    var countMessage = WorkOrderMediaContract.ValidateCount(kind, attachmentUrls, vendorTypes);
+                    if (countMessage != null)
+                    {
+                        throw new InvalidOperationException(countMessage);
+                    }
+                }
+
+                var now = DateTime.UtcNow;
+                var created = new VendorCompletionDocument
+                {
+                    VendorId = session.Id,
+                    DispatchId = dispatchId,
+                    WorkOrderId = dispatch.WorkOrderId ?? 0,
+                    OriginalFileName = Path.GetFileName(file.FileName),
+                    StoredFileName = storedFileName,
+                    ContentType = contentType,
+                    SizeBytes = bytes.Length,
+                    ScanStatus = "Pending",
+                    ReviewStatus = "Processing",
+                    Version = version,
+                    ReplacesDocumentId = replacedDocument?.Id,
+                    Purpose = resolvedPurpose,
+                    CreatedDate = now
+                };
+
+                await _documentData.AddAsync(created, ct);
+
+                var fieldName = $"Dispatch {dispatch.DispatchNumber} Completion Document";
+
+                await _dispatchData.StageAuditLogAsync(new WorkOrderAuditLog
+                {
+                    WorkOrderId = dispatch.WorkOrderId ?? 0,
+                    DispatchId = dispatchId,
+                    FieldName = fieldName,
+                    OldValue = isUpliftEvidence || replacedDocument == null
+                        ? null
+                        : $"v{replacedDocument.Version}",
+                    NewValue = isUpliftEvidence
+                        ? $"evidence {created.OriginalFileName}"
+                        : $"v{version}",
+                    Action = isUpliftEvidence
+                        ? "vendor_uplift_evidence_uploaded"
+                        : "vendor_completion_document_uploaded",
+                    ActorType = "vendor",
+                    CreatedAt = now
+                }, ct);
+                await _documentData.SaveChangesAsync(ct);
+                return created;
+            }
+
+            // The count and the insert run under the per-work-order mutation lock the dispatcher
+            // media upload also takes, so concurrent uploads cannot both claim the last slot.
+            var document = dispatch.WorkOrderId is int lockedWorkOrderId
+                ? await _upliftData.ExecuteWorkOrderMutationAsync(lockedWorkOrderId, PersistAsync, cancellationToken)
+                : await PersistAsync(cancellationToken);
 
             using var stored = new MemoryStream(bytes);
             await _documentStorage.SaveAsync(session.Id, dispatchId, storedFileName, stored, cancellationToken);
diff --git a/SeaHaven.Services/Implementation/WorkOrderMediaService.cs b/SeaHaven.Services/Implementation/WorkOrderMediaService.cs
index 10ad8ff..0a0d1d5 100644
--- a/SeaHaven.Services/Implementation/WorkOrderMediaService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderMediaService.cs
@@ -16,17 +16,20 @@ namespace SeaHaven.Services.Implementation
         private readonly IWorkOrderDetailDataService _detailData;
         private readonly IWorkOrderAuditService _auditService;
         private readonly IFileStoragePort _fileStorage;
+        private readonly IUpliftDataService _upliftData;
 
         public WorkOrderMediaService(
             IWorkOrderMediaDataService mediaData,
             IWorkOrderDetailDataService detailData,
             IWorkOrderAuditService auditService,
-            IFileStoragePort fileStorage)
+            IFileStoragePort fileStorage,
+            IUpliftDataService upliftData)
         {
             _mediaData = mediaData;
             _detailData = detailData;
             _auditService = auditService;
             _fileStorage = fileStorage;
+            _upliftData = upliftData;
         }
 
         public async Task<IReadOnlyList<WorkOrderMediaFileDto>?> GetMediaAsync(
@@ -153,25 +156,34 @@ namespace SeaHaven.Services.Implementation
                 };
             }
 
-            await EnsureWithinMediaCountsAsync(workOrderId, fileUrl, cancellationToken);
-
-            var attachment = new WorkOrderAttachments
-            {
-                WorkorderId = workOrderId,
-                Attachments = fileUrl,
-                Category = category.HasValue ? resolvedCategory : null,
-                CreatedDate = DateTime.UtcNow,
-                createdby = actorId
-            };
-
-            _mediaData.TrackAttachment(attachment);
-            await _auditService.StageFieldChangedAsync(
+            // SH-116 photo/video caps are a work-order aggregate shared with the vendor portal
+            // upload, so the count and the insert run under the per-work-order mutation lock.
+            var attachment = await _upliftData.ExecuteWorkOrderMutationAsync(
                 workOrderId,
-                "MediaCategory",
-                null,
-                FormatMediaAuditValue(null, (attachment.Category ?? WorkOrderMediaCategory.Extra).ToString()),
-                actorId);
-            await SaveMediaAsync(cancellationToken);
+                async ct =>
+                {
+                    await EnsureWithinMediaCountsAsync(workOrderId, fileUrl, ct);
+
+                    var created = new WorkOrderAttachments
+                    {
+                        WorkorderId = workOrderId,
+                        Attachments = fileUrl,
+                        Category = category.HasValue ? resolvedCategory : null,
+                        CreatedDate = DateTime.UtcNow,
+                        createdby = actorId
+                    };
+
+                    _mediaData.TrackAttachment(created);
+                    await _auditService.StageFieldChangedAsync(
+                        workOrderId,
+                        "MediaCategory",
+                        null,
+                        FormatMediaAuditValue(null, (created.Category ?? WorkOrderMediaCategory.Extra).ToString()),
+                        actorId);
+                    await SaveMediaAsync(ct);
+                    return created;
+                },
+                cancellationToken);
 
             return new WorkOrderMediaFileDto
             {
@@ -457,6 +469,7 @@ namespace SeaHaven.Services.Implementation
             {
                 ".jpg" or ".jpeg" => "image/jpeg",
                 ".png" => "image/png",
+                ".heic" => "image/heic",
                 ".mp4" => "video/mp4",
                 ".mov" => "video/quicktime",
                 ".pdf" => "application/pdf",
diff --git a/SeaHavenIndustries.Tests/WorkOrderCompletedSelectiveLockTests.cs b/SeaHavenIndustries.Tests/WorkOrderCompletedSelectiveLockTests.cs
index a51311c..cc765ed 100644
--- a/SeaHavenIndustries.Tests/WorkOrderCompletedSelectiveLockTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderCompletedSelectiveLockTests.cs
@@ -41,7 +41,8 @@ public class WorkOrderCompletedSelectiveLockTests
             new WorkOrderMediaDataService(context),
             new WorkOrderDetailDataService(context),
             audit,
-            new TestFileStoragePort());
+            new TestFileStoragePort(),
+            new UpliftDataService(context));
         return (context, service);
     }
 
diff --git a/SeaHavenIndustries.Tests/WorkOrderMediaConcurrencyRelationalTests.cs b/SeaHavenIndustries.Tests/WorkOrderMediaConcurrencyRelationalTests.cs
index 1f2eea6..191dcca 100644
--- a/SeaHavenIndustries.Tests/WorkOrderMediaConcurrencyRelationalTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderMediaConcurrencyRelationalTests.cs
@@ -176,7 +176,8 @@ public class WorkOrderMediaConcurrencyRelationalTests
             new WorkOrderMediaDataService(context),
             new WorkOrderDetailDataService(context),
             audit,
-            new TestFileStoragePort());
+            new TestFileStoragePort(),
+            new UpliftDataService(context));
     }
 
     private static async Task<string> LoadVersionAsync(ApplicationDbContext context, int workOrderId)
diff --git a/SeaHavenIndustries.Tests/WorkOrderPhase6Tests.cs b/SeaHavenIndustries.Tests/WorkOrderPhase6Tests.cs
index 3c299ba..224d73b 100644
--- a/SeaHavenIndustries.Tests/WorkOrderPhase6Tests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderPhase6Tests.cs
@@ -812,7 +812,8 @@ public class WorkOrderMediaServiceTests
             new WorkOrderMediaDataService(context),
             new WorkOrderDetailDataService(context),
             audit,
-            fileStorage ?? new TestFileStoragePort());
+            fileStorage ?? new TestFileStoragePort(),
+            new UpliftDataService(context));
         return (context, service);
     }
 
@@ -1343,6 +1344,60 @@ public class WorkOrderMediaServiceTests
         Assert.Equal(10, context.workOrderAttachments.Count(a => a.IsDeleted != true));
     }
 
+    [Fact]
+    public async Task AddMedia_CountsAndInsertsUnderTheWorkOrderMutationLock()
+    {
+        // Distinct id: the mutation gate is process-wide per work order.
+        const int workOrderId = 173_001;
+        var (context, service) = CreateSut();
+        context.workOrders.Add(new WorkOrder
+        {
+            Id = workOrderId,
+            LifecycleStatus = LifecycleStatus.Scheduled,
+            RowVersion = new byte[] { 1, 0, 0, 0, 0, 0, 0, 1 }
+        });
+        for (var i = 0; i < 9; i++)
+        {
+            context.workOrderAttachments.Add(new WorkOrderAttachments
+            {
+                WorkorderId = workOrderId,
+                Attachments = $"https://example.com/photo-{i}.jpg",
+                Category = WorkOrderMediaCategory.Extra
+            });
+        }
+        await context.SaveChangesAsync();
+
+        var held = new TaskCompletionSource(TaskCreationOptions.RunContinuationsAsynchronously);
+        var release = new TaskCompletionSource(TaskCreationOptions.RunContinuationsAsynchronously);
+        var holder = new UpliftDataService(context).ExecuteWorkOrderMutationAsync(
+            workOrderId,
+            async _ =>
+            {
+                held.SetResult();
+                await release.Task;
+                return 0;
+            },
+            CancellationToken.None);
+        await held.Task;
+
+        var upload = service.AddMediaAsync(
+            workOrderId,
+            null,
+            "https://example.com/photo-9.jpg",
+            AuthenticatedUser(),
+            "actor-1");
+        await Task.Delay(200);
+
+        Assert.False(upload.IsCompleted);
+        Assert.Equal(9, context.workOrderAttachments.Count(a => a.WorkorderId == workOrderId && a.IsDeleted != true));
+
+        release.SetResult();
+        await holder;
+        await upload;
+
+        Assert.Equal(10, context.workOrderAttachments.Count(a => a.WorkorderId == workOrderId && a.IsDeleted != true));
+    }
+
     [Fact]
     public async Task AddMedia_FourthVideo_CountsStoredPhoneFileUrls()
     {

From 1e2f39a5fa288fc68d2b4ed3ff9ef237570c2696 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Thu, 24 Sep 2026 22:57:09 -0300
Subject: [PATCH 117/183] chore(uplifts): drop ticket key from source comments

---
 Api.SeaHavenIndustries.Tests/UpliftAdminApprovalTests.cs | 2 +-
 SeaHaven.Services/Implementation/UpliftService.cs        | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/UpliftAdminApprovalTests.cs b/Api.SeaHavenIndustries.Tests/UpliftAdminApprovalTests.cs
index e3fa547..7a5d6a7 100644
--- a/Api.SeaHavenIndustries.Tests/UpliftAdminApprovalTests.cs
+++ b/Api.SeaHavenIndustries.Tests/UpliftAdminApprovalTests.cs
@@ -11,7 +11,7 @@ using Xunit;
 
 namespace Api.SeaHavenIndustries.Tests;
 
-// SH-327: Admin passes every permission check regardless of stored configuration.
+// Admin passes every permission check regardless of stored configuration.
 // Uplift approval authority is otherwise driven by Approvals:Tier1Roles/Tier2Roles,
 // which may be empty in a deployed environment; Admin must still be able to decide.
 public sealed class UpliftAdminApprovalTests
diff --git a/SeaHaven.Services/Implementation/UpliftService.cs b/SeaHaven.Services/Implementation/UpliftService.cs
index 801139e..3cfed76 100644
--- a/SeaHaven.Services/Implementation/UpliftService.cs
+++ b/SeaHaven.Services/Implementation/UpliftService.cs
@@ -335,7 +335,7 @@ namespace SeaHaven.Services.Implementation
             return UpliftEvidenceDownloadResultDTO.Ok(content, evidence.ContentType ?? "application/octet-stream", evidence.OriginalFileName ?? "evidence");
         }
 
-        // SH-327: Admin passes every permission check regardless of stored configuration,
+        // Admin passes every permission check regardless of stored configuration,
         // so the tier-role lists only govern non-Admin approvers.
         private bool UserCanApprove(ClaimsPrincipal user, int requiredTier)
         {

From c5d82a996a89c29c08d52b67517e8894377ad51d Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Thu, 24 Sep 2026 23:30:16 -0300
Subject: [PATCH 118/183] fix(uplifts): audit uplift decisions on the
 dispatch's resolved work order

Approve, reject, request-changes, expiry and escalation staged their work
order audit with WorkOrderId = dispatch.WorkOrderId ?? 0. WorkOrderAuditLogs
requires a real work order, so any uplift on a dispatch without an owning
work order failed to save: the decision returned a 500 and the request stayed
Pending, and the expiry sweep failed on it every run.

The audit now goes to the work order the uplift resolves to through the
existing owner-or-linked read that revoke already uses. When none resolves,
the status change is saved on the request and no audit row is written.
---
 .../UpliftWorkflowTests.cs                    |   2 +
 .../Implementation/UpliftLifecycleService.cs  |  22 +-
 .../Implementation/UpliftService.cs           |  25 +-
 .../UpliftDecisionAuditRelationalTests.cs     | 273 ++++++++++++++++++
 4 files changed, 312 insertions(+), 10 deletions(-)
 create mode 100644 SeaHavenIndustries.Tests/UpliftDecisionAuditRelationalTests.cs

diff --git a/Api.SeaHavenIndustries.Tests/UpliftWorkflowTests.cs b/Api.SeaHavenIndustries.Tests/UpliftWorkflowTests.cs
index b57d36f..4518910 100644
--- a/Api.SeaHavenIndustries.Tests/UpliftWorkflowTests.cs
+++ b/Api.SeaHavenIndustries.Tests/UpliftWorkflowTests.cs
@@ -681,6 +681,8 @@ public sealed class UpliftWorkflowTests
         var upliftData = new Mock<IUpliftDataService>();
         upliftData.Setup(u => u.GetDueForExpiryAsync(It.IsAny<DateTime>(), It.IsAny<int>(), It.IsAny<CancellationToken>()))
             .ReturnsAsync(new List<DispatchUpliftRequest> { orphanReq, validReq });
+        upliftData.Setup(u => u.GetWorkOrderIdForUpliftAsync(202, It.IsAny<CancellationToken>()))
+            .ReturnsAsync(99);
         upliftData.Setup(u => u.SaveChangesAsync(It.IsAny<CancellationToken>()))
             .Returns(Task.CompletedTask);
 
diff --git a/SeaHaven.Services/Implementation/UpliftLifecycleService.cs b/SeaHaven.Services/Implementation/UpliftLifecycleService.cs
index 9f1cfbb..2f94678 100644
--- a/SeaHaven.Services/Implementation/UpliftLifecycleService.cs
+++ b/SeaHaven.Services/Implementation/UpliftLifecycleService.cs
@@ -61,9 +61,9 @@ namespace SeaHaven.Services.Implementation
                 req.DecidedAt = now;
                 req.LastModificationTime = now;
 
-                await _dispatchData.StageAuditLogAsync(new WorkOrderAuditLog
+                await StageAuditAsync(req.Id, workOrderId => new WorkOrderAuditLog
                 {
-                    WorkOrderId = dispatch?.WorkOrderId ?? 0,
+                    WorkOrderId = workOrderId,
                     FieldName = $"Dispatch {dispatch?.DispatchNumber} Uplift",
                     OldValue = previous,
                     NewValue = UpliftStatus.Expired,
@@ -136,9 +136,9 @@ namespace SeaHaven.Services.Implementation
                 req.EscalatedAt = now;
                 req.LastModificationTime = now;
 
-                await _dispatchData.StageAuditLogAsync(new WorkOrderAuditLog
+                await StageAuditAsync(req.Id, workOrderId => new WorkOrderAuditLog
                 {
-                    WorkOrderId = dispatch.WorkOrderId ?? 0,
+                    WorkOrderId = workOrderId,
                     FieldName = $"Dispatch {dispatch.DispatchNumber} Uplift",
                     OldValue = "Pending",
                     NewValue = "Escalated",
@@ -247,5 +247,19 @@ namespace SeaHaven.Services.Implementation
             req.LastModificationTime = now;
             await _upliftData.SaveChangesAsync(cancellationToken);
         }
+
+        // The audit goes to the work order the uplift's dispatch belongs to (owner, else the
+        // one it is linked to). With neither, the status change is recorded on the request
+        // alone; a work-order id of 0 would fail the required audit foreign key and abort
+        // the sweep on every run.
+        private async Task StageAuditAsync(
+            int upliftId,
+            Func<int, WorkOrderAuditLog> buildEntry,
+            CancellationToken cancellationToken)
+        {
+            var workOrderId = await _upliftData.GetWorkOrderIdForUpliftAsync(upliftId, cancellationToken);
+            if (workOrderId is int resolved)
+                await _dispatchData.StageAuditLogAsync(buildEntry(resolved), cancellationToken);
+        }
     }
 }
diff --git a/SeaHaven.Services/Implementation/UpliftService.cs b/SeaHaven.Services/Implementation/UpliftService.cs
index 3cfed76..134ec66 100644
--- a/SeaHaven.Services/Implementation/UpliftService.cs
+++ b/SeaHaven.Services/Implementation/UpliftService.cs
@@ -166,9 +166,9 @@ namespace SeaHaven.Services.Implementation
             req.DecisionNote = string.IsNullOrWhiteSpace(note) ? null : note!.Trim();
             req.LastModificationTime = now;
 
-            await _dispatchData.StageAuditLogAsync(new WorkOrderAuditLog
+            await StageDecisionAuditAsync(req.Id, workOrderId => new WorkOrderAuditLog
             {
-                WorkOrderId = dispatch.WorkOrderId ?? 0,
+                WorkOrderId = workOrderId,
                 UserId = userId,
                 FieldName = $"Dispatch {dispatch.DispatchNumber} NTE",
                 OldValue = $"${oldNTE:F2}",
@@ -252,9 +252,9 @@ namespace SeaHaven.Services.Implementation
             req.DecisionNote = note!.Trim();
             req.LastModificationTime = now;
 
-            await _dispatchData.StageAuditLogAsync(new WorkOrderAuditLog
+            await StageDecisionAuditAsync(req.Id, workOrderId => new WorkOrderAuditLog
             {
-                WorkOrderId = dispatch?.WorkOrderId ?? 0,
+                WorkOrderId = workOrderId,
                 UserId = userId,
                 FieldName = $"Dispatch {dispatch?.DispatchNumber} Uplift",
                 OldValue = previous,
@@ -290,9 +290,9 @@ namespace SeaHaven.Services.Implementation
             req.DecisionNote = note.Trim();
             req.LastModificationTime = now;
 
-            await _dispatchData.StageAuditLogAsync(new WorkOrderAuditLog
+            await StageDecisionAuditAsync(req.Id, workOrderId => new WorkOrderAuditLog
             {
-                WorkOrderId = dispatch?.WorkOrderId ?? 0,
+                WorkOrderId = workOrderId,
                 UserId = userId,
                 FieldName = $"Dispatch {dispatch?.DispatchNumber} Uplift",
                 OldValue = previous,
@@ -307,6 +307,19 @@ namespace SeaHaven.Services.Implementation
 
         public bool CanApprove(ClaimsPrincipal user, int tier) => UserCanApprove(user, tier);
 
+        // The decision audit goes to the work order the uplift's dispatch belongs to (owner,
+        // else the one it is linked to). A dispatch with neither has no work order to audit
+        // against, so the decision is recorded on the request alone.
+        private async Task StageDecisionAuditAsync(
+            int upliftId,
+            Func<int, WorkOrderAuditLog> buildEntry,
+            CancellationToken cancellationToken)
+        {
+            var workOrderId = await _upliftData.GetWorkOrderIdForUpliftAsync(upliftId, cancellationToken);
+            if (workOrderId is int resolved)
+                await _dispatchData.StageAuditLogAsync(buildEntry(resolved), cancellationToken);
+        }
+
         // SH-101: authorized internal download of a Passed UpliftEvidence file. The data
         // service resolves the document by the request's own linkage (no client-supplied
         // document id or vendor/public path). Only UpliftEvidence documents are exposed;
diff --git a/SeaHavenIndustries.Tests/UpliftDecisionAuditRelationalTests.cs b/SeaHavenIndustries.Tests/UpliftDecisionAuditRelationalTests.cs
new file mode 100644
index 0000000..b95ffbd
--- /dev/null
+++ b/SeaHavenIndustries.Tests/UpliftDecisionAuditRelationalTests.cs
@@ -0,0 +1,273 @@
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using Microsoft.Data.Sqlite;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Logging.Abstractions;
+using Microsoft.Extensions.Options;
+using SeaHaven.DataServices.Implementation;
+using SeaHaven.Services.Configuration;
+using SeaHaven.Services.Implementation;
+using SeaHaven.Services.Interfaces;
+using System.Security.Claims;
+
+namespace SeaHavenIndustries.Tests;
+
+// Relational (SQLite, foreign keys on) coverage for the work-order audit entry written by
+// uplift decisions. WorkOrderAuditLogs.WorkOrderId is a required FK, so the in-memory
+// provider cannot prove a decision on a dispatch without an owning work order commits.
+// The audit goes to the work order the dispatch belongs to (owner, else the one it is
+// linked to through DispatchWorkOrders); when none resolves, the decision is still saved
+// and no audit row is written.
+public sealed class UpliftDecisionAuditRelationalTests
+{
+    private const string AdminId = "admin-1";
+
+    public enum Ownership
+    {
+        Owned,
+        Linked,
+        Unresolvable
+    }
+
+    public enum Decision
+    {
+        Approve,
+        Reject,
+        RequestChanges
+    }
+
+    [Theory]
+    [InlineData(Decision.Approve, Ownership.Owned)]
+    [InlineData(Decision.Approve, Ownership.Linked)]
+    [InlineData(Decision.Approve, Ownership.Unresolvable)]
+    [InlineData(Decision.Reject, Ownership.Owned)]
+    [InlineData(Decision.Reject, Ownership.Linked)]
+    [InlineData(Decision.Reject, Ownership.Unresolvable)]
+    [InlineData(Decision.RequestChanges, Ownership.Owned)]
+    [InlineData(Decision.RequestChanges, Ownership.Linked)]
+    [InlineData(Decision.RequestChanges, Ownership.Unresolvable)]
+    public async Task Decision_CommitsAndAuditsResolvedWorkOrder(Decision decision, Ownership ownership)
+    {
+        await using var connection = new SqliteConnection("Data Source=:memory:;Foreign Keys=True");
+        await connection.OpenAsync();
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>().UseSqlite(connection).Options;
+
+        int upliftId;
+        int? expectedWorkOrderId;
+        await using (var seed = new SqliteUpliftDecisionTestDbContext(options))
+        {
+            await seed.Database.EnsureCreatedAsync();
+            (upliftId, expectedWorkOrderId) = await SeedAsync(seed, ownership, expiresAt: null);
+        }
+
+        await using (var context = new SqliteUpliftDecisionTestDbContext(options))
+        {
+            var service = new UpliftService(
+                new UpliftDataService(context),
+                new DispatchDataService(context),
+                new NoDocumentStorage(),
+                TimeProvider.System,
+                Options.Create(new ApprovalsOptions()));
+            var admin = new ClaimsPrincipal(new ClaimsIdentity(new[]
+            {
+                new Claim(ClaimTypes.NameIdentifier, AdminId),
+                new Claim(ClaimTypes.Role, "Admin")
+            }, "Test"));
+
+            switch (decision)
+            {
+                case Decision.Approve:
+                    await service.ApproveAsync(admin, upliftId, null, CancellationToken.None);
+                    break;
+                case Decision.Reject:
+                    await service.RejectAsync(admin, upliftId, "too high", CancellationToken.None);
+                    break;
+                case Decision.RequestChanges:
+                    await service.RequestChangesAsync(admin, upliftId, "send a quote", CancellationToken.None);
+                    break;
+            }
+        }
+
+        await using var verify = new SqliteUpliftDecisionTestDbContext(options);
+        var saved = await verify.DispatchUpliftRequests.AsNoTracking().SingleAsync(u => u.Id == upliftId);
+        var expectedStatus = decision switch
+        {
+            Decision.Approve => UpliftStatus.Approved,
+            Decision.Reject => UpliftStatus.Rejected,
+            _ => UpliftStatus.ChangesRequested
+        };
+        Assert.Equal(expectedStatus, saved.Status);
+        Assert.Equal(AdminId, saved.DecidedByUserId);
+        if (decision == Decision.Approve)
+        {
+            var dispatch = await verify.Dispatches.AsNoTracking().SingleAsync(d => d.Id == saved.DispatchId);
+            Assert.Equal(5_000m, dispatch.NTEAmount);
+        }
+
+        var audits = await verify.WorkOrderAuditLogs.AsNoTracking().ToListAsync();
+        Assert.DoesNotContain(audits, a => a.WorkOrderId == 0);
+        if (expectedWorkOrderId is int workOrderId)
+        {
+            var audit = Assert.Single(audits);
+            Assert.Equal(workOrderId, audit.WorkOrderId);
+            Assert.StartsWith("uplift_", audit.Action);
+        }
+        else
+        {
+            Assert.Empty(audits);
+        }
+    }
+
+    [Theory]
+    [InlineData(Ownership.Linked)]
+    [InlineData(Ownership.Unresolvable)]
+    public async Task Expiry_CommitsAndAuditsResolvedWorkOrder(Ownership ownership)
+    {
+        await using var connection = new SqliteConnection("Data Source=:memory:;Foreign Keys=True");
+        await connection.OpenAsync();
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>().UseSqlite(connection).Options;
+
+        int upliftId;
+        int? expectedWorkOrderId;
+        await using (var seed = new SqliteUpliftDecisionTestDbContext(options))
+        {
+            await seed.Database.EnsureCreatedAsync();
+            (upliftId, expectedWorkOrderId) = await SeedAsync(seed, ownership, expiresAt: DateTime.UtcNow.AddHours(-1));
+        }
+
+        await using (var context = new SqliteUpliftDecisionTestDbContext(options))
+        {
+            var lifecycle = new UpliftLifecycleService(
+                new UpliftDataService(context),
+                new DispatchDataService(context),
+                null!,
+                new NoEmailSender(),
+                Options.Create(new FrontendOptions()),
+                Options.Create(new ApprovalsOptions()),
+                TimeProvider.System,
+                NullLogger<UpliftLifecycleService>.Instance);
+
+            Assert.Equal(1, await lifecycle.ExpireDueAsync(CancellationToken.None));
+        }
+
+        await using var verify = new SqliteUpliftDecisionTestDbContext(options);
+        var saved = await verify.DispatchUpliftRequests.AsNoTracking().SingleAsync(u => u.Id == upliftId);
+        Assert.Equal(UpliftStatus.Expired, saved.Status);
+
+        var audits = await verify.WorkOrderAuditLogs.AsNoTracking().ToListAsync();
+        Assert.DoesNotContain(audits, a => a.WorkOrderId == 0);
+        if (expectedWorkOrderId is int workOrderId)
+            Assert.Equal(workOrderId, Assert.Single(audits).WorkOrderId);
+        else
+            Assert.Empty(audits);
+    }
+
+    private static async Task<(int UpliftId, int? ExpectedWorkOrderId)> SeedAsync(
+        ApplicationDbContext context,
+        Ownership ownership,
+        DateTime? expiresAt)
+    {
+        context.Users.Add(new ApplicationUser
+        {
+            Id = AdminId,
+            UserName = AdminId,
+            NormalizedUserName = AdminId.ToUpperInvariant(),
+            Email = "admin@test.local",
+            NormalizedEmail = "ADMIN@TEST.LOCAL"
+        });
+        var vendor = new Vendor { CompanyName = "Vinewood LLC", IsActive = true };
+        // A second work order keeps ids distinct from the first, so an audit landing on
+        // the wrong work order cannot pass by coincidence.
+        var unrelated = new WorkOrder { InternalWONumber = "WO-OTHER", WorkerOrderTitle = "Other" };
+        var workOrder = new WorkOrder
+        {
+            InternalWONumber = "WO-TARGET",
+            WorkerOrderTitle = "Repair",
+            LifecycleStatus = LifecycleStatus.Scheduled
+        };
+        context.AddRange(vendor, unrelated, workOrder);
+        await context.SaveChangesAsync();
+
+        var dispatch = new Dispatch
+        {
+            VendorId = vendor.Id,
+            WorkOrderId = ownership == Ownership.Owned ? workOrder.Id : null,
+            DispatchNumber = "DIS-UPLIFT",
+            Status = "Scheduled",
+            NTEAmount = 1_000m
+        };
+        context.Dispatches.Add(dispatch);
+        await context.SaveChangesAsync();
+
+        if (ownership == Ownership.Linked)
+        {
+            context.DispatchWorkOrders.Add(new DispatchWorkOrder
+            {
+                DispatchId = dispatch.Id,
+                WorkOrderId = workOrder.Id
+            });
+        }
+
+        var request = new DispatchUpliftRequest
+        {
+            DispatchId = dispatch.Id,
+            CurrentNTE = 1_000m,
+            RequestedNTE = 5_000m,
+            VendorReason = "Scope grew",
+            Status = UpliftStatus.Pending,
+            RequiredTier = 2,
+            CreatedDate = DateTime.UtcNow.AddDays(-4),
+            ExpiresAt = expiresAt,
+            NotificationStatus = "Pending"
+        };
+        context.DispatchUpliftRequests.Add(request);
+        await context.SaveChangesAsync();
+
+        return (request.Id, ownership == Ownership.Unresolvable ? null : workOrder.Id);
+    }
+
+    private sealed class NoDocumentStorage : IVendorDocumentStoragePort
+    {
+        public Task SaveAsync(int vendorId, int dispatchId, string storedFileName, Stream content, CancellationToken cancellationToken)
+            => throw new NotSupportedException();
+
+        public Stream OpenRead(int vendorId, int dispatchId, string storedFileName)
+            => throw new NotSupportedException();
+
+        public void Delete(int vendorId, int dispatchId, string storedFileName)
+            => throw new NotSupportedException();
+    }
+
+    private sealed class NoEmailSender : IEmailSender
+    {
+        public Task<bool> SendEmailAsync(string emailTo, string subject, string body) => Task.FromResult(true);
+    }
+
+    private sealed class SqliteUpliftDecisionTestDbContext : ApplicationDbContext
+    {
+        public SqliteUpliftDecisionTestDbContext(DbContextOptions<ApplicationDbContext> options)
+            : base(options)
+        {
+        }
+
+        protected override void OnModelCreating(ModelBuilder builder)
+        {
+            base.OnModelCreating(builder);
+
+            // SQL Server filtered index syntax is invalid on SQLite.
+            foreach (var index in builder.Model.GetEntityTypes().SelectMany(e => e.GetIndexes()))
+            {
+                if (index.GetFilter() != null)
+                    index.SetFilter(null);
+            }
+
+            // SQLite has no rowversion type; treat as plain nullable blobs.
+            foreach (var entityType in new[] { typeof(WorkOrder), typeof(Dispatch) })
+            {
+                var property = builder.Entity(entityType).Property("RowVersion").Metadata;
+                property.ValueGenerated = Microsoft.EntityFrameworkCore.Metadata.ValueGenerated.Never;
+                property.IsConcurrencyToken = false;
+            }
+        }
+    }
+}

From b2b9fc3588ef6c29b72bffea266b055e9bb3d7d3 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Thu, 24 Sep 2026 23:37:58 -0300
Subject: [PATCH 119/183] test(uplifts): cover escalation audit on a dispatch
 without an owning work order

---
 .../UpliftDecisionAuditRelationalTests.cs     | 65 ++++++++++++++++++-
 1 file changed, 62 insertions(+), 3 deletions(-)

diff --git a/SeaHavenIndustries.Tests/UpliftDecisionAuditRelationalTests.cs b/SeaHavenIndustries.Tests/UpliftDecisionAuditRelationalTests.cs
index b95ffbd..fb07d09 100644
--- a/SeaHavenIndustries.Tests/UpliftDecisionAuditRelationalTests.cs
+++ b/SeaHavenIndustries.Tests/UpliftDecisionAuditRelationalTests.cs
@@ -162,10 +162,61 @@ public sealed class UpliftDecisionAuditRelationalTests
             Assert.Empty(audits);
     }
 
+    [Theory]
+    [InlineData(Ownership.Linked)]
+    [InlineData(Ownership.Unresolvable)]
+    public async Task Escalation_CommitsAndAuditsResolvedWorkOrder(Ownership ownership)
+    {
+        await using var connection = new SqliteConnection("Data Source=:memory:;Foreign Keys=True");
+        await connection.OpenAsync();
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>().UseSqlite(connection).Options;
+
+        int upliftId;
+        int? expectedWorkOrderId;
+        await using (var seed = new SqliteUpliftDecisionTestDbContext(options))
+        {
+            await seed.Database.EnsureCreatedAsync();
+            (upliftId, expectedWorkOrderId) = await SeedAsync(
+                seed,
+                ownership,
+                expiresAt: null,
+                initialNotificationSentAt: DateTime.UtcNow.AddDays(-3));
+        }
+
+        var emailSender = new NoEmailSender();
+        await using (var context = new SqliteUpliftDecisionTestDbContext(options))
+        {
+            var lifecycle = new UpliftLifecycleService(
+                new UpliftDataService(context),
+                new DispatchDataService(context),
+                null!,
+                emailSender,
+                Options.Create(new FrontendOptions()),
+                Options.Create(new ApprovalsOptions { EscalationRecipients = new[] { "escalate@test.local" } }),
+                TimeProvider.System,
+                NullLogger<UpliftLifecycleService>.Instance);
+
+            Assert.Equal(1, await lifecycle.EscalateDueAsync(CancellationToken.None));
+        }
+
+        await using var verify = new SqliteUpliftDecisionTestDbContext(options);
+        var saved = await verify.DispatchUpliftRequests.AsNoTracking().SingleAsync(u => u.Id == upliftId);
+        Assert.NotNull(saved.EscalatedAt);
+        Assert.Equal(1, emailSender.Calls);
+
+        var audits = await verify.WorkOrderAuditLogs.AsNoTracking().ToListAsync();
+        Assert.DoesNotContain(audits, a => a.WorkOrderId == 0);
+        if (expectedWorkOrderId is int workOrderId)
+            Assert.Equal(workOrderId, Assert.Single(audits).WorkOrderId);
+        else
+            Assert.Empty(audits);
+    }
+
     private static async Task<(int UpliftId, int? ExpectedWorkOrderId)> SeedAsync(
         ApplicationDbContext context,
         Ownership ownership,
-        DateTime? expiresAt)
+        DateTime? expiresAt,
+        DateTime? initialNotificationSentAt = null)
     {
         context.Users.Add(new ApplicationUser
         {
@@ -218,7 +269,8 @@ public sealed class UpliftDecisionAuditRelationalTests
             RequiredTier = 2,
             CreatedDate = DateTime.UtcNow.AddDays(-4),
             ExpiresAt = expiresAt,
-            NotificationStatus = "Pending"
+            InitialNotificationSentAt = initialNotificationSentAt,
+            NotificationStatus = initialNotificationSentAt == null ? "Pending" : "Sent"
         };
         context.DispatchUpliftRequests.Add(request);
         await context.SaveChangesAsync();
@@ -238,9 +290,16 @@ public sealed class UpliftDecisionAuditRelationalTests
             => throw new NotSupportedException();
     }
 
+    // Records sends without delivering anything.
     private sealed class NoEmailSender : IEmailSender
     {
-        public Task<bool> SendEmailAsync(string emailTo, string subject, string body) => Task.FromResult(true);
+        public int Calls;
+
+        public Task<bool> SendEmailAsync(string emailTo, string subject, string body)
+        {
+            Calls++;
+            return Task.FromResult(true);
+        }
     }
 
     private sealed class SqliteUpliftDecisionTestDbContext : ApplicationDbContext

From 0d8f32d1489b7a3a2d1675d13757a73c1351b23f Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Thu, 24 Sep 2026 23:47:18 -0300
Subject: [PATCH 120/183] fix(media): check the file type before the size cap
 on media upload

AddMedia sized a file before validating its type, and ValidateSize's Unknown
arm returned the video message, so a 150 MB .exe sent as
application/octet-stream was rejected as FileTooLarge with "Videos must be
100 MB or smaller." EnsureAllowed now runs first, so an unsupported file always
reports UnsupportedMediaType, and the Unknown arm uses a type-neutral message.
The oversize controller tests now use real file headers so they pass the type
check before reaching the size cap.
---
 .../WorkOrderMediaControllerTests.cs          | 70 +++++++++++++------
 .../Controllers/WorkOrderMediaController.cs   |  5 +-
 .../Helpers/WorkOrderMediaContract.cs         |  2 +-
 3 files changed, 55 insertions(+), 22 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/WorkOrderMediaControllerTests.cs b/Api.SeaHavenIndustries.Tests/WorkOrderMediaControllerTests.cs
index 3aab33e..f0ae1af 100644
--- a/Api.SeaHavenIndustries.Tests/WorkOrderMediaControllerTests.cs
+++ b/Api.SeaHavenIndustries.Tests/WorkOrderMediaControllerTests.cs
@@ -56,14 +56,11 @@ public class WorkOrderMediaControllerTests
     [Fact]
     public async Task AddMedia_VideoOverHundredMegabytes_ReturnsStableUnprocessableEntity()
     {
-        var file = new Mock<IFormFile>();
-        file.SetupGet(candidate => candidate.Length).Returns(100_000_001);
-        file.SetupGet(candidate => candidate.FileName).Returns("clip.mp4");
-        file.SetupGet(candidate => candidate.ContentType).Returns("video/mp4");
+        var file = OversizeFile(100_000_001, "clip.mp4", "video/mp4", FtypHeader);
         var storage = new Mock<IFileStoragePort>(MockBehavior.Strict);
         var controller = CreateController(storage: storage);
 
-        var result = await controller.AddMedia(1, null, file.Object, CancellationToken.None);
+        var result = await controller.AddMedia(1, null, file, CancellationToken.None);
 
         var response = Assert.IsType<UnprocessableEntityObjectResult>(result);
         var error = Assert.IsType<WorkOrderBoardValidationErrorDto>(response.Value);
@@ -75,14 +72,11 @@ public class WorkOrderMediaControllerTests
     [Fact]
     public async Task AddMedia_PhotoOverTenMegabytes_ReturnsStableUnprocessableEntity()
     {
-        var file = new Mock<IFormFile>();
-        file.SetupGet(candidate => candidate.Length).Returns(10_000_001);
-        file.SetupGet(candidate => candidate.FileName).Returns("photo.jpg");
-        file.SetupGet(candidate => candidate.ContentType).Returns("image/jpeg");
+        var file = OversizeFile(10_000_001, "photo.jpg", "image/jpeg", JpegHeader);
         var storage = new Mock<IFileStoragePort>(MockBehavior.Strict);
         var controller = CreateController(storage: storage);
 
-        var result = await controller.AddMedia(1, null, file.Object, CancellationToken.None);
+        var result = await controller.AddMedia(1, null, file, CancellationToken.None);
 
         var response = Assert.IsType<UnprocessableEntityObjectResult>(result);
         var error = Assert.IsType<WorkOrderBoardValidationErrorDto>(response.Value);
@@ -96,14 +90,11 @@ public class WorkOrderMediaControllerTests
     {
         // A .jpg with a foreign video type resolves to image/jpeg for validation, so it must
         // also be sized as a photo, not given the 100 MB video allowance.
-        var file = new Mock<IFormFile>();
-        file.SetupGet(candidate => candidate.Length).Returns(60_000_000);
-        file.SetupGet(candidate => candidate.FileName).Returns("photo.jpg");
-        file.SetupGet(candidate => candidate.ContentType).Returns("video/3gpp");
+        var file = OversizeFile(60_000_000, "photo.jpg", "video/3gpp", JpegHeader);
         var storage = new Mock<IFileStoragePort>(MockBehavior.Strict);
         var controller = CreateController(storage: storage);
 
-        var result = await controller.AddMedia(1, null, file.Object, CancellationToken.None);
+        var result = await controller.AddMedia(1, null, file, CancellationToken.None);
 
         var response = Assert.IsType<UnprocessableEntityObjectResult>(result);
         var error = Assert.IsType<WorkOrderBoardValidationErrorDto>(response.Value);
@@ -115,14 +106,11 @@ public class WorkOrderMediaControllerTests
     [Fact]
     public async Task AddMedia_DocumentOverFiftyMegabytes_ReturnsStableUnprocessableEntity()
     {
-        var file = new Mock<IFormFile>();
-        file.SetupGet(candidate => candidate.Length).Returns(50_000_001);
-        file.SetupGet(candidate => candidate.FileName).Returns("report.pdf");
-        file.SetupGet(candidate => candidate.ContentType).Returns("application/pdf");
+        var file = OversizeFile(50_000_001, "report.pdf", "application/pdf", PdfHeader);
         var storage = new Mock<IFileStoragePort>(MockBehavior.Strict);
         var controller = CreateController(storage: storage);
 
-        var result = await controller.AddMedia(1, WorkOrderMediaCategory.Extra, file.Object, CancellationToken.None);
+        var result = await controller.AddMedia(1, WorkOrderMediaCategory.Extra, file, CancellationToken.None);
 
         var response = Assert.IsType<UnprocessableEntityObjectResult>(result);
         var error = Assert.IsType<WorkOrderBoardValidationErrorDto>(response.Value);
@@ -131,6 +119,48 @@ public class WorkOrderMediaControllerTests
         storage.VerifyNoOtherCalls();
     }
 
+    [Fact]
+    public async Task AddMedia_OversizeUnsupportedType_ReportsUnsupportedTypeNotOversizeVideo()
+    {
+        var file = OversizeFile(150_000_000, "payload.exe", "application/octet-stream", [0x4D, 0x5A]);
+        var storage = new Mock<IFileStoragePort>(MockBehavior.Strict);
+        var controller = CreateController(storage: storage);
+
+        var result = await controller.AddMedia(1, null, file, CancellationToken.None);
+
+        var response = Assert.IsType<UnprocessableEntityObjectResult>(result);
+        var error = Assert.IsType<WorkOrderBoardValidationErrorDto>(response.Value);
+        Assert.Equal("UnsupportedMediaType", error.Code);
+        storage.VerifyNoOtherCalls();
+    }
+
+    [Fact]
+    public void ValidateSize_OversizeUnknownKind_UsesTypeNeutralMessage()
+    {
+        Assert.Equal(
+            "Files must be 100 MB or smaller.",
+            WorkOrderMediaContract.ValidateSize(150_000_000, WorkOrderMediaContract.UploadKind.Unknown));
+    }
+
+    private static readonly byte[] FtypHeader = [0, 0, 0, 0x18, (byte)'f', (byte)'t', (byte)'y', (byte)'p', (byte)'i', (byte)'s', (byte)'o', (byte)'m'];
+    private static readonly byte[] JpegHeader = [0xFF, 0xD8, 0xFF, 0xE0];
+    private static readonly byte[] PdfHeader = [0x25, 0x50, 0x44, 0x46, 0x2D];
+
+    /// <summary>
+    /// A file that reports <paramref name="length"/> bytes but only backs the 512-byte header the
+    /// type rules read, so oversize cases run through real signature validation cheaply.
+    /// </summary>
+    private static FormFile OversizeFile(long length, string fileName, string contentType, byte[] header)
+    {
+        var bytes = new byte[512];
+        header.CopyTo(bytes, 0);
+        return new FormFile(new MemoryStream(bytes), 0, length, "file", fileName)
+        {
+            Headers = new HeaderDictionary(),
+            ContentType = contentType
+        };
+    }
+
     private static FormFile VideoFormFile(int size, string fileName, string contentType)
     {
         var bytes = new byte[size];
diff --git a/Api.SeaHavenIndustries/Controllers/WorkOrderMediaController.cs b/Api.SeaHavenIndustries/Controllers/WorkOrderMediaController.cs
index e795f3c..fd7dac1 100644
--- a/Api.SeaHavenIndustries/Controllers/WorkOrderMediaController.cs
+++ b/Api.SeaHavenIndustries/Controllers/WorkOrderMediaController.cs
@@ -88,6 +88,10 @@ namespace Api.SeaHavenIndustries.Controllers
             string? fileUrl = null;
             try
             {
+                // Type first, so an unsupported file always reports UnsupportedMediaType instead
+                // of being sized under a kind it does not have.
+                WorkOrderMediaFileRules.EnsureAllowed(file, category);
+
                 // SH-116 contract: per-kind caps (photos 10 MB, videos 100 MB, documents 50 MB).
                 // Classify by the same resolved type EnsureAllowed validates against.
                 var sizeMessage = WorkOrderMediaContract.ValidateSize(
@@ -97,7 +101,6 @@ namespace Api.SeaHavenIndustries.Controllers
                     throw new WorkOrderBoardValidationException("FileTooLarge", sizeMessage);
                 }
 
-                WorkOrderMediaFileRules.EnsureAllowed(file, category);
                 if (WorkOrderMediaContract.ResolveKind(
                         WorkOrderMediaFileRules.ResolveUploadContentType(file), file.FileName)
                     == WorkOrderMediaContract.UploadKind.Video)
diff --git a/SeaHaven.Services/Helpers/WorkOrderMediaContract.cs b/SeaHaven.Services/Helpers/WorkOrderMediaContract.cs
index 34f8862..e064b02 100644
--- a/SeaHaven.Services/Helpers/WorkOrderMediaContract.cs
+++ b/SeaHaven.Services/Helpers/WorkOrderMediaContract.cs
@@ -138,7 +138,7 @@ namespace SeaHaven.Services.Helpers
                 UploadKind.Document when length > MaxDocumentBytes =>
                     "Documents must be 50 MB or smaller.",
                 UploadKind.Unknown when length > MaxVideoBytes =>
-                    "Videos must be 100 MB or smaller.",
+                    "Files must be 100 MB or smaller.",
                 _ => null
             };
         }

From 67cd9c589b4b38ba8bf03dd6d635dc65b202d338 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 01:41:49 -0300
Subject: [PATCH 121/183] fix(board-search): keep undated rows for clients that
 omit includeDateless (SH-391)

The strict date range made undated open work orders disappear for every
client that predates the includeDateless flag. The frontend on main sends
the all-weeks window (2000-01-01..2099-12-31) for "no range", the
1970-01-01..2099-12-31 window for the pinned Unassigned queue, and no date
input at all for the WO# duplicate lookup. None of those send the flag, so
deploying this backend before the frontend would have dropped undated WOs
from all three flows.

includeDateless is now optional. An explicit value still wins. When it is
omitted, a request with no date input or with an all-weeks Custom window
keeps its open undated rows, as before SH-391. Any other range stays
strict. The backend and frontend can therefore deploy in either order.
---
 .../DTOs/WorkOrderBoardRequestDTOs.cs         |  6 +-
 .../WorkOrderSearchDateRangeResolver.cs       | 30 ++++++
 .../WorkOrderAdvancedSearchService.cs         |  6 +-
 .../WorkOrderAdvancedSearchDateRangeTests.cs  | 93 ++++++++++++++++++-
 4 files changed, 131 insertions(+), 4 deletions(-)

diff --git a/SeaHaven.Services/DTOs/WorkOrderBoardRequestDTOs.cs b/SeaHaven.Services/DTOs/WorkOrderBoardRequestDTOs.cs
index e7c3dc6..38b4c24 100644
--- a/SeaHaven.Services/DTOs/WorkOrderBoardRequestDTOs.cs
+++ b/SeaHaven.Services/DTOs/WorkOrderBoardRequestDTOs.cs
@@ -90,9 +90,11 @@ namespace SeaHaven.Services.DTOs
         /// <summary>
         /// When true, rows with no date (no Schedule On) are returned alongside
         /// the in-range rows. Sent for searches with no date range selected; an
-        /// explicit range leaves it false so the range strictly narrows (SH-391).
+        /// explicit range leaves it unset or false so the range strictly narrows
+        /// (SH-391). When it is omitted, clients that predate the flag keep their
+        /// undated rows: see <see cref="WorkOrderSearchDateRangeResolver.ResolveIncludeDateless"/>.
         /// </summary>
-        public bool IncludeDateless { get; set; }
+        public bool? IncludeDateless { get; set; }
         public List<string>? Sites { get; set; }
         public List<string>? Regions { get; set; }
         public List<WorkOrderType>? Types { get; set; }
diff --git a/SeaHaven.Services/Helpers/WorkOrderSearchDateRangeResolver.cs b/SeaHaven.Services/Helpers/WorkOrderSearchDateRangeResolver.cs
index 48a8f48..7cf378e 100644
--- a/SeaHaven.Services/Helpers/WorkOrderSearchDateRangeResolver.cs
+++ b/SeaHaven.Services/Helpers/WorkOrderSearchDateRangeResolver.cs
@@ -15,6 +15,36 @@ namespace SeaHaven.Services.Helpers
 
     public static class WorkOrderSearchDateRangeResolver
     {
+        // Widest windows the frontend sends for "every week": the no-range search
+        // (ADVANCED_SEARCH_ALL_WEEKS_FROM/TO, 2000-01-01..2099-12-31) and the pinned
+        // Unassigned queue (UNASSIGNED_QUEUE_DATE_FROM/TO, 1970-01-01..2099-12-31).
+        private static readonly DateOnly AllWeeksFrom = new(2000, 1, 1);
+        private static readonly DateOnly AllWeeksTo = new(2099, 12, 31);
+
+        /// <summary>
+        /// Whether a board search adds open undated rows to its date range (SH-391).
+        /// An explicit <paramref name="includeDateless"/> wins. When it is omitted,
+        /// as by clients that predate the flag, a search with no date input or with
+        /// an all-weeks Custom window still returns undated rows, as before SH-391:
+        /// those requests mean "no range selected". Any other range is strict.
+        /// </summary>
+        public static bool ResolveIncludeDateless(
+            bool? includeDateless,
+            WorkOrderAdvancedSearchDatePreset? preset,
+            DateOnly? dateFrom,
+            DateOnly? dateTo)
+        {
+            if (includeDateless.HasValue)
+                return includeDateless.Value;
+
+            if (!preset.HasValue && !dateFrom.HasValue && !dateTo.HasValue)
+                return true;
+
+            return preset == WorkOrderAdvancedSearchDatePreset.Custom
+                && dateFrom <= AllWeeksFrom
+                && dateTo >= AllWeeksTo;
+        }
+
         public static WorkOrderSearchDateRange Resolve(
             WorkOrderAdvancedSearchDatePreset? preset,
             DateOnly? dateFrom,
diff --git a/SeaHaven.Services/Implementation/WorkOrderAdvancedSearchService.cs b/SeaHaven.Services/Implementation/WorkOrderAdvancedSearchService.cs
index c428da7..39f63dc 100644
--- a/SeaHaven.Services/Implementation/WorkOrderAdvancedSearchService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderAdvancedSearchService.cs
@@ -73,7 +73,11 @@ namespace SeaHaven.Services.Implementation
                 sortBy,
                 query.SortDir ?? "asc",
                 accountId,
-                query.IncludeDateless);
+                WorkOrderSearchDateRangeResolver.ResolveIncludeDateless(
+                    query.IncludeDateless,
+                    query.DatePreset,
+                    query.DateFrom,
+                    query.DateTo));
 
             var result = await _searchDataService.SearchAsync(dataQuery);
             var utcNow = DateTime.UtcNow;
diff --git a/SeaHavenIndustries.Tests/WorkOrderAdvancedSearchDateRangeTests.cs b/SeaHavenIndustries.Tests/WorkOrderAdvancedSearchDateRangeTests.cs
index 634c12f..f6d61b2 100644
--- a/SeaHavenIndustries.Tests/WorkOrderAdvancedSearchDateRangeTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderAdvancedSearchDateRangeTests.cs
@@ -1,3 +1,4 @@
+using System.Globalization;
 using Data.SeaHavenIndustries;
 using Data.SeaHavenIndustries.Enums;
 using Microsoft.EntityFrameworkCore;
@@ -55,7 +56,7 @@ public class WorkOrderAdvancedSearchDateRangeTests
         return wo;
     }
 
-    private static WorkOrderAdvancedSearchQueryDto UnassignedInRange(bool includeDateless = false) => new()
+    private static WorkOrderAdvancedSearchQueryDto UnassignedInRange(bool? includeDateless = null) => new()
     {
         DatePreset = WorkOrderAdvancedSearchDatePreset.Custom,
         DateFrom = RangeFrom,
@@ -149,6 +150,96 @@ public class WorkOrderAdvancedSearchDateRangeTests
         Assert.Equal(new[] { 1, 3 }, result.Items.Select(i => i.Id).OrderBy(id => id).ToArray());
     }
 
+    // Payloads the frontend sent before includeDateless existed. They must keep
+    // their undated rows so this backend can deploy ahead of the client.
+    [Theory]
+    [InlineData(2000)] // no range selected: ADVANCED_SEARCH_ALL_WEEKS_FROM
+    [InlineData(1970)] // pinned Unassigned queue: UNASSIGNED_QUEUE_DATE_FROM
+    public async Task SearchAsync_AllWeeksWindowWithoutFlag_KeepsOpenUndatedRows(int fromYear)
+    {
+        await using var context = CreateContext();
+        context.workOrders.AddRange(
+            Wo(1, new DateTime(2026, 8, 4)),
+            Wo(2, null, status: LifecycleStatus.Incomplete),
+            Wo(3, null, status: LifecycleStatus.Completed));
+        await context.SaveChangesAsync();
+
+        var result = await CreateService(context).SearchAsync(new WorkOrderAdvancedSearchQueryDto
+        {
+            DatePreset = WorkOrderAdvancedSearchDatePreset.Custom,
+            DateFrom = new DateOnly(fromYear, 1, 1),
+            DateTo = new DateOnly(2099, 12, 31),
+            Dispatchers = new List<string> { "__unassigned__" },
+            PageSize = 50
+        }, WorkOrderAccountTestHelpers.OrgWideAdmin(), null);
+
+        Assert.Equal(new[] { 1, 2 }, result.Items.Select(i => i.Id).OrderBy(id => id).ToArray());
+    }
+
+    [Fact]
+    public async Task SearchAsync_NoDateInputWithoutFlag_KeepsOpenUndatedRows()
+    {
+        // The WO# duplicate lookup sends only the search text and paging.
+        await using var context = CreateContext();
+        var thisWeek = WorkOrderSearchDateRangeResolver.GetIsoWeekStart(DateOnly.FromDateTime(DateTime.UtcNow));
+        context.workOrders.AddRange(
+            Wo(1, thisWeek.ToDateTime(TimeOnly.MinValue)),
+            Wo(2, null, status: LifecycleStatus.Incomplete),
+            Wo(3, thisWeek.AddDays(-7).ToDateTime(TimeOnly.MinValue)));
+        await context.SaveChangesAsync();
+
+        var result = await CreateService(context).SearchAsync(
+            new WorkOrderAdvancedSearchQueryDto { PageSize = 100 },
+            WorkOrderAccountTestHelpers.OrgWideAdmin(),
+            null);
+
+        Assert.Equal(new[] { 1, 2 }, result.Items.Select(i => i.Id).OrderBy(id => id).ToArray());
+    }
+
+    [Fact]
+    public async Task SearchAsync_AllWeeksWindowWithFlagFalse_ExcludesUndatedRows()
+    {
+        await using var context = CreateContext();
+        context.workOrders.AddRange(
+            Wo(1, new DateTime(2026, 8, 4)),
+            Wo(2, null, status: LifecycleStatus.Incomplete));
+        await context.SaveChangesAsync();
+
+        var result = await CreateService(context).SearchAsync(new WorkOrderAdvancedSearchQueryDto
+        {
+            DatePreset = WorkOrderAdvancedSearchDatePreset.Custom,
+            DateFrom = new DateOnly(2000, 1, 1),
+            DateTo = new DateOnly(2099, 12, 31),
+            IncludeDateless = false,
+            PageSize = 50
+        }, WorkOrderAccountTestHelpers.OrgWideAdmin(), null);
+
+        Assert.Equal(new[] { 1 }, result.Items.Select(i => i.Id).ToArray());
+    }
+
+    [Theory]
+    [InlineData(null, null, null, null, true)]
+    [InlineData(null, WorkOrderAdvancedSearchDatePreset.Custom, "2000-01-01", "2099-12-31", true)]
+    [InlineData(null, WorkOrderAdvancedSearchDatePreset.Custom, "1970-01-01", "2099-12-31", true)]
+    [InlineData(null, WorkOrderAdvancedSearchDatePreset.Custom, "2000-01-02", "2099-12-31", false)]
+    [InlineData(null, WorkOrderAdvancedSearchDatePreset.Custom, "2026-09-21", "2026-09-25", false)]
+    [InlineData(null, WorkOrderAdvancedSearchDatePreset.ThisWeek, null, null, false)]
+    [InlineData(false, null, null, null, false)]
+    [InlineData(true, WorkOrderAdvancedSearchDatePreset.ThisWeek, null, null, true)]
+    public void ResolveIncludeDateless_InfersOnlyForNoRangeRequests(
+        bool? flag,
+        WorkOrderAdvancedSearchDatePreset? preset,
+        string? from,
+        string? to,
+        bool expected)
+    {
+        Assert.Equal(expected, WorkOrderSearchDateRangeResolver.ResolveIncludeDateless(
+            flag,
+            preset,
+            from is null ? null : DateOnly.Parse(from, CultureInfo.InvariantCulture),
+            to is null ? null : DateOnly.Parse(to, CultureInfo.InvariantCulture)));
+    }
+
     [Fact]
     public async Task SearchAsync_RangeForAccountUser_NeverReturnsAnotherAccountsRows()
     {

From f40ad7c1eff5ca2de9ac7f8b808208683cf18cb1 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 02:10:41 -0300
Subject: [PATCH 122/183] fix(uplifts): pending exposure header sums the row
 deltas

The approvals header summed the whole RequestedNTE for work-order-path
requests, while each Pending row shows RequestedNTE - CurrentNTE. When a
work order already had an NTE the header overstated exposure by that NTE.

The header now sums the same Delta the rows display, over the same rows
the Pending tab lists (non-deleted request on a non-deleted dispatch).
The unused duplicate aggregate is removed so one definition remains.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 .../UpliftQueueReadTests.cs                   | 39 ++++++++++++++++---
 .../Implementation/UpliftDataService.cs       | 19 +++------
 .../Interfaces/IUpliftDataService.cs          |  1 -
 .../Implementation/UpliftService.cs           |  2 +-
 .../WorkOrderBoardCancelServiceTests.cs       |  1 -
 5 files changed, 40 insertions(+), 22 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs b/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
index 78fe0ac..5bd4a36 100644
--- a/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
+++ b/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
@@ -558,7 +558,7 @@ public sealed class UpliftQueueReadTests
     }
 
     [Fact]
-    public async Task List_PendingExposureTotal_SumsGrantedAmountsAcrossAllPendingRequests()
+    public async Task List_PendingExposureTotal_SumsRowDeltasAcrossAllPendingRequests()
     {
         using var context = NewContext();
         var (vendor, workOrder) = await SeedWorkOrderAsync(context, "WO-A", "SITE-A", "HVAC");
@@ -566,11 +566,10 @@ public sealed class UpliftQueueReadTests
         context.Users.Add(new ApplicationUser { Id = "user-7", FirstName = "Ada", LastName = "Smith" });
         await context.SaveChangesAsync();
         context.DispatchUpliftRequests.AddRange(
-            // Vendor-portal rows (createdby null) store the requested new NTE total,
-            // so the pending exposure is the delta: 400 - 100 = 300 and 600 - 250 = 350.
+            // Each pending row contributes its displayed Delta (RequestedNTE - CurrentNTE),
+            // whichever path created it: 400 - 100 = 300, 600 - 250 = 350, 90 - 600 = -510.
             Request(dispatch, "Pending", new DateTime(2026, 3, 1), requested: 400m, currentNte: 100m),
             Request(dispatch, "Pending", new DateTime(2026, 3, 2), requested: 600m, currentNte: 250m),
-            // Work-order-path rows (createdby set) store the requested increment: 90.
             Request(dispatch, "Pending", new DateTime(2026, 3, 3), requested: 90m, currentNte: 600m, createdBy: "user-7"),
             // Non-pending rows never add pending exposure.
             Request(dispatch, "Approved", new DateTime(2026, 2, 1), decided: new DateTime(2026, 2, 2), requested: 500m, currentNte: 100m));
@@ -581,7 +580,37 @@ public sealed class UpliftQueueReadTests
         var result = await service.ListAsync(UserWithRoles("Approver"), "Pending", null, 1, 1, CancellationToken.None);
 
         result.Items.Should().HaveCount(1);
-        result.PendingExposureTotal.Should().Be(740m);
+        result.PendingExposureTotal.Should().Be(140m);
+    }
+
+    [Fact]
+    public async Task List_PendingExposureTotal_EqualsSumOfPendingRowDeltas_WhenWorkOrderAlreadyHasNte()
+    {
+        using var context = NewContext();
+        var (vendorA, workOrderA) = await SeedWorkOrderAsync(context, "WO-A", "SITE-A", "HVAC");
+        var (vendorB, workOrderB) = await SeedWorkOrderAsync(context, "WO-B", "SITE-B", "HVAC");
+        var (vendorC, workOrderC) = await SeedWorkOrderAsync(context, "WO-C", "SITE-C", "HVAC");
+        var dispatchA = await SeedDispatchAsync(context, vendorA, workOrderA, "DIS-A");
+        var dispatchB = await SeedDispatchAsync(context, vendorB, workOrderB, "DIS-B");
+        var deletedDispatch = await SeedDispatchAsync(context, vendorC, workOrderC, "DIS-C");
+        deletedDispatch.IsDeleted = true;
+        context.Users.Add(new ApplicationUser { Id = "user-7", FirstName = "Ada", LastName = "Smith" });
+        await context.SaveChangesAsync();
+        context.DispatchUpliftRequests.AddRange(
+            // Raised from the work order, which already carries a 3,000 NTE.
+            Request(dispatchA, "Pending", new DateTime(2026, 3, 1), requested: 5_000_000_000m, currentNte: 3_000m, createdBy: "user-7"),
+            // Vendor-portal request on a dispatch with no NTE recorded yet.
+            Request(dispatchB, "Pending", new DateTime(2026, 3, 2), requested: 333m),
+            // A pending request on a deleted dispatch is not a queue row, so it adds nothing.
+            Request(deletedDispatch, "Pending", new DateTime(2026, 3, 3), requested: 700m, currentNte: 100m));
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        var result = await service.ListAsync(UserWithRoles("Approver"), "Pending", null, 1, 25, CancellationToken.None);
+
+        result.Items.Should().HaveCount(2);
+        result.PendingExposureTotal.Should().Be(4_999_997_333m);
+        result.PendingExposureTotal.Should().Be(result.Items.Sum(i => i.Delta));
     }
 
     // --- Approved-on-WO exposure totals ---
diff --git a/SeaHaven.DataServices/Implementation/UpliftDataService.cs b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
index 3c11978..3d2d68c 100644
--- a/SeaHaven.DataServices/Implementation/UpliftDataService.cs
+++ b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
@@ -128,16 +128,6 @@ namespace SeaHaven.DataServices.Implementation
             return (total, items);
         }
 
-        public Task<decimal> GetPendingExposureAsync(CancellationToken cancellationToken)
-        {
-            return _context.DispatchUpliftRequests
-                .Where(u => (u.IsDeleted == null || u.IsDeleted == false)
-                    && u.Status == "Pending")
-                .SumAsync(u => u.createdby == null
-                    ? u.RequestedNTE - (u.CurrentNTE ?? 0m)
-                    : u.RequestedNTE, cancellationToken);
-        }
-
         public async Task<IReadOnlyList<UpliftForDispatchData>> GetForDispatchAsync(int dispatchId, CancellationToken cancellationToken)
         {
             return await (from u in _context.DispatchUpliftRequests
@@ -446,9 +436,10 @@ namespace SeaHaven.DataServices.Implementation
             return totals.Values.ToList();
         }
 
-        // SH-207: queue-wide pending exposure for the approvals header. Mirrors the
-        // approved-exposure convention (sum of RequestedNTE) over every non-deleted
-        // Pending request on a non-deleted dispatch, independent of page or filters.
+        // Queue-wide pending exposure for the approvals header: the sum of the Delta each
+        // Pending queue row displays (RequestedNTE - CurrentNTE), over the same rows the
+        // Pending tab lists (non-deleted request on a non-deleted dispatch), independent
+        // of page or filters.
         public async Task<decimal> GetPendingExposureTotalAsync(CancellationToken cancellationToken)
         {
             return await _context.DispatchUpliftRequests
@@ -456,7 +447,7 @@ namespace SeaHaven.DataServices.Implementation
                     && u.Status == "Pending"
                     && u.Dispatch != null
                     && (u.Dispatch.IsDeleted == null || u.Dispatch.IsDeleted == false))
-                .SumAsync(u => (decimal?)u.RequestedNTE, cancellationToken) ?? 0m;
+                .SumAsync(u => (decimal?)(u.RequestedNTE - (u.CurrentNTE ?? 0m)), cancellationToken) ?? 0m;
         }
 
         public Task<List<DispatchUpliftRequest>> GetPendingForWorkOrderAsync(
diff --git a/SeaHaven.DataServices/Interfaces/IUpliftDataService.cs b/SeaHaven.DataServices/Interfaces/IUpliftDataService.cs
index ed89f5b..4dfe871 100644
--- a/SeaHaven.DataServices/Interfaces/IUpliftDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IUpliftDataService.cs
@@ -6,7 +6,6 @@ namespace SeaHaven.DataServices.Interfaces
     {
         Task<(int TotalCount, IReadOnlyList<UpliftListItemData> Items)> GetPagedAsync(
             string? status, int? tier, int page, int pageSize, CancellationToken cancellationToken);
-        Task<decimal> GetPendingExposureAsync(CancellationToken cancellationToken);
         Task<IReadOnlyList<UpliftForDispatchData>> GetForDispatchAsync(int dispatchId, CancellationToken cancellationToken);
         Task<IReadOnlyList<UpliftForWorkOrderData>> GetForWorkOrderAsync(int workOrderId, CancellationToken cancellationToken);
         Task<DispatchUpliftRequest?> GetByIdAndWorkOrderAsync(int requestId, int workOrderId, CancellationToken cancellationToken);
diff --git a/SeaHaven.Services/Implementation/UpliftService.cs b/SeaHaven.Services/Implementation/UpliftService.cs
index 134ec66..c72ddc3 100644
--- a/SeaHaven.Services/Implementation/UpliftService.cs
+++ b/SeaHaven.Services/Implementation/UpliftService.cs
@@ -36,7 +36,7 @@ namespace SeaHaven.Services.Implementation
         public async Task<UpliftListResultDTO> ListAsync(ClaimsPrincipal user, string? status, int? tier, int page, int pageSize, CancellationToken cancellationToken)
         {
             var (total, items) = await _upliftData.GetPagedAsync(status, tier, page, pageSize, cancellationToken);
-            var pendingExposureTotal = await _upliftData.GetPendingExposureAsync(cancellationToken);
+            var pendingExposureTotal = await _upliftData.GetPendingExposureTotalAsync(cancellationToken);
 
             var mapped = items.Select(r => new UpliftListItemDTO
             {
diff --git a/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs b/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs
index aad09c3..46e86fc 100644
--- a/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs
@@ -447,7 +447,6 @@ public class WorkOrderBoardCancelServiceTests
         public Task<(int TotalCount, IReadOnlyList<UpliftListItemData> Items)> GetPagedAsync(
             string? status, int? tier, int page, int pageSize, CancellationToken cancellationToken) =>
             throw new NotSupportedException();
-        public Task<decimal> GetPendingExposureAsync(CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<IReadOnlyList<UpliftForDispatchData>> GetForDispatchAsync(int dispatchId, CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<IReadOnlyList<UpliftForWorkOrderData>> GetForWorkOrderAsync(int workOrderId, CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<DispatchUpliftRequest?> GetByIdAndWorkOrderAsync(int requestId, int workOrderId, CancellationToken cancellationToken) => throw new NotSupportedException();

From eb2b442775c26364afddcdbdc333968ff895b977 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 02:32:58 -0300
Subject: [PATCH 123/183] fix(uplifts): one per-path uplift amount for queue,
 approval and exposure

Work-order requests store the requested increase in RequestedNTE; vendor
portal requests store the requested NTE total. The queue Delta, the
pending and approved exposure totals, the work-order uplift list, the
board summary and the notification Delta now all read one definition
(UpliftAmount) that honours both meanings and translates to SQL.

Approving a work-order request now adds its increase to the dispatch NTE
instead of replacing the NTE with the increase; vendor requests still end
at their requested total.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 .../UpliftQueueReadTests.cs                   |  24 +-
 .../Models/VendorPortalReadModels.cs          |   4 +
 SeaHaven.DataServices/Helpers/UpliftAmount.cs |  33 ++
 .../Helpers/WorkOrderBoardProjection.cs       |  10 +-
 .../Implementation/DispatchDataService.cs     |   4 +-
 .../Implementation/UpliftDataService.cs       |  44 ++-
 .../Helpers/WorkOrderUpliftContractMapper.cs  |   5 +-
 .../UpliftNotificationMessage.cs              |   3 +-
 .../Implementation/UpliftService.cs           |  14 +-
 .../UpliftAmountPerCreationPathTests.cs       | 298 ++++++++++++++++++
 10 files changed, 394 insertions(+), 45 deletions(-)
 create mode 100644 SeaHaven.DataServices/Helpers/UpliftAmount.cs
 create mode 100644 SeaHavenIndustries.Tests/UpliftAmountPerCreationPathTests.cs

diff --git a/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs b/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
index 5bd4a36..5c398cf 100644
--- a/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
+++ b/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
@@ -278,7 +278,8 @@ public sealed class UpliftQueueReadTests
         item.RequestedByName.Should().Be("Gateway");
         item.RequestedAt.Should().Be(new DateTime(2026, 3, 2));
         item.VendorReason.Should().Be("Scope grew");
-        item.Delta.Should().Be(300m);
+        // A work-order request (createdby set) stores the increase itself in RequestedNTE.
+        item.Delta.Should().Be(400m);
         item.Status.Should().Be("Pending");
     }
 
@@ -558,7 +559,7 @@ public sealed class UpliftQueueReadTests
     }
 
     [Fact]
-    public async Task List_PendingExposureTotal_SumsRowDeltasAcrossAllPendingRequests()
+    public async Task List_PendingExposureTotal_SumsEachPendingRequestsIncreaseAcrossTheQueue()
     {
         using var context = NewContext();
         var (vendor, workOrder) = await SeedWorkOrderAsync(context, "WO-A", "SITE-A", "HVAC");
@@ -566,10 +567,11 @@ public sealed class UpliftQueueReadTests
         context.Users.Add(new ApplicationUser { Id = "user-7", FirstName = "Ada", LastName = "Smith" });
         await context.SaveChangesAsync();
         context.DispatchUpliftRequests.AddRange(
-            // Each pending row contributes its displayed Delta (RequestedNTE - CurrentNTE),
-            // whichever path created it: 400 - 100 = 300, 600 - 250 = 350, 90 - 600 = -510.
+            // Vendor-portal rows (createdby null) store the requested new NTE total,
+            // so their increase is 400 - 100 = 300 and 600 - 250 = 350.
             Request(dispatch, "Pending", new DateTime(2026, 3, 1), requested: 400m, currentNte: 100m),
             Request(dispatch, "Pending", new DateTime(2026, 3, 2), requested: 600m, currentNte: 250m),
+            // Work-order rows (createdby set) store the increase itself: 90.
             Request(dispatch, "Pending", new DateTime(2026, 3, 3), requested: 90m, currentNte: 600m, createdBy: "user-7"),
             // Non-pending rows never add pending exposure.
             Request(dispatch, "Approved", new DateTime(2026, 2, 1), decided: new DateTime(2026, 2, 2), requested: 500m, currentNte: 100m));
@@ -580,11 +582,11 @@ public sealed class UpliftQueueReadTests
         var result = await service.ListAsync(UserWithRoles("Approver"), "Pending", null, 1, 1, CancellationToken.None);
 
         result.Items.Should().HaveCount(1);
-        result.PendingExposureTotal.Should().Be(140m);
+        result.PendingExposureTotal.Should().Be(740m);
     }
 
     [Fact]
-    public async Task List_PendingExposureTotal_EqualsSumOfPendingRowDeltas_WhenWorkOrderAlreadyHasNte()
+    public async Task List_PendingExposureTotal_EqualsSumOfPendingRowAmounts_ForBothCreationPaths()
     {
         using var context = NewContext();
         var (vendorA, workOrderA) = await SeedWorkOrderAsync(context, "WO-A", "SITE-A", "HVAC");
@@ -597,10 +599,11 @@ public sealed class UpliftQueueReadTests
         context.Users.Add(new ApplicationUser { Id = "user-7", FirstName = "Ada", LastName = "Smith" });
         await context.SaveChangesAsync();
         context.DispatchUpliftRequests.AddRange(
-            // Raised from the work order, which already carries a 3,000 NTE.
+            // Raised from the work order, which already carries a 3,000 NTE: RequestedNTE
+            // is the 5,000,000,000 increase itself.
             Request(dispatchA, "Pending", new DateTime(2026, 3, 1), requested: 5_000_000_000m, currentNte: 3_000m, createdBy: "user-7"),
-            // Vendor-portal request on a dispatch with no NTE recorded yet.
-            Request(dispatchB, "Pending", new DateTime(2026, 3, 2), requested: 333m),
+            // Vendor-portal request for a 3,333 total on a 3,000 NTE: a 333 increase.
+            Request(dispatchB, "Pending", new DateTime(2026, 3, 2), requested: 3_333m, currentNte: 3_000m),
             // A pending request on a deleted dispatch is not a queue row, so it adds nothing.
             Request(deletedDispatch, "Pending", new DateTime(2026, 3, 3), requested: 700m, currentNte: 100m));
         await context.SaveChangesAsync();
@@ -609,7 +612,8 @@ public sealed class UpliftQueueReadTests
         var result = await service.ListAsync(UserWithRoles("Approver"), "Pending", null, 1, 25, CancellationToken.None);
 
         result.Items.Should().HaveCount(2);
-        result.PendingExposureTotal.Should().Be(4_999_997_333m);
+        result.Items.Select(i => i.Delta).Should().BeEquivalentTo(new[] { 5_000_000_000m, 333m });
+        result.PendingExposureTotal.Should().Be(5_000_000_333m);
         result.PendingExposureTotal.Should().Be(result.Items.Sum(i => i.Delta));
     }
 
diff --git a/Data.SeaHavenIndustries/Models/VendorPortalReadModels.cs b/Data.SeaHavenIndustries/Models/VendorPortalReadModels.cs
index 031cf01..84a00e8 100644
--- a/Data.SeaHavenIndustries/Models/VendorPortalReadModels.cs
+++ b/Data.SeaHavenIndustries/Models/VendorPortalReadModels.cs
@@ -100,6 +100,8 @@ namespace Data.SeaHavenIndustries
         public string? DecidedByLastName { get; set; }
         public decimal? CurrentNTE { get; set; }
         public decimal RequestedNTE { get; set; }
+        /// <summary>The requested NTE increase; see UpliftAmount in SeaHaven.DataServices.</summary>
+        public decimal Amount { get; set; }
         public string? VendorReason { get; set; }
         public int RequiredTier { get; set; }
         public string? Status { get; set; }
@@ -127,6 +129,8 @@ namespace Data.SeaHavenIndustries
         public int DispatchId { get; set; }
         public decimal? CurrentNTE { get; set; }
         public decimal RequestedNTE { get; set; }
+        /// <summary>The requested NTE increase; see UpliftAmount in SeaHaven.DataServices.</summary>
+        public decimal Amount { get; set; }
         public string? VendorReason { get; set; }
         public string? Status { get; set; }
         public int RequiredTier { get; set; }
diff --git a/SeaHaven.DataServices/Helpers/UpliftAmount.cs b/SeaHaven.DataServices/Helpers/UpliftAmount.cs
new file mode 100644
index 0000000..6f17961
--- /dev/null
+++ b/SeaHaven.DataServices/Helpers/UpliftAmount.cs
@@ -0,0 +1,33 @@
+using System.Linq.Expressions;
+using Data.SeaHavenIndustries;
+
+namespace SeaHaven.DataServices.Helpers
+{
+    /// <summary>
+    /// The single definition of an uplift's amount: the NTE increase being requested.
+    /// The two creation paths store different meanings in RequestedNTE. Vendor-portal
+    /// requests store the requested new NTE total, so the amount is RequestedNTE minus
+    /// the NTE at request time. Work-order requests store the increase itself. Vendor
+    /// sessions have no identity user, so createdby is null only on vendor-portal rows.
+    /// </summary>
+    public static class UpliftAmount
+    {
+        /// <summary>Translatable form for EF queries and aggregates.</summary>
+        public static readonly Expression<Func<DispatchUpliftRequest, decimal>> ForQuery =
+            u => u.createdby == null
+                ? u.RequestedNTE - (u.CurrentNTE ?? 0m)
+                : u.RequestedNTE;
+
+        private static readonly Func<DispatchUpliftRequest, decimal> Compiled = ForQuery.Compile();
+
+        public static decimal Of(DispatchUpliftRequest request) => Compiled(request);
+
+        public static decimal Of(string? createdBy, decimal requestedNte, decimal? currentNte) =>
+            Compiled(new DispatchUpliftRequest
+            {
+                createdby = createdBy,
+                RequestedNTE = requestedNte,
+                CurrentNTE = currentNte,
+            });
+    }
+}
diff --git a/SeaHaven.DataServices/Helpers/WorkOrderBoardProjection.cs b/SeaHaven.DataServices/Helpers/WorkOrderBoardProjection.cs
index d4557f0..a9f9861 100644
--- a/SeaHaven.DataServices/Helpers/WorkOrderBoardProjection.cs
+++ b/SeaHaven.DataServices/Helpers/WorkOrderBoardProjection.cs
@@ -255,6 +255,8 @@ namespace SeaHaven.DataServices.Helpers
                     WorkOrderId = u.Dispatch!.WorkOrderId!.Value,
                     u.Status,
                     u.RequestedNTE,
+                    u.CurrentNTE,
+                    u.createdby,
                     u.CreatedDate
                 });
 
@@ -268,6 +270,8 @@ namespace SeaHaven.DataServices.Helpers
                         WorkOrderId = link.WorkOrderId,
                         u.Status,
                         u.RequestedNTE,
+                        u.CurrentNTE,
+                        u.createdby,
                         u.CreatedDate
                     });
 
@@ -276,7 +280,7 @@ namespace SeaHaven.DataServices.Helpers
                 l.UpliftId,
                 l.WorkOrderId,
                 l.Status,
-                l.RequestedNTE,
+                UpliftAmount.Of(l.createdby, l.RequestedNTE, l.CurrentNTE),
                 l.CreatedDate)));
         }
 
@@ -316,7 +320,7 @@ namespace SeaHaven.DataServices.Helpers
                     pendingCount,
                     HasUplift: true,
                     primary?.Status,
-                    primary?.RequestedNTE);
+                    primary?.Amount);
             }
 
             return result;
@@ -337,7 +341,7 @@ namespace SeaHaven.DataServices.Helpers
             int UpliftId,
             int WorkOrderId,
             string Status,
-            decimal RequestedNTE,
+            decimal Amount,
             DateTime? CreatedDate);
 
         private sealed record BoardUpliftAgg(
diff --git a/SeaHaven.DataServices/Implementation/DispatchDataService.cs b/SeaHaven.DataServices/Implementation/DispatchDataService.cs
index 6511ad6..3274713 100644
--- a/SeaHaven.DataServices/Implementation/DispatchDataService.cs
+++ b/SeaHaven.DataServices/Implementation/DispatchDataService.cs
@@ -1,6 +1,7 @@
 using Data.SeaHavenIndustries;
 using Microsoft.EntityFrameworkCore;
 using SeaHaven.DataServices.Dto;
+using SeaHaven.DataServices.Helpers;
 using SeaHaven.DataServices.Interfaces;
 using SeaHaven.DataServices.Models;
 
@@ -457,6 +458,7 @@ namespace SeaHaven.DataServices.Implementation
                                         u.Id,
                                         u.CurrentNTE,
                                         u.RequestedNTE,
+                                        u.createdby,
                                         u.VendorReason,
                                         u.Status,
                                         u.RequiredTier,
@@ -474,7 +476,7 @@ namespace SeaHaven.DataServices.Implementation
                 Id = u.Id,
                 CurrentNTE = u.CurrentNTE,
                 RequestedNTE = u.RequestedNTE,
-                Delta = u.RequestedNTE - (u.CurrentNTE ?? 0m),
+                Delta = UpliftAmount.Of(u.createdby, u.RequestedNTE, u.CurrentNTE),
                 VendorReason = u.VendorReason,
                 Status = u.Status,
                 RequiredTier = u.RequiredTier,
diff --git a/SeaHaven.DataServices/Implementation/UpliftDataService.cs b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
index 3d2d68c..cbcf76d 100644
--- a/SeaHaven.DataServices/Implementation/UpliftDataService.cs
+++ b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
@@ -3,6 +3,7 @@ using Data.SeaHavenIndustries;
 using Data.SeaHavenIndustries.Enums;
 using Microsoft.EntityFrameworkCore;
 using SeaHaven.DataServices.Exceptions;
+using SeaHaven.DataServices.Helpers;
 using SeaHaven.DataServices.Interfaces;
 
 namespace SeaHaven.DataServices.Implementation
@@ -109,6 +110,7 @@ namespace SeaHaven.DataServices.Implementation
                     DecidedByLastName = x.decUser != null ? x.decUser.LastName : null,
                     CurrentNTE = x.u.CurrentNTE,
                     RequestedNTE = x.u.RequestedNTE,
+                    Amount = UpliftAmount.Of(x.u.createdby, x.u.RequestedNTE, x.u.CurrentNTE),
                     VendorReason = x.u.VendorReason,
                     RequiredTier = x.u.RequiredTier,
                     Status = x.u.Status,
@@ -143,6 +145,7 @@ namespace SeaHaven.DataServices.Implementation
                               DispatchId = u.DispatchId,
                               CurrentNTE = u.CurrentNTE,
                               RequestedNTE = u.RequestedNTE,
+                              Amount = UpliftAmount.Of(u.createdby, u.RequestedNTE, u.CurrentNTE),
                               VendorReason = u.VendorReason,
                               Status = u.Status,
                               RequiredTier = u.RequiredTier,
@@ -183,6 +186,7 @@ namespace SeaHaven.DataServices.Implementation
                               DispatchId = u.DispatchId,
                               CurrentNTE = u.CurrentNTE,
                               RequestedNTE = u.RequestedNTE,
+                              Amount = UpliftAmount.Of(u.createdby, u.RequestedNTE, u.CurrentNTE),
                               VendorReason = u.VendorReason,
                               Status = u.Status,
                               RequiredTier = u.RequiredTier,
@@ -392,25 +396,14 @@ namespace SeaHaven.DataServices.Implementation
                 .Where(u => (u.IsDeleted == null || u.IsDeleted == false)
                     && dispatchIds.Contains(u.DispatchId)
                     && (u.Status == "Approved" || u.Status == "NoApprovalRequired"))
-                .GroupBy(u => u.DispatchId)
+                // Summing each request's amount (the granted increase) keeps sequential
+                // approvals from double-counting whole NTE totals in both buckets.
+                .GroupBy(u => new { u.DispatchId, u.Status }, UpliftAmount.ForQuery)
                 .Select(g => new
                 {
-                    DispatchId = g.Key,
-                    // The two creation paths store different meanings in RequestedNTE.
-                    // Vendor-portal rows store the requested new NTE total, so the
-                    // granted amount is RequestedNTE - CurrentNTE; work-order-path rows
-                    // store the granted increment directly. Vendor sessions have no
-                    // identity user, so createdby is null only on vendor-portal rows. Summing
-                    // granted amounts keeps sequential approvals from double-counting whole
-                    // NTE totals. This applies to both buckets.
-                    AutoApproved = g.Where(x => x.Status == "NoApprovalRequired")
-                        .Sum(x => (decimal?)(x.createdby == null
-                            ? x.RequestedNTE - (x.CurrentNTE ?? 0m)
-                            : x.RequestedNTE)),
-                    AdminApproved = g.Where(x => x.Status == "Approved")
-                        .Sum(x => (decimal?)(x.createdby == null
-                            ? x.RequestedNTE - (x.CurrentNTE ?? 0m)
-                            : x.RequestedNTE))
+                    g.Key.DispatchId,
+                    g.Key.Status,
+                    Total = g.Sum()
                 })
                 .ToListAsync(cancellationToken);
 
@@ -428,18 +421,20 @@ namespace SeaHaven.DataServices.Implementation
                         totals[workOrderId] = total;
                     }
 
-                    total.AutoApprovedTotal += sum.AutoApproved ?? 0m;
-                    total.AdminApprovedTotal += sum.AdminApproved ?? 0m;
+                    if (sum.Status == "NoApprovalRequired")
+                        total.AutoApprovedTotal += sum.Total;
+                    else
+                        total.AdminApprovedTotal += sum.Total;
                 }
             }
 
             return totals.Values.ToList();
         }
 
-        // Queue-wide pending exposure for the approvals header: the sum of the Delta each
-        // Pending queue row displays (RequestedNTE - CurrentNTE), over the same rows the
-        // Pending tab lists (non-deleted request on a non-deleted dispatch), independent
-        // of page or filters.
+        // Queue-wide pending exposure for the approvals header: the sum of the amount each
+        // Pending queue row displays (UpliftAmount), over the same rows the Pending tab
+        // lists (non-deleted request on a non-deleted dispatch), independent of page or
+        // filters.
         public async Task<decimal> GetPendingExposureTotalAsync(CancellationToken cancellationToken)
         {
             return await _context.DispatchUpliftRequests
@@ -447,7 +442,8 @@ namespace SeaHaven.DataServices.Implementation
                     && u.Status == "Pending"
                     && u.Dispatch != null
                     && (u.Dispatch.IsDeleted == null || u.Dispatch.IsDeleted == false))
-                .SumAsync(u => (decimal?)(u.RequestedNTE - (u.CurrentNTE ?? 0m)), cancellationToken) ?? 0m;
+                .Select(UpliftAmount.ForQuery)
+                .SumAsync(cancellationToken);
         }
 
         public Task<List<DispatchUpliftRequest>> GetPendingForWorkOrderAsync(
diff --git a/SeaHaven.Services/Helpers/WorkOrderUpliftContractMapper.cs b/SeaHaven.Services/Helpers/WorkOrderUpliftContractMapper.cs
index 7596b8d..667dc4b 100644
--- a/SeaHaven.Services/Helpers/WorkOrderUpliftContractMapper.cs
+++ b/SeaHaven.Services/Helpers/WorkOrderUpliftContractMapper.cs
@@ -1,4 +1,5 @@
 using Data.SeaHavenIndustries;
+using SeaHaven.DataServices.Helpers;
 using SeaHaven.DataServices.Interfaces;
 using SeaHaven.Services.DTOs;
 using SeaHaven.Services.Implementation;
@@ -42,7 +43,7 @@ namespace SeaHaven.Services.Helpers
             {
                 Id = row.Id,
                 Status = ToFrontendStatus(row.Status),
-                Amount = row.RequestedNTE,
+                Amount = row.Amount,
                 Notes = row.VendorReason ?? "",
                 RequestedAt = row.CreatedDate,
                 RequestedById = row.CreatedByUserId,
@@ -58,7 +59,7 @@ namespace SeaHaven.Services.Helpers
             {
                 Id = request.Id,
                 Status = ToFrontendStatus(request.Status),
-                Amount = request.RequestedNTE,
+                Amount = UpliftAmount.Of(request),
                 Notes = request.VendorReason ?? "",
                 RequestedAt = request.CreatedDate,
                 RequestedById = request.createdby,
diff --git a/SeaHaven.Services/Implementation/UpliftNotificationMessage.cs b/SeaHaven.Services/Implementation/UpliftNotificationMessage.cs
index dd3c3f8..1a1331c 100644
--- a/SeaHaven.Services/Implementation/UpliftNotificationMessage.cs
+++ b/SeaHaven.Services/Implementation/UpliftNotificationMessage.cs
@@ -1,4 +1,5 @@
 using Data.SeaHavenIndustries;
+using SeaHaven.DataServices.Helpers;
 
 namespace SeaHaven.Services.Implementation
 {
@@ -23,7 +24,7 @@ namespace SeaHaven.Services.Implementation
                     <table style='border-collapse:collapse;font-family:Arial,sans-serif;'>
                         <tr><td style='padding:4px 10px;'><strong>Current NTE</strong></td><td style='padding:4px 10px;'>${req.CurrentNTE ?? 0m:F2}</td></tr>
                         <tr><td style='padding:4px 10px;'><strong>Requested NTE</strong></td><td style='padding:4px 10px;'>${req.RequestedNTE:F2}</td></tr>
-                        <tr><td style='padding:4px 10px;'><strong>Delta</strong></td><td style='padding:4px 10px;'>${(req.RequestedNTE - (req.CurrentNTE ?? 0m)):F2}</td></tr>
+                        <tr><td style='padding:4px 10px;'><strong>Delta</strong></td><td style='padding:4px 10px;'>${UpliftAmount.Of(req):F2}</td></tr>
                         <tr><td style='padding:4px 10px;'><strong>Required Approval</strong></td><td style='padding:4px 10px;'>{tierText}</td></tr>
                     </table>
                     <h3>Vendor Reason</h3>
diff --git a/SeaHaven.Services/Implementation/UpliftService.cs b/SeaHaven.Services/Implementation/UpliftService.cs
index c72ddc3..450b76b 100644
--- a/SeaHaven.Services/Implementation/UpliftService.cs
+++ b/SeaHaven.Services/Implementation/UpliftService.cs
@@ -1,5 +1,6 @@
 using Data.SeaHavenIndustries;
 using Microsoft.Extensions.Options;
+using SeaHaven.DataServices.Helpers;
 using SeaHaven.DataServices.Interfaces;
 using SeaHaven.Services.Configuration;
 using SeaHaven.Services.DTOs;
@@ -56,7 +57,7 @@ namespace SeaHaven.Services.Implementation
                 DecidedByName = ResolveRequestedByName(null, r.DecidedByFirstName, r.DecidedByLastName),
                 CurrentNTE = r.CurrentNTE,
                 RequestedNTE = r.RequestedNTE,
-                Delta = r.RequestedNTE - (r.CurrentNTE ?? 0m),
+                Delta = r.Amount,
                 VendorReason = r.VendorReason,
                 RequiredTier = r.RequiredTier,
                 Status = UpliftStatus.ToCanonical(r.Status),
@@ -115,7 +116,7 @@ namespace SeaHaven.Services.Implementation
                 DispatchId = r.DispatchId,
                 CurrentNTE = r.CurrentNTE,
                 RequestedNTE = r.RequestedNTE,
-                Delta = r.RequestedNTE - (r.CurrentNTE ?? 0m),
+                Delta = r.Amount,
                 VendorReason = r.VendorReason,
                 Status = UpliftStatus.ToCanonical(r.Status),
                 RequiredTier = r.RequiredTier,
@@ -157,7 +158,12 @@ namespace SeaHaven.Services.Implementation
             var now = _timeProvider.GetUtcNow().UtcDateTime;
             var oldNTE = dispatch.NTEAmount ?? 0m;
 
-            dispatch.NTEAmount = req.RequestedNTE;
+            // Approval raises the NTE by the request's amount. A vendor-portal request
+            // stores its requested NTE total and ends exactly there; a work-order request
+            // stores the increase, so it is added to the dispatch's current NTE.
+            dispatch.NTEAmount = req.createdby == null
+                ? req.RequestedNTE
+                : oldNTE + UpliftAmount.Of(req);
             dispatch.LastModificationTime = now;
 
             req.Status = UpliftStatus.Approved;
@@ -172,7 +178,7 @@ namespace SeaHaven.Services.Implementation
                 UserId = userId,
                 FieldName = $"Dispatch {dispatch.DispatchNumber} NTE",
                 OldValue = $"${oldNTE:F2}",
-                NewValue = $"${req.RequestedNTE:F2}",
+                NewValue = $"${dispatch.NTEAmount:F2}",
                 Action = "uplift_approved",
                 CreatedAt = now
             }, cancellationToken);
diff --git a/SeaHavenIndustries.Tests/UpliftAmountPerCreationPathTests.cs b/SeaHavenIndustries.Tests/UpliftAmountPerCreationPathTests.cs
new file mode 100644
index 0000000..a378b60
--- /dev/null
+++ b/SeaHavenIndustries.Tests/UpliftAmountPerCreationPathTests.cs
@@ -0,0 +1,298 @@
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using Microsoft.AspNetCore.Identity;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Options;
+using SeaHaven.DataServices.Helpers;
+using SeaHaven.DataServices.Implementation;
+using SeaHaven.Services.Configuration;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Implementation;
+using SeaHaven.Services.Interfaces;
+using System.Security.Claims;
+using Xunit;
+
+namespace SeaHavenIndustries.Tests;
+
+// An uplift's amount is the NTE increase being requested. Work-order requests store
+// that increase in RequestedNTE; vendor-portal requests store the requested NTE total.
+// These tests walk each path through the approvals queue, approve and revoke, and the
+// queue-wide and per-work-order exposure totals.
+public sealed class UpliftAmountPerCreationPathTests
+{
+    private const string DispatcherId = "dispatcher-1";
+    private const int WorkOrderId = 1;
+    private const int PrimaryDispatchId = 10;
+    private const int SecondDispatchId = 11;
+
+    private static ApplicationDbContext CreateContext() =>
+        new(new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseInMemoryDatabase(Guid.NewGuid().ToString())
+            .Options);
+
+    private static ApprovalsOptions NewOptions() => new()
+    {
+        UpliftTier1MaxUsd = 2500m,
+        Tier1Roles = new[] { "Approver" },
+        Tier2Roles = new[] { "Manager" },
+    };
+
+    private static WorkOrderUpliftService NewWorkOrderUpliftService(ApplicationDbContext context) =>
+        new(new UpliftDataService(context),
+            new DispatchDataService(context),
+            new WorkOrderDetailDataService(context),
+            WorkOrderAccountTestHelpers.Resolver(context),
+            new UserDataService(context),
+            new TeamPermissionOverrideDataService(context),
+            new TeamPermissionPolicy(),
+            TimeProvider.System,
+            Options.Create(NewOptions()));
+
+    private static UpliftService NewQueueService(ApplicationDbContext context) =>
+        new(new UpliftDataService(context),
+            new DispatchDataService(context),
+            new NoDocumentStorage(),
+            TimeProvider.System,
+            Options.Create(NewOptions()));
+
+    private static ClaimsPrincipal Admin(string userId = DispatcherId) =>
+        WorkOrderAccountTestHelpers.OrgWideAdmin(userId);
+
+    private static Dispatch DispatchOf(ApplicationDbContext context, int id) =>
+        context.Dispatches.Single(d => d.Id == id);
+
+    // A work order with a 600 NTE on its primary dispatch, and a second dispatch on the
+    // same work order, also at 600.
+    private static async Task SeedWorkOrderAsync(ApplicationDbContext context)
+    {
+        await WorkOrderAccountTestHelpers.EnsureAccountAsync(context);
+        context.Users.Add(new ApplicationUser
+        {
+            Id = DispatcherId,
+            UserName = DispatcherId,
+            FirstName = "Alex",
+            LastName = "Dispatcher",
+        });
+        var role = new IdentityRole("Admin");
+        context.Roles.Add(role);
+        context.UserRoles.Add(new IdentityUserRole<string> { UserId = DispatcherId, RoleId = role.Id });
+        context.Vendors.Add(new Vendor { Id = 1, CompanyName = "Acme HVAC" });
+        context.Dispatches.AddRange(
+            new Dispatch
+            {
+                Id = PrimaryDispatchId,
+                VendorId = 1,
+                WorkOrderId = WorkOrderId,
+                NTEAmount = 600m,
+                DispatchNumber = "DIS-10",
+                Status = "Completed",
+            },
+            new Dispatch
+            {
+                Id = SecondDispatchId,
+                VendorId = 1,
+                WorkOrderId = WorkOrderId,
+                NTEAmount = 600m,
+                DispatchNumber = "DIS-11",
+                Status = "Completed",
+            });
+        context.workOrders.Add(new WorkOrder
+        {
+            Id = WorkOrderId,
+            InternalWONumber = "10000000001",
+            PrimaryDispatchId = PrimaryDispatchId,
+            AccountId = 1,
+            WorkOrderType = WorkOrderType.PM,
+        });
+        await context.SaveChangesAsync();
+    }
+
+    // Uses up the work order's auto-approval allowance, so a new work-order request
+    // waits for approval instead of auto-approving.
+    private static async Task ConsumeAutoApprovalAllowanceAsync(ApplicationDbContext context)
+    {
+        context.DispatchUpliftRequests.Add(new DispatchUpliftRequest
+        {
+            DispatchId = SecondDispatchId,
+            CurrentNTE = 100m,
+            RequestedNTE = 500m,
+            Status = "NoApprovalRequired",
+            RequiredTier = 0,
+            NotificationStatus = "Sent",
+            createdby = DispatcherId,
+            CreatedDate = new DateTime(2026, 1, 2),
+        });
+        await context.SaveChangesAsync();
+    }
+
+    private static async Task<int> CreatePendingWorkOrderRequestAsync(ApplicationDbContext context, decimal amount)
+    {
+        await ConsumeAutoApprovalAllowanceAsync(context);
+        var created = await NewWorkOrderUpliftService(context).CreateAsync(
+            WorkOrderId,
+            new CreateWorkOrderUpliftRequestDto { Amount = amount, Notes = "Extra parts" },
+            Admin(),
+            CancellationToken.None);
+        Assert.Equal("pending", created!.Status);
+        return created.Id;
+    }
+
+    // Stored exactly as the vendor portal writes it: no identity user, and RequestedNTE
+    // is the requested new NTE total.
+    private static async Task<int> SeedVendorRequestAsync(
+        ApplicationDbContext context, int dispatchId, decimal currentNte, decimal requestedTotal)
+    {
+        var request = new DispatchUpliftRequest
+        {
+            DispatchId = dispatchId,
+            CurrentNTE = currentNte,
+            RequestedNTE = requestedTotal,
+            Status = "Pending",
+            RequiredTier = 1,
+            RequestedByVendorName = "Acme HVAC",
+            NotificationStatus = "Sent",
+            CreatedDate = new DateTime(2026, 3, 1),
+        };
+        context.DispatchUpliftRequests.Add(request);
+        await context.SaveChangesAsync();
+        return request.Id;
+    }
+
+    private static Task<WorkOrderUpliftDto?> RevokeAsync(ApplicationDbContext context, int upliftId) =>
+        NewWorkOrderUpliftService(context).RevokeAsync(
+            WorkOrderId,
+            upliftId,
+            new RevokeWorkOrderUpliftRequestDto { Reason = "Scope reduced" },
+            Admin(),
+            CancellationToken.None);
+
+    [Fact]
+    public async Task WorkOrderRequest_QueueShowsTheRequestedIncrease()
+    {
+        await using var context = CreateContext();
+        await SeedWorkOrderAsync(context);
+        var upliftId = await CreatePendingWorkOrderRequestAsync(context, 90m);
+
+        var pending = await NewQueueService(context)
+            .ListAsync(Admin(), "Pending", null, 1, 25, CancellationToken.None);
+
+        Assert.Equal(90m, Assert.Single(pending.Items, i => i.Id == upliftId).Delta);
+    }
+
+    [Fact]
+    public async Task WorkOrderRequest_ApproveAddsIncreaseToNte_RevokeRestoresNte()
+    {
+        await using var context = CreateContext();
+        await SeedWorkOrderAsync(context);
+        var upliftId = await CreatePendingWorkOrderRequestAsync(context, 90m);
+        var queue = NewQueueService(context);
+
+        var approved = await queue.ApproveAsync(Admin(), upliftId, null, CancellationToken.None);
+        Assert.Equal(690m, approved.NTEAmount);
+        Assert.Equal(690m, DispatchOf(context, PrimaryDispatchId).NTEAmount);
+
+        var revoked = await RevokeAsync(context, upliftId);
+        Assert.Equal("revoked", revoked!.Status);
+        Assert.Equal(600m, DispatchOf(context, PrimaryDispatchId).NTEAmount);
+    }
+
+    [Fact]
+    public async Task VendorRequest_QueueShowsIncrease_ApproveEndsAtRequestedTotal_RevokeRestoresNte()
+    {
+        await using var context = CreateContext();
+        await SeedWorkOrderAsync(context);
+        var upliftId = await SeedVendorRequestAsync(context, PrimaryDispatchId, currentNte: 600m, requestedTotal: 900m);
+        var queue = NewQueueService(context);
+
+        var pending = await queue.ListAsync(Admin(), "Pending", null, 1, 25, CancellationToken.None);
+        Assert.Equal(300m, Assert.Single(pending.Items).Delta);
+
+        var approved = await queue.ApproveAsync(Admin(), upliftId, null, CancellationToken.None);
+        Assert.Equal(900m, approved.NTEAmount);
+        Assert.Equal(900m, DispatchOf(context, PrimaryDispatchId).NTEAmount);
+
+        var revoked = await RevokeAsync(context, upliftId);
+        Assert.Equal("revoked", revoked!.Status);
+        Assert.Equal(600m, DispatchOf(context, PrimaryDispatchId).NTEAmount);
+    }
+
+    [Fact]
+    public async Task PendingExposureAndApprovedOnWorkOrder_SumEachRequestsIncrease()
+    {
+        await using var context = CreateContext();
+        await SeedWorkOrderAsync(context);
+        var workOrderRequestId = await CreatePendingWorkOrderRequestAsync(context, 90m);
+        var vendorRequestId = await SeedVendorRequestAsync(context, SecondDispatchId, currentNte: 600m, requestedTotal: 900m);
+        var queue = NewQueueService(context);
+
+        var pending = await queue.ListAsync(Admin(), "Pending", null, 1, 25, CancellationToken.None);
+        Assert.Equal(390m, pending.PendingExposureTotal);
+        Assert.Equal(pending.Items.Sum(i => i.Delta), pending.PendingExposureTotal);
+
+        await queue.ApproveAsync(Admin(), workOrderRequestId, null, CancellationToken.None);
+        await queue.ApproveAsync(Admin(), vendorRequestId, null, CancellationToken.None);
+
+        var decided = await queue.ListAsync(Admin(), "Approved", null, 1, 25, CancellationToken.None);
+        var row = Assert.Single(decided.Items, i => i.Id == workOrderRequestId);
+        Assert.Equal(390m, row.WorkOrderAdminApprovedTotal);
+        // The earlier auto-approved work-order request counts its stored increase.
+        Assert.Equal(500m, row.WorkOrderAutoApprovedTotal);
+        Assert.Equal(0m, (await queue.ListAsync(Admin(), "Pending", null, 1, 25, CancellationToken.None)).PendingExposureTotal);
+    }
+
+    [Fact]
+    public async Task AutoApprovedWorkOrderRequest_ConsumesAllowanceByItsRequestedIncrease()
+    {
+        await using var context = CreateContext();
+        await SeedWorkOrderAsync(context);
+
+        var created = await NewWorkOrderUpliftService(context).CreateAsync(
+            WorkOrderId,
+            new CreateWorkOrderUpliftRequestDto { Amount = 400m, Notes = "Within limit" },
+            Admin(),
+            CancellationToken.None);
+
+        Assert.Equal("auto_approved", created!.Status);
+        var stored = context.DispatchUpliftRequests.Single(u => u.Id == created.Id);
+        Assert.Equal(DispatcherId, stored.createdby);
+        Assert.Equal(400m, stored.RequestedNTE);
+        Assert.Equal(1000m, DispatchOf(context, PrimaryDispatchId).NTEAmount);
+        Assert.Equal(400m, await new UpliftDataService(context)
+            .SumAutoApprovedAmountForWorkOrderAsync(WorkOrderId, CancellationToken.None));
+    }
+
+    [Fact]
+    public void AmountDefinition_TranslatesToSqlServer_ForRowAndGroupedSums()
+    {
+        // ToQueryString only builds SQL; it never opens the connection.
+        using var context = new ApplicationDbContext(new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseSqlServer("Server=translation-only;Database=none;Trusted_Connection=True;")
+            .Options);
+
+        var rowSql = context.DispatchUpliftRequests
+            .Select(UpliftAmount.ForQuery)
+            .ToQueryString();
+        var groupedSql = context.DispatchUpliftRequests
+            .GroupBy(u => new { u.DispatchId, u.Status }, UpliftAmount.ForQuery)
+            .Select(g => new { g.Key.DispatchId, g.Key.Status, Total = g.Sum() })
+            .ToQueryString();
+
+        Assert.Contains("CASE", rowSql);
+        Assert.Contains("[createdby] IS NULL", rowSql);
+        Assert.Contains("SUM(CASE", groupedSql);
+        Assert.Contains("GROUP BY", groupedSql);
+    }
+
+    private sealed class NoDocumentStorage : IVendorDocumentStoragePort
+    {
+        public Task SaveAsync(int vendorId, int dispatchId, string storedFileName, Stream content, CancellationToken cancellationToken) =>
+            Task.CompletedTask;
+
+        public Stream OpenRead(int vendorId, int dispatchId, string storedFileName) =>
+            throw new NotSupportedException();
+
+        public void Delete(int vendorId, int dispatchId, string storedFileName)
+        {
+        }
+    }
+}

From d33ba34db91e6f5bb77978ad3a443ccd9ef54b01 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 02:35:06 -0300
Subject: [PATCH 124/183] fix(vendor-portal): vendors revise only uplift
 requests they raised

A work-order request stores the requested increase, not a total. Letting
the vendor revise one after changes were requested rewrote RequestedNTE
as a total while it still read as a work-order request, corrupting its
amount and the NTE it would be approved to. Revise now answers not-found
for any request the vendor did not raise and leaves the row untouched.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 .../UpliftWorkflowTests.cs                    | 38 +++++++++++++++++++
 .../Implementation/VendorPortalService.cs     |  4 +-
 .../UpliftAmountPerCreationPathTests.cs       | 15 ++++++++
 3 files changed, 56 insertions(+), 1 deletion(-)

diff --git a/Api.SeaHavenIndustries.Tests/UpliftWorkflowTests.cs b/Api.SeaHavenIndustries.Tests/UpliftWorkflowTests.cs
index 4518910..87f07cf 100644
--- a/Api.SeaHavenIndustries.Tests/UpliftWorkflowTests.cs
+++ b/Api.SeaHavenIndustries.Tests/UpliftWorkflowTests.cs
@@ -419,6 +419,44 @@ public sealed class UpliftWorkflowTests
         context.WorkOrderAuditLogs.Should().Contain(a => a.Action == "uplift_revised");
     }
 
+    [Fact]
+    public async Task Revise_WorkOrderRequest_IsRefusedAsNotFound_AndLeavesTheRowUnchanged()
+    {
+        using var context = NewContext();
+        var (vendor, workOrder, dispatch) = await SeedAsync(context, nte: 600m);
+        context.VendorCompletionDocuments.Add(EvidenceDocument(vendor.Id, dispatch.Id, workOrder.Id));
+        // Raised from the work order by an internal user and sent back for changes:
+        // RequestedNTE holds the 90 increase, not a total.
+        var workOrderRequest = new DispatchUpliftRequest
+        {
+            DispatchId = dispatch.Id,
+            CurrentNTE = 600m,
+            RequestedNTE = 90m,
+            Status = UpliftStatus.ChangesRequested,
+            RequiredTier = 1,
+            VendorReason = "Extra parts",
+            RequestedByVendorName = "Alex Dispatcher",
+            NotificationStatus = "Sent",
+            createdby = "dispatcher-1",
+            CreatedDate = new DateTime(2026, 3, 1),
+        };
+        context.DispatchUpliftRequests.Add(workOrderRequest);
+        await context.SaveChangesAsync();
+        var service = NewPortalService(context, new FakeEmailSender(deliver: true));
+        var session = await service.ResolveSessionAsync(Token, CancellationToken.None);
+
+        var act = () => service.ReviseUpliftAsync(session!, dispatch.Id, workOrderRequest.Id, 900m, "vendor total", 1, CancellationToken.None);
+
+        await act.Should().ThrowAsync<KeyNotFoundException>();
+        var after = context.DispatchUpliftRequests.AsNoTracking().Single(u => u.Id == workOrderRequest.Id);
+        after.Status.Should().Be(UpliftStatus.ChangesRequested);
+        after.RequestedNTE.Should().Be(90m);
+        after.CurrentNTE.Should().Be(600m);
+        after.VendorReason.Should().Be("Extra parts");
+        after.createdby.Should().Be("dispatcher-1");
+        context.WorkOrderAuditLogs.Should().NotContain(a => a.Action == "uplift_revised");
+    }
+
     [Fact]
     public async Task Withdraw_Pending_TransitionsToWithdrawn_SetsDecidedAt()
     {
diff --git a/SeaHaven.Services/Implementation/VendorPortalService.cs b/SeaHaven.Services/Implementation/VendorPortalService.cs
index c595809..047abd0 100644
--- a/SeaHaven.Services/Implementation/VendorPortalService.cs
+++ b/SeaHaven.Services/Implementation/VendorPortalService.cs
@@ -736,7 +736,9 @@ namespace SeaHaven.Services.Implementation
             }
 
             var req = await _upliftData.GetByIdAndDispatchAsync(requestId, id, cancellationToken);
-            if (req == null) throw new KeyNotFoundException("Uplift request not found");
+            // A vendor revises only requests it raised. Work-order requests (createdby set)
+            // store the increase, not a total, so a vendor revise would corrupt their amount.
+            if (req == null || req.createdby != null) throw new KeyNotFoundException("Uplift request not found");
 
             if (UpliftStatus.ToCanonical(req.Status) != UpliftStatus.ChangesRequested)
             {
diff --git a/SeaHavenIndustries.Tests/UpliftAmountPerCreationPathTests.cs b/SeaHavenIndustries.Tests/UpliftAmountPerCreationPathTests.cs
index a378b60..11502ef 100644
--- a/SeaHavenIndustries.Tests/UpliftAmountPerCreationPathTests.cs
+++ b/SeaHavenIndustries.Tests/UpliftAmountPerCreationPathTests.cs
@@ -261,6 +261,21 @@ public sealed class UpliftAmountPerCreationPathTests
             .SumAutoApprovedAmountForWorkOrderAsync(WorkOrderId, CancellationToken.None));
     }
 
+    [Fact]
+    public async Task WorkOrderUpliftList_ShowsEachRequestsIncrease()
+    {
+        await using var context = CreateContext();
+        await SeedWorkOrderAsync(context);
+        var workOrderRequestId = await CreatePendingWorkOrderRequestAsync(context, 90m);
+        var vendorRequestId = await SeedVendorRequestAsync(context, SecondDispatchId, currentNte: 600m, requestedTotal: 900m);
+
+        var uplifts = await NewWorkOrderUpliftService(context)
+            .ListAsync(WorkOrderId, Admin(), CancellationToken.None);
+
+        Assert.Equal(90m, Assert.Single(uplifts!, u => u.Id == workOrderRequestId).Amount);
+        Assert.Equal(300m, Assert.Single(uplifts!, u => u.Id == vendorRequestId).Amount);
+    }
+
     [Fact]
     public void AmountDefinition_TranslatesToSqlServer_ForRowAndGroupedSums()
     {

From 85f2e709c9ba498bc9cf66cf23f87ee90bb370dd Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 02:36:17 -0300
Subject: [PATCH 125/183] test(uplifts): board summary and notification delta
 use the per-path amount

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 .../UpliftAmountPerCreationPathTests.cs       | 23 +++++++++
 .../WorkOrderBoardServiceTests.cs             | 51 +++++++++++++++++++
 2 files changed, 74 insertions(+)

diff --git a/SeaHavenIndustries.Tests/UpliftAmountPerCreationPathTests.cs b/SeaHavenIndustries.Tests/UpliftAmountPerCreationPathTests.cs
index 11502ef..43220e1 100644
--- a/SeaHavenIndustries.Tests/UpliftAmountPerCreationPathTests.cs
+++ b/SeaHavenIndustries.Tests/UpliftAmountPerCreationPathTests.cs
@@ -276,6 +276,29 @@ public sealed class UpliftAmountPerCreationPathTests
         Assert.Equal(300m, Assert.Single(uplifts!, u => u.Id == vendorRequestId).Amount);
     }
 
+    [Theory]
+    [InlineData(DispatcherId, 90, "$90.00")]
+    [InlineData(null, 900, "$300.00")]
+    public void NotificationDeltaRow_ShowsTheRequestedIncrease(string? createdBy, int requestedNte, string expectedDelta)
+    {
+        var dispatch = new Dispatch { Id = PrimaryDispatchId, DispatchNumber = "DIS-10", NTEAmount = 600m };
+        var request = new DispatchUpliftRequest
+        {
+            DispatchId = PrimaryDispatchId,
+            CurrentNTE = 600m,
+            RequestedNTE = requestedNte,
+            RequiredTier = 1,
+            createdby = createdBy,
+        };
+
+        // Builds the message content only; nothing is sent.
+        var (_, body) = UpliftNotificationMessage.BuildInitial(dispatch, request, "Acme HVAC", "https://example.test");
+
+        Assert.Contains(
+            $"<strong>Delta</strong></td><td style='padding:4px 10px;'>{expectedDelta}</td>",
+            body);
+    }
+
     [Fact]
     public void AmountDefinition_TranslatesToSqlServer_ForRowAndGroupedSums()
     {
diff --git a/SeaHavenIndustries.Tests/WorkOrderBoardServiceTests.cs b/SeaHavenIndustries.Tests/WorkOrderBoardServiceTests.cs
index 96acd1b..b579460 100644
--- a/SeaHavenIndustries.Tests/WorkOrderBoardServiceTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderBoardServiceTests.cs
@@ -451,6 +451,57 @@ public class WorkOrderBoardPendingUpliftTests
         Assert.Equal(1500m, dto.UpliftSummary.Amount);
     }
 
+    [Fact]
+    public async Task GetBoardRows_VendorPortalUplift_SummaryAmountIsTheRequestedIncrease()
+    {
+        await using var context = CreateContext();
+        var weekStart = new DateOnly(2026, 6, 22);
+
+        context.Vendors.Add(new Vendor { Id = 1, CompanyName = "Acme HVAC" });
+        context.Dispatches.Add(new Dispatch
+        {
+            Id = 10,
+            VendorId = 1,
+            WorkOrderId = 1,
+            NTEAmount = 600m,
+            ScheduledDate = new DateTime(2026, 6, 24, 8, 0, 0)
+        });
+        context.workOrders.Add(new WorkOrder
+        {
+            Id = 1,
+            InternalWONumber = "10000000001",
+            ScheduledDate = new DateTime(2026, 6, 23),
+            LifecycleStatus = LifecycleStatus.Scheduled,
+            PrimaryDispatchId = 10,
+            SiteCode = "BK5"
+        });
+        // A vendor-portal request (no identity user) stores the requested NTE total.
+        context.DispatchUpliftRequests.Add(new DispatchUpliftRequest
+        {
+            Id = 100,
+            DispatchId = 10,
+            CurrentNTE = 600m,
+            RequestedNTE = 900m,
+            Status = "Pending",
+            RequiredTier = 1,
+            NotificationStatus = "Pending"
+        });
+        await context.SaveChangesAsync();
+
+        var result = await new WorkOrderBoardDataService(context).GetBoardRowsAsync(new WorkOrderBoardQuery(
+            weekStart,
+            weekStart.AddDays(4),
+            null,
+            false,
+            null,
+            false,
+            null,
+            null));
+
+        var dto = WorkOrderBoardService.MapRawRow(Assert.Single(result.ScheduledRows), DateTime.UtcNow);
+        Assert.Equal(300m, dto.UpliftSummary!.Amount);
+    }
+
     [Fact]
     public async Task GetBoardRows_ApprovedUplift_DoesNotBlock()
     {

From e02f9774dc7322f3b07ed4b2aa2ecf5eb9a87bd7 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 02:51:48 -0300
Subject: [PATCH 126/183] Keep work-order uplift requests read-only in the
 Vendor Portal

A vendor could withdraw (or cancel) an uplift a dispatcher raised from the work
order. Withdraw and its cancel alias now refuse requests with createdby set,
using the portal's not-found response, and the portal read model reports
RaisedByVendor so the portal can hide Revise and Withdraw on those requests.
---
 .../UpliftWorkflowTests.cs                    | 86 +++++++++++++++++++
 .../Models/VendorPortalReadModels.cs          |  3 +
 .../Implementation/UpliftDataService.cs       |  3 +
 .../DTOs/VendorPortalServiceDTOs.cs           |  2 +
 .../Implementation/VendorPortalService.cs     |  5 +-
 5 files changed, 98 insertions(+), 1 deletion(-)

diff --git a/Api.SeaHavenIndustries.Tests/UpliftWorkflowTests.cs b/Api.SeaHavenIndustries.Tests/UpliftWorkflowTests.cs
index 87f07cf..0c2f27d 100644
--- a/Api.SeaHavenIndustries.Tests/UpliftWorkflowTests.cs
+++ b/Api.SeaHavenIndustries.Tests/UpliftWorkflowTests.cs
@@ -496,6 +496,92 @@ public sealed class UpliftWorkflowTests
         await act.Should().ThrowAsync<InvalidOperationException>();
     }
 
+    // Raised from the work order by an internal user: createdby is set and RequestedNTE
+    // holds the increase. Vendor sessions have no identity user, so they never set it.
+    private static DispatchUpliftRequest WorkOrderRequest(int dispatchId, string status) => new()
+    {
+        DispatchId = dispatchId,
+        CurrentNTE = 600m,
+        RequestedNTE = 90m,
+        Status = status,
+        RequiredTier = 1,
+        VendorReason = "Extra parts",
+        RequestedByVendorName = "Alex Dispatcher",
+        NotificationStatus = "Sent",
+        createdby = "dispatcher-1",
+        CreatedDate = new DateTime(2026, 3, 1),
+    };
+
+    [Theory]
+    [InlineData("Pending", "withdraw")]
+    [InlineData("ChangesRequested", "withdraw")]
+    [InlineData("Pending", "cancel")]
+    [InlineData("ChangesRequested", "cancel")]
+    public async Task Withdraw_WorkOrderRequest_IsRefusedAsNotFound_AndLeavesTheRowUnchanged(string status, string route)
+    {
+        using var context = NewContext();
+        var (_, _, dispatch) = await SeedAsync(context, nte: 600m);
+        var workOrderRequest = WorkOrderRequest(dispatch.Id, status);
+        context.DispatchUpliftRequests.Add(workOrderRequest);
+        await context.SaveChangesAsync();
+        var service = NewPortalService(context, new FakeEmailSender(deliver: true));
+        var session = await service.ResolveSessionAsync(Token, CancellationToken.None);
+
+        Func<Task> act = route == "cancel"
+            ? () => service.CancelUpliftRequestAsync(session!, dispatch.Id, workOrderRequest.Id, CancellationToken.None)
+            : () => service.WithdrawUpliftAsync(session!, dispatch.Id, workOrderRequest.Id, CancellationToken.None);
+
+        await act.Should().ThrowAsync<KeyNotFoundException>();
+        var after = context.DispatchUpliftRequests.AsNoTracking().Single(u => u.Id == workOrderRequest.Id);
+        after.Status.Should().Be(status);
+        after.DecidedAt.Should().BeNull();
+        after.RequestedNTE.Should().Be(90m);
+        after.createdby.Should().Be("dispatcher-1");
+        context.WorkOrderAuditLogs.Should().NotContain(a => a.Action == "uplift_withdraw" || a.Action == "uplift_cancel");
+    }
+
+    [Fact]
+    public async Task Cancel_VendorRaisedChangesRequested_StillWithdraws()
+    {
+        using var context = NewContext();
+        var (vendor, workOrder, dispatch) = await SeedAsync(context, nte: 1000m);
+        context.VendorCompletionDocuments.Add(EvidenceDocument(vendor.Id, dispatch.Id, workOrder.Id));
+        await context.SaveChangesAsync();
+        var service = NewPortalService(context, new FakeEmailSender(deliver: true));
+        var session = await service.ResolveSessionAsync(Token, CancellationToken.None);
+        var created = await service.RequestUpliftAsync(session!, dispatch.Id, 1500m, "reason", null, 1, CancellationToken.None);
+        context.DispatchUpliftRequests.Single().Status = UpliftStatus.ChangesRequested;
+        await context.SaveChangesAsync();
+
+        var result = await service.CancelUpliftRequestAsync(session!, dispatch.Id, created.Id, CancellationToken.None);
+
+        result.Status.Should().Be(UpliftStatus.Withdrawn);
+        context.DispatchUpliftRequests.AsNoTracking().Single().Status.Should().Be(UpliftStatus.Withdrawn);
+        context.WorkOrderAuditLogs.Should().Contain(a => a.Action == "uplift_cancel" && a.OldValue == UpliftStatus.ChangesRequested);
+    }
+
+    [Fact]
+    public async Task DispatchDetail_ReportsRaisedByVendor_PerCreationPath()
+    {
+        using var context = NewContext();
+        var (vendor, workOrder, dispatch) = await SeedAsync(context, nte: 1000m);
+        context.VendorCompletionDocuments.Add(EvidenceDocument(vendor.Id, dispatch.Id, workOrder.Id));
+        await context.SaveChangesAsync();
+        var service = NewPortalService(context, new FakeEmailSender(deliver: true));
+        var session = await service.ResolveSessionAsync(Token, CancellationToken.None);
+        var vendorRaised = await service.RequestUpliftAsync(session!, dispatch.Id, 1500m, "reason", null, 1, CancellationToken.None);
+        await service.WithdrawUpliftAsync(session!, dispatch.Id, vendorRaised.Id, CancellationToken.None);
+        var workOrderRequest = WorkOrderRequest(dispatch.Id, UpliftStatus.Pending);
+        context.DispatchUpliftRequests.Add(workOrderRequest);
+        await context.SaveChangesAsync();
+
+        var detail = await service.GetDispatchDetailAsync(session!, dispatch.Id, CancellationToken.None);
+
+        detail!.UpliftRequests.Should().HaveCount(2);
+        detail.UpliftRequests.Single(u => u.Id == vendorRaised.Id).RaisedByVendor.Should().BeTrue();
+        detail.UpliftRequests.Single(u => u.Id == workOrderRequest.Id).RaisedByVendor.Should().BeFalse();
+    }
+
     [Fact]
     public async Task RequestChanges_Pending_TransitionsToChangesRequested_AuditsOldValue()
     {
diff --git a/Data.SeaHavenIndustries/Models/VendorPortalReadModels.cs b/Data.SeaHavenIndustries/Models/VendorPortalReadModels.cs
index 84a00e8..689f3f0 100644
--- a/Data.SeaHavenIndustries/Models/VendorPortalReadModels.cs
+++ b/Data.SeaHavenIndustries/Models/VendorPortalReadModels.cs
@@ -45,6 +45,9 @@ namespace Data.SeaHavenIndustries
         public string? Status { get; set; }
         public int RequiredTier { get; set; }
         public string? RequestedByVendorName { get; set; }
+        // True when the vendor raised the request in the portal; false when it was raised
+        // from the work order. Only vendor-raised requests are revisable or withdrawable.
+        public bool RaisedByVendor { get; set; }
         public DateTime? CreatedDate { get; set; }
         public DateTime? DecidedAt { get; set; }
         public string? DecisionNote { get; set; }
diff --git a/SeaHaven.DataServices/Implementation/UpliftDataService.cs b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
index cbcf76d..09566f3 100644
--- a/SeaHaven.DataServices/Implementation/UpliftDataService.cs
+++ b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
@@ -243,6 +243,9 @@ namespace SeaHaven.DataServices.Implementation
                               Status = u.Status,
                               RequiredTier = u.RequiredTier,
                               RequestedByVendorName = u.RequestedByVendorName,
+                              // Vendor sessions have no identity user, so createdby is null
+                              // only on requests the vendor raised in the portal.
+                              RaisedByVendor = u.createdby == null,
                               CreatedDate = u.CreatedDate,
                               DecidedAt = u.DecidedAt,
                               DecisionNote = u.DecisionNote,
diff --git a/SeaHaven.Services/DTOs/VendorPortalServiceDTOs.cs b/SeaHaven.Services/DTOs/VendorPortalServiceDTOs.cs
index afdaf18..8e4be7c 100644
--- a/SeaHaven.Services/DTOs/VendorPortalServiceDTOs.cs
+++ b/SeaHaven.Services/DTOs/VendorPortalServiceDTOs.cs
@@ -54,6 +54,8 @@ namespace SeaHaven.Services.DTOs
         public string? Status { get; set; }
         public int RequiredTier { get; set; }
         public string? RequestedByVendorName { get; set; }
+        // False for requests raised from the work order: the portal shows them read-only.
+        public bool RaisedByVendor { get; set; }
         public DateTime? RequestedAt { get; set; }
         public DateTime? DecidedAt { get; set; }
         public string? DecisionNote { get; set; }
diff --git a/SeaHaven.Services/Implementation/VendorPortalService.cs b/SeaHaven.Services/Implementation/VendorPortalService.cs
index 047abd0..6bb22ab 100644
--- a/SeaHaven.Services/Implementation/VendorPortalService.cs
+++ b/SeaHaven.Services/Implementation/VendorPortalService.cs
@@ -107,6 +107,7 @@ namespace SeaHaven.Services.Implementation
                 Status = UpliftStatus.ToCanonical(u.Status),
                 RequiredTier = u.RequiredTier,
                 RequestedByVendorName = u.RequestedByVendorName,
+                RaisedByVendor = u.RaisedByVendor,
                 RequestedAt = u.CreatedDate,
                 DecidedAt = u.DecidedAt,
                 DecisionNote = u.DecisionNote,
@@ -694,7 +695,9 @@ namespace SeaHaven.Services.Implementation
             if (dispatch == null) throw new KeyNotFoundException("Dispatch not found");
 
             var req = await _upliftData.GetByIdAndDispatchAsync(requestId, id, cancellationToken);
-            if (req == null) throw new KeyNotFoundException("Uplift request not found");
+            // A vendor withdraws only requests it raised; requests raised from the work order
+            // (createdby set) are read-only in the portal.
+            if (req == null || req.createdby != null) throw new KeyNotFoundException("Uplift request not found");
 
             if (!UpliftStatus.CanTransition(req.Status, UpliftStatus.Withdrawn))
             {

From 207bf59208ce3f97babd0139dbc50a7fc51d057b Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 02:58:15 -0300
Subject: [PATCH 127/183] fix(media): name HEIC in the unsupported-type message
 and keep ticket keys out of comments

The rejection message now lists every type the media allowlist accepts, and a
test fails if the message and the allowlist drift apart.
---
 .../nginx/conf.d/01_upload_body_size.conf     |  2 +-
 .../Controllers/WorkOrderMediaController.cs   |  2 +-
 .../Interfaces/IVendorDocumentDataService.cs  |  4 +--
 .../Interfaces/IWorkOrderMediaDataService.cs  |  4 +--
 .../DTOs/VendorPortalServiceDTOs.cs           |  2 +-
 .../Helpers/VideoDurationProbe.cs             |  2 +-
 .../Helpers/WorkOrderMediaContract.cs         |  2 +-
 .../Helpers/WorkOrderMediaFileRules.cs        |  2 +-
 .../Implementation/VendorPortalService.cs     |  4 +--
 .../Implementation/WorkOrderMediaService.cs   |  4 +--
 .../WorkOrderPhase6Tests.cs                   | 28 +++++++++++++++++++
 scripts/validate-elastic-beanstalk-bundle.sh  |  2 +-
 12 files changed, 43 insertions(+), 15 deletions(-)

diff --git a/.platform/nginx/conf.d/01_upload_body_size.conf b/.platform/nginx/conf.d/01_upload_body_size.conf
index a7bd889..da18278 100644
--- a/.platform/nginx/conf.d/01_upload_body_size.conf
+++ b/.platform/nginx/conf.d/01_upload_body_size.conf
@@ -1,4 +1,4 @@
-# SH-383: the Elastic Beanstalk nginx proxy defaults client_max_body_size to 1m,
+# The Elastic Beanstalk nginx proxy defaults client_max_body_size to 1m,
 # which returned 413 for every media upload over ~1 MB before the request reached
 # the API. The cap sits above the API's own request limit
 # (WorkOrderMediaContract.MaxUploadRequestBytes = 110 MB) so oversize uploads get
diff --git a/Api.SeaHavenIndustries/Controllers/WorkOrderMediaController.cs b/Api.SeaHavenIndustries/Controllers/WorkOrderMediaController.cs
index fd7dac1..32122ca 100644
--- a/Api.SeaHavenIndustries/Controllers/WorkOrderMediaController.cs
+++ b/Api.SeaHavenIndustries/Controllers/WorkOrderMediaController.cs
@@ -92,7 +92,7 @@ namespace Api.SeaHavenIndustries.Controllers
                 // of being sized under a kind it does not have.
                 WorkOrderMediaFileRules.EnsureAllowed(file, category);
 
-                // SH-116 contract: per-kind caps (photos 10 MB, videos 100 MB, documents 50 MB).
+                // Media contract: per-kind caps (photos 10 MB, videos 100 MB, documents 50 MB).
                 // Classify by the same resolved type EnsureAllowed validates against.
                 var sizeMessage = WorkOrderMediaContract.ValidateSize(
                     WorkOrderMediaFileRules.ResolveUploadContentType(file), file.FileName, file.Length);
diff --git a/SeaHaven.DataServices/Interfaces/IVendorDocumentDataService.cs b/SeaHaven.DataServices/Interfaces/IVendorDocumentDataService.cs
index 6986ef2..46a4274 100644
--- a/SeaHaven.DataServices/Interfaces/IVendorDocumentDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IVendorDocumentDataService.cs
@@ -11,14 +11,14 @@ namespace SeaHaven.DataServices.Interfaces
         Task<VendorCompletionDocument?> GetUpliftEvidenceAsync(int documentId, int dispatchId, int vendorId, CancellationToken cancellationToken);
         /// <summary>
         /// Content types of the work order's current vendor documents (not deleted, not replaced by a
-        /// newer completion version), optionally excluding one being replaced. SH-116 photo/video counts.
+        /// newer completion version), optionally excluding one being replaced. Feeds the per-work-order photo/video counts.
         /// </summary>
         Task<IReadOnlyList<string>> ListActiveContentTypesForWorkOrderAsync(
             int workOrderId,
             int? excludingDocumentId,
             CancellationToken cancellationToken);
 
-        /// <summary>Stored URLs of the work order's non-deleted dispatcher attachments (SH-116 counts).</summary>
+        /// <summary>Stored URLs of the work order's non-deleted dispatcher attachments (photo/video counts).</summary>
         Task<IReadOnlyList<string>> ListActiveWorkOrderAttachmentUrlsAsync(
             int workOrderId,
             CancellationToken cancellationToken);
diff --git a/SeaHaven.DataServices/Interfaces/IWorkOrderMediaDataService.cs b/SeaHaven.DataServices/Interfaces/IWorkOrderMediaDataService.cs
index caf6071..144a521 100644
--- a/SeaHaven.DataServices/Interfaces/IWorkOrderMediaDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IWorkOrderMediaDataService.cs
@@ -23,14 +23,14 @@ namespace SeaHaven.DataServices.Interfaces
         Task<WorkOrderAttachments?> GetTrackedAttachmentAsync(int mediaId, int workOrderId, CancellationToken cancellationToken);
         void TrackAttachment(WorkOrderAttachments attachment);
 
-        /// <summary>Stored URLs of the work order's non-deleted attachments (SH-116 photo/video counts).</summary>
+        /// <summary>Stored URLs of the work order's non-deleted attachments (photo/video counts).</summary>
         Task<IReadOnlyList<string>> ListActiveAttachmentUrlsAsync(
             int workOrderId,
             CancellationToken cancellationToken);
 
         /// <summary>
         /// Content types of the work order's current vendor-portal documents (not deleted, not
-        /// replaced by a newer completion version). SH-116 counts span both upload surfaces.
+        /// replaced by a newer completion version). The counts span both upload surfaces.
         /// </summary>
         Task<IReadOnlyList<string>> ListActiveVendorMediaContentTypesAsync(
             int workOrderId,
diff --git a/SeaHaven.Services/DTOs/VendorPortalServiceDTOs.cs b/SeaHaven.Services/DTOs/VendorPortalServiceDTOs.cs
index ace32c8..088c761 100644
--- a/SeaHaven.Services/DTOs/VendorPortalServiceDTOs.cs
+++ b/SeaHaven.Services/DTOs/VendorPortalServiceDTOs.cs
@@ -138,7 +138,7 @@ namespace SeaHaven.Services.DTOs
     }
 
     /// <summary>
-    /// SH-116 per-work-order photo/video usage, so the portal can pre-check an upload
+    /// Per-work-order photo/video usage, so the portal can pre-check an upload
     /// before sending it. The server still enforces the limit on upload.
     /// </summary>
     public class PortalMediaCountsDTO
diff --git a/SeaHaven.Services/Helpers/VideoDurationProbe.cs b/SeaHaven.Services/Helpers/VideoDurationProbe.cs
index 8355c46..1818c50 100644
--- a/SeaHaven.Services/Helpers/VideoDurationProbe.cs
+++ b/SeaHaven.Services/Helpers/VideoDurationProbe.cs
@@ -8,7 +8,7 @@ namespace SeaHaven.Services.Helpers
     /// top-level <c>moov</c> box → <c>mvhd</c> timescale and duration. It seeks over box
     /// headers only (the <c>moov</c> box may sit after a large <c>mdat</c>), never decodes
     /// media and never allocates more than a few bytes. Returns null whenever the structure
-    /// cannot be read, so callers can let unreadable files through (SH-116: unreadable
+    /// cannot be read, so callers can let unreadable files through (per the media contract: unreadable
     /// metadata never blocks an upload).
     /// </summary>
     public static class VideoDurationProbe
diff --git a/SeaHaven.Services/Helpers/WorkOrderMediaContract.cs b/SeaHaven.Services/Helpers/WorkOrderMediaContract.cs
index e064b02..46865bf 100644
--- a/SeaHaven.Services/Helpers/WorkOrderMediaContract.cs
+++ b/SeaHaven.Services/Helpers/WorkOrderMediaContract.cs
@@ -1,7 +1,7 @@
 namespace SeaHaven.Services.Helpers
 {
     /// <summary>
-    /// SH-116 client-confirmed media contract (2026-09-22): photos up to 10 MB (JPEG/PNG/HEIC),
+    /// Client-confirmed media contract (2026-09-22): photos up to 10 MB (JPEG/PNG/HEIC),
     /// videos up to 100 MB and 90 seconds (MP4/MOV), at most 10 photos and 3 videos per work
     /// order, across the dispatcher media modal, the completion-doc media tab and the vendor
     /// portal upload. Documents (PDF/DOC/DOCX) keep the 50 MB document cap. Duration is read
diff --git a/SeaHaven.Services/Helpers/WorkOrderMediaFileRules.cs b/SeaHaven.Services/Helpers/WorkOrderMediaFileRules.cs
index c438759..b4db302 100644
--- a/SeaHaven.Services/Helpers/WorkOrderMediaFileRules.cs
+++ b/SeaHaven.Services/Helpers/WorkOrderMediaFileRules.cs
@@ -140,7 +140,7 @@ namespace SeaHaven.Services.Helpers
             {
                 throw new Exceptions.WorkOrderBoardValidationException(
                     "UnsupportedMediaType",
-                    "Supported file types are JPG, PNG, MP4, MOV, PDF, DOC, and DOCX for Extra Docs; photos accept media only.");
+                    "Supported file types are JPG, PNG, HEIC, MP4, MOV, PDF, DOC, and DOCX for Extra Docs; photos accept media only.");
             }
         }
 
diff --git a/SeaHaven.Services/Implementation/VendorPortalService.cs b/SeaHaven.Services/Implementation/VendorPortalService.cs
index 782f446..a98c57d 100644
--- a/SeaHaven.Services/Implementation/VendorPortalService.cs
+++ b/SeaHaven.Services/Implementation/VendorPortalService.cs
@@ -885,7 +885,7 @@ namespace SeaHaven.Services.Implementation
                 throw new InvalidOperationException("A completion document file is required.");
             }
 
-            // SH-116 contract: photos up to 10 MB (JPEG/PNG/HEIC), videos up to 100 MB
+            // Media contract: photos up to 10 MB (JPEG/PNG/HEIC), videos up to 100 MB
             // (MP4/MOV). Documents keep the configured VendorDocuments cap.
             var contentType = ResolveUploadContentType(file);
             if (contentType == null)
@@ -980,7 +980,7 @@ namespace SeaHaven.Services.Implementation
 
             async Task<VendorCompletionDocument> PersistAsync(CancellationToken ct)
             {
-                // SH-116: the 10-photo / 3-video limit is per work order across the dispatcher and
+                // The 10-photo / 3-video limit is per work order across the dispatcher and
                 // vendor surfaces. A new completion version replaces its predecessor, so that one
                 // does not count against the upload that supersedes it.
                 if (dispatch.WorkOrderId is int workOrderId)
diff --git a/SeaHaven.Services/Implementation/WorkOrderMediaService.cs b/SeaHaven.Services/Implementation/WorkOrderMediaService.cs
index 0a0d1d5..d2c266d 100644
--- a/SeaHaven.Services/Implementation/WorkOrderMediaService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderMediaService.cs
@@ -156,7 +156,7 @@ namespace SeaHaven.Services.Implementation
                 };
             }
 
-            // SH-116 photo/video caps are a work-order aggregate shared with the vendor portal
+            // Photo/video caps are a work-order aggregate shared with the vendor portal
             // upload, so the count and the insert run under the per-work-order mutation lock.
             var attachment = await _upliftData.ExecuteWorkOrderMutationAsync(
                 workOrderId,
@@ -363,7 +363,7 @@ namespace SeaHaven.Services.Implementation
         }
 
         /// <summary>
-        /// SH-116 contract: at most 10 photos and 3 videos per work order, counted over the
+        /// Media contract: at most 10 photos and 3 videos per work order, counted over the
         /// stored attachment rows plus the work order's current vendor-portal documents. Legacy
         /// Before/After column slots replace in place and are not counted. Documents have no
         /// per-work-order count limit.
diff --git a/SeaHavenIndustries.Tests/WorkOrderPhase6Tests.cs b/SeaHavenIndustries.Tests/WorkOrderPhase6Tests.cs
index 224d73b..ea77fb4 100644
--- a/SeaHavenIndustries.Tests/WorkOrderPhase6Tests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderPhase6Tests.cs
@@ -1,6 +1,8 @@
 using System.Security.Claims;
 using System.Text;
 using System.IO.Compression;
+using System.Reflection;
+using System.Text.RegularExpressions;
 using Data.SeaHavenIndustries;
 using Data.SeaHavenIndustries.Enums;
 using Microsoft.AspNetCore.Http;
@@ -2373,6 +2375,32 @@ public class WorkOrderMediaFileRulesTests
         return stream.ToArray();
     }
 
+    [Fact]
+    public void EnsureAllowed_RejectionMessage_NamesEveryAllowedType()
+    {
+        const BindingFlags privateStatic = BindingFlags.NonPublic | BindingFlags.Static;
+        var allowedTypes = (HashSet<string>?)typeof(WorkOrderMediaFileRules)
+            .GetField("AllowedContentTypes", privateStatic)?.GetValue(null);
+        var extensionsByType = (Dictionary<string, HashSet<string>>?)typeof(WorkOrderMediaFileRules)
+            .GetField("ExtensionsByContentType", privateStatic)?.GetValue(null);
+        Assert.NotNull(allowedTypes);
+        Assert.NotNull(extensionsByType);
+        Assert.NotEmpty(allowedTypes);
+
+        var ex = Assert.Throws<WorkOrderBoardValidationException>(
+            () => WorkOrderMediaFileRules.EnsureAllowed(FormFile(Encoding.UTF8.GetBytes("plain text"), "notes.txt", "text/plain")));
+
+        foreach (var contentType in allowedTypes)
+        {
+            var canonical = contentType.Equals("image/jpg", StringComparison.OrdinalIgnoreCase) ? "image/jpeg" : contentType;
+            Assert.True(extensionsByType.TryGetValue(canonical, out var extensions), $"No extensions mapped for {contentType}.");
+            var labels = extensions.Select(extension => extension.TrimStart('.').ToUpperInvariant()).ToList();
+            Assert.True(
+                labels.Any(label => Regex.IsMatch(ex.Message, $@"\b{Regex.Escape(label)}\b")),
+                $"Rejection message does not name {contentType} ({string.Join("/", labels)}): {ex.Message}");
+        }
+    }
+
     [Fact]
     public void IsAllowed_ValidJpeg_ReturnsTrue()
     {
diff --git a/scripts/validate-elastic-beanstalk-bundle.sh b/scripts/validate-elastic-beanstalk-bundle.sh
index 1d88367..83fcc9e 100755
--- a/scripts/validate-elastic-beanstalk-bundle.sh
+++ b/scripts/validate-elastic-beanstalk-bundle.sh
@@ -32,7 +32,7 @@ grep -Fxq \
   '    WorkOrderWebhook__SecretId: arn:aws:secretsmanager:us-east-1:011934824531:secret:workorder-ingest/shoc-webhook-hmac-puYTcB' \
   "$webhook_file"
 
-# Without this override the platform nginx caps request bodies at 1 MB (SH-383).
+# Without this override the platform nginx caps request bodies at 1 MB.
 unzip -p "$BUNDLE" .platform/nginx/conf.d/01_upload_body_size.conf > "$nginx_file"
 grep -Fxq 'client_max_body_size 120M;' "$nginx_file"
 

From d6c5357fab5a24185f996d845a683f025508930d Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 03:34:24 -0300
Subject: [PATCH 128/183] fix(dashboard): count unassigned legacy rows with no
 lifecycle status (SH-392)

The legacy create paths (WorkOrderDTOs, SyncService, the Blazor
WorkorderService) still write Status without LifecycleStatus. The board
status filter only matched LifecycleStatus. So an open unassigned row of
that kind was left out of the Unassigned tile and its drill-down list,
even though the Open tile in the same response counted it.

ApplyStatusFilter now reads a row with no LifecycleStatus by its legacy
status (LegacyStatus ?? Status), using the Phase0 backfill rules: known
text maps as LifecycleStatusMapper does, and anything else, blank
included, counts as Incomplete. The tile and /board/search share the
predicate, so the count still matches the list it opens.
---
 .../DashboardUnassignedTests.cs               | 70 ++++++++++++++++++-
 .../Helpers/WorkOrderBoardQueryFilters.cs     | 55 ++++++++++++++-
 .../LifecycleStatusMapperTests.cs             | 43 ++++++++++++
 3 files changed, 165 insertions(+), 3 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/DashboardUnassignedTests.cs b/Api.SeaHavenIndustries.Tests/DashboardUnassignedTests.cs
index b3cc03e..81649e6 100644
--- a/Api.SeaHavenIndustries.Tests/DashboardUnassignedTests.cs
+++ b/Api.SeaHavenIndustries.Tests/DashboardUnassignedTests.cs
@@ -54,9 +54,11 @@ public class DashboardUnassignedTests
         int id,
         DateTime? scheduled,
         string? assignTo = null,
-        LifecycleStatus status = LifecycleStatus.Scheduled,
+        LifecycleStatus? status = LifecycleStatus.Scheduled,
         DateOnly? targetWeek = null,
-        int accountId = 1)
+        int accountId = 1,
+        string? legacyStatus = null,
+        string? statusText = null)
         => new()
         {
             Id = id,
@@ -67,9 +69,25 @@ public class DashboardUnassignedTests
             ScheduleWeekOnly = targetWeek.HasValue,
             TargetWeek = targetWeek,
             LifecycleStatus = status,
+            LegacyStatus = legacyStatus,
+            Status = statusText,
             istemplate = false
         };
 
+    // Rows written by legacy create paths, which set Status but no LifecycleStatus.
+    private static void SeedLegacy(ApplicationDbContext ctx)
+    {
+        var inRange = new DateTime(2026, 9, 22);
+        ctx.workOrders.AddRange(
+            Wo(13, inRange, status: null, statusText: "Open"),                        // counted
+            Wo(14, inRange, status: null, statusText: "On Hold"),                     // counted: Pending
+            Wo(15, inRange, status: null),                                            // counted: no status at all
+            Wo(16, inRange, status: null, legacyStatus: "Done", statusText: "Open"),  // closed: LegacyStatus wins
+            Wo(17, inRange, status: null, statusText: " Cancelled "),                 // canceled
+            Wo(18, inRange, assignTo: "disp-1", status: null, statusText: "Open"));   // assigned
+        ctx.SaveChanges();
+    }
+
     private static void Seed(ApplicationDbContext ctx)
     {
         ctx.workOrders.AddRange(
@@ -111,6 +129,53 @@ public class DashboardUnassignedTests
         stats.Unassigned.Should().Be(5);
     }
 
+    [Fact]
+    public async Task GetStatsAsync_CountsOpenLegacyRowsWithNoLifecycleStatus()
+    {
+        using var ctx = NewContext();
+        Seed(ctx);
+        SeedLegacy(ctx);
+
+        var inRange = await NewDashboard(ctx).GetStatsAsync(
+            AccountUser(1), new DashboardStatsQueryDTO { DateFrom = From, DateTo = To }, CancellationToken.None);
+        var allTime = await NewDashboard(ctx).GetStatsAsync(
+            AccountUser(1), new DashboardStatsQueryDTO(), CancellationToken.None);
+
+        // 1, 2, 3 plus legacy 13, 14 and 15.
+        inRange.Unassigned.Should().Be(6);
+        allTime.Unassigned.Should().Be(8);
+    }
+
+    [Fact]
+    public async Task BoardSearch_StatusFilter_MatchesLegacyRowsByTheirLegacyStatus()
+    {
+        using var ctx = NewContext();
+        var inRange = new DateTime(2026, 9, 22);
+        ctx.workOrders.AddRange(
+            Wo(1, inRange),
+            Wo(2, inRange, status: null, statusText: "scheduled"),
+            Wo(3, inRange, status: null, statusText: "Open"),
+            Wo(4, inRange, status: null, statusText: "Legacy Mystery"),
+            Wo(5, inRange, status: null));
+        ctx.SaveChanges();
+        var user = AccountUser(1);
+
+        async Task<IEnumerable<int>> Ids(LifecycleStatus status)
+            => (await NewSearch(ctx).SearchAsync(new WorkOrderAdvancedSearchQueryDto
+            {
+                DatePreset = WorkOrderAdvancedSearchDatePreset.Custom,
+                DateFrom = From,
+                DateTo = To,
+                Statuses = new List<LifecycleStatus> { status },
+                PageSize = 200
+            }, user, "admin-1")).Items.Select(row => row.Id);
+
+        (await Ids(LifecycleStatus.Scheduled)).Should().BeEquivalentTo(new[] { 1, 2 });
+        // Unknown or missing legacy text reads as Incomplete, as the Phase0 backfill set it.
+        (await Ids(LifecycleStatus.Incomplete)).Should().BeEquivalentTo(new[] { 3, 4, 5 });
+        (await Ids(LifecycleStatus.Completed)).Should().BeEmpty();
+    }
+
     [Fact]
     public async Task GetStatsAsync_Unassigned_NeverCountsAnotherTenantsWorkOrders()
     {
@@ -152,6 +217,7 @@ public class DashboardUnassignedTests
     {
         using var ctx = NewContext();
         Seed(ctx);
+        SeedLegacy(ctx);
         // Dated outside the board's all-weeks window: neither side may count them.
         ctx.workOrders.AddRange(Wo(11, new DateTime(1999, 12, 31)), Wo(12, new DateTime(2100, 1, 1)));
         ctx.SaveChanges();
diff --git a/SeaHaven.DataServices/Helpers/WorkOrderBoardQueryFilters.cs b/SeaHaven.DataServices/Helpers/WorkOrderBoardQueryFilters.cs
index d4810ca..583aaa2 100644
--- a/SeaHaven.DataServices/Helpers/WorkOrderBoardQueryFilters.cs
+++ b/SeaHaven.DataServices/Helpers/WorkOrderBoardQueryFilters.cs
@@ -163,6 +163,44 @@ namespace SeaHaven.DataServices.Helpers
                     || !WorkOrderBoardRegions.KnownStorageValues.Contains(w.Locations.State))));
         }
 
+        /// <summary>
+        /// Lower-cased legacy status text and the lifecycle status it stands for:
+        /// the Phase0 backfill rules, kept equal to LifecycleStatusMapper.FromLegacyStatus.
+        /// </summary>
+        public static readonly IReadOnlyDictionary<string, LifecycleStatus> LegacyStatusValues =
+            new Dictionary<string, LifecycleStatus>(StringComparer.Ordinal)
+            {
+                ["open"] = LifecycleStatus.Incomplete,
+                ["incomplete"] = LifecycleStatus.Incomplete,
+                ["pending"] = LifecycleStatus.Pending,
+                ["onhold"] = LifecycleStatus.Pending,
+                ["on hold"] = LifecycleStatus.Pending,
+                ["scheduled"] = LifecycleStatus.Scheduled,
+                ["en route"] = LifecycleStatus.EnRoute,
+                ["enroute"] = LifecycleStatus.EnRoute,
+                ["on site"] = LifecycleStatus.OnSite,
+                ["onsite"] = LifecycleStatus.OnSite,
+                ["inprogress"] = LifecycleStatus.InProgress,
+                ["in progress"] = LifecycleStatus.InProgress,
+                ["completed"] = LifecycleStatus.Completed,
+                ["complete"] = LifecycleStatus.Completed,
+                ["done"] = LifecycleStatus.Completed,
+                ["closed"] = LifecycleStatus.Completed,
+                ["rescheduled"] = LifecycleStatus.Rescheduled,
+                ["cancelled"] = LifecycleStatus.Canceled,
+                ["canceled"] = LifecycleStatus.Canceled,
+                ["pending quote"] = LifecycleStatus.PendingQuote,
+                ["pendingquote"] = LifecycleStatus.PendingQuote,
+                ["pendingapproval"] = LifecycleStatus.PendingQuote,
+                ["pending approval"] = LifecycleStatus.PendingQuote,
+            };
+
+        /// <summary>
+        /// Keeps rows in <paramref name="statuses"/>. Rows with no LifecycleStatus
+        /// (legacy create paths still write only Status) match by their legacy
+        /// status, read as the Phase0 backfill does: known text maps through
+        /// <see cref="LegacyStatusValues"/>, anything else, blank included, is Incomplete.
+        /// </summary>
         public static IQueryable<WorkOrder> ApplyStatusFilter(
             IQueryable<WorkOrder> query,
             IReadOnlyList<LifecycleStatus>? statuses)
@@ -170,7 +208,22 @@ namespace SeaHaven.DataServices.Helpers
             if (statuses == null || statuses.Count == 0)
                 return query;
 
-            return query.Where(w => w.LifecycleStatus != null && statuses.Contains(w.LifecycleStatus.Value));
+            var legacyValues = LegacyStatusValues
+                .Where(entry => statuses.Contains(entry.Value))
+                .Select(entry => entry.Key)
+                .ToList();
+            var knownLegacyValues = LegacyStatusValues.Keys.ToList();
+            var includeUnknownLegacy = statuses.Contains(LifecycleStatus.Incomplete);
+
+            // Null check before Trim(): EF translates it, the in-memory provider runs it.
+            return query.Where(w =>
+                (w.LifecycleStatus != null && statuses.Contains(w.LifecycleStatus.Value))
+                || (w.LifecycleStatus == null
+                    && (((w.LegacyStatus ?? w.Status) != null
+                            && legacyValues.Contains((w.LegacyStatus ?? w.Status)!.Trim().ToLower()))
+                        || (includeUnknownLegacy
+                            && ((w.LegacyStatus ?? w.Status) == null
+                                || !knownLegacyValues.Contains((w.LegacyStatus ?? w.Status)!.Trim().ToLower()))))));
         }
 
         public static IQueryable<WorkOrder> ApplyDocStatusFilter(
diff --git a/SeaHavenIndustries.Tests/LifecycleStatusMapperTests.cs b/SeaHavenIndustries.Tests/LifecycleStatusMapperTests.cs
index 0a06141..5e0149f 100644
--- a/SeaHavenIndustries.Tests/LifecycleStatusMapperTests.cs
+++ b/SeaHavenIndustries.Tests/LifecycleStatusMapperTests.cs
@@ -1,4 +1,5 @@
 using Data.SeaHavenIndustries.Enums;
+using SeaHaven.DataServices.Helpers;
 using SeaHaven.Services.Constants;
 using SeaHaven.Services.Helpers;
 
@@ -30,6 +31,48 @@ public class LifecycleStatusMapperTests
         Assert.Null(result);
     }
 
+    // Every value FromLegacyStatus recognizes: the board's status filter reads
+    // rows with no LifecycleStatus through its own copy of this table.
+    [Theory]
+    [InlineData("open")]
+    [InlineData("incomplete")]
+    [InlineData("pending")]
+    [InlineData("onhold")]
+    [InlineData("on hold")]
+    [InlineData("scheduled")]
+    [InlineData("en route")]
+    [InlineData("enroute")]
+    [InlineData("on site")]
+    [InlineData("onsite")]
+    [InlineData("inprogress")]
+    [InlineData("in progress")]
+    [InlineData("completed")]
+    [InlineData("complete")]
+    [InlineData("done")]
+    [InlineData("closed")]
+    [InlineData("rescheduled")]
+    [InlineData("cancelled")]
+    [InlineData("canceled")]
+    [InlineData("pending quote")]
+    [InlineData("pendingquote")]
+    [InlineData("pendingapproval")]
+    [InlineData("pending approval")]
+    public void BoardStatusFilterLegacyTable_AgreesWithFromLegacyStatus(string legacy)
+    {
+        Assert.Equal(
+            LifecycleStatusMapper.FromLegacyStatus(legacy),
+            WorkOrderBoardQueryFilters.LegacyStatusValues[legacy]);
+    }
+
+    [Fact]
+    public void BoardStatusFilterLegacyTable_HasNoValueTheMapperRejects()
+    {
+        Assert.Equal(23, WorkOrderBoardQueryFilters.LegacyStatusValues.Count);
+        Assert.All(
+            WorkOrderBoardQueryFilters.LegacyStatusValues,
+            entry => Assert.Equal(entry.Value, LifecycleStatusMapper.FromLegacyStatus(entry.Key)));
+    }
+
     [Theory]
     [InlineData(LifecycleStatus.EnRoute, "En Route")]
     [InlineData(LifecycleStatus.PendingQuote, "Pending Quote")]

From 702069f09c470623742d6e8c639f0b724aff853c Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 03:38:31 -0300
Subject: [PATCH 129/183] test(dashboard): pin drill-down rows for legacy open
 work orders

The parity test now also asserts which rows the drill-down lists: legacy
open rows (status in Status or in LegacyStatus, or none) are listed and
legacy closed, cancelled or assigned rows are not. Drops ticket keys
from comments.
---
 .../DashboardUnassignedTests.cs                    | 14 +++++++++-----
 .../Implementation/DashboardDataService.cs         |  2 +-
 .../Interfaces/IDashboardDataService.cs            |  2 +-
 SeaHaven.Services/DTOs/DashboardDTOs.cs            |  2 +-
 4 files changed, 12 insertions(+), 8 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/DashboardUnassignedTests.cs b/Api.SeaHavenIndustries.Tests/DashboardUnassignedTests.cs
index 81649e6..996b53c 100644
--- a/Api.SeaHavenIndustries.Tests/DashboardUnassignedTests.cs
+++ b/Api.SeaHavenIndustries.Tests/DashboardUnassignedTests.cs
@@ -12,7 +12,7 @@ using Xunit;
 namespace Api.SeaHavenIndustries.Tests;
 
 /// <summary>
-/// SH-392: the Dashboard "Unassigned" count is open work orders with no
+/// The Dashboard "Unassigned" count is open work orders with no
 /// dispatcher in the selected period, and it equals the Work Orders list the
 /// tile drills into (GET /board/search, Dispatcher = Unassigned).
 /// </summary>
@@ -84,7 +84,8 @@ public class DashboardUnassignedTests
             Wo(15, inRange, status: null),                                            // counted: no status at all
             Wo(16, inRange, status: null, legacyStatus: "Done", statusText: "Open"),  // closed: LegacyStatus wins
             Wo(17, inRange, status: null, statusText: " Cancelled "),                 // canceled
-            Wo(18, inRange, assignTo: "disp-1", status: null, statusText: "Open"));   // assigned
+            Wo(18, inRange, assignTo: "disp-1", status: null, statusText: "Open"),    // assigned
+            Wo(19, inRange, status: null, legacyStatus: "Open", statusText: "Done")); // counted: LegacyStatus wins
         ctx.SaveChanges();
     }
 
@@ -141,9 +142,9 @@ public class DashboardUnassignedTests
         var allTime = await NewDashboard(ctx).GetStatsAsync(
             AccountUser(1), new DashboardStatsQueryDTO(), CancellationToken.None);
 
-        // 1, 2, 3 plus legacy 13, 14 and 15.
-        inRange.Unassigned.Should().Be(6);
-        allTime.Unassigned.Should().Be(8);
+        // 1, 2, 3 plus legacy 13, 14, 15 and 19.
+        inRange.Unassigned.Should().Be(7);
+        allTime.Unassigned.Should().Be(9);
     }
 
     [Fact]
@@ -241,5 +242,8 @@ public class DashboardUnassignedTests
         }, user, "admin-1");
 
         stats.Unassigned.Should().Be(list.TotalCount);
+        var listed = list.Items.Select(row => row.Id).ToList();
+        listed.Should().Contain(new[] { 13, 14, 15, 19 });
+        listed.Should().NotContain(new[] { 16, 17, 18 });
     }
 }
diff --git a/SeaHaven.DataServices/Implementation/DashboardDataService.cs b/SeaHaven.DataServices/Implementation/DashboardDataService.cs
index 02362a2..33957fc 100644
--- a/SeaHaven.DataServices/Implementation/DashboardDataService.cs
+++ b/SeaHaven.DataServices/Implementation/DashboardDataService.cs
@@ -62,7 +62,7 @@ namespace SeaHaven.DataServices.Implementation
                 query, new[] { "__unassigned__" }, myWorkOrders: false, currentUserId: null);
             query = WorkOrderBoardQueryFilters.ApplyStatusFilter(query, OpenLifecycleStatuses);
             // All time counts what the board lists with no range: every week plus
-            // undated work, so the tile and its drill-down agree (SH-392).
+            // undated work, so the tile and its drill-down agree.
             query = dateFrom is DateOnly from && dateTo is DateOnly to
                 ? WorkOrderBoardQueryFilters.ApplyDateRangeFilter(query, from, to)
                 : WorkOrderBoardQueryFilters.ApplyDateRangeFilter(
diff --git a/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs b/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs
index d55bdea..ee1932d 100644
--- a/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IDashboardDataService.cs
@@ -16,7 +16,7 @@ namespace SeaHaven.DataServices.Interfaces
 
         /// <summary>
         /// Open work orders with no dispatcher in the period, counted with the
-        /// same filters as GET /board/search for Dispatcher=Unassigned (SH-392),
+        /// same filters as GET /board/search for Dispatcher=Unassigned,
         /// so the Dashboard number matches the list it drills into.
         /// </summary>
         Task<int> CountOpenUnassignedAsync(
diff --git a/SeaHaven.Services/DTOs/DashboardDTOs.cs b/SeaHaven.Services/DTOs/DashboardDTOs.cs
index 146c491..7e4438f 100644
--- a/SeaHaven.Services/DTOs/DashboardDTOs.cs
+++ b/SeaHaven.Services/DTOs/DashboardDTOs.cs
@@ -106,7 +106,7 @@ namespace SeaHaven.Services.DTOs
         public int ScheduledTomorrow { get; set; }
         public int PendingUplifts { get; set; }
         public int AvetaPending { get; set; }
-        /// <summary>Open work orders with no dispatcher in the selected period (SH-392).</summary>
+        /// <summary>Open work orders with no dispatcher in the selected period.</summary>
         public int Unassigned { get; set; }
         public DashboardBreakdownDTO Breakdown { get; set; } = new();
         public int DueCount { get; set; }

From 3019e7109314030a644ec4c64190af098a9627bd Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 10:56:47 -0300
Subject: [PATCH 130/183] feat(workorders): filter board search to an exact
 work-order id set

GET /board/search accepts ids=1,2,3 (positive ints, deduplicated, at most
200). When present the result is exactly those work orders inside the
caller's tenant and base scope; date, status, dispatcher, facet and text
filters are ignored so none of them can hide a listed work order.
Malformed or oversized lists are a 400.
---
 .../WorkOrderIdsFilterTests.cs                | 217 ++++++++++++++++++
 .../WorkOrderAdvancedSearchDataService.cs     |  30 ++-
 .../WorkOrderAdvancedSearchModels.cs          |   3 +-
 .../DTOs/WorkOrderBoardRequestDTOs.cs         |   6 +
 SeaHaven.Services/Helpers/WorkOrderIdSet.cs   |  38 +++
 .../WorkOrderAdvancedSearchService.cs         |   4 +-
 6 files changed, 287 insertions(+), 11 deletions(-)
 create mode 100644 Api.SeaHavenIndustries.Tests/WorkOrderIdsFilterTests.cs
 create mode 100644 SeaHaven.Services/Helpers/WorkOrderIdSet.cs

diff --git a/Api.SeaHavenIndustries.Tests/WorkOrderIdsFilterTests.cs b/Api.SeaHavenIndustries.Tests/WorkOrderIdsFilterTests.cs
new file mode 100644
index 0000000..74a5882
--- /dev/null
+++ b/Api.SeaHavenIndustries.Tests/WorkOrderIdsFilterTests.cs
@@ -0,0 +1,217 @@
+using System.Security.Claims;
+using Api.SeaHavenIndustries.Controllers;
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using FluentAssertions;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.EntityFrameworkCore;
+using Moq;
+using SeaHaven.DataServices.Implementation;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Helpers;
+using SeaHaven.Services.Implementation;
+using SeaHaven.Services.Interfaces;
+using Xunit;
+
+namespace Api.SeaHavenIndustries.Tests;
+
+/// <summary>
+/// GET /board/search?ids= shows exactly the listed work orders inside the caller's tenant scope,
+/// whatever other filters the board sends alongside.
+/// </summary>
+public class WorkOrderIdsFilterTests
+{
+    private static ApplicationDbContext NewContext()
+    {
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseInMemoryDatabase(databaseName: Guid.NewGuid().ToString())
+            .Options;
+        return new ApplicationDbContext(options);
+    }
+
+    private static WorkOrderAdvancedSearchService NewSearch(ApplicationDbContext ctx)
+        => new(
+            new WorkOrderAdvancedSearchDataService(ctx),
+            new WorkOrderAccountResolver(new AccountDataService(ctx), new LocationDataService(ctx)));
+
+    private static ClaimsPrincipal AccountUser(int accountId)
+        => new(new ClaimsIdentity(new[]
+        {
+            new Claim(SeaHavenClaimTypes.AccountId, accountId.ToString()),
+            new Claim(ClaimTypes.NameIdentifier, "admin-1"),
+            new Claim(ClaimTypes.Role, "Admin")
+        }, "test"));
+
+    private static WorkOrder Wo(
+        int id,
+        DateTime? scheduled,
+        int accountId = 1,
+        string? assignTo = "disp-1",
+        LifecycleStatus? status = LifecycleStatus.Scheduled,
+        bool? deleted = null,
+        bool template = false)
+        => new()
+        {
+            Id = id,
+            AccountId = accountId,
+            InternalWONumber = $"3000000{id:0000}",
+            AssignTo = assignTo,
+            ScheduledDate = scheduled,
+            LifecycleStatus = status,
+            IsDeleted = deleted,
+            istemplate = template
+        };
+
+    private static void Seed(ApplicationDbContext ctx)
+    {
+        ctx.workOrders.AddRange(
+            Wo(1, new DateTime(2026, 9, 22)),
+            Wo(2, null),                                                 // no schedule date
+            Wo(3, new DateTime(2025, 1, 6), status: LifecycleStatus.Completed),
+            Wo(4, new DateTime(2026, 9, 22), assignTo: "disp-2"),
+            Wo(5, new DateTime(2026, 9, 22)),                            // not requested
+            Wo(6, new DateTime(2026, 9, 22), accountId: 2),              // another tenant
+            Wo(7, new DateTime(2026, 9, 22), deleted: true),
+            Wo(8, new DateTime(2026, 9, 22), template: true));
+        ctx.SaveChanges();
+    }
+
+    [Fact]
+    public async Task Ids_ReturnExactlyThoseWorkOrders_IgnoringEveryOtherFilter()
+    {
+        await using var ctx = NewContext();
+        Seed(ctx);
+
+        var result = await NewSearch(ctx).SearchAsync(new WorkOrderAdvancedSearchQueryDto
+        {
+            Ids = "4,1,2,3",
+            // Filters the board may still carry; none of them may hide a listed work order.
+            DatePreset = WorkOrderAdvancedSearchDatePreset.ThisWeek,
+            Statuses = new List<LifecycleStatus> { LifecycleStatus.Scheduled },
+            Dispatchers = new List<string> { "disp-1" },
+            Search = "no match anywhere",
+            PageSize = 200
+        }, AccountUser(1), "admin-1");
+
+        result.TotalCount.Should().Be(4);
+        result.Items.Select(row => row.Id).Should().BeEquivalentTo(new[] { 1, 2, 3, 4 });
+    }
+
+    [Fact]
+    public async Task Ids_NeverWidenTenantOrBaseScope()
+    {
+        await using var ctx = NewContext();
+        Seed(ctx);
+
+        var result = await NewSearch(ctx).SearchAsync(new WorkOrderAdvancedSearchQueryDto
+        {
+            Ids = "1,6,7,8",
+            PageSize = 200
+        }, AccountUser(1), "admin-1");
+
+        result.Items.Select(row => row.Id).Should().Equal(1);
+        result.TotalCount.Should().Be(1);
+    }
+
+    [Fact]
+    public async Task Ids_OnlyAnotherTenantsWorkOrders_ReturnsNothing()
+    {
+        await using var ctx = NewContext();
+        Seed(ctx);
+
+        var result = await NewSearch(ctx).SearchAsync(new WorkOrderAdvancedSearchQueryDto
+        {
+            Ids = "6"
+        }, AccountUser(1), "admin-1");
+
+        result.TotalCount.Should().Be(0);
+        result.Items.Should().BeEmpty();
+    }
+
+    [Fact]
+    public async Task NoIds_KeepsTheExistingFilters()
+    {
+        await using var ctx = NewContext();
+        Seed(ctx);
+
+        var result = await NewSearch(ctx).SearchAsync(new WorkOrderAdvancedSearchQueryDto
+        {
+            DatePreset = WorkOrderAdvancedSearchDatePreset.Custom,
+            DateFrom = new DateOnly(2026, 9, 21),
+            DateTo = new DateOnly(2026, 9, 25),
+            Dispatchers = new List<string> { "disp-1" },
+            PageSize = 200
+        }, AccountUser(1), "admin-1");
+
+        result.Items.Select(row => row.Id).Should().BeEquivalentTo(new[] { 1, 5 });
+    }
+
+    [Theory]
+    [InlineData("1,abc")]
+    [InlineData("0")]
+    [InlineData("-3")]
+    [InlineData("1,,2")]
+    [InlineData("1.5")]
+    [InlineData("99999999999")]
+    public async Task MalformedIds_AreABadRequest(string ids)
+    {
+        var controller = NewController();
+
+        var result = await controller.SearchBoard(new WorkOrderAdvancedSearchQueryDto { Ids = ids });
+
+        var badRequest = result.Should().BeOfType<BadRequestObjectResult>().Subject;
+        badRequest.Value.Should().BeOfType<Response>().Which.Message.Should().Contain("ids");
+    }
+
+    [Fact]
+    public async Task MoreThanTheLimit_IsABadRequest()
+    {
+        var controller = NewController();
+        var ids = string.Join(",", Enumerable.Range(1, WorkOrderIdSet.MaxCount + 1));
+
+        var result = await controller.SearchBoard(new WorkOrderAdvancedSearchQueryDto { Ids = ids });
+
+        result.Should().BeOfType<BadRequestObjectResult>()
+            .Which.Value.Should().BeOfType<Response>()
+            .Which.Message.Should().Contain("200");
+    }
+
+    [Fact]
+    public void Parse_DeduplicatesBeforeCountingAndKeepsFirstSeenOrder()
+    {
+        var withDuplicates = string.Join(",", Enumerable.Range(1, WorkOrderIdSet.MaxCount).Concat(new[] { 5, 7 }));
+
+        WorkOrderIdSet.ParseOrThrow(withDuplicates).Should().HaveCount(WorkOrderIdSet.MaxCount);
+        WorkOrderIdSet.ParseOrThrow(" 9, 3 ,9 ").Should().Equal(9, 3);
+    }
+
+    [Theory]
+    [InlineData(null)]
+    [InlineData("")]
+    [InlineData("  ")]
+    public void Parse_AbsentOrBlank_IsNoFilter(string? ids)
+    {
+        WorkOrderIdSet.ParseOrThrow(ids).Should().BeNull();
+    }
+
+    private static WorkOrderBoardController NewController()
+    {
+        var search = new WorkOrderAdvancedSearchService(
+            Mock.Of<SeaHaven.DataServices.Interfaces.IWorkOrderAdvancedSearchDataService>(),
+            Mock.Of<IWorkOrderAccountResolver>());
+        return new WorkOrderBoardController(
+            Mock.Of<IWorkOrderBoardService>(),
+            Mock.Of<IWorkOrderBoardUpdateService>(),
+            Mock.Of<IWorkOrderBoardCreateService>(),
+            Mock.Of<IWorkOrderBoardCancelService>(),
+            Mock.Of<IWorkOrderPocService>(),
+            search)
+        {
+            ControllerContext = new ControllerContext
+            {
+                HttpContext = new DefaultHttpContext { User = AccountUser(1) }
+            }
+        };
+    }
+}
diff --git a/SeaHaven.DataServices/Implementation/WorkOrderAdvancedSearchDataService.cs b/SeaHaven.DataServices/Implementation/WorkOrderAdvancedSearchDataService.cs
index 74b5fb2..d6c5fec 100644
--- a/SeaHaven.DataServices/Implementation/WorkOrderAdvancedSearchDataService.cs
+++ b/SeaHaven.DataServices/Implementation/WorkOrderAdvancedSearchDataService.cs
@@ -19,6 +19,26 @@ namespace SeaHaven.DataServices.Implementation
             var baseQuery = WorkOrderBoardQueryFilters.ApplyBaseScope(_context.workOrders.AsNoTracking());
             if (query.AccountId.HasValue)
                 baseQuery = WorkOrderBoardQueryFilters.ApplyAccountScope(baseQuery, query.AccountId.Value);
+
+            // An exact id set (a link from an alert or a linked-work-orders list) shows those work
+            // orders whatever their date, status or owner; only the base and tenant scope still apply.
+            baseQuery = query.Ids is { Count: > 0 } ids
+                ? baseQuery.Where(w => ids.Contains(w.Id))
+                : ApplyFilters(baseQuery, query);
+
+            var totalCount = await baseQuery.CountAsync();
+
+            var sorted = ApplySort(baseQuery, query.SortBy, query.SortDir);
+            var paged = sorted
+                .Skip(query.Page * query.PageSize)
+                .Take(query.PageSize);
+
+            var rows = await WorkOrderBoardProjection.ProjectRowsAsync(_context, paged, isUnscheduled: false);
+            return new WorkOrderAdvancedSearchResult(rows, totalCount);
+        }
+
+        private IQueryable<WorkOrder> ApplyFilters(IQueryable<WorkOrder> baseQuery, WorkOrderAdvancedSearchQuery query)
+        {
             if (query.UnscheduledOnly)
                 baseQuery = WorkOrderBoardQueryFilters.ApplyUnscheduledOnlyFilter(baseQuery);
             else
@@ -47,15 +67,7 @@ namespace SeaHaven.DataServices.Implementation
             if (normalizedSearch != null)
                 baseQuery = WorkOrderBoardSearchFilter.Apply(baseQuery, normalizedSearch);
 
-            var totalCount = await baseQuery.CountAsync();
-
-            var sorted = ApplySort(baseQuery, query.SortBy, query.SortDir);
-            var paged = sorted
-                .Skip(query.Page * query.PageSize)
-                .Take(query.PageSize);
-
-            var rows = await WorkOrderBoardProjection.ProjectRowsAsync(_context, paged, isUnscheduled: false);
-            return new WorkOrderAdvancedSearchResult(rows, totalCount);
+            return baseQuery;
         }
 
         private static IQueryable<WorkOrder> ApplySort(IQueryable<WorkOrder> query, string sortBy, string sortDir)
diff --git a/SeaHaven.DataServices/Interfaces/WorkOrderAdvancedSearchModels.cs b/SeaHaven.DataServices/Interfaces/WorkOrderAdvancedSearchModels.cs
index 4ee175a..db5cff7 100644
--- a/SeaHaven.DataServices/Interfaces/WorkOrderAdvancedSearchModels.cs
+++ b/SeaHaven.DataServices/Interfaces/WorkOrderAdvancedSearchModels.cs
@@ -33,7 +33,8 @@ namespace SeaHaven.DataServices.Interfaces
         string SortBy,
         string SortDir,
         int? AccountId = null,
-        bool IncludeDateless = false);
+        bool IncludeDateless = false,
+        IReadOnlyList<int>? Ids = null);
 
     public record WorkOrderAdvancedSearchResult(
         IReadOnlyList<WorkOrderBoardRawRow> Rows,
diff --git a/SeaHaven.Services/DTOs/WorkOrderBoardRequestDTOs.cs b/SeaHaven.Services/DTOs/WorkOrderBoardRequestDTOs.cs
index 38b4c24..4b47e9a 100644
--- a/SeaHaven.Services/DTOs/WorkOrderBoardRequestDTOs.cs
+++ b/SeaHaven.Services/DTOs/WorkOrderBoardRequestDTOs.cs
@@ -116,6 +116,12 @@ namespace SeaHaven.Services.DTOs
         public bool HasUplift { get; set; }
         public List<string>? UpliftStatuses { get; set; }
         public bool MyWorkOrders { get; set; }
+        /// <summary>
+        /// Comma-separated work-order ids, at most <see cref="WorkOrderIdSet.MaxCount"/> distinct.
+        /// When present the result is exactly those work orders inside the caller's tenant scope,
+        /// and every other filter (dates, statuses, dispatchers, facets, search) is ignored.
+        /// </summary>
+        public string? Ids { get; set; }
         public string? SortBy { get; set; }
         public string? SortDir { get; set; }
     }
diff --git a/SeaHaven.Services/Helpers/WorkOrderIdSet.cs b/SeaHaven.Services/Helpers/WorkOrderIdSet.cs
new file mode 100644
index 0000000..73874b0
--- /dev/null
+++ b/SeaHaven.Services/Helpers/WorkOrderIdSet.cs
@@ -0,0 +1,38 @@
+using System.Globalization;
+
+namespace SeaHaven.Services.Helpers
+{
+    /// <summary>
+    /// The board's exact work-order id filter: comma-separated positive integers, deduplicated,
+    /// at most <see cref="MaxCount"/> distinct ids.
+    /// </summary>
+    public static class WorkOrderIdSet
+    {
+        public const int MaxCount = 200;
+
+        /// <summary>
+        /// Null when <paramref name="raw"/> is absent or blank. Throws <see cref="ArgumentException"/>
+        /// (a 400 on the board) for any token that is not a positive integer, or too many ids.
+        /// </summary>
+        public static IReadOnlyList<int>? ParseOrThrow(string? raw)
+        {
+            if (string.IsNullOrWhiteSpace(raw))
+                return null;
+
+            var ids = new List<int>();
+            var seen = new HashSet<int>();
+            foreach (var token in raw.Split(','))
+            {
+                if (!int.TryParse(token.Trim(), NumberStyles.None, CultureInfo.InvariantCulture, out var id) || id <= 0)
+                    throw new ArgumentException("ids must be a comma-separated list of positive work order ids.");
+                if (seen.Add(id))
+                    ids.Add(id);
+            }
+
+            if (ids.Count > MaxCount)
+                throw new ArgumentException($"ids accepts at most {MaxCount} work orders.");
+
+            return ids;
+        }
+    }
+}
diff --git a/SeaHaven.Services/Implementation/WorkOrderAdvancedSearchService.cs b/SeaHaven.Services/Implementation/WorkOrderAdvancedSearchService.cs
index 39f63dc..7ebb544 100644
--- a/SeaHaven.Services/Implementation/WorkOrderAdvancedSearchService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderAdvancedSearchService.cs
@@ -42,6 +42,7 @@ namespace SeaHaven.Services.Implementation
                     query.DateTo);
 
             var sortBy = WorkOrderBoardSortFields.NormalizeOrThrow(query.SortBy);
+            var ids = WorkOrderIdSet.ParseOrThrow(query.Ids);
 
             var dataQuery = new WorkOrderAdvancedSearchQuery(
                 WorkOrderBoardSearchFilter.NormalizeSearch(query.Search),
@@ -77,7 +78,8 @@ namespace SeaHaven.Services.Implementation
                     query.IncludeDateless,
                     query.DatePreset,
                     query.DateFrom,
-                    query.DateTo));
+                    query.DateTo),
+                ids);
 
             var result = await _searchDataService.SearchAsync(dataQuery);
             var utcNow = DateTime.UtcNow;

From b545d4a4fe6a735b978b9204fcb272398067e1c6 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 10:57:34 -0300
Subject: [PATCH 131/183] feat(work-orders): add Overdue work order type

Overdue (8) is a dispatcher-assigned type, separate from the derived
past-due overlay. It takes no severity, resolves services and
completion-doc templates from the PM catalog, and filters as its own
type. The past-due flag now narrows a type filter instead of widening it,
and the dashboard breakdown partitions by stored type.
---
 .../DashboardServiceTests.cs                  |   4 +-
 .../Enums/WorkOrderEnums.cs                   |   2 +
 .../Helpers/WorkOrderBoardQueryFilters.cs     |  10 +-
 .../Helpers/WorkOrderBoardSearchFilter.cs     |   1 +
 SeaHaven.Services/DTOs/WorkOrderBoardDTOs.cs  |   2 +-
 .../DTOs/WorkOrderBoardRequestDTOs.cs         |   2 +-
 SeaHaven.Services/Helpers/DashboardMetrics.cs |  25 +-
 .../Helpers/WorkOrderCatalogType.cs           |  17 +
 .../Helpers/WorkOrderTypeMapper.cs            |   5 +-
 .../WorkOrderBoardCreateService.cs            |   5 +-
 .../WorkOrderBoardUpdateService.cs            |  13 +-
 .../WorkOrderCompletionService.cs             |   4 +-
 .../Implementation/WorkOrderDetailService.cs  |   2 +-
 .../WorkOrderBoardSearchTests.cs              |  13 +-
 .../WorkOrderBoardUpdateServiceTests.cs       |  20 +-
 .../WorkOrderOverdueTypeTests.cs              | 393 ++++++++++++++++++
 .../WorkOrderTypeMapperTests.cs               |   9 +-
 17 files changed, 461 insertions(+), 66 deletions(-)
 create mode 100644 SeaHaven.Services/Helpers/WorkOrderCatalogType.cs
 create mode 100644 SeaHavenIndustries.Tests/WorkOrderOverdueTypeTests.cs

diff --git a/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs b/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
index 2cc73ee..7358083 100644
--- a/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/DashboardServiceTests.cs
@@ -213,10 +213,10 @@ public class DashboardServiceTests
             AccountUser(1), query, CancellationToken.None);
 
         stats.Total.Should().Be(4);
-        stats.Breakdown.Overdue.Should().Be(1);
+        stats.Breakdown.Overdue.Should().Be(0);
         stats.Breakdown.Other.Should().Be(0);
         stats.Breakdown.PM.Should().Be(2);
-        stats.Breakdown.Emergency.Should().Be(0);
+        stats.Breakdown.Emergency.Should().Be(1);
         stats.Breakdown.Reactive.Should().Be(1);
         (stats.Breakdown.PM + stats.Breakdown.Emergency + stats.Breakdown.Reactive
             + stats.Breakdown.Overdue + stats.Breakdown.Other).Should().Be(stats.Total);
diff --git a/Data.SeaHavenIndustries/Enums/WorkOrderEnums.cs b/Data.SeaHavenIndustries/Enums/WorkOrderEnums.cs
index f50824f..11ada94 100644
--- a/Data.SeaHavenIndustries/Enums/WorkOrderEnums.cs
+++ b/Data.SeaHavenIndustries/Enums/WorkOrderEnums.cs
@@ -35,6 +35,8 @@ namespace Data.SeaHavenIndustries.Enums
         Inspection = 5,

         Reactive = 6,

         AddOn = 7,

+        /// <summary>Client never responded after the due date passed. Distinct from the derived past-due overlay.</summary>

+        Overdue = 8,

         Other = 99

     }

 

diff --git a/SeaHaven.DataServices/Helpers/WorkOrderBoardQueryFilters.cs b/SeaHaven.DataServices/Helpers/WorkOrderBoardQueryFilters.cs
index 583aaa2..6557db2 100644
--- a/SeaHaven.DataServices/Helpers/WorkOrderBoardQueryFilters.cs
+++ b/SeaHaven.DataServices/Helpers/WorkOrderBoardQueryFilters.cs
@@ -58,9 +58,9 @@ namespace SeaHaven.DataServices.Helpers
         }
 
         /// <summary>
-        /// Filters by real <paramref name="types"/> (including <see cref="WorkOrderType.Other"/>)
-        /// and/or past-due rows when <paramref name="overdue"/> is true.
-        /// Types and overdue are combined with OR when both are present.
+        /// Filters by stored <paramref name="types"/> (including <see cref="WorkOrderType.Overdue"/> and
+        /// <see cref="WorkOrderType.Other"/>) and/or past-due rows when <paramref name="overdue"/> is true.
+        /// Past due is a status overlay, so types and overdue are combined with AND when both are present.
         /// </summary>
         public static IQueryable<WorkOrder> ApplyTypeAndOverdueFilter(
             IQueryable<WorkOrder> query,
@@ -94,8 +94,8 @@ namespace SeaHaven.DataServices.Helpers
                      && w.ScheduledDate.Value.Date < today
                      && w.LifecycleStatus != LifecycleStatus.Completed
                      && w.LifecycleStatus != LifecycleStatus.Canceled)
-                    || (w.WorkOrderType != null && typeFilters.Contains(w.WorkOrderType.Value))
-                    || (includeAddOnFlag && w.IsAddOn));
+                    && ((w.WorkOrderType != null && typeFilters.Contains(w.WorkOrderType.Value))
+                        || (includeAddOnFlag && w.IsAddOn)));
             }
 
             return query.Where(w =>
diff --git a/SeaHaven.DataServices/Helpers/WorkOrderBoardSearchFilter.cs b/SeaHaven.DataServices/Helpers/WorkOrderBoardSearchFilter.cs
index 441802b..5232121 100644
--- a/SeaHaven.DataServices/Helpers/WorkOrderBoardSearchFilter.cs
+++ b/SeaHaven.DataServices/Helpers/WorkOrderBoardSearchFilter.cs
@@ -57,6 +57,7 @@ namespace SeaHaven.DataServices.Helpers
                 || (w.WorkOrderType == WorkOrderType.Project && "project".Contains(s))
                 || (w.WorkOrderType == WorkOrderType.Inspection && "inspection".Contains(s))
                 || (w.WorkOrderType == WorkOrderType.Reactive && "reactive".Contains(s))
+                || (w.WorkOrderType == WorkOrderType.Overdue && "overdue".Contains(s))
                 || (w.WorkOrderType == WorkOrderType.AddOn && ("add-on".Contains(s) || "addon".Contains(s)))
                 || (w.IsAddOn && ("add-on".Contains(s) || "addon".Contains(s)))
                 || (w.WorkOrderType == WorkOrderType.Other && "other".Contains(s))
diff --git a/SeaHaven.Services/DTOs/WorkOrderBoardDTOs.cs b/SeaHaven.Services/DTOs/WorkOrderBoardDTOs.cs
index b6ca553..44938d8 100644
--- a/SeaHaven.Services/DTOs/WorkOrderBoardDTOs.cs
+++ b/SeaHaven.Services/DTOs/WorkOrderBoardDTOs.cs
@@ -10,7 +10,7 @@ namespace SeaHaven.Services.DTOs
         public List<string>? Dispatchers { get; set; }
         public bool MyWorkOrders { get; set; }
         public List<WorkOrderType>? Types { get; set; }
-        /// <summary>When true, include past-due (isPastDue) rows. Combined with Types via OR.</summary>
+        /// <summary>When true, keep only past-due (isPastDue) rows. Combined with Types via AND.</summary>
         public bool Overdue { get; set; }
         public string? Search { get; set; }
     }
diff --git a/SeaHaven.Services/DTOs/WorkOrderBoardRequestDTOs.cs b/SeaHaven.Services/DTOs/WorkOrderBoardRequestDTOs.cs
index 38b4c24..de8f90d 100644
--- a/SeaHaven.Services/DTOs/WorkOrderBoardRequestDTOs.cs
+++ b/SeaHaven.Services/DTOs/WorkOrderBoardRequestDTOs.cs
@@ -98,7 +98,7 @@ namespace SeaHaven.Services.DTOs
         public List<string>? Sites { get; set; }
         public List<string>? Regions { get; set; }
         public List<WorkOrderType>? Types { get; set; }
-        /// <summary>When true, include past-due (isPastDue) rows. Combined with Types via OR.</summary>
+        /// <summary>When true, keep only past-due (isPastDue) rows. Combined with Types via AND.</summary>
         public bool Overdue { get; set; }
         public List<string>? Dispatchers { get; set; }
         public List<LifecycleStatus>? Statuses { get; set; }
diff --git a/SeaHaven.Services/Helpers/DashboardMetrics.cs b/SeaHaven.Services/Helpers/DashboardMetrics.cs
index 885ac7d..b75101d 100644
--- a/SeaHaven.Services/Helpers/DashboardMetrics.cs
+++ b/SeaHaven.Services/Helpers/DashboardMetrics.cs
@@ -21,9 +21,7 @@ public static class DashboardMetrics
                 ?? LifecycleStatusMapper.ParseLifecycleStatus(workOrder.LegacyStatus);
             var completed = status == LifecycleStatus.Completed;
             var canceled = status == LifecycleStatus.Canceled;
-            var pastDue = IsPastDue(workOrder, status, today);
-
-            AddBreakdownCount(breakdown, workOrder.WorkOrderType, pastDue);
+            AddBreakdownCount(breakdown, workOrder.WorkOrderType);
 
             var due = completed || (workOrder.ScheduledDate is DateTime scheduled
                 && DateOnly.FromDateTime(scheduled.Date) <= today);
@@ -81,25 +79,11 @@ public static class DashboardMetrics
             .ThenBy(bucket => bucket.Status, StringComparer.OrdinalIgnoreCase)
             .ToList();
 
-    private static bool IsPastDue(
-        DashboardWorkOrder workOrder,
-        LifecycleStatus? status,
-        DateOnly today)
-        => workOrder.ScheduledDate is DateTime scheduled
-            && DateOnly.FromDateTime(scheduled.Date) < today
-            && status is not LifecycleStatus.Completed and not LifecycleStatus.Canceled;
-
+    // Partition by the stored type only; past due is an overlay on any type, not a bucket.
     private static void AddBreakdownCount(
         DashboardBreakdownDTO breakdown,
-        WorkOrderType? type,
-        bool pastDue)
+        WorkOrderType? type)
     {
-        if (pastDue)
-        {
-            breakdown.Overdue++;
-            return;
-        }
-
         switch (type)
         {
             case WorkOrderType.PM:
@@ -111,6 +95,9 @@ public static class DashboardMetrics
             case WorkOrderType.Reactive:
                 breakdown.Reactive++;
                 break;
+            case WorkOrderType.Overdue:
+                breakdown.Overdue++;
+                break;
             default:
                 breakdown.Other++;
                 break;
diff --git a/SeaHaven.Services/Helpers/WorkOrderCatalogType.cs b/SeaHaven.Services/Helpers/WorkOrderCatalogType.cs
new file mode 100644
index 0000000..41daa0e
--- /dev/null
+++ b/SeaHaven.Services/Helpers/WorkOrderCatalogType.cs
@@ -0,0 +1,17 @@
+using Data.SeaHavenIndustries.Enums;
+
+namespace SeaHaven.Services.Helpers
+{
+    /// <summary>
+    /// The services registry and completion-doc templates are keyed on PM, Reactive and Emergency.
+    /// An Overdue work order is PM work the client never confirmed, so it uses the PM catalog.
+    /// </summary>
+    public static class WorkOrderCatalogType
+    {
+        public static WorkOrderType For(WorkOrderType type)
+            => type == WorkOrderType.Overdue ? WorkOrderType.PM : type;
+
+        public static WorkOrderType? For(WorkOrderType? type)
+            => type.HasValue ? For(type.Value) : null;
+    }
+}
diff --git a/SeaHaven.Services/Helpers/WorkOrderTypeMapper.cs b/SeaHaven.Services/Helpers/WorkOrderTypeMapper.cs
index 4eda69f..d12f555 100644
--- a/SeaHaven.Services/Helpers/WorkOrderTypeMapper.cs
+++ b/SeaHaven.Services/Helpers/WorkOrderTypeMapper.cs
@@ -4,7 +4,7 @@ namespace SeaHaven.Services.Helpers
 {
     public static class WorkOrderTypeMapper
     {
-        /// <summary>Board FE types. Overdue is not a type — use <see cref="WorkOrderDerivedFields.IsPastDue(System.DateTime?, LifecycleStatus?, System.DateTime?)"/>.</summary>
+        /// <summary>Board FE types. Overdue is a dispatcher-assigned type; past due is derived — see <see cref="WorkOrderDerivedFields.IsPastDue(System.DateTime?, LifecycleStatus?, System.DateTime?)"/>.</summary>
         public static bool TryParseFeLabel(string? label, out WorkOrderType type)
         {
             type = default;
@@ -20,7 +20,7 @@ namespace SeaHaven.Services.Helpers
                 "project" => Set(WorkOrderType.Project, out type),
                 "inspection" => Set(WorkOrderType.Inspection, out type),
                 "other" => Set(WorkOrderType.Other, out type),
-                "overdue" => false,
+                "overdue" => Set(WorkOrderType.Overdue, out type),
                 _ => Enum.TryParse(label, true, out type)
             };
         }
@@ -30,6 +30,7 @@ namespace SeaHaven.Services.Helpers
             WorkOrderType.PM => "PM",
             WorkOrderType.Reactive => "Reactive",
             WorkOrderType.Emergency => "Emergency",
+            WorkOrderType.Overdue => "Overdue",
             WorkOrderType.AddOn => "Add-On",
             WorkOrderType.PO => "PO",
             WorkOrderType.Project => "Project",
diff --git a/SeaHaven.Services/Implementation/WorkOrderBoardCreateService.cs b/SeaHaven.Services/Implementation/WorkOrderBoardCreateService.cs
index 149a47b..6218c9b 100644
--- a/SeaHaven.Services/Implementation/WorkOrderBoardCreateService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderBoardCreateService.cs
@@ -298,7 +298,8 @@ namespace SeaHaven.Services.Implementation
                 return null;
             }
 
-            if (!ServicesRegistryService.AllowedWorkOrderTypes.Contains(workOrderType))
+            var catalogType = WorkOrderCatalogType.For(workOrderType);
+            if (!ServicesRegistryService.AllowedWorkOrderTypes.Contains(catalogType))
             {
                 if (serviceId.HasValue)
                     throw new WorkOrderBoardValidationException(
@@ -307,7 +308,7 @@ namespace SeaHaven.Services.Implementation
                 return null;
             }
 
-            var services = await _servicesRegistryService.GetAllAsync(true, workOrderType, cancellationToken);
+            var services = await _servicesRegistryService.GetAllAsync(true, catalogType, cancellationToken);
             if (serviceId.HasValue)
             {
                 var selected = services.FirstOrDefault(service => service.Id == serviceId.Value);
diff --git a/SeaHaven.Services/Implementation/WorkOrderBoardUpdateService.cs b/SeaHaven.Services/Implementation/WorkOrderBoardUpdateService.cs
index 5a04011..fcd8721 100644
--- a/SeaHaven.Services/Implementation/WorkOrderBoardUpdateService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderBoardUpdateService.cs
@@ -370,11 +370,6 @@ namespace SeaHaven.Services.Implementation
             if (string.IsNullOrWhiteSpace(value))
                 throw new WorkOrderBoardValidationException("InvalidValue", "workOrderType value is required.");
 
-            if (string.Equals(value.Trim(), "Overdue", StringComparison.OrdinalIgnoreCase))
-                throw new WorkOrderBoardValidationException(
-                    "InvalidValue",
-                    "Overdue is not a work order type; it is derived from dueDate (isPastDue).");
-
             if (!WorkOrderTypeMapper.TryParseFeLabel(value, out var parsed))
                 throw new WorkOrderBoardValidationException("InvalidValue", $"Invalid workOrderType: {value}");
 
@@ -426,10 +421,11 @@ namespace SeaHaven.Services.Implementation
                 throw new WorkOrderBoardValidationException("ServiceInvalid", "serviceId must be a positive integer.");
 
             var service = await _servicesRegistryService.GetByIdAsync(serviceId, cancellationToken);
-            if (!ServicesRegistryService.AllowedWorkOrderTypes.Contains(workOrder.WorkOrderType ?? WorkOrderType.PM)
+            var catalogType = WorkOrderCatalogType.For(workOrder.WorkOrderType ?? WorkOrderType.PM);
+            if (!ServicesRegistryService.AllowedWorkOrderTypes.Contains(catalogType)
                 || service == null
                 || !service.IsActive
-                || !service.SupportedWorkOrderTypes.Contains(workOrder.WorkOrderType ?? WorkOrderType.PM))
+                || !service.SupportedWorkOrderTypes.Contains(catalogType))
             {
                 throw new WorkOrderBoardValidationException(
                     "ServiceInvalid",
@@ -458,7 +454,7 @@ namespace SeaHaven.Services.Implementation
                 throw new WorkOrderBoardValidationException("ServiceTypeInvalid", "Service registry is unavailable.");
 
             var service = await _servicesRegistryService.GetByIdAsync(serviceId, cancellationToken);
-            if (service == null || !service.SupportedWorkOrderTypes.Contains(workOrderType))
+            if (service == null || !service.SupportedWorkOrderTypes.Contains(WorkOrderCatalogType.For(workOrderType)))
                 throw new WorkOrderBoardValidationException(
                     "ServiceTypeInvalid",
                     "The selected service does not support this work order type.");
@@ -467,7 +463,6 @@ namespace SeaHaven.Services.Implementation
         private static WorkOrderType ParseWorkOrderType(string? value)
         {
             if (string.IsNullOrWhiteSpace(value)
-                || string.Equals(value.Trim(), "Overdue", StringComparison.OrdinalIgnoreCase)
                 || !WorkOrderTypeMapper.TryParseFeLabel(value, out var parsed))
             {
                 throw new WorkOrderBoardValidationException("InvalidValue", $"Invalid workOrderType: {value}");
diff --git a/SeaHaven.Services/Implementation/WorkOrderCompletionService.cs b/SeaHaven.Services/Implementation/WorkOrderCompletionService.cs
index 534cd6b..f2f0895 100644
--- a/SeaHaven.Services/Implementation/WorkOrderCompletionService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderCompletionService.cs
@@ -105,7 +105,9 @@ namespace SeaHaven.Services.Implementation
             await _completionData.SaveAsync(cancellationToken);
 
             var extended = await _detailData.GetExtendedFieldsAsync(workOrderId);
-            var template = await _templateData.ResolveForWorkOrderAsync(workOrder.Trade, workOrder.WorkOrderType);
+            var template = await _templateData.ResolveForWorkOrderAsync(
+                workOrder.Trade,
+                WorkOrderCatalogType.For(workOrder.WorkOrderType));
             var signoffs = await _detailData.GetDispatchSignoffsAsync(workOrderId);
 
             return new WorkOrderCompletionDto
diff --git a/SeaHaven.Services/Implementation/WorkOrderDetailService.cs b/SeaHaven.Services/Implementation/WorkOrderDetailService.cs
index 9e77a69..432996d 100644
--- a/SeaHaven.Services/Implementation/WorkOrderDetailService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderDetailService.cs
@@ -48,7 +48,7 @@ namespace SeaHaven.Services.Implementation
 
             var template = await _templateData.ResolveForWorkOrderAsync(
                 extended?.Trade ?? boardRow.Pm,
-                boardRow.WorkOrderType);
+                WorkOrderCatalogType.For(boardRow.WorkOrderType));
 
             var authorIds = WorkOrderCommentProjection.CollectAuthorUserIds(comments);
             var authorNames = await _userDataService.GetDisplayNamesByIdsAsync(authorIds);
diff --git a/SeaHavenIndustries.Tests/WorkOrderBoardSearchTests.cs b/SeaHavenIndustries.Tests/WorkOrderBoardSearchTests.cs
index 6a1f2e3..1e2ce22 100644
--- a/SeaHavenIndustries.Tests/WorkOrderBoardSearchTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderBoardSearchTests.cs
@@ -601,7 +601,7 @@ public class WorkOrderAdvancedSearchServiceTests
     }
 
     [Fact]
-    public async Task SearchAsync_OtherPlusOverdue_ReturnsUnion()
+    public async Task SearchAsync_OtherPlusOverdue_ReturnsIntersection()
     {
         await using var context = CreateContext();
         var today = DateTime.UtcNow.Date;
@@ -610,7 +610,7 @@ public class WorkOrderAdvancedSearchServiceTests
             new WorkOrder
             {
                 Id = 1,
-                WorkOrderType = WorkOrderType.PM,
+                WorkOrderType = WorkOrderType.Other,
                 DueDate = today.AddDays(5),
                 ScheduledDate = today.AddDays(-3),
                 LifecycleStatus = LifecycleStatus.Scheduled,
@@ -648,10 +648,11 @@ public class WorkOrderAdvancedSearchServiceTests
             Overdue = true
         }, WorkOrderAccountTestHelpers.OrgWideAdmin(), null);
 
-        Assert.Equal(2, result.TotalCount);
-        Assert.Contains(result.Items, i => i.Id == 1 && i.IsPastDue);
-        Assert.Contains(result.Items, i => i.Id == 2 && i.WorkOrderType == WorkOrderType.Other);
-        Assert.DoesNotContain(result.Items, i => i.Id == 3);
+        // Past due is a status overlay: it narrows the type filter instead of widening it.
+        var row = Assert.Single(result.Items);
+        Assert.Equal(1, row.Id);
+        Assert.True(row.IsPastDue);
+        Assert.Equal(WorkOrderType.Other, row.WorkOrderType);
     }
 
     [Fact]
diff --git a/SeaHavenIndustries.Tests/WorkOrderBoardUpdateServiceTests.cs b/SeaHavenIndustries.Tests/WorkOrderBoardUpdateServiceTests.cs
index b2c715e..fcf096e 100644
--- a/SeaHavenIndustries.Tests/WorkOrderBoardUpdateServiceTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderBoardUpdateServiceTests.cs
@@ -581,7 +581,7 @@ public class WorkOrderBoardUpdateServiceTests
     }
 
     [Fact]
-    public async Task PatchField_RejectsOverdueAsWorkOrderType()
+    public async Task PatchField_AcceptsOverdueAsWorkOrderType()
     {
         var (context, service) = CreateSut();
         var wo = new WorkOrder
@@ -594,17 +594,15 @@ public class WorkOrderBoardUpdateServiceTests
         context.workOrders.Add(wo);
         await context.SaveChangesAsync();
 
-        var ex = await Assert.ThrowsAsync<WorkOrderBoardValidationException>(() =>
-            service.PatchFieldAsync(1, new WorkOrderBoardPatchRequestDto
-            {
-                Field = WorkOrderBoardFieldNames.WorkOrderType,
-                Value = "Overdue",
-                WorkOrderVersion = ToVersion(wo)
-            }, "actor-1"));
+        var result = await service.PatchFieldAsync(1, new WorkOrderBoardPatchRequestDto
+        {
+            Field = WorkOrderBoardFieldNames.WorkOrderType,
+            Value = "Overdue",
+            WorkOrderVersion = ToVersion(wo)
+        }, "actor-1");
 
-        Assert.Equal("InvalidValue", ex.Code);
-        Assert.Contains("isPastDue", ex.Message, StringComparison.Ordinal);
-        Assert.Contains("dueDate", ex.Message, StringComparison.OrdinalIgnoreCase);
+        Assert.Equal(WorkOrderType.Overdue, result.WorkOrderType);
+        Assert.Equal(WorkOrderType.Overdue, (await context.workOrders.SingleAsync(w => w.Id == 1)).WorkOrderType);
     }
 
     [Fact]
diff --git a/SeaHavenIndustries.Tests/WorkOrderOverdueTypeTests.cs b/SeaHavenIndustries.Tests/WorkOrderOverdueTypeTests.cs
new file mode 100644
index 0000000..0b3657b
--- /dev/null
+++ b/SeaHavenIndustries.Tests/WorkOrderOverdueTypeTests.cs
@@ -0,0 +1,393 @@
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using Microsoft.EntityFrameworkCore;
+using SeaHaven.DataServices.Implementation;
+using SeaHaven.DataServices.Interfaces;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Exceptions;
+using SeaHaven.Services.Helpers;
+using SeaHaven.Services.Implementation;
+using SeaHaven.Services.Validation;
+
+namespace SeaHavenIndustries.Tests;
+
+// Overdue is a dispatcher-assigned work-order type: no severity, PM catalog
+// (services and completion-doc templates), and distinct from the derived
+// past-due overlay.
+public class WorkOrderOverdueTypeTests
+{
+    private const int PmServiceId = 10;
+    private const int ReactiveServiceId = 11;
+
+    private static ApplicationDbContext NewContext()
+    {
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseInMemoryDatabase(Guid.NewGuid().ToString())
+            .Options;
+        return new ApplicationDbContext(options);
+    }
+
+    private static void SeedServices(ApplicationDbContext context)
+    {
+        context.Services.AddRange(
+            NewService(PmServiceId, "Backflow Preventers", WorkOrderType.PM),
+            NewService(ReactiveServiceId, "Leak Repair", WorkOrderType.Reactive));
+    }
+
+    private static Service NewService(int id, string name, WorkOrderType type) => new()
+    {
+        Id = id,
+        Name = name,
+        NormalizedName = name.ToUpperInvariant(),
+        Trade = "Plumbing & Water Systems",
+        IconKey = "plumbing-water-systems",
+        IsActive = true,
+        SupportedWorkOrderTypes = new List<ServiceWorkOrderType>
+        {
+            new() { WorkOrderType = type }
+        }
+    };
+
+    private static WorkOrderBoardCreateService NewCreateService(ApplicationDbContext context)
+    {
+        WorkOrderAccountTestHelpers.SeedBoardCreateScope(context);
+        var boardData = new WorkOrderBoardDataService(context);
+        var resolver = WorkOrderAccountTestHelpers.Resolver(context);
+        var fieldLocks = new WorkOrderFieldLockService(new WorkOrderFieldLockDataService(context));
+        return new WorkOrderBoardCreateService(
+            boardData,
+            new WorkOrderBoardMutationDataService(context),
+            new WorkOrderBoardService(boardData, resolver),
+            new WorkOrderAuditService(new WorkOrderAuditDataService(context), fieldLocks),
+            new WorkOrderBoardCreateValidation(),
+            resolver,
+            new WorkOrderPocDataService(context),
+            new ServicesRegistryService(new ServicesRegistryDataService(context)));
+    }
+
+    private static WorkOrderBoardUpdateService NewUpdateService(ApplicationDbContext context)
+    {
+        var fieldLocks = new WorkOrderFieldLockService(new WorkOrderFieldLockDataService(context));
+        return new WorkOrderBoardUpdateService(
+            new WorkOrderBoardDataService(context),
+            new WorkOrderBoardMutationDataService(context),
+            new WorkOrderAuditService(new WorkOrderAuditDataService(context), fieldLocks),
+            new ServicesRegistryService(new ServicesRegistryDataService(context)));
+    }
+
+    private static string ToVersion(WorkOrder workOrder)
+        => Convert.ToBase64String(workOrder.RowVersion ?? new byte[] { 1, 0, 0, 0, 0, 0, 0, 1 });
+
+    [Fact]
+    public async Task Create_Overdue_WithoutSeverity_PersistsOverdueType()
+    {
+        await using var context = NewContext();
+        var service = NewCreateService(context);
+
+        var result = await service.CreateAsync(new WorkOrderBoardCreateRequestDto
+        {
+            WorkOrderType = WorkOrderType.Overdue,
+            SiteCode = "BK5",
+            LocationId = 1
+        }, WorkOrderAccountTestHelpers.AccountUser(), "actor-1");
+
+        Assert.Equal(WorkOrderType.Overdue, result.WorkOrderType);
+        Assert.Null(result.Severity);
+        var persisted = await context.workOrders.SingleAsync();
+        Assert.Equal(WorkOrderType.Overdue, persisted.WorkOrderType);
+        Assert.Equal(8, (int)persisted.WorkOrderType!.Value);
+    }
+
+    [Fact]
+    public async Task Create_Overdue_DropsSuppliedSeverity()
+    {
+        await using var context = NewContext();
+        var service = NewCreateService(context);
+
+        var result = await service.CreateAsync(new WorkOrderBoardCreateRequestDto
+        {
+            WorkOrderType = WorkOrderType.Overdue,
+            SiteCode = "BK5",
+            LocationId = 1,
+            Severity = 2
+        }, WorkOrderAccountTestHelpers.AccountUser(), "actor-1");
+
+        Assert.Null(result.Severity);
+        Assert.Null((await context.workOrders.SingleAsync()).Severity);
+    }
+
+    [Fact]
+    public async Task Create_Overdue_AcceptsPmCatalogService()
+    {
+        await using var context = NewContext();
+        SeedServices(context);
+        var service = NewCreateService(context);
+
+        var result = await service.CreateAsync(new WorkOrderBoardCreateRequestDto
+        {
+            WorkOrderType = WorkOrderType.Overdue,
+            SiteCode = "BK5",
+            LocationId = 1,
+            ServiceId = PmServiceId
+        }, WorkOrderAccountTestHelpers.AccountUser(), "actor-1");
+
+        Assert.Equal(PmServiceId, result.ServiceId);
+        Assert.Equal("Backflow Preventers", (await context.workOrders.SingleAsync()).ServiceNameSnapshot);
+    }
+
+    [Fact]
+    public async Task Create_Overdue_RejectsReactiveOnlyService()
+    {
+        await using var context = NewContext();
+        SeedServices(context);
+        var service = NewCreateService(context);
+
+        var ex = await Assert.ThrowsAsync<WorkOrderBoardValidationException>(() =>
+            service.CreateAsync(new WorkOrderBoardCreateRequestDto
+            {
+                WorkOrderType = WorkOrderType.Overdue,
+                SiteCode = "BK5",
+                LocationId = 1,
+                ServiceId = ReactiveServiceId
+            }, WorkOrderAccountTestHelpers.AccountUser(), "actor-1"));
+
+        Assert.Equal("ServiceInvalid", ex.Code);
+    }
+
+    [Fact]
+    public async Task PatchType_ToOverdue_ClearsSeverity()
+    {
+        await using var context = NewContext();
+        var wo = new WorkOrder
+        {
+            Id = 1,
+            LifecycleStatus = LifecycleStatus.Scheduled,
+            WorkOrderType = WorkOrderType.Reactive,
+            Severity = "3",
+            RowVersion = new byte[] { 1, 0, 0, 0, 0, 0, 0, 1 }
+        };
+        context.workOrders.Add(wo);
+        await context.SaveChangesAsync();
+
+        var result = await NewUpdateService(context).PatchFieldAsync(1, new WorkOrderBoardPatchRequestDto
+        {
+            Field = WorkOrderBoardFieldNames.WorkOrderType,
+            Value = "Overdue",
+            WorkOrderVersion = ToVersion(wo)
+        }, "actor-1");
+
+        Assert.Equal(WorkOrderType.Overdue, result.WorkOrderType);
+        Assert.Null(result.Severity);
+        var persisted = await context.workOrders.SingleAsync(w => w.Id == 1);
+        Assert.Equal(WorkOrderType.Overdue, persisted.WorkOrderType);
+        Assert.Null(persisted.Severity);
+    }
+
+    [Fact]
+    public async Task PatchType_PmWithPmService_ToOverdue_KeepsService()
+    {
+        await using var context = NewContext();
+        SeedServices(context);
+        var wo = new WorkOrder
+        {
+            Id = 1,
+            LifecycleStatus = LifecycleStatus.Scheduled,
+            WorkOrderType = WorkOrderType.PM,
+            ServiceId = PmServiceId,
+            RowVersion = new byte[] { 1, 0, 0, 0, 0, 0, 0, 1 }
+        };
+        context.workOrders.Add(wo);
+        await context.SaveChangesAsync();
+
+        var result = await NewUpdateService(context).PatchFieldAsync(1, new WorkOrderBoardPatchRequestDto
+        {
+            Field = WorkOrderBoardFieldNames.WorkOrderType,
+            Value = "Overdue",
+            WorkOrderVersion = ToVersion(wo)
+        }, "actor-1");
+
+        Assert.Equal(WorkOrderType.Overdue, result.WorkOrderType);
+        Assert.Equal(PmServiceId, (await context.workOrders.SingleAsync(w => w.Id == 1)).ServiceId);
+    }
+
+    [Fact]
+    public async Task PatchServiceId_OnOverdue_AcceptsPmCatalogService()
+    {
+        await using var context = NewContext();
+        SeedServices(context);
+        var wo = new WorkOrder
+        {
+            Id = 1,
+            LifecycleStatus = LifecycleStatus.Scheduled,
+            WorkOrderType = WorkOrderType.Overdue,
+            RowVersion = new byte[] { 1, 0, 0, 0, 0, 0, 0, 1 }
+        };
+        context.workOrders.Add(wo);
+        await context.SaveChangesAsync();
+
+        await NewUpdateService(context).PatchFieldAsync(1, new WorkOrderBoardPatchRequestDto
+        {
+            Field = WorkOrderBoardFieldNames.ServiceId,
+            Value = PmServiceId.ToString(),
+            WorkOrderVersion = ToVersion(wo)
+        }, "actor-1");
+
+        var persisted = await context.workOrders.SingleAsync(w => w.Id == 1);
+        Assert.Equal(PmServiceId, persisted.ServiceId);
+        Assert.Equal("Backflow Preventers", persisted.Trade);
+    }
+
+    [Fact]
+    public async Task GetDetail_Overdue_ResolvesPmCompletionTemplate()
+    {
+        await using var context = NewContext();
+        context.workOrders.Add(new WorkOrder
+        {
+            Id = 1,
+            InternalWONumber = "10000000001",
+            LifecycleStatus = LifecycleStatus.Scheduled,
+            WorkOrderType = WorkOrderType.Overdue,
+            ScheduledDate = DateTime.UtcNow.AddDays(1),
+            DocStatus = DocStatus.No,
+            RowVersion = new byte[] { 1, 0, 0, 0, 0, 0, 0, 1 }
+        });
+        context.CompletionDocTemplates.Add(new CompletionDocTemplate
+        {
+            Name = "PM Completion",
+            ServiceKey = "pm-generic",
+            WorkOrderType = WorkOrderType.PM,
+            TemplateUrl = "https://example.com/pm.pdf",
+            IsActive = true
+        });
+        await context.SaveChangesAsync();
+
+        var boardData = new WorkOrderBoardDataService(context);
+        var resolver = WorkOrderAccountTestHelpers.Resolver(context);
+        var service = new WorkOrderDetailService(
+            new WorkOrderBoardService(boardData, resolver),
+            new WorkOrderDetailDataService(context),
+            new CompletionDocTemplateDataService(context),
+            new UserDataService(context),
+            resolver);
+
+        var detail = await service.GetDetailAsync(1, WorkOrderAccountTestHelpers.OrgWideAdmin());
+
+        Assert.NotNull(detail);
+        Assert.Equal(DocStatus.No, detail!.Completion.DocStatus);
+        Assert.NotNull(detail.Completion.Template);
+        Assert.Equal("PM Completion", detail.Completion.Template!.Name);
+    }
+
+    [Fact]
+    public async Task Search_TypeOverdue_ReturnsOverdueTypeOnly_NotPastDueRows()
+    {
+        await using var context = NewContext();
+        var today = DateTime.UtcNow.Date;
+        context.workOrders.AddRange(
+            new WorkOrder
+            {
+                Id = 1,
+                WorkOrderType = WorkOrderType.Overdue,
+                ScheduledDate = today.AddDays(2),
+                LifecycleStatus = LifecycleStatus.Scheduled,
+                InternalWONumber = "10000000001"
+            },
+            new WorkOrder
+            {
+                Id = 2,
+                WorkOrderType = WorkOrderType.PM,
+                ScheduledDate = today.AddDays(-3),
+                LifecycleStatus = LifecycleStatus.Scheduled,
+                InternalWONumber = "10000000002"
+            },
+            new WorkOrder
+            {
+                Id = 3,
+                WorkOrderType = WorkOrderType.Overdue,
+                ScheduledDate = today.AddDays(-2),
+                LifecycleStatus = LifecycleStatus.Scheduled,
+                InternalWONumber = "10000000003"
+            });
+        await context.SaveChangesAsync();
+
+        var result = await NewSearchService(context).SearchAsync(new WorkOrderAdvancedSearchQueryDto
+        {
+            DatePreset = WorkOrderAdvancedSearchDatePreset.Custom,
+            DateFrom = DateOnly.FromDateTime(today.AddMonths(-1)),
+            DateTo = DateOnly.FromDateTime(today.AddMonths(1)),
+            Types = new List<WorkOrderType> { WorkOrderType.Overdue }
+        }, WorkOrderAccountTestHelpers.OrgWideAdmin(), null);
+
+        Assert.Equal(new[] { 1, 3 }, result.Items.Select(i => i.Id).OrderBy(id => id));
+        Assert.All(result.Items, i => Assert.Equal(WorkOrderType.Overdue, i.WorkOrderType));
+    }
+
+    [Fact]
+    public async Task Search_TypeOverdueWithPastDue_ReturnsIntersection()
+    {
+        await using var context = NewContext();
+        var today = DateTime.UtcNow.Date;
+        context.workOrders.AddRange(
+            new WorkOrder
+            {
+                Id = 1,
+                WorkOrderType = WorkOrderType.Overdue,
+                ScheduledDate = today.AddDays(2),
+                LifecycleStatus = LifecycleStatus.Scheduled,
+                InternalWONumber = "10000000001"
+            },
+            new WorkOrder
+            {
+                Id = 2,
+                WorkOrderType = WorkOrderType.PM,
+                ScheduledDate = today.AddDays(-3),
+                LifecycleStatus = LifecycleStatus.Scheduled,
+                InternalWONumber = "10000000002"
+            },
+            new WorkOrder
+            {
+                Id = 3,
+                WorkOrderType = WorkOrderType.Overdue,
+                ScheduledDate = today.AddDays(-2),
+                LifecycleStatus = LifecycleStatus.Scheduled,
+                InternalWONumber = "10000000003"
+            });
+        await context.SaveChangesAsync();
+
+        var result = await NewSearchService(context).SearchAsync(new WorkOrderAdvancedSearchQueryDto
+        {
+            DatePreset = WorkOrderAdvancedSearchDatePreset.Custom,
+            DateFrom = DateOnly.FromDateTime(today.AddMonths(-1)),
+            DateTo = DateOnly.FromDateTime(today.AddMonths(1)),
+            Types = new List<WorkOrderType> { WorkOrderType.Overdue },
+            Overdue = true
+        }, WorkOrderAccountTestHelpers.OrgWideAdmin(), null);
+
+        var row = Assert.Single(result.Items);
+        Assert.Equal(3, row.Id);
+        Assert.True(row.IsPastDue);
+    }
+
+    [Fact]
+    public void DashboardBreakdown_CountsByTypeOnly()
+    {
+        var today = new DateOnly(2026, 9, 25);
+        var pastDue = today.AddDays(-3).ToDateTime(TimeOnly.MinValue);
+        var future = today.AddDays(3).ToDateTime(TimeOnly.MinValue);
+        var rows = new List<DashboardWorkOrder>
+        {
+            new(1, null, WorkOrderType.Overdue, LifecycleStatus.Scheduled, null, future, null, null),
+            new(2, null, WorkOrderType.PM, LifecycleStatus.Scheduled, null, pastDue, null, null),
+            new(3, null, WorkOrderType.Overdue, LifecycleStatus.Scheduled, null, pastDue, null, null),
+        };
+
+        var result = DashboardMetrics.Calculate(rows, today);
+
+        Assert.Equal(2, result.Breakdown.Overdue);
+        Assert.Equal(1, result.Breakdown.PM);
+        Assert.Equal(0, result.Breakdown.Other);
+    }
+
+    private static WorkOrderAdvancedSearchService NewSearchService(ApplicationDbContext context)
+        => new(new WorkOrderAdvancedSearchDataService(context), WorkOrderAccountTestHelpers.Resolver(context));
+}
diff --git a/SeaHavenIndustries.Tests/WorkOrderTypeMapperTests.cs b/SeaHavenIndustries.Tests/WorkOrderTypeMapperTests.cs
index b25bcd5..e56b28c 100644
--- a/SeaHavenIndustries.Tests/WorkOrderTypeMapperTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderTypeMapperTests.cs
@@ -10,21 +10,18 @@ public class WorkOrderTypeMapperTests
     [InlineData("Reactive", WorkOrderType.Reactive)]
     [InlineData("Emergency", WorkOrderType.Emergency)]
     [InlineData("Add-On", WorkOrderType.AddOn)]
+    [InlineData("Overdue", WorkOrderType.Overdue)]
+    [InlineData("overdue", WorkOrderType.Overdue)]
     public void TryParseFeLabel_BoardTypes(string label, WorkOrderType expected)
     {
         Assert.True(WorkOrderTypeMapper.TryParseFeLabel(label, out var type));
         Assert.Equal(expected, type);
     }
 
-    [Fact]
-    public void TryParseFeLabel_Overdue_ReturnsFalse()
-    {
-        Assert.False(WorkOrderTypeMapper.TryParseFeLabel("Overdue", out _));
-    }
-
     [Theory]
     [InlineData(WorkOrderType.AddOn, "Add-On")]
     [InlineData(WorkOrderType.Reactive, "Reactive")]
+    [InlineData(WorkOrderType.Overdue, "Overdue")]
     public void ToFeLabel_ReturnsBoardLabel(WorkOrderType type, string expected)
     {
         Assert.Equal(expected, WorkOrderTypeMapper.ToFeLabel(type));

From 7c097c27508adb0983b5ce17ceea3fb49829a752 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 11:00:22 -0300
Subject: [PATCH 132/183] feat(completion-templates): author templates with
 safety note and ordered procedures

Adds an extra safety note and an ordered procedure list to completion
document templates, name search, creator and last-updated audit fields,
a tenant-scoped count of open work orders that depend on a template, and
a delete that unlinks Services while they keep requiring a document.
Writes are gated by the create/edit/delete completion template team
permissions instead of the Admin role.
---
 .../WorkOrderRouteContractTests.cs            |    5 +-
 .../WorkOrderCompletionController.cs          |   72 +-
 .../Auth/ApplicationDbContext.cs              |   18 +
 ...ompletionDocTemplateProcedures.Designer.cs | 4263 +++++++++++++++++
 ...5135234_CompletionDocTemplateProcedures.cs |   59 +
 .../ApplicationDbContextModelSnapshot.cs      |   50 +
 .../Models/CompletionDocTemplate.cs           |   22 +
 .../CompletionDocTemplateDataService.cs       |  167 +-
 .../WorkOrderCompletionDataService.cs         |    3 -
 .../Interfaces/CompletionDocTemplateModels.cs |   26 +
 .../IWorkOrderCompletionDataService.cs        |    1 -
 .../Interfaces/IWorkOrderDetailDataService.cs |   42 +-
 SeaHaven.Services/DTOs/WorkOrderDetailDTOs.cs |   43 +-
 .../CompletionDocTemplateService.cs           |  259 +
 .../WorkOrderCompletionService.cs             |   70 -
 .../ICompletionDocTemplateService.cs          |   40 +
 .../Interfaces/IWorkOrderCompletionService.cs |    6 -
 .../CompletionDocTemplateServiceTests.cs      |  641 +++
 18 files changed, 5634 insertions(+), 153 deletions(-)
 create mode 100644 Data.SeaHavenIndustries/Migrations/20260925135234_CompletionDocTemplateProcedures.Designer.cs
 create mode 100644 Data.SeaHavenIndustries/Migrations/20260925135234_CompletionDocTemplateProcedures.cs
 create mode 100644 SeaHaven.DataServices/Interfaces/CompletionDocTemplateModels.cs
 create mode 100644 SeaHaven.Services/Implementation/CompletionDocTemplateService.cs
 create mode 100644 SeaHaven.Services/Interfaces/ICompletionDocTemplateService.cs
 create mode 100644 SeaHavenIndustries.Tests/CompletionDocTemplateServiceTests.cs

diff --git a/Api.SeaHavenIndustries.Tests/WorkOrderRouteContractTests.cs b/Api.SeaHavenIndustries.Tests/WorkOrderRouteContractTests.cs
index fa023ea..6c044fb 100644
--- a/Api.SeaHavenIndustries.Tests/WorkOrderRouteContractTests.cs
+++ b/Api.SeaHavenIndustries.Tests/WorkOrderRouteContractTests.cs
@@ -38,8 +38,8 @@ public class WorkOrderRouteContractTests
     /// Baseline public endpoint set (verb + action-relative route) that the original single
     /// WorkOrderController exposed, plus the author-only board-comment edit endpoint (SH-122).
     /// Every action is reachable under both api/WorkOrder and api/workorders; that base-route
-    /// duplication is collapsed here, so this is the distinct action-relative contract. 52 routes
-    /// come from 51 actions (Editworkorder binds two routes).
+    /// duplication is collapsed here, so this is the distinct action-relative contract. 53 routes
+    /// come from 52 actions (Editworkorder binds two routes).
     /// </summary>
     private static readonly HashSet<string> ExpectedWorkOrderEndpoints = new(StringComparer.Ordinal)
     {
@@ -60,6 +60,7 @@ public class WorkOrderRouteContractTests
         "GET board/search",
         "GET completion-templates",
         "GET completion-templates/{id:int}",
+        "GET completion-templates/{id:int}/linked-work-orders",
         "GET lookups/dispatchers",
         "GET {id:int}",
         "GET {id:int}/audit",
diff --git a/Api.SeaHavenIndustries/Controllers/WorkOrderCompletionController.cs b/Api.SeaHavenIndustries/Controllers/WorkOrderCompletionController.cs
index 655892c..5631705 100644
--- a/Api.SeaHavenIndustries/Controllers/WorkOrderCompletionController.cs
+++ b/Api.SeaHavenIndustries/Controllers/WorkOrderCompletionController.cs
@@ -18,83 +18,111 @@ namespace Api.SeaHavenIndustries.Controllers
     public class WorkOrderCompletionController : Controller
     {
         private readonly IWorkOrderCompletionService _workOrderCompletionService;
+        private readonly ICompletionDocTemplateService _completionDocTemplateService;
         private readonly IFileStoragePort _fileStorage;
 
         public WorkOrderCompletionController(
             IWorkOrderCompletionService workOrderCompletionService,
+            ICompletionDocTemplateService completionDocTemplateService,
             IFileStoragePort fileStorage)
         {
             _workOrderCompletionService = workOrderCompletionService;
+            _completionDocTemplateService = completionDocTemplateService;
             _fileStorage = fileStorage;
         }
 
         [HttpGet("completion-templates")]
         public async Task<IActionResult> GetCompletionTemplates(
+            [FromQuery] string? search = null,
             [FromQuery] string? serviceKey = null,
-            [FromQuery] WorkOrderType? workOrderType = null)
+            [FromQuery] WorkOrderType? workOrderType = null,
+            CancellationToken cancellationToken = default)
         {
-            var templates = await _workOrderCompletionService.GetTemplatesAsync(serviceKey, workOrderType);
+            var templates = await _completionDocTemplateService.ListAsync(search, serviceKey, workOrderType, cancellationToken);
             return Ok(templates);
         }
 
         [HttpGet("completion-templates/{id:int}")]
-        public async Task<IActionResult> GetCompletionTemplate(int id)
+        public async Task<IActionResult> GetCompletionTemplate(int id, CancellationToken cancellationToken)
         {
-            var template = await _workOrderCompletionService.GetTemplateByIdAsync(id);
+            var template = await _completionDocTemplateService.GetAsync(id, cancellationToken);
             if (template == null)
                 return NotFound(new Response { Status = "Error", Message = "Template not found." });
             return Ok(template);
         }
 
-        [Authorize(Roles = "Admin")]
-        [HttpPost("completion-templates")]
-        public async Task<IActionResult> CreateCompletionTemplate([FromBody] CompletionDocTemplateCreateDto request)
+        [HttpGet("completion-templates/{id:int}/linked-work-orders")]
+        public async Task<IActionResult> GetCompletionTemplateLinkedWorkOrders(int id, CancellationToken cancellationToken)
         {
             try
             {
-                var created = await _workOrderCompletionService.CreateTemplateAsync(request);
+                var linked = await _completionDocTemplateService.GetLinkedWorkOrdersAsync(User, id, cancellationToken);
+                return Ok(linked);
+            }
+            catch (WorkOrderBoardValidationException ex)
+            {
+                return MapTemplateError(ex);
+            }
+        }
+
+        [HttpPost("completion-templates")]
+        public async Task<IActionResult> CreateCompletionTemplate(
+            [FromBody] CompletionDocTemplateCreateDto request,
+            CancellationToken cancellationToken)
+        {
+            try
+            {
+                var created = await _completionDocTemplateService.CreateAsync(User, request, cancellationToken);
                 return Ok(created);
             }
             catch (WorkOrderBoardValidationException ex)
             {
-                return UnprocessableEntity(new WorkOrderBoardValidationErrorDto { Code = ex.Code, Message = ex.Message });
+                return MapTemplateError(ex);
             }
         }
 
-        [Authorize(Roles = "Admin")]
         [HttpPut("completion-templates/{id:int}")]
-        public async Task<IActionResult> UpdateCompletionTemplate(int id, [FromBody] CompletionDocTemplateCreateDto request)
+        public async Task<IActionResult> UpdateCompletionTemplate(
+            int id,
+            [FromBody] CompletionDocTemplateCreateDto request,
+            CancellationToken cancellationToken)
         {
             try
             {
-                var updated = await _workOrderCompletionService.UpdateTemplateAsync(id, request);
+                var updated = await _completionDocTemplateService.UpdateAsync(User, id, request, cancellationToken);
                 return Ok(updated);
             }
-            catch (WorkOrderBoardValidationException ex) when (ex.Code == "NotFound")
-            {
-                return NotFound(new WorkOrderBoardValidationErrorDto { Code = ex.Code, Message = ex.Message });
-            }
             catch (WorkOrderBoardValidationException ex)
             {
-                return UnprocessableEntity(new WorkOrderBoardValidationErrorDto { Code = ex.Code, Message = ex.Message });
+                return MapTemplateError(ex);
             }
         }
 
-        [Authorize(Roles = "Admin")]
         [HttpDelete("completion-templates/{id:int}")]
-        public async Task<IActionResult> DeleteCompletionTemplate(int id)
+        public async Task<IActionResult> DeleteCompletionTemplate(int id, CancellationToken cancellationToken)
         {
             try
             {
-                await _workOrderCompletionService.DeleteTemplateAsync(id);
+                await _completionDocTemplateService.DeleteAsync(User, id, cancellationToken);
                 return NoContent();
             }
-            catch (WorkOrderBoardValidationException ex) when (ex.Code == "NotFound")
+            catch (WorkOrderBoardValidationException ex)
             {
-                return NotFound(new WorkOrderBoardValidationErrorDto { Code = ex.Code, Message = ex.Message });
+                return MapTemplateError(ex);
             }
         }
 
+        private IActionResult MapTemplateError(WorkOrderBoardValidationException ex)
+        {
+            var body = new WorkOrderBoardValidationErrorDto { Code = ex.Code, Message = ex.Message };
+            return ex.Code switch
+            {
+                "Forbidden" => StatusCode(StatusCodes.Status403Forbidden, body),
+                "NotFound" => NotFound(body),
+                _ => UnprocessableEntity(body)
+            };
+        }
+
         [HttpPost("{id:int}/completion-doc")]
         [RequestSizeLimit(50_000_000)]
         public async Task<IActionResult> UploadCompletionDoc(
diff --git a/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs b/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs
index fe944ee..eec5ec0 100644
--- a/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs
+++ b/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs
@@ -54,6 +54,23 @@ namespace Data.SeaHavenIndustries
             builder.Entity<CompletionDocTemplate>()
                 .HasIndex(t => new { t.ServiceKey, t.IsActive });
 
+            builder.Entity<CompletionDocTemplate>()
+                .Property(t => t.ExtraSafetyNote)
+                .HasMaxLength(CompletionDocTemplate.ExtraSafetyNoteMaxLength);
+
+            builder.Entity<CompletionDocTemplateProcedure>(entity =>
+            {
+                entity.Property(p => p.Name)
+                    .HasMaxLength(CompletionDocTemplateProcedure.NameMaxLength);
+
+                entity.HasOne(p => p.CompletionDocTemplate)
+                    .WithMany(t => t.Procedures)
+                    .HasForeignKey(p => p.CompletionDocTemplateId)
+                    .OnDelete(DeleteBehavior.Cascade);
+
+                entity.HasIndex(p => new { p.CompletionDocTemplateId, p.SortOrder });
+            });
+
 
             builder.Entity<WorkOrder>()
                 .Property(w => w.RowVersion)
@@ -344,6 +361,7 @@ namespace Data.SeaHavenIndustries
         public DbSet<WorkOrderCategories> workOrderCategories { get; set; }
         public DbSet<WorkOrderAttachments> workOrderAttachments { get; set; }
         public DbSet<CompletionDocTemplate> CompletionDocTemplates { get; set; }
+        public DbSet<CompletionDocTemplateProcedure> CompletionDocTemplateProcedures { get; set; }
         public DbSet<WorkOrderAuditLog> WorkOrderAuditLogs { get; set; }
         public DbSet<WorkOrderFieldLock> WorkOrderFieldLocks { get; set; }
         public DbSet<WorkOrderWeekRolledLedger> WorkOrderWeekRolledLedgers { get; set; }
diff --git a/Data.SeaHavenIndustries/Migrations/20260925135234_CompletionDocTemplateProcedures.Designer.cs b/Data.SeaHavenIndustries/Migrations/20260925135234_CompletionDocTemplateProcedures.Designer.cs
new file mode 100644
index 0000000..9a77d38
--- /dev/null
+++ b/Data.SeaHavenIndustries/Migrations/20260925135234_CompletionDocTemplateProcedures.Designer.cs
@@ -0,0 +1,4263 @@
+// <auto-generated />
+using System;
+using Data.SeaHavenIndustries;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Metadata;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+
+#nullable disable
+
+namespace Data.SeaHavenIndustries.Migrations
+{
+    [DbContext(typeof(ApplicationDbContext))]
+    [Migration("20260925135234_CompletionDocTemplateProcedures")]
+    partial class CompletionDocTemplateProcedures
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasAnnotation("ProductVersion", "8.0.8")
+                .HasAnnotation("Relational:MaxIdentifierLength", 128);
+
+            SqlServerModelBuilderExtensions.UseIdentityColumns(modelBuilder);
+
+            modelBuilder.HasSequence("WorkOrderInternalNumberSequence");
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Accounts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("CurrencyCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Importance")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("IndustryId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("OwnerEmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Phone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PrivacySetting")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ServiceInstructions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Tags")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("TerritoryId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("TimeZone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Type")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Website")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Accounts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Addresses", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AddressType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Country")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("County")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("ContactId");
+
+                    b.ToTable("Addresses");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int>("AccessFailedCount")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Color")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ConcurrencyStamp")
+                        .IsConcurrencyToken()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Contact")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DeletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<bool>("EmailConfirmed")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("FirstName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Initials")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsAccountOwner")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("LastName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Locations")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("LockoutEnabled")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTimeOffset?>("LockoutEnd")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("NormalizedEmail")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("NormalizedUserName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("PasswordHash")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("PendingRegistration")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("PendingRegistrationCreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("PhoneNumberConfirmed")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("SecurityStamp")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("TwoFactorEnabled")
+                        .HasColumnType("bit");
+
+                    b.Property<int?>("Type")
+                        .HasColumnType("int");
+
+                    b.Property<string>("UniqueName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserImage")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("IsAccountOwner")
+                        .IsUnique()
+                        .HasDatabaseName("IX_AspNetUsers_IsAccountOwner")
+                        .HasFilter("IsAccountOwner = 1");
+
+                    b.HasIndex("NormalizedEmail")
+                        .HasDatabaseName("EmailIndex");
+
+                    b.HasIndex("NormalizedUserName")
+                        .IsUnique()
+                        .HasDatabaseName("UserNameIndex")
+                        .HasFilter("[NormalizedUserName] IS NOT NULL");
+
+                    b.ToTable("AspNetUsers", (string)null);
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Area", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("Areas");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("AssetCode")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Assets");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Category", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Categories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Comments", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CommentType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Commenter")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Commenttext")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Documents")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalCommentId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("ExternalSourceEmailS3Key")
+                        .HasMaxLength(2048)
+                        .HasColumnType("nvarchar(2048)");
+
+                    b.Property<DateTimeOffset?>("ExternalUpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalVersionHash")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RecordType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int?>("WorkerOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("UserId");
+
+                    b.HasIndex("WorkerOrderId");
+
+                    b.ToTable("Comments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.CompletionDocTemplate", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ExtraSafetyNote")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ServiceKey")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("TemplateUrl")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ServiceKey", "IsActive");
+
+                    b.ToTable("CompletionDocTemplates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.CompletionDocTemplateProcedure", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("CompletionDocTemplateId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Description")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CompletionDocTemplateId", "SortOrder");
+
+                    b.ToTable("CompletionDocTemplateProcedures");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ContactDetails", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DateOfBirth")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Gender")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PrivacySetting")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Tags")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Territory")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.ToTable("ContactDetails");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ContactType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FirstName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LastName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("MiddleName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Owner")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("SiteContactOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Title")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Contacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Department", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Departments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AcceptToken")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("AcknowledgedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CommercialStatusUpdatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CompletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DispatchNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DispatchedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("EmailSent")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("EstimatedArrivalAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("EtaManualOverride")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("InvoiceNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("InvoiceStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<decimal?>("NTEAmount")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<string>("PONumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PaymentStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ReplyToAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<DateTime?>("ScheduledDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TechPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("VendorNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<DateTime?>("VerifiedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("VerifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("Dispatches");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchChecklistItem", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CompletedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("CompletedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool>("IsCompleted")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ItemText")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("DispatchChecklistItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchSignoff", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Signature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignatureMethod")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("SignedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("SignoffType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.ToTable("DispatchSignoffs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchUpliftRequest", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<decimal?>("CurrentNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<DateTime?>("DecidedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DecidedByUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DecisionNote")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("EscalatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("EvidenceDocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("ExpiresAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("InitialNotificationSentAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("NotificationError")
+                        .HasMaxLength(500)
+                        .HasColumnType("nvarchar(500)");
+
+                    b.Property<string>("NotificationStatus")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<string>("RequestKey")
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<string>("RequestedByVendorName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<decimal>("RequestedNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<int>("RequiredTier")
+                        .HasColumnType("int");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<string>("Status")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<string>("VendorReason")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId")
+                        .IsUnique()
+                        .HasFilter("[Status] IN ('Pending', 'ChangesRequested')");
+
+                    b.HasIndex("EvidenceDocumentId");
+
+                    b.HasIndex("DispatchId", "RequestKey")
+                        .IsUnique()
+                        .HasFilter("[RequestKey] IS NOT NULL");
+
+                    b.ToTable("DispatchUpliftRequests");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchWorkOrder", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("DispatchWorkOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DropdownOption", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Category")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ParentValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Value")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("DropdownOptions");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("CanChangeProviderNumber")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ConfirmUserName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DateOfBirth")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DepartmentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("EmployeeNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FirstName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Gender")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("HireDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<int?>("JobTitleId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("LastLogin")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LastName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("MiddleName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("PermissionGroupId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("RegionId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("SMSAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TimeZone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Website")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DepartmentId");
+
+                    b.HasIndex("JobTitleId");
+
+                    b.HasIndex("RegionId");
+
+                    b.ToTable("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeAddress", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CountryCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CountyId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("StateCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Street")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("StreetLineTwo")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId")
+                        .IsUnique();
+
+                    b.ToTable("EmployeeAddresses");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeEmail", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<int?>("EmailTypeId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsPrimary")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.ToTable("EmployeeEmails");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeePhone", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Extension")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsPrimary")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Number")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("PhoneTypeId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.ToTable("EmployeePhones");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Events", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("AllDay")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("EndDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("EndTime")
+                        .HasMaxLength(10)
+                        .HasColumnType("nvarchar(10)");
+
+                    b.Property<string>("EventColor")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Location")
+                        .HasMaxLength(150)
+                        .HasColumnType("nvarchar(150)");
+
+                    b.Property<int?>("RecordID")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RecordName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("RecordTargetType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("ReminderMinutes")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime>("StartDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("StartTime")
+                        .HasMaxLength(10)
+                        .HasColumnType("nvarchar(10)");
+
+                    b.Property<string>("Title")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Events");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.FollowUps", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Reason")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("ScheduleDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<TimeSpan>("ScheduleStartTime")
+                        .HasColumnType("time");
+
+                    b.Property<string>("Status")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.HasIndex("LocationId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("FollowUps");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ForgetPasswordCode", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Code")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Email")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("ForgetPasswordCodes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.JobTitle", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("JobTitles");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalLocationId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Latitude")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Longitude")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Title")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.ToTable("Locations");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.PMSchedules", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AssetId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Frequency")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("StartDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AssetId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("PMSchedules");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BillingAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("Date")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ProjectName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("QuotId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ShippingAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("Quotes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.QuotesLineItems", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Descriptions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<decimal?>("Lineitem")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<int?>("LineitemNumber")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("QuoteId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("QuoteId");
+
+                    b.ToTable("QuotesLines");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Region", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Regions");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Service", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("CompletionDocTemplateId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("IconKey")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<bool>("RequiresCompletionDocument")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Trade")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CompletionDocTemplateId");
+
+                    b.HasIndex("IsActive");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.HasIndex("Trade");
+
+                    b.ToTable("Services");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ServiceWorkOrderType", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("ServiceId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ServiceId", "WorkOrderType")
+                        .IsUnique();
+
+                    b.ToTable("ServiceWorkOrderTypes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.SitePreferredVendor", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Trade")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("UpdatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("LocationId", "VendorId")
+                        .IsUnique()
+                        .HasFilter("[Trade] IS NULL");
+
+                    b.HasIndex("LocationId", "VendorId", "Trade")
+                        .IsUnique()
+                        .HasFilter("[Trade] IS NOT NULL");
+
+                    b.ToTable("SitePreferredVendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplate", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("TaskListTemplates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplateItem", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ItemText")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<int>("TaskListTemplateId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("TaskListTemplateId");
+
+                    b.ToTable("TaskListTemplateItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Template", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AfterPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AfterPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AssignTo")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DueDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Priority")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffSignature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderTitle")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AssignTo");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Templates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Trade", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("Trades");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserPermissionOverride", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("PermissionKey")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<int>("State")
+                        .HasColumnType("int");
+
+                    b.HasKey("UserId", "PermissionKey");
+
+                    b.HasIndex("UserId", "PermissionKey")
+                        .IsUnique()
+                        .HasDatabaseName("IX_UserPermissionOverrides_UserId_PermissionKey");
+
+                    b.ToTable("UserPermissionOverrides");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserServiceArea", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Area")
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.HasKey("UserId", "Area");
+
+                    b.HasIndex("UserId", "Area")
+                        .IsUnique()
+                        .HasDatabaseName("IX_UserServiceAreas_UserId_Area");
+
+                    b.ToTable("UserServiceAreas");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AvailabilityStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("AvailabilityUpdatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CompanyId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CompanyName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CompanyPhone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ContactName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("GoogleMapsUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Phone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PreferredContact")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TradeSpecialties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CompanyId");
+
+                    b.ToTable("Vendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAccessToken", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime>("ExpiresAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime>("IssuedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("LastUsedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("RevokedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Token")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Token")
+                        .IsUnique();
+
+                    b.HasIndex("VendorId");
+
+                    b.ToTable("VendorAccessTokens");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAuditLog", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Actor")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("FieldName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NewValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("OldValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.ToTable("VendorAuditLogs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("AreaId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CompanyPhone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("GoogleMapsUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AreaId");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("VendorCompanies");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompletionDocument", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ContentType")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("OriginalFileName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Purpose")
+                        .IsRequired()
+                        .HasMaxLength(30)
+                        .HasColumnType("nvarchar(30)");
+
+                    b.Property<string>("RejectionReason")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ReplacesDocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ReviewStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ReviewedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ScanStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ScannedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<long>("SizeBytes")
+                        .HasColumnType("bigint");
+
+                    b.Property<string>("StoredFileName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("Version")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("VendorCompletionDocuments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("AdditionalContacts")
+                        .HasMaxLength(4000)
+                        .HasColumnType("nvarchar(4000)");
+
+                    b.Property<string>("AfterPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AfterPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateOnly?>("AssignDate")
+                        .HasColumnType("date");
+
+                    b.Property<string>("AssignTo")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("AvetaRequired")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("AvettaTask")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Building")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("CarriedOver")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CompletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Customer")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DateReported")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("DocStatus")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("DueDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ExternalAssignedTo")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<DateTimeOffset?>("ExternalLastOccurredAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalRecordType")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset?>("ExternalUpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalVersionHash")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("ExternalWorkOrderId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ExtraServices")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<string>("FlagColor")
+                        .HasMaxLength(7)
+                        .HasColumnType("nvarchar(7)");
+
+                    b.Property<string>("FrozenCompany")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FrozenPoc")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FrozenSite")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("InternalWONumber")
+                        .HasMaxLength(11)
+                        .HasColumnType("nvarchar(11)");
+
+                    b.Property<bool>("IsAddOn")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LegacyStatus")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("LifecycleStatus")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("OperationalFlags")
+                        .HasColumnType("int");
+
+                    b.Property<DateOnly?>("OriginalDate")
+                        .HasColumnType("date");
+
+                    b.Property<DateOnly?>("OriginalWeek")
+                        .HasColumnType("date");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PocName")
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("PocNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<string>("PocPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int?>("PrimaryDispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Priority")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Problem")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("RescheduleCount")
+                        .HasColumnType("int");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<bool?>("ScheduleWeekOnly")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("ScheduledDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("ScheduledEnd")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("ScheduledStart")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Service")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<int?>("ServiceId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ServiceNameSnapshot")
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("ServiceNotes")
+                        .HasMaxLength(4000)
+                        .HasColumnType("nvarchar(4000)");
+
+                    b.Property<string>("Severity")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffSignature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteCode")
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<string>("Source")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SourceEmailS3Key")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SubTrade")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateOnly?>("TargetWeek")
+                        .HasColumnType("date");
+
+                    b.Property<string>("TechPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<string>("Trade")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<decimal?>("VendorNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<string>("VendorNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<int?>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("WorkerOrderNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderTitle")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("istemplate")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("ExternalWorkOrderId")
+                        .IsUnique()
+                        .HasFilter("[ExternalWorkOrderId] IS NOT NULL AND [ExternalWorkOrderId] <> ''");
+
+                    b.HasIndex("InternalWONumber")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.HasIndex("LocationId");
+
+                    b.HasIndex("PrimaryDispatchId");
+
+                    b.HasIndex("ScheduledDate");
+
+                    b.HasIndex("ServiceId");
+
+                    b.HasIndex("SiteCode")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.HasIndex("WorkOrderType");
+
+                    b.HasIndex("AssignTo", "ScheduledDate");
+
+                    b.HasIndex("LifecycleStatus", "ScheduledDate")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.ToTable("workOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAttachments", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Category")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("workOrderAttachments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAuditLog", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Action")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ActorType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CorrelationId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("EventType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FieldName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NewValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("OldValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UserId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("WorkOrderAuditLogs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderCategories", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("workOrderCategories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderContacts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("WorkOrderContacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderExternalReceipt", b =>
+                {
+                    b.Property<long>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("bigint");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<long>("Id"));
+
+                    b.Property<string>("ExternalId")
+                        .IsRequired()
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Kind")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<DateTimeOffset>("ProcessedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("Source")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset>("UpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("VersionHash")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Source", "Kind", "ExternalId")
+                        .IsUnique()
+                        .HasDatabaseName("IX_WorkOrderExternalReceipts_Source_Kind_ExternalId");
+
+                    b.ToTable("WorkOrderExternalReceipts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderFieldLock", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("FieldName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<DateTime>("LockedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("LockedByUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkOrderId", "FieldName")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderFieldLocks");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderReconciliationJob", b =>
+                {
+                    b.Property<int>("Id")
+                        .HasColumnType("int");
+
+                    b.Property<int>("CommentsProcessed")
+                        .HasColumnType("int");
+
+                    b.Property<DateTimeOffset?>("CompletedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ErrorCode")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<Guid?>("FenceToken")
+                        .HasColumnType("uniqueidentifier");
+
+                    b.Property<DateTimeOffset?>("LeaseExpiresAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("Reason")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset?>("RequestedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<Guid>("RunId")
+                        .HasColumnType("uniqueidentifier");
+
+                    b.Property<DateTimeOffset?>("StartedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("State")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<int>("WorkOrdersProcessed")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("State");
+
+                    b.ToTable("WorkOrderReconciliationJobs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWebhookDelivery", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BodySha256")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("DeliveryId")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("EventType")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<DateTimeOffset>("OccurredAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<DateTimeOffset>("ProcessedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DeliveryId")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderWebhookDeliveries");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWeekRolledLedger", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CorrelationId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("ProcessedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateOnly>("SourceWeekStart")
+                        .HasColumnType("date");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkOrderId", "SourceWeekStart")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderWeekRolledLedgers");
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRole", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ConcurrencyStamp")
+                        .IsConcurrencyToken()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("NormalizedName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique()
+                        .HasDatabaseName("RoleNameIndex")
+                        .HasFilter("[NormalizedName] IS NOT NULL");
+
+                    b.ToTable("AspNetRoles", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRoleClaim<string>", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ClaimType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ClaimValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("RoleId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AspNetRoleClaims", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserClaim<string>", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ClaimType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ClaimValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UserId");
+
+                    b.ToTable("AspNetUserClaims", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserLogin<string>", b =>
+                {
+                    b.Property<string>("LoginProvider")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ProviderKey")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ProviderDisplayName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("LoginProvider", "ProviderKey");
+
+                    b.HasIndex("UserId");
+
+                    b.ToTable("AspNetUserLogins", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserRole<string>", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("RoleId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("UserId", "RoleId");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AspNetUserRoles", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserToken<string>", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("LoginProvider")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Value")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("UserId", "LoginProvider", "Name");
+
+                    b.ToTable("AspNetUserTokens", (string)null);
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Addresses", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany("Addresses")
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contact")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Contact");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Comments", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("Comments")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "ApplicationUser")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Comments")
+                        .HasForeignKey("WorkerOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("ApplicationUser");
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.CompletionDocTemplateProcedure", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.CompletionDocTemplate", "CompletionDocTemplate")
+                        .WithMany("Procedures")
+                        .HasForeignKey("CompletionDocTemplateId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("CompletionDocTemplate");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ContactDetails", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contact")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Contact");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany("Contacts")
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany("Contacts")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("Dispatches")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Dispatches")
+                        .HasForeignKey("WorkOrderId");
+
+                    b.Navigation("Vendor");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchChecklistItem", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("ChecklistItems")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchSignoff", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("Signoffs")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchUpliftRequest", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany()
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.VendorCompletionDocument", "EvidenceDocument")
+                        .WithMany()
+                        .HasForeignKey("EvidenceDocumentId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("EvidenceDocument");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchWorkOrder", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("DispatchWorkOrders")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Department", "Department")
+                        .WithMany("Employees")
+                        .HasForeignKey("DepartmentId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.JobTitle", "JobTitle")
+                        .WithMany("Employees")
+                        .HasForeignKey("JobTitleId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Region", "Region")
+                        .WithMany("Employees")
+                        .HasForeignKey("RegionId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Department");
+
+                    b.Navigation("JobTitle");
+
+                    b.Navigation("Region");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeAddress", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithOne("Address")
+                        .HasForeignKey("Data.SeaHavenIndustries.EmployeeAddress", "EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeEmail", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany("Emails")
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeePhone", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany("Phones")
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.FollowUps", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany()
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Employee");
+
+                    b.Navigation("Location");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.PMSchedules", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Assets", "Asset")
+                        .WithMany("PMSchedules")
+                        .HasForeignKey("AssetId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Asset");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contacts")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Quotes")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Contacts");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.QuotesLineItems", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Quotes", "Quotes")
+                        .WithMany("LineItems")
+                        .HasForeignKey("QuoteId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Quotes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Service", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.CompletionDocTemplate", "CompletionDocTemplate")
+                        .WithMany()
+                        .HasForeignKey("CompletionDocTemplateId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("CompletionDocTemplate");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ServiceWorkOrderType", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Service", "Service")
+                        .WithMany("SupportedWorkOrderTypes")
+                        .HasForeignKey("ServiceId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Service");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.SitePreferredVendor", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("SitePreferences")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Location");
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplateItem", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.TaskListTemplate", "Template")
+                        .WithMany("Items")
+                        .HasForeignKey("TaskListTemplateId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Template");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Template", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "AssignToUser")
+                        .WithMany("Templates")
+                        .HasForeignKey("AssignTo")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Category", "Category")
+                        .WithMany("Templates")
+                        .HasForeignKey("CategoryId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "POC")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Locations")
+                        .WithMany("Templates")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("AssignToUser");
+
+                    b.Navigation("Category");
+
+                    b.Navigation("Locations");
+
+                    b.Navigation("POC");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserPermissionOverride", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("User");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserServiceArea", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany("ServiceAreas")
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("User");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.VendorCompany", "Company")
+                        .WithMany("Vendors")
+                        .HasForeignKey("CompanyId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Company");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAccessToken", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany()
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAuditLog", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("AuditLogs")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Area", "Area")
+                        .WithMany()
+                        .HasForeignKey("AreaId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Area");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompletionDocument", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("CompletionDocuments")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany()
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("Vendor");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "AssignToUser")
+                        .WithMany("WorkOrders")
+                        .HasForeignKey("AssignTo")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Locations")
+                        .WithMany("workOrders")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "PrimaryDispatch")
+                        .WithMany()
+                        .HasForeignKey("PrimaryDispatchId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Service", "ServiceDefinition")
+                        .WithMany()
+                        .HasForeignKey("ServiceId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("AssignToUser");
+
+                    b.Navigation("Locations");
+
+                    b.Navigation("PrimaryDispatch");
+
+                    b.Navigation("ServiceDefinition");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAttachments", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("workOrderAttachments")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAuditLog", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("User");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderCategories", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Category", "Category")
+                        .WithMany("WorkOrderCategories")
+                        .HasForeignKey("CategoryId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("WorkOrderCategories")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Category");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderContacts", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "POC")
+                        .WithMany("WorkOrderContacts")
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("WorkOrderContacts")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("POC");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderFieldLock", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("FieldLocks")
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWeekRolledLedger", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRoleClaim<string>", b =>
+                {
+                    b.HasOne("Microsoft.AspNetCore.Identity.IdentityRole", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserClaim<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserLogin<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserRole<string>", b =>
+                {
+                    b.HasOne("Microsoft.AspNetCore.Identity.IdentityRole", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserToken<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Accounts", b =>
+                {
+                    b.Navigation("Addresses");
+
+                    b.Navigation("Contacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.Navigation("ServiceAreas");
+
+                    b.Navigation("Templates");
+
+                    b.Navigation("WorkOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.Navigation("PMSchedules");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Category", b =>
+                {
+                    b.Navigation("Templates");
+
+                    b.Navigation("WorkOrderCategories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.CompletionDocTemplate", b =>
+                {
+                    b.Navigation("Procedures");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.Navigation("WorkOrderContacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Department", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.Navigation("ChecklistItems");
+
+                    b.Navigation("Comments");
+
+                    b.Navigation("CompletionDocuments");
+
+                    b.Navigation("DispatchWorkOrders");
+
+                    b.Navigation("Signoffs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.Navigation("Address");
+
+                    b.Navigation("Emails");
+
+                    b.Navigation("Phones");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.JobTitle", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.Navigation("Contacts");
+
+                    b.Navigation("Templates");
+
+                    b.Navigation("workOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.Navigation("LineItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Region", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Service", b =>
+                {
+                    b.Navigation("SupportedWorkOrderTypes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplate", b =>
+                {
+                    b.Navigation("Items");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.Navigation("AuditLogs");
+
+                    b.Navigation("Dispatches");
+
+                    b.Navigation("SitePreferences");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.Navigation("Vendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.Navigation("Comments");
+
+                    b.Navigation("Dispatches");
+
+                    b.Navigation("FieldLocks");
+
+                    b.Navigation("Quotes");
+
+                    b.Navigation("WorkOrderCategories");
+
+                    b.Navigation("WorkOrderContacts");
+
+                    b.Navigation("workOrderAttachments");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/Data.SeaHavenIndustries/Migrations/20260925135234_CompletionDocTemplateProcedures.cs b/Data.SeaHavenIndustries/Migrations/20260925135234_CompletionDocTemplateProcedures.cs
new file mode 100644
index 0000000..d82e1d1
--- /dev/null
+++ b/Data.SeaHavenIndustries/Migrations/20260925135234_CompletionDocTemplateProcedures.cs
@@ -0,0 +1,59 @@
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Data.SeaHavenIndustries.Migrations
+{
+    /// <inheritdoc />
+    public partial class CompletionDocTemplateProcedures : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.AddColumn<string>(
+                name: "ExtraSafetyNote",
+                table: "CompletionDocTemplates",
+                type: "nvarchar(2000)",
+                maxLength: 2000,
+                nullable: true);
+
+            migrationBuilder.CreateTable(
+                name: "CompletionDocTemplateProcedures",
+                columns: table => new
+                {
+                    Id = table.Column<int>(type: "int", nullable: false)
+                        .Annotation("SqlServer:Identity", "1, 1"),
+                    CompletionDocTemplateId = table.Column<int>(type: "int", nullable: false),
+                    SortOrder = table.Column<int>(type: "int", nullable: false),
+                    Name = table.Column<string>(type: "nvarchar(200)", maxLength: 200, nullable: false),
+                    Description = table.Column<string>(type: "nvarchar(max)", nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("PK_CompletionDocTemplateProcedures", x => x.Id);
+                    table.ForeignKey(
+                        name: "FK_CompletionDocTemplateProcedures_CompletionDocTemplates_CompletionDocTemplateId",
+                        column: x => x.CompletionDocTemplateId,
+                        principalTable: "CompletionDocTemplates",
+                        principalColumn: "Id",
+                        onDelete: ReferentialAction.Cascade);
+                });
+
+            migrationBuilder.CreateIndex(
+                name: "IX_CompletionDocTemplateProcedures_CompletionDocTemplateId_SortOrder",
+                table: "CompletionDocTemplateProcedures",
+                columns: new[] { "CompletionDocTemplateId", "SortOrder" });
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropTable(
+                name: "CompletionDocTemplateProcedures");
+
+            migrationBuilder.DropColumn(
+                name: "ExtraSafetyNote",
+                table: "CompletionDocTemplates");
+        }
+    }
+}
diff --git a/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs b/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
index 4a3d3c9..795219d 100644
--- a/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
+++ b/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
@@ -523,6 +523,10 @@ namespace Data.SeaHavenIndustries.Migrations
                     b.Property<DateTime?>("DeletionTime")
                         .HasColumnType("datetime2");
 
+                    b.Property<string>("ExtraSafetyNote")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
                     b.Property<bool>("IsActive")
                         .HasColumnType("bit");
 
@@ -560,6 +564,36 @@ namespace Data.SeaHavenIndustries.Migrations
                     b.ToTable("CompletionDocTemplates");
                 });
 
+            modelBuilder.Entity("Data.SeaHavenIndustries.CompletionDocTemplateProcedure", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("CompletionDocTemplateId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Description")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CompletionDocTemplateId", "SortOrder");
+
+                    b.ToTable("CompletionDocTemplateProcedures");
+                });
+
             modelBuilder.Entity("Data.SeaHavenIndustries.ContactDetails", b =>
                 {
                     b.Property<int>("Id")
@@ -3481,6 +3515,17 @@ namespace Data.SeaHavenIndustries.Migrations
                     b.Navigation("WorkOrder");
                 });
 
+            modelBuilder.Entity("Data.SeaHavenIndustries.CompletionDocTemplateProcedure", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.CompletionDocTemplate", "CompletionDocTemplate")
+                        .WithMany("Procedures")
+                        .HasForeignKey("CompletionDocTemplateId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("CompletionDocTemplate");
+                });
+
             modelBuilder.Entity("Data.SeaHavenIndustries.ContactDetails", b =>
                 {
                     b.HasOne("Data.SeaHavenIndustries.Contacts", "Contact")
@@ -4108,6 +4153,11 @@ namespace Data.SeaHavenIndustries.Migrations
                     b.Navigation("WorkOrderCategories");
                 });
 
+            modelBuilder.Entity("Data.SeaHavenIndustries.CompletionDocTemplate", b =>
+                {
+                    b.Navigation("Procedures");
+                });
+
             modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
                 {
                     b.Navigation("WorkOrderContacts");
diff --git a/Data.SeaHavenIndustries/Models/CompletionDocTemplate.cs b/Data.SeaHavenIndustries/Models/CompletionDocTemplate.cs
index 17cb4d3..c0bb517 100644
--- a/Data.SeaHavenIndustries/Models/CompletionDocTemplate.cs
+++ b/Data.SeaHavenIndustries/Models/CompletionDocTemplate.cs
@@ -4,10 +4,32 @@ namespace Data.SeaHavenIndustries
 {
     public class CompletionDocTemplate : FullAuditEntity
     {
+        public const int ExtraSafetyNoteMaxLength = 2000;
+
         public string Name { get; set; } = "";
         public string ServiceKey { get; set; } = "";
         public WorkOrderType? WorkOrderType { get; set; }
         public string TemplateUrl { get; set; } = "";
         public bool IsActive { get; set; } = true;
+
+        // At most one template-specific note, printed after the standard
+        // safety bullets every generated document carries.
+        public string? ExtraSafetyNote { get; set; }
+
+        public virtual ICollection<CompletionDocTemplateProcedure> Procedures { get; set; } = new List<CompletionDocTemplateProcedure>();
+    }
+
+    // Ordered procedure step of a completion document template. SortOrder is the
+    // position the author gave it; documents print procedures in that order.
+    public class CompletionDocTemplateProcedure
+    {
+        public const int NameMaxLength = 200;
+
+        public int Id { get; set; }
+        public int CompletionDocTemplateId { get; set; }
+        public virtual CompletionDocTemplate? CompletionDocTemplate { get; set; }
+        public int SortOrder { get; set; }
+        public string Name { get; set; } = "";
+        public string Description { get; set; } = "";
     }
 }
diff --git a/SeaHaven.DataServices/Implementation/CompletionDocTemplateDataService.cs b/SeaHaven.DataServices/Implementation/CompletionDocTemplateDataService.cs
index 356b623..0b46c61 100644
--- a/SeaHaven.DataServices/Implementation/CompletionDocTemplateDataService.cs
+++ b/SeaHaven.DataServices/Implementation/CompletionDocTemplateDataService.cs
@@ -1,6 +1,7 @@
 using Data.SeaHavenIndustries;
 using Data.SeaHavenIndustries.Enums;
 using Microsoft.EntityFrameworkCore;
+using SeaHaven.DataServices.Helpers;
 using SeaHaven.DataServices.Interfaces;
 
 namespace SeaHaven.DataServices.Implementation
@@ -14,33 +15,6 @@ namespace SeaHaven.DataServices.Implementation
             _context = context;
         }
 
-        public async Task<IReadOnlyList<CompletionDocTemplateRow>> GetActiveAsync(string? serviceKey, WorkOrderType? workOrderType)
-        {
-            var query = _context.CompletionDocTemplates
-                .AsNoTracking()
-                .Where(t => t.IsActive && t.IsDeleted != true);
-
-            if (!string.IsNullOrWhiteSpace(serviceKey))
-                query = query.Where(t => t.ServiceKey == serviceKey);
-
-            if (workOrderType.HasValue)
-                query = query.Where(t => t.WorkOrderType == null || t.WorkOrderType == workOrderType);
-
-            return await query
-                .OrderBy(t => t.Name)
-                .Select(MapRow)
-                .ToListAsync();
-        }
-
-        public async Task<CompletionDocTemplateRow?> GetByIdAsync(int id)
-        {
-            return await _context.CompletionDocTemplates
-                .AsNoTracking()
-                .Where(t => t.Id == id && t.IsDeleted != true)
-                .Select(MapRow)
-                .FirstOrDefaultAsync();
-        }
-
         public async Task<CompletionDocTemplateRow?> ResolveForWorkOrderAsync(string? trade, WorkOrderType? workOrderType)
         {
             if (!string.IsNullOrWhiteSpace(trade))
@@ -70,33 +44,146 @@ namespace SeaHaven.DataServices.Implementation
                 .FirstOrDefaultAsync();
         }
 
-        public async Task<CompletionDocTemplate> CreateAsync(CompletionDocTemplate template)
+        public async Task<IReadOnlyList<CompletionDocTemplateDetailRow>> ListAsync(
+            string? search,
+            string? serviceKey,
+            WorkOrderType? workOrderType,
+            CancellationToken cancellationToken)
+        {
+            var query = _context.CompletionDocTemplates
+                .AsNoTracking()
+                .Where(t => t.IsActive && t.IsDeleted != true);
+
+            if (!string.IsNullOrWhiteSpace(serviceKey))
+                query = query.Where(t => t.ServiceKey == serviceKey);
+
+            if (workOrderType.HasValue)
+                query = query.Where(t => t.WorkOrderType == null || t.WorkOrderType == workOrderType);
+
+            if (!string.IsNullOrWhiteSpace(search))
+            {
+                var term = search.Trim().ToLower();
+                query = query.Where(t => t.Name.ToLower().Contains(term));
+            }
+
+            return await ProjectDetail(query).ToListAsync(cancellationToken);
+        }
+
+        public async Task<CompletionDocTemplateDetailRow?> GetDetailAsync(int id, CancellationToken cancellationToken)
+        {
+            var query = _context.CompletionDocTemplates
+                .AsNoTracking()
+                .Where(t => t.Id == id && t.IsDeleted != true);
+
+            return await ProjectDetail(query).FirstOrDefaultAsync(cancellationToken);
+        }
+
+        public Task<CompletionDocTemplate?> GetTrackedForEditAsync(int id, CancellationToken cancellationToken)
+            => _context.CompletionDocTemplates
+                .Include(t => t.Procedures)
+                .FirstOrDefaultAsync(t => t.Id == id && t.IsDeleted != true, cancellationToken);
+
+        public async Task<int> CreateAsync(CompletionDocTemplate template, CancellationToken cancellationToken)
         {
             template.CreatedDate = DateTime.UtcNow;
-            await _context.CompletionDocTemplates.AddAsync(template);
-            await _context.SaveChangesAsync();
-            return template;
+            await _context.CompletionDocTemplates.AddAsync(template, cancellationToken);
+            await _context.SaveChangesAsync(cancellationToken);
+            return template.Id;
         }
 
-        public async Task UpdateAsync(CompletionDocTemplate template)
+        public async Task SaveEditAsync(
+            CompletionDocTemplate template,
+            IReadOnlyList<CompletionDocTemplateProcedure>? replacementProcedures,
+            CancellationToken cancellationToken)
         {
+            if (replacementProcedures != null)
+            {
+                // Explicit removal: the context forces Restrict on every FK before the
+                // procedure cascade is configured, so orphan deletion is not relied on.
+                _context.CompletionDocTemplateProcedures.RemoveRange(template.Procedures.ToList());
+                foreach (var procedure in replacementProcedures)
+                {
+                    procedure.CompletionDocTemplateId = template.Id;
+                    _context.CompletionDocTemplateProcedures.Add(procedure);
+                }
+            }
+
             template.LastModificationTime = DateTime.UtcNow;
-            _context.CompletionDocTemplates.Update(template);
-            await _context.SaveChangesAsync();
+            await _context.SaveChangesAsync(cancellationToken);
         }
 
-        public async Task<bool> DeleteAsync(int id)
+        public async Task<bool> DeleteAndUnlinkServicesAsync(
+            int id,
+            string? deleterUserId,
+            CancellationToken cancellationToken)
         {
-            var entity = await _context.CompletionDocTemplates.FindAsync(id);
-            if (entity == null)
+            var template = await _context.CompletionDocTemplates
+                .FirstOrDefaultAsync(t => t.Id == id && t.IsDeleted != true, cancellationToken);
+            if (template == null)
                 return false;
 
-            entity.IsDeleted = true;
-            entity.DeletionTime = DateTime.UtcNow;
-            await _context.SaveChangesAsync();
+            var now = DateTime.UtcNow;
+            template.IsDeleted = true;
+            template.DeletionTime = now;
+            template.DeleterUserId = deleterUserId;
+
+            var linkedServices = await _context.Services
+                .Where(s => s.CompletionDocTemplateId == id)
+                .ToListAsync(cancellationToken);
+            foreach (var service in linkedServices)
+            {
+                service.CompletionDocTemplateId = null;
+                service.LastModificationTime = now;
+            }
+
+            await _context.SaveChangesAsync(cancellationToken);
             return true;
         }
 
+        public async Task<IReadOnlyList<int>> GetOpenLinkedWorkOrderIdsAsync(
+            int templateId,
+            int? accountId,
+            CancellationToken cancellationToken)
+        {
+            var workOrders = WorkOrderBoardQueryFilters.ApplyBaseScope(_context.workOrders.AsNoTracking());
+            if (accountId.HasValue)
+                workOrders = WorkOrderBoardQueryFilters.ApplyAccountScope(workOrders, accountId.Value);
+
+            var linkedServiceIds = _context.Services
+                .Where(s => s.CompletionDocTemplateId == templateId)
+                .Select(s => (int?)s.Id);
+
+            return await workOrders
+                .Where(w => w.ServiceId != null && linkedServiceIds.Contains(w.ServiceId))
+                .Where(w => !LifecycleStatusSets.Terminal.Contains(w.LifecycleStatus))
+                .OrderBy(w => w.Id)
+                .Select(w => w.Id)
+                .ToListAsync(cancellationToken);
+        }
+
+        private IQueryable<CompletionDocTemplateDetailRow> ProjectDetail(IQueryable<CompletionDocTemplate> templates)
+            => from t in templates
+               join u in _context.Users on t.createdby equals u.Id into creators
+               from creator in creators.DefaultIfEmpty()
+               orderby t.Name, t.Id
+               select new CompletionDocTemplateDetailRow(
+                   t.Id,
+                   t.Name,
+                   t.ServiceKey,
+                   t.WorkOrderType,
+                   t.TemplateUrl,
+                   t.IsActive,
+                   t.ExtraSafetyNote,
+                   t.CreatedDate,
+                   t.LastModificationTime,
+                   creator != null ? creator.FirstName : null,
+                   creator != null ? creator.LastName : null,
+                   t.Procedures
+                       .OrderBy(p => p.SortOrder)
+                       .ThenBy(p => p.Id)
+                       .Select(p => new CompletionDocTemplateProcedureRow(p.Id, p.SortOrder, p.Name, p.Description))
+                       .ToList());
+
         private static readonly System.Linq.Expressions.Expression<Func<CompletionDocTemplate, CompletionDocTemplateRow>> MapRow =
             t => new CompletionDocTemplateRow(t.Id, t.Name, t.ServiceKey, t.WorkOrderType, t.TemplateUrl, t.IsActive);
     }
diff --git a/SeaHaven.DataServices/Implementation/WorkOrderCompletionDataService.cs b/SeaHaven.DataServices/Implementation/WorkOrderCompletionDataService.cs
index 0dae9d5..269745b 100644
--- a/SeaHaven.DataServices/Implementation/WorkOrderCompletionDataService.cs
+++ b/SeaHaven.DataServices/Implementation/WorkOrderCompletionDataService.cs
@@ -41,9 +41,6 @@ namespace SeaHaven.DataServices.Implementation
         public void SetExpectedWorkOrderVersion(WorkOrder workOrder, byte[] version)
             => _context.Entry(workOrder).Property(w => w.RowVersion).OriginalValue = version;
 
-        public Task<CompletionDocTemplate?> GetTrackedTemplateAsync(int id, CancellationToken cancellationToken)
-            => _context.CompletionDocTemplates.FirstOrDefaultAsync(t => t.Id == id && t.IsDeleted != true, cancellationToken);
-
         public Task SaveAsync(CancellationToken cancellationToken)
             => _context.SaveChangesAsync(cancellationToken);
     }
diff --git a/SeaHaven.DataServices/Interfaces/CompletionDocTemplateModels.cs b/SeaHaven.DataServices/Interfaces/CompletionDocTemplateModels.cs
new file mode 100644
index 0000000..688c3ea
--- /dev/null
+++ b/SeaHaven.DataServices/Interfaces/CompletionDocTemplateModels.cs
@@ -0,0 +1,26 @@
+using Data.SeaHavenIndustries.Enums;
+
+namespace SeaHaven.DataServices.Interfaces
+{
+    public record CompletionDocTemplateProcedureRow(
+        int Id,
+        int SortOrder,
+        string Name,
+        string Description);
+
+    // Read model for the completion document templates registry: the legacy
+    // columns plus authored content and audit display data.
+    public record CompletionDocTemplateDetailRow(
+        int Id,
+        string Name,
+        string ServiceKey,
+        WorkOrderType? WorkOrderType,
+        string TemplateUrl,
+        bool IsActive,
+        string? ExtraSafetyNote,
+        DateTime? CreatedAt,
+        DateTime? UpdatedAt,
+        string? CreatedByFirstName,
+        string? CreatedByLastName,
+        IReadOnlyList<CompletionDocTemplateProcedureRow> Procedures);
+}
diff --git a/SeaHaven.DataServices/Interfaces/IWorkOrderCompletionDataService.cs b/SeaHaven.DataServices/Interfaces/IWorkOrderCompletionDataService.cs
index 3116652..7b48297 100644
--- a/SeaHaven.DataServices/Interfaces/IWorkOrderCompletionDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IWorkOrderCompletionDataService.cs
@@ -15,7 +15,6 @@ namespace SeaHaven.DataServices.Interfaces
             CancellationToken cancellationToken);
 
         void SetExpectedWorkOrderVersion(WorkOrder workOrder, byte[] version);
-        Task<CompletionDocTemplate?> GetTrackedTemplateAsync(int id, CancellationToken cancellationToken);
         Task SaveAsync(CancellationToken cancellationToken);
     }
 }
diff --git a/SeaHaven.DataServices/Interfaces/IWorkOrderDetailDataService.cs b/SeaHaven.DataServices/Interfaces/IWorkOrderDetailDataService.cs
index c934028..78104ca 100644
--- a/SeaHaven.DataServices/Interfaces/IWorkOrderDetailDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IWorkOrderDetailDataService.cs
@@ -25,11 +25,43 @@ namespace SeaHaven.DataServices.Interfaces
 
     public interface ICompletionDocTemplateDataService
     {
-        Task<IReadOnlyList<CompletionDocTemplateRow>> GetActiveAsync(string? serviceKey, WorkOrderType? workOrderType);
-        Task<CompletionDocTemplateRow?> GetByIdAsync(int id);
         Task<CompletionDocTemplateRow?> ResolveForWorkOrderAsync(string? trade, WorkOrderType? workOrderType);
-        Task<CompletionDocTemplate> CreateAsync(CompletionDocTemplate template);
-        Task UpdateAsync(CompletionDocTemplate template);
-        Task<bool> DeleteAsync(int id);
+
+        Task<IReadOnlyList<CompletionDocTemplateDetailRow>> ListAsync(
+            string? search,
+            string? serviceKey,
+            WorkOrderType? workOrderType,
+            CancellationToken cancellationToken);
+
+        Task<CompletionDocTemplateDetailRow?> GetDetailAsync(int id, CancellationToken cancellationToken);
+
+        /// <summary>Tracked, not-deleted template with its procedures loaded, for editing.</summary>
+        Task<CompletionDocTemplate?> GetTrackedForEditAsync(int id, CancellationToken cancellationToken);
+
+        Task<int> CreateAsync(CompletionDocTemplate template, CancellationToken cancellationToken);
+
+        /// <summary>
+        /// Commits edits to a template from <see cref="GetTrackedForEditAsync"/>. A non-null
+        /// <paramref name="replacementProcedures"/> replaces the whole procedure list.
+        /// </summary>
+        Task SaveEditAsync(
+            CompletionDocTemplate template,
+            IReadOnlyList<CompletionDocTemplateProcedure>? replacementProcedures,
+            CancellationToken cancellationToken);
+
+        /// <summary>
+        /// Soft-deletes the template and clears every Service link to it in the same commit.
+        /// Services keep RequiresCompletionDocument. False when the template does not exist.
+        /// </summary>
+        Task<bool> DeleteAndUnlinkServicesAsync(int id, string? deleterUserId, CancellationToken cancellationToken);
+
+        /// <summary>
+        /// Ids of open (non-terminal) work orders whose Service links this template,
+        /// restricted to <paramref name="accountId"/> when set.
+        /// </summary>
+        Task<IReadOnlyList<int>> GetOpenLinkedWorkOrderIdsAsync(
+            int templateId,
+            int? accountId,
+            CancellationToken cancellationToken);
     }
 }
diff --git a/SeaHaven.Services/DTOs/WorkOrderDetailDTOs.cs b/SeaHaven.Services/DTOs/WorkOrderDetailDTOs.cs
index c16da2e..3c72403 100644
--- a/SeaHaven.Services/DTOs/WorkOrderDetailDTOs.cs
+++ b/SeaHaven.Services/DTOs/WorkOrderDetailDTOs.cs
@@ -30,13 +30,48 @@ namespace SeaHaven.Services.DTOs
         public bool IsActive { get; set; }
     }
 
+    // Completion document templates registry item and detail (same shape).
+    public class CompletionDocTemplateDetailDto : CompletionDocTemplateDto
+    {
+        public string? ExtraSafetyNote { get; set; }
+        public List<CompletionDocTemplateProcedureDto> Procedures { get; set; } = new();
+        public DateTime? CreatedAt { get; set; }
+        public DateTime? UpdatedAt { get; set; }
+        public string? CreatedByName { get; set; }
+    }
+
+    public class CompletionDocTemplateProcedureDto
+    {
+        public int Id { get; set; }
+        public string Name { get; set; } = "";
+        public string Description { get; set; } = "";
+        public int SortOrder { get; set; }
+    }
+
+    // Create/update body. Legacy fields are optional: on update, null leaves the
+    // stored value unchanged, as does a null Procedures list. ExtraSafetyNote is
+    // always applied, so null removes the note.
     public class CompletionDocTemplateCreateDto
     {
-        public string Name { get; set; } = "";
-        public string ServiceKey { get; set; } = "";
+        public string? Name { get; set; }
+        public string? ExtraSafetyNote { get; set; }
+        public List<CompletionDocTemplateProcedureInputDto>? Procedures { get; set; }
+        public string? ServiceKey { get; set; }
         public WorkOrderType? WorkOrderType { get; set; }
-        public string TemplateUrl { get; set; } = "";
-        public bool IsActive { get; set; } = true;
+        public string? TemplateUrl { get; set; }
+        public bool? IsActive { get; set; }
+    }
+
+    public class CompletionDocTemplateProcedureInputDto
+    {
+        public string? Name { get; set; }
+        public string? Description { get; set; }
+    }
+
+    public class CompletionDocTemplateLinkedWorkOrdersDto
+    {
+        public int Count { get; set; }
+        public List<int> WorkOrderIds { get; set; } = new();
     }
 
     public class WorkOrderCompletionDto
diff --git a/SeaHaven.Services/Implementation/CompletionDocTemplateService.cs b/SeaHaven.Services/Implementation/CompletionDocTemplateService.cs
new file mode 100644
index 0000000..6f95833
--- /dev/null
+++ b/SeaHaven.Services/Implementation/CompletionDocTemplateService.cs
@@ -0,0 +1,259 @@
+using System.Security.Claims;
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using SeaHaven.DataServices.Interfaces;
+using SeaHaven.Services.Constants;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Exceptions;
+using SeaHaven.Services.Interfaces;
+
+namespace SeaHaven.Services.Implementation
+{
+    public sealed class CompletionDocTemplateService : ICompletionDocTemplateService
+    {
+        private readonly ICompletionDocTemplateDataService _templateData;
+        private readonly ITeamPermissionOverrideDataService _permissionUsers;
+        private readonly ITeamPermissionPolicy _permissionPolicy;
+        private readonly IWorkOrderAccountResolver _accountResolver;
+
+        public CompletionDocTemplateService(
+            ICompletionDocTemplateDataService templateData,
+            ITeamPermissionOverrideDataService permissionUsers,
+            ITeamPermissionPolicy permissionPolicy,
+            IWorkOrderAccountResolver accountResolver)
+        {
+            _templateData = templateData;
+            _permissionUsers = permissionUsers;
+            _permissionPolicy = permissionPolicy;
+            _accountResolver = accountResolver;
+        }
+
+        public async Task<IReadOnlyList<CompletionDocTemplateDetailDto>> ListAsync(
+            string? search,
+            string? serviceKey,
+            WorkOrderType? workOrderType,
+            CancellationToken cancellationToken)
+        {
+            var rows = await _templateData.ListAsync(search, serviceKey, workOrderType, cancellationToken);
+            return rows.Select(Map).ToList();
+        }
+
+        public async Task<CompletionDocTemplateDetailDto?> GetAsync(int id, CancellationToken cancellationToken)
+        {
+            var row = await _templateData.GetDetailAsync(id, cancellationToken);
+            return row == null ? null : Map(row);
+        }
+
+        public async Task<CompletionDocTemplateLinkedWorkOrdersDto> GetLinkedWorkOrdersAsync(
+            ClaimsPrincipal user,
+            int id,
+            CancellationToken cancellationToken)
+        {
+            var accountId = _accountResolver.ResolveAccountFilter(user);
+
+            if (await _templateData.GetDetailAsync(id, cancellationToken) == null)
+                throw NotFound();
+
+            var ids = await _templateData.GetOpenLinkedWorkOrderIdsAsync(id, accountId, cancellationToken);
+            return new CompletionDocTemplateLinkedWorkOrdersDto { Count = ids.Count, WorkOrderIds = ids.ToList() };
+        }
+
+        public async Task<CompletionDocTemplateDetailDto> CreateAsync(
+            ClaimsPrincipal user,
+            CompletionDocTemplateCreateDto request,
+            CancellationToken cancellationToken)
+        {
+            var actorId = await EnsureAllowedAsync(
+                user,
+                TeamPermissionKeys.CreateCompletionDocTemplates,
+                "You do not have permission to create completion document templates.",
+                cancellationToken);
+
+            var input = Validate(request);
+            var entity = new CompletionDocTemplate
+            {
+                Name = input.Name,
+                ExtraSafetyNote = input.ExtraSafetyNote,
+                ServiceKey = input.ServiceKey ?? "",
+                WorkOrderType = request.WorkOrderType,
+                TemplateUrl = input.TemplateUrl ?? "",
+                IsActive = request.IsActive ?? true,
+                createdby = actorId,
+                Procedures = (input.Procedures ?? new List<CompletionDocTemplateProcedure>()).ToList()
+            };
+
+            var id = await _templateData.CreateAsync(entity, cancellationToken);
+            return await GetSavedAsync(id, cancellationToken);
+        }
+
+        public async Task<CompletionDocTemplateDetailDto> UpdateAsync(
+            ClaimsPrincipal user,
+            int id,
+            CompletionDocTemplateCreateDto request,
+            CancellationToken cancellationToken)
+        {
+            await EnsureAllowedAsync(
+                user,
+                TeamPermissionKeys.EditCompletionDocTemplates,
+                "You do not have permission to edit completion document templates.",
+                cancellationToken);
+
+            var input = Validate(request);
+            var entity = await _templateData.GetTrackedForEditAsync(id, cancellationToken) ?? throw NotFound();
+
+            entity.Name = input.Name;
+            entity.ExtraSafetyNote = input.ExtraSafetyNote;
+            if (input.ServiceKey != null)
+                entity.ServiceKey = input.ServiceKey;
+            if (request.WorkOrderType.HasValue)
+                entity.WorkOrderType = request.WorkOrderType;
+            if (input.TemplateUrl != null)
+                entity.TemplateUrl = input.TemplateUrl;
+            if (request.IsActive.HasValue)
+                entity.IsActive = request.IsActive.Value;
+
+            await _templateData.SaveEditAsync(entity, input.Procedures, cancellationToken);
+            return await GetSavedAsync(id, cancellationToken);
+        }
+
+        public async Task DeleteAsync(ClaimsPrincipal user, int id, CancellationToken cancellationToken)
+        {
+            var actorId = await EnsureAllowedAsync(
+                user,
+                TeamPermissionKeys.DeleteCompletionDocTemplates,
+                "You do not have permission to delete completion document templates.",
+                cancellationToken);
+
+            if (!await _templateData.DeleteAndUnlinkServicesAsync(id, actorId, cancellationToken))
+                throw NotFound();
+        }
+
+        private async Task<string> EnsureAllowedAsync(
+            ClaimsPrincipal user,
+            string permissionKey,
+            string deniedMessage,
+            CancellationToken cancellationToken)
+        {
+            var userId = user?.FindFirstValue(ClaimTypes.NameIdentifier);
+            var permissionUser = string.IsNullOrWhiteSpace(userId)
+                ? null
+                : await _permissionUsers.GetUserAsync(userId, cancellationToken);
+
+            if (permissionUser is null
+                || !_permissionPolicy.IsAllowed(permissionUser.RoleName, permissionKey, permissionUser.Overrides))
+            {
+                throw new WorkOrderBoardValidationException("Forbidden", deniedMessage);
+            }
+
+            return userId!;
+        }
+
+        private async Task<CompletionDocTemplateDetailDto> GetSavedAsync(int id, CancellationToken cancellationToken)
+        {
+            var row = await _templateData.GetDetailAsync(id, cancellationToken) ?? throw NotFound();
+            return Map(row);
+        }
+
+        private sealed record ValidatedInput(
+            string Name,
+            string? ExtraSafetyNote,
+            string? ServiceKey,
+            string? TemplateUrl,
+            IReadOnlyList<CompletionDocTemplateProcedure>? Procedures);
+
+        private static ValidatedInput Validate(CompletionDocTemplateCreateDto request)
+        {
+            if (request == null || string.IsNullOrWhiteSpace(request.Name))
+                throw new WorkOrderBoardValidationException("TitleRequired", "Document Title is required.");
+
+            var extraSafetyNote = string.IsNullOrWhiteSpace(request.ExtraSafetyNote)
+                ? null
+                : request.ExtraSafetyNote.Trim();
+            if (extraSafetyNote?.Length > CompletionDocTemplate.ExtraSafetyNoteMaxLength)
+            {
+                throw new WorkOrderBoardValidationException(
+                    "InvalidValue",
+                    $"Extra safety note must be {CompletionDocTemplate.ExtraSafetyNoteMaxLength} characters or fewer.");
+            }
+
+            var templateUrl = request.TemplateUrl?.Trim();
+            if (!string.IsNullOrEmpty(templateUrl)
+                && (!Uri.TryCreate(templateUrl, UriKind.Absolute, out var uri)
+                    || (uri.Scheme != Uri.UriSchemeHttp && uri.Scheme != Uri.UriSchemeHttps)))
+            {
+                throw new WorkOrderBoardValidationException("InvalidValue", "TemplateUrl must be an absolute http(s) URL.");
+            }
+
+            // Blank procedure names and descriptions are allowed: authors may keep a
+            // placeholder step and fill it in later.
+            List<CompletionDocTemplateProcedure>? procedures = null;
+            if (request.Procedures != null)
+            {
+                procedures = new List<CompletionDocTemplateProcedure>(request.Procedures.Count);
+                foreach (var procedure in request.Procedures)
+                {
+                    var name = procedure?.Name?.Trim() ?? "";
+                    if (name.Length > CompletionDocTemplateProcedure.NameMaxLength)
+                    {
+                        throw new WorkOrderBoardValidationException(
+                            "InvalidValue",
+                            $"Procedure name must be {CompletionDocTemplateProcedure.NameMaxLength} characters or fewer.");
+                    }
+
+                    procedures.Add(new CompletionDocTemplateProcedure
+                    {
+                        SortOrder = procedures.Count,
+                        Name = name,
+                        Description = procedure?.Description ?? ""
+                    });
+                }
+            }
+
+            return new ValidatedInput(
+                request.Name.Trim(),
+                extraSafetyNote,
+                request.ServiceKey?.Trim(),
+                templateUrl,
+                procedures);
+        }
+
+        private static WorkOrderBoardValidationException NotFound()
+            => new("NotFound", "Template not found.");
+
+        private static CompletionDocTemplateDetailDto Map(CompletionDocTemplateDetailRow row)
+        {
+            var createdByName = string.Join(
+                " ",
+                new[] { row.CreatedByFirstName, row.CreatedByLastName }
+                    .Where(part => !string.IsNullOrWhiteSpace(part))
+                    .Select(part => part!.Trim()));
+
+            return new CompletionDocTemplateDetailDto
+            {
+                Id = row.Id,
+                Name = row.Name,
+                ServiceKey = row.ServiceKey,
+                WorkOrderType = row.WorkOrderType,
+                TemplateUrl = row.TemplateUrl,
+                IsActive = row.IsActive,
+                ExtraSafetyNote = row.ExtraSafetyNote,
+                Procedures = row.Procedures
+                    .Select(p => new CompletionDocTemplateProcedureDto
+                    {
+                        Id = p.Id,
+                        Name = p.Name,
+                        Description = p.Description,
+                        SortOrder = p.SortOrder
+                    })
+                    .ToList(),
+                CreatedAt = AsUtc(row.CreatedAt),
+                UpdatedAt = AsUtc(row.UpdatedAt),
+                CreatedByName = createdByName.Length == 0 ? null : createdByName
+            };
+        }
+
+        // Audit timestamps are written as DateTime.UtcNow; the store drops the kind.
+        private static DateTime? AsUtc(DateTime? value)
+            => value.HasValue ? DateTime.SpecifyKind(value.Value, DateTimeKind.Utc) : null;
+    }
+}
diff --git a/SeaHaven.Services/Implementation/WorkOrderCompletionService.cs b/SeaHaven.Services/Implementation/WorkOrderCompletionService.cs
index 534cd6b..1ed1876 100644
--- a/SeaHaven.Services/Implementation/WorkOrderCompletionService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderCompletionService.cs
@@ -31,18 +31,6 @@ namespace SeaHaven.Services.Implementation
             _accountResolver = accountResolver;
         }
 
-        public async Task<IReadOnlyList<CompletionDocTemplateDto>> GetTemplatesAsync(string? serviceKey, WorkOrderType? workOrderType)
-        {
-            var rows = await _templateData.GetActiveAsync(serviceKey, workOrderType);
-            return rows.Select(WorkOrderDetailService.MapTemplate).ToList();
-        }
-
-        public async Task<CompletionDocTemplateDto?> GetTemplateByIdAsync(int id)
-        {
-            var row = await _templateData.GetByIdAsync(id);
-            return row == null ? null : WorkOrderDetailService.MapTemplate(row);
-        }
-
         public async Task EnsureCanUploadCompletionDocAsync(
             int workOrderId,
             ClaimsPrincipal user,
@@ -125,49 +113,6 @@ namespace SeaHaven.Services.Implementation
             };
         }
 
-        public async Task<CompletionDocTemplateDto> CreateTemplateAsync(CompletionDocTemplateCreateDto request)
-        {
-            ValidateTemplateRequest(request);
-
-            var entity = new CompletionDocTemplate
-            {
-                Name = request.Name.Trim(),
-                ServiceKey = request.ServiceKey.Trim(),
-                WorkOrderType = request.WorkOrderType,
-                TemplateUrl = request.TemplateUrl.Trim(),
-                IsActive = request.IsActive
-            };
-
-            var created = await _templateData.CreateAsync(entity);
-            return WorkOrderDetailService.MapTemplate(new CompletionDocTemplateRow(
-                created.Id, created.Name, created.ServiceKey, created.WorkOrderType, created.TemplateUrl, created.IsActive));
-        }
-
-        public async Task<CompletionDocTemplateDto> UpdateTemplateAsync(int id, CompletionDocTemplateCreateDto request)
-        {
-            ValidateTemplateRequest(request);
-
-            var entity = await _completionData.GetTrackedTemplateAsync(id, CancellationToken.None);
-            if (entity == null)
-                throw new WorkOrderBoardValidationException("NotFound", "Template not found.");
-
-            entity.Name = request.Name.Trim();
-            entity.ServiceKey = request.ServiceKey.Trim();
-            entity.WorkOrderType = request.WorkOrderType;
-            entity.TemplateUrl = request.TemplateUrl.Trim();
-            entity.IsActive = request.IsActive;
-
-            await _templateData.UpdateAsync(entity);
-            return WorkOrderDetailService.MapTemplate(new CompletionDocTemplateRow(
-                entity.Id, entity.Name, entity.ServiceKey, entity.WorkOrderType, entity.TemplateUrl, entity.IsActive));
-        }
-
-        public async Task DeleteTemplateAsync(int id)
-        {
-            if (!await _templateData.DeleteAsync(id))
-                throw new WorkOrderBoardValidationException("NotFound", "Template not found.");
-        }
-
         private async Task<WorkOrder> GetMutableWorkOrderForAuthAsync(
             int workOrderId,
             ClaimsPrincipal user,
@@ -185,21 +130,6 @@ namespace SeaHaven.Services.Implementation
             return workOrder;
         }
 
-        private static void ValidateTemplateRequest(CompletionDocTemplateCreateDto request)
-        {
-            if (string.IsNullOrWhiteSpace(request.Name) || string.IsNullOrWhiteSpace(request.ServiceKey))
-                throw new WorkOrderBoardValidationException("InvalidValue", "Name and serviceKey are required.");
-
-            if (string.IsNullOrWhiteSpace(request.TemplateUrl))
-                throw new WorkOrderBoardValidationException("InvalidValue", "TemplateUrl is required.");
-
-            if (!Uri.TryCreate(request.TemplateUrl.Trim(), UriKind.Absolute, out var uri)
-                || (uri.Scheme != Uri.UriSchemeHttp && uri.Scheme != Uri.UriSchemeHttps))
-            {
-                throw new WorkOrderBoardValidationException("InvalidValue", "TemplateUrl must be an absolute http(s) URL.");
-            }
-        }
-
         private static byte[]? ParseRowVersion(string? base64)
         {
             if (string.IsNullOrWhiteSpace(base64))
diff --git a/SeaHaven.Services/Interfaces/ICompletionDocTemplateService.cs b/SeaHaven.Services/Interfaces/ICompletionDocTemplateService.cs
new file mode 100644
index 0000000..c89f47a
--- /dev/null
+++ b/SeaHaven.Services/Interfaces/ICompletionDocTemplateService.cs
@@ -0,0 +1,40 @@
+using System.Security.Claims;
+using Data.SeaHavenIndustries.Enums;
+using SeaHaven.Services.DTOs;
+
+namespace SeaHaven.Services.Interfaces
+{
+    /// <summary>
+    /// Completion document templates registry: authoring (title, extra safety note,
+    /// ordered procedures), search, and safe deletion. Reads are open to every
+    /// authenticated caller; writes require the matching team permission.
+    /// </summary>
+    public interface ICompletionDocTemplateService
+    {
+        Task<IReadOnlyList<CompletionDocTemplateDetailDto>> ListAsync(
+            string? search,
+            string? serviceKey,
+            WorkOrderType? workOrderType,
+            CancellationToken cancellationToken);
+
+        Task<CompletionDocTemplateDetailDto?> GetAsync(int id, CancellationToken cancellationToken);
+
+        Task<CompletionDocTemplateLinkedWorkOrdersDto> GetLinkedWorkOrdersAsync(
+            ClaimsPrincipal user,
+            int id,
+            CancellationToken cancellationToken);
+
+        Task<CompletionDocTemplateDetailDto> CreateAsync(
+            ClaimsPrincipal user,
+            CompletionDocTemplateCreateDto request,
+            CancellationToken cancellationToken);
+
+        Task<CompletionDocTemplateDetailDto> UpdateAsync(
+            ClaimsPrincipal user,
+            int id,
+            CompletionDocTemplateCreateDto request,
+            CancellationToken cancellationToken);
+
+        Task DeleteAsync(ClaimsPrincipal user, int id, CancellationToken cancellationToken);
+    }
+}
diff --git a/SeaHaven.Services/Interfaces/IWorkOrderCompletionService.cs b/SeaHaven.Services/Interfaces/IWorkOrderCompletionService.cs
index 12c2399..eba7d90 100644
--- a/SeaHaven.Services/Interfaces/IWorkOrderCompletionService.cs
+++ b/SeaHaven.Services/Interfaces/IWorkOrderCompletionService.cs
@@ -1,13 +1,10 @@
 using System.Security.Claims;
-using Data.SeaHavenIndustries.Enums;
 using SeaHaven.Services.DTOs;
 
 namespace SeaHaven.Services.Interfaces
 {
     public interface IWorkOrderCompletionService
     {
-        Task<IReadOnlyList<CompletionDocTemplateDto>> GetTemplatesAsync(string? serviceKey, WorkOrderType? workOrderType);
-        Task<CompletionDocTemplateDto?> GetTemplateByIdAsync(int id);
         Task EnsureCanUploadCompletionDocAsync(
             int workOrderId,
             ClaimsPrincipal user,
@@ -20,8 +17,5 @@ namespace SeaHaven.Services.Interfaces
             ClaimsPrincipal user,
             string? actorId,
             CancellationToken cancellationToken = default);
-        Task<CompletionDocTemplateDto> CreateTemplateAsync(CompletionDocTemplateCreateDto request);
-        Task<CompletionDocTemplateDto> UpdateTemplateAsync(int id, CompletionDocTemplateCreateDto request);
-        Task DeleteTemplateAsync(int id);
     }
 }
diff --git a/SeaHavenIndustries.Tests/CompletionDocTemplateServiceTests.cs b/SeaHavenIndustries.Tests/CompletionDocTemplateServiceTests.cs
new file mode 100644
index 0000000..ccb49ee
--- /dev/null
+++ b/SeaHavenIndustries.Tests/CompletionDocTemplateServiceTests.cs
@@ -0,0 +1,641 @@
+using System.Reflection;
+using System.Security.Claims;
+using Api.SeaHavenIndustries.Controllers;
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using Data.SeaHavenIndustries.Migrations;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Identity;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.Data.Sqlite;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Migrations.Operations;
+using SeaHaven.DataServices.Implementation;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Exceptions;
+using SeaHaven.Services.Helpers;
+using SeaHaven.Services.Implementation;
+using Xunit;
+
+namespace SeaHavenIndustries.Tests;
+
+// Completion document templates registry: authoring with ordered procedures,
+// search, permission-gated writes, tenant-scoped linked work orders, and a
+// delete that unlinks Services without dropping their document requirement.
+public class CompletionDocTemplateServiceTests
+{
+    private const string AdminId = "admin-1";
+    private const string SchedulerId = "scheduler-1";
+    private const string DispatcherId = "dispatcher-1";
+
+    private static ApplicationDbContext NewContext()
+    {
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseInMemoryDatabase(Guid.NewGuid().ToString())
+            .Options;
+        var context = new ApplicationDbContext(options);
+        SeedUser(context, AdminId, "Admin", "Jane", "Doe");
+        SeedUser(context, SchedulerId, "Scheduler", "Sam", "Scheduler");
+        SeedUser(context, DispatcherId, "Dispatcher", "Dee", "Dispatcher");
+        context.SaveChanges();
+        return context;
+    }
+
+    private static void SeedUser(ApplicationDbContext context, string userId, string role, string first, string last)
+    {
+        context.Users.Add(new ApplicationUser
+        {
+            Id = userId,
+            UserName = userId,
+            NormalizedUserName = userId.ToUpperInvariant(),
+            FirstName = first,
+            LastName = last
+        });
+        var roleId = "role-" + role;
+        if (context.Roles.Local.All(r => r.Id != roleId))
+            context.Roles.Add(new IdentityRole { Id = roleId, Name = role, NormalizedName = role.ToUpperInvariant() });
+        context.UserRoles.Add(new IdentityUserRole<string> { UserId = userId, RoleId = roleId });
+    }
+
+    private static CompletionDocTemplateService NewService(ApplicationDbContext context) =>
+        new(
+            new CompletionDocTemplateDataService(context),
+            new TeamPermissionOverrideDataService(context),
+            new TeamPermissionPolicy(),
+            WorkOrderAccountTestHelpers.Resolver(context));
+
+    private static ClaimsPrincipal Caller(string userId, string role, int? accountId = null)
+    {
+        var claims = new List<Claim>
+        {
+            new(ClaimTypes.NameIdentifier, userId),
+            new(ClaimTypes.Role, role)
+        };
+        claims.Add(accountId.HasValue
+            ? new Claim(SeaHavenClaimTypes.AccountId, accountId.Value.ToString())
+            : new Claim(SeaHavenClaimTypes.OrgScope, SeaHavenClaimTypes.OrgScopeAll));
+        return new ClaimsPrincipal(new ClaimsIdentity(claims, authenticationType: "test"));
+    }
+
+    private static ClaimsPrincipal Admin(int? accountId = null) => Caller(AdminId, "Admin", accountId);
+    private static ClaimsPrincipal Scheduler() => Caller(SchedulerId, "Scheduler");
+    private static ClaimsPrincipal Dispatcher() => Caller(DispatcherId, "Dispatcher");
+
+    private static CompletionDocTemplateCreateDto Body(
+        string? name = "Backflow Test Report",
+        string? extraSafetyNote = null,
+        params (string? Name, string? Description)[] procedures) => new()
+        {
+            Name = name,
+            ExtraSafetyNote = extraSafetyNote,
+            Procedures = procedures
+                .Select(p => new CompletionDocTemplateProcedureInputDto { Name = p.Name, Description = p.Description })
+                .ToList()
+        };
+
+    [Fact]
+    public async Task Create_PersistsTitleNoteAndProceduresInSubmittedOrder()
+    {
+        using var context = NewContext();
+        var service = NewService(context);
+
+        var created = await service.CreateAsync(
+            Admin(),
+            Body("  Backflow Test Report  ", " Wear gloves ",
+                ("Backflow Procedure", "line 1\nline 2"),
+                ("Shutoff", "Close valve"),
+                ("Cleanup", "")),
+            CancellationToken.None);
+
+        Assert.Equal("Backflow Test Report", created.Name);
+        Assert.Equal("Wear gloves", created.ExtraSafetyNote);
+        Assert.Equal(new[] { "Backflow Procedure", "Shutoff", "Cleanup" }, created.Procedures.Select(p => p.Name));
+        Assert.Equal(new[] { 0, 1, 2 }, created.Procedures.Select(p => p.SortOrder));
+        Assert.Equal("line 1\nline 2", created.Procedures[0].Description);
+        Assert.All(created.Procedures, p => Assert.True(p.Id > 0));
+        Assert.Equal("Jane Doe", created.CreatedByName);
+        Assert.NotNull(created.CreatedAt);
+        Assert.Equal(DateTimeKind.Utc, created.CreatedAt!.Value.Kind);
+        Assert.Null(created.UpdatedAt);
+        Assert.True(created.IsActive);
+        Assert.Equal("", created.ServiceKey);
+        Assert.Equal("", created.TemplateUrl);
+
+        var fetched = await service.GetAsync(created.Id, CancellationToken.None);
+        Assert.Equal(created.Procedures.Select(p => p.Id), fetched!.Procedures.Select(p => p.Id));
+    }
+
+    [Fact]
+    public async Task Create_WithZeroProceduresAndNoNote_Succeeds()
+    {
+        using var context = NewContext();
+
+        var created = await NewService(context).CreateAsync(
+            Admin(), new CompletionDocTemplateCreateDto { Name = "Empty" }, CancellationToken.None);
+
+        Assert.Empty(created.Procedures);
+        Assert.Null(created.ExtraSafetyNote);
+    }
+
+    [Fact]
+    public async Task Create_AllowsBlankProcedureNameAndDescription()
+    {
+        using var context = NewContext();
+
+        var created = await NewService(context).CreateAsync(
+            Admin(), Body("Placeholder", null, (null, null), ("  ", "")), CancellationToken.None);
+
+        Assert.Equal(2, created.Procedures.Count);
+        Assert.All(created.Procedures, p => Assert.Equal("", p.Name));
+    }
+
+    [Theory]
+    [InlineData(null)]
+    [InlineData("")]
+    [InlineData("   ")]
+    public async Task CreateAndUpdate_WithoutTitle_ThrowTitleRequired(string? name)
+    {
+        using var context = NewContext();
+        var service = NewService(context);
+        var existing = await service.CreateAsync(Admin(), Body(), CancellationToken.None);
+
+        var onCreate = await Assert.ThrowsAsync<WorkOrderBoardValidationException>(() =>
+            service.CreateAsync(Admin(), Body(name), CancellationToken.None));
+        var onUpdate = await Assert.ThrowsAsync<WorkOrderBoardValidationException>(() =>
+            service.UpdateAsync(Admin(), existing.Id, Body(name), CancellationToken.None));
+
+        Assert.Equal("TitleRequired", onCreate.Code);
+        Assert.Equal("Document Title is required.", onCreate.Message);
+        Assert.Equal("TitleRequired", onUpdate.Code);
+        Assert.Single(context.CompletionDocTemplates);
+    }
+
+    [Fact]
+    public async Task Create_RejectsOverlongExtraSafetyNoteAndProcedureName()
+    {
+        using var context = NewContext();
+        var service = NewService(context);
+
+        var note = await Assert.ThrowsAsync<WorkOrderBoardValidationException>(() =>
+            service.CreateAsync(Admin(), Body("T", new string('n', 2001)), CancellationToken.None));
+        var procedure = await Assert.ThrowsAsync<WorkOrderBoardValidationException>(() =>
+            service.CreateAsync(Admin(), Body("T", null, (new string('p', 201), "d")), CancellationToken.None));
+
+        Assert.Equal("InvalidValue", note.Code);
+        Assert.Equal("InvalidValue", procedure.Code);
+        Assert.Empty(context.CompletionDocTemplates);
+    }
+
+    [Fact]
+    public async Task Update_ReplacesWholeProcedureListAndStampsUpdatedAt()
+    {
+        using var context = NewContext();
+        var service = NewService(context);
+        var created = await service.CreateAsync(
+            Admin(), Body("T", "Note", ("A", "a"), ("B", "b"), ("C", "c")), CancellationToken.None);
+
+        var updated = await service.UpdateAsync(
+            Admin(), created.Id, Body("T2", "Note", ("C", "c2"), ("A", "a2")), CancellationToken.None);
+
+        Assert.Equal("T2", updated.Name);
+        Assert.Equal(new[] { "C", "A" }, updated.Procedures.Select(p => p.Name));
+        Assert.Equal(new[] { 0, 1 }, updated.Procedures.Select(p => p.SortOrder));
+        Assert.Equal(2, context.CompletionDocTemplateProcedures.Count());
+        Assert.NotNull(updated.UpdatedAt);
+        Assert.Equal("Jane Doe", updated.CreatedByName);
+    }
+
+    [Fact]
+    public async Task Update_NullNoteClearsIt_EmptyProceduresClearThem_NullProceduresKeepThem()
+    {
+        using var context = NewContext();
+        var service = NewService(context);
+        var created = await service.CreateAsync(Admin(), Body("T", "Note", ("A", "a")), CancellationToken.None);
+
+        var kept = await service.UpdateAsync(
+            Admin(), created.Id, new CompletionDocTemplateCreateDto { Name = "T", Procedures = null }, CancellationToken.None);
+        Assert.Null(kept.ExtraSafetyNote);
+        Assert.Equal(new[] { "A" }, kept.Procedures.Select(p => p.Name));
+
+        var cleared = await service.UpdateAsync(
+            Admin(), created.Id, new CompletionDocTemplateCreateDto { Name = "T", Procedures = new() }, CancellationToken.None);
+        Assert.Empty(cleared.Procedures);
+    }
+
+    [Fact]
+    public async Task Update_OmittedLegacyFieldsKeepStoredValues()
+    {
+        using var context = NewContext();
+        context.CompletionDocTemplates.Add(new CompletionDocTemplate
+        {
+            Id = 7,
+            Name = "HVAC PM Completion",
+            ServiceKey = "HVAC PM",
+            WorkOrderType = WorkOrderType.PM,
+            TemplateUrl = "https://example.com/hvac.pdf",
+            IsActive = true
+        });
+        await context.SaveChangesAsync();
+
+        var updated = await NewService(context).UpdateAsync(
+            Admin(), 7, Body("HVAC PM Completion v2", "Mask"), CancellationToken.None);
+
+        Assert.Equal("HVAC PM", updated.ServiceKey);
+        Assert.Equal(WorkOrderType.PM, updated.WorkOrderType);
+        Assert.Equal("https://example.com/hvac.pdf", updated.TemplateUrl);
+        Assert.True(updated.IsActive);
+        Assert.Null(updated.CreatedByName);
+    }
+
+    [Fact]
+    public async Task Update_MissingOrDeletedTemplate_ThrowsNotFound()
+    {
+        using var context = NewContext();
+        context.CompletionDocTemplates.Add(new CompletionDocTemplate { Id = 3, Name = "Gone", IsDeleted = true });
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        var missing = await Assert.ThrowsAsync<WorkOrderBoardValidationException>(() =>
+            service.UpdateAsync(Admin(), 999, Body(), CancellationToken.None));
+        var deleted = await Assert.ThrowsAsync<WorkOrderBoardValidationException>(() =>
+            service.UpdateAsync(Admin(), 3, Body(), CancellationToken.None));
+
+        Assert.Equal("NotFound", missing.Code);
+        Assert.Equal("NotFound", deleted.Code);
+    }
+
+    [Fact]
+    public async Task List_SearchIsPartialCaseInsensitiveAndOrderedByName()
+    {
+        using var context = NewContext();
+        var service = NewService(context);
+        foreach (var name in new[] { "Roof Inspection", "Backflow Test Report", "Annual BACKFLOW check", "HVAC PM" })
+            await service.CreateAsync(Admin(), Body(name), CancellationToken.None);
+        context.CompletionDocTemplates.Add(new CompletionDocTemplate { Name = "Backflow deleted", IsDeleted = true });
+        await context.SaveChangesAsync();
+
+        var matches = await service.ListAsync("backFLOW", null, null, CancellationToken.None);
+        var all = await service.ListAsync(null, null, null, CancellationToken.None);
+        var none = await service.ListAsync("zzz", null, null, CancellationToken.None);
+
+        Assert.Equal(new[] { "Annual BACKFLOW check", "Backflow Test Report" }, matches.Select(t => t.Name));
+        Assert.Equal(
+            new[] { "Annual BACKFLOW check", "Backflow Test Report", "HVAC PM", "Roof Inspection" },
+            all.Select(t => t.Name));
+        Assert.Empty(none);
+    }
+
+    [Fact]
+    public async Task List_KeepsLegacyServiceKeyAndWorkOrderTypeFilters()
+    {
+        using var context = NewContext();
+        context.CompletionDocTemplates.AddRange(
+            new CompletionDocTemplate { Name = "HVAC PM", ServiceKey = "HVAC", WorkOrderType = WorkOrderType.PM },
+            new CompletionDocTemplate { Name = "HVAC Any", ServiceKey = "HVAC" },
+            new CompletionDocTemplate { Name = "HVAC Reactive", ServiceKey = "HVAC", WorkOrderType = WorkOrderType.Reactive },
+            new CompletionDocTemplate { Name = "Plumbing", ServiceKey = "Plumbing" });
+        await context.SaveChangesAsync();
+
+        var rows = await NewService(context).ListAsync(null, "HVAC", WorkOrderType.PM, CancellationToken.None);
+
+        Assert.Equal(new[] { "HVAC Any", "HVAC PM" }, rows.Select(t => t.Name));
+    }
+
+    [Fact]
+    public async Task Writes_FollowTeamPermissions()
+    {
+        using var context = NewContext();
+        var service = NewService(context);
+
+        var byScheduler = await service.CreateAsync(Scheduler(), Body("Scheduler template"), CancellationToken.None);
+        await service.UpdateAsync(Scheduler(), byScheduler.Id, Body("Scheduler edit"), CancellationToken.None);
+        Assert.Equal("Sam Scheduler", byScheduler.CreatedByName);
+
+        var schedulerDelete = await Assert.ThrowsAsync<WorkOrderBoardValidationException>(() =>
+            service.DeleteAsync(Scheduler(), byScheduler.Id, CancellationToken.None));
+        var dispatcherCreate = await Assert.ThrowsAsync<WorkOrderBoardValidationException>(() =>
+            service.CreateAsync(Dispatcher(), Body("Nope"), CancellationToken.None));
+        var dispatcherEdit = await Assert.ThrowsAsync<WorkOrderBoardValidationException>(() =>
+            service.UpdateAsync(Dispatcher(), byScheduler.Id, Body("Nope"), CancellationToken.None));
+        var anonymous = await Assert.ThrowsAsync<WorkOrderBoardValidationException>(() =>
+            service.CreateAsync(new ClaimsPrincipal(new ClaimsIdentity()), Body("Nope"), CancellationToken.None));
+
+        Assert.All(new[] { schedulerDelete, dispatcherCreate, dispatcherEdit, anonymous },
+            ex => Assert.Equal("Forbidden", ex.Code));
+        Assert.Equal("Scheduler edit", context.CompletionDocTemplates.Single().Name);
+        Assert.NotEqual(true, context.CompletionDocTemplates.Single().IsDeleted);
+    }
+
+    [Fact]
+    public async Task Writes_HonorPerPersonOverrides()
+    {
+        using var context = NewContext();
+        context.UserPermissionOverrides.Add(new UserPermissionOverride
+        {
+            UserId = SchedulerId,
+            PermissionKey = "deleteCompletionDocTemplates",
+            State = UserPermissionState.Allow
+        });
+        context.UserPermissionOverrides.Add(new UserPermissionOverride
+        {
+            UserId = SchedulerId,
+            PermissionKey = "createCompletionDocTemplates",
+            State = UserPermissionState.Deny
+        });
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+        var template = await service.CreateAsync(Admin(), Body(), CancellationToken.None);
+
+        var denied = await Assert.ThrowsAsync<WorkOrderBoardValidationException>(() =>
+            service.CreateAsync(Scheduler(), Body("Denied"), CancellationToken.None));
+        await service.DeleteAsync(Scheduler(), template.Id, CancellationToken.None);
+
+        Assert.Equal("Forbidden", denied.Code);
+        Assert.True(context.CompletionDocTemplates.Single().IsDeleted);
+    }
+
+    [Fact]
+    public async Task LinkedWorkOrders_CountsOnlyOpenWorkOrdersOfLinkedServicesInCallerTenant()
+    {
+        using var context = NewContext();
+        var template = new CompletionDocTemplate { Id = 10, Name = "Backflow" };
+        var other = new CompletionDocTemplate { Id = 11, Name = "Other" };
+        context.CompletionDocTemplates.AddRange(template, other);
+        context.Services.AddRange(
+            new Service { Id = 1, Name = "Backflow", NormalizedName = "BACKFLOW", RequiresCompletionDocument = true, CompletionDocTemplateId = 10 },
+            new Service { Id = 2, Name = "Backflow 2", NormalizedName = "BACKFLOW 2", RequiresCompletionDocument = true, CompletionDocTemplateId = 10 },
+            new Service { Id = 3, Name = "Roof", NormalizedName = "ROOF", RequiresCompletionDocument = true, CompletionDocTemplateId = 11 });
+        context.workOrders.AddRange(
+            new WorkOrder { Id = 101, ServiceId = 1, AccountId = 1, LifecycleStatus = LifecycleStatus.Scheduled },
+            new WorkOrder { Id = 102, ServiceId = 2, AccountId = 1, LifecycleStatus = null },
+            new WorkOrder { Id = 103, ServiceId = 1, AccountId = 1, LifecycleStatus = LifecycleStatus.Completed },
+            new WorkOrder { Id = 104, ServiceId = 1, AccountId = 1, LifecycleStatus = LifecycleStatus.Canceled },
+            new WorkOrder { Id = 105, ServiceId = 3, AccountId = 1, LifecycleStatus = LifecycleStatus.Scheduled },
+            new WorkOrder { Id = 106, ServiceId = null, AccountId = 1, LifecycleStatus = LifecycleStatus.Scheduled },
+            new WorkOrder { Id = 107, ServiceId = 1, AccountId = 1, LifecycleStatus = LifecycleStatus.Scheduled, IsDeleted = true },
+            new WorkOrder { Id = 108, ServiceId = 1, AccountId = 1, LifecycleStatus = LifecycleStatus.Scheduled, istemplate = true },
+            new WorkOrder { Id = 205, ServiceId = 1, AccountId = 2, LifecycleStatus = LifecycleStatus.InProgress });
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        var tenantOne = await service.GetLinkedWorkOrdersAsync(Admin(accountId: 1), 10, CancellationToken.None);
+        var tenantTwo = await service.GetLinkedWorkOrdersAsync(Admin(accountId: 2), 10, CancellationToken.None);
+        var orgWide = await service.GetLinkedWorkOrdersAsync(Admin(), 10, CancellationToken.None);
+
+        Assert.Equal(2, tenantOne.Count);
+        Assert.Equal(new[] { 101, 102 }, tenantOne.WorkOrderIds);
+        Assert.Equal(new[] { 205 }, tenantTwo.WorkOrderIds);
+        Assert.Equal(new[] { 101, 102, 205 }, orgWide.WorkOrderIds);
+        Assert.Equal(3, orgWide.Count);
+    }
+
+    [Fact]
+    public async Task LinkedWorkOrders_UnknownTemplateOrMissingScope_Throws()
+    {
+        using var context = NewContext();
+        context.CompletionDocTemplates.Add(new CompletionDocTemplate { Id = 10, Name = "Backflow" });
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+        var noScope = new ClaimsPrincipal(new ClaimsIdentity(
+            new[] { new Claim(ClaimTypes.NameIdentifier, DispatcherId), new Claim(ClaimTypes.Role, "Dispatcher") },
+            authenticationType: "test"));
+
+        var missing = await Assert.ThrowsAsync<WorkOrderBoardValidationException>(() =>
+            service.GetLinkedWorkOrdersAsync(Admin(), 999, CancellationToken.None));
+        var forbidden = await Assert.ThrowsAsync<WorkOrderBoardValidationException>(() =>
+            service.GetLinkedWorkOrdersAsync(noScope, 10, CancellationToken.None));
+
+        Assert.Equal("NotFound", missing.Code);
+        Assert.Equal("Forbidden", forbidden.Code);
+    }
+
+    [Fact]
+    public async Task Delete_ClearsServiceLinksKeepsDocumentRequirementAndHidesTemplate()
+    {
+        using var context = NewContext();
+        context.CompletionDocTemplates.Add(new CompletionDocTemplate { Id = 10, Name = "Backflow" });
+        context.Services.AddRange(
+            new Service { Id = 1, Name = "Backflow", NormalizedName = "BACKFLOW", RequiresCompletionDocument = true, CompletionDocTemplateId = 10 },
+            new Service { Id = 2, Name = "Unrelated", NormalizedName = "UNRELATED", RequiresCompletionDocument = true, CompletionDocTemplateId = null });
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        await service.DeleteAsync(Admin(), 10, CancellationToken.None);
+
+        var linked = context.Services.Single(s => s.Id == 1);
+        Assert.Null(linked.CompletionDocTemplateId);
+        Assert.True(linked.RequiresCompletionDocument);
+        Assert.True(context.Services.Single(s => s.Id == 2).RequiresCompletionDocument);
+        var template = context.CompletionDocTemplates.Single();
+        Assert.True(template.IsDeleted);
+        Assert.Equal(AdminId, template.DeleterUserId);
+        Assert.Null(await service.GetAsync(10, CancellationToken.None));
+        Assert.Empty(await service.ListAsync(null, null, null, CancellationToken.None));
+
+        var again = await Assert.ThrowsAsync<WorkOrderBoardValidationException>(() =>
+            service.DeleteAsync(Admin(), 10, CancellationToken.None));
+        Assert.Equal("NotFound", again.Code);
+    }
+
+    [Fact]
+    public async Task Reads_ForwardCancellation()
+    {
+        using var context = NewContext();
+        var service = NewService(context);
+        await service.CreateAsync(Admin(), Body(), CancellationToken.None);
+        using var cts = new CancellationTokenSource();
+        cts.Cancel();
+
+        await Assert.ThrowsAnyAsync<OperationCanceledException>(() =>
+            service.ListAsync(null, null, null, cts.Token));
+        await Assert.ThrowsAnyAsync<OperationCanceledException>(() =>
+            service.CreateAsync(Admin(), Body("Cancelled"), cts.Token));
+        Assert.Single(context.CompletionDocTemplates);
+    }
+
+    // Relational evidence (SQLite enforces foreign keys; the in-memory provider does not).
+
+    [Fact]
+    public async Task Relational_DeleteOfLinkedTemplateSucceedsAndUnlinksService()
+    {
+        await using var connection = new SqliteConnection("DataSource=:memory:");
+        await connection.OpenAsync();
+        await using var context = await NewSqliteContextAsync(connection);
+        SeedUser(context, AdminId, "Admin", "Jane", "Doe");
+        var template = new CompletionDocTemplate { Name = "Backflow" };
+        context.CompletionDocTemplates.Add(template);
+        await context.SaveChangesAsync();
+        context.Services.Add(new Service
+        {
+            Name = "Backflow",
+            NormalizedName = "BACKFLOW",
+            RequiresCompletionDocument = true,
+            CompletionDocTemplateId = template.Id
+        });
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        await service.DeleteAsync(Admin(), template.Id, CancellationToken.None);
+
+        context.ChangeTracker.Clear();
+        var stored = await context.Services.SingleAsync();
+        Assert.Null(stored.CompletionDocTemplateId);
+        Assert.True(stored.RequiresCompletionDocument);
+        Assert.True((await context.CompletionDocTemplates.SingleAsync()).IsDeleted);
+    }
+
+    [Fact]
+    public async Task Relational_UpdateReplacesProceduresInOrder()
+    {
+        await using var connection = new SqliteConnection("DataSource=:memory:");
+        await connection.OpenAsync();
+        await using var context = await NewSqliteContextAsync(connection);
+        SeedUser(context, AdminId, "Admin", "Jane", "Doe");
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+        var created = await service.CreateAsync(
+            Admin(), Body("T", null, ("A", "a"), ("B", "b")), CancellationToken.None);
+
+        context.ChangeTracker.Clear();
+        var updated = await service.UpdateAsync(
+            Admin(), created.Id, Body("T", null, ("B", "b"), ("C", "c"), ("A", "a")), CancellationToken.None);
+
+        Assert.Equal(new[] { "B", "C", "A" }, updated.Procedures.Select(p => p.Name));
+        Assert.Equal("Jane Doe", updated.CreatedByName);
+        context.ChangeTracker.Clear();
+        Assert.Equal(3, await context.CompletionDocTemplateProcedures.CountAsync());
+    }
+
+    private static async Task<ApplicationDbContext> NewSqliteContextAsync(SqliteConnection connection)
+    {
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseSqlite(connection)
+            .Options;
+        var context = new SqliteTemplateTestDbContext(options);
+        await context.Database.EnsureCreatedAsync();
+        return context;
+    }
+
+    private sealed class SqliteTemplateTestDbContext : ApplicationDbContext
+    {
+        public SqliteTemplateTestDbContext(DbContextOptions<ApplicationDbContext> options)
+            : base(options)
+        {
+        }
+
+        protected override void OnModelCreating(ModelBuilder builder)
+        {
+            base.OnModelCreating(builder);
+
+            // SQL Server filtered index syntax is invalid on SQLite.
+            foreach (var index in builder.Model.GetEntityTypes().SelectMany(e => e.GetIndexes()))
+            {
+                if (index.GetFilter() != null)
+                    index.SetFilter(null);
+            }
+
+            // SQLite has no rowversion type; treat as plain nullable blobs.
+            foreach (var entityType in new[] { typeof(WorkOrder), typeof(Dispatch) })
+            {
+                var property = builder.Entity(entityType).Property("RowVersion").Metadata;
+                property.ValueGenerated = Microsoft.EntityFrameworkCore.Metadata.ValueGenerated.Never;
+                property.IsConcurrencyToken = false;
+            }
+        }
+    }
+
+    // HTTP contract of the template endpoints.
+
+    private static WorkOrderCompletionController NewController(ApplicationDbContext context, ClaimsPrincipal user) =>
+        new(null!, NewService(context), null!)
+        {
+            ControllerContext = new ControllerContext { HttpContext = new DefaultHttpContext { User = user } }
+        };
+
+    [Fact]
+    public async Task Controller_MapsTitleRequiredTo422AndForbiddenTo403()
+    {
+        using var context = NewContext();
+
+        var blank = await NewController(context, Admin())
+            .CreateCompletionTemplate(Body("  "), CancellationToken.None);
+        var denied = await NewController(context, Dispatcher())
+            .CreateCompletionTemplate(Body("Allowed title"), CancellationToken.None);
+        var missing = await NewController(context, Admin())
+            .DeleteCompletionTemplate(999, CancellationToken.None);
+
+        var unprocessable = Assert.IsType<UnprocessableEntityObjectResult>(blank);
+        var error = Assert.IsType<WorkOrderBoardValidationErrorDto>(unprocessable.Value);
+        Assert.Equal("TitleRequired", error.Code);
+        Assert.Equal("Document Title is required.", error.Message);
+        var forbidden = Assert.IsType<ObjectResult>(denied);
+        Assert.Equal(StatusCodes.Status403Forbidden, forbidden.StatusCode);
+        Assert.IsType<NotFoundObjectResult>(missing);
+    }
+
+    [Fact]
+    public async Task Controller_LinkedWorkOrdersAndDelete_ReturnContractShapes()
+    {
+        using var context = NewContext();
+        context.CompletionDocTemplates.Add(new CompletionDocTemplate { Id = 10, Name = "Backflow" });
+        context.Services.Add(new Service { Id = 1, Name = "B", NormalizedName = "B", RequiresCompletionDocument = true, CompletionDocTemplateId = 10 });
+        context.workOrders.Add(new WorkOrder { Id = 101, ServiceId = 1, AccountId = 1, LifecycleStatus = LifecycleStatus.Scheduled });
+        await context.SaveChangesAsync();
+        var controller = NewController(context, Admin());
+
+        var linked = await controller.GetCompletionTemplateLinkedWorkOrders(10, CancellationToken.None);
+        var deleted = await controller.DeleteCompletionTemplate(10, CancellationToken.None);
+
+        var body = Assert.IsType<CompletionDocTemplateLinkedWorkOrdersDto>(Assert.IsType<OkObjectResult>(linked).Value);
+        Assert.Equal(1, body.Count);
+        Assert.Equal(new[] { 101 }, body.WorkOrderIds);
+        Assert.IsType<NoContentResult>(deleted);
+    }
+
+    // Migration shape (G6 evidence): additive only.
+
+    [Fact]
+    public void Migration_Up_AddsBoundedNoteAndCascadingProcedureTableOnly()
+    {
+        var operations = BuildOperations("Up");
+
+        var column = Assert.Single(operations.OfType<AddColumnOperation>());
+        Assert.Equal("CompletionDocTemplates", column.Table);
+        Assert.Equal("ExtraSafetyNote", column.Name);
+        Assert.True(column.IsNullable);
+        Assert.Equal(2000, column.MaxLength);
+
+        var table = Assert.Single(operations.OfType<CreateTableOperation>());
+        Assert.Equal("CompletionDocTemplateProcedures", table.Name);
+        Assert.Contains(table.Columns, c => c.Name == "Name" && c.MaxLength == 200 && !c.IsNullable);
+        var fk = Assert.Single(table.ForeignKeys);
+        Assert.Equal("CompletionDocTemplates", fk.PrincipalTable);
+        Assert.Equal(ReferentialAction.Cascade, fk.OnDelete);
+
+        var index = Assert.Single(operations.OfType<CreateIndexOperation>());
+        Assert.Equal(new[] { "CompletionDocTemplateId", "SortOrder" }, index.Columns);
+
+        Assert.Equal(3, operations.Count);
+    }
+
+    [Fact]
+    public void Migration_Down_DropsOnlyWhatUpAdded()
+    {
+        var operations = BuildOperations("Down");
+
+        Assert.Equal("CompletionDocTemplateProcedures", Assert.Single(operations.OfType<DropTableOperation>()).Name);
+        var dropped = Assert.Single(operations.OfType<DropColumnOperation>());
+        Assert.Equal(("CompletionDocTemplates", "ExtraSafetyNote"), (dropped.Table, dropped.Name));
+        Assert.Equal(2, operations.Count);
+    }
+
+    private static List<MigrationOperation> BuildOperations(string direction)
+    {
+        var builder = new MigrationBuilder("Microsoft.EntityFrameworkCore.SqlServer");
+        var operation = typeof(Migration).GetMethod(direction, BindingFlags.Instance | BindingFlags.NonPublic)
+                 ?? throw new InvalidOperationException($"Migration.{direction} not found.");
+        operation.Invoke(new CompletionDocTemplateProcedures(), [builder]);
+        return builder.Operations;
+    }
+}

From 66a49ab9579f1bb86b1777dda80d397f7060f473 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 11:04:33 -0300
Subject: [PATCH 133/183] feat(auth): enforce one password policy on every
 password-setting path (SH-386)

Both hosts now apply the same Identity password rule: at least 6 characters
with one uppercase letter, one number and one special character. Change
password requires an authenticated caller, verifies the current password
before evaluating the new one, and reports a policy rejection separately
from a wrong current password.
---
 .../AuthenticationControllerTests.cs          |  38 +++-
 .../PasswordPolicyTests.cs                    | 180 ++++++++++++++++++
 .../Controllers/AuthenticationController.cs   |  18 +-
 .../Infrastructure/IdentityRegistration.cs    |  24 +++
 Api.SeaHavenIndustries/Program.cs             |   8 +-
 .../Auth/IdentityPasswordPolicy.cs            |  27 +++
 SeaHaven.Services/DTOs/IdentityDTOs.cs        |  12 ++
 .../Implementation/AuthenticationService.cs   |  21 +-
 .../Interfaces/IAuthenticationService.cs      |   2 +-
 SeaHavenIndustries/Program.cs                 |   9 +-
 10 files changed, 311 insertions(+), 28 deletions(-)
 create mode 100644 Api.SeaHavenIndustries.Tests/PasswordPolicyTests.cs
 create mode 100644 Api.SeaHavenIndustries/Infrastructure/IdentityRegistration.cs
 create mode 100644 Data.SeaHavenIndustries/Auth/IdentityPasswordPolicy.cs

diff --git a/Api.SeaHavenIndustries.Tests/AuthenticationControllerTests.cs b/Api.SeaHavenIndustries.Tests/AuthenticationControllerTests.cs
index 99d5ab8..4187a24 100644
--- a/Api.SeaHavenIndustries.Tests/AuthenticationControllerTests.cs
+++ b/Api.SeaHavenIndustries.Tests/AuthenticationControllerTests.cs
@@ -117,11 +117,11 @@ public class AuthenticationControllerTests
     {
         var service = new Mock<IAuthenticationService>();
         service.Setup(s => s.ChangePasswordAsync("42", "old", "new", It.IsAny<CancellationToken>()))
-            .ReturnsAsync(true);
+            .ReturnsAsync(new ChangePasswordResultDTO { Status = ChangePasswordStatus.Succeeded });
 
         var controller = NewController(service, "42");
 
-        var result = await controller.ChangePassword(new ChangePasswords { Currentpassword = "old", Confirmpassword = "new" }, CancellationToken.None);
+        var result = await controller.ChangePassword(new ChangePasswords { Currentpassword = "old", Newpassword = "new", Confirmpassword = "new" }, CancellationToken.None);
 
         var ok = result.Should().BeOfType<OkObjectResult>().Subject;
         var response = ok.Value.Should().BeOfType<Response>().Subject;
@@ -130,11 +130,11 @@ public class AuthenticationControllerTests
     }
 
     [Fact]
-    public async Task ChangePassword_Failure_ReturnsOldPasswordIncorrectStatus()
+    public async Task ChangePassword_WrongCurrentPassword_ReturnsOldPasswordIncorrectStatus()
     {
         var service = new Mock<IAuthenticationService>();
         service.Setup(s => s.ChangePasswordAsync(It.IsAny<string>(), It.IsAny<string>(), It.IsAny<string>(), It.IsAny<CancellationToken>()))
-            .ReturnsAsync(false);
+            .ReturnsAsync(new ChangePasswordResultDTO { Status = ChangePasswordStatus.CurrentPasswordIncorrect });
 
         var controller = NewController(service, "42");
 
@@ -143,6 +143,36 @@ public class AuthenticationControllerTests
         var bad = result.Should().BeOfType<BadRequestObjectResult>().Subject;
         var response = bad.Value.Should().BeOfType<Response>().Subject;
         response.Status.Should().Be("Old Password is incorrect");
+        response.Message.Should().Be("Current password is incorrect");
+    }
+
+    [Fact]
+    public async Task ChangePassword_PolicyRejection_ReturnsPasswordRequirementsMessage()
+    {
+        var service = new Mock<IAuthenticationService>();
+        service.Setup(s => s.ChangePasswordAsync("42", "Current1!", "weak", It.IsAny<CancellationToken>()))
+            .ReturnsAsync(new ChangePasswordResultDTO { Status = ChangePasswordStatus.PasswordRejected });
+
+        var controller = NewController(service, "42");
+
+        var result = await controller.ChangePassword(
+            new ChangePasswords { Currentpassword = "Current1!", Newpassword = "weak", Confirmpassword = "weak" },
+            CancellationToken.None);
+
+        var bad = result.Should().BeOfType<BadRequestObjectResult>().Subject;
+        var response = bad.Value.Should().BeOfType<Response>().Subject;
+        response.Status.Should().Be("Password does not meet requirements");
+        response.Message.Should().Be(
+            "Password must be at least 6 characters and include one uppercase letter, one number, and one special character.");
+    }
+
+    [Fact]
+    public void ChangePassword_RequiresAuthenticatedCaller()
+    {
+        var method = typeof(AuthenticationController).GetMethod(nameof(AuthenticationController.ChangePassword))!;
+
+        method.GetCustomAttributes(typeof(Microsoft.AspNetCore.Authorization.AuthorizeAttribute), inherit: true)
+            .Should().NotBeEmpty();
     }
 
     [Fact]
diff --git a/Api.SeaHavenIndustries.Tests/PasswordPolicyTests.cs b/Api.SeaHavenIndustries.Tests/PasswordPolicyTests.cs
new file mode 100644
index 0000000..946a24d
--- /dev/null
+++ b/Api.SeaHavenIndustries.Tests/PasswordPolicyTests.cs
@@ -0,0 +1,180 @@
+using Api.SeaHavenIndustries.Infrastructure;
+using Data.SeaHavenIndustries;
+using FluentAssertions;
+using Microsoft.AspNetCore.Identity;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Options;
+using Moq;
+using SeaHaven.DataServices.Interfaces;
+using SeaHaven.Services.Configuration;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Implementation;
+using SeaHaven.Services.Interfaces;
+using Xunit;
+
+namespace Api.SeaHavenIndustries.Tests;
+
+/// <summary>
+/// Exercises the password rule through the same Identity registration the API
+/// host uses, so these assertions describe the rule that runs in production.
+/// </summary>
+public sealed class PasswordPolicyTests : IAsyncDisposable
+{
+    private const string CurrentPassword = "Current1!";
+    private readonly ServiceProvider _provider;
+    private readonly AsyncServiceScope _scope;
+
+    public PasswordPolicyTests()
+    {
+        var services = new ServiceCollection();
+        services.AddLogging();
+        services.AddDbContext<ApplicationDbContext>(options =>
+            options.UseInMemoryDatabase(Guid.NewGuid().ToString()));
+        services.AddSeaHavenIdentity();
+        _provider = services.BuildServiceProvider();
+        _scope = _provider.CreateAsyncScope();
+    }
+
+    private UserManager<ApplicationUser> UserManager =>
+        _scope.ServiceProvider.GetRequiredService<UserManager<ApplicationUser>>();
+
+    [Theory]
+    [InlineData("Ab1!x", "PasswordTooShort")]
+    [InlineData("abc12!", "PasswordRequiresUpper")]
+    [InlineData("Abcde!", "PasswordRequiresDigit")]
+    [InlineData("Abcde1", "PasswordRequiresNonAlphanumeric")]
+    public async Task Policy_RejectsPasswordMissingOneRule(string password, string expectedCode)
+    {
+        var user = new ApplicationUser { UserName = "policy@example.com", Email = "policy@example.com" };
+
+        var errors = await ValidateAsync(user, password);
+
+        errors.Select(error => error.Code).Should().Equal(expectedCode);
+    }
+
+    [Theory]
+    [InlineData("Abc1!x")]
+    [InlineData("ABC12!")]
+    public async Task Policy_AcceptsSixCharacterPasswordMeetingEveryRule(string password)
+    {
+        var user = new ApplicationUser { UserName = "policy@example.com", Email = "policy@example.com" };
+
+        var errors = await ValidateAsync(user, password);
+
+        errors.Should().BeEmpty();
+    }
+
+    [Fact]
+    public void Registration_AppliesSharedPolicyOptions()
+    {
+        var options = _scope.ServiceProvider.GetRequiredService<IOptions<IdentityOptions>>().Value.Password;
+
+        options.RequiredLength.Should().Be(6);
+        options.RequireUppercase.Should().BeTrue();
+        options.RequireDigit.Should().BeTrue();
+        options.RequireNonAlphanumeric.Should().BeTrue();
+        options.RequireLowercase.Should().BeFalse();
+    }
+
+    [Fact]
+    public async Task ChangePassword_WrongCurrentPassword_IsRejectedBeforeNewPasswordIsEvaluated()
+    {
+        var user = await CreateUserAsync();
+        var service = NewAuthenticationService();
+
+        var result = await service.ChangePasswordAsync(user.Id, "Wrong1!", "weak", CancellationToken.None);
+
+        result.Status.Should().Be(ChangePasswordStatus.CurrentPasswordIncorrect);
+        (await UserManager.CheckPasswordAsync(user, CurrentPassword)).Should().BeTrue();
+    }
+
+    [Fact]
+    public async Task ChangePassword_CorrectCurrentPasswordAndWeakNewPassword_IsRejectedByPolicy()
+    {
+        var user = await CreateUserAsync();
+        var service = NewAuthenticationService();
+
+        var result = await service.ChangePasswordAsync(user.Id, CurrentPassword, "abcdef", CancellationToken.None);
+
+        result.Status.Should().Be(ChangePasswordStatus.PasswordRejected);
+        (await UserManager.CheckPasswordAsync(user, CurrentPassword)).Should().BeTrue();
+    }
+
+    [Fact]
+    public async Task ChangePassword_CorrectCurrentPasswordAndCompliantNewPassword_ChangesPassword()
+    {
+        var user = await CreateUserAsync();
+        var service = NewAuthenticationService();
+
+        var result = await service.ChangePasswordAsync(user.Id, CurrentPassword, "Next2@x", CancellationToken.None);
+
+        result.Status.Should().Be(ChangePasswordStatus.Succeeded);
+        var reloaded = await UserManager.FindByIdAsync(user.Id);
+        (await UserManager.CheckPasswordAsync(reloaded!, "Next2@x")).Should().BeTrue();
+    }
+
+    [Fact]
+    public async Task ChangePassword_CancelledToken_Throws()
+    {
+        var service = NewAuthenticationService();
+        using var cancellation = new CancellationTokenSource();
+        cancellation.Cancel();
+
+        var act = () => service.ChangePasswordAsync("any", CurrentPassword, "Next2@x", cancellation.Token);
+
+        await act.Should().ThrowAsync<OperationCanceledException>();
+    }
+
+    [Fact]
+    public async Task ResetPassword_WeakPassword_IsRejectedAndKeepsCode()
+    {
+        var user = await CreateUserAsync();
+        var forget = new Mock<IForgetPasswordDataService>();
+        forget.Setup(f => f.ExistsByEmailAndCodeAsync(user.Email!, "123456", It.IsAny<CancellationToken>()))
+            .ReturnsAsync(true);
+        forget.Setup(f => f.GetByEmailAsync(user.Email!, It.IsAny<CancellationToken>()))
+            .ReturnsAsync(new ForgetPasswordCode { Email = user.Email!, UserId = user.Id, Code = "123456" });
+        var service = NewAuthenticationService(forget);
+
+        var reset = await service.ResetPasswordAsync(user.Email!, "123456", "abcdef", CancellationToken.None);
+
+        reset.Should().BeFalse();
+        (await UserManager.CheckPasswordAsync(user, CurrentPassword)).Should().BeTrue();
+        forget.Verify(f => f.RemoveByEmailAsync(It.IsAny<string>(), It.IsAny<CancellationToken>()), Times.Never);
+    }
+
+    private async Task<IReadOnlyList<IdentityError>> ValidateAsync(ApplicationUser user, string password)
+    {
+        var errors = new List<IdentityError>();
+        foreach (var validator in UserManager.PasswordValidators)
+        {
+            var result = await validator.ValidateAsync(UserManager, user, password);
+            errors.AddRange(result.Errors);
+        }
+
+        return errors;
+    }
+
+    private async Task<ApplicationUser> CreateUserAsync()
+    {
+        var user = new ApplicationUser { UserName = "member@example.com", Email = "member@example.com" };
+        var created = await UserManager.CreateAsync(user, CurrentPassword);
+        created.Succeeded.Should().BeTrue();
+        return user;
+    }
+
+    private AuthenticationService NewAuthenticationService(Mock<IForgetPasswordDataService>? forget = null) =>
+        new(
+            UserManager,
+            Microsoft.Extensions.Options.Options.Create(new JwtOptions { Secret = new string('x', 64) }),
+            Mock.Of<IUserDataService>(),
+            (forget ?? new Mock<IForgetPasswordDataService>()).Object,
+            Mock.Of<IEmailSender>());
+
+    public async ValueTask DisposeAsync()
+    {
+        await _scope.DisposeAsync();
+        await _provider.DisposeAsync();
+    }
+}
diff --git a/Api.SeaHavenIndustries/Controllers/AuthenticationController.cs b/Api.SeaHavenIndustries/Controllers/AuthenticationController.cs
index 12fd8fa..7b6569a 100644
--- a/Api.SeaHavenIndustries/Controllers/AuthenticationController.cs
+++ b/Api.SeaHavenIndustries/Controllers/AuthenticationController.cs
@@ -55,20 +55,26 @@ namespace Api.SeaHavenIndustries.Controllers
 
         }
 
+        [Authorize]
         [Route("ChangePassword")]
         [HttpPost]
         public async Task<IActionResult> ChangePassword(ChangePasswords usermodel, CancellationToken cancellationToken)
         {
             var userid = User.FindFirstValue(ClaimTypes.NameIdentifier) ?? "";
-            var succeeded = await _authenticationService.ChangePasswordAsync(userid, usermodel.Currentpassword, usermodel.Confirmpassword, cancellationToken);
-            if (succeeded)
+            var result = await _authenticationService.ChangePasswordAsync(userid, usermodel.Currentpassword, usermodel.Newpassword, cancellationToken);
+            return result.Status switch
             {
-                return Ok(new Response { Status = "Success ", Message = "Password successfully changed" });
-            }
-            else
-                return BadRequest(new Response { Status = "Old Password is incorrect" });
+                ChangePasswordStatus.Succeeded =>
+                    Ok(new Response { Status = "Success ", Message = "Password successfully changed" }),
+                ChangePasswordStatus.PasswordRejected =>
+                    BadRequest(new Response { Status = "Password does not meet requirements", Message = PasswordRequirementsMessage }),
+                _ => BadRequest(new Response { Status = "Old Password is incorrect", Message = "Current password is incorrect" })
+            };
         }
 
+        private const string PasswordRequirementsMessage =
+            "Password must be at least 6 characters and include one uppercase letter, one number, and one special character.";
+
         [HttpPost]
         [Route("UpdateProfile")]
         public async Task<IActionResult> UserProfileUpdate([FromForm] User_DTO model, CancellationToken cancellationToken)
diff --git a/Api.SeaHavenIndustries/Infrastructure/IdentityRegistration.cs b/Api.SeaHavenIndustries/Infrastructure/IdentityRegistration.cs
new file mode 100644
index 0000000..752e494
--- /dev/null
+++ b/Api.SeaHavenIndustries/Infrastructure/IdentityRegistration.cs
@@ -0,0 +1,24 @@
+using Data.SeaHavenIndustries;
+using Microsoft.AspNetCore.Identity;
+
+namespace Api.SeaHavenIndustries.Infrastructure
+{
+    public static class IdentityRegistration
+    {
+        /// <summary>
+        /// Registers ASP.NET Identity for the API with the shared password policy.
+        /// Program.cs and the behavior tests both compose Identity through this
+        /// method so the rule under test is the rule that runs.
+        /// </summary>
+        public static IdentityBuilder AddSeaHavenIdentity(this IServiceCollection services)
+        {
+            return services.AddIdentity<ApplicationUser, IdentityRole>(options =>
+                {
+                    options.User.RequireUniqueEmail = false;
+                    IdentityPasswordPolicy.Apply(options.Password);
+                })
+                .AddEntityFrameworkStores<ApplicationDbContext>()
+                .AddDefaultTokenProviders();
+        }
+    }
+}
diff --git a/Api.SeaHavenIndustries/Program.cs b/Api.SeaHavenIndustries/Program.cs
index 6baf11f..0151543 100644
--- a/Api.SeaHavenIndustries/Program.cs
+++ b/Api.SeaHavenIndustries/Program.cs
@@ -1,5 +1,6 @@
 using Api.SeaHavenIndustries.Helper;
 using Api.SeaHavenIndustries.HostedServices;
+using Api.SeaHavenIndustries.Infrastructure;
 using Api.SeaHavenIndustries.Middleware;
 using Api.SeaHavenIndustries.Observability;
 using Api.SeaHavenIndustries.Options;
@@ -43,12 +44,7 @@ ConfigurationManager configuration = builder.Configuration;
 
 builder.Services.AddDbContext<ApplicationDbContext>(options => options.UseSqlServer(configuration.GetConnectionString("DefaultConnection")));
 
-builder.Services.AddIdentity<ApplicationUser, IdentityRole>(options =>
-{
-    options.User.RequireUniqueEmail = false;
-})
-    .AddEntityFrameworkStores<ApplicationDbContext>()
-    .AddDefaultTokenProviders();
+builder.Services.AddSeaHavenIdentity();
 
 builder.Services.AddControllers(options =>
 {
diff --git a/Data.SeaHavenIndustries/Auth/IdentityPasswordPolicy.cs b/Data.SeaHavenIndustries/Auth/IdentityPasswordPolicy.cs
new file mode 100644
index 0000000..a0161ff
--- /dev/null
+++ b/Data.SeaHavenIndustries/Auth/IdentityPasswordPolicy.cs
@@ -0,0 +1,27 @@
+using Microsoft.AspNetCore.Identity;
+
+namespace Data.SeaHavenIndustries
+{
+    /// <summary>
+    /// The single password rule for every surface that sets a password: at least
+    /// six characters with one uppercase letter, one number, and one special
+    /// character. Lowercase letters are deliberately not required so the server
+    /// accepts exactly what the four-item checklist in the web app marks as met.
+    /// </summary>
+    public static class IdentityPasswordPolicy
+    {
+        public const int MinimumLength = 6;
+
+        public static void Apply(PasswordOptions options)
+        {
+            ArgumentNullException.ThrowIfNull(options);
+
+            options.RequiredLength = MinimumLength;
+            options.RequireUppercase = true;
+            options.RequireDigit = true;
+            options.RequireNonAlphanumeric = true;
+            options.RequireLowercase = false;
+            options.RequiredUniqueChars = 1;
+        }
+    }
+}
diff --git a/SeaHaven.Services/DTOs/IdentityDTOs.cs b/SeaHaven.Services/DTOs/IdentityDTOs.cs
index ad3b8cb..e959478 100644
--- a/SeaHaven.Services/DTOs/IdentityDTOs.cs
+++ b/SeaHaven.Services/DTOs/IdentityDTOs.cs
@@ -11,6 +11,18 @@ namespace SeaHaven.Services.DTOs
         public string Id { get; set; } = string.Empty;
     }
 
+    public enum ChangePasswordStatus
+    {
+        Succeeded,
+        CurrentPasswordIncorrect,
+        PasswordRejected
+    }
+
+    public sealed class ChangePasswordResultDTO
+    {
+        public ChangePasswordStatus Status { get; init; }
+    }
+
     public class UpdateProfileRequestDTO
     {
         public string? Name { get; set; }
diff --git a/SeaHaven.Services/Implementation/AuthenticationService.cs b/SeaHaven.Services/Implementation/AuthenticationService.cs
index d86f19a..e293276 100644
--- a/SeaHaven.Services/Implementation/AuthenticationService.cs
+++ b/SeaHaven.Services/Implementation/AuthenticationService.cs
@@ -80,16 +80,27 @@ namespace SeaHaven.Services.Implementation
             return null;
         }
 
-        public async Task<bool> ChangePasswordAsync(string userId, string? currentPassword, string? confirmPassword, CancellationToken cancellationToken)
+        public async Task<ChangePasswordResultDTO> ChangePasswordAsync(string userId, string? currentPassword, string? newPassword, CancellationToken cancellationToken)
         {
+            cancellationToken.ThrowIfCancellationRequested();
             var user = await _userManager.FindByIdAsync(userId);
-            if (user == null)
-                return false;
+            if (user == null || user.IsDeleted == true)
+                return ChangePasswordResult(ChangePasswordStatus.CurrentPasswordIncorrect);
 
-            var result = await _userManager.ChangePasswordAsync(user, currentPassword ?? "", confirmPassword ?? "");
-            return result.Succeeded;
+            // The current password is verified before the new one is evaluated, so a
+            // caller without it learns nothing about the policy outcome.
+            if (!await _userManager.CheckPasswordAsync(user, currentPassword ?? ""))
+                return ChangePasswordResult(ChangePasswordStatus.CurrentPasswordIncorrect);
+
+            var result = await _userManager.ChangePasswordAsync(user, currentPassword ?? "", newPassword ?? "");
+            return ChangePasswordResult(result.Succeeded
+                ? ChangePasswordStatus.Succeeded
+                : ChangePasswordStatus.PasswordRejected);
         }
 
+        private static ChangePasswordResultDTO ChangePasswordResult(ChangePasswordStatus status) =>
+            new() { Status = status };
+
         public async Task<UserProfileDTO?> UpdateProfileAsync(string userId, UpdateProfileRequestDTO dto, CancellationToken cancellationToken)
         {
             var exists = await _userDataService.UpdateProfileAsync(
diff --git a/SeaHaven.Services/Interfaces/IAuthenticationService.cs b/SeaHaven.Services/Interfaces/IAuthenticationService.cs
index 426eb5f..e4ffc9b 100644
--- a/SeaHaven.Services/Interfaces/IAuthenticationService.cs
+++ b/SeaHaven.Services/Interfaces/IAuthenticationService.cs
@@ -5,7 +5,7 @@ namespace SeaHaven.Services.Interfaces
     public interface IAuthenticationService
     {
         Task<LoginResultDTO?> LoginAsync(string? username, string? password, CancellationToken cancellationToken);
-        Task<bool> ChangePasswordAsync(string userId, string? currentPassword, string? confirmPassword, CancellationToken cancellationToken);
+        Task<ChangePasswordResultDTO> ChangePasswordAsync(string userId, string? currentPassword, string? newPassword, CancellationToken cancellationToken);
         Task<UserProfileDTO?> UpdateProfileAsync(string userId, UpdateProfileRequestDTO dto, CancellationToken cancellationToken);
         Task<bool> ForgetPasswordAsync(string email, CancellationToken cancellationToken);
         Task<bool> VerifyCodeAsync(string code, CancellationToken cancellationToken);
diff --git a/SeaHavenIndustries/Program.cs b/SeaHavenIndustries/Program.cs
index 48b76c3..5a33b68 100644
--- a/SeaHavenIndustries/Program.cs
+++ b/SeaHavenIndustries/Program.cs
@@ -31,7 +31,8 @@ builder.Services.AddAuthentication(options =>
     .AddIdentityCookies();
 
 var connectionString = builder.Configuration.GetConnectionString("DefaultConnection") ?? throw new InvalidOperationException("Connection string 'DefaultConnection' not found.");
-builder.Services.AddDbContext<ApplicationDbContext>(options => {
+builder.Services.AddDbContext<ApplicationDbContext>(options =>
+{
     options.UseSqlServer(connectionString);
 }, ServiceLifetime.Transient);
 builder.Services.AddDatabaseDeveloperPageExceptionFilter();
@@ -39,11 +40,7 @@ builder.Services.AddDatabaseDeveloperPageExceptionFilter();
 builder.Services.AddIdentityCore<ApplicationUser>(options =>
 {
     options.SignIn.RequireConfirmedAccount = true;
-    options.Password.RequireDigit = true;
-    options.Password.RequireLowercase = false;
-    options.Password.RequireUppercase = false;
-    options.Password.RequireNonAlphanumeric = true;
-    options.Password.RequiredLength = 8;
+    IdentityPasswordPolicy.Apply(options.Password);
 }).AddRoles<IdentityRole>().AddEntityFrameworkStores<ApplicationDbContext>().AddSignInManager()
     .AddDefaultTokenProviders();
 

From 14c8e46dd0a7a1b779d9712556af6ef763debdd6 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 11:16:21 -0300
Subject: [PATCH 134/183] feat(notifications): SEV response-window alerts and
 breach acknowledgement

Reactive/Emergency work orders with a SEV 1-5 level are timed from their
creation against the SEV Respond deadline (2/4/8/24/72 hours, one backend
table). From 50% they are at risk: a dismissable High row in the "SLA at
Risk" section and an entry in the feed's slaAtRisk set with the server
clock (start, deadline, percent) for the banner and toast. From 100% they
are a Critical acknowledge row that only acknowledging removes.

POST /api/notifications/sla/{id}/acknowledge records who and when as a
work-order audit entry ("SLA breach acknowledged by <name>"), scoped to the
caller's feed audience: 404 outside it, 409 before the deadline, 204 when
recorded or already recorded. A later severity change is a new breach.
---
 .../NotificationFeedServiceTests.cs           |   6 +-
 .../NotificationSlaTests.cs                   | 402 ++++++++++++++++++
 .../Controllers/NotificationsController.cs    |  42 +-
 .../NotificationFeedDataService.cs            |  85 ++++
 .../INotificationFeedDataService.cs           |  17 +
 .../Models/NotificationFeedReadModels.cs      |  35 ++
 .../DTOs/NotificationFeedDTOs.cs              |  17 +
 .../Helpers/NotificationAudience.cs           |  27 ++
 .../Helpers/SlaResponseWindows.cs             |  55 +++
 .../Implementation/NotificationFeedService.cs |  84 +++-
 .../SlaBreachAcknowledgementService.cs        |  76 ++++
 .../ISlaBreachAcknowledgementService.cs       |  25 ++
 12 files changed, 853 insertions(+), 18 deletions(-)
 create mode 100644 Api.SeaHavenIndustries.Tests/NotificationSlaTests.cs
 create mode 100644 SeaHaven.Services/Helpers/NotificationAudience.cs
 create mode 100644 SeaHaven.Services/Helpers/SlaResponseWindows.cs
 create mode 100644 SeaHaven.Services/Implementation/SlaBreachAcknowledgementService.cs
 create mode 100644 SeaHaven.Services/Interfaces/ISlaBreachAcknowledgementService.cs

diff --git a/Api.SeaHavenIndustries.Tests/NotificationFeedServiceTests.cs b/Api.SeaHavenIndustries.Tests/NotificationFeedServiceTests.cs
index 9e8910e..6f483f1 100644
--- a/Api.SeaHavenIndustries.Tests/NotificationFeedServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/NotificationFeedServiceTests.cs
@@ -7,11 +7,13 @@ using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Http;
 using Microsoft.AspNetCore.Mvc;
 using Microsoft.EntityFrameworkCore;
+using Moq;
 using SeaHaven.DataServices.Implementation;
 using SeaHaven.Services.DTOs;
 using SeaHaven.Services.Exceptions;
 using SeaHaven.Services.Helpers;
 using SeaHaven.Services.Implementation;
+using SeaHaven.Services.Interfaces;
 using Xunit;
 
 namespace Api.SeaHavenIndustries.Tests;
@@ -546,7 +548,7 @@ public class NotificationFeedServiceTests
     public async Task Controller_MapsForbiddenScopeTo403()
     {
         using var context = NewContext();
-        var controller = new NotificationsController(NewService(context))
+        var controller = new NotificationsController(NewService(context), Mock.Of<ISlaBreachAcknowledgementService>())
         {
             ControllerContext = new ControllerContext
             {
@@ -565,7 +567,7 @@ public class NotificationFeedServiceTests
         using var context = NewContext();
         context.workOrders.Add(Open(1));
         await context.SaveChangesAsync();
-        var controller = new NotificationsController(NewService(context))
+        var controller = new NotificationsController(NewService(context), Mock.Of<ISlaBreachAcknowledgementService>())
         {
             ControllerContext = new ControllerContext
             {
diff --git a/Api.SeaHavenIndustries.Tests/NotificationSlaTests.cs b/Api.SeaHavenIndustries.Tests/NotificationSlaTests.cs
new file mode 100644
index 0000000..2df8a3f
--- /dev/null
+++ b/Api.SeaHavenIndustries.Tests/NotificationSlaTests.cs
@@ -0,0 +1,402 @@
+using System.Security.Claims;
+using Api.SeaHavenIndustries.Controllers;
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using FluentAssertions;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.Infrastructure;
+using Microsoft.EntityFrameworkCore;
+using SeaHaven.DataServices.Implementation;
+using SeaHaven.DataServices.Models;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Exceptions;
+using SeaHaven.Services.Helpers;
+using SeaHaven.Services.Implementation;
+using SeaHaven.Services.Interfaces;
+using Xunit;
+
+namespace Api.SeaHavenIndustries.Tests;
+
+/// <summary>
+/// SEV response-window alerts in the Notification Center: at risk from 50% of the window (banner set and a
+/// dismissable row), breached from 100% (an acknowledge row that only acknowledging removes).
+/// </summary>
+public class NotificationSlaTests
+{
+    private static readonly DateTime Now = new(2026, 9, 18, 16, 0, 0, DateTimeKind.Utc);
+
+    private sealed class FixedTimeProvider : TimeProvider
+    {
+        public override DateTimeOffset GetUtcNow() => new(Now);
+    }
+
+    private static ApplicationDbContext NewContext()
+    {
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseInMemoryDatabase(Guid.NewGuid().ToString())
+            .Options;
+        return new ApplicationDbContext(options);
+    }
+
+    private static WorkOrderAccountResolver Resolver(ApplicationDbContext context)
+        => new(new AccountDataService(context), new LocationDataService(context));
+
+    private static NotificationFeedService NewFeed(ApplicationDbContext context)
+        => new(
+            new NotificationFeedDataService(context),
+            new VendorOperationsDataService(context, new DispatchDataService(context)),
+            Resolver(context),
+            new FixedTimeProvider());
+
+    private static SlaBreachAcknowledgementService NewAcknowledgement(ApplicationDbContext context)
+        => new(
+            new NotificationFeedDataService(context),
+            new WorkOrderAuditDataService(context),
+            new UserDataService(context),
+            Resolver(context),
+            new FixedTimeProvider());
+
+    private static ClaimsPrincipal User(int accountId, string role, string userId = "disp-1")
+        => new(new ClaimsIdentity(new[]
+        {
+            new Claim(SeaHavenClaimTypes.AccountId, accountId.ToString()),
+            new Claim(ClaimTypes.NameIdentifier, userId),
+            new Claim(ClaimTypes.Role, role)
+        }, "test"));
+
+    private static WorkOrder Sla(
+        int id,
+        TimeSpan age,
+        string? severity = "1",
+        WorkOrderType? type = WorkOrderType.Reactive,
+        int accountId = 1,
+        string? assignTo = "disp-1",
+        DateTime? scheduled = null,
+        LifecycleStatus status = LifecycleStatus.Scheduled)
+        => new()
+        {
+            Id = id,
+            AccountId = accountId,
+            AssignTo = assignTo,
+            InternalWONumber = $"{1000 + id}",
+            WorkOrderType = type,
+            Severity = severity,
+            CreatedDate = Now - age,
+            ScheduledDate = scheduled,
+            LifecycleStatus = status
+        };
+
+    private static TimeSpan Window(int severity) => SlaResponseWindows.Respond[severity];
+
+    private static NotificationSectionDto? SlaSection(NotificationFeedDto feed)
+        => feed.Sections.SingleOrDefault(section => section.Reason == NotificationReasons.Sla);
+
+    private static IEnumerable<string> ItemIds(NotificationFeedDto feed)
+        => SlaSection(feed)?.Items.Select(item => item.Id) ?? Enumerable.Empty<string>();
+
+    [Fact]
+    public void ResponseWindows_AreTheRespondDeadlinesOnTheSeverityBadge()
+    {
+        SlaResponseWindows.Respond.ToDictionary(pair => pair.Key, pair => pair.Value.TotalMinutes)
+            .Should().Equal(new Dictionary<int, double>
+            {
+                [1] = 120,
+                [2] = 240,
+                [3] = 480,
+                [4] = 1440,
+                [5] = 4320
+            });
+    }
+
+    [Theory]
+    [InlineData(1)]
+    [InlineData(2)]
+    [InlineData(3)]
+    [InlineData(4)]
+    [InlineData(5)]
+    public async Task Thresholds_AtRiskFromHalfTheWindow_BreachedFromTheWholeWindow(int severity)
+    {
+        using var context = NewContext();
+        var second = TimeSpan.FromSeconds(1);
+        var window = Window(severity);
+        var level = severity.ToString();
+        context.workOrders.AddRange(
+            Sla(1, window / 2 - second, level),
+            Sla(2, window / 2, level),
+            Sla(3, window / 2 + second, level),
+            Sla(4, window - second, level),
+            Sla(5, window, level),
+            Sla(6, window + second, level));
+        await context.SaveChangesAsync();
+
+        var feed = await NewFeed(context).GetFeedAsync(User(1, "Dispatcher"), CancellationToken.None);
+
+        feed.SlaAtRisk.Select(workOrder => workOrder.Id).Should().BeEquivalentTo(new[] { 2, 3, 4 });
+        ItemIds(feed).Should().BeEquivalentTo(
+            "sla-at-risk-2", "sla-at-risk-3", "sla-at-risk-4", "sla-breach-5", "sla-breach-6");
+
+        var section = SlaSection(feed)!;
+        section.Label.Should().Be("SLA at Risk");
+        section.Count.Should().Be(5);
+        section.Severity.Should().Be(NotificationSeverities.Critical);
+        section.Items.Where(item => item.Id.StartsWith("sla-breach-")).Should().OnlyContain(item =>
+            item.RowType == NotificationRowTypes.Acknowledge
+            && item.Severity == NotificationSeverities.Critical
+            && item.Title.EndsWith("missed its response deadline"));
+        section.Items.Where(item => item.Id.StartsWith("sla-at-risk-")).Should().OnlyContain(item =>
+            item.RowType == NotificationRowTypes.Dismissable
+            && item.Severity == NotificationSeverities.High
+            && item.Title.EndsWith("is at risk of missing its response deadline"));
+    }
+
+    [Fact]
+    public async Task AtRisk_CarriesTheServerComputedClock()
+    {
+        using var context = NewContext();
+        context.workOrders.Add(Sla(7, TimeSpan.FromMinutes(90), "1"));
+        await context.SaveChangesAsync();
+
+        var feed = await NewFeed(context).GetFeedAsync(User(1, "Dispatcher"), CancellationToken.None);
+
+        var atRisk = feed.SlaAtRisk.Should().ContainSingle().Subject;
+        atRisk.Number.Should().Be("1007");
+        atRisk.Severity.Should().Be(1);
+        atRisk.StartedAt.Should().Be(Now.AddMinutes(-90));
+        atRisk.DeadlineAt.Should().Be(Now.AddMinutes(30));
+        atRisk.DeadlineAt.Kind.Should().Be(DateTimeKind.Utc);
+        atRisk.PercentElapsed.Should().Be(75);
+        SlaSection(feed)!.Items.Single().Title.Should().Be("WO #1007 is at risk of missing its response deadline");
+    }
+
+    [Fact]
+    public async Task OnlyOpenReactiveOrEmergencyWorkOrdersWithASeverityLevelAreTracked()
+    {
+        using var context = NewContext();
+        var late = Window(1) * 2;
+        context.workOrders.AddRange(
+            Sla(1, late, "1", WorkOrderType.Reactive),
+            Sla(2, late, "2", WorkOrderType.Emergency),
+            Sla(3, late, "1", WorkOrderType.PM),
+            Sla(4, late, "1", WorkOrderType.Inspection),
+            Sla(5, late, "1", type: null),
+            Sla(6, late, severity: null),
+            Sla(7, late, severity: "9"),
+            Sla(8, late, "1", status: LifecycleStatus.Completed),
+            Sla(9, late, "1", status: LifecycleStatus.Canceled));
+        await context.SaveChangesAsync();
+
+        var feed = await NewFeed(context).GetFeedAsync(User(1, "Dispatcher"), CancellationToken.None);
+
+        ItemIds(feed).Should().BeEquivalentTo("sla-breach-1", "sla-breach-2");
+    }
+
+    [Fact]
+    public async Task TheClockStartsAtCreation_WhateverTheScheduledDate()
+    {
+        using var context = NewContext();
+        context.workOrders.AddRange(
+            Sla(1, Window(3) + TimeSpan.FromMinutes(1), "3", scheduled: null),
+            // Scheduled next week, but logged three days ago: the deadline is long gone.
+            Sla(2, TimeSpan.FromDays(3), "4", scheduled: Now.AddDays(7)),
+            // Scheduled days ago, but logged ten minutes ago: nothing is due yet.
+            Sla(3, TimeSpan.FromMinutes(10), "4", scheduled: Now.AddDays(-5)));
+        await context.SaveChangesAsync();
+
+        var feed = await NewFeed(context).GetFeedAsync(User(1, "Dispatcher"), CancellationToken.None);
+
+        ItemIds(feed).Should().BeEquivalentTo("sla-breach-1", "sla-breach-2");
+        feed.SlaAtRisk.Should().BeEmpty();
+    }
+
+    [Fact]
+    public async Task Dispatcher_OnlySeesTheirOwnWorkOrders_AndTheAccountStaysTheBoundary()
+    {
+        using var context = NewContext();
+        var atRisk = Window(2) * 3 / 4;
+        context.workOrders.AddRange(
+            Sla(1, atRisk, "2", assignTo: "disp-1"),
+            Sla(2, atRisk, "2", assignTo: "disp-2"),
+            Sla(3, atRisk, "2", assignTo: null),
+            Sla(4, atRisk, "2", assignTo: "disp-1", accountId: 2));
+        await context.SaveChangesAsync();
+
+        var dispatcher = await NewFeed(context).GetFeedAsync(User(1, "Dispatcher", "disp-1"), CancellationToken.None);
+        var admin = await NewFeed(context).GetFeedAsync(User(1, "Admin", "admin-1"), CancellationToken.None);
+        var otherAccount = await NewFeed(context).GetFeedAsync(User(2, "Admin", "admin-2"), CancellationToken.None);
+
+        dispatcher.SlaAtRisk.Select(workOrder => workOrder.Id).Should().Equal(1);
+        ItemIds(dispatcher).Should().Equal("sla-at-risk-1");
+        admin.SlaAtRisk.Select(workOrder => workOrder.Id).Should().BeEquivalentTo(new[] { 1, 2, 3 });
+        otherAccount.SlaAtRisk.Select(workOrder => workOrder.Id).Should().Equal(4);
+    }
+
+    [Fact]
+    public async Task Breaches_AreCappedSeparately_SoAtRiskRowsAlwaysShow()
+    {
+        using var context = NewContext();
+        for (var id = 1; id <= NotificationFeedService.SectionItemLimit + 10; id++)
+            context.workOrders.Add(Sla(id, Window(1) + TimeSpan.FromMinutes(id), "1"));
+        context.workOrders.Add(Sla(500, Window(5) * 3 / 4, "5"));
+        await context.SaveChangesAsync();
+
+        var feed = await NewFeed(context).GetFeedAsync(User(1, "Dispatcher"), CancellationToken.None);
+
+        var section = SlaSection(feed)!;
+        section.Count.Should().Be(NotificationFeedService.SectionItemLimit + 11);
+        section.Items.Count(item => item.RowType == NotificationRowTypes.Acknowledge)
+            .Should().Be(NotificationFeedService.SectionItemLimit);
+        section.Items.Should().Contain(item => item.Id == "sla-at-risk-500");
+        // The newest breaches are kept.
+        section.Items.Should().Contain(item => item.Id == "sla-breach-1");
+        section.Items.Should().NotContain(item => item.Id == $"sla-breach-{NotificationFeedService.SectionItemLimit + 10}");
+    }
+
+    [Fact]
+    public async Task Acknowledge_RecordsWhoAndWhenInTheAuditHistory_AndRemovesTheRow()
+    {
+        using var context = NewContext();
+        context.Users.Add(new ApplicationUser { Id = "disp-1", UserName = "jane", FirstName = "Jane", LastName = "Doe" });
+        context.workOrders.AddRange(
+            Sla(1, Window(1) + TimeSpan.FromMinutes(5), "1"),
+            Sla(2, Window(1) + TimeSpan.FromMinutes(9), "1"));
+        await context.SaveChangesAsync();
+        var user = User(1, "Dispatcher", "disp-1");
+
+        var outcome = await NewAcknowledgement(context).AcknowledgeAsync(user, 1, CancellationToken.None);
+
+        outcome.Should().Be(SlaBreachAcknowledgementOutcome.Acknowledged);
+        var audit = await context.WorkOrderAuditLogs.SingleAsync();
+        audit.WorkOrderId.Should().Be(1);
+        audit.UserId.Should().Be("disp-1");
+        audit.CreatedAt.Should().Be(Now);
+        audit.Action.Should().Be("SLA breach acknowledged by Jane Doe");
+        audit.FieldName.Should().Be(SlaBreachAcknowledgementAudit.FieldName);
+        audit.NewValue.Should().Be("1");
+        audit.EventType.Should().Be("system");
+
+        var feed = await NewFeed(context).GetFeedAsync(user, CancellationToken.None);
+        ItemIds(feed).Should().Equal("sla-breach-2");
+        SlaSection(feed)!.Count.Should().Be(1);
+
+        var again = await NewAcknowledgement(context).AcknowledgeAsync(user, 1, CancellationToken.None);
+        again.Should().Be(SlaBreachAcknowledgementOutcome.AlreadyAcknowledged);
+        (await context.WorkOrderAuditLogs.CountAsync()).Should().Be(1);
+    }
+
+    [Fact]
+    public async Task Acknowledgement_CoversOnlyTheSeverityThatWasBreached()
+    {
+        using var context = NewContext();
+        var workOrder = Sla(1, TimeSpan.FromHours(30), "2");
+        context.workOrders.Add(workOrder);
+        await context.SaveChangesAsync();
+        var user = User(1, "Dispatcher", "disp-1");
+        await NewAcknowledgement(context).AcknowledgeAsync(user, 1, CancellationToken.None);
+
+        workOrder.Severity = "4";
+        await context.SaveChangesAsync();
+        var feed = await NewFeed(context).GetFeedAsync(user, CancellationToken.None);
+
+        ItemIds(feed).Should().Equal("sla-breach-1");
+    }
+
+    [Fact]
+    public async Task Acknowledge_IsRefusedOutsideTheCallersFeed()
+    {
+        using var context = NewContext();
+        var late = Window(1) * 2;
+        context.workOrders.AddRange(
+            Sla(1, late, "1", accountId: 2, assignTo: "disp-1"),
+            Sla(2, late, "1", assignTo: "disp-2"),
+            Sla(3, late, "1", status: LifecycleStatus.Completed),
+            Sla(4, late, "1", WorkOrderType.PM));
+        await context.SaveChangesAsync();
+        var service = NewAcknowledgement(context);
+        var dispatcher = User(1, "Dispatcher", "disp-1");
+
+        (await service.AcknowledgeAsync(dispatcher, 1, CancellationToken.None))
+            .Should().Be(SlaBreachAcknowledgementOutcome.NotFound);
+        (await service.AcknowledgeAsync(User(1, "Admin", "admin-1"), 1, CancellationToken.None))
+            .Should().Be(SlaBreachAcknowledgementOutcome.NotFound);
+        (await service.AcknowledgeAsync(dispatcher, 2, CancellationToken.None))
+            .Should().Be(SlaBreachAcknowledgementOutcome.NotFound);
+        (await service.AcknowledgeAsync(dispatcher, 3, CancellationToken.None))
+            .Should().Be(SlaBreachAcknowledgementOutcome.NotFound);
+        (await service.AcknowledgeAsync(dispatcher, 4, CancellationToken.None))
+            .Should().Be(SlaBreachAcknowledgementOutcome.NotFound);
+        (await context.WorkOrderAuditLogs.CountAsync()).Should().Be(0);
+
+        var otherAccountAdmin = User(2, "Admin", "admin-2");
+        (await service.AcknowledgeAsync(otherAccountAdmin, 1, CancellationToken.None))
+            .Should().Be(SlaBreachAcknowledgementOutcome.Acknowledged);
+    }
+
+    [Fact]
+    public async Task Acknowledge_BeforeTheDeadlineIsRefused()
+    {
+        using var context = NewContext();
+        context.workOrders.Add(Sla(1, Window(1) * 3 / 4, "1"));
+        await context.SaveChangesAsync();
+
+        var outcome = await NewAcknowledgement(context)
+            .AcknowledgeAsync(User(1, "Dispatcher", "disp-1"), 1, CancellationToken.None);
+
+        outcome.Should().Be(SlaBreachAcknowledgementOutcome.NotBreached);
+        (await context.WorkOrderAuditLogs.CountAsync()).Should().Be(0);
+    }
+
+    [Fact]
+    public async Task Acknowledge_WithoutANotificationRole_FailsClosed()
+    {
+        using var context = NewContext();
+        context.workOrders.Add(Sla(1, Window(1) * 2, "1"));
+        await context.SaveChangesAsync();
+
+        var act = () => NewAcknowledgement(context).AcknowledgeAsync(User(1, "Vendor"), 1, CancellationToken.None);
+
+        (await act.Should().ThrowAsync<WorkOrderBoardValidationException>()).Which.Code.Should().Be("Forbidden");
+    }
+
+    [Theory]
+    [InlineData(1, "Dispatcher", 1, StatusCodes.Status204NoContent)]
+    [InlineData(2, "Admin", 1, StatusCodes.Status404NotFound)]
+    [InlineData(1, "Dispatcher", 2, StatusCodes.Status409Conflict)]
+    [InlineData(1, "Vendor", 1, StatusCodes.Status403Forbidden)]
+    public async Task Controller_MapsAcknowledgeOutcomes(int accountId, string role, int workOrderId, int expectedStatus)
+    {
+        using var context = NewContext();
+        context.workOrders.AddRange(
+            Sla(1, Window(1) * 2, "1"),
+            Sla(2, Window(1) * 3 / 4, "1"));
+        await context.SaveChangesAsync();
+        var controller = new NotificationsController(NewFeed(context), NewAcknowledgement(context))
+        {
+            ControllerContext = new ControllerContext
+            {
+                HttpContext = new DefaultHttpContext { User = User(accountId, role, "disp-1") }
+            }
+        };
+
+        var result = await controller.AcknowledgeSlaBreach(workOrderId, CancellationToken.None);
+
+        result.Should().BeAssignableTo<IStatusCodeActionResult>()
+            .Which.StatusCode.Should().Be(expectedStatus);
+    }
+
+    [Fact]
+    public async Task Acknowledge_ForwardsCancellation()
+    {
+        using var context = NewContext();
+        context.workOrders.Add(Sla(1, Window(1) * 2, "1"));
+        await context.SaveChangesAsync();
+        using var cancellation = new CancellationTokenSource();
+        cancellation.Cancel();
+
+        var act = () => NewAcknowledgement(context)
+            .AcknowledgeAsync(User(1, "Dispatcher", "disp-1"), 1, cancellation.Token);
+
+        await act.Should().ThrowAsync<OperationCanceledException>();
+        (await context.WorkOrderAuditLogs.CountAsync()).Should().Be(0);
+    }
+}
diff --git a/Api.SeaHavenIndustries/Controllers/NotificationsController.cs b/Api.SeaHavenIndustries/Controllers/NotificationsController.cs
index 5eff188..f091119 100644
--- a/Api.SeaHavenIndustries/Controllers/NotificationsController.cs
+++ b/Api.SeaHavenIndustries/Controllers/NotificationsController.cs
@@ -11,10 +11,50 @@ namespace Api.SeaHavenIndustries.Controllers
     public class NotificationsController : ControllerBase
     {
         private readonly INotificationFeedService _feedService;
+        private readonly ISlaBreachAcknowledgementService _slaAcknowledgement;
 
-        public NotificationsController(INotificationFeedService feedService)
+        public NotificationsController(
+            INotificationFeedService feedService,
+            ISlaBreachAcknowledgementService slaAcknowledgement)
         {
             _feedService = feedService;
+            _slaAcknowledgement = slaAcknowledgement;
+        }
+
+        /// <summary>
+        /// Acknowledges the missed response deadline of one work order in the caller's Notification Center.
+        /// 204 when recorded or already recorded; 404 when the caller's feed does not cover the work order;
+        /// 409 when its deadline has not been missed.
+        /// </summary>
+        [HttpPost("sla/{workOrderId:int}/acknowledge")]
+        public async Task<IActionResult> AcknowledgeSlaBreach(int workOrderId, CancellationToken cancellationToken)
+        {
+            try
+            {
+                var outcome = await _slaAcknowledgement.AcknowledgeAsync(User, workOrderId, cancellationToken);
+                return outcome switch
+                {
+                    SlaBreachAcknowledgementOutcome.NotFound => NotFound(new
+                    {
+                        code = "NotFound",
+                        message = "Work order not found."
+                    }),
+                    SlaBreachAcknowledgementOutcome.NotBreached => Conflict(new
+                    {
+                        code = "NotBreached",
+                        message = "This work order has not missed its response deadline."
+                    }),
+                    _ => NoContent()
+                };
+            }
+            catch (WorkOrderBoardValidationException ex) when (ex.Code == "Forbidden")
+            {
+                return StatusCode(StatusCodes.Status403Forbidden, new
+                {
+                    code = ex.Code,
+                    message = ex.Message
+                });
+            }
         }
 
         [HttpGet]
diff --git a/SeaHaven.DataServices/Implementation/NotificationFeedDataService.cs b/SeaHaven.DataServices/Implementation/NotificationFeedDataService.cs
index 5b5748f..f3b0986 100644
--- a/SeaHaven.DataServices/Implementation/NotificationFeedDataService.cs
+++ b/SeaHaven.DataServices/Implementation/NotificationFeedDataService.cs
@@ -14,6 +14,8 @@ namespace SeaHaven.DataServices.Implementation
         // Uplift outcomes a requester is told about; "Denied" is the legacy spelling of Rejected.
         private static readonly string[] DecisionStatuses = { "Approved", "Rejected", "Denied", "Revoked" };
 
+        private static readonly string[] SlaSeverities = { "1", "2", "3", "4", "5" };
+
         private const string AssignToAuditField = "AssignTo";
         private const string LegacyAssignedToAuditField = "AssignedTo";
 
@@ -176,6 +178,89 @@ namespace SeaHaven.DataServices.Implementation
             return await candidates.Take(limit).ToListAsync(cancellationToken);
         }
 
+        public async Task<NotificationSlaCandidates> GetSlaCandidatesAsync(
+            NotificationFeedScope scope,
+            NotificationSlaCutoffs atRisk,
+            NotificationSlaCutoffs breached,
+            int breachedLimit,
+            CancellationToken cancellationToken)
+        {
+            var eligible = SlaEligibleWorkOrders(scope);
+
+            // Bounded by the longest window: nothing created more than 72 hours ago is still at risk.
+            var atRiskItems = await ProjectSla(CreatedAfter(CreatedAtOrBefore(eligible, atRisk), breached))
+                .OrderBy(candidate => candidate.CreatedAt)
+                .ThenBy(candidate => candidate.Id)
+                .ToListAsync(cancellationToken);
+
+            // Breaches stay until acknowledged, so legacy open work orders can make this set large.
+            var unacknowledged = CreatedAtOrBefore(eligible, breached)
+                .Where(w => !_context.WorkOrderAuditLogs.Any(log => log.WorkOrderId == w.Id
+                    && log.FieldName == SlaBreachAcknowledgementAudit.FieldName
+                    && log.NewValue == w.Severity));
+            var breachedTotal = await unacknowledged.CountAsync(cancellationToken);
+            var breachedItems = breachedTotal == 0
+                ? new List<NotificationSlaCandidate>()
+                : await ProjectSla(unacknowledged)
+                    .OrderByDescending(candidate => candidate.CreatedAt)
+                    .ThenByDescending(candidate => candidate.Id)
+                    .Take(breachedLimit)
+                    .ToListAsync(cancellationToken);
+
+            return new NotificationSlaCandidates
+            {
+                AtRisk = atRiskItems,
+                Breached = breachedItems,
+                BreachedTotal = breachedTotal
+            };
+        }
+
+        public Task<NotificationSlaCandidate?> GetSlaCandidateAsync(
+            NotificationFeedScope scope, int workOrderId, CancellationToken cancellationToken)
+            => ProjectSla(SlaEligibleWorkOrders(scope).Where(w => w.Id == workOrderId))
+                .FirstOrDefaultAsync(cancellationToken);
+
+        // Same rule as the board's severity facet: Reactive or Emergency with a stored SEV level "1"–"5".
+        private IQueryable<WorkOrder> SlaEligibleWorkOrders(NotificationFeedScope scope)
+            => OpenWorkOrders(scope).Where(w =>
+                (w.WorkOrderType == WorkOrderType.Reactive || w.WorkOrderType == WorkOrderType.Emergency)
+                && SlaSeverities.Contains(w.Severity ?? "")
+                && w.CreatedDate != null);
+
+        private static IQueryable<WorkOrder> CreatedAtOrBefore(IQueryable<WorkOrder> workOrders, NotificationSlaCutoffs cutoffs)
+        {
+            var (sev1, sev2, sev3, sev4, sev5) = (cutoffs.Sev1, cutoffs.Sev2, cutoffs.Sev3, cutoffs.Sev4, cutoffs.Sev5);
+            return workOrders.Where(w =>
+                (w.Severity == "1" && w.CreatedDate <= sev1)
+                || (w.Severity == "2" && w.CreatedDate <= sev2)
+                || (w.Severity == "3" && w.CreatedDate <= sev3)
+                || (w.Severity == "4" && w.CreatedDate <= sev4)
+                || (w.Severity == "5" && w.CreatedDate <= sev5));
+        }
+
+        private static IQueryable<WorkOrder> CreatedAfter(IQueryable<WorkOrder> workOrders, NotificationSlaCutoffs cutoffs)
+        {
+            var (sev1, sev2, sev3, sev4, sev5) = (cutoffs.Sev1, cutoffs.Sev2, cutoffs.Sev3, cutoffs.Sev4, cutoffs.Sev5);
+            return workOrders.Where(w =>
+                (w.Severity == "1" && w.CreatedDate > sev1)
+                || (w.Severity == "2" && w.CreatedDate > sev2)
+                || (w.Severity == "3" && w.CreatedDate > sev3)
+                || (w.Severity == "4" && w.CreatedDate > sev4)
+                || (w.Severity == "5" && w.CreatedDate > sev5));
+        }
+
+        private IQueryable<NotificationSlaCandidate> ProjectSla(IQueryable<WorkOrder> workOrders)
+            => workOrders.Select(w => new NotificationSlaCandidate
+            {
+                Id = w.Id,
+                Number = w.InternalWONumber ?? w.WorkerOrderNumber,
+                Severity = w.Severity!,
+                CreatedAt = w.CreatedDate!.Value,
+                BreachAcknowledged = _context.WorkOrderAuditLogs.Any(log => log.WorkOrderId == w.Id
+                    && log.FieldName == SlaBreachAcknowledgementAudit.FieldName
+                    && log.NewValue == w.Severity)
+            });
+
         private IQueryable<WorkOrder> ScopedWorkOrders(int? accountId)
         {
             var workOrders = WorkOrderBoardQueryFilters.ApplyBaseScope(_context.workOrders.AsNoTracking());
diff --git a/SeaHaven.DataServices/Interfaces/INotificationFeedDataService.cs b/SeaHaven.DataServices/Interfaces/INotificationFeedDataService.cs
index 1976764..b1aed65 100644
--- a/SeaHaven.DataServices/Interfaces/INotificationFeedDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/INotificationFeedDataService.cs
@@ -48,5 +48,22 @@ namespace SeaHaven.DataServices.Interfaces
         /// </summary>
         Task<IReadOnlyList<NotificationUpliftDecisionCandidate>> GetUpliftDecisionsAsync(
             NotificationPersonalScope scope, DateTime since, int limit, CancellationToken cancellationToken);
+
+        /// <summary>
+        /// Open Reactive/Emergency work orders with a SEV 1–5 level, split by creation time: at risk when
+        /// created at or before <paramref name="atRisk"/> but after <paramref name="breached"/>, breached when
+        /// created at or before <paramref name="breached"/> and not yet acknowledged for their current level.
+        /// Breaches are the <paramref name="breachedLimit"/> newest; the at-risk set is bounded by the longest window.
+        /// </summary>
+        Task<NotificationSlaCandidates> GetSlaCandidatesAsync(
+            NotificationFeedScope scope,
+            NotificationSlaCutoffs atRisk,
+            NotificationSlaCutoffs breached,
+            int breachedLimit,
+            CancellationToken cancellationToken);
+
+        /// <summary>The work order as an SLA candidate inside <paramref name="scope"/>, or null when it is not one.</summary>
+        Task<NotificationSlaCandidate?> GetSlaCandidateAsync(
+            NotificationFeedScope scope, int workOrderId, CancellationToken cancellationToken);
     }
 }
diff --git a/SeaHaven.DataServices/Models/NotificationFeedReadModels.cs b/SeaHaven.DataServices/Models/NotificationFeedReadModels.cs
index d404be2..53165ec 100644
--- a/SeaHaven.DataServices/Models/NotificationFeedReadModels.cs
+++ b/SeaHaven.DataServices/Models/NotificationFeedReadModels.cs
@@ -64,3 +64,38 @@ public sealed class NotificationUpliftDecisionCandidate
     public string? DecisionNote { get; init; }
     public DateTime DecidedAt { get; init; }
 }
+
+/// <summary>
+/// Per SEV level, the latest work-order creation time that has reached a response-window threshold.
+/// The business service computes them; the query only compares creation times.
+/// </summary>
+public sealed record NotificationSlaCutoffs(DateTime Sev1, DateTime Sev2, DateTime Sev3, DateTime Sev4, DateTime Sev5);
+
+/// <summary>
+/// The work-order audit entry that records an SLA breach acknowledgement: who (UserId), when (CreatedAt)
+/// and the SEV level whose deadline was missed (NewValue). It is also what keeps the breach out of the feed.
+/// </summary>
+public static class SlaBreachAcknowledgementAudit
+{
+    public const string FieldName = "SlaBreachAcknowledged";
+}
+
+/// <summary>An open Reactive/Emergency work order with a SEV 1–5 level and a creation time.</summary>
+public sealed class NotificationSlaCandidate
+{
+    public int Id { get; init; }
+    public string? Number { get; init; }
+    public string Severity { get; init; } = "";
+    public DateTime CreatedAt { get; init; }
+    /// <summary>A breach of the work order's current severity has already been acknowledged.</summary>
+    public bool BreachAcknowledged { get; init; }
+}
+
+public sealed class NotificationSlaCandidates
+{
+    /// <summary>Every work order past half its window but not past the whole window.</summary>
+    public IReadOnlyList<NotificationSlaCandidate> AtRisk { get; init; } = Array.Empty<NotificationSlaCandidate>();
+    /// <summary>Unacknowledged breaches: the newest slice, plus the unbounded total.</summary>
+    public IReadOnlyList<NotificationSlaCandidate> Breached { get; init; } = Array.Empty<NotificationSlaCandidate>();
+    public int BreachedTotal { get; init; }
+}
diff --git a/SeaHaven.Services/DTOs/NotificationFeedDTOs.cs b/SeaHaven.Services/DTOs/NotificationFeedDTOs.cs
index a2ab7e9..10d8146 100644
--- a/SeaHaven.Services/DTOs/NotificationFeedDTOs.cs
+++ b/SeaHaven.Services/DTOs/NotificationFeedDTOs.cs
@@ -126,9 +126,26 @@ namespace SeaHaven.Services.DTOs
         public IReadOnlyList<NotificationItemDto> Items { get; init; } = Array.Empty<NotificationItemDto>();
     }
 
+    /// <summary>
+    /// A work order past half of its SEV response window and not yet past the whole window, with the
+    /// server-computed clock. Drives the top-of-app banner and the one-time 50% toast.
+    /// </summary>
+    public sealed class NotificationSlaWorkOrderDto
+    {
+        public int Id { get; init; }
+        public string? Number { get; init; }
+        public int Severity { get; init; }
+        /// <summary>The work order's creation time; the response clock never starts at the scheduled date.</summary>
+        public DateTime StartedAt { get; init; }
+        public DateTime DeadlineAt { get; init; }
+        public int PercentElapsed { get; init; }
+    }
+
     public sealed class NotificationFeedDto
     {
         public DateTime GeneratedAt { get; init; }
         public IReadOnlyList<NotificationSectionDto> Sections { get; init; } = Array.Empty<NotificationSectionDto>();
+        /// <summary>Every at-risk work order in the feed's scope, oldest first; not capped like section items.</summary>
+        public IReadOnlyList<NotificationSlaWorkOrderDto> SlaAtRisk { get; init; } = Array.Empty<NotificationSlaWorkOrderDto>();
     }
 }
diff --git a/SeaHaven.Services/Helpers/NotificationAudience.cs b/SeaHaven.Services/Helpers/NotificationAudience.cs
new file mode 100644
index 0000000..e35d76b
--- /dev/null
+++ b/SeaHaven.Services/Helpers/NotificationAudience.cs
@@ -0,0 +1,27 @@
+using System.Security.Claims;
+using SeaHaven.Services.Exceptions;
+
+namespace SeaHaven.Services.Helpers
+{
+    /// <summary>Whose work orders the Notification Center covers for the signed-in user.</summary>
+    public static class NotificationAudience
+    {
+        // Dispatchers see their own work orders. Roles that already see every dispatcher's
+        // work on the dashboard see the whole account, including work nobody owns yet.
+        public static (string? DispatcherId, bool SeesUnassigned) Resolve(ClaimsPrincipal user)
+        {
+            if (user.IsInRole("Dispatcher"))
+            {
+                var dispatcherId = user.FindFirstValue(ClaimTypes.NameIdentifier);
+                if (string.IsNullOrWhiteSpace(dispatcherId))
+                    throw new WorkOrderBoardValidationException("Forbidden", "Dispatcher identity is required.");
+                return (dispatcherId, false);
+            }
+
+            if (user.IsInRole("Admin") || user.IsInRole("Manager") || user.IsInRole("Scheduler"))
+                return (null, true);
+
+            throw new WorkOrderBoardValidationException("Forbidden", "Notifications require an authorized role.");
+        }
+    }
+}
diff --git a/SeaHaven.Services/Helpers/SlaResponseWindows.cs b/SeaHaven.Services/Helpers/SlaResponseWindows.cs
new file mode 100644
index 0000000..35ab817
--- /dev/null
+++ b/SeaHaven.Services/Helpers/SlaResponseWindows.cs
@@ -0,0 +1,55 @@
+namespace SeaHaven.Services.Helpers
+{
+    public enum SlaState
+    {
+        OnTrack,
+        /// <summary>At least half of the response window has elapsed.</summary>
+        AtRisk,
+        /// <summary>The whole response window has elapsed: the response deadline was missed.</summary>
+        Breached
+    }
+
+    /// <summary>Where one work order stands against its SEV response window.</summary>
+    public sealed record SlaClock(int Severity, DateTime StartedAt, DateTime DeadlineAt, int PercentElapsed, SlaState State);
+
+    /// <summary>
+    /// Respond deadlines from the client's SEV table, the same values the severity badge tooltip shows.
+    /// They apply to Reactive and Emergency work orders with a severity, and the clock starts when the
+    /// work order is created, never at its scheduled date. The table's "next day if after hours" note
+    /// is not modelled: the clock always counts the plain hours.
+    /// </summary>
+    public static class SlaResponseWindows
+    {
+        public static readonly IReadOnlyDictionary<int, TimeSpan> Respond = new Dictionary<int, TimeSpan>
+        {
+            [1] = TimeSpan.FromHours(2),
+            [2] = TimeSpan.FromHours(4),
+            [3] = TimeSpan.FromHours(8),
+            [4] = TimeSpan.FromHours(24),
+            [5] = TimeSpan.FromHours(72)
+        };
+
+        /// <summary>The latest creation time at which a work order of this level has used half its window.</summary>
+        public static DateTime AtRiskCreatedAtOrBefore(int severity, DateTime now) => now - Respond[severity] / 2;
+
+        /// <summary>The latest creation time at which a work order of this level has missed its deadline.</summary>
+        public static DateTime BreachedCreatedAtOrBefore(int severity, DateTime now) => now - Respond[severity];
+
+        /// <summary>Null when the severity is not a SEV 1–5 level.</summary>
+        public static SlaClock? Evaluate(string? severity, DateTime createdAt, DateTime now)
+        {
+            var level = WorkOrderSeverityRules.ParseLevel(severity);
+            if (level is not int sev)
+                return null;
+
+            var window = Respond[sev];
+            var startedAt = DateTime.SpecifyKind(createdAt, DateTimeKind.Utc);
+            var elapsed = now - startedAt;
+            var state = elapsed >= window
+                ? SlaState.Breached
+                : elapsed >= window / 2 ? SlaState.AtRisk : SlaState.OnTrack;
+            var percent = (int)Math.Floor(Math.Max(elapsed.Ticks, 0) * 100d / window.Ticks);
+            return new SlaClock(sev, startedAt, startedAt + window, percent, state);
+        }
+    }
+}
diff --git a/SeaHaven.Services/Implementation/NotificationFeedService.cs b/SeaHaven.Services/Implementation/NotificationFeedService.cs
index ff12e45..9b08cc9 100644
--- a/SeaHaven.Services/Implementation/NotificationFeedService.cs
+++ b/SeaHaven.Services/Implementation/NotificationFeedService.cs
@@ -41,11 +41,13 @@ namespace SeaHaven.Services.Implementation
         public async Task<NotificationFeedDto> GetFeedAsync(ClaimsPrincipal user, CancellationToken cancellationToken)
         {
             var accountId = _accountResolver.ResolveAccountFilter(user);
-            var (dispatcherId, seesUnassigned) = ResolveAudience(user);
+            var (dispatcherId, seesUnassigned) = NotificationAudience.Resolve(user);
             var scope = new NotificationFeedScope(accountId, dispatcherId);
             var now = _timeProvider.GetUtcNow().UtcDateTime;
 
             var sections = new List<(string Reason, int Count, IReadOnlyList<NotificationItemDto> Items)>();
+            var (slaSection, slaAtRisk) = await SlaAsync(scope, now, cancellationToken);
+            sections.Add(slaSection);
             if (seesUnassigned)
                 sections.Add(await UnassignedAsync(accountId, now, cancellationToken));
             sections.Add(await NoVendorAsync(scope, now, cancellationToken));
@@ -59,28 +61,80 @@ namespace SeaHaven.Services.Implementation
             return new NotificationFeedDto
             {
                 GeneratedAt = now,
-                Sections = NotificationFeedOrdering.Order(sections)
+                Sections = NotificationFeedOrdering.Order(sections),
+                SlaAtRisk = slaAtRisk
             };
         }
 
-        // Dispatchers see their own work orders. Roles that already see every dispatcher's
-        // work on the dashboard see the whole account, including work nobody owns yet.
-        private static (string? DispatcherId, bool SeesUnassigned) ResolveAudience(ClaimsPrincipal user)
+        // Reactive/Emergency work orders against their SEV response window. An at-risk work order is a
+        // normal dismissable row (and feeds the banner); a missed deadline is an acknowledge row that stays
+        // until someone acknowledges it. Breaches and at-risk rows are capped separately so a backlog of
+        // old breaches can never hide a work order that can still be saved.
+        private async Task<((string, int, IReadOnlyList<NotificationItemDto>) Section, IReadOnlyList<NotificationSlaWorkOrderDto> AtRisk)> SlaAsync(
+            NotificationFeedScope scope, DateTime now, CancellationToken cancellationToken)
         {
-            if (user.IsInRole("Dispatcher"))
-            {
-                var dispatcherId = user.FindFirstValue(ClaimTypes.NameIdentifier);
-                if (string.IsNullOrWhiteSpace(dispatcherId))
-                    throw new WorkOrderBoardValidationException("Forbidden", "Dispatcher identity is required.");
-                return (dispatcherId, false);
-            }
+            var candidates = await _data.GetSlaCandidatesAsync(
+                scope,
+                SlaCutoffs(level => SlaResponseWindows.AtRiskCreatedAtOrBefore(level, now)),
+                SlaCutoffs(level => SlaResponseWindows.BreachedCreatedAtOrBefore(level, now)),
+                SectionItemLimit,
+                cancellationToken);
 
-            if (user.IsInRole("Admin") || user.IsInRole("Manager") || user.IsInRole("Scheduler"))
-                return (null, true);
+            var atRisk = candidates.AtRisk
+                .Select(candidate => (Candidate: candidate, Clock: SlaResponseWindows.Evaluate(candidate.Severity, candidate.CreatedAt, now)))
+                .Where(entry => entry.Clock is { State: SlaState.AtRisk })
+                .Select(entry => new NotificationSlaWorkOrderDto
+                {
+                    Id = entry.Candidate.Id,
+                    Number = entry.Candidate.Number,
+                    Severity = entry.Clock!.Severity,
+                    StartedAt = entry.Clock.StartedAt,
+                    DeadlineAt = entry.Clock.DeadlineAt,
+                    PercentElapsed = entry.Clock.PercentElapsed
+                })
+                .ToList();
 
-            throw new WorkOrderBoardValidationException("Forbidden", "Notifications require an authorized role.");
+            var items = candidates.Breached
+                .Select(candidate => SlaItem(candidate, SlaResponseWindows.Evaluate(candidate.Severity, candidate.CreatedAt, now)))
+                .OfType<NotificationItemDto>()
+                .Concat(atRisk
+                    .OrderByDescending(workOrder => workOrder.PercentElapsed)
+                    .Take(SectionItemLimit)
+                    .Select(workOrder => new NotificationItemDto
+                    {
+                        Id = $"sla-at-risk-{workOrder.Id}",
+                        Reason = NotificationReasons.Sla,
+                        Severity = NotificationSeverities.High,
+                        Title = $"{WorkOrderLabel(workOrder.Id, workOrder.Number)} is at risk of missing its response deadline",
+                        Count = 1,
+                        TriggeredAt = workOrder.StartedAt + SlaResponseWindows.Respond[workOrder.Severity] / 2,
+                        Target = WorkOrderTarget(workOrder.Id, NotificationWorkOrderTabs.Info),
+                        WorkOrders = new[] { new NotificationWorkOrderRefDto { Id = workOrder.Id, Number = workOrder.Number } }
+                    }))
+                .ToList();
+
+            return ((NotificationReasons.Sla, candidates.BreachedTotal + atRisk.Count, items), atRisk);
         }
 
+        private static NotificationItemDto? SlaItem(NotificationSlaCandidate candidate, SlaClock? clock)
+            => clock is not { State: SlaState.Breached }
+                ? null
+                : new NotificationItemDto
+                {
+                    Id = $"sla-breach-{candidate.Id}",
+                    Reason = NotificationReasons.Sla,
+                    Severity = NotificationSeverities.Critical,
+                    RowType = NotificationRowTypes.Acknowledge,
+                    Title = $"{WorkOrderLabel(candidate.Id, candidate.Number)} missed its response deadline",
+                    Count = 1,
+                    TriggeredAt = clock.DeadlineAt,
+                    Target = WorkOrderTarget(candidate.Id, NotificationWorkOrderTabs.Info),
+                    WorkOrders = new[] { new NotificationWorkOrderRefDto { Id = candidate.Id, Number = candidate.Number } }
+                };
+
+        private static NotificationSlaCutoffs SlaCutoffs(Func<int, DateTime> cutoff)
+            => new(cutoff(1), cutoff(2), cutoff(3), cutoff(4), cutoff(5));
+
         // Items addressed to the signed-in user whatever their role: assignments to them, comments on
         // work they take part in, mentions of them, and decisions on uplifts they requested. The
         // account scope still applies; the dispatcher scope does not, because a mention or an uplift
diff --git a/SeaHaven.Services/Implementation/SlaBreachAcknowledgementService.cs b/SeaHaven.Services/Implementation/SlaBreachAcknowledgementService.cs
new file mode 100644
index 0000000..412317e
--- /dev/null
+++ b/SeaHaven.Services/Implementation/SlaBreachAcknowledgementService.cs
@@ -0,0 +1,76 @@
+using System.Security.Claims;
+using Data.SeaHavenIndustries;
+using SeaHaven.DataServices.Interfaces;
+using SeaHaven.DataServices.Models;
+using SeaHaven.Services.Exceptions;
+using SeaHaven.Services.Helpers;
+using SeaHaven.Services.Interfaces;
+
+namespace SeaHaven.Services.Implementation
+{
+    public class SlaBreachAcknowledgementService : ISlaBreachAcknowledgementService
+    {
+        private readonly INotificationFeedDataService _feedData;
+        private readonly IWorkOrderAuditDataService _auditData;
+        private readonly IUserDataService _userData;
+        private readonly IWorkOrderAccountResolver _accountResolver;
+        private readonly TimeProvider _timeProvider;
+
+        public SlaBreachAcknowledgementService(
+            INotificationFeedDataService feedData,
+            IWorkOrderAuditDataService auditData,
+            IUserDataService userData,
+            IWorkOrderAccountResolver accountResolver,
+            TimeProvider timeProvider)
+        {
+            _feedData = feedData;
+            _auditData = auditData;
+            _userData = userData;
+            _accountResolver = accountResolver;
+            _timeProvider = timeProvider;
+        }
+
+        public async Task<SlaBreachAcknowledgementOutcome> AcknowledgeAsync(
+            ClaimsPrincipal user, int workOrderId, CancellationToken cancellationToken)
+        {
+            // The same audience as the feed: a row the caller cannot see cannot be acknowledged.
+            var accountId = _accountResolver.ResolveAccountFilter(user);
+            var (dispatcherId, _) = NotificationAudience.Resolve(user);
+            var userId = user.FindFirstValue(ClaimTypes.NameIdentifier);
+            if (string.IsNullOrWhiteSpace(userId))
+                throw new WorkOrderBoardValidationException("Forbidden", "Acknowledging requires a signed-in user.");
+
+            var candidate = await _feedData.GetSlaCandidateAsync(
+                new NotificationFeedScope(accountId, dispatcherId), workOrderId, cancellationToken);
+            if (candidate == null)
+                return SlaBreachAcknowledgementOutcome.NotFound;
+
+            var now = _timeProvider.GetUtcNow().UtcDateTime;
+            var clock = SlaResponseWindows.Evaluate(candidate.Severity, candidate.CreatedAt, now);
+            if (clock is not { State: SlaState.Breached })
+                return SlaBreachAcknowledgementOutcome.NotBreached;
+            if (candidate.BreachAcknowledged)
+                return SlaBreachAcknowledgementOutcome.AlreadyAcknowledged;
+
+            var names = await _userData.GetDisplayNamesByIdsAsync(new[] { userId });
+            var name = names.TryGetValue(userId, out var displayName) && !string.IsNullOrWhiteSpace(displayName)
+                ? displayName
+                : user.FindFirstValue(ClaimTypes.Name) ?? userId;
+
+            _auditData.EnqueueAuditLog(new WorkOrderAuditLog
+            {
+                WorkOrderId = workOrderId,
+                UserId = userId,
+                FieldName = SlaBreachAcknowledgementAudit.FieldName,
+                OldValue = clock.DeadlineAt.ToString("o"),
+                NewValue = candidate.Severity,
+                Action = $"SLA breach acknowledged by {name}",
+                EventType = "system",
+                ActorType = "internal",
+                CreatedAt = now
+            });
+            await _auditData.PersistAsync(cancellationToken);
+            return SlaBreachAcknowledgementOutcome.Acknowledged;
+        }
+    }
+}
diff --git a/SeaHaven.Services/Interfaces/ISlaBreachAcknowledgementService.cs b/SeaHaven.Services/Interfaces/ISlaBreachAcknowledgementService.cs
new file mode 100644
index 0000000..e728a6c
--- /dev/null
+++ b/SeaHaven.Services/Interfaces/ISlaBreachAcknowledgementService.cs
@@ -0,0 +1,25 @@
+using System.Security.Claims;
+
+namespace SeaHaven.Services.Interfaces
+{
+    public enum SlaBreachAcknowledgementOutcome
+    {
+        Acknowledged,
+        /// <summary>This breach was already acknowledged; nothing new is recorded.</summary>
+        AlreadyAcknowledged,
+        /// <summary>Not an SLA work order the caller's Notification Center covers (another account or dispatcher, closed, no SEV level).</summary>
+        NotFound,
+        /// <summary>The work order has not missed its response deadline.</summary>
+        NotBreached
+    }
+
+    /// <summary>
+    /// Acknowledging a missed SEV response deadline from the Notification Center: records who and when in
+    /// the work order's audit history, which is also what removes the breach row from the feed.
+    /// </summary>
+    public interface ISlaBreachAcknowledgementService
+    {
+        Task<SlaBreachAcknowledgementOutcome> AcknowledgeAsync(
+            ClaimsPrincipal user, int workOrderId, CancellationToken cancellationToken);
+    }
+}

From c3865e56ac87bd0a088c2d0b447b4a425a081382 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 11:19:29 -0300
Subject: [PATCH 135/183] Sites API: site code uniqueness, soft delete with
 role check, open work orders, site notes

- Reject duplicate site codes per client (case-insensitive); site code is immutable once set
- Delete tombstones the site and requires the DeleteSites permission (Admin, Scheduler)
- GET /api/locations/{id}/open-work-orders returns the open count and ids
- PATCH /api/locations/{id}/contact-info saves contacts and notes from the work-order Site dialog
- Add nullable Locations.Notes, used as the site-level POC notes fallback
---
 .../LocationControllerSitesTests.cs           |    4 +-
 .../LocationControllerTests.cs                |   76 +
 .../LocationServiceTests.cs                   |   36 +-
 .../LocationSiteContactsTests.cs              |   84 +-
 .../SiteRegistryServiceTests.cs               |  449 ++
 .../Controllers/LocationController.cs         |   80 +-
 .../DTOs/EditLocation_DTO.cs                  |    1 +
 Api.SeaHavenIndustries/DTOs/Location_DTO.cs   |    8 +
 ...0260925141509_AddLocationNotes.Designer.cs | 4216 +++++++++++++++++
 .../20260925141509_AddLocationNotes.cs        |   28 +
 .../ApplicationDbContextModelSnapshot.cs      |    3 +
 Data.SeaHavenIndustries/Models/Locations.cs   |    3 +
 .../Helpers/WorkOrderBoardProjection.cs       |    3 +-
 .../Implementation/CommonDataService.cs       |    1 +
 .../Implementation/LocationDataService.cs     |   92 +-
 .../Interfaces/ILocationDataService.cs        |   27 +-
 SeaHaven.Services/DTOs/LocationDTOs.cs        |   19 +
 .../Exceptions/SiteExceptions.cs              |   24 +
 .../WorkOrderCompletionSnapshotMapper.cs      |    2 +-
 .../Implementation/LocationService.cs         |  184 +-
 .../Interfaces/ILocationService.cs            |    4 +-
 21 files changed, 5207 insertions(+), 137 deletions(-)
 create mode 100644 Api.SeaHavenIndustries.Tests/SiteRegistryServiceTests.cs
 create mode 100644 Data.SeaHavenIndustries/Migrations/20260925141509_AddLocationNotes.Designer.cs
 create mode 100644 Data.SeaHavenIndustries/Migrations/20260925141509_AddLocationNotes.cs
 create mode 100644 SeaHaven.Services/Exceptions/SiteExceptions.cs

diff --git a/Api.SeaHavenIndustries.Tests/LocationControllerSitesTests.cs b/Api.SeaHavenIndustries.Tests/LocationControllerSitesTests.cs
index b926519..ebd3a74 100644
--- a/Api.SeaHavenIndustries.Tests/LocationControllerSitesTests.cs
+++ b/Api.SeaHavenIndustries.Tests/LocationControllerSitesTests.cs
@@ -31,7 +31,9 @@ public class LocationControllerSitesTests
             dataService,
             new AccountDataService(ctx),
             Mock.Of<ICreateLocationValidation>(),
-            Mock.Of<IUpdateLocationValidation>());
+            Mock.Of<IUpdateLocationValidation>(),
+            Mock.Of<SeaHaven.DataServices.Interfaces.ITeamPermissionOverrideDataService>(),
+            new SeaHaven.Services.Implementation.TeamPermissionPolicy());
 
         var controller = new LocationController(service, Mock.Of<ILogger<LocationController>>())
         {
diff --git a/Api.SeaHavenIndustries.Tests/LocationControllerTests.cs b/Api.SeaHavenIndustries.Tests/LocationControllerTests.cs
index 888f092..a1dc2c3 100644
--- a/Api.SeaHavenIndustries.Tests/LocationControllerTests.cs
+++ b/Api.SeaHavenIndustries.Tests/LocationControllerTests.cs
@@ -286,4 +286,80 @@ public class LocationControllerTests
         contacts[0].GetProperty("Name").GetString().Should().Be("Cara Lane");
         contacts[1].GetProperty("Name").GetString().Should().Be("Alan Ford");
     }
+
+    [Fact]
+    public async Task AddLocation_DuplicateSiteCode_Returns409WithStableCode()
+    {
+        var service = new Mock<ILocationService>();
+        service.Setup(s => s.CreateLocationFromRequestAsync(It.IsAny<LocationCreateRequestDTO>(), It.IsAny<ClaimsPrincipal>(), It.IsAny<CancellationToken>()))
+               .ThrowsAsync(new SeaHaven.Services.Exceptions.SiteCodeConflictException());
+
+        var result = await NewController(service).AddLocation(new Location_DTO { Name = "BK5" }, CancellationToken.None);
+
+        var conflict = result.Should().BeOfType<ConflictObjectResult>().Subject;
+        Prop(conflict.Value!, "Code").Should().Be("DuplicateSiteCode");
+        Prop(conflict.Value!, "Message").Should().Be("This site code already exists.");
+    }
+
+    [Fact]
+    public async Task EditLocation_DuplicateSiteCode_Returns409()
+    {
+        var service = new Mock<ILocationService>();
+        service.Setup(s => s.UpdateLocationFromRequestAsync(4, It.IsAny<LocationUpdateRequestDTO>(), It.IsAny<ClaimsPrincipal>(), It.IsAny<CancellationToken>()))
+               .ThrowsAsync(new SeaHaven.Services.Exceptions.SiteCodeConflictException());
+
+        var result = await NewController(service).EditLocation(4, new EditLocation_DTO { Name = "BK5" }, CancellationToken.None);
+
+        result.Should().BeOfType<ConflictObjectResult>();
+    }
+
+    [Fact]
+    public async Task DeleteLocation_WithoutPermission_Returns403WithDeleteMessage()
+    {
+        var service = new Mock<ILocationService>();
+        service.Setup(s => s.DeleteLocationByIdAsync(4, It.IsAny<ClaimsPrincipal>(), It.IsAny<CancellationToken>()))
+               .ThrowsAsync(new SeaHaven.Services.Exceptions.SiteForbiddenException(
+                   SeaHaven.Services.Exceptions.SiteForbiddenException.DeleteDeniedMessage));
+
+        var result = await NewController(service).DeleteLocation(4, CancellationToken.None);
+
+        var forbidden = result.Should().BeOfType<ObjectResult>().Subject;
+        forbidden.StatusCode.Should().Be(403);
+        forbidden.Value.Should().BeOfType<Response>().Which.Message.Should().Be("You are not allowed to delete sites.");
+    }
+
+    [Fact]
+    public async Task GetOpenWorkOrders_ReturnsCountAndIds_Or404()
+    {
+        var service = new Mock<ILocationService>();
+        service.Setup(s => s.GetOpenWorkOrdersAsync(4, It.IsAny<ClaimsPrincipal>(), It.IsAny<CancellationToken>()))
+               .ReturnsAsync(new SiteOpenWorkOrdersDTO { Count = 2, WorkOrderIds = new[] { 11, 12 } });
+
+        var ok = (await NewController(service).GetOpenWorkOrders(4, CancellationToken.None))
+            .Should().BeOfType<OkObjectResult>().Subject;
+        ok.Value.Should().BeEquivalentTo(new SiteOpenWorkOrdersDTO { Count = 2, WorkOrderIds = new[] { 11, 12 } });
+
+        (await NewController(service).GetOpenWorkOrders(5, CancellationToken.None))
+            .Should().BeOfType<NotFoundObjectResult>();
+    }
+
+    [Fact]
+    public async Task UpdateSiteContactInfo_MapsContactsAndNotesToTheService()
+    {
+        var service = new Mock<ILocationService>();
+        SiteContactInfoRequestDTO? seen = null;
+        service.Setup(s => s.UpdateSiteContactInfoAsync(4, It.IsAny<SiteContactInfoRequestDTO>(), It.IsAny<ClaimsPrincipal>(), It.IsAny<CancellationToken>()))
+               .Callback<int, SiteContactInfoRequestDTO, ClaimsPrincipal, CancellationToken>((_, request, _, _) => seen = request)
+               .Returns(Task.CompletedTask);
+
+        var result = await NewController(service).UpdateSiteContactInfo(4, new SiteContactInfoInput_DTO
+        {
+            Contacts = new List<SiteContactInput_DTO> { new() { Id = 7, Name = "Main", Phone = "555-0100" } },
+            Notes = "Gate 4"
+        }, CancellationToken.None);
+
+        result.Should().BeOfType<OkObjectResult>();
+        seen!.Notes.Should().Be("Gate 4");
+        seen.Contacts.Should().ContainSingle().Which.Should().BeEquivalentTo(new SiteContactRequestDTO { Id = 7, Name = "Main", Phone = "555-0100" });
+    }
 }
diff --git a/Api.SeaHavenIndustries.Tests/LocationServiceTests.cs b/Api.SeaHavenIndustries.Tests/LocationServiceTests.cs
index 2c986c8..dbf05cb 100644
--- a/Api.SeaHavenIndustries.Tests/LocationServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/LocationServiceTests.cs
@@ -28,7 +28,9 @@ public class LocationServiceTests
             new LocationDataService(ctx),
             new AccountDataService(ctx),
             new CreateLocationValidation(),
-            new UpdateLocationValidation());
+            new UpdateLocationValidation(),
+            Mock.Of<SeaHaven.DataServices.Interfaces.ITeamPermissionOverrideDataService>(),
+            new SeaHaven.Services.Implementation.TeamPermissionPolicy());
 
     private static void SeedAccount(ApplicationDbContext ctx, int id, string name = "Customer")
     {
@@ -211,7 +213,9 @@ public class LocationServiceTests
             dataService,
             Mock.Of<IAccountDataService>(),
             new CreateLocationValidation(),
-            new UpdateLocationValidation());
+            new UpdateLocationValidation(),
+            Mock.Of<SeaHaven.DataServices.Interfaces.ITeamPermissionOverrideDataService>(),
+            new SeaHaven.Services.Implementation.TeamPermissionPolicy());
 
     [Fact]
     public async Task GetLocationDetailAsync_ReturnsMappedDtoOrNull()
@@ -237,14 +241,14 @@ public class LocationServiceTests
 
         await NewService(ctx).UpdateLocationFromRequestAsync(existing.Id, new LocationUpdateRequestDTO
         {
-            Name = "New",
+            Name = "Old",
             Address = "9 New St",
             City = "Plano",
             Status = "Inactive"
         }, OrgWideAdmin(), CancellationToken.None);
 
         var row = ctx.Locations.Single();
-        row.Name.Should().Be("New");
+        row.Name.Should().Be("Old", "the site code is immutable");
         row.Address1.Should().Be("9 New St");
         row.City.Should().Be("Plano");
         row.Status.Should().Be("Inactive");
@@ -263,7 +267,7 @@ public class LocationServiceTests
 
         await NewService(ctx).UpdateLocationFromRequestAsync(existing.Id, new LocationUpdateRequestDTO
         {
-            Name = "New",
+            Name = "Old",
             City = "Plano"
         }, OrgWideAdmin(), CancellationToken.None);
 
@@ -301,12 +305,12 @@ public class LocationServiceTests
 
         await NewService(ctx).UpdateLocationFromRequestAsync(
             existing.Id,
-            new LocationUpdateRequestDTO { Name = "Renamed", City = "Austin" },
+            new LocationUpdateRequestDTO { Name = "Owned", City = "Austin" },
             AccountUser(4),
             CancellationToken.None);
 
         var row = ctx.Locations.Single();
-        row.Name.Should().Be("Renamed");
+        row.Name.Should().Be("Owned");
         row.City.Should().Be("Austin");
         row.AccountId.Should().Be(4);
     }
@@ -476,7 +480,9 @@ public class LocationServiceTests
             new LocationDataService(ctx),
             accounts.Object,
             new CreateLocationValidation(),
-            new UpdateLocationValidation());
+            new UpdateLocationValidation(),
+            Mock.Of<SeaHaven.DataServices.Interfaces.ITeamPermissionOverrideDataService>(),
+            new SeaHaven.Services.Implementation.TeamPermissionPolicy());
 
         using var cts = new CancellationTokenSource();
 
@@ -520,20 +526,6 @@ public class LocationServiceTests
         ctx.Locations.Single().AccountId.Should().Be(4);
     }
 
-    [Fact]
-    public async Task DeleteLocationByIdAsync_RemovesAndReturnsFalseWhenMissing()
-    {
-        using var ctx = NewContext();
-        var existing = SeedLocation(ctx, "Gone", "Cedar Park");
-
-        var removed = await NewService(ctx).DeleteLocationByIdAsync(existing.Id, CancellationToken.None);
-        var again = await NewService(ctx).DeleteLocationByIdAsync(existing.Id, CancellationToken.None);
-
-        removed.Should().BeTrue();
-        again.Should().BeFalse();
-        ctx.Locations.Should().BeEmpty();
-    }
-
     [Fact]
     public async Task GetLocationListPagedAsync_NormalizesAndForwardsSortToDataService()
     {
diff --git a/Api.SeaHavenIndustries.Tests/LocationSiteContactsTests.cs b/Api.SeaHavenIndustries.Tests/LocationSiteContactsTests.cs
index f4aef07..5e64489 100644
--- a/Api.SeaHavenIndustries.Tests/LocationSiteContactsTests.cs
+++ b/Api.SeaHavenIndustries.Tests/LocationSiteContactsTests.cs
@@ -35,7 +35,9 @@ public class LocationSiteContactsTests
             new LocationDataService(ctx),
             new AccountDataService(ctx),
             new CreateLocationValidation(),
-            new UpdateLocationValidation());
+            new UpdateLocationValidation(),
+            Mock.Of<SeaHaven.DataServices.Interfaces.ITeamPermissionOverrideDataService>(),
+            new SeaHaven.Services.Implementation.TeamPermissionPolicy());
 
     private static ClaimsPrincipal OrgWideAdmin()
     {
@@ -54,6 +56,7 @@ public class LocationSiteContactsTests
         await service.CreateLocationFromRequestAsync(new LocationCreateRequestDTO
         {
             Name = "Depot",
+            Phone = "555-9000",
             AccountId = null,
             Contacts = new List<SiteContactRequestDTO>
             {
@@ -65,7 +68,7 @@ public class LocationSiteContactsTests
     }
 
     [Fact]
-    public async Task Create_WithContacts_PersistsTrimmedOrderedRows_MirrorsFirstPhone_SetsAccountFromLocation()
+    public async Task Create_WithContacts_PersistsTrimmedOrderedRows_KeepsSitePhoneIndependent_SetsAccountFromLocation()
     {
         using var ctx = NewContext();
         ctx.Accounts.Add(new Accounts { Id = 7, Name = "Customer", IsDeleted = false });
@@ -83,7 +86,7 @@ public class LocationSiteContactsTests
         }, OrgWideAdmin(), CancellationToken.None);
 
         var location = ctx.Locations.Include(l => l.Contacts).Single();
-        location.PhoneNumber.Should().Be("555-0100", "first contact mirrors Location.PhoneNumber");
+        location.PhoneNumber.Should().BeNull("Site Phone is independent of the contacts");
 
         var contacts = location.Contacts.OrderBy(c => c.SiteContactOrder).ToList();
         contacts.Should().HaveCount(2);
@@ -220,7 +223,7 @@ public class LocationSiteContactsTests
     }
 
     [Fact]
-    public async Task Update_ReordersAndSoftDeletes_DensifiesOrder_AndUpdatesMirror()
+    public async Task Update_ReordersAndSoftDeletes_DensifiesOrder_LeavesSitePhoneToTheRequest()
     {
         using var ctx = NewContext();
         var seeded = await SeedLocationWithContactsAsync(ctx);
@@ -239,7 +242,7 @@ public class LocationSiteContactsTests
         }, OrgWideAdmin(), CancellationToken.None);
 
         var location = ctx.Locations.Include(l => l.Contacts).Single();
-        location.PhoneNumber.Should().Be("555-0200", "reorder must update the mirror to the new first contact");
+        location.PhoneNumber.Should().BeNull("Site Phone comes from the request, not the first contact");
 
         var active = location.Contacts.Where(c => c.IsDeleted != true).OrderBy(c => c.SiteContactOrder).ToList();
         active.Should().HaveCount(3);
@@ -304,7 +307,7 @@ public class LocationSiteContactsTests
         after.Should().HaveCount(snapshot.Count);
         after.Should().BeEquivalentTo(snapshot, o => o.Excluding(c => c.Location));
         ctx.Locations.AsNoTracking().Single(l => l.Id == seeded.Id).PhoneNumber
-            .Should().Be("555-0100", "the rejected update must not persist any change");
+            .Should().Be("555-9000", "the rejected update must not persist any change");
     }
 
     [Fact]
@@ -448,7 +451,9 @@ public class LocationSiteContactsTests
             data.Object,
             Mock.Of<IAccountDataService>(),
             new CreateLocationValidation(),
-            new UpdateLocationValidation());
+            new UpdateLocationValidation(),
+            Mock.Of<SeaHaven.DataServices.Interfaces.ITeamPermissionOverrideDataService>(),
+            new SeaHaven.Services.Implementation.TeamPermissionPolicy());
 
         var page = await service.GetLocationListPagedAsync(1, 10, null, cancellationToken: CancellationToken.None);
 
@@ -489,67 +494,6 @@ public class LocationSiteContactsTests
         rows.Should().BeEmpty();
     }
 
-    [Fact]
-    public async Task DataService_DeleteByIdAsync_WithContacts_RemovesLocation_RetainsSoftDeletedDetachedContacts()
-    {
-        using var ctx = NewContext();
-        var seeded = await SeedLocationWithContactsAsync(ctx);
-        var alice = seeded.Contacts!.Single(c => c.FirstName == "Alice Cooper");
-        var bob = seeded.Contacts!.Single(c => c.FirstName == "Bob Dillon");
-
-        var deleted = await new LocationDataService(ctx).DeleteByIdAsync(seeded.Id, CancellationToken.None);
-
-        deleted.Should().BeTrue();
-        ctx.Locations.Should().BeEmpty();
-
-        var retained = ctx.Contacts.AsNoTracking().OrderBy(c => c.Id).ToList();
-        retained.Should().HaveCount(2);
-        retained.Should().OnlyContain(c => c.IsDeleted == true);
-        retained.Should().OnlyContain(c => c.LocationId == null);
-        retained.Should().OnlyContain(c => c.DeletionTime != null);
-        retained.Should().OnlyContain(c => c.DeleterUserId == null, "the delete interface carries no actor");
-        retained.Single(c => c.Id == alice.Id).FirstName.Should().Be("Alice Cooper");
-        retained.Single(c => c.Id == alice.Id).PhoneNumber.Should().Be("555-0100");
-        retained.Single(c => c.Id == bob.Id).FirstName.Should().Be("Bob Dillon");
-        retained.Single(c => c.Id == bob.Id).PhoneNumber.Should().Be("555-0200");
-    }
-
-    [Fact]
-    public async Task DataService_DeleteByIdAsync_AlreadySoftDeletedContact_IsDetachedWithoutAuditRestamp()
-    {
-        using var ctx = NewContext();
-        var seeded = await SeedLocationWithContactsAsync(ctx);
-        var bob = seeded.Contacts!.Single(c => c.FirstName == "Bob Dillon");
-        bob.IsDeleted = true;
-        bob.DeleterUserId = "admin-1";
-        bob.DeletionTime = new DateTime(2026, 1, 1);
-        await ctx.SaveChangesAsync();
-        var bobStamp = bob.DeletionTime;
-
-        var deleted = await new LocationDataService(ctx).DeleteByIdAsync(seeded.Id, CancellationToken.None);
-
-        deleted.Should().BeTrue();
-        ctx.Locations.Should().BeEmpty();
-        var retained = ctx.Contacts.AsNoTracking().Single(c => c.Id == bob.Id);
-        retained.LocationId.Should().BeNull("previously soft-deleted rows must also detach or the restrict FK blocks the delete");
-        retained.IsDeleted.Should().BeTrue();
-        retained.DeleterUserId.Should().Be("admin-1", "original audit stamp is preserved");
-        retained.DeletionTime.Should().Be(bobStamp);
-    }
-
-    [Fact]
-    public async Task DataService_DeleteByIdAsync_Missing_ReturnsFalse()
-    {
-        using var ctx = NewContext();
-        await SeedLocationWithContactsAsync(ctx);
-
-        var deleted = await new LocationDataService(ctx).DeleteByIdAsync(424242, CancellationToken.None);
-
-        deleted.Should().BeFalse();
-        ctx.Locations.Should().HaveCount(1);
-        ctx.Contacts.Should().HaveCount(2);
-    }
-
     private sealed class ExposedSH138Migration : Data.SeaHavenIndustries.Migrations.SH138_SiteContacts
     {
         public void UpExposed(MigrationBuilder builder) => Up(builder);
@@ -608,7 +552,7 @@ public class LocationSiteContactsTests
         using var json = JsonSerializer.SerializeToDocument(ok.Value);
         var root = json.RootElement;
 
-        root.GetProperty("Phone").GetString().Should().Be("555-0100", "Phone mirrors the first site contact");
+        root.GetProperty("Phone").GetString().Should().Be("555-9000", "Phone is the Site Phone, independent of contacts");
         root.GetProperty("Contact").GetString().Should().Be("Alice Cooper", "Contact is the first contact display name");
         var contacts = root.GetProperty("Contacts");
         contacts.GetArrayLength().Should().Be(2);
@@ -636,7 +580,7 @@ public class LocationSiteContactsTests
         var row = json.RootElement.GetProperty("Data").EnumerateArray().Single();
 
         row.GetProperty("Contact").GetString().Should().Be("Alice Cooper");
-        row.GetProperty("Phone").GetString().Should().Be("555-0100");
+        row.GetProperty("Phone").GetString().Should().Be("555-9000");
         row.GetProperty("Contacts").GetArrayLength().Should().Be(2);
     }
 }
diff --git a/Api.SeaHavenIndustries.Tests/SiteRegistryServiceTests.cs b/Api.SeaHavenIndustries.Tests/SiteRegistryServiceTests.cs
new file mode 100644
index 0000000..5e8c18c
--- /dev/null
+++ b/Api.SeaHavenIndustries.Tests/SiteRegistryServiceTests.cs
@@ -0,0 +1,449 @@
+using System.Security.Claims;
+using System.Text.Json;
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using FluentAssertions;
+using Microsoft.EntityFrameworkCore;
+using Moq;
+using SeaHaven.DataServices.Dto;
+using SeaHaven.DataServices.Implementation;
+using SeaHaven.DataServices.Interfaces;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Exceptions;
+using SeaHaven.Services.Helpers;
+using SeaHaven.Services.Implementation;
+using SeaHaven.Services.Validation;
+using Xunit;
+
+namespace Api.SeaHavenIndustries.Tests;
+
+/// <summary>
+/// Site registry rules: tenant-scoped unique site codes, immutable codes,
+/// permission-gated tombstone delete, open work order lookup and the
+/// contact/notes write used by the work-order Site dialog.
+/// </summary>
+public class SiteRegistryServiceTests
+{
+    private static ApplicationDbContext NewContext()
+    {
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseInMemoryDatabase(Guid.NewGuid().ToString())
+            .Options;
+        return new ApplicationDbContext(options);
+    }
+
+    private static LocationService NewService(ApplicationDbContext ctx, string? role = "Admin") =>
+        NewService(new LocationDataService(ctx), new AccountDataService(ctx), role);
+
+    private static LocationService NewService(
+        ILocationDataService data,
+        IAccountDataService accounts,
+        string? role = "Admin")
+    {
+        var permissions = new Mock<ITeamPermissionOverrideDataService>();
+        permissions
+            .Setup(p => p.GetUserAsync(It.IsAny<string>(), It.IsAny<CancellationToken>()))
+            .ReturnsAsync((string userId, CancellationToken _) => role == null
+                ? null
+                : new TeamPermissionUserData { UserId = userId, RoleName = role });
+
+        return new LocationService(
+            data,
+            accounts,
+            new CreateLocationValidation(),
+            new UpdateLocationValidation(),
+            permissions.Object,
+            new TeamPermissionPolicy());
+    }
+
+    private static ClaimsPrincipal OrgWide(string role = "Admin") => Principal(role, new Claim(SeaHavenClaimTypes.OrgScope, SeaHavenClaimTypes.OrgScopeAll));
+
+    private static ClaimsPrincipal AccountUser(int accountId, string role = "Admin") =>
+        Principal(role, new Claim(SeaHavenClaimTypes.AccountId, accountId.ToString()));
+
+    private static ClaimsPrincipal Principal(string role, Claim scope) =>
+        new(new ClaimsIdentity(new List<Claim>
+        {
+            new(ClaimTypes.NameIdentifier, "actor-1"),
+            new(ClaimTypes.Role, role),
+            scope
+        }, "test"));
+
+    private static void SeedAccounts(ApplicationDbContext ctx, params int[] ids)
+    {
+        foreach (var id in ids)
+            ctx.Accounts.Add(new Accounts { Id = id, Name = $"Client {id}", IsDeleted = false });
+        ctx.SaveChanges();
+    }
+
+    private static Locations SeedSite(ApplicationDbContext ctx, string code, int? accountId, bool deleted = false)
+    {
+        var site = new Locations { Name = code, AccountId = accountId, City = "Dallas", State = "TX", IsDeleted = deleted ? true : null };
+        ctx.Locations.Add(site);
+        ctx.SaveChanges();
+        return site;
+    }
+
+    private static WorkOrder Wo(
+        int id,
+        int? locationId,
+        LifecycleStatus? status = LifecycleStatus.Incomplete,
+        int? accountId = 1,
+        string? siteCode = null,
+        string? legacyStatus = null,
+        bool deleted = false) => new()
+        {
+            Id = id,
+            LocationId = locationId,
+            LifecycleStatus = status,
+            LegacyStatus = legacyStatus,
+            AccountId = accountId,
+            SiteCode = siteCode,
+            IsDeleted = deleted ? true : null
+        };
+
+    private static LocationCreateRequestDTO CreateRequest(string code, int? accountId) => new()
+    {
+        Name = code,
+        AccountId = accountId,
+        Address = "1 Depot Rd",
+        City = "Dallas",
+        State = "TX",
+        Contacts = new List<SiteContactRequestDTO> { new() { Name = "Main", Phone = "555-0100" } }
+    };
+
+    [Fact]
+    public async Task Create_DuplicateSiteCodeInSameClient_IsRejectedCaseInsensitively()
+    {
+        using var ctx = NewContext();
+        SeedAccounts(ctx, 1);
+        SeedSite(ctx, "BK5", 1);
+
+        var act = () => NewService(ctx).CreateLocationFromRequestAsync(CreateRequest(" bk5 ", 1), OrgWide(), CancellationToken.None);
+
+        await act.Should().ThrowAsync<SiteCodeConflictException>();
+        ctx.Locations.Should().ContainSingle();
+    }
+
+    [Fact]
+    public async Task Create_SameSiteCodeForAnotherClient_IsAllowed()
+    {
+        using var ctx = NewContext();
+        SeedAccounts(ctx, 1, 2);
+        SeedSite(ctx, "BK5", 1);
+
+        await NewService(ctx).CreateLocationFromRequestAsync(CreateRequest("BK5", 2), OrgWide(), CancellationToken.None);
+
+        ctx.Locations.Where(l => l.Name == "BK5").Select(l => l.AccountId).Should().BeEquivalentTo(new int?[] { 1, 2 });
+    }
+
+    [Fact]
+    public async Task Create_SiteCodeOfADeletedSite_CanBeReused()
+    {
+        using var ctx = NewContext();
+        SeedAccounts(ctx, 1);
+        SeedSite(ctx, "BK5", 1, deleted: true);
+
+        await NewService(ctx).CreateLocationFromRequestAsync(CreateRequest("BK5", 1), OrgWide(), CancellationToken.None);
+
+        ctx.Locations.Count(l => l.Name == "BK5" && l.IsDeleted != true).Should().Be(1);
+    }
+
+    [Fact]
+    public async Task Create_BlankSiteCode_IsAValidationError()
+    {
+        using var ctx = NewContext();
+        SeedAccounts(ctx, 1);
+
+        var act = () => NewService(ctx).CreateLocationFromRequestAsync(CreateRequest("  ", 1), OrgWide(), CancellationToken.None);
+
+        (await act.Should().ThrowAsync<FluentValidation.ValidationException>())
+            .Which.Errors.Should().ContainSingle(e => e.ErrorMessage == "Site Code is required.");
+    }
+
+    [Fact]
+    public async Task Create_StoresTrimmedCodeNotesAndSitePhoneIndependentOfContacts()
+    {
+        using var ctx = NewContext();
+        SeedAccounts(ctx, 1);
+        var request = CreateRequest(" DFW8 ", 1);
+        request.Phone = "555-9000";
+        request.Notes = "  Gate code 4411 ";
+
+        await NewService(ctx).CreateLocationFromRequestAsync(request, OrgWide(), CancellationToken.None);
+
+        var site = ctx.Locations.Single();
+        site.Name.Should().Be("DFW8");
+        site.PhoneNumber.Should().Be("555-9000");
+        site.Notes.Should().Be("Gate code 4411");
+    }
+
+    [Fact]
+    public async Task Update_ChangingAnExistingSiteCode_IsRejected()
+    {
+        using var ctx = NewContext();
+        var site = SeedSite(ctx, "BK5", null);
+
+        var act = () => NewService(ctx).UpdateLocationFromRequestAsync(
+            site.Id, new LocationUpdateRequestDTO { Name = "BK6" }, OrgWide(), CancellationToken.None);
+
+        (await act.Should().ThrowAsync<FluentValidation.ValidationException>())
+            .Which.Errors.Should().ContainSingle(e => e.ErrorMessage == "Site Code cannot be changed.");
+        ctx.Locations.AsNoTracking().Single().Name.Should().Be("BK5");
+    }
+
+    [Fact]
+    public async Task Update_KeepsCodeAndNotesWhenTheRequestOmitsThem()
+    {
+        using var ctx = NewContext();
+        var site = SeedSite(ctx, "BK5", null);
+        site.Notes = "Dock 3";
+        site.Status = "Active";
+        ctx.SaveChanges();
+
+        await NewService(ctx).UpdateLocationFromRequestAsync(
+            site.Id, new LocationUpdateRequestDTO { Name = "bk5", City = "Memphis" }, OrgWide(), CancellationToken.None);
+
+        var saved = ctx.Locations.AsNoTracking().Single();
+        saved.Name.Should().Be("BK5");
+        saved.City.Should().Be("Memphis");
+        saved.Notes.Should().Be("Dock 3");
+        saved.Status.Should().Be("Active");
+    }
+
+    [Fact]
+    public async Task Update_BlankLegacyCode_CanBeFilledOnceButMustBeUniqueInTheClient()
+    {
+        using var ctx = NewContext();
+        SeedAccounts(ctx, 1);
+        SeedSite(ctx, "BK5", 1);
+        var legacy = SeedSite(ctx, "", 1);
+
+        var duplicate = () => NewService(ctx).UpdateLocationFromRequestAsync(
+            legacy.Id, new LocationUpdateRequestDTO { Name = "bk5" }, OrgWide(), CancellationToken.None);
+        await duplicate.Should().ThrowAsync<SiteCodeConflictException>();
+
+        await NewService(ctx).UpdateLocationFromRequestAsync(
+            legacy.Id, new LocationUpdateRequestDTO { Name = "MEM1" }, OrgWide(), CancellationToken.None);
+        ctx.Locations.AsNoTracking().Single(l => l.Id == legacy.Id).Name.Should().Be("MEM1");
+    }
+
+    [Theory]
+    [InlineData("Admin")]
+    [InlineData("Scheduler")]
+    public async Task Delete_AdminOrScheduler_TombstonesTheSiteAndLeavesWorkOrdersAsTheyWere(string role)
+    {
+        using var ctx = NewContext();
+        SeedAccounts(ctx, 1);
+        var site = SeedSite(ctx, "BK5", 1);
+        ctx.Contacts.Add(new Contacts { LocationId = site.Id, FirstName = "Main", PhoneNumber = "555-0100" });
+        ctx.workOrders.Add(Wo(10, site.Id));
+        ctx.SaveChanges();
+
+        var deleted = await NewService(ctx, role).DeleteLocationByIdAsync(site.Id, OrgWide(role), CancellationToken.None);
+
+        deleted.Should().BeTrue();
+        var tombstone = ctx.Locations.AsNoTracking().Single();
+        tombstone.IsDeleted.Should().BeTrue();
+        tombstone.DeleterUserId.Should().Be("actor-1");
+        ctx.workOrders.AsNoTracking().Single().LocationId.Should().Be(site.Id, "work orders keep their site reference");
+        ctx.Contacts.AsNoTracking().Single().IsDeleted.Should().NotBe(true, "contacts still back open work orders");
+
+        var data = new LocationDataService(ctx);
+        (await data.GetDetailByIdAsync(site.Id, CancellationToken.None)).Should().BeNull();
+        (await data.GetSiteOptionsAsync(null, CancellationToken.None)).Should().BeEmpty();
+        (await data.GetListPagedAsync(1, 10, null, null, CancellationToken.None)).TotalCount.Should().Be(0);
+        (await data.GetAccountScopeAsync(site.Id, CancellationToken.None)).Exists.Should().BeFalse("a deleted site cannot be assigned to new work orders");
+        (await NewService(ctx, role).DeleteLocationByIdAsync(site.Id, OrgWide(role), CancellationToken.None)).Should().BeFalse();
+    }
+
+    [Theory]
+    [InlineData("Dispatcher")]
+    [InlineData(null)]
+    public async Task Delete_WithoutDeleteSitesPermission_IsForbiddenAndKeepsTheSite(string? role)
+    {
+        using var ctx = NewContext();
+        var site = SeedSite(ctx, "BK5", null);
+
+        var act = () => NewService(ctx, role).DeleteLocationByIdAsync(site.Id, OrgWide(role ?? "Dispatcher"), CancellationToken.None);
+
+        await act.Should().ThrowAsync<SiteForbiddenException>();
+        ctx.Locations.AsNoTracking().Single().IsDeleted.Should().NotBe(true);
+    }
+
+    [Fact]
+    public async Task Delete_SiteOfAnotherClient_IsRejectedForAnAccountScopedCaller()
+    {
+        using var ctx = NewContext();
+        var site = SeedSite(ctx, "BK5", 2);
+
+        var act = () => NewService(ctx).DeleteLocationByIdAsync(site.Id, AccountUser(1), CancellationToken.None);
+
+        await act.Should().ThrowAsync<UnauthorizedAccessException>();
+        ctx.Locations.AsNoTracking().Single().IsDeleted.Should().NotBe(true);
+    }
+
+    [Fact]
+    public async Task OpenWorkOrders_ExcludeTerminalDeletedAndOtherSitesWork()
+    {
+        using var ctx = NewContext();
+        var site = SeedSite(ctx, "BK5", 1);
+        var other = SeedSite(ctx, "MEM1", 1);
+        ctx.workOrders.AddRange(
+            Wo(1, site.Id),
+            Wo(2, site.Id, LifecycleStatus.Scheduled),
+            Wo(3, site.Id, LifecycleStatus.Completed),
+            Wo(4, site.Id, LifecycleStatus.Canceled),
+            Wo(5, site.Id, deleted: true),
+            Wo(6, site.Id, status: null, legacyStatus: "Completed"),
+            Wo(7, site.Id, status: null, legacyStatus: "Open"),
+            Wo(8, null, siteCode: "bk5"),
+            Wo(9, null, siteCode: "BK5", accountId: 2),
+            Wo(10, other.Id));
+        ctx.SaveChanges();
+
+        var result = await NewService(ctx).GetOpenWorkOrdersAsync(site.Id, OrgWide(), CancellationToken.None);
+
+        result!.WorkOrderIds.Should().Equal(1, 2, 7, 8);
+        result.Count.Should().Be(4);
+    }
+
+    [Fact]
+    public async Task OpenWorkOrders_AccountScopedCaller_SeesOnlyTheirClientsWork()
+    {
+        using var ctx = NewContext();
+        var site = SeedSite(ctx, "BK5", 1);
+        ctx.workOrders.AddRange(Wo(1, site.Id, accountId: 1), Wo(2, site.Id, accountId: 2));
+        ctx.SaveChanges();
+
+        var own = await NewService(ctx).GetOpenWorkOrdersAsync(site.Id, AccountUser(1), CancellationToken.None);
+        own!.WorkOrderIds.Should().Equal(1);
+
+        var foreign = () => NewService(ctx).GetOpenWorkOrdersAsync(site.Id, AccountUser(2), CancellationToken.None);
+        await foreign.Should().ThrowAsync<UnauthorizedAccessException>();
+    }
+
+    [Fact]
+    public async Task OpenWorkOrders_ReturnFullCountButCapIds()
+    {
+        using var ctx = NewContext();
+        var site = SeedSite(ctx, "BK5", 1);
+        ctx.workOrders.AddRange(Enumerable.Range(1, LocationService.MaxOpenWorkOrderIds + 5).Select(id => Wo(id, site.Id)));
+        ctx.SaveChanges();
+
+        var result = await NewService(ctx).GetOpenWorkOrdersAsync(site.Id, OrgWide(), CancellationToken.None);
+
+        result!.Count.Should().Be(LocationService.MaxOpenWorkOrderIds + 5);
+        result.WorkOrderIds.Should().HaveCount(LocationService.MaxOpenWorkOrderIds);
+    }
+
+    [Fact]
+    public async Task OpenWorkOrders_MissingOrDeletedSite_ReturnsNull()
+    {
+        using var ctx = NewContext();
+        var deleted = SeedSite(ctx, "BK5", 1, deleted: true);
+
+        (await NewService(ctx).GetOpenWorkOrdersAsync(deleted.Id, OrgWide(), CancellationToken.None)).Should().BeNull();
+        (await NewService(ctx).GetOpenWorkOrdersAsync(999, OrgWide(), CancellationToken.None)).Should().BeNull();
+    }
+
+    [Fact]
+    public async Task UpdateSiteContactInfo_SavesContactsAndNotesToTheSiteRecord()
+    {
+        using var ctx = NewContext();
+        var site = SeedSite(ctx, "BK5", null);
+        var main = new Contacts { LocationId = site.Id, FirstName = "Old Main", PhoneNumber = "555-0100", SiteContactOrder = 0 };
+        ctx.Contacts.Add(main);
+        ctx.SaveChanges();
+
+        await NewService(ctx).UpdateSiteContactInfoAsync(site.Id, new SiteContactInfoRequestDTO
+        {
+            Contacts = new List<SiteContactRequestDTO>
+            {
+                new() { Id = main.Id, Name = "New Main", Phone = "555-0199" },
+                new() { Name = "Night Shift", Phone = "555-0200" }
+            },
+            Notes = " Call ahead "
+        }, OrgWide("Dispatcher"), CancellationToken.None);
+
+        var saved = ctx.Locations.AsNoTracking().Include(l => l.Contacts).Single();
+        saved.Notes.Should().Be("Call ahead");
+        saved.Contacts!.Where(c => c.IsDeleted != true).OrderBy(c => c.SiteContactOrder)
+            .Select(c => (c.Id == main.Id, c.FirstName, c.PhoneNumber))
+            .Should().Equal((true, "New Main", "555-0199"), (false, "Night Shift", "555-0200"));
+    }
+
+    [Fact]
+    public async Task UpdateSiteContactInfo_RejectsOutOfScopeDeletedAndContactlessRequests()
+    {
+        using var ctx = NewContext();
+        var foreign = SeedSite(ctx, "BK5", 2);
+        var deleted = SeedSite(ctx, "MEM1", 1, deleted: true);
+        var request = new SiteContactInfoRequestDTO
+        {
+            Contacts = new List<SiteContactRequestDTO> { new() { Name = "A", Phone = "1" } }
+        };
+
+        await ((Func<Task>)(() => NewService(ctx).UpdateSiteContactInfoAsync(foreign.Id, request, AccountUser(1), CancellationToken.None)))
+            .Should().ThrowAsync<UnauthorizedAccessException>();
+        await ((Func<Task>)(() => NewService(ctx).UpdateSiteContactInfoAsync(deleted.Id, request, OrgWide(), CancellationToken.None)))
+            .Should().ThrowAsync<KeyNotFoundException>();
+        await ((Func<Task>)(() => NewService(ctx).UpdateSiteContactInfoAsync(
+                foreign.Id, new SiteContactInfoRequestDTO { Notes = "x" }, OrgWide(), CancellationToken.None)))
+            .Should().ThrowAsync<FluentValidation.ValidationException>();
+    }
+
+    [Fact]
+    public async Task NewSiteOperations_ForwardTheCallersCancellationToken()
+    {
+        using var cts = new CancellationTokenSource();
+        var token = cts.Token;
+        var site = new Locations { Id = 5, Name = "BK5", AccountId = 1, Contacts = new List<Contacts>() };
+        var data = new Mock<ILocationDataService>();
+        data.Setup(d => d.GetByIdForUpdateAsync(5, token)).ReturnsAsync(site);
+        data.Setup(d => d.GetDetailByIdAsync(5, token)).ReturnsAsync(site);
+        data.Setup(d => d.GetOpenWorkOrderIdsAsync(5, "BK5", 1, null, LocationService.MaxOpenWorkOrderIds, token))
+            .ReturnsAsync((1, new[] { 7 }));
+        var service = NewService(data.Object, Mock.Of<IAccountDataService>());
+
+        await service.GetOpenWorkOrdersAsync(5, OrgWide(), token);
+        await service.UpdateSiteContactInfoAsync(5, new SiteContactInfoRequestDTO
+        {
+            Contacts = new List<SiteContactRequestDTO> { new() { Name = "A", Phone = "1" } }
+        }, OrgWide(), token);
+        await service.DeleteLocationByIdAsync(5, OrgWide(), token);
+
+        data.Verify(d => d.GetOpenWorkOrderIdsAsync(5, "BK5", 1, null, LocationService.MaxOpenWorkOrderIds, token), Times.Once);
+        data.Verify(d => d.UpdateAsync(site, token), Times.Exactly(2));
+    }
+
+    [Fact]
+    public async Task Create_DuplicateCheck_ForwardsTheCallersCancellationToken()
+    {
+        using var cts = new CancellationTokenSource();
+        var token = cts.Token;
+        var data = new Mock<ILocationDataService>();
+        data.Setup(d => d.SiteCodeExistsAsync("BK5", null, null, token)).ReturnsAsync(true);
+        var service = NewService(data.Object, Mock.Of<IAccountDataService>());
+
+        var act = () => service.CreateLocationFromRequestAsync(CreateRequest("BK5", null), OrgWide(), token);
+
+        await act.Should().ThrowAsync<SiteCodeConflictException>();
+        data.Verify(d => d.SiteCodeExistsAsync("BK5", null, null, token), Times.Once);
+    }
+
+    [Fact]
+    public void CompletionSnapshot_FreezesSiteNotesWhenTheWorkOrderHasNone()
+    {
+        var workOrder = new WorkOrder
+        {
+            Id = 1,
+            Locations = new Locations { Id = 5, Name = "BK5", Notes = "Gate code 4411", Contacts = new List<Contacts>() }
+        };
+
+        WorkOrderCompletionSnapshotMapper.Capture(workOrder);
+
+        using var frozen = JsonDocument.Parse(workOrder.FrozenPoc!);
+        frozen.RootElement.GetProperty("notes").GetString().Should().Be("Gate code 4411");
+    }
+}
diff --git a/Api.SeaHavenIndustries/Controllers/LocationController.cs b/Api.SeaHavenIndustries/Controllers/LocationController.cs
index a956819..84270e6 100644
--- a/Api.SeaHavenIndustries/Controllers/LocationController.cs
+++ b/Api.SeaHavenIndustries/Controllers/LocationController.cs
@@ -7,6 +7,7 @@ using Microsoft.AspNetCore.Http;
 using Microsoft.AspNetCore.Mvc;
 using Microsoft.Extensions.Logging;
 using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Exceptions;
 using SeaHaven.Services.Interfaces;
 
 namespace Api.SeaHavenIndustries.Controllers
@@ -105,6 +106,9 @@ namespace Api.SeaHavenIndustries.Controllers
                 ContactEmail = location.Email,
                 location.Status,
                 location.AccountId,
+                ClientName = location.AccountName,
+                location.AccountName,
+                location.Notes,
                 Contacts = location.Contacts?.Select(c => new { c.Id, c.Name, c.Phone }).ToList()
             };
 
@@ -119,6 +123,10 @@ namespace Api.SeaHavenIndustries.Controllers
                 await _locationService.CreateLocationFromRequestAsync(MapToCreateRequest(model), User, cancellationToken);
                 return Ok(new DataResponse { Message = "Location Created Successfully", Status = "200" });
             }
+            catch (SiteCodeConflictException)
+            {
+                return SiteCodeConflict();
+            }
             catch (ValidationException vex)
             {
                 var errors = string.Join(", ", vex.Errors.Select(e => e.ErrorMessage));
@@ -142,6 +150,10 @@ namespace Api.SeaHavenIndustries.Controllers
                 await _locationService.UpdateLocationFromRequestAsync(id, MapToUpdateRequest(model), User, cancellationToken);
                 return Ok(new DataResponse { Message = "Location Updated Successfully", Status = "200" });
             }
+            catch (SiteCodeConflictException)
+            {
+                return SiteCodeConflict();
+            }
             catch (ValidationException vex)
             {
                 var errors = string.Join(", ", vex.Errors.Select(e => e.ErrorMessage));
@@ -161,17 +173,73 @@ namespace Api.SeaHavenIndustries.Controllers
             }
         }
 
+        [HttpPatch("{id}/contact-info")]
+        public async Task<IActionResult> UpdateSiteContactInfo(int id, [FromBody] SiteContactInfoInput_DTO model, CancellationToken cancellationToken)
+        {
+            try
+            {
+                await _locationService.UpdateSiteContactInfoAsync(
+                    id,
+                    new SiteContactInfoRequestDTO { Contacts = MapSiteContacts(model.Contacts), Notes = model.Notes },
+                    User,
+                    cancellationToken);
+                return Ok(new DataResponse { Message = "Site Updated Successfully", Status = "200" });
+            }
+            catch (ValidationException vex)
+            {
+                var errors = string.Join(", ", vex.Errors.Select(e => e.ErrorMessage));
+                return BadRequest(new Response { Status = "Validation Error", Message = errors });
+            }
+            catch (UnauthorizedAccessException)
+            {
+                return StatusCode(StatusCodes.Status403Forbidden, new Response { Status = "Error", Message = "You are not allowed to edit this site." });
+            }
+            catch (KeyNotFoundException)
+            {
+                return NotFound(new Response { Status = "Error", Message = "Location not found" });
+            }
+            catch (Exception ex)
+            {
+                return StatusCode(500, new Response { Status = "Error", Message = _logger.Sanitize(ex) });
+            }
+        }
+
+        [HttpGet("{id}/open-work-orders")]
+        public async Task<IActionResult> GetOpenWorkOrders(int id, CancellationToken cancellationToken)
+        {
+            try
+            {
+                var result = await _locationService.GetOpenWorkOrdersAsync(id, User, cancellationToken);
+                if (result == null)
+                    return NotFound(new Response { Status = "Error", Message = "Location not found" });
+
+                return Ok(result);
+            }
+            catch (UnauthorizedAccessException)
+            {
+                return StatusCode(StatusCodes.Status403Forbidden, new Response { Status = "Error", Message = "You are not allowed to view this site." });
+            }
+        }
+
         [HttpDelete("{id}")]
         public async Task<IActionResult> DeleteLocation(int id, CancellationToken cancellationToken)
         {
             try
             {
-                var found = await _locationService.DeleteLocationByIdAsync(id, cancellationToken);
+                var found = await _locationService.DeleteLocationByIdAsync(id, User, cancellationToken);
                 if (!found)
                     return NotFound(new Response { Status = "Error", Message = "Location not found" });
 
                 return Ok(new DataResponse { Message = "Location Deleted Successfully", Status = "200" });
             }
+            catch (SiteForbiddenException forbidden)
+            {
+                return StatusCode(StatusCodes.Status403Forbidden, new Response { Status = "Error", Message = forbidden.Message });
+            }
+            catch (UnauthorizedAccessException)
+            {
+                return StatusCode(StatusCodes.Status403Forbidden, new Response { Status = "Error", Message = "You are not allowed to delete this site." });
+            }
             catch (KeyNotFoundException)
             {
                 return NotFound(new Response { Status = "Error", Message = "Location not found" });
@@ -188,6 +256,14 @@ namespace Api.SeaHavenIndustries.Controllers
             return await DeleteLocation(id, cancellationToken);
         }
 
+        private ObjectResult SiteCodeConflict() =>
+            Conflict(new
+            {
+                Status = "Conflict",
+                Message = SiteCodeConflictException.PublicMessage,
+                Code = SiteCodeConflictException.ErrorCode
+            });
+
         private static LocationCreateRequestDTO MapToCreateRequest(Location_DTO model)
         {
             return new LocationCreateRequestDTO
@@ -202,6 +278,7 @@ namespace Api.SeaHavenIndustries.Controllers
                 ContactEmail = model.ContactEmail,
                 Status = model.Status,
                 AccountId = model.GetAccountId(),
+                Notes = model.Notes,
                 Contacts = MapSiteContacts(model.Contacts)
             };
         }
@@ -220,6 +297,7 @@ namespace Api.SeaHavenIndustries.Controllers
                 ContactEmail = model.ContactEmail,
                 Status = model.Status,
                 AccountId = model.GetAccountId(),
+                Notes = model.Notes,
                 Contacts = MapSiteContacts(model.Contacts)
             };
         }
diff --git a/Api.SeaHavenIndustries/DTOs/EditLocation_DTO.cs b/Api.SeaHavenIndustries/DTOs/EditLocation_DTO.cs
index 4a3cab8..b526bad 100644
--- a/Api.SeaHavenIndustries/DTOs/EditLocation_DTO.cs
+++ b/Api.SeaHavenIndustries/DTOs/EditLocation_DTO.cs
@@ -16,6 +16,7 @@ namespace Api.SeaHavenIndustries.DTOs
         public string? ContactEmail { get; set; }
         public string? Status { get; set; }
         public string? AccountId { get; set; }
+        public string? Notes { get; set; }
         public List<SiteContactInput_DTO>? Contacts { get; set; }
 
         public int? GetAccountId() => LocationAccountIdMapping.ParseOptional(AccountId);
diff --git a/Api.SeaHavenIndustries/DTOs/Location_DTO.cs b/Api.SeaHavenIndustries/DTOs/Location_DTO.cs
index 343df36..4fd7f72 100644
--- a/Api.SeaHavenIndustries/DTOs/Location_DTO.cs
+++ b/Api.SeaHavenIndustries/DTOs/Location_DTO.cs
@@ -11,6 +11,13 @@ namespace Api.SeaHavenIndustries.DTOs
         public string? Phone { get; set; }
     }
 
+    /// <summary>Contacts and notes edited from the work-order Site dialog.</summary>
+    public class SiteContactInfoInput_DTO
+    {
+        public List<SiteContactInput_DTO>? Contacts { get; set; }
+        public string? Notes { get; set; }
+    }
+
     public class Location_DTO
     {
         public string? Title { get; set; }
@@ -24,6 +31,7 @@ namespace Api.SeaHavenIndustries.DTOs
         public string? ContactEmail { get; set; }
         public string? Status { get; set; }
         public string? AccountId { get; set; }
+        public string? Notes { get; set; }
         public List<SiteContactInput_DTO>? Contacts { get; set; }
 
         public int? GetAccountId() => LocationAccountIdMapping.ParseOptional(AccountId);
diff --git a/Data.SeaHavenIndustries/Migrations/20260925141509_AddLocationNotes.Designer.cs b/Data.SeaHavenIndustries/Migrations/20260925141509_AddLocationNotes.Designer.cs
new file mode 100644
index 0000000..53d31b2
--- /dev/null
+++ b/Data.SeaHavenIndustries/Migrations/20260925141509_AddLocationNotes.Designer.cs
@@ -0,0 +1,4216 @@
+// <auto-generated />
+using System;
+using Data.SeaHavenIndustries;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Metadata;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+
+#nullable disable
+
+namespace Data.SeaHavenIndustries.Migrations
+{
+    [DbContext(typeof(ApplicationDbContext))]
+    [Migration("20260925141509_AddLocationNotes")]
+    partial class AddLocationNotes
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasAnnotation("ProductVersion", "8.0.8")
+                .HasAnnotation("Relational:MaxIdentifierLength", 128);
+
+            SqlServerModelBuilderExtensions.UseIdentityColumns(modelBuilder);
+
+            modelBuilder.HasSequence("WorkOrderInternalNumberSequence");
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Accounts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("CurrencyCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Importance")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("IndustryId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("OwnerEmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Phone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PrivacySetting")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ServiceInstructions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Tags")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("TerritoryId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("TimeZone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Type")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Website")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Accounts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Addresses", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AddressType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Country")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("County")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("ContactId");
+
+                    b.ToTable("Addresses");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int>("AccessFailedCount")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Color")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ConcurrencyStamp")
+                        .IsConcurrencyToken()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Contact")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DeletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<bool>("EmailConfirmed")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("FirstName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Initials")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsAccountOwner")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("LastName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Locations")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("LockoutEnabled")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTimeOffset?>("LockoutEnd")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("NormalizedEmail")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("NormalizedUserName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("PasswordHash")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("PendingRegistration")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("PendingRegistrationCreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("PhoneNumberConfirmed")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("SecurityStamp")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("TwoFactorEnabled")
+                        .HasColumnType("bit");
+
+                    b.Property<int?>("Type")
+                        .HasColumnType("int");
+
+                    b.Property<string>("UniqueName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserImage")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("IsAccountOwner")
+                        .IsUnique()
+                        .HasDatabaseName("IX_AspNetUsers_IsAccountOwner")
+                        .HasFilter("IsAccountOwner = 1");
+
+                    b.HasIndex("NormalizedEmail")
+                        .HasDatabaseName("EmailIndex");
+
+                    b.HasIndex("NormalizedUserName")
+                        .IsUnique()
+                        .HasDatabaseName("UserNameIndex")
+                        .HasFilter("[NormalizedUserName] IS NOT NULL");
+
+                    b.ToTable("AspNetUsers", (string)null);
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Area", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("Areas");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("AssetCode")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Assets");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Category", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Categories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Comments", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CommentType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Commenter")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Commenttext")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Documents")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalCommentId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("ExternalSourceEmailS3Key")
+                        .HasMaxLength(2048)
+                        .HasColumnType("nvarchar(2048)");
+
+                    b.Property<DateTimeOffset?>("ExternalUpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalVersionHash")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RecordType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int?>("WorkerOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("UserId");
+
+                    b.HasIndex("WorkerOrderId");
+
+                    b.ToTable("Comments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.CompletionDocTemplate", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ServiceKey")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("TemplateUrl")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ServiceKey", "IsActive");
+
+                    b.ToTable("CompletionDocTemplates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ContactDetails", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DateOfBirth")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Gender")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PrivacySetting")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Tags")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Territory")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.ToTable("ContactDetails");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ContactType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FirstName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LastName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("MiddleName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Owner")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("SiteContactOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Title")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Contacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Department", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Departments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AcceptToken")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("AcknowledgedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CommercialStatusUpdatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CompletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DispatchNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DispatchedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("EmailSent")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("EstimatedArrivalAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("EtaManualOverride")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("InvoiceNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("InvoiceStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<decimal?>("NTEAmount")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<string>("PONumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PaymentStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ReplyToAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<DateTime?>("ScheduledDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TechPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("VendorNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<DateTime?>("VerifiedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("VerifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("Dispatches");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchChecklistItem", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CompletedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("CompletedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool>("IsCompleted")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ItemText")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("DispatchChecklistItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchSignoff", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Signature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignatureMethod")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("SignedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("SignoffType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.ToTable("DispatchSignoffs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchUpliftRequest", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<decimal?>("CurrentNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<DateTime?>("DecidedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DecidedByUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DecisionNote")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("EscalatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("EvidenceDocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("ExpiresAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("InitialNotificationSentAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("NotificationError")
+                        .HasMaxLength(500)
+                        .HasColumnType("nvarchar(500)");
+
+                    b.Property<string>("NotificationStatus")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<string>("RequestKey")
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<string>("RequestedByVendorName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<decimal>("RequestedNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<int>("RequiredTier")
+                        .HasColumnType("int");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<string>("Status")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<string>("VendorReason")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId")
+                        .IsUnique()
+                        .HasFilter("[Status] IN ('Pending', 'ChangesRequested')");
+
+                    b.HasIndex("EvidenceDocumentId");
+
+                    b.HasIndex("DispatchId", "RequestKey")
+                        .IsUnique()
+                        .HasFilter("[RequestKey] IS NOT NULL");
+
+                    b.ToTable("DispatchUpliftRequests");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchWorkOrder", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("DispatchWorkOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DropdownOption", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Category")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ParentValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Value")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("DropdownOptions");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("CanChangeProviderNumber")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ConfirmUserName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DateOfBirth")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DepartmentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("EmployeeNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FirstName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Gender")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("HireDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<int?>("JobTitleId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("LastLogin")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LastName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("MiddleName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("PermissionGroupId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("RegionId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("SMSAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TimeZone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Website")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DepartmentId");
+
+                    b.HasIndex("JobTitleId");
+
+                    b.HasIndex("RegionId");
+
+                    b.ToTable("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeAddress", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CountryCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CountyId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("StateCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Street")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("StreetLineTwo")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId")
+                        .IsUnique();
+
+                    b.ToTable("EmployeeAddresses");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeEmail", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<int?>("EmailTypeId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsPrimary")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.ToTable("EmployeeEmails");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeePhone", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Extension")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsPrimary")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Number")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("PhoneTypeId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.ToTable("EmployeePhones");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Events", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("AllDay")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("EndDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("EndTime")
+                        .HasMaxLength(10)
+                        .HasColumnType("nvarchar(10)");
+
+                    b.Property<string>("EventColor")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Location")
+                        .HasMaxLength(150)
+                        .HasColumnType("nvarchar(150)");
+
+                    b.Property<int?>("RecordID")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RecordName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("RecordTargetType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("ReminderMinutes")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime>("StartDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("StartTime")
+                        .HasMaxLength(10)
+                        .HasColumnType("nvarchar(10)");
+
+                    b.Property<string>("Title")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Events");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.FollowUps", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Reason")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("ScheduleDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<TimeSpan>("ScheduleStartTime")
+                        .HasColumnType("time");
+
+                    b.Property<string>("Status")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.HasIndex("LocationId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("FollowUps");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ForgetPasswordCode", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Code")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Email")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("ForgetPasswordCodes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.JobTitle", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("JobTitles");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalLocationId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Latitude")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Longitude")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Title")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.ToTable("Locations");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.PMSchedules", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AssetId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Frequency")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("StartDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AssetId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("PMSchedules");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BillingAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("Date")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ProjectName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("QuotId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ShippingAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("Quotes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.QuotesLineItems", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Descriptions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<decimal?>("Lineitem")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<int?>("LineitemNumber")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("QuoteId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("QuoteId");
+
+                    b.ToTable("QuotesLines");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Region", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Regions");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Service", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("CompletionDocTemplateId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("IconKey")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<bool>("RequiresCompletionDocument")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Trade")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CompletionDocTemplateId");
+
+                    b.HasIndex("IsActive");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.HasIndex("Trade");
+
+                    b.ToTable("Services");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ServiceWorkOrderType", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("ServiceId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ServiceId", "WorkOrderType")
+                        .IsUnique();
+
+                    b.ToTable("ServiceWorkOrderTypes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.SitePreferredVendor", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Trade")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("UpdatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("LocationId", "VendorId")
+                        .IsUnique()
+                        .HasFilter("[Trade] IS NULL");
+
+                    b.HasIndex("LocationId", "VendorId", "Trade")
+                        .IsUnique()
+                        .HasFilter("[Trade] IS NOT NULL");
+
+                    b.ToTable("SitePreferredVendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplate", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("TaskListTemplates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplateItem", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ItemText")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<int>("TaskListTemplateId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("TaskListTemplateId");
+
+                    b.ToTable("TaskListTemplateItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Template", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AfterPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AfterPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AssignTo")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DueDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Priority")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffSignature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderTitle")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AssignTo");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Templates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Trade", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("Trades");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserPermissionOverride", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("PermissionKey")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<int>("State")
+                        .HasColumnType("int");
+
+                    b.HasKey("UserId", "PermissionKey");
+
+                    b.HasIndex("UserId", "PermissionKey")
+                        .IsUnique()
+                        .HasDatabaseName("IX_UserPermissionOverrides_UserId_PermissionKey");
+
+                    b.ToTable("UserPermissionOverrides");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserServiceArea", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Area")
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.HasKey("UserId", "Area");
+
+                    b.HasIndex("UserId", "Area")
+                        .IsUnique()
+                        .HasDatabaseName("IX_UserServiceAreas_UserId_Area");
+
+                    b.ToTable("UserServiceAreas");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AvailabilityStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("AvailabilityUpdatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CompanyId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CompanyName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CompanyPhone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ContactName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("GoogleMapsUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Phone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PreferredContact")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TradeSpecialties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CompanyId");
+
+                    b.ToTable("Vendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAccessToken", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime>("ExpiresAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime>("IssuedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("LastUsedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("RevokedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Token")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Token")
+                        .IsUnique();
+
+                    b.HasIndex("VendorId");
+
+                    b.ToTable("VendorAccessTokens");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAuditLog", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Actor")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("FieldName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NewValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("OldValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.ToTable("VendorAuditLogs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("AreaId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CompanyPhone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("GoogleMapsUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AreaId");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("VendorCompanies");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompletionDocument", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ContentType")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("OriginalFileName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Purpose")
+                        .IsRequired()
+                        .HasMaxLength(30)
+                        .HasColumnType("nvarchar(30)");
+
+                    b.Property<string>("RejectionReason")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ReplacesDocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ReviewStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ReviewedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ScanStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ScannedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<long>("SizeBytes")
+                        .HasColumnType("bigint");
+
+                    b.Property<string>("StoredFileName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("Version")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("VendorCompletionDocuments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("AdditionalContacts")
+                        .HasMaxLength(4000)
+                        .HasColumnType("nvarchar(4000)");
+
+                    b.Property<string>("AfterPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AfterPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateOnly?>("AssignDate")
+                        .HasColumnType("date");
+
+                    b.Property<string>("AssignTo")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("AvetaRequired")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("AvettaTask")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Building")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("CarriedOver")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CompletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Customer")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DateReported")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("DocStatus")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("DueDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ExternalAssignedTo")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<DateTimeOffset?>("ExternalLastOccurredAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalRecordType")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset?>("ExternalUpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalVersionHash")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("ExternalWorkOrderId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ExtraServices")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<string>("FlagColor")
+                        .HasMaxLength(7)
+                        .HasColumnType("nvarchar(7)");
+
+                    b.Property<string>("FrozenCompany")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FrozenPoc")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FrozenSite")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("InternalWONumber")
+                        .HasMaxLength(11)
+                        .HasColumnType("nvarchar(11)");
+
+                    b.Property<bool>("IsAddOn")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LegacyStatus")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("LifecycleStatus")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("OperationalFlags")
+                        .HasColumnType("int");
+
+                    b.Property<DateOnly?>("OriginalDate")
+                        .HasColumnType("date");
+
+                    b.Property<DateOnly?>("OriginalWeek")
+                        .HasColumnType("date");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PocName")
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("PocNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<string>("PocPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int?>("PrimaryDispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Priority")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Problem")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("RescheduleCount")
+                        .HasColumnType("int");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<bool?>("ScheduleWeekOnly")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("ScheduledDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("ScheduledEnd")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("ScheduledStart")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Service")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<int?>("ServiceId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ServiceNameSnapshot")
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("ServiceNotes")
+                        .HasMaxLength(4000)
+                        .HasColumnType("nvarchar(4000)");
+
+                    b.Property<string>("Severity")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffSignature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteCode")
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<string>("Source")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SourceEmailS3Key")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SubTrade")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateOnly?>("TargetWeek")
+                        .HasColumnType("date");
+
+                    b.Property<string>("TechPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<string>("Trade")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<decimal?>("VendorNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<string>("VendorNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<int?>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("WorkerOrderNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderTitle")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("istemplate")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("ExternalWorkOrderId")
+                        .IsUnique()
+                        .HasFilter("[ExternalWorkOrderId] IS NOT NULL AND [ExternalWorkOrderId] <> ''");
+
+                    b.HasIndex("InternalWONumber")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.HasIndex("LocationId");
+
+                    b.HasIndex("PrimaryDispatchId");
+
+                    b.HasIndex("ScheduledDate");
+
+                    b.HasIndex("ServiceId");
+
+                    b.HasIndex("SiteCode")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.HasIndex("WorkOrderType");
+
+                    b.HasIndex("AssignTo", "ScheduledDate");
+
+                    b.HasIndex("LifecycleStatus", "ScheduledDate")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.ToTable("workOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAttachments", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Category")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("workOrderAttachments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAuditLog", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Action")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ActorType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CorrelationId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("EventType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FieldName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NewValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("OldValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UserId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("WorkOrderAuditLogs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderCategories", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("workOrderCategories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderContacts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("WorkOrderContacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderExternalReceipt", b =>
+                {
+                    b.Property<long>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("bigint");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<long>("Id"));
+
+                    b.Property<string>("ExternalId")
+                        .IsRequired()
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Kind")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<DateTimeOffset>("ProcessedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("Source")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset>("UpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("VersionHash")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Source", "Kind", "ExternalId")
+                        .IsUnique()
+                        .HasDatabaseName("IX_WorkOrderExternalReceipts_Source_Kind_ExternalId");
+
+                    b.ToTable("WorkOrderExternalReceipts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderFieldLock", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("FieldName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<DateTime>("LockedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("LockedByUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkOrderId", "FieldName")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderFieldLocks");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderReconciliationJob", b =>
+                {
+                    b.Property<int>("Id")
+                        .HasColumnType("int");
+
+                    b.Property<int>("CommentsProcessed")
+                        .HasColumnType("int");
+
+                    b.Property<DateTimeOffset?>("CompletedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ErrorCode")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<Guid?>("FenceToken")
+                        .HasColumnType("uniqueidentifier");
+
+                    b.Property<DateTimeOffset?>("LeaseExpiresAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("Reason")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset?>("RequestedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<Guid>("RunId")
+                        .HasColumnType("uniqueidentifier");
+
+                    b.Property<DateTimeOffset?>("StartedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("State")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<int>("WorkOrdersProcessed")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("State");
+
+                    b.ToTable("WorkOrderReconciliationJobs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWebhookDelivery", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BodySha256")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("DeliveryId")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("EventType")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<DateTimeOffset>("OccurredAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<DateTimeOffset>("ProcessedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DeliveryId")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderWebhookDeliveries");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWeekRolledLedger", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CorrelationId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("ProcessedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateOnly>("SourceWeekStart")
+                        .HasColumnType("date");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkOrderId", "SourceWeekStart")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderWeekRolledLedgers");
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRole", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ConcurrencyStamp")
+                        .IsConcurrencyToken()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("NormalizedName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique()
+                        .HasDatabaseName("RoleNameIndex")
+                        .HasFilter("[NormalizedName] IS NOT NULL");
+
+                    b.ToTable("AspNetRoles", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRoleClaim<string>", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ClaimType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ClaimValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("RoleId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AspNetRoleClaims", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserClaim<string>", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ClaimType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ClaimValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UserId");
+
+                    b.ToTable("AspNetUserClaims", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserLogin<string>", b =>
+                {
+                    b.Property<string>("LoginProvider")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ProviderKey")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ProviderDisplayName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("LoginProvider", "ProviderKey");
+
+                    b.HasIndex("UserId");
+
+                    b.ToTable("AspNetUserLogins", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserRole<string>", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("RoleId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("UserId", "RoleId");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AspNetUserRoles", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserToken<string>", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("LoginProvider")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Value")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("UserId", "LoginProvider", "Name");
+
+                    b.ToTable("AspNetUserTokens", (string)null);
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Addresses", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany("Addresses")
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contact")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Contact");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Comments", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("Comments")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "ApplicationUser")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Comments")
+                        .HasForeignKey("WorkerOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("ApplicationUser");
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ContactDetails", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contact")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Contact");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany("Contacts")
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany("Contacts")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("Dispatches")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Dispatches")
+                        .HasForeignKey("WorkOrderId");
+
+                    b.Navigation("Vendor");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchChecklistItem", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("ChecklistItems")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchSignoff", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("Signoffs")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchUpliftRequest", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany()
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.VendorCompletionDocument", "EvidenceDocument")
+                        .WithMany()
+                        .HasForeignKey("EvidenceDocumentId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("EvidenceDocument");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchWorkOrder", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("DispatchWorkOrders")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Department", "Department")
+                        .WithMany("Employees")
+                        .HasForeignKey("DepartmentId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.JobTitle", "JobTitle")
+                        .WithMany("Employees")
+                        .HasForeignKey("JobTitleId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Region", "Region")
+                        .WithMany("Employees")
+                        .HasForeignKey("RegionId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Department");
+
+                    b.Navigation("JobTitle");
+
+                    b.Navigation("Region");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeAddress", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithOne("Address")
+                        .HasForeignKey("Data.SeaHavenIndustries.EmployeeAddress", "EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeEmail", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany("Emails")
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeePhone", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany("Phones")
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.FollowUps", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany()
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Employee");
+
+                    b.Navigation("Location");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.PMSchedules", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Assets", "Asset")
+                        .WithMany("PMSchedules")
+                        .HasForeignKey("AssetId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Asset");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contacts")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Quotes")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Contacts");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.QuotesLineItems", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Quotes", "Quotes")
+                        .WithMany("LineItems")
+                        .HasForeignKey("QuoteId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Quotes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Service", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.CompletionDocTemplate", "CompletionDocTemplate")
+                        .WithMany()
+                        .HasForeignKey("CompletionDocTemplateId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("CompletionDocTemplate");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ServiceWorkOrderType", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Service", "Service")
+                        .WithMany("SupportedWorkOrderTypes")
+                        .HasForeignKey("ServiceId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Service");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.SitePreferredVendor", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("SitePreferences")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Location");
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplateItem", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.TaskListTemplate", "Template")
+                        .WithMany("Items")
+                        .HasForeignKey("TaskListTemplateId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Template");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Template", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "AssignToUser")
+                        .WithMany("Templates")
+                        .HasForeignKey("AssignTo")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Category", "Category")
+                        .WithMany("Templates")
+                        .HasForeignKey("CategoryId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "POC")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Locations")
+                        .WithMany("Templates")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("AssignToUser");
+
+                    b.Navigation("Category");
+
+                    b.Navigation("Locations");
+
+                    b.Navigation("POC");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserPermissionOverride", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("User");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserServiceArea", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany("ServiceAreas")
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("User");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.VendorCompany", "Company")
+                        .WithMany("Vendors")
+                        .HasForeignKey("CompanyId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Company");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAccessToken", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany()
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAuditLog", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("AuditLogs")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Area", "Area")
+                        .WithMany()
+                        .HasForeignKey("AreaId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Area");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompletionDocument", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("CompletionDocuments")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany()
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("Vendor");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "AssignToUser")
+                        .WithMany("WorkOrders")
+                        .HasForeignKey("AssignTo")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Locations")
+                        .WithMany("workOrders")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "PrimaryDispatch")
+                        .WithMany()
+                        .HasForeignKey("PrimaryDispatchId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Service", "ServiceDefinition")
+                        .WithMany()
+                        .HasForeignKey("ServiceId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("AssignToUser");
+
+                    b.Navigation("Locations");
+
+                    b.Navigation("PrimaryDispatch");
+
+                    b.Navigation("ServiceDefinition");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAttachments", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("workOrderAttachments")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAuditLog", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("User");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderCategories", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Category", "Category")
+                        .WithMany("WorkOrderCategories")
+                        .HasForeignKey("CategoryId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("WorkOrderCategories")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Category");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderContacts", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "POC")
+                        .WithMany("WorkOrderContacts")
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("WorkOrderContacts")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("POC");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderFieldLock", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("FieldLocks")
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWeekRolledLedger", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRoleClaim<string>", b =>
+                {
+                    b.HasOne("Microsoft.AspNetCore.Identity.IdentityRole", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserClaim<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserLogin<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserRole<string>", b =>
+                {
+                    b.HasOne("Microsoft.AspNetCore.Identity.IdentityRole", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserToken<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Accounts", b =>
+                {
+                    b.Navigation("Addresses");
+
+                    b.Navigation("Contacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.Navigation("ServiceAreas");
+
+                    b.Navigation("Templates");
+
+                    b.Navigation("WorkOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.Navigation("PMSchedules");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Category", b =>
+                {
+                    b.Navigation("Templates");
+
+                    b.Navigation("WorkOrderCategories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.Navigation("WorkOrderContacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Department", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.Navigation("ChecklistItems");
+
+                    b.Navigation("Comments");
+
+                    b.Navigation("CompletionDocuments");
+
+                    b.Navigation("DispatchWorkOrders");
+
+                    b.Navigation("Signoffs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.Navigation("Address");
+
+                    b.Navigation("Emails");
+
+                    b.Navigation("Phones");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.JobTitle", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.Navigation("Contacts");
+
+                    b.Navigation("Templates");
+
+                    b.Navigation("workOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.Navigation("LineItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Region", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Service", b =>
+                {
+                    b.Navigation("SupportedWorkOrderTypes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplate", b =>
+                {
+                    b.Navigation("Items");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.Navigation("AuditLogs");
+
+                    b.Navigation("Dispatches");
+
+                    b.Navigation("SitePreferences");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.Navigation("Vendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.Navigation("Comments");
+
+                    b.Navigation("Dispatches");
+
+                    b.Navigation("FieldLocks");
+
+                    b.Navigation("Quotes");
+
+                    b.Navigation("WorkOrderCategories");
+
+                    b.Navigation("WorkOrderContacts");
+
+                    b.Navigation("workOrderAttachments");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/Data.SeaHavenIndustries/Migrations/20260925141509_AddLocationNotes.cs b/Data.SeaHavenIndustries/Migrations/20260925141509_AddLocationNotes.cs
new file mode 100644
index 0000000..8f437e5
--- /dev/null
+++ b/Data.SeaHavenIndustries/Migrations/20260925141509_AddLocationNotes.cs
@@ -0,0 +1,28 @@
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Data.SeaHavenIndustries.Migrations
+{
+    /// <inheritdoc />
+    public partial class AddLocationNotes : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.AddColumn<string>(
+                name: "Notes",
+                table: "Locations",
+                type: "nvarchar(max)",
+                nullable: true);
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropColumn(
+                name: "Notes",
+                table: "Locations");
+        }
+    }
+}
diff --git a/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs b/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
index 4a3d3c9..e0660f5 100644
--- a/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
+++ b/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
@@ -1582,6 +1582,9 @@ namespace Data.SeaHavenIndustries.Migrations
                     b.Property<string>("Name")
                         .HasColumnType("nvarchar(max)");
 
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
                     b.Property<string>("PhoneNumber")
                         .HasColumnType("nvarchar(max)");
 
diff --git a/Data.SeaHavenIndustries/Models/Locations.cs b/Data.SeaHavenIndustries/Models/Locations.cs
index ce8a6ba..9900c35 100644
--- a/Data.SeaHavenIndustries/Models/Locations.cs
+++ b/Data.SeaHavenIndustries/Models/Locations.cs
@@ -27,6 +27,9 @@ namespace Data.SeaHavenIndustries
         public string? ExternalSource { get; set; }
         public string? ExternalLocationId { get; set; }
 
+        /// <summary>Free-text site notes, edited from the work-order Site dialog.</summary>
+        public string? Notes { get; set; }
+
         // Navigation Properties
         public ICollection<Template>? Templates { get; set; }
         public ICollection<WorkOrder>? workOrders { get; set; }
diff --git a/SeaHaven.DataServices/Helpers/WorkOrderBoardProjection.cs b/SeaHaven.DataServices/Helpers/WorkOrderBoardProjection.cs
index a9f9861..12d22ce 100644
--- a/SeaHaven.DataServices/Helpers/WorkOrderBoardProjection.cs
+++ b/SeaHaven.DataServices/Helpers/WorkOrderBoardProjection.cs
@@ -38,6 +38,7 @@ namespace SeaHaven.DataServices.Helpers
                     w.ServiceNameSnapshot,
                     w.SiteCode,
                     LocationName = w.Locations != null ? w.Locations.Name : null,
+                    SiteNotes = w.Locations != null ? w.Locations.Notes : null,
                     WoPocName = w.PocName,
                     WoPocPhone = w.PocPhone,
                     WoPocNotes = w.PocNotes,
@@ -134,7 +135,7 @@ namespace SeaHaven.DataServices.Helpers
                 var pocPhone = primaryFrozenPoc?.Phone
                     ?? FirstNotBlank(w.WoPocPhone, w.ContactPoc?.PhoneNumber, w.SitePoc?.PhoneNumber);
                 var pocNotes = frozenPoc?.Notes
-                    ?? FirstNotBlank(w.WoPocNotes, w.ContactPoc?.Notes);
+                    ?? FirstNotBlank(w.WoPocNotes, w.ContactPoc?.Notes, w.SiteNotes);
                 var techPhone = !string.IsNullOrWhiteSpace(w.DispatchTechPhone)
                     ? w.DispatchTechPhone
                     : (!string.IsNullOrWhiteSpace(w.WoTechPhone) ? w.WoTechPhone : w.VendorPhone);
diff --git a/SeaHaven.DataServices/Implementation/CommonDataService.cs b/SeaHaven.DataServices/Implementation/CommonDataService.cs
index b263155..eb6968e 100644
--- a/SeaHaven.DataServices/Implementation/CommonDataService.cs
+++ b/SeaHaven.DataServices/Implementation/CommonDataService.cs
@@ -42,6 +42,7 @@ namespace SeaHaven.DataServices.Implementation
         {
             return await _context.Locations
                 .AsNoTracking()
+                .Where(n => n.IsDeleted != true)
                 .Select(n => new Locations
                 {
                     Id = n.Id,
diff --git a/SeaHaven.DataServices/Implementation/LocationDataService.cs b/SeaHaven.DataServices/Implementation/LocationDataService.cs
index 11cb89e..d1553a2 100644
--- a/SeaHaven.DataServices/Implementation/LocationDataService.cs
+++ b/SeaHaven.DataServices/Implementation/LocationDataService.cs
@@ -1,5 +1,7 @@
 using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
 using Microsoft.EntityFrameworkCore;
+using SeaHaven.DataServices.Helpers;
 using SeaHaven.DataServices.Interfaces;
 
 namespace SeaHaven.DataServices.Implementation
@@ -43,7 +45,7 @@ namespace SeaHaven.DataServices.Implementation
         {
             var row = await _context.Locations
                 .AsNoTracking()
-                .Where(l => l.Id == locationId)
+                .Where(l => l.Id == locationId && l.IsDeleted != true)
                 .Select(l => new { l.AccountId })
                 .FirstOrDefaultAsync(cancellationToken);
 
@@ -80,7 +82,7 @@ namespace SeaHaven.DataServices.Implementation
         {
             var query = _context.Locations
                 .AsNoTracking()
-                .Where(l => l.AccountId != null);
+                .Where(l => l.AccountId != null && l.IsDeleted != true);
 
             if (!string.IsNullOrWhiteSpace(search))
             {
@@ -142,7 +144,8 @@ namespace SeaHaven.DataServices.Implementation
         {
             IQueryable<Locations> query = _context.Locations
                 .AsNoTracking()
-                .Include(l => l.Account);
+                .Include(l => l.Account)
+                .Where(l => l.IsDeleted != true);
 
             if (!string.IsNullOrWhiteSpace(search))
             {
@@ -200,15 +203,16 @@ namespace SeaHaven.DataServices.Implementation
         {
             return await _context.Locations
                 .AsNoTracking()
+                .Include(l => l.Account)
                 .Include(l => l.Contacts.Where(c => c.IsDeleted != true))
-                .FirstOrDefaultAsync(l => l.Id == id, cancellationToken);
+                .FirstOrDefaultAsync(l => l.Id == id && l.IsDeleted != true, cancellationToken);
         }
 
         public async Task<Locations?> GetByIdForUpdateAsync(int id, CancellationToken cancellationToken)
         {
             return await _context.Locations
                 .Include(l => l.Contacts)
-                .FirstOrDefaultAsync(l => l.Id == id, cancellationToken);
+                .FirstOrDefaultAsync(l => l.Id == id && l.IsDeleted != true, cancellationToken);
         }
 
         public async Task<IReadOnlyList<Contacts>> GetSiteContactsByLocationIdsAsync(
@@ -241,31 +245,67 @@ namespace SeaHaven.DataServices.Implementation
             await _context.SaveChangesAsync(cancellationToken);
         }
 
-        public async Task<bool> DeleteByIdAsync(int id, CancellationToken cancellationToken)
+        public async Task<bool> SiteCodeExistsAsync(
+            string siteCode,
+            int? accountId,
+            int? excludeLocationId,
+            CancellationToken cancellationToken)
         {
-            var entity = await _context.Locations
-                .Include(l => l.Contacts)
-                .FirstOrDefaultAsync(l => l.Id == id, cancellationToken);
-            if (entity == null)
-                return false;
+            var normalized = siteCode.Trim().ToUpperInvariant();
 
-            var now = DateTime.Now;
-            foreach (var contact in entity.Contacts ?? Enumerable.Empty<Contacts>())
-            {
-                if (contact.IsDeleted != true)
-                {
-                    contact.IsDeleted = true;
-                    contact.DeletionTime = now;
-                }
-
-                contact.LocationId = null;
-            }
-
-            _context.Locations.Remove(entity);
-            await _context.SaveChangesAsync(cancellationToken);
-            return true;
+            return await _context.Locations
+                .AsNoTracking()
+                .Where(l => l.IsDeleted != true
+                    && l.AccountId == accountId
+                    && l.Name != null
+                    && l.Name.Trim().ToUpper() == normalized)
+                .Where(l => excludeLocationId == null || l.Id != excludeLocationId)
+                .AnyAsync(cancellationToken);
         }
 
+        public async Task<(int Count, IReadOnlyList<int> Ids)> GetOpenWorkOrderIdsAsync(
+            int locationId,
+            string? siteCode,
+            int? siteAccountId,
+            int? callerAccountId,
+            int maxIds,
+            CancellationToken cancellationToken)
+        {
+            var code = string.IsNullOrWhiteSpace(siteCode) ? null : siteCode.Trim().ToUpper();
+
+            var query = _context.workOrders
+                .AsNoTracking()
+                .Where(w => w.IsDeleted != true
+                    && (w.LocationId == locationId
+                        || (code != null
+                            && w.LocationId == null
+                            && w.SiteCode != null
+                            && w.SiteCode.Trim().ToUpper() == code
+                            && (w.AccountId == null || w.AccountId == siteAccountId))));
+
+            if (callerAccountId is int accountId)
+                query = query.Where(w => w.AccountId == accountId);
+
+            query = WorkOrderBoardQueryFilters.ApplyStatusFilter(query, OpenLifecycleStatuses);
+
+            var count = await query.CountAsync(cancellationToken);
+            if (count == 0)
+                return (0, Array.Empty<int>());
+
+            var ids = await query
+                .OrderBy(w => w.Id)
+                .Select(w => w.Id)
+                .Take(maxIds)
+                .ToListAsync(cancellationToken);
+
+            return (count, ids);
+        }
+
+        private static readonly IReadOnlyList<LifecycleStatus> OpenLifecycleStatuses = Enum
+            .GetValues<LifecycleStatus>()
+            .Where(status => !LifecycleStatusSets.Terminal.Contains(status))
+            .ToList();
+
         public async Task<(IEnumerable<object> Items, int TotalCount)> GetAddressbookPagedAsync(
             int page,
             int pageSize,
diff --git a/SeaHaven.DataServices/Interfaces/ILocationDataService.cs b/SeaHaven.DataServices/Interfaces/ILocationDataService.cs
index 5a068c1..bd5a44d 100644
--- a/SeaHaven.DataServices/Interfaces/ILocationDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/ILocationDataService.cs
@@ -52,6 +52,31 @@ namespace SeaHaven.DataServices.Interfaces
 
         Task<Locations> AddAsync(Locations location, CancellationToken cancellationToken);
         Task UpdateAsync(Locations location, CancellationToken cancellationToken);
-        Task<bool> DeleteByIdAsync(int id, CancellationToken cancellationToken);
+
+        /// <summary>
+        /// True when a live (not deleted) site of the same account already uses
+        /// <paramref name="siteCode"/>, compared trimmed and case-insensitively.
+        /// A null account matches only other sites without an account.
+        /// </summary>
+        Task<bool> SiteCodeExistsAsync(
+            string siteCode,
+            int? accountId,
+            int? excludeLocationId,
+            CancellationToken cancellationToken);
+
+        /// <summary>
+        /// Open (not Completed or Canceled, legacy status aware) and not deleted work
+        /// orders that reference the site by id, or by site code when they carry no
+        /// location id and no other account. <paramref name="callerAccountId"/>
+        /// narrows to one account. Returns the full count and at most
+        /// <paramref name="maxIds"/> ids, ascending.
+        /// </summary>
+        Task<(int Count, IReadOnlyList<int> Ids)> GetOpenWorkOrderIdsAsync(
+            int locationId,
+            string? siteCode,
+            int? siteAccountId,
+            int? callerAccountId,
+            int maxIds,
+            CancellationToken cancellationToken);
     }
 }
diff --git a/SeaHaven.Services/DTOs/LocationDTOs.cs b/SeaHaven.Services/DTOs/LocationDTOs.cs
index 58f0878..adf613e 100644
--- a/SeaHaven.Services/DTOs/LocationDTOs.cs
+++ b/SeaHaven.Services/DTOs/LocationDTOs.cs
@@ -15,6 +15,7 @@ namespace SeaHaven.Services.DTOs
         public string? Status { get; set; }
         public int? AccountId { get; set; }
         public string? AccountName { get; set; }
+        public string? Notes { get; set; }
         public DateTime? CreatedDate { get; set; }
         public string? CreatedBy { get; set; }
 
@@ -70,6 +71,7 @@ namespace SeaHaven.Services.DTOs
         public string? ContactEmail { get; set; }
         public string? Status { get; set; }
         public int? AccountId { get; set; }
+        public string? Notes { get; set; }
 
         /// <summary>SH-138: null keeps legacy behavior; empty array is a validation error.</summary>
         public List<SiteContactRequestDTO>? Contacts { get; set; }
@@ -88,6 +90,9 @@ namespace SeaHaven.Services.DTOs
         public string? Status { get; set; }
         public int? AccountId { get; set; }
 
+        /// <summary>Null keeps the stored notes.</summary>
+        public string? Notes { get; set; }
+
         /// <summary>SH-138: null keeps legacy behavior and must not mutate contact rows.</summary>
         public List<SiteContactRequestDTO>? Contacts { get; set; }
     }
@@ -99,4 +104,18 @@ namespace SeaHaven.Services.DTOs
         public string? City { get; set; }
         public string? State { get; set; }
     }
+
+    /// <summary>Site contacts and notes edited from the work-order Site dialog.</summary>
+    public class SiteContactInfoRequestDTO
+    {
+        public List<SiteContactRequestDTO>? Contacts { get; set; }
+        public string? Notes { get; set; }
+    }
+
+    /// <summary>Open (not Completed or Canceled) work orders that reference a site.</summary>
+    public class SiteOpenWorkOrdersDTO
+    {
+        public int Count { get; set; }
+        public IReadOnlyList<int> WorkOrderIds { get; set; } = Array.Empty<int>();
+    }
 }
diff --git a/SeaHaven.Services/Exceptions/SiteExceptions.cs b/SeaHaven.Services/Exceptions/SiteExceptions.cs
new file mode 100644
index 0000000..d8a8f76
--- /dev/null
+++ b/SeaHaven.Services/Exceptions/SiteExceptions.cs
@@ -0,0 +1,24 @@
+namespace SeaHaven.Services.Exceptions;
+
+/// <summary>Another live site of the same client already uses the requested site code.</summary>
+public sealed class SiteCodeConflictException : Exception
+{
+    public const string ErrorCode = "DuplicateSiteCode";
+    public const string PublicMessage = "This site code already exists.";
+
+    public SiteCodeConflictException()
+        : base(PublicMessage)
+    {
+    }
+}
+
+/// <summary>The caller lacks the permission required for a site mutation.</summary>
+public sealed class SiteForbiddenException : Exception
+{
+    public const string DeleteDeniedMessage = "You are not allowed to delete sites.";
+
+    public SiteForbiddenException(string message)
+        : base(message)
+    {
+    }
+}
diff --git a/SeaHaven.Services/Helpers/WorkOrderCompletionSnapshotMapper.cs b/SeaHaven.Services/Helpers/WorkOrderCompletionSnapshotMapper.cs
index 798a978..0fd78cb 100644
--- a/SeaHaven.Services/Helpers/WorkOrderCompletionSnapshotMapper.cs
+++ b/SeaHaven.Services/Helpers/WorkOrderCompletionSnapshotMapper.cs
@@ -25,7 +25,7 @@ namespace SeaHaven.Services.Helpers
                 JoinName(contact?.POC?.FirstName, contact?.POC?.MiddleName, contact?.POC?.LastName),
                 WorkOrderPocSiteContact.DisplayName(sitePrimary));
             var pocPhone = FirstNotBlank(workOrder.PocPhone, contact?.POC?.PhoneNumber, sitePrimary?.PhoneNumber);
-            var pocNotes = FirstNotBlank(workOrder.PocNotes, contact?.Notes);
+            var pocNotes = FirstNotBlank(workOrder.PocNotes, contact?.Notes, location?.Notes);
 
             var contacts = new List<WorkOrderFrozenPocContact>();
             AddContact(contacts, pocName, pocPhone);
diff --git a/SeaHaven.Services/Implementation/LocationService.cs b/SeaHaven.Services/Implementation/LocationService.cs
index 64b275a..bc1772a 100644
--- a/SeaHaven.Services/Implementation/LocationService.cs
+++ b/SeaHaven.Services/Implementation/LocationService.cs
@@ -3,7 +3,9 @@ using Data.SeaHavenIndustries;
 using FluentValidation;
 using FluentValidation.Results;
 using SeaHaven.DataServices.Interfaces;
+using SeaHaven.Services.Constants;
 using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Exceptions;
 using SeaHaven.Services.Helpers;
 using SeaHaven.Services.Interfaces;
 using SeaHaven.Services.Validation;
@@ -20,17 +22,26 @@ namespace SeaHaven.Services.Implementation
         private readonly IAccountDataService _accountDataService;
         private readonly ICreateLocationValidation _createValidator;
         private readonly IUpdateLocationValidation _updateValidator;
+        private readonly ITeamPermissionOverrideDataService _permissionOverrideData;
+        private readonly ITeamPermissionPolicy _permissionPolicy;
+
+        /// <summary>Upper bound on ids returned for the open work orders link.</summary>
+        public const int MaxOpenWorkOrderIds = 200;
 
         public LocationService(
             ILocationDataService locationDataService,
             IAccountDataService accountDataService,
             ICreateLocationValidation createValidator,
-            IUpdateLocationValidation updateValidator)
+            IUpdateLocationValidation updateValidator,
+            ITeamPermissionOverrideDataService permissionOverrideData,
+            ITeamPermissionPolicy permissionPolicy)
         {
             _locationDataService = locationDataService;
             _accountDataService = accountDataService;
             _createValidator = createValidator;
             _updateValidator = updateValidator;
+            _permissionOverrideData = permissionOverrideData;
+            _permissionPolicy = permissionPolicy;
         }
 
         // Query operations
@@ -263,9 +274,20 @@ namespace SeaHaven.Services.Implementation
         {
             await EnsureAccountAssignableAsync(user, request.AccountId, existingLocationAccountId: null, cancellationToken);
 
+            var siteCode = request.Name?.Trim();
+            if (string.IsNullOrEmpty(siteCode))
+            {
+                throw new ValidationException(new[]
+                {
+                    new ValidationFailure(nameof(LocationCreateRequestDTO.Name), "Site Code is required.")
+                });
+            }
+
+            await EnsureSiteCodeAvailableAsync(siteCode, request.AccountId, excludeLocationId: null, cancellationToken);
+
             var location = new Locations
             {
-                Name = request.Name,
+                Name = siteCode,
                 Title = request.Title,
                 Address1 = request.Address,
                 City = request.City,
@@ -274,7 +296,8 @@ namespace SeaHaven.Services.Implementation
                 PhoneNumber = request.Phone,
                 Email = request.ContactEmail,
                 Status = request.Status,
-                AccountId = request.AccountId
+                AccountId = request.AccountId,
+                Notes = NormalizeNotes(request.Notes)
             };
 
             if (request.Contacts is List<SiteContactRequestDTO> contacts)
@@ -297,7 +320,6 @@ namespace SeaHaven.Services.Implementation
 
             EnsureLocationInCallerScope(user, location.AccountId);
 
-            location.Name = request.Name;
             location.Title = request.Title;
             location.Address1 = request.Address;
             location.City = request.City;
@@ -305,14 +327,19 @@ namespace SeaHaven.Services.Implementation
             location.Zip = request.ZipCode;
             location.PhoneNumber = request.Phone;
             location.Email = request.ContactEmail;
-            location.Status = request.Status;
+            location.Status = request.Status ?? location.Status;
+            if (request.Notes != null)
+                location.Notes = NormalizeNotes(request.Notes);
 
+            var previousAccountId = location.AccountId;
             if (request.AccountId is int accountId)
             {
                 await EnsureAccountAssignableAsync(user, accountId, location.AccountId, cancellationToken);
                 location.AccountId = accountId;
             }
 
+            await ApplySiteCodeForUpdateAsync(location, request.Name, previousAccountId, cancellationToken);
+
             // SH-138: null contacts keeps legacy behavior and must not mutate contact rows.
             if (request.Contacts is List<SiteContactRequestDTO> contacts)
             {
@@ -322,11 +349,147 @@ namespace SeaHaven.Services.Implementation
             await _locationDataService.UpdateAsync(location, cancellationToken);
         }
 
-        public Task<bool> DeleteLocationByIdAsync(int id, CancellationToken cancellationToken)
+        public async Task UpdateSiteContactInfoAsync(
+            int id,
+            SiteContactInfoRequestDTO request,
+            ClaimsPrincipal user,
+            CancellationToken cancellationToken)
         {
-            return _locationDataService.DeleteByIdAsync(id, cancellationToken);
+            if (request.Contacts is not List<SiteContactRequestDTO> contacts)
+            {
+                throw new ValidationException(new[]
+                {
+                    new ValidationFailure(nameof(SiteContactInfoRequestDTO.Contacts), "At least one contact is required.")
+                });
+            }
+
+            var location = await _locationDataService.GetByIdForUpdateAsync(id, cancellationToken);
+            if (location == null)
+                throw new KeyNotFoundException($"Location with ID {id} not found");
+
+            EnsureLocationInCallerScope(user, location.AccountId);
+
+            ApplySiteContactsForUpdate(location, contacts, GetActorId(user));
+            location.Notes = NormalizeNotes(request.Notes);
+
+            await _locationDataService.UpdateAsync(location, cancellationToken);
         }
 
+        /// <summary>
+        /// Deletes a site for good from the caller's point of view. The row is kept as
+        /// a tombstone because work orders, assets and history reference it through
+        /// restrict foreign keys; those references are left exactly as they were.
+        /// </summary>
+        public async Task<bool> DeleteLocationByIdAsync(
+            int id,
+            ClaimsPrincipal user,
+            CancellationToken cancellationToken)
+        {
+            await EnsureCanDeleteSitesAsync(user, cancellationToken);
+
+            var location = await _locationDataService.GetByIdForUpdateAsync(id, cancellationToken);
+            if (location == null)
+                return false;
+
+            EnsureLocationInCallerScope(user, location.AccountId);
+
+            location.IsDeleted = true;
+            location.DeletionTime = DateTime.UtcNow;
+            location.DeleterUserId = GetActorId(user);
+
+            await _locationDataService.UpdateAsync(location, cancellationToken);
+            return true;
+        }
+
+        public async Task<SiteOpenWorkOrdersDTO?> GetOpenWorkOrdersAsync(
+            int id,
+            ClaimsPrincipal user,
+            CancellationToken cancellationToken)
+        {
+            var location = await _locationDataService.GetDetailByIdAsync(id, cancellationToken);
+            if (location == null)
+                return null;
+
+            EnsureLocationInCallerScope(user, location.AccountId);
+
+            int? callerAccountId = WorkOrderMediaAuthorization.ResolveMediaScope(user) is MediaAccountScope.Account caller
+                ? caller.AccountId
+                : null;
+
+            var (count, ids) = await _locationDataService.GetOpenWorkOrderIdsAsync(
+                location.Id,
+                location.Name,
+                location.AccountId,
+                callerAccountId,
+                MaxOpenWorkOrderIds,
+                cancellationToken);
+
+            return new SiteOpenWorkOrdersDTO { Count = count, WorkOrderIds = ids };
+        }
+
+        private async Task EnsureCanDeleteSitesAsync(ClaimsPrincipal user, CancellationToken cancellationToken)
+        {
+            var userId = GetActorId(user);
+            var permissionUser = string.IsNullOrWhiteSpace(userId)
+                ? null
+                : await _permissionOverrideData.GetUserAsync(userId, cancellationToken);
+
+            if (permissionUser is null
+                || !_permissionPolicy.IsAllowed(
+                    permissionUser.RoleName,
+                    TeamPermissionKeys.DeleteSites,
+                    permissionUser.Overrides))
+            {
+                throw new SiteForbiddenException(SiteForbiddenException.DeleteDeniedMessage);
+            }
+        }
+
+        private async Task EnsureSiteCodeAvailableAsync(
+            string siteCode,
+            int? accountId,
+            int? excludeLocationId,
+            CancellationToken cancellationToken)
+        {
+            if (await _locationDataService.SiteCodeExistsAsync(siteCode, accountId, excludeLocationId, cancellationToken))
+                throw new SiteCodeConflictException();
+        }
+
+        /// <summary>
+        /// The site code is immutable once set. A blank legacy code may be filled in
+        /// once; the code must stay unique within the site's account, including when
+        /// the site moves to another account.
+        /// </summary>
+        private async Task ApplySiteCodeForUpdateAsync(
+            Locations location,
+            string? requestedCode,
+            int? previousAccountId,
+            CancellationToken cancellationToken)
+        {
+            var stored = location.Name?.Trim();
+            var requested = requestedCode?.Trim();
+
+            if (!string.IsNullOrEmpty(stored)
+                && !string.IsNullOrEmpty(requested)
+                && !string.Equals(stored, requested, StringComparison.OrdinalIgnoreCase))
+            {
+                throw new ValidationException(new[]
+                {
+                    new ValidationFailure(nameof(LocationUpdateRequestDTO.Name), "Site Code cannot be changed.")
+                });
+            }
+
+            var fillsBlankCode = string.IsNullOrEmpty(stored) && !string.IsNullOrEmpty(requested);
+            var code = fillsBlankCode ? requested : stored;
+            if (!string.IsNullOrEmpty(code) && (fillsBlankCode || previousAccountId != location.AccountId))
+                await EnsureSiteCodeAvailableAsync(code, location.AccountId, location.Id, cancellationToken);
+
+            if (fillsBlankCode)
+                location.Name = requested;
+        }
+
+        private static string? NormalizeNotes(string? notes) =>
+            string.IsNullOrWhiteSpace(notes) ? null : notes.Trim();
+
         private static void EnsureLocationInCallerScope(ClaimsPrincipal user, int? locationAccountId)
         {
             switch (WorkOrderMediaAuthorization.ResolveMediaScope(user))
@@ -414,9 +577,6 @@ namespace SeaHaven.Services.Implementation
                 })
                 .ToList();
             location.Contacts = siteContacts;
-
-            // The first site contact mirrors Location.PhoneNumber for legacy consumers.
-            location.PhoneNumber = siteContacts[0].PhoneNumber;
         }
 
         private static void ApplySiteContactsForUpdate(
@@ -489,9 +649,6 @@ namespace SeaHaven.Services.Implementation
                 existing.DeletionTime = now;
                 existing.LastModificationTime = now;
             }
-
-            // The first site contact mirrors Location.PhoneNumber for legacy consumers.
-            location.PhoneNumber = contacts[0].Phone!.Trim();
         }
 
         private async Task<IReadOnlyDictionary<int, IReadOnlyList<Contacts>>> GetSiteContactsByLocationIdsAsync(
@@ -544,6 +701,7 @@ namespace SeaHaven.Services.Implementation
                 Status = location.Status,
                 AccountId = location.AccountId,
                 AccountName = location.Account?.Name,
+                Notes = location.Notes,
                 CreatedDate = location.CreatedDate,
                 CreatedBy = location.createdby,
                 Contacts = contactsByLocation != null && contactsByLocation.TryGetValue(location.Id, out var contacts)
diff --git a/SeaHaven.Services/Interfaces/ILocationService.cs b/SeaHaven.Services/Interfaces/ILocationService.cs
index f05620a..790cca0 100644
--- a/SeaHaven.Services/Interfaces/ILocationService.cs
+++ b/SeaHaven.Services/Interfaces/ILocationService.cs
@@ -23,6 +23,8 @@ namespace SeaHaven.Services.Interfaces
         Task<LocationDTO?> GetLocationDetailAsync(int id, CancellationToken cancellationToken);
         Task CreateLocationFromRequestAsync(LocationCreateRequestDTO request, ClaimsPrincipal user, CancellationToken cancellationToken);
         Task UpdateLocationFromRequestAsync(int id, LocationUpdateRequestDTO request, ClaimsPrincipal user, CancellationToken cancellationToken);
-        Task<bool> DeleteLocationByIdAsync(int id, CancellationToken cancellationToken);
+        Task UpdateSiteContactInfoAsync(int id, SiteContactInfoRequestDTO request, ClaimsPrincipal user, CancellationToken cancellationToken);
+        Task<bool> DeleteLocationByIdAsync(int id, ClaimsPrincipal user, CancellationToken cancellationToken);
+        Task<SiteOpenWorkOrdersDTO?> GetOpenWorkOrdersAsync(int id, ClaimsPrincipal user, CancellationToken cancellationToken);
     }
 }

From cd23ad5b688eda9ef07e4e6a8c6e4aacf7040c0b Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 11:19:59 -0300
Subject: [PATCH 136/183] fix(completion-templates): read legacy status when
 counting open linked work orders

Work orders without a LifecycleStatus are open or closed according to
their legacy status text. The linked work-order count now goes through
the shared board status filter, so a legacy completed or cancelled row
is no longer reported as depending on the template.
---
 .../CompletionDocTemplateDataService.cs       |  9 +++-
 .../CompletionDocTemplateServiceTests.cs      | 51 +++++++++++++++++--
 2 files changed, 55 insertions(+), 5 deletions(-)

diff --git a/SeaHaven.DataServices/Implementation/CompletionDocTemplateDataService.cs b/SeaHaven.DataServices/Implementation/CompletionDocTemplateDataService.cs
index 0b46c61..0e7a9a7 100644
--- a/SeaHaven.DataServices/Implementation/CompletionDocTemplateDataService.cs
+++ b/SeaHaven.DataServices/Implementation/CompletionDocTemplateDataService.cs
@@ -8,6 +8,10 @@ namespace SeaHaven.DataServices.Implementation
 {
     public class CompletionDocTemplateDataService : ICompletionDocTemplateDataService
     {
+        private static readonly LifecycleStatus[] OpenStatuses = Enum.GetValues<LifecycleStatus>()
+            .Where(status => !LifecycleStatusSets.Terminal.Contains(status))
+            .ToArray();
+
         private readonly ApplicationDbContext _context;
 
         public CompletionDocTemplateDataService(ApplicationDbContext context)
@@ -153,9 +157,12 @@ namespace SeaHaven.DataServices.Implementation
                 .Where(s => s.CompletionDocTemplateId == templateId)
                 .Select(s => (int?)s.Id);
 
+            // Shared status filter so legacy rows without a LifecycleStatus are read
+            // through their legacy status text (a legacy "completed" row is not open).
+            workOrders = WorkOrderBoardQueryFilters.ApplyStatusFilter(workOrders, OpenStatuses);
+
             return await workOrders
                 .Where(w => w.ServiceId != null && linkedServiceIds.Contains(w.ServiceId))
-                .Where(w => !LifecycleStatusSets.Terminal.Contains(w.LifecycleStatus))
                 .OrderBy(w => w.Id)
                 .Select(w => w.Id)
                 .ToListAsync(cancellationToken);
diff --git a/SeaHavenIndustries.Tests/CompletionDocTemplateServiceTests.cs b/SeaHavenIndustries.Tests/CompletionDocTemplateServiceTests.cs
index ccb49ee..cc53bbe 100644
--- a/SeaHavenIndustries.Tests/CompletionDocTemplateServiceTests.cs
+++ b/SeaHavenIndustries.Tests/CompletionDocTemplateServiceTests.cs
@@ -376,6 +376,7 @@ public class CompletionDocTemplateServiceTests
             new WorkOrder { Id = 107, ServiceId = 1, AccountId = 1, LifecycleStatus = LifecycleStatus.Scheduled, IsDeleted = true },
             new WorkOrder { Id = 108, ServiceId = 1, AccountId = 1, LifecycleStatus = LifecycleStatus.Scheduled, istemplate = true },
             new WorkOrder { Id = 205, ServiceId = 1, AccountId = 2, LifecycleStatus = LifecycleStatus.InProgress });
+        context.workOrders.AddRange(LegacyStatusWorkOrders(serviceId: 1, accountId: 1));
         await context.SaveChangesAsync();
         var service = NewService(context);
 
@@ -383,13 +384,21 @@ public class CompletionDocTemplateServiceTests
         var tenantTwo = await service.GetLinkedWorkOrdersAsync(Admin(accountId: 2), 10, CancellationToken.None);
         var orgWide = await service.GetLinkedWorkOrdersAsync(Admin(), 10, CancellationToken.None);
 
-        Assert.Equal(2, tenantOne.Count);
-        Assert.Equal(new[] { 101, 102 }, tenantOne.WorkOrderIds);
+        Assert.Equal(3, tenantOne.Count);
+        Assert.Equal(new[] { 101, 102, 111 }, tenantOne.WorkOrderIds);
         Assert.Equal(new[] { 205 }, tenantTwo.WorkOrderIds);
-        Assert.Equal(new[] { 101, 102, 205 }, orgWide.WorkOrderIds);
-        Assert.Equal(3, orgWide.Count);
+        Assert.Equal(new[] { 101, 102, 111, 205 }, orgWide.WorkOrderIds);
+        Assert.Equal(4, orgWide.Count);
     }
 
+    // Legacy rows carry no LifecycleStatus; their legacy status text decides whether they are open.
+    private static WorkOrder[] LegacyStatusWorkOrders(int serviceId, int accountId) => new[]
+    {
+        new WorkOrder { Id = 109, ServiceId = serviceId, AccountId = accountId, LegacyStatus = "Completed" },
+        new WorkOrder { Id = 110, ServiceId = serviceId, AccountId = accountId, Status = " Cancelled " },
+        new WorkOrder { Id = 111, ServiceId = serviceId, AccountId = accountId, LegacyStatus = "On Hold" }
+    };
+
     [Fact]
     public async Task LinkedWorkOrders_UnknownTemplateOrMissingScope_Throws()
     {
@@ -485,6 +494,40 @@ public class CompletionDocTemplateServiceTests
         Assert.True((await context.CompletionDocTemplates.SingleAsync()).IsDeleted);
     }
 
+    [Fact]
+    public async Task Relational_LinkedWorkOrdersExcludeTerminalAndLegacyTerminalRows()
+    {
+        await using var connection = new SqliteConnection("DataSource=:memory:");
+        await connection.OpenAsync();
+        await using var context = await NewSqliteContextAsync(connection);
+        await WorkOrderAccountTestHelpers.EnsureAccountAsync(context, 1);
+        await WorkOrderAccountTestHelpers.EnsureAccountAsync(context, 2, "Other Corp");
+        context.CompletionDocTemplates.Add(new CompletionDocTemplate { Id = 10, Name = "Backflow" });
+        context.Services.Add(new Service
+        {
+            Id = 1,
+            Name = "Backflow",
+            NormalizedName = "BACKFLOW",
+            RequiresCompletionDocument = true,
+            CompletionDocTemplateId = 10
+        });
+        context.workOrders.AddRange(
+            new WorkOrder { Id = 101, ServiceId = 1, AccountId = 1, LifecycleStatus = LifecycleStatus.Scheduled },
+            new WorkOrder { Id = 102, ServiceId = 1, AccountId = 1 },
+            new WorkOrder { Id = 103, ServiceId = 1, AccountId = 1, LifecycleStatus = LifecycleStatus.Completed },
+            new WorkOrder { Id = 104, ServiceId = 1, AccountId = 1, LifecycleStatus = LifecycleStatus.Canceled },
+            new WorkOrder { Id = 205, ServiceId = 1, AccountId = 2, LifecycleStatus = LifecycleStatus.OnSite });
+        context.workOrders.AddRange(LegacyStatusWorkOrders(serviceId: 1, accountId: 1));
+        await context.SaveChangesAsync();
+        var data = new CompletionDocTemplateDataService(context);
+
+        var tenantOne = await data.GetOpenLinkedWorkOrderIdsAsync(10, 1, CancellationToken.None);
+        var orgWide = await data.GetOpenLinkedWorkOrderIdsAsync(10, null, CancellationToken.None);
+
+        Assert.Equal(new[] { 101, 102, 111 }, tenantOne);
+        Assert.Equal(new[] { 101, 102, 111, 205 }, orgWide);
+    }
+
     [Fact]
     public async Task Relational_UpdateReplacesProceduresInOrder()
     {

From 60b1afd8e0ab2d9c45d6a8229b188376d132c0b2 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 11:25:13 -0300
Subject: [PATCH 137/183] Align the second test project with the site
 data-service contract

- Recording fake forwards the new site-code and open-work-order queries
- Drop the LocalDB hard-delete test; sites are now tombstoned
---
 .../SH138SiteContactsSqlServerTests.cs        | 145 ------------------
 .../WorkOrderAccountScopeTests.cs             |  16 +-
 2 files changed, 14 insertions(+), 147 deletions(-)

diff --git a/SeaHavenIndustries.Tests/SH138SiteContactsSqlServerTests.cs b/SeaHavenIndustries.Tests/SH138SiteContactsSqlServerTests.cs
index e93807f..5e1a301 100644
--- a/SeaHavenIndustries.Tests/SH138SiteContactsSqlServerTests.cs
+++ b/SeaHavenIndustries.Tests/SH138SiteContactsSqlServerTests.cs
@@ -5,7 +5,6 @@ using Microsoft.Data.SqlClient;
 using Microsoft.EntityFrameworkCore;
 using Microsoft.EntityFrameworkCore.Infrastructure;
 using Microsoft.EntityFrameworkCore.Migrations;
-using SeaHaven.DataServices.Implementation;
 
 namespace SeaHavenIndustries.Tests;
 
@@ -84,150 +83,6 @@ public class SH138SiteContactsSqlServerTests
         }
     }
 
-    [Fact]
-    public async Task SH138_LocationDelete_DetachesSoftDeletedContacts_WithRestrictFk_WhenLocalDbAvailable()
-    {
-        var masterConnectionString = await ResolveMasterConnectionStringAsync();
-        if (masterConnectionString == null)
-            return;
-
-        var dbName = $"SH138LocationDelete_{Guid.NewGuid():N}";
-        var connectionString = WithDatabase(masterConnectionString, dbName);
-
-        try
-        {
-            await CreateDatabaseAsync(masterConnectionString, dbName);
-
-            await using var connection = new SqlConnection(connectionString);
-            await connection.OpenAsync();
-
-            await using (var createTables = connection.CreateCommand())
-            {
-                createTables.CommandText =
-                    """
-                    CREATE TABLE Locations (
-                        Id int NOT NULL IDENTITY PRIMARY KEY,
-                        AccountId int NULL,
-                        Title nvarchar(max) NULL,
-                        Name nvarchar(max) NULL,
-                        Latitude nvarchar(max) NULL,
-                        Longitude nvarchar(max) NULL,
-                        Address1 nvarchar(max) NULL,
-                        Address2 nvarchar(max) NULL,
-                        City nvarchar(max) NULL,
-                        State nvarchar(max) NULL,
-                        Zip nvarchar(max) NULL,
-                        PhoneNumber nvarchar(max) NULL,
-                        Email nvarchar(max) NULL,
-                        Status nvarchar(max) NULL,
-                        ExternalSource nvarchar(max) NULL,
-                        ExternalLocationId nvarchar(max) NULL,
-                        IsDeleted bit NULL,
-                        createdby nvarchar(max) NULL,
-                        DeleterUserId nvarchar(max) NULL,
-                        DeletionTime datetime2 NULL,
-                        CreatedDate datetime2 NULL,
-                        LastModificationTime datetime2 NULL,
-                        LastModifierUserId int NULL
-                    );
-                    CREATE TABLE Contacts (
-                        Id int NOT NULL IDENTITY PRIMARY KEY,
-                        AccountId int NULL,
-                        LocationId int NULL,
-                        Title nvarchar(max) NULL,
-                        Owner nvarchar(max) NULL,
-                        FirstName nvarchar(max) NULL,
-                        MiddleName nvarchar(max) NULL,
-                        LastName nvarchar(max) NULL,
-                        ContactType nvarchar(max) NULL,
-                        PhoneNumber nvarchar(max) NULL,
-                        Email nvarchar(max) NULL,
-                        Address1 nvarchar(max) NULL,
-                        Address2 nvarchar(max) NULL,
-                        City nvarchar(max) NULL,
-                        State nvarchar(max) NULL,
-                        Zip nvarchar(max) NULL,
-                        FacebookUrl nvarchar(max) NULL,
-                        LinkedInUrl nvarchar(max) NULL,
-                        TwitterUrl nvarchar(max) NULL,
-                        IsDeleted bit NULL,
-                        createdby nvarchar(max) NULL,
-                        DeleterUserId nvarchar(max) NULL,
-                        DeletionTime datetime2 NULL,
-                        CreatedDate datetime2 NULL,
-                        LastModificationTime datetime2 NULL,
-                        LastModifierUserId int NULL,
-                        SiteContactOrder int NULL,
-                        CONSTRAINT FK_Contacts_Locations_LocationId FOREIGN KEY (LocationId) REFERENCES Locations (Id) ON DELETE NO ACTION
-                    );
-                    SET IDENTITY_INSERT Locations ON;
-                    INSERT INTO Locations (Id, Name) VALUES (11, 'Depot');
-                    SET IDENTITY_INSERT Locations OFF;
-                    INSERT INTO Contacts (LocationId, FirstName, PhoneNumber, SiteContactOrder) VALUES (11, 'Alice Cooper', '555-0100', 0);
-                    INSERT INTO Contacts (LocationId, FirstName, PhoneNumber, IsDeleted, DeleterUserId, DeletionTime) VALUES (11, 'Bob Dillon', '555-0200', 1, 'actor-1', '2026-01-01T00:00:00');
-                    """;
-                await createTables.ExecuteNonQueryAsync();
-            }
-
-            var options = new DbContextOptionsBuilder<ApplicationDbContext>()
-                .UseSqlServer(connection)
-                .Options;
-
-            await using var context = new ApplicationDbContext(options);
-            var service = new LocationDataService(context);
-            var deleted = await service.DeleteByIdAsync(11, CancellationToken.None);
-
-            Assert.True(deleted);
-
-            await using (var locationCmd = connection.CreateCommand())
-            {
-                locationCmd.CommandText = "SELECT COUNT(*) FROM Locations;";
-                var locationCount = await locationCmd.ExecuteScalarAsync();
-                Assert.Equal(0, Convert.ToInt32(locationCount));
-            }
-
-            await using (var activeCmd = connection.CreateCommand())
-            {
-                activeCmd.CommandText =
-                    """
-                    SELECT FirstName, PhoneNumber, LocationId, IsDeleted, DeleterUserId, DeletionTime
-                    FROM Contacts
-                    WHERE FirstName = N'Alice Cooper';
-                    """;
-                await using var reader = await activeCmd.ExecuteReaderAsync();
-                Assert.True(await reader.ReadAsync());
-                Assert.Equal("Alice Cooper", reader.GetString(0));
-                Assert.Equal("555-0100", reader.GetString(1));
-                Assert.True(reader.IsDBNull(2));
-                Assert.True(reader.GetBoolean(3));
-                Assert.True(reader.IsDBNull(4), "delete carries no audit actor");
-                Assert.False(reader.IsDBNull(5));
-                Assert.False(await reader.ReadAsync());
-            }
-
-            await using (var previouslyDeletedCmd = connection.CreateCommand())
-            {
-                previouslyDeletedCmd.CommandText =
-                    """
-                    SELECT LocationId, IsDeleted, DeleterUserId, DeletionTime
-                    FROM Contacts
-                    WHERE FirstName = N'Bob Dillon';
-                    """;
-                await using var reader = await previouslyDeletedCmd.ExecuteReaderAsync();
-                Assert.True(await reader.ReadAsync());
-                Assert.True(reader.IsDBNull(0), "already soft-deleted rows detach so the restrict FK cannot block the delete");
-                Assert.True(reader.GetBoolean(1));
-                Assert.Equal("actor-1", reader.GetString(2));
-                Assert.Equal(new DateTime(2026, 1, 1), reader.GetDateTime(3));
-                Assert.False(await reader.ReadAsync());
-            }
-        }
-        finally
-        {
-            await DropDatabaseAsync(masterConnectionString, dbName);
-        }
-    }
-
     private static async Task ApplyMigrationUpAsync(ApplicationDbContext context, Migration migration)
     {
         var builder = new MigrationBuilder(context.Database.ProviderName!);
diff --git a/SeaHavenIndustries.Tests/WorkOrderAccountScopeTests.cs b/SeaHavenIndustries.Tests/WorkOrderAccountScopeTests.cs
index 59bc227..9a2ed53 100644
--- a/SeaHavenIndustries.Tests/WorkOrderAccountScopeTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderAccountScopeTests.cs
@@ -849,7 +849,19 @@ public class WorkOrderAccountScopeTests
             => _inner.AddAsync(location, cancellationToken);
         public Task UpdateAsync(Locations location, CancellationToken cancellationToken)
             => _inner.UpdateAsync(location, cancellationToken);
-        public Task<bool> DeleteByIdAsync(int id, CancellationToken cancellationToken)
-            => _inner.DeleteByIdAsync(id, cancellationToken);
+        public Task<bool> SiteCodeExistsAsync(
+            string siteCode,
+            int? accountId,
+            int? excludeLocationId,
+            CancellationToken cancellationToken)
+            => _inner.SiteCodeExistsAsync(siteCode, accountId, excludeLocationId, cancellationToken);
+        public Task<(int Count, IReadOnlyList<int> Ids)> GetOpenWorkOrderIdsAsync(
+            int locationId,
+            string? siteCode,
+            int? siteAccountId,
+            int? callerAccountId,
+            int maxIds,
+            CancellationToken cancellationToken)
+            => _inner.GetOpenWorkOrderIdsAsync(locationId, siteCode, siteAccountId, callerAccountId, maxIds, cancellationToken);
     }
 }

From d82fb18a3d2946b4cb130fb3b7232da8c26d3f26 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 11:30:34 -0300
Subject: [PATCH 138/183] fix(work-orders): map Overdue to PM catalog in
 service and template lists

---
 .../Implementation/ServicesRegistryService.cs |  6 ++-
 .../WorkOrderCompletionService.cs             |  2 +-
 .../WorkOrderOverdueTypeTests.cs              | 50 +++++++++++++++++++
 3 files changed, 55 insertions(+), 3 deletions(-)

diff --git a/SeaHaven.Services/Implementation/ServicesRegistryService.cs b/SeaHaven.Services/Implementation/ServicesRegistryService.cs
index 1a702bb..29bd32b 100644
--- a/SeaHaven.Services/Implementation/ServicesRegistryService.cs
+++ b/SeaHaven.Services/Implementation/ServicesRegistryService.cs
@@ -5,6 +5,7 @@ using SeaHaven.DataServices.Interfaces;
 using SeaHaven.DataServices.Models;
 using SeaHaven.Services.DTOs;
 using SeaHaven.Services.Exceptions;
+using SeaHaven.Services.Helpers;
 using SeaHaven.Services.Interfaces;
 
 namespace SeaHaven.Services.Implementation
@@ -34,8 +35,9 @@ namespace SeaHaven.Services.Implementation
 
         public async Task<IReadOnlyList<ServiceDto>> GetAllAsync(bool? isActive, WorkOrderType? workOrderType, CancellationToken cancellationToken)
         {
-            ValidateWorkOrderTypeFilter(workOrderType);
-            var rows = await _dataService.GetServiceRowsAsync(isActive, workOrderType, cancellationToken);
+            var catalogType = WorkOrderCatalogType.For(workOrderType);
+            ValidateWorkOrderTypeFilter(catalogType);
+            var rows = await _dataService.GetServiceRowsAsync(isActive, catalogType, cancellationToken);
             return rows.Select(MapToDto).ToList();
         }
 
diff --git a/SeaHaven.Services/Implementation/WorkOrderCompletionService.cs b/SeaHaven.Services/Implementation/WorkOrderCompletionService.cs
index f2f0895..c748c3d 100644
--- a/SeaHaven.Services/Implementation/WorkOrderCompletionService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderCompletionService.cs
@@ -33,7 +33,7 @@ namespace SeaHaven.Services.Implementation
 
         public async Task<IReadOnlyList<CompletionDocTemplateDto>> GetTemplatesAsync(string? serviceKey, WorkOrderType? workOrderType)
         {
-            var rows = await _templateData.GetActiveAsync(serviceKey, workOrderType);
+            var rows = await _templateData.GetActiveAsync(serviceKey, WorkOrderCatalogType.For(workOrderType));
             return rows.Select(WorkOrderDetailService.MapTemplate).ToList();
         }
 
diff --git a/SeaHavenIndustries.Tests/WorkOrderOverdueTypeTests.cs b/SeaHavenIndustries.Tests/WorkOrderOverdueTypeTests.cs
index 0b3657b..35c04e6 100644
--- a/SeaHavenIndustries.Tests/WorkOrderOverdueTypeTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderOverdueTypeTests.cs
@@ -278,6 +278,56 @@ public class WorkOrderOverdueTypeTests
         Assert.Equal("PM Completion", detail.Completion.Template!.Name);
     }
 
+    [Fact]
+    public async Task ListServices_Overdue_ReturnsPmCatalog()
+    {
+        await using var context = NewContext();
+        SeedServices(context);
+        await context.SaveChangesAsync();
+
+        var services = await new ServicesRegistryService(new ServicesRegistryDataService(context))
+            .GetAllAsync(true, WorkOrderType.Overdue, CancellationToken.None);
+
+        Assert.Equal(new[] { PmServiceId }, services.Select(s => s.Id).ToArray());
+    }
+
+    [Fact]
+    public async Task ListTemplates_Overdue_ReturnsPmTemplates()
+    {
+        await using var context = NewContext();
+        context.CompletionDocTemplates.AddRange(
+            new CompletionDocTemplate
+            {
+                Name = "PM Completion",
+                ServiceKey = "pm-generic",
+                WorkOrderType = WorkOrderType.PM,
+                TemplateUrl = "https://example.com/pm.pdf",
+                IsActive = true
+            },
+            new CompletionDocTemplate
+            {
+                Name = "Reactive Completion",
+                ServiceKey = "reactive-generic",
+                WorkOrderType = WorkOrderType.Reactive,
+                TemplateUrl = "https://example.com/reactive.pdf",
+                IsActive = true
+            });
+        await context.SaveChangesAsync();
+
+        var service = new WorkOrderCompletionService(
+            new WorkOrderCompletionDataService(context),
+            new CompletionDocTemplateDataService(context),
+            new WorkOrderDetailDataService(context),
+            new WorkOrderAuditService(
+                new WorkOrderAuditDataService(context),
+                new WorkOrderFieldLockService(new WorkOrderFieldLockDataService(context))),
+            WorkOrderAccountTestHelpers.Resolver(context));
+
+        var templates = await service.GetTemplatesAsync(null, WorkOrderType.Overdue);
+
+        Assert.Equal(new[] { "PM Completion" }, templates.Select(t => t.Name).ToArray());
+    }
+
     [Fact]
     public async Task Search_TypeOverdue_ReturnsOverdueTypeOnly_NotPastDueRows()
     {

From a224f883bc47b5ffcbd372fe1fb1bc9f3a08b173 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 11:40:49 -0300
Subject: [PATCH 139/183] fix(completion-templates): let PUT clear
 workOrderType with an explicit null

UpdateAsync only applied WorkOrderType when it had a value, so once a
template was restricted to one work order type no request could make it
trade-generic again. The DTO now records whether workOrderType was present
in the body: omitting it keeps the stored value, an explicit null clears
it, and a concrete value sets it. The templates page echoes the stored
legacy fields on PUT, so its behaviour is unchanged.
---
 SeaHaven.Services/DTOs/WorkOrderDetailDTOs.cs | 24 +++++++++++--
 .../CompletionDocTemplateService.cs           |  2 +-
 .../CompletionDocTemplateServiceTests.cs      | 36 +++++++++++++++++++
 3 files changed, 58 insertions(+), 4 deletions(-)

diff --git a/SeaHaven.Services/DTOs/WorkOrderDetailDTOs.cs b/SeaHaven.Services/DTOs/WorkOrderDetailDTOs.cs
index 3c72403..0ae5ed7 100644
--- a/SeaHaven.Services/DTOs/WorkOrderDetailDTOs.cs
+++ b/SeaHaven.Services/DTOs/WorkOrderDetailDTOs.cs
@@ -49,15 +49,33 @@ namespace SeaHaven.Services.DTOs
     }
 
     // Create/update body. Legacy fields are optional: on update, null leaves the
-    // stored value unchanged, as does a null Procedures list. ExtraSafetyNote is
-    // always applied, so null removes the note.
+    // stored value unchanged, as does a null Procedures list. WorkOrderType is the
+    // exception: omitting it keeps the stored value, while an explicit
+    // "workOrderType": null clears it so the template applies to every work order
+    // type of its trade. ExtraSafetyNote is always applied, so null removes the note.
     public class CompletionDocTemplateCreateDto
     {
+        private WorkOrderType? _workOrderType;
+
         public string? Name { get; set; }
         public string? ExtraSafetyNote { get; set; }
         public List<CompletionDocTemplateProcedureInputDto>? Procedures { get; set; }
         public string? ServiceKey { get; set; }
-        public WorkOrderType? WorkOrderType { get; set; }
+
+        public WorkOrderType? WorkOrderType
+        {
+            get => _workOrderType;
+            set
+            {
+                _workOrderType = value;
+                WorkOrderTypeSpecified = true;
+            }
+        }
+
+        // True when the body carried workOrderType at all, including as null.
+        [System.Text.Json.Serialization.JsonIgnore]
+        public bool WorkOrderTypeSpecified { get; private set; }
+
         public string? TemplateUrl { get; set; }
         public bool? IsActive { get; set; }
     }
diff --git a/SeaHaven.Services/Implementation/CompletionDocTemplateService.cs b/SeaHaven.Services/Implementation/CompletionDocTemplateService.cs
index 6f95833..ab5a111 100644
--- a/SeaHaven.Services/Implementation/CompletionDocTemplateService.cs
+++ b/SeaHaven.Services/Implementation/CompletionDocTemplateService.cs
@@ -105,7 +105,7 @@ namespace SeaHaven.Services.Implementation
             entity.ExtraSafetyNote = input.ExtraSafetyNote;
             if (input.ServiceKey != null)
                 entity.ServiceKey = input.ServiceKey;
-            if (request.WorkOrderType.HasValue)
+            if (request.WorkOrderTypeSpecified)
                 entity.WorkOrderType = request.WorkOrderType;
             if (input.TemplateUrl != null)
                 entity.TemplateUrl = input.TemplateUrl;
diff --git a/SeaHavenIndustries.Tests/CompletionDocTemplateServiceTests.cs b/SeaHavenIndustries.Tests/CompletionDocTemplateServiceTests.cs
index cc53bbe..77e2160 100644
--- a/SeaHavenIndustries.Tests/CompletionDocTemplateServiceTests.cs
+++ b/SeaHavenIndustries.Tests/CompletionDocTemplateServiceTests.cs
@@ -248,6 +248,42 @@ public class CompletionDocTemplateServiceTests
         Assert.Null(updated.CreatedByName);
     }
 
+    // Bodies are bound by System.Text.Json with the web defaults, as MVC does.
+    private static CompletionDocTemplateCreateDto JsonBody(string json) =>
+        System.Text.Json.JsonSerializer.Deserialize<CompletionDocTemplateCreateDto>(
+            json, new System.Text.Json.JsonSerializerOptions(System.Text.Json.JsonSerializerDefaults.Web))!;
+
+    [Fact]
+    public async Task Update_WorkOrderTypeExplicitNullClears_OmittedKeeps_ValueSets()
+    {
+        using var context = NewContext();
+        context.CompletionDocTemplates.Add(new CompletionDocTemplate
+        {
+            Id = 8,
+            Name = "HVAC PM Completion",
+            ServiceKey = "HVAC",
+            WorkOrderType = WorkOrderType.PM,
+            TemplateUrl = "",
+            IsActive = true
+        });
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        var omitted = JsonBody("""{"name":"HVAC Completion"}""");
+        Assert.False(omitted.WorkOrderTypeSpecified);
+        var kept = await service.UpdateAsync(Admin(), 8, omitted, CancellationToken.None);
+        Assert.Equal(WorkOrderType.PM, kept.WorkOrderType);
+
+        var cleared = await service.UpdateAsync(
+            Admin(), 8, JsonBody("""{"name":"HVAC Completion","workOrderType":null}"""), CancellationToken.None);
+        Assert.Null(cleared.WorkOrderType);
+        Assert.Null((await context.CompletionDocTemplates.AsNoTracking().SingleAsync(t => t.Id == 8)).WorkOrderType);
+
+        var set = await service.UpdateAsync(
+            Admin(), 8, JsonBody("""{"name":"HVAC Completion","workOrderType":6}"""), CancellationToken.None);
+        Assert.Equal(WorkOrderType.Reactive, set.WorkOrderType);
+    }
+
     [Fact]
     public async Task Update_MissingOrDeletedTemplate_ThrowsNotFound()
     {

From c1910e53102c8f8453ac068d37997267de0ab407 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 11:41:33 -0300
Subject: [PATCH 140/183] test(work-orders): pin severity-then-type correction
 from Overdue

The board sends one PATCH per field, severity before workOrderType, so
correcting an Overdue work order to Emergency or Reactive patches the
severity while the stored type is still Overdue. Dropping or rejecting a
severity patch for the current type would leave the corrected Emergency
work order with no severity. Overdue's no-severity rule is enforced when
the type changes, not on the severity patch.
---
 .../WorkOrderOverdueTypeTests.cs              | 41 +++++++++++++++++++
 1 file changed, 41 insertions(+)

diff --git a/SeaHavenIndustries.Tests/WorkOrderOverdueTypeTests.cs b/SeaHavenIndustries.Tests/WorkOrderOverdueTypeTests.cs
index 35c04e6..7a1ee1e 100644
--- a/SeaHavenIndustries.Tests/WorkOrderOverdueTypeTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderOverdueTypeTests.cs
@@ -183,6 +183,47 @@ public class WorkOrderOverdueTypeTests
         Assert.Null(persisted.Severity);
     }
 
+    // The board sends one request per field, severity before type, so correcting
+    // Overdue to Emergency patches severity while the stored type is still Overdue.
+    // A severity patch must not be dropped or rejected for the current type; the
+    // no-severity invariant is enforced when the type itself changes.
+    [Fact]
+    public async Task PatchSeverityThenType_OverdueToEmergency_KeepsSeverity()
+    {
+        await using var context = NewContext();
+        var wo = new WorkOrder
+        {
+            Id = 1,
+            LifecycleStatus = LifecycleStatus.Scheduled,
+            WorkOrderType = WorkOrderType.Overdue,
+            RowVersion = new byte[] { 1, 0, 0, 0, 0, 0, 0, 1 }
+        };
+        context.workOrders.Add(wo);
+        await context.SaveChangesAsync();
+        var service = NewUpdateService(context);
+
+        await service.PatchFieldAsync(1, new WorkOrderBoardPatchRequestDto
+        {
+            Field = WorkOrderBoardFieldNames.Severity,
+            Value = "2",
+            WorkOrderVersion = ToVersion(wo)
+        }, "actor-1");
+
+        var updated = await context.workOrders.SingleAsync(w => w.Id == 1);
+        var result = await service.PatchFieldAsync(1, new WorkOrderBoardPatchRequestDto
+        {
+            Field = WorkOrderBoardFieldNames.WorkOrderType,
+            Value = "Emergency",
+            WorkOrderVersion = ToVersion(updated)
+        }, "actor-1");
+
+        Assert.Equal(WorkOrderType.Emergency, result.WorkOrderType);
+        Assert.Equal(2, result.Severity);
+        var persisted = await context.workOrders.SingleAsync(w => w.Id == 1);
+        Assert.Equal(WorkOrderType.Emergency, persisted.WorkOrderType);
+        Assert.Equal("2", persisted.Severity);
+    }
+
     [Fact]
     public async Task PatchType_PmWithPmService_ToOverdue_KeepsService()
     {

From c0ae8479ce24ea31ea441f9502806dd7a45e2f29 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 11:49:10 -0300
Subject: [PATCH 141/183] feat(team-members): invite registration with emailed
 code confirmation (SH-385)

---
 .../TeamMemberInviteControllerTests.cs        |  120 +
 .../TeamMemberServiceTests.cs                 |    6 +-
 .../Controllers/AuthenticationController.cs   |   11 +-
 .../Controllers/TeamMemberController.cs       |   19 +-
 .../Controllers/TeamMemberInviteController.cs |   93 +
 Api.SeaHavenIndustries/DTOs/LoginPayload.cs   |   24 +
 .../Auth/ApplicationDbContext.cs              |   16 +
 ...925142034_AddTeamMemberInvites.Designer.cs | 4289 +++++++++++++++++
 .../20260925142034_AddTeamMemberInvites.cs    |   64 +
 .../ApplicationDbContextModelSnapshot.cs      |   76 +
 .../Models/TeamMemberInvite.cs                |   44 +
 .../Dto/TeamMemberInviteReadModels.cs         |   36 +
 .../TeamMemberInviteDataService.cs            |  144 +
 .../ITeamMemberInviteDataService.cs           |   30 +
 .../DTOs/TeamMemberInviteDTOs.cs              |   71 +
 .../DependencyInjection/ServicesModule.cs     |    2 +
 .../Helpers/TeamMemberInviteSecrets.cs        |   62 +
 .../Implementation/AuthenticationService.cs   |   80 +-
 .../Implementation/TeamMemberInviteService.cs |  119 +
 .../TeamMemberRegistrationService.cs          |  251 +
 .../Implementation/TeamMemberService.cs       |   11 +-
 .../Interfaces/IAuthenticationService.cs      |    2 +
 .../Interfaces/ITeamMemberInviteService.cs    |   23 +
 .../ITeamMemberRegistrationService.cs         |   23 +
 .../TeamMemberCreateTransactionTests.cs       |   20 +-
 .../TeamMemberInviteRegistrationTests.cs      |  523 ++
 .../TeamMemberInviteTestHost.cs               |  258 +
 27 files changed, 6363 insertions(+), 54 deletions(-)
 create mode 100644 Api.SeaHavenIndustries.Tests/TeamMemberInviteControllerTests.cs
 create mode 100644 Api.SeaHavenIndustries/Controllers/TeamMemberInviteController.cs
 create mode 100644 Api.SeaHavenIndustries/DTOs/LoginPayload.cs
 create mode 100644 Data.SeaHavenIndustries/Migrations/20260925142034_AddTeamMemberInvites.Designer.cs
 create mode 100644 Data.SeaHavenIndustries/Migrations/20260925142034_AddTeamMemberInvites.cs
 create mode 100644 Data.SeaHavenIndustries/Models/TeamMemberInvite.cs
 create mode 100644 SeaHaven.DataServices/Dto/TeamMemberInviteReadModels.cs
 create mode 100644 SeaHaven.DataServices/Implementation/TeamMemberInviteDataService.cs
 create mode 100644 SeaHaven.DataServices/Interfaces/ITeamMemberInviteDataService.cs
 create mode 100644 SeaHaven.Services/DTOs/TeamMemberInviteDTOs.cs
 create mode 100644 SeaHaven.Services/Helpers/TeamMemberInviteSecrets.cs
 create mode 100644 SeaHaven.Services/Implementation/TeamMemberInviteService.cs
 create mode 100644 SeaHaven.Services/Implementation/TeamMemberRegistrationService.cs
 create mode 100644 SeaHaven.Services/Interfaces/ITeamMemberInviteService.cs
 create mode 100644 SeaHaven.Services/Interfaces/ITeamMemberRegistrationService.cs
 create mode 100644 SeaHavenIndustries.Tests/TeamMemberInviteRegistrationTests.cs
 create mode 100644 SeaHavenIndustries.Tests/TeamMemberInviteTestHost.cs

diff --git a/Api.SeaHavenIndustries.Tests/TeamMemberInviteControllerTests.cs b/Api.SeaHavenIndustries.Tests/TeamMemberInviteControllerTests.cs
new file mode 100644
index 0000000..516897a
--- /dev/null
+++ b/Api.SeaHavenIndustries.Tests/TeamMemberInviteControllerTests.cs
@@ -0,0 +1,120 @@
+using System.Reflection;
+using Api.SeaHavenIndustries.Controllers;
+using FluentAssertions;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Moq;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Interfaces;
+using System.Security.Claims;
+using Xunit;
+
+namespace Api.SeaHavenIndustries.Tests;
+
+public class TeamMemberInviteControllerTests
+{
+    [Fact]
+    public void RegistrationRequests_CarryNoUserIdentifier()
+    {
+        var requestTypes = new[]
+        {
+            typeof(TeamMemberInviteTokenRequestDTO),
+            typeof(VerifyTeamMemberInviteCodeRequestDTO),
+            typeof(CompleteTeamMemberRegistrationRequestDTO)
+        };
+
+        var properties = requestTypes
+            .SelectMany(type => type.GetProperties(BindingFlags.Public | BindingFlags.Instance))
+            .Select(property => property.Name)
+            .Distinct()
+            .OrderBy(name => name);
+
+        properties.Should().Equal("Code", "Password", "Phone", "Token");
+    }
+
+    [Fact]
+    public void RegistrationEndpoints_AreAnonymousAndNeverCached()
+    {
+        var type = typeof(TeamMemberInviteController);
+
+        type.GetCustomAttribute<AllowAnonymousAttribute>().Should().NotBeNull();
+        var cache = type.GetCustomAttribute<ResponseCacheAttribute>();
+        cache.Should().NotBeNull();
+        cache!.NoStore.Should().BeTrue();
+    }
+
+    [Theory]
+    [InlineData(TeamMemberRegistrationStatus.InvalidInvite)]
+    [InlineData(TeamMemberRegistrationStatus.Ok)]
+    public async Task Complete_WithoutASession_ReturnsTheGenericInviteError(TeamMemberRegistrationStatus status)
+    {
+        var service = new Mock<ITeamMemberRegistrationService>();
+        service.Setup(x => x.CompleteAsync(It.IsAny<CompleteTeamMemberRegistrationRequestDTO>(), It.IsAny<CancellationToken>()))
+            .ReturnsAsync(new TeamMemberRegistrationOutcomeDTO { Status = status });
+        var controller = new TeamMemberInviteController(service.Object)
+        {
+            ControllerContext = new ControllerContext { HttpContext = new DefaultHttpContext() }
+        };
+
+        var result = await controller.Complete(new CompleteTeamMemberRegistrationRequestDTO(), CancellationToken.None);
+
+        var failure = result.Should().BeOfType<ObjectResult>().Subject;
+        failure.StatusCode.Should().Be(StatusCodes.Status400BadRequest);
+        failure.Value.Should().BeEquivalentTo(new
+        {
+            code = "invalid_invite",
+            message = TeamMemberInviteController.InvalidInviteMessage
+        });
+    }
+
+    [Fact]
+    public void ResendInvite_RequiresAuthenticatedCaller()
+    {
+        typeof(TeamMemberController).GetCustomAttribute<AuthorizeAttribute>().Should().NotBeNull();
+        typeof(TeamMemberController).GetMethod(nameof(TeamMemberController.ResendInvite))!
+            .GetCustomAttribute<AllowAnonymousAttribute>().Should().BeNull();
+    }
+
+    [Fact]
+    public async Task ResendInvite_Success_ReturnsInviteSent()
+    {
+        var invites = new Mock<ITeamMemberInviteService>();
+        invites.Setup(x => x.ResendAsync("user-1", It.IsAny<ClaimsPrincipal>(), It.IsAny<CancellationToken>()))
+            .ReturnsAsync(new TeamMemberInviteResendOutcomeDTO { Success = true });
+
+        var result = await NewTeamMemberController(invites).ResendInvite("user-1", CancellationToken.None);
+
+        result.Should().BeOfType<OkObjectResult>().Which.Value.Should().BeEquivalentTo(new { message = "Invite sent" });
+    }
+
+    [Theory]
+    [InlineData("Forbidden", typeof(ForbidResult))]
+    [InlineData("Team member not found.", typeof(NotFoundObjectResult))]
+    [InlineData("Only pending team members can be re-invited.", typeof(BadRequestObjectResult))]
+    [InlineData("The invite could not be emailed. Try again.", typeof(BadRequestObjectResult))]
+    public async Task ResendInvite_Failure_MapsToHttpResult(string error, Type expected)
+    {
+        var invites = new Mock<ITeamMemberInviteService>();
+        invites.Setup(x => x.ResendAsync("user-1", It.IsAny<ClaimsPrincipal>(), It.IsAny<CancellationToken>()))
+            .ReturnsAsync(new TeamMemberInviteResendOutcomeDTO { Success = false, Error = error });
+
+        var result = await NewTeamMemberController(invites).ResendInvite("user-1", CancellationToken.None);
+
+        result.Should().BeOfType(expected);
+    }
+
+    private static TeamMemberController NewTeamMemberController(Mock<ITeamMemberInviteService> invites)
+    {
+        return new TeamMemberController(Mock.Of<ITeamMemberService>(), invites.Object)
+        {
+            ControllerContext = new ControllerContext
+            {
+                HttpContext = new DefaultHttpContext
+                {
+                    User = new ClaimsPrincipal(new ClaimsIdentity(new[] { new Claim(ClaimTypes.Role, "Admin") }, "Test"))
+                }
+            }
+        };
+    }
+}
diff --git a/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs b/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs
index cd2ced8..3297fb1 100644
--- a/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs
@@ -28,7 +28,8 @@ public sealed class TeamMemberServiceTests
             Mock.Of<IUserServiceAreaDataService>(),
             Mock.Of<ITeamPermissionOverrideDataService>(),
             Mock.Of<IUserDataService>(),
-            Mock.Of<ITeamPermissionService>());
+            Mock.Of<ITeamPermissionService>(),
+            Mock.Of<ITeamMemberInviteService>());
 
         var result = await service.CreateAsync(
             ValidRequest() with { ServiceAreas = Array.Empty<string>() },
@@ -408,7 +409,8 @@ public sealed class TeamMemberServiceTests
             areas.Object,
             overrides.Object,
             userData.Object,
-            permissions.Object);
+            permissions.Object,
+            Mock.Of<ITeamMemberInviteService>());
     }
 
     private static Mock<UserManager<ApplicationUser>> UserManager()
diff --git a/Api.SeaHavenIndustries/Controllers/AuthenticationController.cs b/Api.SeaHavenIndustries/Controllers/AuthenticationController.cs
index 7b6569a..9b8f983 100644
--- a/Api.SeaHavenIndustries/Controllers/AuthenticationController.cs
+++ b/Api.SeaHavenIndustries/Controllers/AuthenticationController.cs
@@ -33,16 +33,7 @@ namespace Api.SeaHavenIndustries.Controllers
                 var result = await _authenticationService.LoginAsync(model.Username, model.Password, cancellationToken);
                 if (result != null)
                 {
-                    return Ok(new
-                    {
-                        token = result.Token,
-                        expiration = result.Expiration,
-                        email = result.Email,
-                        userRoles = result.UserRole,
-                        phoneNumber = result.PhoneNumber,
-                        fullname = result.Fullname,
-                        id = result.Id
-                    });
+                    return Ok(LoginPayload.From(result));
                 }
 
                 return Unauthorized();
diff --git a/Api.SeaHavenIndustries/Controllers/TeamMemberController.cs b/Api.SeaHavenIndustries/Controllers/TeamMemberController.cs
index f6537b6..b9476b4 100644
--- a/Api.SeaHavenIndustries/Controllers/TeamMemberController.cs
+++ b/Api.SeaHavenIndustries/Controllers/TeamMemberController.cs
@@ -11,10 +11,27 @@ namespace Api.SeaHavenIndustries.Controllers;
 public sealed class TeamMemberController : ControllerBase
 {
     private readonly ITeamMemberService _teamMemberService;
+    private readonly ITeamMemberInviteService _inviteService;
 
-    public TeamMemberController(ITeamMemberService teamMemberService)
+    public TeamMemberController(ITeamMemberService teamMemberService, ITeamMemberInviteService inviteService)
     {
         _teamMemberService = teamMemberService;
+        _inviteService = inviteService;
+    }
+
+    [HttpPost("{userId}/invite")]
+    public async Task<IActionResult> ResendInvite(string userId, CancellationToken cancellationToken)
+    {
+        var outcome = await _inviteService.ResendAsync(userId, User, cancellationToken);
+        if (outcome.Success)
+            return Ok(new { message = "Invite sent" });
+
+        return outcome.Error switch
+        {
+            "Forbidden" => Forbid(),
+            "Team member not found." => NotFound(new { message = outcome.Error }),
+            _ => BadRequest(new { message = outcome.Error })
+        };
     }
 
     [HttpPost]
diff --git a/Api.SeaHavenIndustries/Controllers/TeamMemberInviteController.cs b/Api.SeaHavenIndustries/Controllers/TeamMemberInviteController.cs
new file mode 100644
index 0000000..bd2d161
--- /dev/null
+++ b/Api.SeaHavenIndustries/Controllers/TeamMemberInviteController.cs
@@ -0,0 +1,93 @@
+using Api.SeaHavenIndustries.DTOs;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Interfaces;
+
+namespace Api.SeaHavenIndustries.Controllers;
+
+/// <summary>
+/// Anonymous invite registration. The invite token travels only in request bodies,
+/// and every failure maps to a fixed public message.
+/// </summary>
+[AllowAnonymous]
+[ApiController]
+[Route("api/team-member-invites")]
+[ResponseCache(NoStore = true, Location = ResponseCacheLocation.None)]
+public sealed class TeamMemberInviteController : ControllerBase
+{
+    public const string InvalidInviteMessage =
+        "This invite link is invalid or has expired. Ask your admin to send a new invite.";
+
+    private readonly ITeamMemberRegistrationService _registrationService;
+
+    public TeamMemberInviteController(ITeamMemberRegistrationService registrationService)
+    {
+        _registrationService = registrationService;
+    }
+
+    [HttpPost("resolve")]
+    public async Task<IActionResult> Resolve(TeamMemberInviteTokenRequestDTO request, CancellationToken cancellationToken)
+    {
+        var outcome = await _registrationService.ResolveAsync(request.Token, cancellationToken);
+        return outcome.Status == TeamMemberRegistrationStatus.Ok ? Ok(outcome.Details) : Failure(outcome);
+    }
+
+    [HttpPost("send-code")]
+    public async Task<IActionResult> SendCode(TeamMemberInviteTokenRequestDTO request, CancellationToken cancellationToken)
+    {
+        var outcome = await _registrationService.SendCodeAsync(request.Token, cancellationToken);
+        return outcome.Status == TeamMemberRegistrationStatus.Ok
+            ? Ok(new { message = "Code sent" })
+            : Failure(outcome);
+    }
+
+    [HttpPost("verify-code")]
+    public async Task<IActionResult> VerifyCode(VerifyTeamMemberInviteCodeRequestDTO request, CancellationToken cancellationToken)
+    {
+        var outcome = await _registrationService.VerifyCodeAsync(request.Token, request.Code, cancellationToken);
+        return outcome.Status == TeamMemberRegistrationStatus.Ok
+            ? Ok(new { message = "Email confirmed" })
+            : Failure(outcome);
+    }
+
+    [HttpPost("complete")]
+    public async Task<IActionResult> Complete(CompleteTeamMemberRegistrationRequestDTO request, CancellationToken cancellationToken)
+    {
+        var outcome = await _registrationService.CompleteAsync(request, cancellationToken);
+        return outcome.Status == TeamMemberRegistrationStatus.Ok && outcome.Session is not null
+            ? Ok(LoginPayload.From(outcome.Session))
+            : Failure(outcome);
+    }
+
+    private IActionResult Failure(TeamMemberRegistrationOutcomeDTO outcome)
+    {
+        var (statusCode, code, message) = outcome.Status switch
+        {
+            TeamMemberRegistrationStatus.CodeIncorrect =>
+                (StatusCodes.Status400BadRequest, "code_incorrect", "Incorrect code — check your email and try again"),
+            TeamMemberRegistrationStatus.CodeExpired =>
+                (StatusCodes.Status400BadRequest, "code_expired", "This code has expired — request a new code"),
+            TeamMemberRegistrationStatus.CodeLocked =>
+                (StatusCodes.Status400BadRequest, "code_locked", "Too many incorrect attempts — request a new code"),
+            TeamMemberRegistrationStatus.ResendTooSoon =>
+                (StatusCodes.Status429TooManyRequests, "resend_too_soon", "Please wait a moment before requesting another code"),
+            TeamMemberRegistrationStatus.ResendLimitReached =>
+                (StatusCodes.Status429TooManyRequests, "resend_limit_reached", "Too many codes were requested. Ask your admin to send a new invite."),
+            TeamMemberRegistrationStatus.CodeDeliveryFailed =>
+                (StatusCodes.Status503ServiceUnavailable, "code_delivery_failed", "We couldn't send the code. Try again in a minute."),
+            TeamMemberRegistrationStatus.EmailNotConfirmed =>
+                (StatusCodes.Status400BadRequest, "email_not_confirmed", "Confirm your email before finishing registration"),
+            TeamMemberRegistrationStatus.PasswordRejected =>
+                (StatusCodes.Status400BadRequest, "password_rejected", "Password must be at least 6 characters and include one uppercase letter, one number, and one special character."),
+            TeamMemberRegistrationStatus.InvalidPhone =>
+                (StatusCodes.Status400BadRequest, "invalid_phone", "Enter a valid phone number"),
+            _ => (StatusCodes.Status400BadRequest, "invalid_invite", InvalidInviteMessage)
+        };
+
+        if (outcome.RetryAfterSeconds is int retryAfter)
+            Response.Headers.RetryAfter = retryAfter.ToString(System.Globalization.CultureInfo.InvariantCulture);
+
+        return StatusCode(statusCode, new { code, message, retryAfterSeconds = outcome.RetryAfterSeconds });
+    }
+}
diff --git a/Api.SeaHavenIndustries/DTOs/LoginPayload.cs b/Api.SeaHavenIndustries/DTOs/LoginPayload.cs
new file mode 100644
index 0000000..9e13416
--- /dev/null
+++ b/Api.SeaHavenIndustries/DTOs/LoginPayload.cs
@@ -0,0 +1,24 @@
+using SeaHaven.Services.DTOs;
+
+namespace Api.SeaHavenIndustries.DTOs
+{
+    /// <summary>The session payload the web app stores after sign-in.</summary>
+    public static class LoginPayload
+    {
+        public static object From(LoginResultDTO result)
+        {
+            ArgumentNullException.ThrowIfNull(result);
+
+            return new
+            {
+                token = result.Token,
+                expiration = result.Expiration,
+                email = result.Email,
+                userRoles = result.UserRole,
+                phoneNumber = result.PhoneNumber,
+                fullname = result.Fullname,
+                id = result.Id
+            };
+        }
+    }
+}
diff --git a/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs b/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs
index fe944ee..b2c7753 100644
--- a/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs
+++ b/Data.SeaHavenIndustries/Auth/ApplicationDbContext.cs
@@ -311,6 +311,21 @@ namespace Data.SeaHavenIndustries
                     .HasDatabaseName("IX_UserPermissionOverrides_UserId_PermissionKey");
             });
 
+            builder.Entity<TeamMemberInvite>(entity =>
+            {
+                entity.HasIndex(invite => invite.TokenHash)
+                    .IsUnique()
+                    .HasDatabaseName("IX_TeamMemberInvites_TokenHash");
+
+                entity.HasIndex(invite => invite.UserId)
+                    .HasDatabaseName("IX_TeamMemberInvites_UserId");
+
+                entity.HasOne(invite => invite.User)
+                    .WithMany()
+                    .HasForeignKey(invite => invite.UserId)
+                    .OnDelete(DeleteBehavior.Restrict);
+            });
+
             builder.Entity<UserServiceArea>(entity =>
             {
                 entity.HasKey(area => new { area.UserId, area.Area });
@@ -388,6 +403,7 @@ namespace Data.SeaHavenIndustries
         public DbSet<Region> Regions { get; set; }
         public DbSet<UserPermissionOverride> UserPermissionOverrides { get; set; }
         public DbSet<UserServiceArea> UserServiceAreas { get; set; }
+        public DbSet<TeamMemberInvite> TeamMemberInvites { get; set; }
 
         public override int SaveChanges()
         {
diff --git a/Data.SeaHavenIndustries/Migrations/20260925142034_AddTeamMemberInvites.Designer.cs b/Data.SeaHavenIndustries/Migrations/20260925142034_AddTeamMemberInvites.Designer.cs
new file mode 100644
index 0000000..0375458
--- /dev/null
+++ b/Data.SeaHavenIndustries/Migrations/20260925142034_AddTeamMemberInvites.Designer.cs
@@ -0,0 +1,4289 @@
+// <auto-generated />
+using System;
+using Data.SeaHavenIndustries;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Metadata;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+
+#nullable disable
+
+namespace Data.SeaHavenIndustries.Migrations
+{
+    [DbContext(typeof(ApplicationDbContext))]
+    [Migration("20260925142034_AddTeamMemberInvites")]
+    partial class AddTeamMemberInvites
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasAnnotation("ProductVersion", "8.0.8")
+                .HasAnnotation("Relational:MaxIdentifierLength", 128);
+
+            SqlServerModelBuilderExtensions.UseIdentityColumns(modelBuilder);
+
+            modelBuilder.HasSequence("WorkOrderInternalNumberSequence");
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Accounts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("CurrencyCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Importance")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("IndustryId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("OwnerEmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Phone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PrivacySetting")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ServiceInstructions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Tags")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("TerritoryId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("TimeZone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Type")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Website")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Accounts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Addresses", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AddressType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Country")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("County")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("ContactId");
+
+                    b.ToTable("Addresses");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int>("AccessFailedCount")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Color")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ConcurrencyStamp")
+                        .IsConcurrencyToken()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Contact")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DeletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<bool>("EmailConfirmed")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("FirstName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Initials")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsAccountOwner")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("LastName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Locations")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("LockoutEnabled")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTimeOffset?>("LockoutEnd")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("NormalizedEmail")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("NormalizedUserName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("PasswordHash")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("PendingRegistration")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("PendingRegistrationCreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("PhoneNumberConfirmed")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("SecurityStamp")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("TwoFactorEnabled")
+                        .HasColumnType("bit");
+
+                    b.Property<int?>("Type")
+                        .HasColumnType("int");
+
+                    b.Property<string>("UniqueName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserImage")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("IsAccountOwner")
+                        .IsUnique()
+                        .HasDatabaseName("IX_AspNetUsers_IsAccountOwner")
+                        .HasFilter("IsAccountOwner = 1");
+
+                    b.HasIndex("NormalizedEmail")
+                        .HasDatabaseName("EmailIndex");
+
+                    b.HasIndex("NormalizedUserName")
+                        .IsUnique()
+                        .HasDatabaseName("UserNameIndex")
+                        .HasFilter("[NormalizedUserName] IS NOT NULL");
+
+                    b.ToTable("AspNetUsers", (string)null);
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Area", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("Areas");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("AssetCode")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Assets");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Category", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Categories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Comments", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CommentType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Commenter")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Commenttext")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Documents")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalCommentId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("ExternalSourceEmailS3Key")
+                        .HasMaxLength(2048)
+                        .HasColumnType("nvarchar(2048)");
+
+                    b.Property<DateTimeOffset?>("ExternalUpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalVersionHash")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RecordType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int?>("WorkerOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("UserId");
+
+                    b.HasIndex("WorkerOrderId");
+
+                    b.ToTable("Comments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.CompletionDocTemplate", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ServiceKey")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("TemplateUrl")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ServiceKey", "IsActive");
+
+                    b.ToTable("CompletionDocTemplates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ContactDetails", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DateOfBirth")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Gender")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PrivacySetting")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Tags")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Territory")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.ToTable("ContactDetails");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ContactType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FirstName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LastName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("MiddleName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Owner")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("SiteContactOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Title")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Contacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Department", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Departments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AcceptToken")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("AcknowledgedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CommercialStatusUpdatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CompletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DispatchNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DispatchedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("EmailSent")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("EstimatedArrivalAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("EtaManualOverride")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("InvoiceNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("InvoiceStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<decimal?>("NTEAmount")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<string>("PONumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PaymentStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ReplyToAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<DateTime?>("ScheduledDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TechPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("VendorNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<DateTime?>("VerifiedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("VerifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("Dispatches");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchChecklistItem", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CompletedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("CompletedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool>("IsCompleted")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ItemText")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("DispatchChecklistItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchSignoff", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Signature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignatureMethod")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("SignedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("SignoffType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.ToTable("DispatchSignoffs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchUpliftRequest", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<decimal?>("CurrentNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<DateTime?>("DecidedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DecidedByUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DecisionNote")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("EscalatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("EvidenceDocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("ExpiresAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("InitialNotificationSentAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("NotificationError")
+                        .HasMaxLength(500)
+                        .HasColumnType("nvarchar(500)");
+
+                    b.Property<string>("NotificationStatus")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<string>("RequestKey")
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<string>("RequestedByVendorName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<decimal>("RequestedNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<int>("RequiredTier")
+                        .HasColumnType("int");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<string>("Status")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<string>("VendorReason")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId")
+                        .IsUnique()
+                        .HasFilter("[Status] IN ('Pending', 'ChangesRequested')");
+
+                    b.HasIndex("EvidenceDocumentId");
+
+                    b.HasIndex("DispatchId", "RequestKey")
+                        .IsUnique()
+                        .HasFilter("[RequestKey] IS NOT NULL");
+
+                    b.ToTable("DispatchUpliftRequests");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchWorkOrder", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("DispatchWorkOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DropdownOption", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Category")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ParentValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Value")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("DropdownOptions");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("CanChangeProviderNumber")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ConfirmUserName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DateOfBirth")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DepartmentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("EmployeeNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FirstName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Gender")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("HireDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<int?>("JobTitleId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("LastLogin")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LastName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("MiddleName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("PermissionGroupId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("RegionId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("SMSAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TimeZone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Website")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DepartmentId");
+
+                    b.HasIndex("JobTitleId");
+
+                    b.HasIndex("RegionId");
+
+                    b.ToTable("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeAddress", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CountryCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CountyId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("StateCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Street")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("StreetLineTwo")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId")
+                        .IsUnique();
+
+                    b.ToTable("EmployeeAddresses");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeEmail", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<int?>("EmailTypeId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsPrimary")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.ToTable("EmployeeEmails");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeePhone", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Extension")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsPrimary")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Number")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("PhoneTypeId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.ToTable("EmployeePhones");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Events", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("AllDay")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("EndDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("EndTime")
+                        .HasMaxLength(10)
+                        .HasColumnType("nvarchar(10)");
+
+                    b.Property<string>("EventColor")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Location")
+                        .HasMaxLength(150)
+                        .HasColumnType("nvarchar(150)");
+
+                    b.Property<int?>("RecordID")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RecordName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("RecordTargetType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("ReminderMinutes")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime>("StartDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("StartTime")
+                        .HasMaxLength(10)
+                        .HasColumnType("nvarchar(10)");
+
+                    b.Property<string>("Title")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Events");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.FollowUps", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Reason")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("ScheduleDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<TimeSpan>("ScheduleStartTime")
+                        .HasColumnType("time");
+
+                    b.Property<string>("Status")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.HasIndex("LocationId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("FollowUps");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ForgetPasswordCode", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Code")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Email")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("ForgetPasswordCodes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.JobTitle", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("JobTitles");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalLocationId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Latitude")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Longitude")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Title")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.ToTable("Locations");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.PMSchedules", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AssetId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Frequency")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("StartDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AssetId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("PMSchedules");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BillingAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("Date")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ProjectName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("QuotId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ShippingAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("Quotes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.QuotesLineItems", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Descriptions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<decimal?>("Lineitem")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<int?>("LineitemNumber")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("QuoteId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("QuoteId");
+
+                    b.ToTable("QuotesLines");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Region", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Regions");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Service", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("CompletionDocTemplateId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("IconKey")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<bool>("RequiresCompletionDocument")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Trade")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CompletionDocTemplateId");
+
+                    b.HasIndex("IsActive");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.HasIndex("Trade");
+
+                    b.ToTable("Services");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ServiceWorkOrderType", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("ServiceId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ServiceId", "WorkOrderType")
+                        .IsUnique();
+
+                    b.ToTable("ServiceWorkOrderTypes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.SitePreferredVendor", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Trade")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("UpdatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("LocationId", "VendorId")
+                        .IsUnique()
+                        .HasFilter("[Trade] IS NULL");
+
+                    b.HasIndex("LocationId", "VendorId", "Trade")
+                        .IsUnique()
+                        .HasFilter("[Trade] IS NOT NULL");
+
+                    b.ToTable("SitePreferredVendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplate", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("TaskListTemplates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplateItem", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ItemText")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<int>("TaskListTemplateId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("TaskListTemplateId");
+
+                    b.ToTable("TaskListTemplateItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TeamMemberInvite", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CodeExpiresAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("CodeFailedAttempts")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CodeHash")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("CodeSalt")
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<int>("CodeSendCount")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CodeSentAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("EmailConfirmedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime>("ExpiresAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("RevokedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("TokenHash")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<DateTime?>("UsedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("TokenHash")
+                        .IsUnique()
+                        .HasDatabaseName("IX_TeamMemberInvites_TokenHash");
+
+                    b.HasIndex("UserId")
+                        .HasDatabaseName("IX_TeamMemberInvites_UserId");
+
+                    b.ToTable("TeamMemberInvites");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Template", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AfterPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AfterPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AssignTo")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DueDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Priority")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffSignature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderTitle")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AssignTo");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Templates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Trade", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("Trades");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserPermissionOverride", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("PermissionKey")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<int>("State")
+                        .HasColumnType("int");
+
+                    b.HasKey("UserId", "PermissionKey");
+
+                    b.HasIndex("UserId", "PermissionKey")
+                        .IsUnique()
+                        .HasDatabaseName("IX_UserPermissionOverrides_UserId_PermissionKey");
+
+                    b.ToTable("UserPermissionOverrides");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserServiceArea", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Area")
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.HasKey("UserId", "Area");
+
+                    b.HasIndex("UserId", "Area")
+                        .IsUnique()
+                        .HasDatabaseName("IX_UserServiceAreas_UserId_Area");
+
+                    b.ToTable("UserServiceAreas");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AvailabilityStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("AvailabilityUpdatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CompanyId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CompanyName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CompanyPhone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ContactName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("GoogleMapsUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Phone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PreferredContact")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TradeSpecialties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CompanyId");
+
+                    b.ToTable("Vendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAccessToken", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime>("ExpiresAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime>("IssuedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("LastUsedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("RevokedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Token")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Token")
+                        .IsUnique();
+
+                    b.HasIndex("VendorId");
+
+                    b.ToTable("VendorAccessTokens");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAuditLog", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Actor")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("FieldName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NewValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("OldValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.ToTable("VendorAuditLogs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("AreaId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CompanyPhone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("GoogleMapsUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AreaId");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("VendorCompanies");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompletionDocument", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ContentType")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("OriginalFileName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Purpose")
+                        .IsRequired()
+                        .HasMaxLength(30)
+                        .HasColumnType("nvarchar(30)");
+
+                    b.Property<string>("RejectionReason")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ReplacesDocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ReviewStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ReviewedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ScanStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ScannedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<long>("SizeBytes")
+                        .HasColumnType("bigint");
+
+                    b.Property<string>("StoredFileName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("Version")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("VendorCompletionDocuments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("AdditionalContacts")
+                        .HasMaxLength(4000)
+                        .HasColumnType("nvarchar(4000)");
+
+                    b.Property<string>("AfterPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AfterPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateOnly?>("AssignDate")
+                        .HasColumnType("date");
+
+                    b.Property<string>("AssignTo")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("AvetaRequired")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("AvettaTask")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Building")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("CarriedOver")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CompletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Customer")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DateReported")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("DocStatus")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("DueDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ExternalAssignedTo")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<DateTimeOffset?>("ExternalLastOccurredAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalRecordType")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset?>("ExternalUpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalVersionHash")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("ExternalWorkOrderId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ExtraServices")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<string>("FlagColor")
+                        .HasMaxLength(7)
+                        .HasColumnType("nvarchar(7)");
+
+                    b.Property<string>("FrozenCompany")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FrozenPoc")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FrozenSite")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("InternalWONumber")
+                        .HasMaxLength(11)
+                        .HasColumnType("nvarchar(11)");
+
+                    b.Property<bool>("IsAddOn")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LegacyStatus")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("LifecycleStatus")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("OperationalFlags")
+                        .HasColumnType("int");
+
+                    b.Property<DateOnly?>("OriginalDate")
+                        .HasColumnType("date");
+
+                    b.Property<DateOnly?>("OriginalWeek")
+                        .HasColumnType("date");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PocName")
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("PocNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<string>("PocPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int?>("PrimaryDispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Priority")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Problem")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("RescheduleCount")
+                        .HasColumnType("int");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<bool?>("ScheduleWeekOnly")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("ScheduledDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("ScheduledEnd")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("ScheduledStart")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Service")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<int?>("ServiceId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ServiceNameSnapshot")
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("ServiceNotes")
+                        .HasMaxLength(4000)
+                        .HasColumnType("nvarchar(4000)");
+
+                    b.Property<string>("Severity")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffSignature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteCode")
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<string>("Source")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SourceEmailS3Key")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SubTrade")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateOnly?>("TargetWeek")
+                        .HasColumnType("date");
+
+                    b.Property<string>("TechPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<string>("Trade")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<decimal?>("VendorNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<string>("VendorNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<int?>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("WorkerOrderNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderTitle")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("istemplate")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("ExternalWorkOrderId")
+                        .IsUnique()
+                        .HasFilter("[ExternalWorkOrderId] IS NOT NULL AND [ExternalWorkOrderId] <> ''");
+
+                    b.HasIndex("InternalWONumber")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.HasIndex("LocationId");
+
+                    b.HasIndex("PrimaryDispatchId");
+
+                    b.HasIndex("ScheduledDate");
+
+                    b.HasIndex("ServiceId");
+
+                    b.HasIndex("SiteCode")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.HasIndex("WorkOrderType");
+
+                    b.HasIndex("AssignTo", "ScheduledDate");
+
+                    b.HasIndex("LifecycleStatus", "ScheduledDate")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.ToTable("workOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAttachments", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Category")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("workOrderAttachments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAuditLog", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Action")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ActorType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CorrelationId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("EventType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FieldName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NewValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("OldValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UserId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("WorkOrderAuditLogs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderCategories", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("workOrderCategories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderContacts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("WorkOrderContacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderExternalReceipt", b =>
+                {
+                    b.Property<long>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("bigint");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<long>("Id"));
+
+                    b.Property<string>("ExternalId")
+                        .IsRequired()
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Kind")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<DateTimeOffset>("ProcessedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("Source")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset>("UpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("VersionHash")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Source", "Kind", "ExternalId")
+                        .IsUnique()
+                        .HasDatabaseName("IX_WorkOrderExternalReceipts_Source_Kind_ExternalId");
+
+                    b.ToTable("WorkOrderExternalReceipts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderFieldLock", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("FieldName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<DateTime>("LockedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("LockedByUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkOrderId", "FieldName")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderFieldLocks");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderReconciliationJob", b =>
+                {
+                    b.Property<int>("Id")
+                        .HasColumnType("int");
+
+                    b.Property<int>("CommentsProcessed")
+                        .HasColumnType("int");
+
+                    b.Property<DateTimeOffset?>("CompletedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ErrorCode")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<Guid?>("FenceToken")
+                        .HasColumnType("uniqueidentifier");
+
+                    b.Property<DateTimeOffset?>("LeaseExpiresAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("Reason")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset?>("RequestedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<Guid>("RunId")
+                        .HasColumnType("uniqueidentifier");
+
+                    b.Property<DateTimeOffset?>("StartedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("State")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<int>("WorkOrdersProcessed")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("State");
+
+                    b.ToTable("WorkOrderReconciliationJobs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWebhookDelivery", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BodySha256")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("DeliveryId")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("EventType")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<DateTimeOffset>("OccurredAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<DateTimeOffset>("ProcessedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DeliveryId")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderWebhookDeliveries");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWeekRolledLedger", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CorrelationId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("ProcessedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateOnly>("SourceWeekStart")
+                        .HasColumnType("date");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkOrderId", "SourceWeekStart")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderWeekRolledLedgers");
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRole", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ConcurrencyStamp")
+                        .IsConcurrencyToken()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("NormalizedName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique()
+                        .HasDatabaseName("RoleNameIndex")
+                        .HasFilter("[NormalizedName] IS NOT NULL");
+
+                    b.ToTable("AspNetRoles", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRoleClaim<string>", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ClaimType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ClaimValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("RoleId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AspNetRoleClaims", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserClaim<string>", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ClaimType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ClaimValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UserId");
+
+                    b.ToTable("AspNetUserClaims", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserLogin<string>", b =>
+                {
+                    b.Property<string>("LoginProvider")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ProviderKey")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ProviderDisplayName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("LoginProvider", "ProviderKey");
+
+                    b.HasIndex("UserId");
+
+                    b.ToTable("AspNetUserLogins", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserRole<string>", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("RoleId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("UserId", "RoleId");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AspNetUserRoles", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserToken<string>", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("LoginProvider")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Value")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("UserId", "LoginProvider", "Name");
+
+                    b.ToTable("AspNetUserTokens", (string)null);
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Addresses", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany("Addresses")
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contact")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Contact");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Comments", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("Comments")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "ApplicationUser")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Comments")
+                        .HasForeignKey("WorkerOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("ApplicationUser");
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ContactDetails", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contact")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Contact");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany("Contacts")
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany("Contacts")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("Dispatches")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Dispatches")
+                        .HasForeignKey("WorkOrderId");
+
+                    b.Navigation("Vendor");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchChecklistItem", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("ChecklistItems")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchSignoff", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("Signoffs")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchUpliftRequest", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany()
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.VendorCompletionDocument", "EvidenceDocument")
+                        .WithMany()
+                        .HasForeignKey("EvidenceDocumentId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("EvidenceDocument");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchWorkOrder", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("DispatchWorkOrders")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Department", "Department")
+                        .WithMany("Employees")
+                        .HasForeignKey("DepartmentId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.JobTitle", "JobTitle")
+                        .WithMany("Employees")
+                        .HasForeignKey("JobTitleId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Region", "Region")
+                        .WithMany("Employees")
+                        .HasForeignKey("RegionId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Department");
+
+                    b.Navigation("JobTitle");
+
+                    b.Navigation("Region");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeAddress", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithOne("Address")
+                        .HasForeignKey("Data.SeaHavenIndustries.EmployeeAddress", "EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeEmail", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany("Emails")
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeePhone", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany("Phones")
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.FollowUps", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany()
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Employee");
+
+                    b.Navigation("Location");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.PMSchedules", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Assets", "Asset")
+                        .WithMany("PMSchedules")
+                        .HasForeignKey("AssetId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Asset");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contacts")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Quotes")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Contacts");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.QuotesLineItems", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Quotes", "Quotes")
+                        .WithMany("LineItems")
+                        .HasForeignKey("QuoteId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Quotes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Service", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.CompletionDocTemplate", "CompletionDocTemplate")
+                        .WithMany()
+                        .HasForeignKey("CompletionDocTemplateId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("CompletionDocTemplate");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ServiceWorkOrderType", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Service", "Service")
+                        .WithMany("SupportedWorkOrderTypes")
+                        .HasForeignKey("ServiceId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Service");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.SitePreferredVendor", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("SitePreferences")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Location");
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplateItem", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.TaskListTemplate", "Template")
+                        .WithMany("Items")
+                        .HasForeignKey("TaskListTemplateId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Template");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TeamMemberInvite", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("User");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Template", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "AssignToUser")
+                        .WithMany("Templates")
+                        .HasForeignKey("AssignTo")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Category", "Category")
+                        .WithMany("Templates")
+                        .HasForeignKey("CategoryId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "POC")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Locations")
+                        .WithMany("Templates")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("AssignToUser");
+
+                    b.Navigation("Category");
+
+                    b.Navigation("Locations");
+
+                    b.Navigation("POC");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserPermissionOverride", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("User");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserServiceArea", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany("ServiceAreas")
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("User");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.VendorCompany", "Company")
+                        .WithMany("Vendors")
+                        .HasForeignKey("CompanyId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Company");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAccessToken", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany()
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAuditLog", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("AuditLogs")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Area", "Area")
+                        .WithMany()
+                        .HasForeignKey("AreaId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Area");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompletionDocument", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("CompletionDocuments")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany()
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("Vendor");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "AssignToUser")
+                        .WithMany("WorkOrders")
+                        .HasForeignKey("AssignTo")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Locations")
+                        .WithMany("workOrders")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "PrimaryDispatch")
+                        .WithMany()
+                        .HasForeignKey("PrimaryDispatchId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Service", "ServiceDefinition")
+                        .WithMany()
+                        .HasForeignKey("ServiceId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("AssignToUser");
+
+                    b.Navigation("Locations");
+
+                    b.Navigation("PrimaryDispatch");
+
+                    b.Navigation("ServiceDefinition");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAttachments", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("workOrderAttachments")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAuditLog", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("User");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderCategories", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Category", "Category")
+                        .WithMany("WorkOrderCategories")
+                        .HasForeignKey("CategoryId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("WorkOrderCategories")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Category");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderContacts", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "POC")
+                        .WithMany("WorkOrderContacts")
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("WorkOrderContacts")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("POC");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderFieldLock", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("FieldLocks")
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWeekRolledLedger", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRoleClaim<string>", b =>
+                {
+                    b.HasOne("Microsoft.AspNetCore.Identity.IdentityRole", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserClaim<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserLogin<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserRole<string>", b =>
+                {
+                    b.HasOne("Microsoft.AspNetCore.Identity.IdentityRole", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserToken<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Accounts", b =>
+                {
+                    b.Navigation("Addresses");
+
+                    b.Navigation("Contacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.Navigation("ServiceAreas");
+
+                    b.Navigation("Templates");
+
+                    b.Navigation("WorkOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.Navigation("PMSchedules");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Category", b =>
+                {
+                    b.Navigation("Templates");
+
+                    b.Navigation("WorkOrderCategories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.Navigation("WorkOrderContacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Department", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.Navigation("ChecklistItems");
+
+                    b.Navigation("Comments");
+
+                    b.Navigation("CompletionDocuments");
+
+                    b.Navigation("DispatchWorkOrders");
+
+                    b.Navigation("Signoffs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.Navigation("Address");
+
+                    b.Navigation("Emails");
+
+                    b.Navigation("Phones");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.JobTitle", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.Navigation("Contacts");
+
+                    b.Navigation("Templates");
+
+                    b.Navigation("workOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.Navigation("LineItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Region", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Service", b =>
+                {
+                    b.Navigation("SupportedWorkOrderTypes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplate", b =>
+                {
+                    b.Navigation("Items");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.Navigation("AuditLogs");
+
+                    b.Navigation("Dispatches");
+
+                    b.Navigation("SitePreferences");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.Navigation("Vendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.Navigation("Comments");
+
+                    b.Navigation("Dispatches");
+
+                    b.Navigation("FieldLocks");
+
+                    b.Navigation("Quotes");
+
+                    b.Navigation("WorkOrderCategories");
+
+                    b.Navigation("WorkOrderContacts");
+
+                    b.Navigation("workOrderAttachments");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/Data.SeaHavenIndustries/Migrations/20260925142034_AddTeamMemberInvites.cs b/Data.SeaHavenIndustries/Migrations/20260925142034_AddTeamMemberInvites.cs
new file mode 100644
index 0000000..22ee2d0
--- /dev/null
+++ b/Data.SeaHavenIndustries/Migrations/20260925142034_AddTeamMemberInvites.cs
@@ -0,0 +1,64 @@
+using System;
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Data.SeaHavenIndustries.Migrations
+{
+    /// <inheritdoc />
+    public partial class AddTeamMemberInvites : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.CreateTable(
+                name: "TeamMemberInvites",
+                columns: table => new
+                {
+                    Id = table.Column<int>(type: "int", nullable: false)
+                        .Annotation("SqlServer:Identity", "1, 1"),
+                    UserId = table.Column<string>(type: "nvarchar(450)", maxLength: 450, nullable: false),
+                    TokenHash = table.Column<string>(type: "nvarchar(64)", maxLength: 64, nullable: false),
+                    CreatedAt = table.Column<DateTime>(type: "datetime2", nullable: false),
+                    ExpiresAt = table.Column<DateTime>(type: "datetime2", nullable: false),
+                    UsedAt = table.Column<DateTime>(type: "datetime2", nullable: true),
+                    RevokedAt = table.Column<DateTime>(type: "datetime2", nullable: true),
+                    CodeHash = table.Column<string>(type: "nvarchar(64)", maxLength: 64, nullable: true),
+                    CodeSalt = table.Column<string>(type: "nvarchar(32)", maxLength: 32, nullable: true),
+                    CodeExpiresAt = table.Column<DateTime>(type: "datetime2", nullable: true),
+                    CodeFailedAttempts = table.Column<int>(type: "int", nullable: false),
+                    CodeSentAt = table.Column<DateTime>(type: "datetime2", nullable: true),
+                    CodeSendCount = table.Column<int>(type: "int", nullable: false),
+                    EmailConfirmedAt = table.Column<DateTime>(type: "datetime2", nullable: true)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("PK_TeamMemberInvites", x => x.Id);
+                    table.ForeignKey(
+                        name: "FK_TeamMemberInvites_AspNetUsers_UserId",
+                        column: x => x.UserId,
+                        principalTable: "AspNetUsers",
+                        principalColumn: "Id",
+                        onDelete: ReferentialAction.Restrict);
+                });
+
+            migrationBuilder.CreateIndex(
+                name: "IX_TeamMemberInvites_TokenHash",
+                table: "TeamMemberInvites",
+                column: "TokenHash",
+                unique: true);
+
+            migrationBuilder.CreateIndex(
+                name: "IX_TeamMemberInvites_UserId",
+                table: "TeamMemberInvites",
+                column: "UserId");
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropTable(
+                name: "TeamMemberInvites");
+        }
+    }
+}
diff --git a/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs b/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
index 4a3d3c9..4ecca17 100644
--- a/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
+++ b/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
@@ -2067,6 +2067,71 @@ namespace Data.SeaHavenIndustries.Migrations
                     b.ToTable("TaskListTemplateItems");
                 });
 
+            modelBuilder.Entity("Data.SeaHavenIndustries.TeamMemberInvite", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CodeExpiresAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("CodeFailedAttempts")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CodeHash")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("CodeSalt")
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<int>("CodeSendCount")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CodeSentAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("EmailConfirmedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime>("ExpiresAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("RevokedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("TokenHash")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<DateTime?>("UsedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("TokenHash")
+                        .IsUnique()
+                        .HasDatabaseName("IX_TeamMemberInvites_TokenHash");
+
+                    b.HasIndex("UserId")
+                        .HasDatabaseName("IX_TeamMemberInvites_UserId");
+
+                    b.ToTable("TeamMemberInvites");
+                });
+
             modelBuilder.Entity("Data.SeaHavenIndustries.Template", b =>
                 {
                     b.Property<int>("Id")
@@ -3785,6 +3850,17 @@ namespace Data.SeaHavenIndustries.Migrations
                     b.Navigation("Template");
                 });
 
+            modelBuilder.Entity("Data.SeaHavenIndustries.TeamMemberInvite", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("User");
+                });
+
             modelBuilder.Entity("Data.SeaHavenIndustries.Template", b =>
                 {
                     b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "AssignToUser")
diff --git a/Data.SeaHavenIndustries/Models/TeamMemberInvite.cs b/Data.SeaHavenIndustries/Models/TeamMemberInvite.cs
new file mode 100644
index 0000000..29d2f16
--- /dev/null
+++ b/Data.SeaHavenIndustries/Models/TeamMemberInvite.cs
@@ -0,0 +1,44 @@
+using System.ComponentModel.DataAnnotations;
+using System.ComponentModel.DataAnnotations.Schema;
+
+namespace Data.SeaHavenIndustries
+{
+    /// <summary>
+    /// A single-use registration invite for one pending team member. Only hashes of
+    /// the invite token and of the email confirmation code are stored.
+    /// </summary>
+    public class TeamMemberInvite
+    {
+        public int Id { get; set; }
+
+        [Required]
+        [MaxLength(450)]
+        public string UserId { get; set; } = string.Empty;
+
+        [ForeignKey(nameof(UserId))]
+        public virtual ApplicationUser? User { get; set; }
+
+        /// <summary>Lowercase hex SHA-256 of the raw invite token.</summary>
+        [Required]
+        [MaxLength(64)]
+        public string TokenHash { get; set; } = string.Empty;
+
+        public DateTime CreatedAt { get; set; }
+        public DateTime ExpiresAt { get; set; }
+        public DateTime? UsedAt { get; set; }
+        public DateTime? RevokedAt { get; set; }
+
+        /// <summary>Lowercase hex SHA-256 of the salt followed by the confirmation code.</summary>
+        [MaxLength(64)]
+        public string? CodeHash { get; set; }
+
+        [MaxLength(32)]
+        public string? CodeSalt { get; set; }
+
+        public DateTime? CodeExpiresAt { get; set; }
+        public int CodeFailedAttempts { get; set; }
+        public DateTime? CodeSentAt { get; set; }
+        public int CodeSendCount { get; set; }
+        public DateTime? EmailConfirmedAt { get; set; }
+    }
+}
diff --git a/SeaHaven.DataServices/Dto/TeamMemberInviteReadModels.cs b/SeaHaven.DataServices/Dto/TeamMemberInviteReadModels.cs
new file mode 100644
index 0000000..551fc50
--- /dev/null
+++ b/SeaHaven.DataServices/Dto/TeamMemberInviteReadModels.cs
@@ -0,0 +1,36 @@
+namespace SeaHaven.DataServices.Dto
+{
+    public sealed class TeamMemberInviteData
+    {
+        public required int Id { get; init; }
+        public required string UserId { get; init; }
+        public DateTime ExpiresAt { get; init; }
+        public DateTime? UsedAt { get; init; }
+        public DateTime? RevokedAt { get; init; }
+        public string? CodeHash { get; init; }
+        public string? CodeSalt { get; init; }
+        public DateTime? CodeExpiresAt { get; init; }
+        public int CodeFailedAttempts { get; init; }
+        public DateTime? CodeSentAt { get; init; }
+        public int CodeSendCount { get; init; }
+        public DateTime? EmailConfirmedAt { get; init; }
+    }
+
+    /// <summary>
+    /// Replaces the confirmation code on an open invite when the resend cooldown has
+    /// elapsed and the send limit has not been reached.
+    /// </summary>
+    public sealed class StartTeamMemberInviteCodeCommand
+    {
+        public required int InviteId { get; init; }
+        public required string CodeHash { get; init; }
+        public required string CodeSalt { get; init; }
+        public required DateTime Now { get; init; }
+        public required DateTime CodeExpiresAt { get; init; }
+
+        /// <summary>A code may be replaced only when the previous one was sent at or before this instant.</summary>
+        public required DateTime LastSentNoLaterThan { get; init; }
+
+        public required int MaxSends { get; init; }
+    }
+}
diff --git a/SeaHaven.DataServices/Implementation/TeamMemberInviteDataService.cs b/SeaHaven.DataServices/Implementation/TeamMemberInviteDataService.cs
new file mode 100644
index 0000000..4ddbd01
--- /dev/null
+++ b/SeaHaven.DataServices/Implementation/TeamMemberInviteDataService.cs
@@ -0,0 +1,144 @@
+using Data.SeaHavenIndustries;
+using Microsoft.EntityFrameworkCore;
+using SeaHaven.DataServices.Dto;
+using SeaHaven.DataServices.Interfaces;
+
+namespace SeaHaven.DataServices.Implementation
+{
+    public class TeamMemberInviteDataService : ITeamMemberInviteDataService
+    {
+        private readonly ApplicationDbContext _context;
+
+        public TeamMemberInviteDataService(ApplicationDbContext context)
+        {
+            _context = context;
+        }
+
+        public async Task AddAsync(TeamMemberInvite invite, CancellationToken cancellationToken)
+        {
+            ArgumentNullException.ThrowIfNull(invite);
+
+            _context.TeamMemberInvites.Add(invite);
+            await _context.SaveChangesAsync(cancellationToken);
+        }
+
+        public async Task ReplaceOpenForUserAsync(
+            TeamMemberInvite invite,
+            DateTime now,
+            CancellationToken cancellationToken)
+        {
+            ArgumentNullException.ThrowIfNull(invite);
+
+            await using var transaction = await _context.Database.BeginTransactionAsync(cancellationToken);
+            await _context.TeamMemberInvites
+                .Where(existing => existing.UserId == invite.UserId
+                    && existing.UsedAt == null
+                    && existing.RevokedAt == null)
+                .ExecuteUpdateAsync(
+                    setters => setters.SetProperty(existing => existing.RevokedAt, now),
+                    cancellationToken);
+            _context.TeamMemberInvites.Add(invite);
+            await _context.SaveChangesAsync(cancellationToken);
+            await transaction.CommitAsync(cancellationToken);
+        }
+
+        public Task<TeamMemberInviteData?> GetByTokenHashAsync(string tokenHash, CancellationToken cancellationToken)
+        {
+            return _context.TeamMemberInvites
+                .AsNoTracking()
+                .Where(invite => invite.TokenHash == tokenHash)
+                .Select(invite => new TeamMemberInviteData
+                {
+                    Id = invite.Id,
+                    UserId = invite.UserId,
+                    ExpiresAt = invite.ExpiresAt,
+                    UsedAt = invite.UsedAt,
+                    RevokedAt = invite.RevokedAt,
+                    CodeHash = invite.CodeHash,
+                    CodeSalt = invite.CodeSalt,
+                    CodeExpiresAt = invite.CodeExpiresAt,
+                    CodeFailedAttempts = invite.CodeFailedAttempts,
+                    CodeSentAt = invite.CodeSentAt,
+                    CodeSendCount = invite.CodeSendCount,
+                    EmailConfirmedAt = invite.EmailConfirmedAt
+                })
+                .SingleOrDefaultAsync(cancellationToken);
+        }
+
+        public async Task<bool> TryStartCodeAsync(
+            StartTeamMemberInviteCodeCommand command,
+            CancellationToken cancellationToken)
+        {
+            ArgumentNullException.ThrowIfNull(command);
+
+            var updated = await OpenInvite(command.InviteId, command.Now)
+                .Where(invite => invite.CodeSendCount < command.MaxSends
+                    && (invite.CodeSentAt == null || invite.CodeSentAt <= command.LastSentNoLaterThan))
+                .ExecuteUpdateAsync(
+                    setters => setters
+                        .SetProperty(invite => invite.CodeHash, command.CodeHash)
+                        .SetProperty(invite => invite.CodeSalt, command.CodeSalt)
+                        .SetProperty(invite => invite.CodeExpiresAt, command.CodeExpiresAt)
+                        .SetProperty(invite => invite.CodeFailedAttempts, 0)
+                        .SetProperty(invite => invite.CodeSentAt, command.Now)
+                        .SetProperty(invite => invite.CodeSendCount, invite => invite.CodeSendCount + 1),
+                    cancellationToken);
+            return updated == 1;
+        }
+
+        public async Task<bool> TryReserveCodeAttemptAsync(
+            int inviteId,
+            int maxAttempts,
+            DateTime now,
+            CancellationToken cancellationToken)
+        {
+            var updated = await OpenInvite(inviteId, now)
+                .Where(invite => invite.CodeHash != null
+                    && invite.CodeExpiresAt > now
+                    && invite.CodeFailedAttempts < maxAttempts)
+                .ExecuteUpdateAsync(
+                    setters => setters.SetProperty(
+                        invite => invite.CodeFailedAttempts,
+                        invite => invite.CodeFailedAttempts + 1),
+                    cancellationToken);
+            return updated == 1;
+        }
+
+        public async Task<bool> TryConfirmEmailAsync(
+            int inviteId,
+            string codeHash,
+            DateTime now,
+            CancellationToken cancellationToken)
+        {
+            var updated = await OpenInvite(inviteId, now)
+                .Where(invite => invite.CodeHash == codeHash && invite.CodeExpiresAt > now)
+                .ExecuteUpdateAsync(
+                    setters => setters
+                        .SetProperty(invite => invite.EmailConfirmedAt, now)
+                        .SetProperty(invite => invite.CodeHash, (string?)null)
+                        .SetProperty(invite => invite.CodeSalt, (string?)null)
+                        .SetProperty(invite => invite.CodeExpiresAt, (DateTime?)null)
+                        .SetProperty(invite => invite.CodeFailedAttempts, 0),
+                    cancellationToken);
+            return updated == 1;
+        }
+
+        public async Task<bool> TryClaimAsync(int inviteId, DateTime now, CancellationToken cancellationToken)
+        {
+            var updated = await OpenInvite(inviteId, now)
+                .Where(invite => invite.EmailConfirmedAt != null)
+                .ExecuteUpdateAsync(
+                    setters => setters.SetProperty(invite => invite.UsedAt, now),
+                    cancellationToken);
+            return updated == 1;
+        }
+
+        private IQueryable<TeamMemberInvite> OpenInvite(int inviteId, DateTime now)
+        {
+            return _context.TeamMemberInvites.Where(invite => invite.Id == inviteId
+                && invite.UsedAt == null
+                && invite.RevokedAt == null
+                && invite.ExpiresAt > now);
+        }
+    }
+}
diff --git a/SeaHaven.DataServices/Interfaces/ITeamMemberInviteDataService.cs b/SeaHaven.DataServices/Interfaces/ITeamMemberInviteDataService.cs
new file mode 100644
index 0000000..4140f16
--- /dev/null
+++ b/SeaHaven.DataServices/Interfaces/ITeamMemberInviteDataService.cs
@@ -0,0 +1,30 @@
+using Data.SeaHavenIndustries;
+using SeaHaven.DataServices.Dto;
+
+namespace SeaHaven.DataServices.Interfaces
+{
+    /// <summary>
+    /// Persistence for team member registration invites. Every state transition that
+    /// guards a security limit is a single conditional update, so concurrent requests
+    /// cannot exceed the limit; each returns whether the transition happened.
+    /// </summary>
+    public interface ITeamMemberInviteDataService
+    {
+        Task AddAsync(TeamMemberInvite invite, CancellationToken cancellationToken);
+
+        /// <summary>Revokes every open invite for the invite's user and adds the new one, atomically.</summary>
+        Task ReplaceOpenForUserAsync(TeamMemberInvite invite, DateTime now, CancellationToken cancellationToken);
+
+        Task<TeamMemberInviteData?> GetByTokenHashAsync(string tokenHash, CancellationToken cancellationToken);
+
+        Task<bool> TryStartCodeAsync(StartTeamMemberInviteCodeCommand command, CancellationToken cancellationToken);
+
+        /// <summary>Counts one verification attempt against a live code; false once the attempt limit is used up.</summary>
+        Task<bool> TryReserveCodeAttemptAsync(int inviteId, int maxAttempts, DateTime now, CancellationToken cancellationToken);
+
+        Task<bool> TryConfirmEmailAsync(int inviteId, string codeHash, DateTime now, CancellationToken cancellationToken);
+
+        /// <summary>Marks an open, unexpired, email-confirmed invite as used; false when another request already did.</summary>
+        Task<bool> TryClaimAsync(int inviteId, DateTime now, CancellationToken cancellationToken);
+    }
+}
diff --git a/SeaHaven.Services/DTOs/TeamMemberInviteDTOs.cs b/SeaHaven.Services/DTOs/TeamMemberInviteDTOs.cs
new file mode 100644
index 0000000..36d7bd8
--- /dev/null
+++ b/SeaHaven.Services/DTOs/TeamMemberInviteDTOs.cs
@@ -0,0 +1,71 @@
+namespace SeaHaven.Services.DTOs;
+
+/// <summary>A freshly issued invite. The raw token is never persisted and never printed.</summary>
+public sealed class IssuedTeamMemberInvite
+{
+    public IssuedTeamMemberInvite(string token, DateTime expiresAt)
+    {
+        Token = token;
+        ExpiresAt = expiresAt;
+    }
+
+    public string Token { get; }
+    public DateTime ExpiresAt { get; }
+
+    public override string ToString() => $"IssuedTeamMemberInvite {{ ExpiresAt = {ExpiresAt:O} }}";
+}
+
+public sealed class TeamMemberInviteResendOutcomeDTO
+{
+    public bool Success { get; init; }
+    public string? Error { get; init; }
+}
+
+public enum TeamMemberRegistrationStatus
+{
+    Ok,
+    InvalidInvite,
+    CodeIncorrect,
+    CodeExpired,
+    CodeLocked,
+    ResendTooSoon,
+    ResendLimitReached,
+    CodeDeliveryFailed,
+    EmailNotConfirmed,
+    PasswordRejected,
+    InvalidPhone
+}
+
+public sealed class TeamMemberInviteDetailsDTO
+{
+    public required string Name { get; init; }
+    public required string Role { get; init; }
+    public string? Email { get; init; }
+    public string? Phone { get; init; }
+}
+
+public sealed class TeamMemberRegistrationOutcomeDTO
+{
+    public TeamMemberRegistrationStatus Status { get; init; }
+    public TeamMemberInviteDetailsDTO? Details { get; init; }
+    public LoginResultDTO? Session { get; init; }
+    public int? RetryAfterSeconds { get; init; }
+}
+
+public sealed class TeamMemberInviteTokenRequestDTO
+{
+    public string? Token { get; init; }
+}
+
+public sealed class VerifyTeamMemberInviteCodeRequestDTO
+{
+    public string? Token { get; init; }
+    public string? Code { get; init; }
+}
+
+public sealed class CompleteTeamMemberRegistrationRequestDTO
+{
+    public string? Token { get; init; }
+    public string? Password { get; init; }
+    public string? Phone { get; init; }
+}
diff --git a/SeaHaven.Services/DependencyInjection/ServicesModule.cs b/SeaHaven.Services/DependencyInjection/ServicesModule.cs
index e24dec3..455a0a8 100644
--- a/SeaHaven.Services/DependencyInjection/ServicesModule.cs
+++ b/SeaHaven.Services/DependencyInjection/ServicesModule.cs
@@ -1,6 +1,7 @@
 using FluentValidation;
 using Microsoft.Extensions.Configuration;
 using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.DependencyInjection.Extensions;
 using SeaHaven.Services.Configuration;
 using SeaHaven.Services.Interfaces;
 using System.Reflection;
@@ -13,6 +14,7 @@ namespace SeaHaven.Services.DependencyInjection
 
         public static IServiceCollection AddBusinessServices(this IServiceCollection services, IConfiguration configuration)
         {
+            services.TryAddSingleton(TimeProvider.System);
             services.Configure<FrontendOptions>(configuration);
             services.Configure<JwtOptions>(configuration.GetSection(JwtOptions.SectionName));
             services.Configure<ApprovalsOptions>(configuration.GetSection(ApprovalsOptions.SectionName));
diff --git a/SeaHaven.Services/Helpers/TeamMemberInviteSecrets.cs b/SeaHaven.Services/Helpers/TeamMemberInviteSecrets.cs
new file mode 100644
index 0000000..0d65d61
--- /dev/null
+++ b/SeaHaven.Services/Helpers/TeamMemberInviteSecrets.cs
@@ -0,0 +1,62 @@
+using System.Globalization;
+using System.Security.Cryptography;
+using System.Text;
+
+namespace SeaHaven.Services.Helpers
+{
+    /// <summary>
+    /// Generation and hashing for invite tokens and email confirmation codes. Raw
+    /// values exist only in memory and in the email sent to the invitee.
+    /// </summary>
+    public static class TeamMemberInviteSecrets
+    {
+        /// <summary>256 bits from the OS CSPRNG.</summary>
+        public const int TokenBytes = 32;
+
+        /// <summary>Upper bound on an accepted token string; a 32-byte base64url token is 43 characters.</summary>
+        public const int MaxTokenLength = 128;
+
+        public static string NewToken()
+        {
+            return Convert.ToBase64String(RandomNumberGenerator.GetBytes(TokenBytes))
+                .Replace('+', '-')
+                .Replace('/', '_')
+                .TrimEnd('=');
+        }
+
+        public static string HashToken(string token)
+        {
+            ArgumentNullException.ThrowIfNull(token);
+            return Sha256Hex(token);
+        }
+
+        public static string NewCode()
+        {
+            return RandomNumberGenerator.GetInt32(0, 1_000_000).ToString("D6", CultureInfo.InvariantCulture);
+        }
+
+        public static string NewCodeSalt()
+        {
+            return Convert.ToHexString(RandomNumberGenerator.GetBytes(16)).ToLowerInvariant();
+        }
+
+        public static string HashCode(string salt, string code)
+        {
+            ArgumentNullException.ThrowIfNull(salt);
+            ArgumentNullException.ThrowIfNull(code);
+            return Sha256Hex(salt + ":" + code);
+        }
+
+        public static bool CodeMatches(string salt, string candidate, string expectedHash)
+        {
+            var actual = Encoding.ASCII.GetBytes(HashCode(salt, candidate));
+            var expected = Encoding.ASCII.GetBytes(expectedHash);
+            return CryptographicOperations.FixedTimeEquals(actual, expected);
+        }
+
+        private static string Sha256Hex(string value)
+        {
+            return Convert.ToHexString(SHA256.HashData(Encoding.UTF8.GetBytes(value))).ToLowerInvariant();
+        }
+    }
+}
diff --git a/SeaHaven.Services/Implementation/AuthenticationService.cs b/SeaHaven.Services/Implementation/AuthenticationService.cs
index e293276..5df17de 100644
--- a/SeaHaven.Services/Implementation/AuthenticationService.cs
+++ b/SeaHaven.Services/Implementation/AuthenticationService.cs
@@ -39,47 +39,53 @@ namespace SeaHaven.Services.Implementation
         {
             var user = await _userManager.FindByNameAsync(username ?? "");
             if (user != null && user.IsDeleted != true && await _userManager.CheckPasswordAsync(user, password ?? ""))
-            {
-                var userRoles = await _userManager.GetRolesAsync(user);
-                var authClaims = new List<Claim>
-                {
-                    new Claim(ClaimTypes.Name, user.UserName ?? ""),
-                    new Claim(ClaimTypes.NameIdentifier, user.Id),
-                    new Claim(JwtRegisteredClaimNames.Jti, Guid.NewGuid().ToString())
-                };
-                foreach (var userRole in userRoles)
-                {
-                    authClaims.Add(new Claim(ClaimTypes.Role, userRole));
-                }
-                if (user.AccountId.HasValue)
-                {
-                    authClaims.Add(new Claim(
-                        SeaHavenClaimTypes.AccountId,
-                        user.AccountId.Value.ToString()));
-                }
-                else if (userRoles.Contains("Admin"))
-                {
-                    // Explicit signed org-wide elevation — never elevate via absence of account_id.
-                    authClaims.Add(new Claim(
-                        SeaHavenClaimTypes.OrgScope,
-                        SeaHavenClaimTypes.OrgScopeAll));
-                }
-                var token = GetToken(authClaims);
-                return new LoginResultDTO
-                {
-                    Token = new JwtSecurityTokenHandler().WriteToken(token),
-                    Expiration = token.ValidTo,
-                    Email = user.Email,
-                    UserRole = userRoles.FirstOrDefault(),
-                    PhoneNumber = user.PhoneNumber,
-                    Fullname = user.FirstName + " " + user.LastName,
-                    Id = user.Id
-                };
-            }
+                return await CreateSessionAsync(user, cancellationToken);
 
             return null;
         }
 
+        public async Task<LoginResultDTO> CreateSessionAsync(ApplicationUser user, CancellationToken cancellationToken)
+        {
+            ArgumentNullException.ThrowIfNull(user);
+            cancellationToken.ThrowIfCancellationRequested();
+
+            var userRoles = await _userManager.GetRolesAsync(user);
+            var authClaims = new List<Claim>
+            {
+                new Claim(ClaimTypes.Name, user.UserName ?? ""),
+                new Claim(ClaimTypes.NameIdentifier, user.Id),
+                new Claim(JwtRegisteredClaimNames.Jti, Guid.NewGuid().ToString())
+            };
+            foreach (var userRole in userRoles)
+            {
+                authClaims.Add(new Claim(ClaimTypes.Role, userRole));
+            }
+            if (user.AccountId.HasValue)
+            {
+                authClaims.Add(new Claim(
+                    SeaHavenClaimTypes.AccountId,
+                    user.AccountId.Value.ToString()));
+            }
+            else if (userRoles.Contains("Admin"))
+            {
+                // Explicit signed org-wide elevation — never elevate via absence of account_id.
+                authClaims.Add(new Claim(
+                    SeaHavenClaimTypes.OrgScope,
+                    SeaHavenClaimTypes.OrgScopeAll));
+            }
+            var token = GetToken(authClaims);
+            return new LoginResultDTO
+            {
+                Token = new JwtSecurityTokenHandler().WriteToken(token),
+                Expiration = token.ValidTo,
+                Email = user.Email,
+                UserRole = userRoles.FirstOrDefault(),
+                PhoneNumber = user.PhoneNumber,
+                Fullname = user.FirstName + " " + user.LastName,
+                Id = user.Id
+            };
+        }
+
         public async Task<ChangePasswordResultDTO> ChangePasswordAsync(string userId, string? currentPassword, string? newPassword, CancellationToken cancellationToken)
         {
             cancellationToken.ThrowIfCancellationRequested();
diff --git a/SeaHaven.Services/Implementation/TeamMemberInviteService.cs b/SeaHaven.Services/Implementation/TeamMemberInviteService.cs
new file mode 100644
index 0000000..7577507
--- /dev/null
+++ b/SeaHaven.Services/Implementation/TeamMemberInviteService.cs
@@ -0,0 +1,119 @@
+using System.Net;
+using System.Security.Claims;
+using Data.SeaHavenIndustries;
+using Microsoft.AspNetCore.Identity;
+using Microsoft.Extensions.Logging;
+using Microsoft.Extensions.Options;
+using SeaHaven.DataServices.Interfaces;
+using SeaHaven.Services.Configuration;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Helpers;
+using SeaHaven.Services.Interfaces;
+
+namespace SeaHaven.Services.Implementation;
+
+public sealed class TeamMemberInviteService : ITeamMemberInviteService
+{
+    /// <summary>The prototype states no lifetime; seven days is the product decision.</summary>
+    public static readonly TimeSpan InviteLifetime = TimeSpan.FromDays(7);
+
+    private readonly ITeamMemberInviteDataService _inviteDataService;
+    private readonly UserManager<ApplicationUser> _userManager;
+    private readonly IEmailSender _emailSender;
+    private readonly FrontendOptions _frontendOptions;
+    private readonly TimeProvider _timeProvider;
+    private readonly ILogger<TeamMemberInviteService> _logger;
+
+    public TeamMemberInviteService(
+        ITeamMemberInviteDataService inviteDataService,
+        UserManager<ApplicationUser> userManager,
+        IEmailSender emailSender,
+        IOptions<FrontendOptions> frontendOptions,
+        TimeProvider timeProvider,
+        ILogger<TeamMemberInviteService> logger)
+    {
+        _inviteDataService = inviteDataService;
+        _userManager = userManager;
+        _emailSender = emailSender;
+        _frontendOptions = frontendOptions.Value;
+        _timeProvider = timeProvider;
+        _logger = logger;
+    }
+
+    public async Task<IssuedTeamMemberInvite> CreateAsync(string userId, CancellationToken cancellationToken)
+    {
+        ArgumentException.ThrowIfNullOrWhiteSpace(userId);
+
+        var (invite, issued) = NewInvite(userId);
+        await _inviteDataService.AddAsync(invite, cancellationToken);
+        return issued;
+    }
+
+    public async Task<bool> SendAsync(
+        IssuedTeamMemberInvite invite,
+        string email,
+        string name,
+        CancellationToken cancellationToken)
+    {
+        ArgumentNullException.ThrowIfNull(invite);
+        cancellationToken.ThrowIfCancellationRequested();
+
+        var link = $"{_frontendOptions.FrontendBaseUrl?.TrimEnd('/')}/invite#{invite.Token}";
+        var body =
+            $"<p>Hi {WebUtility.HtmlEncode(name)},</p>" +
+            "<p>You've been added to Seahaven. Set your password and confirm your email to finish creating your account.</p>" +
+            $"<p><a href=\"{WebUtility.HtmlEncode(link)}\">Finish registration</a></p>" +
+            $"<p>This link expires in {InviteLifetime.Days} days and can be used once.</p>";
+
+        var sent = await _emailSender.SendEmailAsync(email, "You're invited to Seahaven", body);
+        if (!sent)
+            _logger.LogWarning("Team member invite email could not be sent for invite expiring {ExpiresAt}.", invite.ExpiresAt);
+
+        return sent;
+    }
+
+    public async Task<TeamMemberInviteResendOutcomeDTO> ResendAsync(
+        string userId,
+        ClaimsPrincipal caller,
+        CancellationToken cancellationToken)
+    {
+        if (caller?.IsInRole("Admin") != true)
+            return ResendFailure("Forbidden");
+
+        cancellationToken.ThrowIfCancellationRequested();
+        var user = await _userManager.FindByIdAsync(userId);
+        if (user is null)
+            return ResendFailure("Team member not found.");
+
+        if (user.IsDeleted == true || user.PendingRegistration != true || string.IsNullOrWhiteSpace(user.Email))
+            return ResendFailure("Only pending team members can be re-invited.");
+
+        var (invite, issued) = NewInvite(user.Id);
+        await _inviteDataService.ReplaceOpenForUserAsync(invite, NowUtc(), cancellationToken);
+
+        var name = $"{user.FirstName ?? ""} {user.LastName ?? ""}".Trim();
+        if (!await SendAsync(issued, user.Email, name, cancellationToken))
+            return ResendFailure("The invite could not be emailed. Try again.");
+
+        return new TeamMemberInviteResendOutcomeDTO { Success = true };
+    }
+
+    private (TeamMemberInvite Invite, IssuedTeamMemberInvite Issued) NewInvite(string userId)
+    {
+        var now = NowUtc();
+        var token = TeamMemberInviteSecrets.NewToken();
+        var invite = new TeamMemberInvite
+        {
+            UserId = userId,
+            TokenHash = TeamMemberInviteSecrets.HashToken(token),
+            CreatedAt = now,
+            ExpiresAt = now.Add(InviteLifetime)
+        };
+        return (invite, new IssuedTeamMemberInvite(token, invite.ExpiresAt));
+    }
+
+    private DateTime NowUtc() => _timeProvider.GetUtcNow().UtcDateTime;
+
+    private static TeamMemberInviteResendOutcomeDTO ResendFailure(string error) =>
+        new() { Success = false, Error = error };
+}
diff --git a/SeaHaven.Services/Implementation/TeamMemberRegistrationService.cs b/SeaHaven.Services/Implementation/TeamMemberRegistrationService.cs
new file mode 100644
index 0000000..2bc306c
--- /dev/null
+++ b/SeaHaven.Services/Implementation/TeamMemberRegistrationService.cs
@@ -0,0 +1,251 @@
+using System.Text.RegularExpressions;
+using Data.SeaHavenIndustries;
+using Microsoft.AspNetCore.Identity;
+using Microsoft.Extensions.Logging;
+using SeaHaven.DataServices.Dto;
+using SeaHaven.DataServices.Interfaces;
+using SeaHaven.Services.Constants;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Helpers;
+using SeaHaven.Services.Interfaces;
+
+namespace SeaHaven.Services.Implementation;
+
+public sealed partial class TeamMemberRegistrationService : ITeamMemberRegistrationService
+{
+    public static readonly TimeSpan CodeLifetime = TimeSpan.FromMinutes(15);
+    public static readonly TimeSpan ResendCooldown = TimeSpan.FromSeconds(60);
+    public const int MaxCodeAttempts = 5;
+    public const int MaxCodeSends = 10;
+
+    private readonly ITeamMemberInviteDataService _inviteDataService;
+    private readonly IUserDataService _userDataService;
+    private readonly UserManager<ApplicationUser> _userManager;
+    private readonly IAuthenticationService _authenticationService;
+    private readonly IEmailSender _emailSender;
+    private readonly TimeProvider _timeProvider;
+    private readonly ILogger<TeamMemberRegistrationService> _logger;
+
+    public TeamMemberRegistrationService(
+        ITeamMemberInviteDataService inviteDataService,
+        IUserDataService userDataService,
+        UserManager<ApplicationUser> userManager,
+        IAuthenticationService authenticationService,
+        IEmailSender emailSender,
+        TimeProvider timeProvider,
+        ILogger<TeamMemberRegistrationService> logger)
+    {
+        _inviteDataService = inviteDataService;
+        _userDataService = userDataService;
+        _userManager = userManager;
+        _authenticationService = authenticationService;
+        _emailSender = emailSender;
+        _timeProvider = timeProvider;
+        _logger = logger;
+    }
+
+    public async Task<TeamMemberRegistrationOutcomeDTO> ResolveAsync(string? token, CancellationToken cancellationToken)
+    {
+        var context = await LoadAsync(token, NowUtc(), cancellationToken);
+        if (context is null)
+            return Outcome(TeamMemberRegistrationStatus.InvalidInvite);
+
+        var roles = await _userManager.GetRolesAsync(context.User);
+        var role = roles.FirstOrDefault();
+        return new TeamMemberRegistrationOutcomeDTO
+        {
+            Status = TeamMemberRegistrationStatus.Ok,
+            Details = new TeamMemberInviteDetailsDTO
+            {
+                Name = $"{context.User.FirstName ?? ""} {context.User.LastName ?? ""}".Trim(),
+                Role = TeamMemberConstants.CanonicalRole(role) ?? role ?? "",
+                Email = context.User.Email,
+                Phone = context.User.Contact ?? context.User.PhoneNumber
+            }
+        };
+    }
+
+    public async Task<TeamMemberRegistrationOutcomeDTO> SendCodeAsync(string? token, CancellationToken cancellationToken)
+    {
+        var now = NowUtc();
+        var context = await LoadAsync(token, now, cancellationToken);
+        if (context is null || string.IsNullOrWhiteSpace(context.User.Email))
+            return Outcome(TeamMemberRegistrationStatus.InvalidInvite);
+
+        var code = TeamMemberInviteSecrets.NewCode();
+        var salt = TeamMemberInviteSecrets.NewCodeSalt();
+        var started = await _inviteDataService.TryStartCodeAsync(
+            new StartTeamMemberInviteCodeCommand
+            {
+                InviteId = context.Invite.Id,
+                CodeHash = TeamMemberInviteSecrets.HashCode(salt, code),
+                CodeSalt = salt,
+                Now = now,
+                CodeExpiresAt = now.Add(CodeLifetime),
+                LastSentNoLaterThan = now.Subtract(ResendCooldown),
+                MaxSends = MaxCodeSends
+            },
+            cancellationToken);
+        if (!started)
+            return ResendRefusal(context.Invite, now);
+
+        // Read the address at send time so an admin's correction is honoured.
+        var body =
+            $"<p>Your Seahaven confirmation code is <strong>{code}</strong>.</p>" +
+            $"<p>It expires in {CodeLifetime.TotalMinutes:0} minutes. If you didn't request it, you can ignore this email.</p>";
+        if (!await _emailSender.SendEmailAsync(context.User.Email, "Your Seahaven confirmation code", body))
+        {
+            _logger.LogWarning("Confirmation code email could not be sent for team member invite {InviteId}.", context.Invite.Id);
+            return Outcome(TeamMemberRegistrationStatus.CodeDeliveryFailed);
+        }
+
+        return Outcome(TeamMemberRegistrationStatus.Ok);
+    }
+
+    public async Task<TeamMemberRegistrationOutcomeDTO> VerifyCodeAsync(
+        string? token,
+        string? code,
+        CancellationToken cancellationToken)
+    {
+        var now = NowUtc();
+        var context = await LoadAsync(token, now, cancellationToken);
+        if (context is null)
+            return Outcome(TeamMemberRegistrationStatus.InvalidInvite);
+
+        var invite = context.Invite;
+        if (invite.CodeHash is null || invite.CodeSalt is null || invite.CodeExpiresAt is null || invite.CodeExpiresAt <= now)
+            return Outcome(TeamMemberRegistrationStatus.CodeExpired);
+
+        // Reserve the attempt before comparing, so parallel guesses cannot exceed the limit.
+        if (!await _inviteDataService.TryReserveCodeAttemptAsync(invite.Id, MaxCodeAttempts, now, cancellationToken))
+        {
+            return Outcome(invite.CodeFailedAttempts >= MaxCodeAttempts
+                ? TeamMemberRegistrationStatus.CodeLocked
+                : TeamMemberRegistrationStatus.CodeExpired);
+        }
+
+        if (!TeamMemberInviteSecrets.CodeMatches(invite.CodeSalt, (code ?? "").Trim(), invite.CodeHash))
+        {
+            return Outcome(invite.CodeFailedAttempts + 1 >= MaxCodeAttempts
+                ? TeamMemberRegistrationStatus.CodeLocked
+                : TeamMemberRegistrationStatus.CodeIncorrect);
+        }
+
+        return await _inviteDataService.TryConfirmEmailAsync(invite.Id, invite.CodeHash, now, cancellationToken)
+            ? Outcome(TeamMemberRegistrationStatus.Ok)
+            : Outcome(TeamMemberRegistrationStatus.CodeExpired);
+    }
+
+    public async Task<TeamMemberRegistrationOutcomeDTO> CompleteAsync(
+        CompleteTeamMemberRegistrationRequestDTO request,
+        CancellationToken cancellationToken)
+    {
+        ArgumentNullException.ThrowIfNull(request);
+
+        var now = NowUtc();
+        var context = await LoadAsync(request.Token, now, cancellationToken);
+        if (context is null)
+            return Outcome(TeamMemberRegistrationStatus.InvalidInvite);
+        if (context.Invite.EmailConfirmedAt is null)
+            return Outcome(TeamMemberRegistrationStatus.EmailNotConfirmed);
+
+        var phone = string.IsNullOrWhiteSpace(request.Phone) ? null : request.Phone.Trim();
+        if (phone is not null && !PhonePattern().IsMatch(phone))
+            return Outcome(TeamMemberRegistrationStatus.InvalidPhone);
+
+        var user = context.User;
+        try
+        {
+            await _userDataService.ExecuteTransactionalAsync(
+                async transactionCancellationToken =>
+                {
+                    if (!await _inviteDataService.TryClaimAsync(context.Invite.Id, now, transactionCancellationToken))
+                        throw new RegistrationAbortedException(TeamMemberRegistrationStatus.InvalidInvite);
+
+                    user.EmailConfirmed = true;
+                    user.PendingRegistration = false;
+                    user.UniqueName = "Active";
+                    user.PhoneNumber = phone;
+                    user.Contact = phone;
+
+                    // Identity applies the shared password policy and persists the user.
+                    var result = await _userManager.AddPasswordAsync(user, request.Password ?? "");
+                    if (!result.Succeeded)
+                        throw new RegistrationAbortedException(StatusFor(result));
+                },
+                cancellationToken);
+        }
+        catch (RegistrationAbortedException aborted)
+        {
+            return Outcome(aborted.Status);
+        }
+
+        _logger.LogInformation("Team member {UserId} completed invite registration.", user.Id);
+        return new TeamMemberRegistrationOutcomeDTO
+        {
+            Status = TeamMemberRegistrationStatus.Ok,
+            Session = await _authenticationService.CreateSessionAsync(user, cancellationToken)
+        };
+    }
+
+    private async Task<RegistrationContext?> LoadAsync(string? token, DateTime now, CancellationToken cancellationToken)
+    {
+        cancellationToken.ThrowIfCancellationRequested();
+        if (string.IsNullOrWhiteSpace(token) || token.Length > TeamMemberInviteSecrets.MaxTokenLength)
+            return null;
+
+        var invite = await _inviteDataService.GetByTokenHashAsync(
+            TeamMemberInviteSecrets.HashToken(token.Trim()),
+            cancellationToken);
+        if (invite is null || invite.UsedAt is not null || invite.RevokedAt is not null || invite.ExpiresAt <= now)
+            return null;
+
+        var user = await _userManager.FindByIdAsync(invite.UserId);
+        if (user is null || user.IsDeleted == true || user.PendingRegistration != true)
+            return null;
+
+        return new RegistrationContext(invite, user);
+    }
+
+    private static TeamMemberRegistrationOutcomeDTO ResendRefusal(TeamMemberInviteData invite, DateTime now)
+    {
+        if (invite.CodeSendCount >= MaxCodeSends)
+            return Outcome(TeamMemberRegistrationStatus.ResendLimitReached);
+
+        var allowedAt = (invite.CodeSentAt ?? now).Add(ResendCooldown);
+        return new TeamMemberRegistrationOutcomeDTO
+        {
+            Status = TeamMemberRegistrationStatus.ResendTooSoon,
+            RetryAfterSeconds = Math.Max(1, (int)Math.Ceiling((allowedAt - now).TotalSeconds))
+        };
+    }
+
+    private static TeamMemberRegistrationStatus StatusFor(IdentityResult result)
+    {
+        // A password already set means the account was registered by another route.
+        return result.Errors.Any(error => error.Code == nameof(IdentityErrorDescriber.UserAlreadyHasPassword))
+            ? TeamMemberRegistrationStatus.InvalidInvite
+            : TeamMemberRegistrationStatus.PasswordRejected;
+    }
+
+    private DateTime NowUtc() => _timeProvider.GetUtcNow().UtcDateTime;
+
+    private static TeamMemberRegistrationOutcomeDTO Outcome(TeamMemberRegistrationStatus status) =>
+        new() { Status = status };
+
+    [GeneratedRegex(@"^[0-9+()\-.\s]{7,32}$")]
+    private static partial Regex PhonePattern();
+
+    private sealed record RegistrationContext(TeamMemberInviteData Invite, ApplicationUser User);
+
+    private sealed class RegistrationAbortedException : Exception
+    {
+        public RegistrationAbortedException(TeamMemberRegistrationStatus status)
+            : base(status.ToString())
+        {
+            Status = status;
+        }
+
+        public TeamMemberRegistrationStatus Status { get; }
+    }
+}
diff --git a/SeaHaven.Services/Implementation/TeamMemberService.cs b/SeaHaven.Services/Implementation/TeamMemberService.cs
index faf64f3..6a25aef 100644
--- a/SeaHaven.Services/Implementation/TeamMemberService.cs
+++ b/SeaHaven.Services/Implementation/TeamMemberService.cs
@@ -20,6 +20,7 @@ public sealed class TeamMemberService : ITeamMemberService
     private readonly ITeamPermissionOverrideDataService _permissionDataService;
     private readonly IUserDataService _userDataService;
     private readonly ITeamPermissionService _permissionService;
+    private readonly ITeamMemberInviteService _inviteService;
 
     public TeamMemberService(
         UserManager<ApplicationUser> userManager,
@@ -27,7 +28,8 @@ public sealed class TeamMemberService : ITeamMemberService
         IUserServiceAreaDataService areaDataService,
         ITeamPermissionOverrideDataService permissionDataService,
         IUserDataService userDataService,
-        ITeamPermissionService permissionService)
+        ITeamPermissionService permissionService,
+        ITeamMemberInviteService inviteService)
     {
         _userManager = userManager;
         _roleManager = roleManager;
@@ -35,6 +37,7 @@ public sealed class TeamMemberService : ITeamMemberService
         _permissionDataService = permissionDataService;
         _userDataService = userDataService;
         _permissionService = permissionService;
+        _inviteService = inviteService;
     }
 
     public async Task<CreateTeamMemberOutcomeDTO> CreateAsync(
@@ -68,6 +71,7 @@ public sealed class TeamMemberService : ITeamMemberService
             PendingRegistrationCreatedDate = now
         };
 
+        IssuedTeamMemberInvite? invite = null;
         try
         {
             await _userDataService.ExecuteTransactionalAsync(
@@ -100,6 +104,7 @@ public sealed class TeamMemberService : ITeamMemberService
 
                     await _areaDataService.ReplaceAsync(user.Id, areas!, transactionCancellationToken);
                     await _permissionDataService.SetOverridesAsync(user.Id, overrides!, transactionCancellationToken);
+                    invite = await _inviteService.CreateAsync(user.Id, transactionCancellationToken);
                 },
                 cancellationToken);
         }
@@ -108,6 +113,10 @@ public sealed class TeamMemberService : ITeamMemberService
             return Failure(exception.Message);
         }
 
+        // The member and their invite commit together; the email goes out only after
+        // commit, so a rolled-back member never receives a link.
+        await _inviteService.SendAsync(invite!, user.Email!, user.FirstName!, cancellationToken);
+
         return new CreateTeamMemberOutcomeDTO
         {
             Success = true,
diff --git a/SeaHaven.Services/Interfaces/IAuthenticationService.cs b/SeaHaven.Services/Interfaces/IAuthenticationService.cs
index e4ffc9b..5d41a32 100644
--- a/SeaHaven.Services/Interfaces/IAuthenticationService.cs
+++ b/SeaHaven.Services/Interfaces/IAuthenticationService.cs
@@ -5,6 +5,8 @@ namespace SeaHaven.Services.Interfaces
     public interface IAuthenticationService
     {
         Task<LoginResultDTO?> LoginAsync(string? username, string? password, CancellationToken cancellationToken);
+        /// <summary>Builds the same signed session payload that a successful login returns.</summary>
+        Task<LoginResultDTO> CreateSessionAsync(Data.SeaHavenIndustries.ApplicationUser user, CancellationToken cancellationToken);
         Task<ChangePasswordResultDTO> ChangePasswordAsync(string userId, string? currentPassword, string? newPassword, CancellationToken cancellationToken);
         Task<UserProfileDTO?> UpdateProfileAsync(string userId, UpdateProfileRequestDTO dto, CancellationToken cancellationToken);
         Task<bool> ForgetPasswordAsync(string email, CancellationToken cancellationToken);
diff --git a/SeaHaven.Services/Interfaces/ITeamMemberInviteService.cs b/SeaHaven.Services/Interfaces/ITeamMemberInviteService.cs
new file mode 100644
index 0000000..9b12928
--- /dev/null
+++ b/SeaHaven.Services/Interfaces/ITeamMemberInviteService.cs
@@ -0,0 +1,23 @@
+using System.Security.Claims;
+using SeaHaven.Services.DTOs;
+
+namespace SeaHaven.Services.Interfaces;
+
+public interface ITeamMemberInviteService
+{
+    /// <summary>Persists a new invite for a pending member and returns its raw token.</summary>
+    Task<IssuedTeamMemberInvite> CreateAsync(string userId, CancellationToken cancellationToken);
+
+    /// <summary>Emails the invite link. Returns false when the email could not be handed off.</summary>
+    Task<bool> SendAsync(
+        IssuedTeamMemberInvite invite,
+        string email,
+        string name,
+        CancellationToken cancellationToken);
+
+    /// <summary>Admin-only: revokes a pending member's open invites and emails a new one.</summary>
+    Task<TeamMemberInviteResendOutcomeDTO> ResendAsync(
+        string userId,
+        ClaimsPrincipal caller,
+        CancellationToken cancellationToken);
+}
diff --git a/SeaHaven.Services/Interfaces/ITeamMemberRegistrationService.cs b/SeaHaven.Services/Interfaces/ITeamMemberRegistrationService.cs
new file mode 100644
index 0000000..8d2692c
--- /dev/null
+++ b/SeaHaven.Services/Interfaces/ITeamMemberRegistrationService.cs
@@ -0,0 +1,23 @@
+using SeaHaven.Services.DTOs;
+
+namespace SeaHaven.Services.Interfaces;
+
+/// <summary>
+/// The anonymous invite-registration flow. Every operation is scoped by the invite
+/// token alone; unknown, expired, used and revoked invites share one outcome.
+/// </summary>
+public interface ITeamMemberRegistrationService
+{
+    Task<TeamMemberRegistrationOutcomeDTO> ResolveAsync(string? token, CancellationToken cancellationToken);
+
+    Task<TeamMemberRegistrationOutcomeDTO> SendCodeAsync(string? token, CancellationToken cancellationToken);
+
+    Task<TeamMemberRegistrationOutcomeDTO> VerifyCodeAsync(
+        string? token,
+        string? code,
+        CancellationToken cancellationToken);
+
+    Task<TeamMemberRegistrationOutcomeDTO> CompleteAsync(
+        CompleteTeamMemberRegistrationRequestDTO request,
+        CancellationToken cancellationToken);
+}
diff --git a/SeaHavenIndustries.Tests/TeamMemberCreateTransactionTests.cs b/SeaHavenIndustries.Tests/TeamMemberCreateTransactionTests.cs
index 8c5e2bc..0d690b5 100644
--- a/SeaHavenIndustries.Tests/TeamMemberCreateTransactionTests.cs
+++ b/SeaHavenIndustries.Tests/TeamMemberCreateTransactionTests.cs
@@ -35,7 +35,8 @@ public sealed class TeamMemberCreateTransactionTests
         await using (var setup = new SqliteTeamMemberTestDbContext(options))
             await setup.Database.EnsureCreatedAsync();
 
-        await using var serviceProvider = BuildServiceProvider(connection, injectFailure: true);
+        var emailSender = new CapturingEmailSender();
+        await using var serviceProvider = BuildServiceProvider(connection, injectFailure: true, emailSender);
         ThrowingAfterPersistPermissionDataService failingPermissionData;
         await using (var createScope = serviceProvider.CreateAsyncScope())
         {
@@ -66,6 +67,8 @@ public sealed class TeamMemberCreateTransactionTests
         Assert.Empty(await verify.UserRoles.AsNoTracking().ToListAsync());
         Assert.Empty(await verify.UserServiceAreas.AsNoTracking().ToListAsync());
         Assert.Empty(await verify.UserPermissionOverrides.AsNoTracking().ToListAsync());
+        Assert.Empty(await verify.TeamMemberInvites.AsNoTracking().ToListAsync());
+        Assert.Empty(emailSender.Messages);
     }
 
     [Fact]
@@ -81,7 +84,8 @@ public sealed class TeamMemberCreateTransactionTests
         await using (var setup = new SqliteTeamMemberTestDbContext(options))
             await setup.Database.EnsureCreatedAsync();
 
-        await using var serviceProvider = BuildServiceProvider(connection);
+        var emailSender = new CapturingEmailSender();
+        await using var serviceProvider = BuildServiceProvider(connection, emailSender: emailSender);
         await using (var createScope = serviceProvider.CreateAsyncScope())
         {
             var service = createScope.ServiceProvider.GetRequiredService<ITeamMemberService>();
@@ -110,9 +114,18 @@ public sealed class TeamMemberCreateTransactionTests
         var permissionOverride = await verify.UserPermissionOverrides.AsNoTracking()
             .SingleAsync(permission => permission.UserId == user.Id);
         Assert.Equal("deleteSites", permissionOverride.PermissionKey);
+
+        var invite = await verify.TeamMemberInvites.AsNoTracking().SingleAsync();
+        Assert.Equal(user.Id, invite.UserId);
+        var sent = Assert.Single(emailSender.Messages);
+        Assert.Equal("taylor@example.com", sent.To);
+        Assert.Equal("You're invited to Seahaven", sent.Subject);
     }
 
-    private static ServiceProvider BuildServiceProvider(SqliteConnection connection, bool injectFailure = false)
+    private static ServiceProvider BuildServiceProvider(
+        SqliteConnection connection,
+        bool injectFailure = false,
+        CapturingEmailSender? emailSender = null)
     {
         var configuration = new ConfigurationBuilder().Build();
         var services = new ServiceCollection();
@@ -124,6 +137,7 @@ public sealed class TeamMemberCreateTransactionTests
         services.AddIdentity<ApplicationUser, IdentityRole>()
             .AddEntityFrameworkStores<ApplicationDbContext>()
             .AddDefaultTokenProviders();
+        services.AddSingleton<IEmailSender>(emailSender ?? new CapturingEmailSender());
         services.AddDataServices();
         services.AddBusinessServices(configuration);
 
diff --git a/SeaHavenIndustries.Tests/TeamMemberInviteRegistrationTests.cs b/SeaHavenIndustries.Tests/TeamMemberInviteRegistrationTests.cs
new file mode 100644
index 0000000..11632c4
--- /dev/null
+++ b/SeaHavenIndustries.Tests/TeamMemberInviteRegistrationTests.cs
@@ -0,0 +1,523 @@
+using System.Security.Cryptography;
+using System.Text;
+using System.Text.Json;
+using Api.SeaHavenIndustries.Controllers;
+using Data.SeaHavenIndustries;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Identity;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.DependencyInjection;
+using SeaHaven.DataServices.Interfaces;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Implementation;
+using SeaHaven.Services.Interfaces;
+
+namespace SeaHavenIndustries.Tests;
+
+public sealed class TeamMemberInviteRegistrationTests
+{
+    private const string Email = "taylor@example.com";
+    private const string Password = "Abc1!x";
+
+    [Fact]
+    public async Task CreatingPendingMember_EmailsHighEntropyInviteAndStoresOnlyItsHash()
+    {
+        await using var host = await TeamMemberInviteTestHost.CreateAsync();
+
+        var (userId, token) = await host.AddPendingMemberAsync(Email);
+
+        var invite = Assert.Single(await host.InvitesAsync(userId));
+        Assert.True(Base64UrlDecode(token).Length >= 16);
+        Assert.Equal(Sha256Hex(token), invite.TokenHash);
+        Assert.DoesNotContain(token, JsonSerializer.Serialize(invite));
+        Assert.Equal(host.Time.Now.UtcDateTime.AddDays(7), invite.ExpiresAt);
+        Assert.Null(invite.UsedAt);
+
+        var sent = Assert.Single(host.Sent.Messages);
+        Assert.Equal(Email, sent.To);
+        Assert.Contains($"{TeamMemberInviteTestHost.FrontendBaseUrl}/invite#{token}", sent.Body);
+    }
+
+    [Fact]
+    public async Task FullFlow_FromEmailedToken_ActivatesMemberConfirmsEmailAndSignsIn()
+    {
+        await using var host = await TeamMemberInviteTestHost.CreateAsync();
+        var (userId, token) = await host.AddPendingMemberAsync(Email, "Taylor Reed");
+
+        var resolved = await host.RegistrationAsync(service => service.ResolveAsync(token, CancellationToken.None));
+        Assert.Equal(TeamMemberRegistrationStatus.Ok, resolved.Status);
+        Assert.Equal("Taylor Reed", resolved.Details!.Name);
+        Assert.Equal("Dispatcher", resolved.Details.Role);
+        Assert.Equal(Email, resolved.Details.Email);
+
+        await host.ConfirmEmailAsync(token, Email);
+        var completed = await CompleteAsync(host, token, Password, "(555) 010-2000");
+
+        Assert.Equal(TeamMemberRegistrationStatus.Ok, completed.Status);
+        Assert.False(string.IsNullOrWhiteSpace(completed.Session!.Token));
+        Assert.Equal(Email, completed.Session.Email);
+        Assert.Equal(userId, completed.Session.Id);
+        Assert.Contains("Dispatcher", completed.Session.UserRole);
+
+        var user = await host.ReloadUserAsync(userId);
+        Assert.False(user.PendingRegistration);
+        Assert.True(user.EmailConfirmed);
+        Assert.Equal("Active", user.UniqueName);
+        Assert.Equal("(555) 010-2000", user.PhoneNumber);
+        Assert.Equal("(555) 010-2000", user.Contact);
+        Assert.True(await host.InScopeAsync(provider =>
+            provider.GetRequiredService<UserManager<ApplicationUser>>().CheckPasswordAsync(user, Password)));
+        Assert.NotNull(Assert.Single(await host.InvitesAsync(userId)).UsedAt);
+    }
+
+    [Fact]
+    public async Task UsedToken_CannotRegisterAgain()
+    {
+        await using var host = await TeamMemberInviteTestHost.CreateAsync();
+        var (_, token) = await host.AddPendingMemberAsync(Email);
+        await host.ConfirmEmailAsync(token, Email);
+        Assert.Equal(TeamMemberRegistrationStatus.Ok, (await CompleteAsync(host, token, Password)).Status);
+
+        Assert.Equal(TeamMemberRegistrationStatus.InvalidInvite,
+            (await host.RegistrationAsync(service => service.ResolveAsync(token, CancellationToken.None))).Status);
+        Assert.Equal(TeamMemberRegistrationStatus.InvalidInvite,
+            (await host.RegistrationAsync(service => service.SendCodeAsync(token, CancellationToken.None))).Status);
+        Assert.Equal(TeamMemberRegistrationStatus.InvalidInvite,
+            (await CompleteAsync(host, token, "Xyz9?q")).Status);
+    }
+
+    [Fact]
+    public async Task UnknownExpiredUsedRevokedAndDeactivatedInvites_GetTheSameGenericResponse()
+    {
+        await using var host = await TeamMemberInviteTestHost.CreateAsync();
+
+        var (_, used) = await host.AddPendingMemberAsync("used@example.com");
+        await host.ConfirmEmailAsync(used, "used@example.com");
+        Assert.Equal(TeamMemberRegistrationStatus.Ok, (await CompleteAsync(host, used, Password)).Status);
+
+        var (revokedUserId, revoked) = await host.AddPendingMemberAsync("revoked@example.com");
+        Assert.True((await ResendInviteAsync(host, revokedUserId)).Success);
+
+        var (deactivatedUserId, deactivated) = await host.AddPendingMemberAsync("deactivated@example.com");
+        await host.InScopeAsync(provider => provider.GetRequiredService<ApplicationDbContext>().Users
+            .Where(user => user.Id == deactivatedUserId)
+            .ExecuteUpdateAsync(setters => setters
+                .SetProperty(user => user.IsDeleted, true)
+                .SetProperty(user => user.UniqueName, "Inactive")));
+
+        var (_, expired) = await host.AddPendingMemberAsync("expired@example.com");
+
+        var responses = new List<string>
+        {
+            await ResolveResponseAsync(host, used),
+            await ResolveResponseAsync(host, revoked),
+            await ResolveResponseAsync(host, deactivated),
+            await ResolveResponseAsync(host, TeamMemberInviteSecretsForTests.UnknownToken()),
+            await ResolveResponseAsync(host, ""),
+            await ResolveResponseAsync(host, new string('a', 4096))
+        };
+        host.Time.Advance(TimeSpan.FromDays(7).Add(TimeSpan.FromSeconds(1)));
+        responses.Add(await ResolveResponseAsync(host, expired));
+
+        var expected =
+            "400 {\"code\":\"invalid_invite\",\"message\":\"This invite link is invalid or has expired. Ask your admin to send a new invite.\",\"retryAfterSeconds\":null}";
+        Assert.All(responses, response => Assert.Equal(expected, response));
+    }
+
+    [Fact]
+    public async Task Invite_ExpiresAfterSevenDays()
+    {
+        await using var host = await TeamMemberInviteTestHost.CreateAsync();
+        var (_, token) = await host.AddPendingMemberAsync(Email);
+
+        host.Time.Advance(TimeSpan.FromDays(7).Subtract(TimeSpan.FromSeconds(1)));
+        Assert.Equal(TeamMemberRegistrationStatus.Ok,
+            (await host.RegistrationAsync(service => service.ResolveAsync(token, CancellationToken.None))).Status);
+
+        host.Time.Advance(TimeSpan.FromSeconds(1));
+        Assert.Equal(TeamMemberRegistrationStatus.InvalidInvite,
+            (await host.RegistrationAsync(service => service.ResolveAsync(token, CancellationToken.None))).Status);
+    }
+
+    [Fact]
+    public async Task Code_IsSixDigitsAndStoredOnlyAsSaltedHash()
+    {
+        await using var host = await TeamMemberInviteTestHost.CreateAsync();
+        var (userId, token) = await host.AddPendingMemberAsync(Email);
+
+        var code = await host.SendCodeAsync(token, Email);
+
+        Assert.Matches("^[0-9]{6}$", code);
+        var invite = Assert.Single(await host.InvitesAsync(userId));
+        Assert.NotNull(invite.CodeHash);
+        Assert.NotNull(invite.CodeSalt);
+        Assert.NotEqual(code, invite.CodeHash);
+        Assert.DoesNotContain(code, invite.CodeHash);
+        Assert.Equal(Sha256Hex($"{invite.CodeSalt}:{code}"), invite.CodeHash);
+        Assert.Equal(host.Time.Now.UtcDateTime.AddMinutes(15), invite.CodeExpiresAt);
+    }
+
+    [Fact]
+    public async Task WrongCodes_AreCountedAndLockAfterFive_UntilANewCodeIsSent()
+    {
+        await using var host = await TeamMemberInviteTestHost.CreateAsync();
+        var (userId, token) = await host.AddPendingMemberAsync(Email);
+        var code = await host.SendCodeAsync(token, Email);
+        var wrong = code == "000000" ? "111111" : "000000";
+
+        for (var attempt = 1; attempt <= 4; attempt++)
+        {
+            var outcome = await VerifyAsync(host, token, wrong);
+            Assert.Equal(TeamMemberRegistrationStatus.CodeIncorrect, outcome.Status);
+            Assert.Equal(attempt, Assert.Single(await host.InvitesAsync(userId)).CodeFailedAttempts);
+        }
+
+        Assert.Equal(TeamMemberRegistrationStatus.CodeLocked, (await VerifyAsync(host, token, wrong)).Status);
+        Assert.Equal(TeamMemberRegistrationStatus.CodeLocked, (await VerifyAsync(host, token, code)).Status);
+        Assert.Equal(5, Assert.Single(await host.InvitesAsync(userId)).CodeFailedAttempts);
+        Assert.Null(Assert.Single(await host.InvitesAsync(userId)).EmailConfirmedAt);
+
+        host.Time.Advance(TeamMemberRegistrationService.ResendCooldown);
+        var fresh = await host.SendCodeAsync(token, Email);
+        Assert.Equal(TeamMemberRegistrationStatus.Ok, (await VerifyAsync(host, token, fresh)).Status);
+        Assert.NotNull(Assert.Single(await host.InvitesAsync(userId)).EmailConfirmedAt);
+    }
+
+    [Fact]
+    public async Task AttemptReservation_IsEnforcedByTheDatabaseGuard()
+    {
+        await using var host = await TeamMemberInviteTestHost.CreateAsync();
+        var (userId, token) = await host.AddPendingMemberAsync(Email);
+        await host.SendCodeAsync(token, Email);
+        var inviteId = Assert.Single(await host.InvitesAsync(userId)).Id;
+
+        var granted = 0;
+        for (var i = 0; i < 8; i++)
+        {
+            if (await host.InScopeAsync(provider => provider.GetRequiredService<ITeamMemberInviteDataService>()
+                    .TryReserveCodeAttemptAsync(inviteId, TeamMemberRegistrationService.MaxCodeAttempts, host.Time.Now.UtcDateTime, CancellationToken.None)))
+                granted++;
+        }
+
+        Assert.Equal(TeamMemberRegistrationService.MaxCodeAttempts, granted);
+    }
+
+    [Fact]
+    public async Task Code_ExpiresAfterFifteenMinutes()
+    {
+        await using var host = await TeamMemberInviteTestHost.CreateAsync();
+        var (_, token) = await host.AddPendingMemberAsync(Email);
+        var code = await host.SendCodeAsync(token, Email);
+
+        host.Time.Advance(TeamMemberRegistrationService.CodeLifetime);
+
+        Assert.Equal(TeamMemberRegistrationStatus.CodeExpired, (await VerifyAsync(host, token, code)).Status);
+    }
+
+    [Fact]
+    public async Task Resend_IsRateLimitedAndReplacesThePreviousCode()
+    {
+        await using var host = await TeamMemberInviteTestHost.CreateAsync();
+        var (_, token) = await host.AddPendingMemberAsync(Email);
+        var first = await host.SendCodeAsync(token, Email);
+
+        var tooSoon = await host.RegistrationAsync(service => service.SendCodeAsync(token, CancellationToken.None));
+        Assert.Equal(TeamMemberRegistrationStatus.ResendTooSoon, tooSoon.Status);
+        Assert.Equal(60, tooSoon.RetryAfterSeconds);
+
+        host.Time.Advance(TimeSpan.FromSeconds(45));
+        var stillTooSoon = await host.RegistrationAsync(service => service.SendCodeAsync(token, CancellationToken.None));
+        Assert.Equal(TeamMemberRegistrationStatus.ResendTooSoon, stillTooSoon.Status);
+        Assert.Equal(15, stillTooSoon.RetryAfterSeconds);
+        Assert.Single(host.Sent.Messages, message => message.Subject == "Your Seahaven confirmation code");
+
+        host.Time.Advance(TimeSpan.FromSeconds(15));
+        var second = await host.SendCodeAsync(token, Email);
+        if (second != first)
+            Assert.Equal(TeamMemberRegistrationStatus.CodeIncorrect, (await VerifyAsync(host, token, first)).Status);
+        Assert.Equal(TeamMemberRegistrationStatus.Ok, (await VerifyAsync(host, token, second)).Status);
+    }
+
+    [Fact]
+    public async Task Resend_StopsAfterTheSendLimit()
+    {
+        await using var host = await TeamMemberInviteTestHost.CreateAsync();
+        var (_, token) = await host.AddPendingMemberAsync(Email);
+
+        for (var send = 0; send < TeamMemberRegistrationService.MaxCodeSends; send++)
+        {
+            await host.SendCodeAsync(token, Email);
+            host.Time.Advance(TeamMemberRegistrationService.ResendCooldown);
+        }
+
+        var refused = await host.RegistrationAsync(service => service.SendCodeAsync(token, CancellationToken.None));
+        Assert.Equal(TeamMemberRegistrationStatus.ResendLimitReached, refused.Status);
+        Assert.Equal(TeamMemberRegistrationService.MaxCodeSends,
+            host.Sent.Messages.Count(message => message.Subject == "Your Seahaven confirmation code"));
+    }
+
+    [Fact]
+    public async Task Complete_RequiresConfirmedEmail()
+    {
+        await using var host = await TeamMemberInviteTestHost.CreateAsync();
+        var (userId, token) = await host.AddPendingMemberAsync(Email);
+        await host.SendCodeAsync(token, Email);
+
+        Assert.Equal(TeamMemberRegistrationStatus.EmailNotConfirmed, (await CompleteAsync(host, token, Password)).Status);
+
+        var user = await host.ReloadUserAsync(userId);
+        Assert.True(user.PendingRegistration);
+        Assert.Null(user.PasswordHash);
+    }
+
+    [Fact]
+    public async Task Complete_WeakPassword_RollsBackAndARetrySucceeds()
+    {
+        await using var host = await TeamMemberInviteTestHost.CreateAsync();
+        var (userId, token) = await host.AddPendingMemberAsync(Email);
+        await host.ConfirmEmailAsync(token, Email);
+
+        Assert.Equal(TeamMemberRegistrationStatus.PasswordRejected, (await CompleteAsync(host, token, "abc12!")).Status);
+
+        var pending = await host.ReloadUserAsync(userId);
+        Assert.True(pending.PendingRegistration);
+        Assert.False(pending.EmailConfirmed);
+        Assert.Null(pending.PasswordHash);
+        Assert.Null(Assert.Single(await host.InvitesAsync(userId)).UsedAt);
+
+        Assert.Equal(TeamMemberRegistrationStatus.Ok, (await CompleteAsync(host, token, Password)).Status);
+        Assert.False((await host.ReloadUserAsync(userId)).PendingRegistration);
+    }
+
+    [Fact]
+    public async Task Complete_InvalidPhone_IsRejectedWithoutConsumingTheInvite()
+    {
+        await using var host = await TeamMemberInviteTestHost.CreateAsync();
+        var (userId, token) = await host.AddPendingMemberAsync(Email);
+        await host.ConfirmEmailAsync(token, Email);
+
+        Assert.Equal(TeamMemberRegistrationStatus.InvalidPhone, (await CompleteAsync(host, token, Password, "call me")).Status);
+        Assert.Null(Assert.Single(await host.InvitesAsync(userId)).UsedAt);
+    }
+
+    [Fact]
+    public async Task Invite_OnlyEverChangesItsOwnMember()
+    {
+        await using var host = await TeamMemberInviteTestHost.CreateAsync();
+        var (ownerId, ownerToken) = await host.AddPendingMemberAsync(Email, "Taylor Reed");
+        var (otherId, otherToken) = await host.AddPendingMemberAsync("jordan@example.com", "Jordan Lee");
+        var otherBefore = await host.ReloadUserAsync(otherId);
+
+        await host.ConfirmEmailAsync(ownerToken, Email);
+        Assert.Equal(TeamMemberRegistrationStatus.Ok, (await CompleteAsync(host, ownerToken, Password, "555-123-4567")).Status);
+
+        Assert.DoesNotContain(host.Sent.Messages,
+            message => message.To == "jordan@example.com" && message.Subject == "Your Seahaven confirmation code");
+        var otherAfter = await host.ReloadUserAsync(otherId);
+        Assert.True(otherAfter.PendingRegistration);
+        Assert.False(otherAfter.EmailConfirmed);
+        Assert.Null(otherAfter.PasswordHash);
+        Assert.Equal(otherBefore.PhoneNumber, otherAfter.PhoneNumber);
+        Assert.Equal(otherBefore.SecurityStamp, otherAfter.SecurityStamp);
+        var otherInvite = Assert.Single(await host.InvitesAsync(otherId));
+        Assert.Null(otherInvite.UsedAt);
+        Assert.Null(otherInvite.EmailConfirmedAt);
+
+        var otherDetails = await host.RegistrationAsync(service => service.ResolveAsync(otherToken, CancellationToken.None));
+        Assert.Equal("Jordan Lee", otherDetails.Details!.Name);
+        Assert.False((await host.ReloadUserAsync(ownerId)).PendingRegistration);
+    }
+
+    [Fact]
+    public async Task Reinvite_RevokesOlderTokensAndOnlyAdminsCanSendIt()
+    {
+        await using var host = await TeamMemberInviteTestHost.CreateAsync();
+        var (userId, original) = await host.AddPendingMemberAsync(Email);
+
+        var forbidden = await host.InScopeAsync(provider => provider.GetRequiredService<ITeamMemberInviteService>()
+            .ResendAsync(userId, TeamMemberInviteTestHost.Dispatcher(), CancellationToken.None));
+        Assert.Equal("Forbidden", forbidden.Error);
+
+        Assert.True((await ResendInviteAsync(host, userId)).Success);
+        var replacement = host.Sent.LatestTokenFor(Email);
+
+        Assert.NotEqual(original, replacement);
+        Assert.Equal(TeamMemberRegistrationStatus.InvalidInvite,
+            (await host.RegistrationAsync(service => service.ResolveAsync(original, CancellationToken.None))).Status);
+        Assert.Equal(TeamMemberRegistrationStatus.Ok,
+            (await host.RegistrationAsync(service => service.ResolveAsync(replacement, CancellationToken.None))).Status);
+        var invites = await host.InvitesAsync(userId);
+        Assert.Equal(2, invites.Count);
+        Assert.NotNull(invites[0].RevokedAt);
+        Assert.Null(invites[1].RevokedAt);
+    }
+
+    [Fact]
+    public async Task Reinvite_IsRefusedOnceTheMemberIsActive()
+    {
+        await using var host = await TeamMemberInviteTestHost.CreateAsync();
+        var (userId, token) = await host.AddPendingMemberAsync(Email);
+        await host.ConfirmEmailAsync(token, Email);
+        Assert.Equal(TeamMemberRegistrationStatus.Ok, (await CompleteAsync(host, token, Password)).Status);
+
+        var refused = await ResendInviteAsync(host, userId);
+
+        Assert.False(refused.Success);
+        Assert.Equal("Only pending team members can be re-invited.", refused.Error);
+    }
+
+    [Fact]
+    public async Task TokensAndCodes_NeverReachTheLogs()
+    {
+        await using var host = await TeamMemberInviteTestHost.CreateAsync();
+        var (userId, token) = await host.AddPendingMemberAsync(Email);
+        var code = await host.SendCodeAsync(token, Email);
+        await VerifyAsync(host, token, code == "000000" ? "111111" : "000000");
+
+        host.Sent.Succeeds = false;
+        host.Time.Advance(TeamMemberRegistrationService.ResendCooldown);
+        Assert.Equal(TeamMemberRegistrationStatus.CodeDeliveryFailed,
+            (await host.RegistrationAsync(service => service.SendCodeAsync(token, CancellationToken.None))).Status);
+        Assert.False((await ResendInviteAsync(host, userId)).Success);
+        var failedInviteToken = host.Sent.LatestTokenFor(Email);
+        host.Sent.Succeeds = true;
+
+        Assert.True((await ResendInviteAsync(host, userId)).Success);
+        var liveToken = host.Sent.LatestTokenFor(Email);
+        await host.ConfirmEmailAsync(liveToken, Email);
+        var liveCode = host.Sent.LatestCodeFor(Email);
+        Assert.Equal(TeamMemberRegistrationStatus.Ok, (await CompleteAsync(host, liveToken, Password)).Status);
+
+        Assert.NotEmpty(host.Logged.Entries);
+        Assert.Contains(host.Logged.Entries, entry => entry.Contains("could not be sent", StringComparison.Ordinal));
+        foreach (var secret in new[] { token, failedInviteToken, liveToken, code, liveCode, Password })
+            Assert.DoesNotContain(host.Logged.Entries, entry => entry.Contains(secret, StringComparison.Ordinal));
+    }
+
+    [Fact]
+    public async Task RequestObjects_DoNotPrintTheirSecrets()
+    {
+        await using var host = await TeamMemberInviteTestHost.CreateAsync();
+        var (_, token) = await host.AddPendingMemberAsync(Email);
+
+        var printed = string.Join(" ",
+            new TeamMemberInviteTokenRequestDTO { Token = token }.ToString(),
+            new VerifyTeamMemberInviteCodeRequestDTO { Token = token, Code = "123456" }.ToString(),
+            new CompleteTeamMemberRegistrationRequestDTO { Token = token, Password = Password }.ToString(),
+            new IssuedTeamMemberInvite(token, DateTime.UtcNow).ToString());
+
+        Assert.DoesNotContain(token, printed);
+        Assert.DoesNotContain("123456", printed);
+        Assert.DoesNotContain(Password, printed);
+    }
+
+    [Fact]
+    public async Task CancelledRequests_StopBeforeChangingAnything()
+    {
+        await using var host = await TeamMemberInviteTestHost.CreateAsync();
+        var (userId, token) = await host.AddPendingMemberAsync(Email);
+        using var cancelled = new CancellationTokenSource();
+        await cancelled.CancelAsync();
+
+        await Assert.ThrowsAnyAsync<OperationCanceledException>(() =>
+            host.RegistrationAsync(service => service.SendCodeAsync(token, cancelled.Token)));
+        await Assert.ThrowsAnyAsync<OperationCanceledException>(() => host.RegistrationAsync(service =>
+            service.CompleteAsync(new CompleteTeamMemberRegistrationRequestDTO { Token = token, Password = Password }, cancelled.Token)));
+
+        Assert.DoesNotContain(host.Sent.Messages, message => message.Subject == "Your Seahaven confirmation code");
+        Assert.Equal(0, Assert.Single(await host.InvitesAsync(userId)).CodeSendCount);
+        Assert.True((await host.ReloadUserAsync(userId)).PendingRegistration);
+    }
+
+    [Fact]
+    public async Task Controller_MapsCodeFailuresToClearMessagesAndRetryAfter()
+    {
+        await using var host = await TeamMemberInviteTestHost.CreateAsync();
+        var (_, token) = await host.AddPendingMemberAsync(Email);
+        var code = await host.SendCodeAsync(token, Email);
+
+        var wrong = await InvokeControllerAsync(host, controller => controller.VerifyCode(
+            new VerifyTeamMemberInviteCodeRequestDTO { Token = token, Code = code == "000000" ? "111111" : "000000" },
+            CancellationToken.None));
+        Assert.Equal(
+            "400 {\"code\":\"code_incorrect\",\"message\":\"Incorrect code \\u2014 check your email and try again\",\"retryAfterSeconds\":null}",
+            wrong.Body);
+
+        var tooSoon = await InvokeControllerAsync(host, controller => controller.SendCode(
+            new TeamMemberInviteTokenRequestDTO { Token = token }, CancellationToken.None));
+        Assert.StartsWith("429 {\"code\":\"resend_too_soon\"", tooSoon.Body);
+        Assert.Equal("60", tooSoon.RetryAfter);
+    }
+
+    [Fact]
+    public async Task Controller_CompleteReturnsTheLoginPayloadShape()
+    {
+        await using var host = await TeamMemberInviteTestHost.CreateAsync();
+        var (userId, token) = await host.AddPendingMemberAsync(Email);
+        await host.ConfirmEmailAsync(token, Email);
+
+        var response = await InvokeControllerAsync(host, controller => controller.Complete(
+            new CompleteTeamMemberRegistrationRequestDTO { Token = token, Password = Password, Phone = "555-123-4567" },
+            CancellationToken.None));
+
+        Assert.StartsWith("200 ", response.Body);
+        using var payload = JsonDocument.Parse(response.Body[4..]);
+        var keys = payload.RootElement.EnumerateObject().Select(property => property.Name).ToArray();
+        Assert.Equal(new[] { "token", "expiration", "email", "userRoles", "phoneNumber", "fullname", "id" }, keys);
+        Assert.Equal(userId, payload.RootElement.GetProperty("id").GetString());
+        Assert.Equal("555-123-4567", payload.RootElement.GetProperty("phoneNumber").GetString());
+    }
+
+    private static Task<TeamMemberRegistrationOutcomeDTO> VerifyAsync(TeamMemberInviteTestHost host, string token, string code) =>
+        host.RegistrationAsync(service => service.VerifyCodeAsync(token, code, CancellationToken.None));
+
+    private static Task<TeamMemberRegistrationOutcomeDTO> CompleteAsync(
+        TeamMemberInviteTestHost host,
+        string token,
+        string password,
+        string? phone = null) =>
+        host.RegistrationAsync(service => service.CompleteAsync(
+            new CompleteTeamMemberRegistrationRequestDTO { Token = token, Password = password, Phone = phone },
+            CancellationToken.None));
+
+    private static Task<TeamMemberInviteResendOutcomeDTO> ResendInviteAsync(TeamMemberInviteTestHost host, string userId) =>
+        host.InScopeAsync(provider => provider.GetRequiredService<ITeamMemberInviteService>()
+            .ResendAsync(userId, TeamMemberInviteTestHost.Admin(), CancellationToken.None));
+
+    private static async Task<string> ResolveResponseAsync(TeamMemberInviteTestHost host, string token) =>
+        (await InvokeControllerAsync(host, controller => controller.Resolve(
+            new TeamMemberInviteTokenRequestDTO { Token = token }, CancellationToken.None))).Body;
+
+    private static Task<(string Body, string? RetryAfter)> InvokeControllerAsync(
+        TeamMemberInviteTestHost host,
+        Func<TeamMemberInviteController, Task<IActionResult>> action) =>
+        host.InScopeAsync(async provider =>
+        {
+            var httpContext = new DefaultHttpContext();
+            var controller = new TeamMemberInviteController(provider.GetRequiredService<ITeamMemberRegistrationService>())
+            {
+                ControllerContext = new ControllerContext { HttpContext = httpContext }
+            };
+            var result = Assert.IsAssignableFrom<ObjectResult>(await action(controller));
+            var status = result.StatusCode ?? StatusCodes.Status200OK;
+            var retryAfter = httpContext.Response.Headers.RetryAfter.ToString();
+            return ($"{status} {JsonSerializer.Serialize(result.Value)}", string.IsNullOrEmpty(retryAfter) ? null : retryAfter);
+        });
+
+    private static byte[] Base64UrlDecode(string value)
+    {
+        var padded = value.Replace('-', '+').Replace('_', '/');
+        padded += new string('=', (4 - padded.Length % 4) % 4);
+        return Convert.FromBase64String(padded);
+    }
+
+    private static string Sha256Hex(string value) =>
+        Convert.ToHexString(SHA256.HashData(Encoding.UTF8.GetBytes(value))).ToLowerInvariant();
+
+    private static class TeamMemberInviteSecretsForTests
+    {
+        public static string UnknownToken() =>
+            Convert.ToBase64String(RandomNumberGenerator.GetBytes(32)).TrimEnd('=').Replace('+', '-').Replace('/', '_');
+    }
+}
diff --git a/SeaHavenIndustries.Tests/TeamMemberInviteTestHost.cs b/SeaHavenIndustries.Tests/TeamMemberInviteTestHost.cs
new file mode 100644
index 0000000..e1d6f9e
--- /dev/null
+++ b/SeaHavenIndustries.Tests/TeamMemberInviteTestHost.cs
@@ -0,0 +1,258 @@
+using System.Collections.Concurrent;
+using System.Security.Claims;
+using System.Text.RegularExpressions;
+using Api.SeaHavenIndustries.Infrastructure;
+using Data.SeaHavenIndustries;
+using Microsoft.Data.Sqlite;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Metadata;
+using Microsoft.Extensions.Configuration;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.DependencyInjection.Extensions;
+using Microsoft.Extensions.Logging;
+using SeaHaven.DataServices.DependencyInjection;
+using SeaHaven.Services.DependencyInjection;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Interfaces;
+
+namespace SeaHavenIndustries.Tests;
+
+/// <summary>
+/// A SQLite-backed composition of the real team member, invite and registration
+/// services, with Identity registered exactly as the API host registers it. Email
+/// goes to an in-memory sender and every log line is captured.
+/// </summary>
+internal sealed class TeamMemberInviteTestHost : IAsyncDisposable
+{
+    public const string FrontendBaseUrl = "https://shoc.test";
+
+    private readonly SqliteConnection _connection;
+    private ServiceProvider _provider = null!;
+
+    private TeamMemberInviteTestHost(SqliteConnection connection)
+    {
+        _connection = connection;
+    }
+
+    public CapturingEmailSender Sent { get; } = new();
+    public ManualTimeProvider Time { get; } = new();
+    public CapturingLoggerProvider Logged { get; } = new();
+
+    public static async Task<TeamMemberInviteTestHost> CreateAsync()
+    {
+        var connection = new SqliteConnection("Data Source=:memory:;Foreign Keys=True");
+        await connection.OpenAsync();
+
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>().UseSqlite(connection).Options;
+        await using (var setup = new SqliteInviteTestDbContext(options))
+            await setup.Database.EnsureCreatedAsync();
+
+        var host = new TeamMemberInviteTestHost(connection);
+        host._provider = BuildProvider(connection, host);
+        return host;
+    }
+
+    private static ServiceProvider BuildProvider(SqliteConnection connection, TeamMemberInviteTestHost fakes)
+    {
+        var configuration = new ConfigurationBuilder()
+            .AddInMemoryCollection(new Dictionary<string, string?>
+            {
+                ["FrontendBaseUrl"] = FrontendBaseUrl,
+                ["JWT:Secret"] = new string('k', 64),
+                ["JWT:ValidIssuer"] = "issuer",
+                ["JWT:ValidAudience"] = "audience"
+            })
+            .Build();
+
+        var services = new ServiceCollection();
+        services.AddLogging(logging => logging
+            .SetMinimumLevel(LogLevel.Trace)
+            .AddProvider(fakes.Logged));
+        services.AddDbContext<ApplicationDbContext>(builder => builder.UseSqlite(connection));
+        services.Replace(ServiceDescriptor.Scoped<ApplicationDbContext>(provider =>
+            new SqliteInviteTestDbContext(provider.GetRequiredService<DbContextOptions<ApplicationDbContext>>())));
+        services.AddSeaHavenIdentity();
+        services.AddSingleton<TimeProvider>(fakes.Time);
+        services.AddSingleton<IEmailSender>(fakes.Sent);
+        services.AddDataServices();
+        services.AddBusinessServices(configuration);
+        return services.BuildServiceProvider();
+    }
+
+    public async Task<T> InScopeAsync<T>(Func<IServiceProvider, Task<T>> action)
+    {
+        await using var scope = _provider.CreateAsyncScope();
+        return await action(scope.ServiceProvider);
+    }
+
+    public Task<TeamMemberRegistrationOutcomeDTO> RegistrationAsync(
+        Func<ITeamMemberRegistrationService, Task<TeamMemberRegistrationOutcomeDTO>> action) =>
+        InScopeAsync(provider => action(provider.GetRequiredService<ITeamMemberRegistrationService>()));
+
+    /// <summary>Creates a pending member through the admin create path and returns the emailed token.</summary>
+    public async Task<(string UserId, string Token)> AddPendingMemberAsync(string email, string name = "Taylor Reed")
+    {
+        var outcome = await InScopeAsync(provider => provider.GetRequiredService<ITeamMemberService>().CreateAsync(
+            new CreateTeamMemberRequestDTO
+            {
+                Name = name,
+                Role = "dispatcher",
+                Color = "#0D9488",
+                Email = email,
+                Phone = "555-0100",
+                ServiceAreas = new[] { "East" }
+            },
+            Admin(),
+            CancellationToken.None));
+        Assert.True(outcome.Success, outcome.Error);
+
+        return (outcome.Member!.Id, Sent.LatestTokenFor(email));
+    }
+
+    public async Task<string> SendCodeAsync(string token, string email)
+    {
+        var outcome = await RegistrationAsync(service => service.SendCodeAsync(token, CancellationToken.None));
+        Assert.Equal(TeamMemberRegistrationStatus.Ok, outcome.Status);
+        return Sent.LatestCodeFor(email);
+    }
+
+    public async Task ConfirmEmailAsync(string token, string email)
+    {
+        var code = await SendCodeAsync(token, email);
+        var verified = await RegistrationAsync(service => service.VerifyCodeAsync(token, code, CancellationToken.None));
+        Assert.Equal(TeamMemberRegistrationStatus.Ok, verified.Status);
+    }
+
+    public Task<ApplicationUser> ReloadUserAsync(string userId) =>
+        InScopeAsync(async provider => await provider.GetRequiredService<ApplicationDbContext>()
+            .Users.AsNoTracking().SingleAsync(user => user.Id == userId));
+
+    public Task<List<TeamMemberInvite>> InvitesAsync(string userId) =>
+        InScopeAsync(provider => provider.GetRequiredService<ApplicationDbContext>()
+            .TeamMemberInvites.AsNoTracking().Where(invite => invite.UserId == userId)
+            .OrderBy(invite => invite.Id).ToListAsync());
+
+    public static ClaimsPrincipal Admin() =>
+        new(new ClaimsIdentity(new[] { new Claim(ClaimTypes.Role, "Admin") }, "Test"));
+
+    public static ClaimsPrincipal Dispatcher() =>
+        new(new ClaimsIdentity(new[] { new Claim(ClaimTypes.Role, "Dispatcher") }, "Test"));
+
+    public async ValueTask DisposeAsync()
+    {
+        await _provider.DisposeAsync();
+        await _connection.DisposeAsync();
+    }
+
+    private sealed class SqliteInviteTestDbContext : ApplicationDbContext
+    {
+        public SqliteInviteTestDbContext(DbContextOptions<ApplicationDbContext> options) : base(options)
+        {
+        }
+
+        protected override void OnModelCreating(ModelBuilder builder)
+        {
+            base.OnModelCreating(builder);
+
+            // Keep filtered unique indexes filtered: translate SQL Server identifier quoting.
+            foreach (var index in builder.Model.GetEntityTypes().SelectMany(entity => entity.GetIndexes()))
+            {
+                if (index.GetFilter() is { } filter)
+                    index.SetFilter(filter.Replace('[', '"').Replace(']', '"'));
+            }
+
+            foreach (var property in builder.Model.GetEntityTypes()
+                         .SelectMany(entity => entity.GetProperties())
+                         .Where(property => property.Name == "RowVersion" && property.ClrType == typeof(byte[])))
+            {
+                property.ValueGenerated = ValueGenerated.Never;
+                property.IsConcurrencyToken = false;
+            }
+        }
+    }
+}
+
+internal sealed partial class CapturingEmailSender : IEmailSender
+{
+    private readonly ConcurrentQueue<SentEmail> _messages = new();
+
+    public bool Succeeds { get; set; } = true;
+
+    public IReadOnlyList<SentEmail> Messages => _messages.ToArray();
+
+    public Task<bool> SendEmailAsync(string emailTo, string subject, string body)
+    {
+        _messages.Enqueue(new SentEmail(emailTo, subject, body));
+        return Task.FromResult(Succeeds);
+    }
+
+    public string LatestTokenFor(string email)
+    {
+        var message = Messages.Last(sent => sent.To == email && sent.Subject == "You're invited to Seahaven");
+        return InviteLink().Match(message.Body).Groups["token"].Value;
+    }
+
+    public string LatestCodeFor(string email)
+    {
+        var message = Messages.Last(sent => sent.To == email && sent.Subject == "Your Seahaven confirmation code");
+        return Code().Match(message.Body).Groups["code"].Value;
+    }
+
+    [GeneratedRegex("https://shoc\\.test/invite#(?<token>[A-Za-z0-9_-]+)")]
+    public static partial Regex InviteLink();
+
+    [GeneratedRegex("<strong>(?<code>[0-9]{6})</strong>")]
+    private static partial Regex Code();
+}
+
+internal sealed record SentEmail(string To, string Subject, string Body);
+
+internal sealed class ManualTimeProvider : TimeProvider
+{
+    public DateTimeOffset Now { get; private set; } = new(2026, 9, 25, 12, 0, 0, TimeSpan.Zero);
+
+    public override DateTimeOffset GetUtcNow() => Now;
+
+    public void Advance(TimeSpan by) => Now = Now.Add(by);
+}
+
+internal sealed class CapturingLoggerProvider : ILoggerProvider
+{
+    private readonly ConcurrentQueue<string> _entries = new();
+
+    public IReadOnlyList<string> Entries => _entries.ToArray();
+
+    public ILogger CreateLogger(string categoryName) => new CapturingLogger(_entries);
+
+    public void Dispose()
+    {
+    }
+
+    private sealed class CapturingLogger : ILogger
+    {
+        private readonly ConcurrentQueue<string> _entries;
+
+        public CapturingLogger(ConcurrentQueue<string> entries) => _entries = entries;
+
+        public IDisposable? BeginScope<TState>(TState state) where TState : notnull
+        {
+            _entries.Enqueue(state.ToString() ?? "");
+            return null;
+        }
+
+        public bool IsEnabled(LogLevel logLevel) => true;
+
+        public void Log<TState>(
+            LogLevel logLevel,
+            EventId eventId,
+            TState state,
+            Exception? exception,
+            Func<TState, Exception?, string> formatter)
+        {
+            var values = state is IEnumerable<KeyValuePair<string, object?>> pairs
+                ? string.Join(" ", pairs.Select(pair => $"{pair.Key}={pair.Value}"))
+                : "";
+            _entries.Enqueue($"{formatter(state, exception)} {values} {exception}");
+        }
+    }
+}

From 92dabbfbe3101230fc33a40a19195b3360111a48 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 11:53:29 -0300
Subject: [PATCH 142/183] Hide deleted sites from every location read; require
 the Add Site fields on create

- Legacy reads (by id, all, by client, paged, address book, exists, count) and the vendor
  preference site check now skip tombstoned sites
- Create requires a client, street address, city, state and at least one complete contact
---
 .../LocationServiceTests.cs                   | 35 ++++++++---
 .../LocationSiteContactsTests.cs              | 45 ++++++++++----
 .../SiteRegistryServiceTests.cs               | 62 +++++++++++++++++--
 .../Implementation/LocationDataService.cs     | 16 ++---
 .../VendorOperationsDataService.cs            |  2 +-
 .../Implementation/LocationService.cs         | 25 ++++++--
 6 files changed, 149 insertions(+), 36 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/LocationServiceTests.cs b/Api.SeaHavenIndustries.Tests/LocationServiceTests.cs
index dbf05cb..2a3f17c 100644
--- a/Api.SeaHavenIndustries.Tests/LocationServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/LocationServiceTests.cs
@@ -15,6 +15,27 @@ namespace Api.SeaHavenIndustries.Tests;
 
 public class LocationServiceTests
 {
+    /// <summary>Fills the fields a new site must carry (client, address, one contact) unless the test set them.</summary>
+    private static LocationCreateRequestDTO WithSiteFields(ApplicationDbContext ctx, LocationCreateRequestDTO request)
+    {
+        if (request.AccountId == null)
+        {
+            if (!ctx.Accounts.Any(a => a.Id == 7))
+            {
+                ctx.Accounts.Add(new Accounts { Id = 7, Name = "Customer", IsDeleted = false });
+                ctx.SaveChanges();
+            }
+
+            request.AccountId = 7;
+        }
+
+        request.Address ??= "1 Depot Rd";
+        request.City ??= "Dallas";
+        request.State ??= "TX";
+        request.Contacts ??= new List<SiteContactRequestDTO> { new() { Name = "Main", Phone = "555-0100" } };
+        return request;
+    }
+
     private static ApplicationDbContext NewContext()
     {
         var options = new DbContextOptionsBuilder<ApplicationDbContext>()
@@ -85,7 +106,7 @@ public class LocationServiceTests
         SeedAccount(ctx, 9);
         var service = NewService(ctx);
 
-        await service.CreateLocationFromRequestAsync(new LocationCreateRequestDTO
+        await service.CreateLocationFromRequestAsync(WithSiteFields(ctx, new LocationCreateRequestDTO
         {
             Name = "Warehouse",
             Title = "Main WH",
@@ -97,7 +118,7 @@ public class LocationServiceTests
             ContactEmail = "wh@example.com",
             Status = "Active",
             AccountId = 9
-        }, OrgWideAdmin(), CancellationToken.None);
+        }), OrgWideAdmin(), CancellationToken.None);
 
         var entity = ctx.Locations.Single();
         entity.Name.Should().Be("Warehouse");
@@ -390,7 +411,7 @@ public class LocationServiceTests
         using var ctx = NewContext();
 
         var act = () => NewService(ctx).CreateLocationFromRequestAsync(
-            new LocationCreateRequestDTO { Name = "Warehouse", AccountId = 404 },
+            WithSiteFields(ctx, new LocationCreateRequestDTO { Name = "Warehouse", AccountId = 404 }),
             OrgWideAdmin(),
             CancellationToken.None);
 
@@ -406,7 +427,7 @@ public class LocationServiceTests
         ctx.SaveChanges();
 
         var act = () => NewService(ctx).CreateLocationFromRequestAsync(
-            new LocationCreateRequestDTO { Name = "Warehouse", AccountId = 9 },
+            WithSiteFields(ctx, new LocationCreateRequestDTO { Name = "Warehouse", AccountId = 9 }),
             OrgWideAdmin(),
             CancellationToken.None);
 
@@ -422,7 +443,7 @@ public class LocationServiceTests
         SeedAccount(ctx, 99);
 
         var act = () => NewService(ctx).CreateLocationFromRequestAsync(
-            new LocationCreateRequestDTO { Name = "Site", AccountId = 99 },
+            WithSiteFields(ctx, new LocationCreateRequestDTO { Name = "Site", AccountId = 99 }),
             AccountUser(4),
             CancellationToken.None);
 
@@ -457,7 +478,7 @@ public class LocationServiceTests
         SeedAccount(ctx, 9);
 
         var act = () => NewService(ctx).CreateLocationFromRequestAsync(
-            new LocationCreateRequestDTO { Name = "Site", AccountId = 9 },
+            WithSiteFields(ctx, new LocationCreateRequestDTO { Name = "Site", AccountId = 9 }),
             MissingScope(),
             CancellationToken.None);
 
@@ -487,7 +508,7 @@ public class LocationServiceTests
         using var cts = new CancellationTokenSource();
 
         await service.CreateLocationFromRequestAsync(
-            new LocationCreateRequestDTO { Name = "Site", AccountId = 9 },
+            WithSiteFields(ctx, new LocationCreateRequestDTO { Name = "Site", AccountId = 9 }),
             OrgWideAdmin(),
             cts.Token);
 
diff --git a/Api.SeaHavenIndustries.Tests/LocationSiteContactsTests.cs b/Api.SeaHavenIndustries.Tests/LocationSiteContactsTests.cs
index 5e64489..b366331 100644
--- a/Api.SeaHavenIndustries.Tests/LocationSiteContactsTests.cs
+++ b/Api.SeaHavenIndustries.Tests/LocationSiteContactsTests.cs
@@ -22,6 +22,27 @@ namespace Api.SeaHavenIndustries.Tests;
 
 public class LocationSiteContactsTests
 {
+    /// <summary>Fills the fields a new site must carry (client, address, one contact) unless the test set them.</summary>
+    private static LocationCreateRequestDTO WithSiteFields(ApplicationDbContext ctx, LocationCreateRequestDTO request)
+    {
+        if (request.AccountId == null)
+        {
+            if (!ctx.Accounts.Any(a => a.Id == 7))
+            {
+                ctx.Accounts.Add(new Accounts { Id = 7, Name = "Customer", IsDeleted = false });
+                ctx.SaveChanges();
+            }
+
+            request.AccountId = 7;
+        }
+
+        request.Address ??= "1 Depot Rd";
+        request.City ??= "Dallas";
+        request.State ??= "TX";
+        request.Contacts ??= new List<SiteContactRequestDTO> { new() { Name = "Main", Phone = "555-0100" } };
+        return request;
+    }
+
     private static ApplicationDbContext NewContext()
     {
         var options = new DbContextOptionsBuilder<ApplicationDbContext>()
@@ -53,7 +74,7 @@ public class LocationSiteContactsTests
     private static async Task<Locations> SeedLocationWithContactsAsync(ApplicationDbContext ctx)
     {
         var service = NewService(ctx);
-        await service.CreateLocationFromRequestAsync(new LocationCreateRequestDTO
+        await service.CreateLocationFromRequestAsync(WithSiteFields(ctx, new LocationCreateRequestDTO
         {
             Name = "Depot",
             Phone = "555-9000",
@@ -63,7 +84,7 @@ public class LocationSiteContactsTests
                 new() { Name = " Alice Cooper ", Phone = " 555-0100 " },
                 new() { Name = "Bob Dillon", Phone = "555-0200"}
             }
-        }, OrgWideAdmin(), CancellationToken.None);
+        }), OrgWideAdmin(), CancellationToken.None);
         return ctx.Locations.Include(l => l.Contacts).Single();
     }
 
@@ -74,7 +95,7 @@ public class LocationSiteContactsTests
         ctx.Accounts.Add(new Accounts { Id = 7, Name = "Customer", IsDeleted = false });
         await ctx.SaveChangesAsync();
 
-        await NewService(ctx).CreateLocationFromRequestAsync(new LocationCreateRequestDTO
+        await NewService(ctx).CreateLocationFromRequestAsync(WithSiteFields(ctx, new LocationCreateRequestDTO
         {
             Name = "Warehouse",
             AccountId = 7,
@@ -83,7 +104,7 @@ public class LocationSiteContactsTests
                 new() { Name = " Alice Cooper ", Phone = " 555-0100 " },
                 new() { Name = "Bob Dillon", Phone = "555-0200" }
             }
-        }, OrgWideAdmin(), CancellationToken.None);
+        }), OrgWideAdmin(), CancellationToken.None);
 
         var location = ctx.Locations.Include(l => l.Contacts).Single();
         location.PhoneNumber.Should().BeNull("Site Phone is independent of the contacts");
@@ -107,11 +128,11 @@ public class LocationSiteContactsTests
     {
         using var ctx = NewContext();
 
-        var act = () => NewService(ctx).CreateLocationFromRequestAsync(new LocationCreateRequestDTO
+        var act = () => NewService(ctx).CreateLocationFromRequestAsync(WithSiteFields(ctx, new LocationCreateRequestDTO
         {
             Name = "Warehouse",
             Contacts = new List<SiteContactRequestDTO>()
-        }, OrgWideAdmin(), CancellationToken.None);
+        }), OrgWideAdmin(), CancellationToken.None);
 
         (await act.Should().ThrowAsync<FluentValidation.ValidationException>())
             .Which.Errors.Should().ContainSingle(e => e.PropertyName == "Contacts");
@@ -130,11 +151,11 @@ public class LocationSiteContactsTests
         using var ctx = NewContext();
         var contacts = new List<SiteContactRequestDTO> { new() { Name = name, Phone = phone } };
 
-        var act = () => NewService(ctx).CreateLocationFromRequestAsync(new LocationCreateRequestDTO
+        var act = () => NewService(ctx).CreateLocationFromRequestAsync(WithSiteFields(ctx, new LocationCreateRequestDTO
         {
             Name = "Warehouse",
             Contacts = contacts
-        }, OrgWideAdmin(), CancellationToken.None);
+        }), OrgWideAdmin(), CancellationToken.None);
 
         if (expectedError == null)
         {
@@ -151,14 +172,14 @@ public class LocationSiteContactsTests
     {
         using var ctx = NewContext();
 
-        var act = () => NewService(ctx).CreateLocationFromRequestAsync(new LocationCreateRequestDTO
+        var act = () => NewService(ctx).CreateLocationFromRequestAsync(WithSiteFields(ctx, new LocationCreateRequestDTO
         {
             Name = "Warehouse",
             Contacts = new List<SiteContactRequestDTO>
             {
                 new() { Name = new string('x', 101), Phone = new string('5', 21) }
             }
-        }, OrgWideAdmin(), CancellationToken.None);
+        }), OrgWideAdmin(), CancellationToken.None);
 
         var thrown = (await act.Should().ThrowAsync<FluentValidation.ValidationException>()).Which;
         thrown.Errors.Should().Contain(e => e.ErrorMessage.Contains("cannot exceed 100"));
@@ -173,11 +194,11 @@ public class LocationSiteContactsTests
             .Select(i => new SiteContactRequestDTO { Name = $"C{i}", Phone = "555-0100" })
             .ToList();
 
-        var act = () => NewService(ctx).CreateLocationFromRequestAsync(new LocationCreateRequestDTO
+        var act = () => NewService(ctx).CreateLocationFromRequestAsync(WithSiteFields(ctx, new LocationCreateRequestDTO
         {
             Name = "Warehouse",
             Contacts = contacts
-        }, OrgWideAdmin(), CancellationToken.None);
+        }), OrgWideAdmin(), CancellationToken.None);
 
         (await act.Should().ThrowAsync<FluentValidation.ValidationException>())
             .Which.Errors.Should().ContainSingle(e => e.ErrorMessage.Contains("cannot exceed 20"));
diff --git a/Api.SeaHavenIndustries.Tests/SiteRegistryServiceTests.cs b/Api.SeaHavenIndustries.Tests/SiteRegistryServiceTests.cs
index 5e8c18c..c5a718f 100644
--- a/Api.SeaHavenIndustries.Tests/SiteRegistryServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/SiteRegistryServiceTests.cs
@@ -423,13 +423,15 @@ public class SiteRegistryServiceTests
         using var cts = new CancellationTokenSource();
         var token = cts.Token;
         var data = new Mock<ILocationDataService>();
-        data.Setup(d => d.SiteCodeExistsAsync("BK5", null, null, token)).ReturnsAsync(true);
-        var service = NewService(data.Object, Mock.Of<IAccountDataService>());
+        data.Setup(d => d.SiteCodeExistsAsync("BK5", 1, null, token)).ReturnsAsync(true);
+        var accounts = new Mock<IAccountDataService>();
+        accounts.Setup(a => a.ExistsActiveAsync(1, token)).ReturnsAsync(true);
+        var service = NewService(data.Object, accounts.Object);
 
-        var act = () => service.CreateLocationFromRequestAsync(CreateRequest("BK5", null), OrgWide(), token);
+        var act = () => service.CreateLocationFromRequestAsync(CreateRequest("BK5", 1), OrgWide(), token);
 
         await act.Should().ThrowAsync<SiteCodeConflictException>();
-        data.Verify(d => d.SiteCodeExistsAsync("BK5", null, null, token), Times.Once);
+        data.Verify(d => d.SiteCodeExistsAsync("BK5", 1, null, token), Times.Once);
     }
 
     [Fact]
@@ -446,4 +448,56 @@ public class SiteRegistryServiceTests
         using var frozen = JsonDocument.Parse(workOrder.FrozenPoc!);
         frozen.RootElement.GetProperty("notes").GetString().Should().Be("Gate code 4411");
     }
+
+    public static TheoryData<string, Action<LocationCreateRequestDTO>, string> MissingSiteFields => new()
+    {
+        { "no client", r => r.AccountId = null, "Client is required." },
+        { "no street address", r => r.Address = "  ", "Street Address is required." },
+        { "no city", r => r.City = null, "City is required." },
+        { "no state", r => r.State = "", "State is required." },
+        { "no contacts list", r => r.Contacts = null, "At least one contact is required." },
+        { "empty contacts list", r => r.Contacts = new List<SiteContactRequestDTO>(), "At least one contact is required." },
+        { "contact without phone", r => r.Contacts = new List<SiteContactRequestDTO> { new() { Name = "Main", Phone = " " } }, "Contact phone is required." }
+    };
+
+    [Theory]
+    [MemberData(nameof(MissingSiteFields))]
+    public async Task Create_WithoutARequiredSiteField_IsAValidationErrorAndStoresNothing(
+        string _,
+        Action<LocationCreateRequestDTO> strip,
+        string expectedMessage)
+    {
+        using var ctx = NewContext();
+        SeedAccounts(ctx, 1);
+        var request = CreateRequest("BK9", 1);
+        strip(request);
+
+        var act = () => NewService(ctx).CreateLocationFromRequestAsync(request, OrgWide(), CancellationToken.None);
+
+        (await act.Should().ThrowAsync<FluentValidation.ValidationException>())
+            .Which.Errors.Should().Contain(e => e.ErrorMessage == expectedMessage);
+        ctx.Locations.Should().BeEmpty();
+    }
+
+    [Fact]
+    public async Task Delete_RemovesTheSiteFromEveryLegacyRead()
+    {
+        using var ctx = NewContext();
+        SeedAccounts(ctx, 1);
+        var deleted = SeedSite(ctx, "BK5", 1);
+        var kept = SeedSite(ctx, "BK6", 1);
+        var service = NewService(ctx);
+
+        (await service.DeleteLocationByIdAsync(deleted.Id, OrgWide(), CancellationToken.None)).Should().BeTrue();
+
+        (await service.GetLocationByIdAsync(deleted.Id)).Should().BeNull();
+        (await service.GetLocationByIdWithDetailsAsync(deleted.Id)).Should().BeNull();
+        (await service.LocationExistsAsync(deleted.Id)).Should().BeFalse();
+        (await service.GetTotalLocationCountAsync()).Should().Be(1);
+        (await service.GetAllLocationsAsync()).Select(l => l.Id).Should().Equal(kept.Id);
+        (await service.GetLocationsByAccountIdAsync(1)).Select(l => l.Id).Should().Equal(kept.Id);
+        (await service.GetLocationsPagedAsync(1, 10)).Items.Select(l => l.Id).Should().Equal(kept.Id);
+        (await new LocationDataService(ctx).GetAddressbookPagedAsync(1, 10)).TotalCount.Should().Be(1);
+        (await new VendorOperationsDataService(ctx, Mock.Of<IDispatchDataService>()).LocationExistsAsync(deleted.Id, CancellationToken.None)).Should().BeFalse();
+    }
 }
diff --git a/SeaHaven.DataServices/Implementation/LocationDataService.cs b/SeaHaven.DataServices/Implementation/LocationDataService.cs
index d1553a2..5215e0e 100644
--- a/SeaHaven.DataServices/Implementation/LocationDataService.cs
+++ b/SeaHaven.DataServices/Implementation/LocationDataService.cs
@@ -17,25 +17,25 @@ namespace SeaHaven.DataServices.Implementation
 
         public async Task<Locations?> GetByIdAsync(int id)
         {
-            return await _context.Locations.FindAsync(id);
+            return await _context.Locations.FirstOrDefaultAsync(l => l.Id == id && l.IsDeleted != true);
         }
 
         public async Task<Locations?> GetByIdWithDetailsAsync(int id)
         {
             return await _context.Locations
-                .FirstOrDefaultAsync(l => l.Id == id);
+                .FirstOrDefaultAsync(l => l.Id == id && l.IsDeleted != true);
         }
 
         public async Task<IEnumerable<Locations>> GetAllAsync()
         {
-            return await _context.Locations.ToListAsync();
+            return await _context.Locations.Where(l => l.IsDeleted != true).ToListAsync();
         }
 
         public async Task<IEnumerable<Locations>> GetByAccountIdAsync(int accountId)
         {
             return await _context.Locations
                 .AsNoTracking()
-                .Where(l => l.AccountId == accountId)
+                .Where(l => l.AccountId == accountId && l.IsDeleted != true)
                 .ToListAsync();
         }
 
@@ -57,7 +57,7 @@ namespace SeaHaven.DataServices.Implementation
             int pageSize,
             string? search = null)
         {
-            var query = _context.Locations.AsQueryable();
+            var query = _context.Locations.Where(l => l.IsDeleted != true);
 
             if (!string.IsNullOrWhiteSpace(search))
             {
@@ -125,12 +125,12 @@ namespace SeaHaven.DataServices.Implementation
 
         public async Task<bool> ExistsAsync(int id)
         {
-            return await _context.Locations.AnyAsync(l => l.Id == id);
+            return await _context.Locations.AnyAsync(l => l.Id == id && l.IsDeleted != true);
         }
 
         public async Task<int> CountAsync()
         {
-            return await _context.Locations.CountAsync();
+            return await _context.Locations.CountAsync(l => l.IsDeleted != true);
         }
 
         public async Task<(List<Locations> Items, int TotalCount)> GetListPagedAsync(
@@ -313,7 +313,7 @@ namespace SeaHaven.DataServices.Implementation
         {
             search ??= "";
 
-            var query = _context.Locations.AsQueryable();
+            var query = _context.Locations.Where(l => l.IsDeleted != true);
 
             if (!string.IsNullOrWhiteSpace(search))
             {
diff --git a/SeaHaven.DataServices/Implementation/VendorOperationsDataService.cs b/SeaHaven.DataServices/Implementation/VendorOperationsDataService.cs
index 4fabfba..1ae72ac 100644
--- a/SeaHaven.DataServices/Implementation/VendorOperationsDataService.cs
+++ b/SeaHaven.DataServices/Implementation/VendorOperationsDataService.cs
@@ -150,7 +150,7 @@ namespace SeaHaven.DataServices.Implementation
         }
 
         public Task<bool> LocationExistsAsync(int locationId, CancellationToken cancellationToken)
-            => _context.Locations.AnyAsync(location => location.Id == locationId, cancellationToken);
+            => _context.Locations.AnyAsync(location => location.Id == locationId && location.IsDeleted != true, cancellationToken);
 
         public async Task<Dictionary<int, Vendor>> GetVendorsByIdsAsync(IReadOnlyCollection<int> vendorIds, CancellationToken cancellationToken)
             => await _context.Vendors.Where(vendor => vendorIds.Contains(vendor.Id))
diff --git a/SeaHaven.Services/Implementation/LocationService.cs b/SeaHaven.Services/Implementation/LocationService.cs
index bc1772a..fabeb97 100644
--- a/SeaHaven.Services/Implementation/LocationService.cs
+++ b/SeaHaven.Services/Implementation/LocationService.cs
@@ -273,6 +273,7 @@ namespace SeaHaven.Services.Implementation
             CancellationToken cancellationToken)
         {
             await EnsureAccountAssignableAsync(user, request.AccountId, existingLocationAccountId: null, cancellationToken);
+            ThrowOnMissingSiteFields(request);
 
             var siteCode = request.Name?.Trim();
             if (string.IsNullOrEmpty(siteCode))
@@ -300,10 +301,7 @@ namespace SeaHaven.Services.Implementation
                 Notes = NormalizeNotes(request.Notes)
             };
 
-            if (request.Contacts is List<SiteContactRequestDTO> contacts)
-            {
-                ApplySiteContactsForCreate(location, contacts, GetActorId(user));
-            }
+            ApplySiteContactsForCreate(location, request.Contacts!, GetActorId(user));
 
             await _locationDataService.AddAsync(location, cancellationToken);
         }
@@ -548,6 +546,25 @@ namespace SeaHaven.Services.Implementation
         private static string? GetActorId(ClaimsPrincipal user) =>
             user.FindFirst(ClaimTypes.NameIdentifier)?.Value;
 
+        /// <summary>A new site needs a client, a full address and at least one point of contact.</summary>
+        private static void ThrowOnMissingSiteFields(LocationCreateRequestDTO request)
+        {
+            var failures = new List<ValidationFailure>();
+            if (request.AccountId == null)
+                failures.Add(new ValidationFailure(nameof(LocationCreateRequestDTO.AccountId), "Client is required."));
+            if (string.IsNullOrWhiteSpace(request.Address))
+                failures.Add(new ValidationFailure(nameof(LocationCreateRequestDTO.Address), "Street Address is required."));
+            if (string.IsNullOrWhiteSpace(request.City))
+                failures.Add(new ValidationFailure(nameof(LocationCreateRequestDTO.City), "City is required."));
+            if (string.IsNullOrWhiteSpace(request.State))
+                failures.Add(new ValidationFailure(nameof(LocationCreateRequestDTO.State), "State is required."));
+            if (request.Contacts == null || request.Contacts.Count == 0)
+                failures.Add(new ValidationFailure(nameof(LocationCreateRequestDTO.Contacts), "At least one contact is required."));
+
+            if (failures.Count > 0)
+                throw new ValidationException(failures);
+        }
+
         private static void ThrowOnInvalidContacts(List<SiteContactRequestDTO> contacts)
         {
             var failures = SiteContactsValidation.Validate(contacts);

From 13fec977fa6179141bd230b45be2bb317f9bac6d Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 12:03:35 -0300
Subject: [PATCH 143/183] feat(team-members): expose the caller's effective
 permissions

GET api/team-members/me/permissions returns the keys the signed-in user
holds after role defaults and their own overrides, evaluated by the same
policy that guards writes. The user comes from the token; a missing or
unknown identity gets 401.
---
 .../TeamMemberPermissionsEndpointTests.cs     |  95 ++++++++++
 .../Controllers/TeamMemberController.cs       |  13 +-
 .../Controllers/TeamPermissionController.cs   |   1 +
 .../TeamEffectivePermissionsTests.cs          | 174 ++++++++++++++++++
 SeaHaven.Services/DTOs/TeamPermissionDTOs.cs  |   6 +
 .../Implementation/TeamPermissionService.cs   |  22 +++
 .../Interfaces/ITeamPermissionService.cs      |   8 +
 7 files changed, 318 insertions(+), 1 deletion(-)
 create mode 100644 Api.SeaHavenIndustries.Tests/TeamMemberPermissionsEndpointTests.cs
 create mode 100644 SeaHaven.Services.Tests/TeamEffectivePermissionsTests.cs

diff --git a/Api.SeaHavenIndustries.Tests/TeamMemberPermissionsEndpointTests.cs b/Api.SeaHavenIndustries.Tests/TeamMemberPermissionsEndpointTests.cs
new file mode 100644
index 0000000..b41e2d8
--- /dev/null
+++ b/Api.SeaHavenIndustries.Tests/TeamMemberPermissionsEndpointTests.cs
@@ -0,0 +1,95 @@
+using Api.SeaHavenIndustries.Controllers;
+using Data.SeaHavenIndustries.Enums;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.ActionConstraints;
+using Microsoft.AspNetCore.Mvc.Controllers;
+using Microsoft.AspNetCore.Mvc.Infrastructure;
+using Microsoft.Extensions.DependencyInjection;
+using Moq;
+using SeaHaven.DataServices.Dto;
+using SeaHaven.DataServices.Interfaces;
+using SeaHaven.Services.Constants;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Implementation;
+using SeaHaven.Services.Interfaces;
+using System.Security.Claims;
+using System.Text.Json;
+using Xunit;
+
+namespace Api.SeaHavenIndustries.Tests;
+
+public sealed class TeamMemberPermissionsEndpointTests
+{
+    [Fact]
+    public async Task Signed_in_caller_receives_their_effective_keys_as_a_permissions_array()
+    {
+        var data = new Mock<ITeamPermissionOverrideDataService>();
+        data.Setup(d => d.GetUserAsync("u1", It.IsAny<CancellationToken>()))
+            .ReturnsAsync(new TeamPermissionUserData
+            {
+                UserId = "u1",
+                RoleName = "Dispatcher",
+                Overrides = new Dictionary<string, UserPermissionState>
+                {
+                    [TeamPermissionKeys.CreateCompletionDocTemplates] = UserPermissionState.Allow
+                }
+            });
+        var controller = Controller(data.Object, new ClaimsPrincipal(new ClaimsIdentity(
+            new[] { new Claim(ClaimTypes.NameIdentifier, "u1") }, "Bearer")));
+
+        var ok = Assert.IsType<OkObjectResult>(await controller.GetMyPermissions(CancellationToken.None));
+
+        var json = JsonSerializer.Serialize(ok.Value, new JsonSerializerOptions(JsonSerializerDefaults.Web));
+        using var document = JsonDocument.Parse(json);
+        var keys = document.RootElement.GetProperty("permissions").EnumerateArray()
+            .Select(element => element.GetString()).ToList();
+        Assert.Contains(TeamPermissionKeys.CreateCompletionDocTemplates, keys);
+        Assert.DoesNotContain(TeamPermissionKeys.DeleteCompletionDocTemplates, keys);
+    }
+
+    [Fact]
+    public async Task Unauthenticated_caller_gets_401_without_data_access()
+    {
+        var data = new Mock<ITeamPermissionOverrideDataService>(MockBehavior.Strict);
+        var controller = Controller(data.Object, new ClaimsPrincipal(new ClaimsIdentity()));
+
+        var result = Assert.IsType<UnauthorizedResult>(await controller.GetMyPermissions(CancellationToken.None));
+
+        Assert.Equal(StatusCodes.Status401Unauthorized, result.StatusCode);
+    }
+
+    [Fact]
+    public void Route_is_get_me_permissions_and_requires_authentication()
+    {
+        var services = new ServiceCollection();
+        services.AddLogging();
+        services.AddMvcCore().AddApplicationPart(typeof(TeamMemberController).Assembly);
+        using var provider = services.BuildServiceProvider();
+        var descriptor = provider
+            .GetRequiredService<IActionDescriptorCollectionProvider>()
+            .ActionDescriptors.Items
+            .OfType<ControllerActionDescriptor>()
+            .Single(d => d.ControllerTypeInfo == typeof(TeamMemberController)
+                && d.ActionName == nameof(TeamMemberController.GetMyPermissions));
+
+        var methods = descriptor.ActionConstraints!.OfType<HttpMethodActionConstraint>()
+            .SelectMany(c => c.HttpMethods);
+        Assert.Equal(new[] { "GET" }, methods);
+        Assert.Equal("api/team-members/me/permissions", descriptor.AttributeRouteInfo!.Template);
+        Assert.NotEmpty(typeof(TeamMemberController).GetCustomAttributes(typeof(AuthorizeAttribute), true));
+        Assert.Empty(descriptor.MethodInfo.GetCustomAttributes(typeof(AllowAnonymousAttribute), true));
+    }
+
+    private static TeamMemberController Controller(
+        ITeamPermissionOverrideDataService data,
+        ClaimsPrincipal user) =>
+        new(Mock.Of<ITeamMemberService>(), new TeamPermissionService(data, new TeamPermissionPolicy()))
+        {
+            ControllerContext = new ControllerContext
+            {
+                HttpContext = new DefaultHttpContext { User = user }
+            }
+        };
+}
diff --git a/Api.SeaHavenIndustries/Controllers/TeamMemberController.cs b/Api.SeaHavenIndustries/Controllers/TeamMemberController.cs
index f6537b6..ad2bfca 100644
--- a/Api.SeaHavenIndustries/Controllers/TeamMemberController.cs
+++ b/Api.SeaHavenIndustries/Controllers/TeamMemberController.cs
@@ -11,10 +11,21 @@ namespace Api.SeaHavenIndustries.Controllers;
 public sealed class TeamMemberController : ControllerBase
 {
     private readonly ITeamMemberService _teamMemberService;
+    private readonly ITeamPermissionService _permissionService;
 
-    public TeamMemberController(ITeamMemberService teamMemberService)
+    public TeamMemberController(
+        ITeamMemberService teamMemberService,
+        ITeamPermissionService permissionService)
     {
         _teamMemberService = teamMemberService;
+        _permissionService = permissionService;
+    }
+
+    [HttpGet("me/permissions")]
+    public async Task<IActionResult> GetMyPermissions(CancellationToken cancellationToken)
+    {
+        var result = await _permissionService.GetEffectivePermissionsAsync(User, cancellationToken);
+        return result.IsSuccess ? Ok(result.Value) : Unauthorized();
     }
 
     [HttpPost]
diff --git a/Api.SeaHavenIndustries/Controllers/TeamPermissionController.cs b/Api.SeaHavenIndustries/Controllers/TeamPermissionController.cs
index 72704cc..0f6aac0 100644
--- a/Api.SeaHavenIndustries/Controllers/TeamPermissionController.cs
+++ b/Api.SeaHavenIndustries/Controllers/TeamPermissionController.cs
@@ -53,6 +53,7 @@ public sealed class TeamPermissionController : ControllerBase
         return result.Status switch
         {
             TeamPermissionResultStatus.Success => new OkObjectResult(result.Value),
+            TeamPermissionResultStatus.Unauthorized => new UnauthorizedResult(),
             TeamPermissionResultStatus.Forbidden => new ForbidResult(),
             TeamPermissionResultStatus.NotFound => new NotFoundObjectResult(
                 new Response { Status = "Error", Message = "User not found." }),
diff --git a/SeaHaven.Services.Tests/TeamEffectivePermissionsTests.cs b/SeaHaven.Services.Tests/TeamEffectivePermissionsTests.cs
new file mode 100644
index 0000000..0277c22
--- /dev/null
+++ b/SeaHaven.Services.Tests/TeamEffectivePermissionsTests.cs
@@ -0,0 +1,174 @@
+using Data.SeaHavenIndustries.Enums;
+using FluentAssertions;
+using SeaHaven.DataServices.Dto;
+using SeaHaven.DataServices.Interfaces;
+using SeaHaven.Services.Constants;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Implementation;
+using System.Security.Claims;
+using Xunit;
+
+namespace SeaHaven.Services.Tests;
+
+public sealed class TeamEffectivePermissionsTests
+{
+    [Fact]
+    public async Task Scheduler_Receives_Role_Defaults()
+    {
+        var data = new FakeUsers().Add("u1", "Scheduler");
+
+        var result = await Service(data).GetEffectivePermissionsAsync(Caller("u1"), CancellationToken.None);
+
+        result.IsSuccess.Should().BeTrue();
+        result.Value!.Permissions.Should().Contain(new[]
+        {
+            TeamPermissionKeys.CreateCompletionDocTemplates,
+            TeamPermissionKeys.EditCompletionDocTemplates
+        });
+        result.Value.Permissions.Should().NotContain(TeamPermissionKeys.DeleteCompletionDocTemplates);
+    }
+
+    [Fact]
+    public async Task Grant_Override_Adds_A_Key_Outside_The_Role_Defaults()
+    {
+        var data = new FakeUsers().Add(
+            "u1", "Dispatcher", (TeamPermissionKeys.CreateCompletionDocTemplates, UserPermissionState.Allow));
+
+        var result = await Service(data).GetEffectivePermissionsAsync(Caller("u1"), CancellationToken.None);
+
+        result.Value!.Permissions.Should().Contain(TeamPermissionKeys.CreateCompletionDocTemplates);
+        result.Value.Permissions.Should().NotContain(TeamPermissionKeys.EditCompletionDocTemplates);
+    }
+
+    [Fact]
+    public async Task Revoke_Override_Removes_A_Role_Default()
+    {
+        var data = new FakeUsers().Add(
+            "u1", "Scheduler", (TeamPermissionKeys.EditCompletionDocTemplates, UserPermissionState.Deny));
+
+        var result = await Service(data).GetEffectivePermissionsAsync(Caller("u1"), CancellationToken.None);
+
+        result.Value!.Permissions.Should().NotContain(TeamPermissionKeys.EditCompletionDocTemplates);
+        result.Value.Permissions.Should().Contain(TeamPermissionKeys.CreateCompletionDocTemplates);
+    }
+
+    [Fact]
+    public async Task Admin_Holds_Every_Key_Even_With_A_Revoke_Override()
+    {
+        var data = new FakeUsers().Add(
+            "u1", "Admin", (TeamPermissionKeys.DeleteCompletionDocTemplates, UserPermissionState.Deny));
+
+        var result = await Service(data).GetEffectivePermissionsAsync(Caller("u1"), CancellationToken.None);
+
+        result.Value!.Permissions.Should().Equal(TeamPermissionKeys.All);
+    }
+
+    [Fact]
+    public async Task Keys_Match_What_The_Write_Path_Enforces()
+    {
+        var data = new FakeUsers().Add(
+            "u1", "Dispatcher",
+            (TeamPermissionKeys.CreateCompletionDocTemplates, UserPermissionState.Allow),
+            (TeamPermissionKeys.CreateSites, UserPermissionState.Deny));
+        var policy = new TeamPermissionPolicy();
+        var user = await data.GetUserAsync("u1", CancellationToken.None);
+
+        var result = await Service(data).GetEffectivePermissionsAsync(Caller("u1"), CancellationToken.None);
+
+        result.Value!.Permissions.Should().Equal(
+            TeamPermissionKeys.All.Where(key => policy.IsAllowed(user!.RoleName, key, user.Overrides)));
+    }
+
+    [Fact]
+    public async Task Reads_Only_The_Caller_Identified_By_The_Token()
+    {
+        var data = new FakeUsers()
+            .Add("u1", "Dispatcher")
+            .Add("u2", "Dispatcher", (TeamPermissionKeys.DeleteWorkOrders, UserPermissionState.Allow));
+        using var cancellation = new CancellationTokenSource();
+
+        var result = await Service(data).GetEffectivePermissionsAsync(Caller("u1"), cancellation.Token);
+
+        result.Value!.Permissions.Should().NotContain(TeamPermissionKeys.DeleteWorkOrders);
+        data.RequestedUserIds.Should().Equal("u1");
+        data.LastToken.Should().Be(cancellation.Token);
+    }
+
+    [Fact]
+    public async Task Unauthenticated_Caller_Is_Rejected_Before_Data_Access()
+    {
+        var data = new FakeUsers().Add("u1", "Admin");
+        var anonymous = new ClaimsPrincipal(new ClaimsIdentity(
+            new[] { new Claim(ClaimTypes.NameIdentifier, "u1") }));
+
+        var result = await Service(data).GetEffectivePermissionsAsync(anonymous, CancellationToken.None);
+
+        result.Status.Should().Be(TeamPermissionResultStatus.Unauthorized);
+        data.RequestedUserIds.Should().BeEmpty();
+    }
+
+    [Fact]
+    public async Task Token_Without_A_User_Id_Is_Rejected_Before_Data_Access()
+    {
+        var data = new FakeUsers().Add("u1", "Admin");
+        var noId = new ClaimsPrincipal(new ClaimsIdentity(
+            new[] { new Claim(ClaimTypes.Role, "Admin") }, "test"));
+
+        var result = await Service(data).GetEffectivePermissionsAsync(noId, CancellationToken.None);
+
+        result.Status.Should().Be(TeamPermissionResultStatus.Unauthorized);
+        data.RequestedUserIds.Should().BeEmpty();
+    }
+
+    [Fact]
+    public async Task Token_For_A_Removed_User_Is_Rejected()
+    {
+        var data = new FakeUsers();
+
+        var result = await Service(data).GetEffectivePermissionsAsync(Caller("gone"), CancellationToken.None);
+
+        result.Status.Should().Be(TeamPermissionResultStatus.Unauthorized);
+        result.Value.Should().BeNull();
+    }
+
+    private static TeamPermissionService Service(FakeUsers data) =>
+        new(data, new TeamPermissionPolicy());
+
+    private static ClaimsPrincipal Caller(string userId) =>
+        new(new ClaimsIdentity(new[] { new Claim(ClaimTypes.NameIdentifier, userId) }, "test"));
+
+    private sealed class FakeUsers : ITeamPermissionOverrideDataService
+    {
+        private readonly Dictionary<string, TeamPermissionUserData> _users = new();
+
+        public List<string> RequestedUserIds { get; } = new();
+        public CancellationToken LastToken { get; private set; }
+
+        public FakeUsers Add(string userId, string role, params (string Key, UserPermissionState State)[] overrides)
+        {
+            _users[userId] = new TeamPermissionUserData
+            {
+                UserId = userId,
+                RoleName = role,
+                Overrides = overrides.ToDictionary(o => o.Key, o => o.State, StringComparer.OrdinalIgnoreCase)
+            };
+            return this;
+        }
+
+        public Task<TeamPermissionUserData?> GetUserAsync(string userId, CancellationToken cancellationToken)
+        {
+            RequestedUserIds.Add(userId);
+            LastToken = cancellationToken;
+            return Task.FromResult(_users.GetValueOrDefault(userId));
+        }
+
+        public Task SetOverrideAsync(string userId, string permissionKey, UserPermissionState state, CancellationToken cancellationToken) =>
+            throw new InvalidOperationException("Reading permissions must not write.");
+
+        public Task SetOverridesAsync(string userId, IReadOnlyDictionary<string, UserPermissionState> overrides, CancellationToken cancellationToken) =>
+            throw new InvalidOperationException("Reading permissions must not write.");
+
+        public Task ClearOverridesAsync(string userId, CancellationToken cancellationToken) =>
+            throw new InvalidOperationException("Reading permissions must not write.");
+    }
+}
diff --git a/SeaHaven.Services/DTOs/TeamPermissionDTOs.cs b/SeaHaven.Services/DTOs/TeamPermissionDTOs.cs
index d930a83..79da06a 100644
--- a/SeaHaven.Services/DTOs/TeamPermissionDTOs.cs
+++ b/SeaHaven.Services/DTOs/TeamPermissionDTOs.cs
@@ -16,6 +16,11 @@ public sealed class TeamPermissionValueDTO
     public bool IsGranted { get; init; }
 }
 
+public sealed class EffectivePermissionsDTO
+{
+    public required IReadOnlyList<string> Permissions { get; init; }
+}
+
 public sealed class SetTeamPermissionOverrideDTO
 {
     public UserPermissionState State { get; init; }
@@ -24,6 +29,7 @@ public sealed class SetTeamPermissionOverrideDTO
 public enum TeamPermissionResultStatus
 {
     Success,
+    Unauthorized,
     Forbidden,
     NotFound,
     InvalidPermissionKey
diff --git a/SeaHaven.Services/Implementation/TeamPermissionService.cs b/SeaHaven.Services/Implementation/TeamPermissionService.cs
index 34e6f26..040f1d3 100644
--- a/SeaHaven.Services/Implementation/TeamPermissionService.cs
+++ b/SeaHaven.Services/Implementation/TeamPermissionService.cs
@@ -35,6 +35,28 @@ public sealed class TeamPermissionService : ITeamPermissionService
             : TeamPermissionResult<TeamPermissionProfileDTO>.Success(BuildProfile(user));
     }
 
+    public async Task<TeamPermissionResult<EffectivePermissionsDTO>> GetEffectivePermissionsAsync(
+        ClaimsPrincipal caller,
+        CancellationToken cancellationToken)
+    {
+        var userId = caller?.Identity?.IsAuthenticated == true
+            ? caller.FindFirstValue(ClaimTypes.NameIdentifier)
+            : null;
+        if (string.IsNullOrWhiteSpace(userId))
+            return TeamPermissionResult<EffectivePermissionsDTO>.Failure(TeamPermissionResultStatus.Unauthorized);
+
+        var user = await _dataService.GetUserAsync(userId, cancellationToken);
+        if (user is null)
+            return TeamPermissionResult<EffectivePermissionsDTO>.Failure(TeamPermissionResultStatus.Unauthorized);
+
+        return TeamPermissionResult<EffectivePermissionsDTO>.Success(new EffectivePermissionsDTO
+        {
+            Permissions = TeamPermissionKeys.All
+                .Where(key => _policy.IsAllowed(user.RoleName, key, user.Overrides))
+                .ToList()
+        });
+    }
+
     public async Task<TeamPermissionResult<TeamPermissionProfileDTO>> SetOverrideAsync(
         string userId,
         string permissionKey,
diff --git a/SeaHaven.Services/Interfaces/ITeamPermissionService.cs b/SeaHaven.Services/Interfaces/ITeamPermissionService.cs
index d4b3892..d25b9a1 100644
--- a/SeaHaven.Services/Interfaces/ITeamPermissionService.cs
+++ b/SeaHaven.Services/Interfaces/ITeamPermissionService.cs
@@ -11,6 +11,14 @@ public interface ITeamPermissionService
         ClaimsPrincipal caller,
         CancellationToken cancellationToken);
 
+    /// <summary>
+    /// Keys the caller holds after role defaults and their own overrides. The
+    /// user is read from the caller's identity, never from request input.
+    /// </summary>
+    Task<TeamPermissionResult<EffectivePermissionsDTO>> GetEffectivePermissionsAsync(
+        ClaimsPrincipal caller,
+        CancellationToken cancellationToken);
+
     Task<TeamPermissionResult<TeamPermissionProfileDTO>> SetOverrideAsync(
         string userId,
         string permissionKey,

From 6bfb56f3491e27ca9d72342dcc3e440d21f55d84 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 12:04:40 -0300
Subject: [PATCH 144/183] fix(data): stamp audit times in UTC and keep a
 caller-set work order creation time

WorkOrderDataService.AddAsync overwrote the UTC CreatedDate set by WorkOrderService with local server time, offsetting the SLA response clock on any host not running in UTC. Data services now stamp CreatedDate, LastModificationTime and DeletionTime with DateTime.UtcNow, and a work order keeps the creation time its caller set.
---
 .../WorkOrderDataServiceTimestampTests.cs     | 68 +++++++++++++++++++
 .../Implementation/AccountDataService.cs      |  4 +-
 .../Implementation/AssetDataService.cs        |  4 +-
 .../Implementation/CategoryDataService.cs     |  4 +-
 .../Implementation/ContactDataService.cs      |  4 +-
 .../Implementation/DispatchDataService.cs     |  4 +-
 .../Implementation/EmployeeDataService.cs     |  4 +-
 .../Implementation/FollowUpDataService.cs     | 10 +--
 .../Implementation/LocationDataService.cs     | 10 +--
 .../Implementation/PMScheduleDataService.cs   |  4 +-
 .../Implementation/WorkOrderDataService.cs    |  4 +-
 11 files changed, 94 insertions(+), 26 deletions(-)
 create mode 100644 Api.SeaHavenIndustries.Tests/WorkOrderDataServiceTimestampTests.cs

diff --git a/Api.SeaHavenIndustries.Tests/WorkOrderDataServiceTimestampTests.cs b/Api.SeaHavenIndustries.Tests/WorkOrderDataServiceTimestampTests.cs
new file mode 100644
index 0000000..512ad0e
--- /dev/null
+++ b/Api.SeaHavenIndustries.Tests/WorkOrderDataServiceTimestampTests.cs
@@ -0,0 +1,68 @@
+using Data.SeaHavenIndustries;
+using FluentAssertions;
+using Microsoft.EntityFrameworkCore;
+using SeaHaven.DataServices.Implementation;
+using Xunit;
+
+namespace Api.SeaHavenIndustries.Tests;
+
+/// <summary>
+/// The SLA clock and every "created"/"modified" display read these stamps as UTC, so the data layer
+/// must never write local server time into them.
+/// </summary>
+public class WorkOrderDataServiceTimestampTests
+{
+    private static ApplicationDbContext NewContext()
+    {
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseInMemoryDatabase(Guid.NewGuid().ToString())
+            .Options;
+        return new ApplicationDbContext(options);
+    }
+
+    private static WorkOrder NewWorkOrder() =>
+        new() { InternalWONumber = "WO-1", WorkerOrderTitle = "Leak", LocationId = 100 };
+
+    [Fact]
+    public async Task AddAsync_KeepsTheCreationTimeTheCallerSet()
+    {
+        await using var context = NewContext();
+        var createdAt = new DateTime(2026, 9, 25, 14, 0, 0, DateTimeKind.Utc);
+        var workOrder = NewWorkOrder();
+        workOrder.CreatedDate = createdAt;
+
+        var saved = await new WorkOrderDataService(context).AddAsync(workOrder);
+
+        saved.CreatedDate.Should().Be(createdAt);
+        saved.CreatedDate!.Value.Kind.Should().Be(DateTimeKind.Utc);
+        (await context.workOrders.SingleAsync()).CreatedDate.Should().Be(createdAt);
+    }
+
+    [Fact]
+    public async Task AddAsync_StampsUtcWhenTheCallerSetNoCreationTime()
+    {
+        await using var context = NewContext();
+        var before = DateTime.UtcNow;
+
+        var saved = await new WorkOrderDataService(context).AddAsync(NewWorkOrder());
+
+        saved.CreatedDate.Should().NotBeNull();
+        saved.CreatedDate!.Value.Kind.Should().Be(DateTimeKind.Utc);
+        saved.CreatedDate.Value.Should().BeOnOrAfter(before).And.BeOnOrBefore(DateTime.UtcNow);
+    }
+
+    [Fact]
+    public async Task UpdateAsync_StampsTheModificationTimeInUtc()
+    {
+        await using var context = NewContext();
+        var service = new WorkOrderDataService(context);
+        var saved = await service.AddAsync(NewWorkOrder());
+        var before = DateTime.UtcNow;
+
+        await service.UpdateAsync(saved);
+
+        saved.LastModificationTime.Should().NotBeNull();
+        saved.LastModificationTime!.Value.Kind.Should().Be(DateTimeKind.Utc);
+        saved.LastModificationTime.Value.Should().BeOnOrAfter(before).And.BeOnOrBefore(DateTime.UtcNow);
+    }
+}
diff --git a/SeaHaven.DataServices/Implementation/AccountDataService.cs b/SeaHaven.DataServices/Implementation/AccountDataService.cs
index 5b00af2..ec2f874 100644
--- a/SeaHaven.DataServices/Implementation/AccountDataService.cs
+++ b/SeaHaven.DataServices/Implementation/AccountDataService.cs
@@ -64,7 +64,7 @@ namespace SeaHaven.DataServices.Implementation
 
         public async Task<Accounts> AddAsync(Accounts account)
         {
-            account.CreatedDate = DateTime.Now;
+            account.CreatedDate = DateTime.UtcNow;
             await _context.Accounts.AddAsync(account);
             await _context.SaveChangesAsync();
             return account;
@@ -72,7 +72,7 @@ namespace SeaHaven.DataServices.Implementation
 
         public async Task UpdateAsync(Accounts account)
         {
-            account.LastModificationTime = DateTime.Now;
+            account.LastModificationTime = DateTime.UtcNow;
             _context.Accounts.Update(account);
             await _context.SaveChangesAsync();
         }
diff --git a/SeaHaven.DataServices/Implementation/AssetDataService.cs b/SeaHaven.DataServices/Implementation/AssetDataService.cs
index 93a3f1e..1d60a7d 100644
--- a/SeaHaven.DataServices/Implementation/AssetDataService.cs
+++ b/SeaHaven.DataServices/Implementation/AssetDataService.cs
@@ -72,7 +72,7 @@ namespace SeaHaven.DataServices.Implementation
 
         public async Task<Assets> AddAsync(Assets asset)
         {
-            asset.CreatedDate = DateTime.Now;
+            asset.CreatedDate = DateTime.UtcNow;
             await _context.Assets.AddAsync(asset);
             await _context.SaveChangesAsync();
             return asset;
@@ -80,7 +80,7 @@ namespace SeaHaven.DataServices.Implementation
 
         public async Task UpdateAsync(Assets asset)
         {
-            asset.LastModificationTime = DateTime.Now;
+            asset.LastModificationTime = DateTime.UtcNow;
             _context.Assets.Update(asset);
             await _context.SaveChangesAsync();
         }
diff --git a/SeaHaven.DataServices/Implementation/CategoryDataService.cs b/SeaHaven.DataServices/Implementation/CategoryDataService.cs
index c5af096..994acc3 100644
--- a/SeaHaven.DataServices/Implementation/CategoryDataService.cs
+++ b/SeaHaven.DataServices/Implementation/CategoryDataService.cs
@@ -25,7 +25,7 @@ namespace SeaHaven.DataServices.Implementation
 
         public async Task<Category> AddAsync(Category category)
         {
-            category.CreatedDate = DateTime.Now;
+            category.CreatedDate = DateTime.UtcNow;
             await _context.Categories.AddAsync(category);
             await _context.SaveChangesAsync();
             return category;
@@ -33,7 +33,7 @@ namespace SeaHaven.DataServices.Implementation
 
         public async Task UpdateAsync(Category category)
         {
-            category.LastModificationTime = DateTime.Now;
+            category.LastModificationTime = DateTime.UtcNow;
             _context.Categories.Update(category);
             await _context.SaveChangesAsync();
         }
diff --git a/SeaHaven.DataServices/Implementation/ContactDataService.cs b/SeaHaven.DataServices/Implementation/ContactDataService.cs
index 8196d2b..e4abf4f 100644
--- a/SeaHaven.DataServices/Implementation/ContactDataService.cs
+++ b/SeaHaven.DataServices/Implementation/ContactDataService.cs
@@ -100,7 +100,7 @@ namespace SeaHaven.DataServices.Implementation
 
         public async Task<Contacts> AddAsync(Contacts contact)
         {
-            contact.CreatedDate = DateTime.Now;
+            contact.CreatedDate = DateTime.UtcNow;
             await _context.Contacts.AddAsync(contact);
             await _context.SaveChangesAsync();
             return contact;
@@ -108,7 +108,7 @@ namespace SeaHaven.DataServices.Implementation
 
         public async Task UpdateAsync(Contacts contact)
         {
-            contact.LastModificationTime = DateTime.Now;
+            contact.LastModificationTime = DateTime.UtcNow;
             _context.Contacts.Update(contact);
             await _context.SaveChangesAsync();
         }
diff --git a/SeaHaven.DataServices/Implementation/DispatchDataService.cs b/SeaHaven.DataServices/Implementation/DispatchDataService.cs
index 3274713..398051d 100644
--- a/SeaHaven.DataServices/Implementation/DispatchDataService.cs
+++ b/SeaHaven.DataServices/Implementation/DispatchDataService.cs
@@ -85,7 +85,7 @@ namespace SeaHaven.DataServices.Implementation
 
         public async Task<Dispatch> AddAsync(Dispatch dispatch)
         {
-            dispatch.CreatedDate = DateTime.Now;
+            dispatch.CreatedDate = DateTime.UtcNow;
             await _context.Dispatches.AddAsync(dispatch);
             await _context.SaveChangesAsync();
             return dispatch;
@@ -93,7 +93,7 @@ namespace SeaHaven.DataServices.Implementation
 
         public async Task UpdateAsync(Dispatch dispatch)
         {
-            dispatch.LastModificationTime = DateTime.Now;
+            dispatch.LastModificationTime = DateTime.UtcNow;
             _context.Dispatches.Update(dispatch);
             await _context.SaveChangesAsync();
         }
diff --git a/SeaHaven.DataServices/Implementation/EmployeeDataService.cs b/SeaHaven.DataServices/Implementation/EmployeeDataService.cs
index 4606d11..7b0b2c7 100644
--- a/SeaHaven.DataServices/Implementation/EmployeeDataService.cs
+++ b/SeaHaven.DataServices/Implementation/EmployeeDataService.cs
@@ -72,7 +72,7 @@ namespace SeaHaven.DataServices.Implementation
 
         public async Task<Employee> AddAsync(Employee employee)
         {
-            employee.CreatedDate = DateTime.Now;
+            employee.CreatedDate = DateTime.UtcNow;
             await _context.Employees.AddAsync(employee);
             await _context.SaveChangesAsync();
             return employee;
@@ -80,7 +80,7 @@ namespace SeaHaven.DataServices.Implementation
 
         public async Task UpdateAsync(Employee employee)
         {
-            employee.LastModificationTime = DateTime.Now;
+            employee.LastModificationTime = DateTime.UtcNow;
             _context.Employees.Update(employee);
             await _context.SaveChangesAsync();
         }
diff --git a/SeaHaven.DataServices/Implementation/FollowUpDataService.cs b/SeaHaven.DataServices/Implementation/FollowUpDataService.cs
index 4eebe82..72ef131 100644
--- a/SeaHaven.DataServices/Implementation/FollowUpDataService.cs
+++ b/SeaHaven.DataServices/Implementation/FollowUpDataService.cs
@@ -88,7 +88,7 @@ namespace SeaHaven.DataServices.Implementation
 
         public async Task<FollowUps> AddAsync(FollowUps followUp)
         {
-            followUp.CreatedDate = DateTime.Now;
+            followUp.CreatedDate = DateTime.UtcNow;
             await _context.FollowUps.AddAsync(followUp);
             await _context.SaveChangesAsync();
             return followUp;
@@ -96,7 +96,7 @@ namespace SeaHaven.DataServices.Implementation
 
         public async Task UpdateAsync(FollowUps followUp)
         {
-            followUp.LastModificationTime = DateTime.Now;
+            followUp.LastModificationTime = DateTime.UtcNow;
             _context.FollowUps.Update(followUp);
             await _context.SaveChangesAsync();
         }
@@ -218,7 +218,7 @@ namespace SeaHaven.DataServices.Implementation
 
         public async Task<FollowUps> AddAsync(FollowUps followUp, CancellationToken cancellationToken)
         {
-            followUp.CreatedDate = DateTime.Now;
+            followUp.CreatedDate = DateTime.UtcNow;
             await _context.FollowUps.AddAsync(followUp, cancellationToken);
             await _context.SaveChangesAsync(cancellationToken);
             return followUp;
@@ -226,7 +226,7 @@ namespace SeaHaven.DataServices.Implementation
 
         public async Task UpdateAsync(FollowUps followUp, CancellationToken cancellationToken)
         {
-            followUp.LastModificationTime = DateTime.Now;
+            followUp.LastModificationTime = DateTime.UtcNow;
             _context.FollowUps.Update(followUp);
             await _context.SaveChangesAsync(cancellationToken);
         }
@@ -238,7 +238,7 @@ namespace SeaHaven.DataServices.Implementation
                 return false;
 
             entity.Status = status;
-            entity.LastModificationTime = DateTime.Now;
+            entity.LastModificationTime = DateTime.UtcNow;
             await _context.SaveChangesAsync(cancellationToken);
             return true;
         }
diff --git a/SeaHaven.DataServices/Implementation/LocationDataService.cs b/SeaHaven.DataServices/Implementation/LocationDataService.cs
index 11cb89e..b331a01 100644
--- a/SeaHaven.DataServices/Implementation/LocationDataService.cs
+++ b/SeaHaven.DataServices/Implementation/LocationDataService.cs
@@ -98,7 +98,7 @@ namespace SeaHaven.DataServices.Implementation
 
         public async Task<Locations> AddAsync(Locations location)
         {
-            location.CreatedDate = DateTime.Now;
+            location.CreatedDate = DateTime.UtcNow;
             await _context.Locations.AddAsync(location);
             await _context.SaveChangesAsync();
             return location;
@@ -106,7 +106,7 @@ namespace SeaHaven.DataServices.Implementation
 
         public async Task UpdateAsync(Locations location)
         {
-            location.LastModificationTime = DateTime.Now;
+            location.LastModificationTime = DateTime.UtcNow;
             _context.Locations.Update(location);
             await _context.SaveChangesAsync();
         }
@@ -228,7 +228,7 @@ namespace SeaHaven.DataServices.Implementation
 
         public async Task<Locations> AddAsync(Locations location, CancellationToken cancellationToken)
         {
-            location.CreatedDate = DateTime.Now;
+            location.CreatedDate = DateTime.UtcNow;
             await _context.Locations.AddAsync(location, cancellationToken);
             await _context.SaveChangesAsync(cancellationToken);
             return location;
@@ -236,7 +236,7 @@ namespace SeaHaven.DataServices.Implementation
 
         public async Task UpdateAsync(Locations location, CancellationToken cancellationToken)
         {
-            location.LastModificationTime = DateTime.Now;
+            location.LastModificationTime = DateTime.UtcNow;
             _context.Locations.Update(location);
             await _context.SaveChangesAsync(cancellationToken);
         }
@@ -249,7 +249,7 @@ namespace SeaHaven.DataServices.Implementation
             if (entity == null)
                 return false;
 
-            var now = DateTime.Now;
+            var now = DateTime.UtcNow;
             foreach (var contact in entity.Contacts ?? Enumerable.Empty<Contacts>())
             {
                 if (contact.IsDeleted != true)
diff --git a/SeaHaven.DataServices/Implementation/PMScheduleDataService.cs b/SeaHaven.DataServices/Implementation/PMScheduleDataService.cs
index a2418ea..6bc925a 100644
--- a/SeaHaven.DataServices/Implementation/PMScheduleDataService.cs
+++ b/SeaHaven.DataServices/Implementation/PMScheduleDataService.cs
@@ -64,7 +64,7 @@ namespace SeaHaven.DataServices.Implementation
 
         public async Task<PMSchedules> AddAsync(PMSchedules schedule)
         {
-            schedule.CreatedDate = DateTime.Now;
+            schedule.CreatedDate = DateTime.UtcNow;
             await _context.PMSchedules.AddAsync(schedule);
             await _context.SaveChangesAsync();
             return schedule;
@@ -72,7 +72,7 @@ namespace SeaHaven.DataServices.Implementation
 
         public async Task UpdateAsync(PMSchedules schedule)
         {
-            schedule.LastModificationTime = DateTime.Now;
+            schedule.LastModificationTime = DateTime.UtcNow;
             _context.PMSchedules.Update(schedule);
             await _context.SaveChangesAsync();
         }
diff --git a/SeaHaven.DataServices/Implementation/WorkOrderDataService.cs b/SeaHaven.DataServices/Implementation/WorkOrderDataService.cs
index d32b77b..b34db11 100644
--- a/SeaHaven.DataServices/Implementation/WorkOrderDataService.cs
+++ b/SeaHaven.DataServices/Implementation/WorkOrderDataService.cs
@@ -193,7 +193,7 @@ namespace SeaHaven.DataServices.Implementation
 
         public async Task<WorkOrder> AddAsync(WorkOrder workOrder)
         {
-            workOrder.CreatedDate = DateTime.Now;
+            workOrder.CreatedDate ??= DateTime.UtcNow;
             await _context.workOrders.AddAsync(workOrder);
             await _context.SaveChangesAsync();
             return workOrder;
@@ -201,7 +201,7 @@ namespace SeaHaven.DataServices.Implementation
 
         public async Task UpdateAsync(WorkOrder workOrder)
         {
-            workOrder.LastModificationTime = DateTime.Now;
+            workOrder.LastModificationTime = DateTime.UtcNow;
             _context.workOrders.Update(workOrder);
             await _context.SaveChangesAsync();
         }

From 27c21ec32e33d8bc89656c9dcf96ede7c9fc41b8 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 12:06:36 -0300
Subject: [PATCH 145/183] fix(services): stamp user, contact, calendar and
 location audit times in UTC

User creation, contact, calendar event and site-contact create/modify/delete stamps used local server time. Validation rules comparing user-entered dates and the JWT expiry are unchanged.
---
 Api.SeaHavenIndustries.Tests/CalendarServiceTests.cs | 5 ++++-
 SeaHaven.Services/Implementation/CalendarService.cs  | 6 +++---
 SeaHaven.Services/Implementation/ContactService.cs   | 4 ++--
 SeaHaven.Services/Implementation/LocationService.cs  | 8 ++++----
 SeaHaven.Services/Implementation/UserService.cs      | 4 ++--
 5 files changed, 15 insertions(+), 12 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/CalendarServiceTests.cs b/Api.SeaHavenIndustries.Tests/CalendarServiceTests.cs
index bceb520..fbab136 100644
--- a/Api.SeaHavenIndustries.Tests/CalendarServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/CalendarServiceTests.cs
@@ -44,7 +44,7 @@ public class CalendarServiceTests
             StartDate = startDate,
             EndDate = startDate,
             IsDeleted = isDeleted,
-            CreatedDate = DateTime.Now
+            CreatedDate = DateTime.UtcNow
         };
         ctx.Events.Add(ev);
         ctx.SaveChanges();
@@ -64,6 +64,7 @@ public class CalendarServiceTests
         saved.Title.Should().Be("Standup");
         saved.IsDeleted.Should().Be(false);
         saved.CreatedDate.Should().NotBeNull();
+        saved.CreatedDate!.Value.Kind.Should().Be(DateTimeKind.Utc);
     }
 
     [Fact]
@@ -97,6 +98,7 @@ public class CalendarServiceTests
         var updated = ctx.Events.Single();
         updated.Title.Should().Be("New");
         updated.LastModificationTime.Should().NotBeNull();
+        updated.LastModificationTime!.Value.Kind.Should().Be(DateTimeKind.Utc);
     }
 
     [Fact]
@@ -134,6 +136,7 @@ public class CalendarServiceTests
         var row = ctx.Events.Single();
         row.IsDeleted.Should().Be(true);
         row.DeletionTime.Should().NotBeNull();
+        row.DeletionTime!.Value.Kind.Should().Be(DateTimeKind.Utc);
     }
 
     [Fact]
diff --git a/SeaHaven.Services/Implementation/CalendarService.cs b/SeaHaven.Services/Implementation/CalendarService.cs
index cece13d..596c083 100644
--- a/SeaHaven.Services/Implementation/CalendarService.cs
+++ b/SeaHaven.Services/Implementation/CalendarService.cs
@@ -31,7 +31,7 @@ namespace SeaHaven.Services.Implementation
                 EndDate = input.EndDate,
                 EndTime = input.EndTime,
                 AllDay = input.AllDay,
-                CreatedDate = DateTime.Now,
+                CreatedDate = DateTime.UtcNow,
                 IsDeleted = false
             };
 
@@ -57,7 +57,7 @@ namespace SeaHaven.Services.Implementation
             model.EndDate = input.EndDate;
             model.EndTime = input.EndTime;
             model.AllDay = input.AllDay;
-            model.LastModificationTime = DateTime.Now;
+            model.LastModificationTime = DateTime.UtcNow;
 
             await _dataService.UpdateEventAsync(model, cancellationToken);
             return true;
@@ -76,7 +76,7 @@ namespace SeaHaven.Services.Implementation
                 return false;
 
             model.IsDeleted = true;
-            model.DeletionTime = DateTime.Now;
+            model.DeletionTime = DateTime.UtcNow;
 
             await _dataService.UpdateEventAsync(model, cancellationToken);
             return true;
diff --git a/SeaHaven.Services/Implementation/ContactService.cs b/SeaHaven.Services/Implementation/ContactService.cs
index cfeab5b..bf359d2 100644
--- a/SeaHaven.Services/Implementation/ContactService.cs
+++ b/SeaHaven.Services/Implementation/ContactService.cs
@@ -104,7 +104,7 @@ namespace SeaHaven.Services.Implementation
                 ContactType = dto.Type,
                 AccountId = dto.AccountId,
                 createdby = userId,
-                CreatedDate = DateTime.Now
+                CreatedDate = DateTime.UtcNow
             };
 
             var savedContact = await _contactDataService.AddAsync(contact);
@@ -151,7 +151,7 @@ namespace SeaHaven.Services.Implementation
             if (dto.AccountId.HasValue)
                 existingContact.AccountId = dto.AccountId;
 
-            existingContact.LastModificationTime = DateTime.Now;
+            existingContact.LastModificationTime = DateTime.UtcNow;
 
             await _contactDataService.UpdateAsync(existingContact);
 
diff --git a/SeaHaven.Services/Implementation/LocationService.cs b/SeaHaven.Services/Implementation/LocationService.cs
index 64b275a..3e89cea 100644
--- a/SeaHaven.Services/Implementation/LocationService.cs
+++ b/SeaHaven.Services/Implementation/LocationService.cs
@@ -399,7 +399,7 @@ namespace SeaHaven.Services.Implementation
         {
             ThrowOnInvalidContacts(contacts);
 
-            var now = DateTime.Now;
+            var now = DateTime.UtcNow;
             var siteContacts = contacts
                 .Select((row, index) => new Contacts
                 {
@@ -457,7 +457,7 @@ namespace SeaHaven.Services.Implementation
                     existing.PhoneNumber = phone;
                     existing.SiteContactOrder = i;
                     existing.AccountId = location.AccountId;
-                    existing.LastModificationTime = DateTime.Now;
+                    existing.LastModificationTime = DateTime.UtcNow;
                 }
                 else
                 {
@@ -470,7 +470,7 @@ namespace SeaHaven.Services.Implementation
                         PhoneNumber = phone,
                         SiteContactOrder = i,
                         AccountId = location.AccountId,
-                        CreatedDate = DateTime.Now,
+                        CreatedDate = DateTime.UtcNow,
                         createdby = actorId
                     });
                 }
@@ -478,7 +478,7 @@ namespace SeaHaven.Services.Implementation
 
             // Rows omitted from the request are soft deleted so historical
             // WorkOrderContacts keep rendering.
-            var now = DateTime.Now;
+            var now = DateTime.UtcNow;
             foreach (var existing in existingById.Values)
             {
                 if (keptIds.Contains(existing.Id) || existing.IsDeleted == true)
diff --git a/SeaHaven.Services/Implementation/UserService.cs b/SeaHaven.Services/Implementation/UserService.cs
index 99105a3..f448a1f 100644
--- a/SeaHaven.Services/Implementation/UserService.cs
+++ b/SeaHaven.Services/Implementation/UserService.cs
@@ -72,7 +72,7 @@ namespace SeaHaven.Services.Implementation
             {
                 model.EmailConfirmed = true;
                 model.UserName = model.Email;
-                model.CreatedDate = DateTime.Now;
+                model.CreatedDate = DateTime.UtcNow;
                 model.UniqueName = "Active";
                 model.PhoneNumber = dto.Role;
 
@@ -152,7 +152,7 @@ namespace SeaHaven.Services.Implementation
             exist.Email = dto.Email;
             exist.NormalizedEmail = dto.Email.ToUpperInvariant();
             exist.NormalizedUserName = dto.Email.ToUpperInvariant();
-            exist.CreatedDate = DateTime.Now;
+            exist.CreatedDate = DateTime.UtcNow;
             exist.UniqueName = "Active";
             exist.PhoneNumber = dto.Role;
             exist.AccountId = dto.AccountId;

From 227691269d1810ed864b064790695386c8429d73 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 12:07:46 -0300
Subject: [PATCH 146/183] style(data): trim trailing whitespace in touched data
 services

---
 .../Implementation/ContactDataService.cs                  | 8 ++++----
 .../Implementation/PMScheduleDataService.cs               | 4 ++--
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/SeaHaven.DataServices/Implementation/ContactDataService.cs b/SeaHaven.DataServices/Implementation/ContactDataService.cs
index e4abf4f..acd7e88 100644
--- a/SeaHaven.DataServices/Implementation/ContactDataService.cs
+++ b/SeaHaven.DataServices/Implementation/ContactDataService.cs
@@ -130,15 +130,15 @@ namespace SeaHaven.DataServices.Implementation
 
         public async Task<bool> EmailExistsAsync(string email, int? excludeId = null)
         {
-            return await _context.Contacts.AnyAsync(c => 
-                c.Email == email && 
+            return await _context.Contacts.AnyAsync(c =>
+                c.Email == email &&
                 (excludeId == null || c.Id != excludeId));
         }
 
         public async Task<bool> PhoneExistsAsync(string phone, int? excludeId = null)
         {
-            return await _context.Contacts.AnyAsync(c => 
-                c.PhoneNumber == phone && 
+            return await _context.Contacts.AnyAsync(c =>
+                c.PhoneNumber == phone &&
                 (excludeId == null || c.Id != excludeId));
         }
 
diff --git a/SeaHaven.DataServices/Implementation/PMScheduleDataService.cs b/SeaHaven.DataServices/Implementation/PMScheduleDataService.cs
index 6bc925a..1ce854f 100644
--- a/SeaHaven.DataServices/Implementation/PMScheduleDataService.cs
+++ b/SeaHaven.DataServices/Implementation/PMScheduleDataService.cs
@@ -46,8 +46,8 @@ namespace SeaHaven.DataServices.Implementation
         }
 
         public async Task<(IEnumerable<PMSchedules> Items, int TotalCount)> GetPagedAsync(
-            int page, 
-            int pageSize, 
+            int page,
+            int pageSize,
             string? search = null)
         {
             var query = _context.PMSchedules.AsQueryable();

From 385229c64daf3b20742a9670bae2542cb77ab65d Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 12:11:52 -0300
Subject: [PATCH 147/183] fix(team-members): keep omitted phone, report invite
 email failures, never echo invite errors

---
 .../TeamMemberInviteControllerTests.cs        | 51 +++++++++++++++++
 .../Controllers/TeamMemberInviteController.cs |  2 +
 .../InviteRegistrationExceptionFilter.cs      | 38 +++++++++++++
 SeaHaven.Services/DTOs/TeamMemberDTOs.cs      |  5 ++
 .../Implementation/AuthenticationService.cs   |  2 +-
 .../Implementation/TeamMemberInviteService.cs |  3 +-
 .../TeamMemberRegistrationService.cs          |  9 ++-
 .../Implementation/TeamMemberService.cs       |  5 +-
 .../TeamMemberInviteRegistrationTests.cs      | 55 +++++++++++++++++++
 9 files changed, 164 insertions(+), 6 deletions(-)
 create mode 100644 Api.SeaHavenIndustries/Filters/InviteRegistrationExceptionFilter.cs

diff --git a/Api.SeaHavenIndustries.Tests/TeamMemberInviteControllerTests.cs b/Api.SeaHavenIndustries.Tests/TeamMemberInviteControllerTests.cs
index 516897a..f3ec64b 100644
--- a/Api.SeaHavenIndustries.Tests/TeamMemberInviteControllerTests.cs
+++ b/Api.SeaHavenIndustries.Tests/TeamMemberInviteControllerTests.cs
@@ -1,5 +1,11 @@
 using System.Reflection;
+using System.Text.Json;
 using Api.SeaHavenIndustries.Controllers;
+using Api.SeaHavenIndustries.Filters;
+using Microsoft.AspNetCore.Mvc.Abstractions;
+using Microsoft.AspNetCore.Mvc.Filters;
+using Microsoft.AspNetCore.Routing;
+using Microsoft.Extensions.Logging.Abstractions;
 using FluentAssertions;
 using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Http;
@@ -44,6 +50,51 @@ public class TeamMemberInviteControllerTests
         cache!.NoStore.Should().BeTrue();
     }
 
+    [Fact]
+    public void RegistrationEndpoints_UseTheControllerScopedExceptionFilter()
+    {
+        var filter = typeof(TeamMemberInviteController).GetCustomAttribute<TypeFilterAttribute>();
+
+        filter.Should().NotBeNull();
+        filter!.ImplementationType.Should().Be(typeof(InviteRegistrationExceptionFilter));
+    }
+
+    [Fact]
+    public void ExceptionFilter_ReturnsAFixedBodyWithoutExceptionDetail()
+    {
+        var context = ExceptionContextFor(new ArgumentException(
+            "SELECT [Id] FROM [TeamMemberInvites] WHERE [TokenHash] = 'leak-me'"));
+
+        new InviteRegistrationExceptionFilter(NullLogger<InviteRegistrationExceptionFilter>.Instance)
+            .OnException(context);
+
+        context.ExceptionHandled.Should().BeTrue();
+        var result = context.Result.Should().BeOfType<ObjectResult>().Subject;
+        result.StatusCode.Should().Be(StatusCodes.Status500InternalServerError);
+        var body = JsonSerializer.Serialize(result.Value);
+        body.Should().Be(
+            "{\"code\":\"server_error\",\"message\":\"Something went wrong. Try again in a minute.\",\"retryAfterSeconds\":null}");
+        body.Should().NotContain("SELECT").And.NotContain("leak-me");
+    }
+
+    [Fact]
+    public void ExceptionFilter_LeavesCancellationToTheHost()
+    {
+        var context = ExceptionContextFor(new OperationCanceledException());
+
+        new InviteRegistrationExceptionFilter(NullLogger<InviteRegistrationExceptionFilter>.Instance)
+            .OnException(context);
+
+        context.ExceptionHandled.Should().BeFalse();
+        context.Result.Should().BeNull();
+    }
+
+    private static ExceptionContext ExceptionContextFor(Exception exception)
+    {
+        var actionContext = new ActionContext(new DefaultHttpContext(), new RouteData(), new ActionDescriptor());
+        return new ExceptionContext(actionContext, new List<IFilterMetadata>()) { Exception = exception };
+    }
+
     [Theory]
     [InlineData(TeamMemberRegistrationStatus.InvalidInvite)]
     [InlineData(TeamMemberRegistrationStatus.Ok)]
diff --git a/Api.SeaHavenIndustries/Controllers/TeamMemberInviteController.cs b/Api.SeaHavenIndustries/Controllers/TeamMemberInviteController.cs
index bd2d161..af16db7 100644
--- a/Api.SeaHavenIndustries/Controllers/TeamMemberInviteController.cs
+++ b/Api.SeaHavenIndustries/Controllers/TeamMemberInviteController.cs
@@ -1,4 +1,5 @@
 using Api.SeaHavenIndustries.DTOs;
+using Api.SeaHavenIndustries.Filters;
 using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
 using SeaHaven.Services.DTOs;
@@ -14,6 +15,7 @@ namespace Api.SeaHavenIndustries.Controllers;
 [ApiController]
 [Route("api/team-member-invites")]
 [ResponseCache(NoStore = true, Location = ResponseCacheLocation.None)]
+[TypeFilter(typeof(InviteRegistrationExceptionFilter))]
 public sealed class TeamMemberInviteController : ControllerBase
 {
     public const string InvalidInviteMessage =
diff --git a/Api.SeaHavenIndustries/Filters/InviteRegistrationExceptionFilter.cs b/Api.SeaHavenIndustries/Filters/InviteRegistrationExceptionFilter.cs
new file mode 100644
index 0000000..93b9b00
--- /dev/null
+++ b/Api.SeaHavenIndustries/Filters/InviteRegistrationExceptionFilter.cs
@@ -0,0 +1,38 @@
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.Filters;
+using Microsoft.Extensions.Logging;
+
+namespace Api.SeaHavenIndustries.Filters
+{
+    /// <summary>
+    /// Anonymous invite endpoints never echo an exception: controller-scoped exception
+    /// filters run before the global ones, so no message, stack or SQL reaches the caller.
+    /// Cancellation is left to the host.
+    /// </summary>
+    public sealed class InviteRegistrationExceptionFilter : IExceptionFilter
+    {
+        public const string Message = "Something went wrong. Try again in a minute.";
+
+        private readonly ILogger<InviteRegistrationExceptionFilter> _logger;
+
+        public InviteRegistrationExceptionFilter(ILogger<InviteRegistrationExceptionFilter> logger)
+        {
+            _logger = logger;
+        }
+
+        public void OnException(ExceptionContext context)
+        {
+            if (context.Exception is OperationCanceledException)
+                return;
+
+            _logger.LogError(context.Exception, "Invite registration request failed.");
+
+            context.Result = new ObjectResult(new { code = "server_error", message = Message, retryAfterSeconds = (int?)null })
+            {
+                StatusCode = StatusCodes.Status500InternalServerError
+            };
+            context.ExceptionHandled = true;
+        }
+    }
+}
diff --git a/SeaHaven.Services/DTOs/TeamMemberDTOs.cs b/SeaHaven.Services/DTOs/TeamMemberDTOs.cs
index 814e279..3a830fe 100644
--- a/SeaHaven.Services/DTOs/TeamMemberDTOs.cs
+++ b/SeaHaven.Services/DTOs/TeamMemberDTOs.cs
@@ -1,3 +1,4 @@
+using System.Text.Json.Serialization;
 using Data.SeaHavenIndustries.Enums;
 
 namespace SeaHaven.Services.DTOs;
@@ -23,6 +24,10 @@ public class TeamMemberCreatedDTO
     public string? Phone { get; init; }
     public required IReadOnlyList<string> ServiceAreas { get; init; }
     public bool PendingRegistration { get; init; }
+
+    /// <summary>Set only on create: false means the member exists but the invite email failed; re-invite from their details.</summary>
+    [JsonIgnore(Condition = JsonIgnoreCondition.WhenWritingNull)]
+    public bool? InviteEmailSent { get; init; }
 }
 
 public sealed class TeamMemberDetailDTO : TeamMemberCreatedDTO
diff --git a/SeaHaven.Services/Implementation/AuthenticationService.cs b/SeaHaven.Services/Implementation/AuthenticationService.cs
index 5df17de..bc7663c 100644
--- a/SeaHaven.Services/Implementation/AuthenticationService.cs
+++ b/SeaHaven.Services/Implementation/AuthenticationService.cs
@@ -81,7 +81,7 @@ namespace SeaHaven.Services.Implementation
                 Email = user.Email,
                 UserRole = userRoles.FirstOrDefault(),
                 PhoneNumber = user.PhoneNumber,
-                Fullname = user.FirstName + " " + user.LastName,
+                Fullname = $"{user.FirstName} {user.LastName}".Trim(),
                 Id = user.Id
             };
         }
diff --git a/SeaHaven.Services/Implementation/TeamMemberInviteService.cs b/SeaHaven.Services/Implementation/TeamMemberInviteService.cs
index 7577507..330254b 100644
--- a/SeaHaven.Services/Implementation/TeamMemberInviteService.cs
+++ b/SeaHaven.Services/Implementation/TeamMemberInviteService.cs
@@ -62,7 +62,8 @@ public sealed class TeamMemberInviteService : ITeamMemberInviteService
         var body =
             $"<p>Hi {WebUtility.HtmlEncode(name)},</p>" +
             "<p>You've been added to Seahaven. Set your password and confirm your email to finish creating your account.</p>" +
-            $"<p><a href=\"{WebUtility.HtmlEncode(link)}\">Finish registration</a></p>" +
+            // clicktracking=off stops SendGrid rewriting the link, so the token never passes through its redirect.
+            $"<p><a clicktracking=off href=\"{WebUtility.HtmlEncode(link)}\">Finish registration</a></p>" +
             $"<p>This link expires in {InviteLifetime.Days} days and can be used once.</p>";
 
         var sent = await _emailSender.SendEmailAsync(email, "You're invited to Seahaven", body);
diff --git a/SeaHaven.Services/Implementation/TeamMemberRegistrationService.cs b/SeaHaven.Services/Implementation/TeamMemberRegistrationService.cs
index 2bc306c..c64e119 100644
--- a/SeaHaven.Services/Implementation/TeamMemberRegistrationService.cs
+++ b/SeaHaven.Services/Implementation/TeamMemberRegistrationService.cs
@@ -149,6 +149,8 @@ public sealed partial class TeamMemberRegistrationService : ITeamMemberRegistrat
         if (context.Invite.EmailConfirmedAt is null)
             return Outcome(TeamMemberRegistrationStatus.EmailNotConfirmed);
 
+        // An omitted phone keeps what the admin entered; an explicit empty value clears it.
+        var updatePhone = request.Phone is not null;
         var phone = string.IsNullOrWhiteSpace(request.Phone) ? null : request.Phone.Trim();
         if (phone is not null && !PhonePattern().IsMatch(phone))
             return Outcome(TeamMemberRegistrationStatus.InvalidPhone);
@@ -165,8 +167,11 @@ public sealed partial class TeamMemberRegistrationService : ITeamMemberRegistrat
                     user.EmailConfirmed = true;
                     user.PendingRegistration = false;
                     user.UniqueName = "Active";
-                    user.PhoneNumber = phone;
-                    user.Contact = phone;
+                    if (updatePhone)
+                    {
+                        user.PhoneNumber = phone;
+                        user.Contact = phone;
+                    }
 
                     // Identity applies the shared password policy and persists the user.
                     var result = await _userManager.AddPasswordAsync(user, request.Password ?? "");
diff --git a/SeaHaven.Services/Implementation/TeamMemberService.cs b/SeaHaven.Services/Implementation/TeamMemberService.cs
index 6a25aef..2f62818 100644
--- a/SeaHaven.Services/Implementation/TeamMemberService.cs
+++ b/SeaHaven.Services/Implementation/TeamMemberService.cs
@@ -115,7 +115,7 @@ public sealed class TeamMemberService : ITeamMemberService
 
         // The member and their invite commit together; the email goes out only after
         // commit, so a rolled-back member never receives a link.
-        await _inviteService.SendAsync(invite!, user.Email!, user.FirstName!, cancellationToken);
+        var inviteEmailSent = await _inviteService.SendAsync(invite!, user.Email!, user.FirstName!, cancellationToken);
 
         return new CreateTeamMemberOutcomeDTO
         {
@@ -129,7 +129,8 @@ public sealed class TeamMemberService : ITeamMemberService
                 Email = user.Email,
                 Phone = user.PhoneNumber,
                 ServiceAreas = areas!,
-                PendingRegistration = true
+                PendingRegistration = true,
+                InviteEmailSent = inviteEmailSent
             }
         };
     }
diff --git a/SeaHavenIndustries.Tests/TeamMemberInviteRegistrationTests.cs b/SeaHavenIndustries.Tests/TeamMemberInviteRegistrationTests.cs
index 11632c4..dac402a 100644
--- a/SeaHavenIndustries.Tests/TeamMemberInviteRegistrationTests.cs
+++ b/SeaHavenIndustries.Tests/TeamMemberInviteRegistrationTests.cs
@@ -37,6 +37,7 @@ public sealed class TeamMemberInviteRegistrationTests
         var sent = Assert.Single(host.Sent.Messages);
         Assert.Equal(Email, sent.To);
         Assert.Contains($"{TeamMemberInviteTestHost.FrontendBaseUrl}/invite#{token}", sent.Body);
+        Assert.Contains("<a clicktracking=off href=", sent.Body);
     }
 
     [Fact]
@@ -58,6 +59,7 @@ public sealed class TeamMemberInviteRegistrationTests
         Assert.False(string.IsNullOrWhiteSpace(completed.Session!.Token));
         Assert.Equal(Email, completed.Session.Email);
         Assert.Equal(userId, completed.Session.Id);
+        Assert.Equal("Taylor Reed", completed.Session.Fullname);
         Assert.Contains("Dispatcher", completed.Session.UserRole);
 
         var user = await host.ReloadUserAsync(userId);
@@ -290,6 +292,59 @@ public sealed class TeamMemberInviteRegistrationTests
         Assert.False((await host.ReloadUserAsync(userId)).PendingRegistration);
     }
 
+    [Fact]
+    public async Task Complete_WithoutPhone_KeepsThePhoneTheAdminEntered()
+    {
+        await using var host = await TeamMemberInviteTestHost.CreateAsync();
+        var (userId, token) = await host.AddPendingMemberAsync(Email);
+        await host.ConfirmEmailAsync(token, Email);
+
+        Assert.Equal(TeamMemberRegistrationStatus.Ok, (await CompleteAsync(host, token, Password, phone: null)).Status);
+
+        var user = await host.ReloadUserAsync(userId);
+        Assert.Equal("555-0100", user.PhoneNumber);
+        Assert.Equal("555-0100", user.Contact);
+    }
+
+    [Fact]
+    public async Task Complete_WithAnEmptyPhone_ClearsIt()
+    {
+        await using var host = await TeamMemberInviteTestHost.CreateAsync();
+        var (userId, token) = await host.AddPendingMemberAsync(Email);
+        await host.ConfirmEmailAsync(token, Email);
+
+        Assert.Equal(TeamMemberRegistrationStatus.Ok, (await CompleteAsync(host, token, Password, phone: "")).Status);
+
+        var user = await host.ReloadUserAsync(userId);
+        Assert.Null(user.PhoneNumber);
+        Assert.Null(user.Contact);
+    }
+
+    [Theory]
+    [InlineData(true)]
+    [InlineData(false)]
+    public async Task CreatingPendingMember_ReportsWhetherTheInviteEmailWentOut(bool delivered)
+    {
+        await using var host = await TeamMemberInviteTestHost.CreateAsync();
+        host.Sent.Succeeds = delivered;
+
+        var outcome = await host.InScopeAsync(provider => provider.GetRequiredService<ITeamMemberService>().CreateAsync(
+            new CreateTeamMemberRequestDTO
+            {
+                Name = "Taylor Reed",
+                Role = "dispatcher",
+                Color = "#0D9488",
+                Email = Email,
+                ServiceAreas = new[] { "East" }
+            },
+            TeamMemberInviteTestHost.Admin(),
+            CancellationToken.None));
+
+        Assert.True(outcome.Success);
+        Assert.Equal(delivered, outcome.Member!.InviteEmailSent);
+        Assert.Single(await host.InvitesAsync(outcome.Member.Id));
+    }
+
     [Fact]
     public async Task Complete_InvalidPhone_IsRejectedWithoutConsumingTheInvite()
     {

From 1c8da7f344560d3c98a1158508737c5085691e3e Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 12:20:45 -0300
Subject: [PATCH 148/183] docs(readme): record that stored audit times are UTC
 and need no backfill

Review asked whether rows written by the old DateTime.Now stamps need a
backfill. They do not: the API has only run on Linux Elastic Beanstalk
hosts at their UTC default, and nothing in Terraform, .ebextensions or
.platform sets a time zone, so DateTime.Now already equalled UTC there.
Record that next to the hosting table so the decision is findable.
---
 README.md | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/README.md b/README.md
index 30598d7..0f1afd4 100644
--- a/README.md
+++ b/README.md
@@ -21,6 +21,12 @@ Both run in `us-east-1` on the .NET 8 Amazon Linux 2023 platform. Terraform in
 `terraform/live/` owns the environments; GitHub Actions owns the application
 versions. There is no production environment yet.
 
+Stored created, modified and deletion times are UTC: the API stamps them with
+`DateTime.UtcNow`, whatever the host's time zone. The API has only ever run on
+Linux Elastic Beanstalk hosts left at their UTC default (nothing in Terraform,
+`.ebextensions` or `.platform` sets a time zone), so rows written before the
+switch from `DateTime.Now` are already UTC and need no backfill.
+
 ## Architecture
 
 ```text

From c841e130be3b04829b8bccf82802ecf746840bcd Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 12:21:29 -0300
Subject: [PATCH 149/183] fix(auth): harden password reset codes against
 guessing and email enumeration

Forgot Password answers every address the same way and emails a code only
to an active account. Codes are stored as salted SHA-256 hashes, expire 15
minutes after issue, are replaced by a newer request, and are checked only
against the email they were issued to. Five failed checks delete the code;
attempts are reserved with one conditional UPDATE so concurrent guesses
cannot exceed the budget. VerificationCode requires the email, and email and
code are accepted in the JSON body so they stay out of URLs.

The three anonymous endpoints are rate limited to 10 requests per 15
minutes per client IP. Forwarded headers are trusted only through loopback
and private hops, since the API sits behind the EB load balancer and nginx.
The migration adds hash, salt, expiry and attempt columns and deletes the
old plaintext rows.
---
 .../AuthenticationControllerTests.cs          |   71 +-
 .../AuthenticationServiceTests.cs             |  110 +-
 .../Controllers/AuthenticationController.cs   |   78 +-
 .../DTOs/ForgetPassword_Dto.cs                |   13 +-
 .../PasswordResetRateLimiting.cs              |   84 +
 Api.SeaHavenIndustries/Program.cs             |    6 +
 ...5151249_HashPasswordResetCodes.Designer.cs | 4279 +++++++++++++++++
 .../20260925151249_HashPasswordResetCodes.cs  |   70 +
 .../ApplicationDbContextModelSnapshot.cs      |   16 +
 .../Models/ForgetPasswordCode.cs              |   20 +-
 .../ForgetPasswordDataService.cs              |   90 +-
 .../Interfaces/IForgetPasswordDataService.cs  |   18 +-
 .../Helpers/PasswordResetCodeSecrets.cs       |   40 +
 .../Implementation/AuthenticationService.cs   |  111 +-
 .../Interfaces/IAuthenticationService.cs      |   11 +-
 .../PasswordResetFlowTests.cs                 |  375 ++
 .../PasswordResetTestHost.cs                  |  275 ++
 17 files changed, 5520 insertions(+), 147 deletions(-)
 create mode 100644 Api.SeaHavenIndustries/Infrastructure/PasswordResetRateLimiting.cs
 create mode 100644 Data.SeaHavenIndustries/Migrations/20260925151249_HashPasswordResetCodes.Designer.cs
 create mode 100644 Data.SeaHavenIndustries/Migrations/20260925151249_HashPasswordResetCodes.cs
 create mode 100644 SeaHaven.Services/Helpers/PasswordResetCodeSecrets.cs
 create mode 100644 SeaHavenIndustries.Tests/PasswordResetFlowTests.cs
 create mode 100644 SeaHavenIndustries.Tests/PasswordResetTestHost.cs

diff --git a/Api.SeaHavenIndustries.Tests/AuthenticationControllerTests.cs b/Api.SeaHavenIndustries.Tests/AuthenticationControllerTests.cs
index 99d5ab8..5ec4371 100644
--- a/Api.SeaHavenIndustries.Tests/AuthenticationControllerTests.cs
+++ b/Api.SeaHavenIndustries.Tests/AuthenticationControllerTests.cs
@@ -168,35 +168,45 @@ public class AuthenticationControllerTests
     }
 
     [Fact]
-    public async Task ForgetPassword_Found_ReturnsCheckEmailMessage()
+    public async Task ForgetPassword_ReturnsTheSameSuccessWhetherOrNotTheEmailIsRegistered()
     {
         var service = new Mock<IAuthenticationService>();
-        service.Setup(s => s.ForgetPasswordAsync("a@b.com", It.IsAny<CancellationToken>())).ReturnsAsync(true);
-
         var controller = NewController(service);
 
-        var result = await controller.ForgetPassword("a@b.com", CancellationToken.None);
+        var registered = await controller.ForgetPassword(new ForgetPasswordRequest_Dto { Email = "a@b.com" }, null, CancellationToken.None);
+        var unregistered = await controller.ForgetPassword(null, "x@y.com", CancellationToken.None);
 
-        var ok = result.Should().BeOfType<OkObjectResult>().Subject;
+        var ok = registered.Should().BeOfType<OkObjectResult>().Subject;
         var response = ok.Value.Should().BeOfType<Response>().Subject;
         response.Status.Should().Be("Success ");
-        response.Message.Should().Be("Please check your email for code");
+        response.Message.Should().Be(AuthenticationController.ForgetPasswordMessage);
+        Json(unregistered.Should().BeOfType<OkObjectResult>().Subject.Value).Should().Be(Json(ok.Value));
+        service.Verify(s => s.ForgetPasswordAsync("a@b.com", It.IsAny<CancellationToken>()), Times.Once);
+        service.Verify(s => s.ForgetPasswordAsync("x@y.com", It.IsAny<CancellationToken>()), Times.Once);
     }
 
     [Fact]
-    public async Task ForgetPassword_NotFound_ReturnsNoSuchEmailMessage()
+    public async Task ForgetPassword_WhenServiceThrows_StillAnswersTheSameSuccessAndLogsNoDetail()
     {
         var service = new Mock<IAuthenticationService>();
-        service.Setup(s => s.ForgetPasswordAsync(It.IsAny<string>(), It.IsAny<CancellationToken>())).ReturnsAsync(false);
+        service.Setup(s => s.ForgetPasswordAsync(It.IsAny<string?>(), It.IsAny<CancellationToken>()))
+            .ThrowsAsync(new InvalidOperationException("SECRET a@b.com"));
+        var logger = new Mock<ILogger<AuthenticationController>>();
+        logger.Setup(x => x.IsEnabled(It.IsAny<LogLevel>())).Returns(true);
+        var controller = new AuthenticationController(service.Object, logger.Object);
 
-        var controller = NewController(service);
+        var result = await controller.ForgetPassword(new ForgetPasswordRequest_Dto { Email = "a@b.com" }, null, CancellationToken.None);
 
-        var result = await controller.ForgetPassword("x@y.com", CancellationToken.None);
-
-        var bad = result.Should().BeOfType<BadRequestObjectResult>().Subject;
-        var response = bad.Value.Should().BeOfType<Response>().Subject;
-        response.Status.Should().Be("Error");
-        response.Message.Should().Be("No such email is registered");
+        var response = result.Should().BeOfType<OkObjectResult>().Subject.Value.Should().BeOfType<Response>().Subject;
+        response.Message.Should().Be(AuthenticationController.ForgetPasswordMessage);
+        logger.Verify(
+            x => x.Log(
+                LogLevel.Error,
+                It.IsAny<EventId>(),
+                It.Is<It.IsAnyType>((state, _) => !state.ToString()!.Contains("a@b.com") && !state.ToString()!.Contains("SECRET")),
+                null,
+                It.IsAny<Func<It.IsAnyType, Exception?, string>>()),
+            Times.Once);
     }
 
     [Theory]
@@ -205,11 +215,11 @@ public class AuthenticationControllerTests
     public async Task VerificationCode_MapsServiceResult(bool matched, string expectedStatus, string expectedMessage)
     {
         var service = new Mock<IAuthenticationService>();
-        service.Setup(s => s.VerifyCodeAsync("123456", It.IsAny<CancellationToken>())).ReturnsAsync(matched);
+        service.Setup(s => s.VerifyCodeAsync("a@b.com", "123456", It.IsAny<CancellationToken>())).ReturnsAsync(matched);
 
         var controller = NewController(service);
 
-        var result = await controller.VerificationCode("123456", CancellationToken.None);
+        var result = await controller.VerificationCode(new VerificationCode_Dto { Email = "a@b.com", Code = "123456" }, null, null, CancellationToken.None);
 
         if (matched)
         {
@@ -227,6 +237,33 @@ public class AuthenticationControllerTests
         }
     }
 
+    [Fact]
+    public async Task VerificationCode_QueryOnlyCode_PassesNoEmailToTheService()
+    {
+        var service = new Mock<IAuthenticationService>();
+        var controller = NewController(service);
+
+        var result = await controller.VerificationCode(null, null, "123456", CancellationToken.None);
+
+        result.Should().BeOfType<BadRequestObjectResult>().Subject.Value.Should().BeOfType<Response>()
+            .Which.Message.Should().Be("Code Not Matched");
+        service.Verify(s => s.VerifyCodeAsync(null, "123456", It.IsAny<CancellationToken>()), Times.Once);
+    }
+
+    [Fact]
+    public async Task VerificationCode_WhenServiceThrows_AnswersTheGenericWrongCodeError()
+    {
+        var service = new Mock<IAuthenticationService>();
+        service.Setup(s => s.VerifyCodeAsync(It.IsAny<string?>(), It.IsAny<string?>(), It.IsAny<CancellationToken>()))
+            .ThrowsAsync(new InvalidOperationException("SECRET-internal-stack-detail"));
+        var controller = NewController(service);
+
+        var result = await controller.VerificationCode(new VerificationCode_Dto { Email = "a@b.com", Code = "1" }, null, null, CancellationToken.None);
+
+        Json(result.Should().BeOfType<BadRequestObjectResult>().Subject.Value)
+            .Should().Be(Json(new Response { Status = "Error", Message = "Code Not Matched" }));
+    }
+
     [Fact]
     public async Task ResetPassword_Matched_ReturnsPasswordChangedMessage()
     {
diff --git a/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs b/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs
index 7d9aa08..1e1c1f0 100644
--- a/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs
@@ -6,6 +6,7 @@ using Moq;
 using SeaHaven.DataServices.Interfaces;
 using SeaHaven.Services.Configuration;
 using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Helpers;
 using SeaHaven.Services.Implementation;
 using SeaHaven.Services.Interfaces;
 using System.Security.Claims;
@@ -25,7 +26,7 @@ public class AuthenticationServiceTests
         var (manager, s, h) = IdentityTestHelpers.CreateUserManager();
         store = s;
         hasher = h;
-        return new AuthenticationService(manager, Microsoft.Extensions.Options.Options.Create(JwtOptions), userData.Object, forget.Object, email.Object);
+        return new AuthenticationService(manager, Microsoft.Extensions.Options.Options.Create(JwtOptions), userData.Object, forget.Object, email.Object, TimeProvider.System);
     }
 
     private static JwtOptions JwtOptions => new()
@@ -99,31 +100,36 @@ public class AuthenticationServiceTests
     }
 
     [Fact]
-    public async Task ForgetPassword_RegisteredEmail_ReplacesCodeAndSendsEmail()
+    public async Task ForgetPassword_RegisteredEmail_StoresOnlyASaltedHashAndEmailsTheCode()
     {
         var user = IdentityTestHelpers.User();
         var userData = new Mock<IUserDataService>();
         userData.Setup(u => u.GetByEmailNormalizedAsync("alice@example.com", It.IsAny<CancellationToken>())).ReturnsAsync(user);
         var forget = new Mock<IForgetPasswordDataService>();
         var email = new Mock<IEmailSender>();
+        string? stored = null, salt = null, body = null;
+        DateTime expires = default;
+        forget.Setup(f => f.ReplaceCodeAsync(user.Email!, user.Id, It.IsAny<string>(), It.IsAny<string>(), It.IsAny<DateTime>(), It.IsAny<CancellationToken>()))
+            .Callback<string, string, string, string, DateTime, CancellationToken>((_, _, h, s, e, _) => { stored = h; salt = s; expires = e; })
+            .Returns(Task.CompletedTask);
+        email.Setup(e => e.SendEmailAsync(user.Email!, "Forget Password Request.", It.IsAny<string>()))
+            .Callback<string, string, string>((_, _, b) => body = b)
+            .ReturnsAsync(true);
 
         var service = NewService(userData, forget, email, out _, out _);
+        var before = DateTime.UtcNow;
 
-        var found = await service.ForgetPasswordAsync("alice@example.com", CancellationToken.None);
+        await service.ForgetPasswordAsync("alice@example.com", CancellationToken.None);
 
-        found.Should().BeTrue();
-        forget.Verify(
-            f => f.ReplaceCodeAsync(
-                user.Email!,
-                user.Id,
-                It.Is<string>(code => code.Length == 6 && code.All(char.IsDigit)),
-                It.IsAny<CancellationToken>()),
-            Times.Once);
-        email.Verify(e => e.SendEmailAsync(user.Email!, "Forget Password Request.", It.Is<string>(b => b.Contains("Your Password Reset Code is:"))), Times.Once);
+        var code = System.Text.RegularExpressions.Regex.Match(body!, @"Your Password Reset Code is: (\d{6})").Groups[1].Value;
+        code.Should().HaveLength(6);
+        stored.Should().NotBe(code).And.MatchRegex("^[0-9a-f]{64}$");
+        PasswordResetCodeSecrets.Matches(salt!, code, stored!).Should().BeTrue();
+        expires.Should().BeCloseTo(before.AddMinutes(15), TimeSpan.FromSeconds(5));
     }
 
     [Fact]
-    public async Task ForgetPassword_UnknownEmail_DoesNotEmailOrStoreCode()
+    public async Task ForgetPassword_UnknownEmail_SendsNothingButStillDoesTheDatabaseRoundTrip()
     {
         var userData = new Mock<IUserDataService>();
         userData.Setup(u => u.GetByEmailNormalizedAsync(It.IsAny<string>(), It.IsAny<CancellationToken>())).ReturnsAsync((ApplicationUser?)null);
@@ -132,40 +138,90 @@ public class AuthenticationServiceTests
 
         var service = NewService(userData, forget, email, out _, out _);
 
-        var found = await service.ForgetPasswordAsync("nope@example.com", CancellationToken.None);
+        await service.ForgetPasswordAsync("nope@example.com", CancellationToken.None);
+
+        forget.Verify(f => f.RemoveByEmailAsync("nope@example.com", It.IsAny<CancellationToken>()), Times.Once);
+        forget.Verify(f => f.ReplaceCodeAsync(It.IsAny<string>(), It.IsAny<string>(), It.IsAny<string>(), It.IsAny<string>(), It.IsAny<DateTime>(), It.IsAny<CancellationToken>()), Times.Never);
+        email.Verify(e => e.SendEmailAsync(It.IsAny<string>(), It.IsAny<string>(), It.IsAny<string>()), Times.Never);
+    }
+
+    [Fact]
+    public async Task ForgetPassword_DeletedAccount_IsTreatedAsUnregistered()
+    {
+        var userData = new Mock<IUserDataService>();
+        userData.Setup(u => u.GetByEmailNormalizedAsync(It.IsAny<string>(), It.IsAny<CancellationToken>()))
+            .ReturnsAsync(IdentityTestHelpers.User(isDeleted: true));
+        var forget = new Mock<IForgetPasswordDataService>();
+        var email = new Mock<IEmailSender>();
+
+        var service = NewService(userData, forget, email, out _, out _);
+
+        await service.ForgetPasswordAsync("alice@example.com", CancellationToken.None);
 
-        found.Should().BeFalse();
-        forget.Verify(f => f.ReplaceCodeAsync(It.IsAny<string>(), It.IsAny<string>(), It.IsAny<string>(), It.IsAny<CancellationToken>()), Times.Never);
         email.Verify(e => e.SendEmailAsync(It.IsAny<string>(), It.IsAny<string>(), It.IsAny<string>()), Times.Never);
     }
 
     [Theory]
-    [InlineData(true)]
-    [InlineData(false)]
-    public async Task VerifyCode_ForwardsDataServiceResult(bool exists)
+    [InlineData(null, "123456")]
+    [InlineData("", "123456")]
+    [InlineData("  ", "123456")]
+    [InlineData("a@b.com", null)]
+    [InlineData("a@b.com", "")]
+    public async Task VerifyCode_WithoutEmailOrCode_FailsWithoutTouchingStoredCodes(string? emailAddress, string? code)
     {
-        var forget = new Mock<IForgetPasswordDataService>();
-        forget.Setup(f => f.CodeExistsAsync("abc", It.IsAny<CancellationToken>())).ReturnsAsync(exists);
+        var forget = new Mock<IForgetPasswordDataService>(MockBehavior.Strict);
 
         var service = NewService(new Mock<IUserDataService>(), forget, new Mock<IEmailSender>(), out _, out _);
 
-        var result = await service.VerifyCodeAsync("abc", CancellationToken.None);
+        var result = await service.VerifyCodeAsync(emailAddress, code, CancellationToken.None);
 
-        result.Should().Be(exists);
+        result.Should().BeFalse();
     }
 
     [Fact]
-    public async Task ResetPassword_NoMatchingCode_ReturnsFalseWithoutReset()
+    public async Task ResetPassword_NoPendingCodeForEmail_ReturnsFalseWithoutReset()
     {
         var forget = new Mock<IForgetPasswordDataService>();
-        forget.Setup(f => f.ExistsByEmailAndCodeAsync(It.IsAny<string>(), It.IsAny<string>(), It.IsAny<CancellationToken>())).ReturnsAsync(false);
+        forget.Setup(f => f.GetByEmailAsync(It.IsAny<string>(), It.IsAny<CancellationToken>())).ReturnsAsync((ForgetPasswordCode?)null);
 
         var service = NewService(new Mock<IUserDataService>(), forget, new Mock<IEmailSender>(), out var store, out _);
 
-        var result = await service.ResetPasswordAsync("a@b.com", "999", "new", CancellationToken.None);
+        var result = await service.ResetPasswordAsync("a@b.com", "999999", "new", CancellationToken.None);
 
         result.Should().BeFalse();
         store.Verify(s => s.FindByIdAsync(It.IsAny<string>(), It.IsAny<CancellationToken>()), Times.Never);
-        forget.Verify(f => f.RemoveByEmailAsync(It.IsAny<string>(), It.IsAny<CancellationToken>()), Times.Never);
+        forget.Verify(f => f.TryConsumeAttemptAsync(It.IsAny<int>(), It.IsAny<int>(), It.IsAny<DateTime>(), It.IsAny<CancellationToken>()), Times.Never);
+    }
+
+    [Fact]
+    public async Task ResetPassword_AttemptBudgetSpent_DeletesTheCodeAndFails()
+    {
+        var pending = new ForgetPasswordCode { Id = 7, Email = "a@b.com", UserId = "u1", CodeSalt = "s", CodeHash = PasswordResetCodeSecrets.Hash("s", "123456"), FailedAttempts = 5 };
+        var forget = new Mock<IForgetPasswordDataService>();
+        forget.Setup(f => f.GetByEmailAsync("a@b.com", It.IsAny<CancellationToken>())).ReturnsAsync(pending);
+        forget.Setup(f => f.TryConsumeAttemptAsync(7, AuthenticationService.MaxCodeAttempts, It.IsAny<DateTime>(), It.IsAny<CancellationToken>())).ReturnsAsync(false);
+
+        var service = NewService(new Mock<IUserDataService>(), forget, new Mock<IEmailSender>(), out var store, out _);
+
+        var result = await service.ResetPasswordAsync("a@b.com", "123456", "New@67890", CancellationToken.None);
+
+        result.Should().BeFalse();
+        forget.Verify(f => f.RemoveAsync(7, It.IsAny<CancellationToken>()), Times.Once);
+        store.Verify(s => s.FindByIdAsync(It.IsAny<string>(), It.IsAny<CancellationToken>()), Times.Never);
+    }
+
+    [Theory]
+    [InlineData("123456", "123456", true)]
+    [InlineData("123456", " 123456 ", true)]
+    [InlineData("123456", "123457", false)]
+    public void ResetCodeHash_IsSaltedAndComparedByValue(string issued, string candidate, bool expected)
+    {
+        var salt = PasswordResetCodeSecrets.NewSalt();
+        var hash = PasswordResetCodeSecrets.Hash(salt, issued);
+
+        PasswordResetCodeSecrets.Matches(salt, candidate, hash).Should().Be(expected);
+        PasswordResetCodeSecrets.Hash(PasswordResetCodeSecrets.NewSalt(), issued).Should().NotBe(hash);
+        PasswordResetCodeSecrets.Matches("", issued, hash).Should().BeFalse();
+        PasswordResetCodeSecrets.Matches(salt, issued, "").Should().BeFalse();
     }
 }
diff --git a/Api.SeaHavenIndustries/Controllers/AuthenticationController.cs b/Api.SeaHavenIndustries/Controllers/AuthenticationController.cs
index 12fd8fa..469c1e9 100644
--- a/Api.SeaHavenIndustries/Controllers/AuthenticationController.cs
+++ b/Api.SeaHavenIndustries/Controllers/AuthenticationController.cs
@@ -1,11 +1,15 @@
 using Api.SeaHavenIndustries.DTOs;
 using Api.SeaHavenIndustries.Helper;
+using Api.SeaHavenIndustries.Infrastructure;
 using Data.SeaHavenIndustries;
 using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.ModelBinding;
+using Microsoft.AspNetCore.RateLimiting;
 using Microsoft.Extensions.Logging;
 using SeaHaven.Services.DTOs;
 using SeaHaven.Services.Interfaces;
+using System.Runtime.CompilerServices;
 using System.Security.Claims;
 
 namespace Api.SeaHavenIndustries.Controllers
@@ -104,30 +108,47 @@ namespace Api.SeaHavenIndustries.Controllers
 
         #region Forget Password Area
 
+        public const string ForgetPasswordMessage =
+            "If that email belongs to an account, a reset code has been sent to it.";
+
+        // Email and code are read from the JSON body so they stay out of URLs and proxy
+        // access logs; the query-string form is still accepted for older clients.
         [AllowAnonymous]
         [HttpPost()]
         [Route("ForgetPassword")]
-        public async Task<IActionResult> ForgetPassword(string Email, CancellationToken cancellationToken)
-        {
-            var found = await _authenticationService.ForgetPasswordAsync(Email, cancellationToken);
-            if (found)
-            {
-                return Ok(new Response { Status = "Success ", Message = "Please check your email for code" });
-            }
-            else
-            {
-                return BadRequest(new Response { Status = "Error", Message = "No such email is registered" });
-            }
-        }
-        //need email and code
-        [AllowAnonymous]
-        [HttpPost()]
-        [Route("VerificationCode")]
-        public async Task<IActionResult> VerificationCode(string code, CancellationToken cancellationToken)
+        [EnableRateLimiting(PasswordResetRateLimiting.ForgetPasswordPolicy)]
+        public async Task<IActionResult> ForgetPassword(
+            [FromBody(EmptyBodyBehavior = EmptyBodyBehavior.Allow)] ForgetPasswordRequest_Dto? body,
+            [FromQuery(Name = "Email")] string? email,
+            CancellationToken cancellationToken)
         {
             try
             {
-                if (await _authenticationService.VerifyCodeAsync(code, cancellationToken))
+                await _authenticationService.ForgetPasswordAsync(body?.Email ?? email, cancellationToken);
+            }
+            catch (Exception ex)
+            {
+                // Same answer as success: a failure only a registered address can hit
+                // must not reveal that the address is registered.
+                LogResetFailure(ex);
+            }
+
+            return Ok(new Response { Status = "Success ", Message = ForgetPasswordMessage });
+        }
+
+        [AllowAnonymous]
+        [HttpPost()]
+        [Route("VerificationCode")]
+        [EnableRateLimiting(PasswordResetRateLimiting.VerificationCodePolicy)]
+        public async Task<IActionResult> VerificationCode(
+            [FromBody(EmptyBodyBehavior = EmptyBodyBehavior.Allow)] VerificationCode_Dto? body,
+            [FromQuery] string? email,
+            [FromQuery] string? code,
+            CancellationToken cancellationToken)
+        {
+            try
+            {
+                if (await _authenticationService.VerifyCodeAsync(body?.Email ?? email, body?.Code ?? code, cancellationToken))
                 {
 
                     return Ok(new Response { Status = "Success ", Message = "Code Matched" });
@@ -139,14 +160,15 @@ namespace Api.SeaHavenIndustries.Controllers
             }
             catch (Exception ex)
             {
-                return BadRequest(new Response { Status = "Error", Message = _logger.Sanitize(ex) });
+                LogResetFailure(ex);
+                return BadRequest(new Response { Status = "Error", Message = "Code Not Matched" });
             }
         }
 
-        // need email, password and code
         [AllowAnonymous]
         [HttpPost()]
         [Route("ResetPassword")]
+        [EnableRateLimiting(PasswordResetRateLimiting.ResetPasswordPolicy)]
         public async Task<IActionResult> ResetPassword(ForgetPassword_Dto fpdto, CancellationToken cancellationToken)
         {
             try
@@ -162,11 +184,21 @@ namespace Api.SeaHavenIndustries.Controllers
             }
             catch (Exception ex)
             {
-
-                return BadRequest(new Response { Status = "Error", Message = _logger.Sanitize(ex) });
-
+                LogResetFailure(ex);
+                return BadRequest(new Response { Status = "Error", Message = "Your email or code not found please check" });
             }
         }
+
+        // These endpoints answer failures exactly like a wrong code or an unknown email, so
+        // an error only a registered account can trigger reveals nothing. Exception
+        // messages here can echo the email or code, so only the type is logged.
+        private void LogResetFailure(Exception exception, [CallerMemberName] string operation = "")
+        {
+            _logger.LogError(
+                "Password reset {Operation} failed with {ExceptionType}.",
+                operation,
+                exception.GetType().FullName);
+        }
         #endregion
     }
 }
diff --git a/Api.SeaHavenIndustries/DTOs/ForgetPassword_Dto.cs b/Api.SeaHavenIndustries/DTOs/ForgetPassword_Dto.cs
index 3ad9bae..1a06931 100644
--- a/Api.SeaHavenIndustries/DTOs/ForgetPassword_Dto.cs
+++ b/Api.SeaHavenIndustries/DTOs/ForgetPassword_Dto.cs
@@ -4,9 +4,20 @@ namespace Api.SeaHavenIndustries.DTOs
 {
     public class ForgetPassword_Dto
     {
-        public string Email { get; set; }
+        public string? Email { get; set; }
         [StringLength(100, ErrorMessage = "The {0} must be at least {2} and at max {1} characters long.", MinimumLength = 6)]
         public string? Password { get; set; }
         public string? Code { get; set; }
     }
+
+    public class ForgetPasswordRequest_Dto
+    {
+        public string? Email { get; set; }
+    }
+
+    public class VerificationCode_Dto
+    {
+        public string? Email { get; set; }
+        public string? Code { get; set; }
+    }
 }
diff --git a/Api.SeaHavenIndustries/Infrastructure/PasswordResetRateLimiting.cs b/Api.SeaHavenIndustries/Infrastructure/PasswordResetRateLimiting.cs
new file mode 100644
index 0000000..a9b25d5
--- /dev/null
+++ b/Api.SeaHavenIndustries/Infrastructure/PasswordResetRateLimiting.cs
@@ -0,0 +1,84 @@
+using System.Net;
+using System.Threading.RateLimiting;
+using Data.SeaHavenIndustries;
+using Microsoft.AspNetCore.HttpOverrides;
+using Microsoft.AspNetCore.RateLimiting;
+
+namespace Api.SeaHavenIndustries.Infrastructure;
+
+/// <summary>
+/// Per-client limits on the anonymous password reset endpoints, plus the
+/// forwarded-header trust that makes "per client" mean the caller and not the proxy.
+/// </summary>
+public static class PasswordResetRateLimiting
+{
+    public const string ForgetPasswordPolicy = "password-reset-request";
+    public const string VerificationCodePolicy = "password-reset-verify";
+    public const string ResetPasswordPolicy = "password-reset-confirm";
+
+    public const int PermitLimit = 10;
+    public static readonly TimeSpan Window = TimeSpan.FromMinutes(15);
+
+    public const string RejectedMessage = "Too many requests. Please try again later.";
+
+    /// <summary>
+    /// The API runs on Elastic Beanstalk behind an application load balancer and the
+    /// instance's nginx, so every request reaches Kestrel from loopback. X-Forwarded-For
+    /// is read right to left through loopback and private (VPC) hops only; the first
+    /// public address is the client. Entries a caller writes further left are ignored.
+    /// </summary>
+    public static IServiceCollection AddPasswordResetRateLimiting(this IServiceCollection services)
+    {
+        services.Configure<ForwardedHeadersOptions>(options =>
+        {
+            options.ForwardedHeaders = ForwardedHeaders.XForwardedFor;
+            options.ForwardLimit = null;
+            options.KnownNetworks.Clear();
+            options.KnownProxies.Clear();
+            options.KnownNetworks.Add(new Microsoft.AspNetCore.HttpOverrides.IPNetwork(IPAddress.Parse("127.0.0.0"), 8));
+            options.KnownNetworks.Add(new Microsoft.AspNetCore.HttpOverrides.IPNetwork(IPAddress.Parse("10.0.0.0"), 8));
+            options.KnownNetworks.Add(new Microsoft.AspNetCore.HttpOverrides.IPNetwork(IPAddress.Parse("172.16.0.0"), 12));
+            options.KnownNetworks.Add(new Microsoft.AspNetCore.HttpOverrides.IPNetwork(IPAddress.Parse("192.168.0.0"), 16));
+            options.KnownProxies.Add(IPAddress.IPv6Loopback);
+        });
+
+        services.AddRateLimiter(options =>
+        {
+            options.RejectionStatusCode = StatusCodes.Status429TooManyRequests;
+            options.OnRejected = async (context, cancellationToken) =>
+            {
+                context.HttpContext.Response.StatusCode = StatusCodes.Status429TooManyRequests;
+                await context.HttpContext.Response.WriteAsJsonAsync(
+                    new Response { Status = "Error", Message = RejectedMessage },
+                    cancellationToken);
+            };
+
+            AddPerClientPolicy(options, ForgetPasswordPolicy);
+            AddPerClientPolicy(options, VerificationCodePolicy);
+            AddPerClientPolicy(options, ResetPasswordPolicy);
+        });
+
+        return services;
+    }
+
+    public static string ClientPartitionKey(HttpContext context)
+    {
+        var address = context.Connection.RemoteIpAddress;
+        if (address == null)
+            return "unknown";
+        return (address.IsIPv4MappedToIPv6 ? address.MapToIPv4() : address).ToString();
+    }
+
+    private static void AddPerClientPolicy(RateLimiterOptions options, string policyName)
+    {
+        options.AddPolicy(policyName, context => RateLimitPartition.GetFixedWindowLimiter(
+            ClientPartitionKey(context),
+            _ => new FixedWindowRateLimiterOptions
+            {
+                PermitLimit = PermitLimit,
+                Window = Window,
+                QueueLimit = 0,
+                AutoReplenishment = true
+            }));
+    }
+}
diff --git a/Api.SeaHavenIndustries/Program.cs b/Api.SeaHavenIndustries/Program.cs
index 6baf11f..5dd1d2f 100644
--- a/Api.SeaHavenIndustries/Program.cs
+++ b/Api.SeaHavenIndustries/Program.cs
@@ -1,5 +1,6 @@
 using Api.SeaHavenIndustries.Helper;
 using Api.SeaHavenIndustries.HostedServices;
+using Api.SeaHavenIndustries.Infrastructure;
 using Api.SeaHavenIndustries.Middleware;
 using Api.SeaHavenIndustries.Observability;
 using Api.SeaHavenIndustries.Options;
@@ -63,6 +64,7 @@ builder.Services.AddResponseCompression(opts =>
     opts.MimeTypes = ResponseCompressionDefaults.MimeTypes.Concat(
        new[] { "application/octet-stream" });
 });
+builder.Services.AddPasswordResetRateLimiting();
 builder.Services.AddCors(option =>
 option.AddDefaultPolicy(builder => builder.AllowAnyOrigin().AllowAnyHeader().AllowAnyMethod()));
 
@@ -199,6 +201,9 @@ builder.Services.AddSwaggerGen(c =>
 
 var app = builder.Build();
 
+// First, so every later middleware and the rate limiter see the real client address.
+app.UseForwardedHeaders();
+
 // Configure the HTTP request pipeline.
 if (app.Environment.IsDevelopment() || app.Environment.IsProduction())
 {
@@ -216,6 +221,7 @@ app.UseStaticFiles();
 app.UseCors();
 app.UseMiddleware<LegacyDeprecationMiddleware>();
 app.UseRouting();
+app.UseRateLimiter();
 app.UseAuthentication();
 app.UseMiddleware<SentryRequestMetadataMiddleware>();
 app.UseAuthorization();
diff --git a/Data.SeaHavenIndustries/Migrations/20260925151249_HashPasswordResetCodes.Designer.cs b/Data.SeaHavenIndustries/Migrations/20260925151249_HashPasswordResetCodes.Designer.cs
new file mode 100644
index 0000000..a38743c
--- /dev/null
+++ b/Data.SeaHavenIndustries/Migrations/20260925151249_HashPasswordResetCodes.Designer.cs
@@ -0,0 +1,4279 @@
+// <auto-generated />
+using System;
+using Data.SeaHavenIndustries;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Metadata;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+
+#nullable disable
+
+namespace Data.SeaHavenIndustries.Migrations
+{
+    [DbContext(typeof(ApplicationDbContext))]
+    [Migration("20260925151249_HashPasswordResetCodes")]
+    partial class HashPasswordResetCodes
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasAnnotation("ProductVersion", "8.0.8")
+                .HasAnnotation("Relational:MaxIdentifierLength", 128);
+
+            SqlServerModelBuilderExtensions.UseIdentityColumns(modelBuilder);
+
+            modelBuilder.HasSequence("WorkOrderInternalNumberSequence");
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Accounts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("CurrencyCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Importance")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("IndustryId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("OwnerEmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Phone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PrivacySetting")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ServiceInstructions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Tags")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("TerritoryId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("TimeZone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Type")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Website")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Accounts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Addresses", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AddressType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Country")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("County")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("ContactId");
+
+                    b.ToTable("Addresses");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int>("AccessFailedCount")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Color")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ConcurrencyStamp")
+                        .IsConcurrencyToken()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Contact")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DeletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<bool>("EmailConfirmed")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("FirstName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Initials")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsAccountOwner")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("LastName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Locations")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("LockoutEnabled")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTimeOffset?>("LockoutEnd")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("NormalizedEmail")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("NormalizedUserName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("PasswordHash")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("PendingRegistration")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("PendingRegistrationCreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("PhoneNumberConfirmed")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("SecurityStamp")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("TwoFactorEnabled")
+                        .HasColumnType("bit");
+
+                    b.Property<int?>("Type")
+                        .HasColumnType("int");
+
+                    b.Property<string>("UniqueName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserImage")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("IsAccountOwner")
+                        .IsUnique()
+                        .HasDatabaseName("IX_AspNetUsers_IsAccountOwner")
+                        .HasFilter("IsAccountOwner = 1");
+
+                    b.HasIndex("NormalizedEmail")
+                        .HasDatabaseName("EmailIndex");
+
+                    b.HasIndex("NormalizedUserName")
+                        .IsUnique()
+                        .HasDatabaseName("UserNameIndex")
+                        .HasFilter("[NormalizedUserName] IS NOT NULL");
+
+                    b.ToTable("AspNetUsers", (string)null);
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Area", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("Areas");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("AssetCode")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Assets");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Category", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Categories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Comments", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CommentType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Commenter")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Commenttext")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Documents")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalCommentId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("ExternalSourceEmailS3Key")
+                        .HasMaxLength(2048)
+                        .HasColumnType("nvarchar(2048)");
+
+                    b.Property<DateTimeOffset?>("ExternalUpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalVersionHash")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RecordType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int?>("WorkerOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("UserId");
+
+                    b.HasIndex("WorkerOrderId");
+
+                    b.ToTable("Comments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.CompletionDocTemplate", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ExtraSafetyNote")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ServiceKey")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("TemplateUrl")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ServiceKey", "IsActive");
+
+                    b.ToTable("CompletionDocTemplates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.CompletionDocTemplateProcedure", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("CompletionDocTemplateId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Description")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CompletionDocTemplateId", "SortOrder");
+
+                    b.ToTable("CompletionDocTemplateProcedures");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ContactDetails", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DateOfBirth")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Gender")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PrivacySetting")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Tags")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Territory")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.ToTable("ContactDetails");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ContactType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FirstName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LastName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("MiddleName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Owner")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("SiteContactOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Title")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Contacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Department", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Departments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AcceptToken")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("AcknowledgedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CommercialStatusUpdatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CompletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DispatchNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DispatchedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("EmailSent")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("EstimatedArrivalAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("EtaManualOverride")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("InvoiceNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("InvoiceStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<decimal?>("NTEAmount")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<string>("PONumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PaymentStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ReplyToAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<DateTime?>("ScheduledDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TechPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("VendorNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<DateTime?>("VerifiedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("VerifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("Dispatches");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchChecklistItem", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CompletedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("CompletedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool>("IsCompleted")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ItemText")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("DispatchChecklistItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchSignoff", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Signature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignatureMethod")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("SignedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("SignoffType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.ToTable("DispatchSignoffs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchUpliftRequest", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<decimal?>("CurrentNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<DateTime?>("DecidedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DecidedByUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DecisionNote")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("EscalatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("EvidenceDocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("ExpiresAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("InitialNotificationSentAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("NotificationError")
+                        .HasMaxLength(500)
+                        .HasColumnType("nvarchar(500)");
+
+                    b.Property<string>("NotificationStatus")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<string>("RequestKey")
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<string>("RequestedByVendorName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<decimal>("RequestedNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<int>("RequiredTier")
+                        .HasColumnType("int");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<string>("Status")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<string>("VendorReason")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId")
+                        .IsUnique()
+                        .HasFilter("[Status] IN ('Pending', 'ChangesRequested')");
+
+                    b.HasIndex("EvidenceDocumentId");
+
+                    b.HasIndex("DispatchId", "RequestKey")
+                        .IsUnique()
+                        .HasFilter("[RequestKey] IS NOT NULL");
+
+                    b.ToTable("DispatchUpliftRequests");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchWorkOrder", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("DispatchWorkOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DropdownOption", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Category")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ParentValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Value")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("DropdownOptions");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("About")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("CanChangeProviderNumber")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ConfirmUserName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("DateOfBirth")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DepartmentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("EmployeeNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FacebookUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FirstName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Gender")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("HireDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<int?>("JobTitleId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("LastLogin")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LastName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("LinkedInUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("MiddleName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("PermissionGroupId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("RegionId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("SMSAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TimeZone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TwitterUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Website")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DepartmentId");
+
+                    b.HasIndex("JobTitleId");
+
+                    b.HasIndex("RegionId");
+
+                    b.ToTable("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeAddress", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CountryCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CountyId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("StateCode")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Street")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("StreetLineTwo")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId")
+                        .IsUnique();
+
+                    b.ToTable("EmployeeAddresses");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeEmail", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<int?>("EmailTypeId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsPrimary")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.ToTable("EmployeeEmails");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeePhone", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Extension")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsPrimary")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Number")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("PhoneTypeId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.ToTable("EmployeePhones");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Events", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("AllDay")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("EndDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("EndTime")
+                        .HasMaxLength(10)
+                        .HasColumnType("nvarchar(10)");
+
+                    b.Property<string>("EventColor")
+                        .IsRequired()
+                        .HasMaxLength(20)
+                        .HasColumnType("nvarchar(20)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Location")
+                        .HasMaxLength(150)
+                        .HasColumnType("nvarchar(150)");
+
+                    b.Property<int?>("RecordID")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RecordName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("RecordTargetType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("ReminderMinutes")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime>("StartDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("StartTime")
+                        .HasMaxLength(10)
+                        .HasColumnType("nvarchar(10)");
+
+                    b.Property<string>("Title")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Events");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.FollowUps", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("EmployeeId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Reason")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("ScheduleDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<TimeSpan>("ScheduleStartTime")
+                        .HasColumnType("time");
+
+                    b.Property<string>("Status")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("EmployeeId");
+
+                    b.HasIndex("LocationId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("FollowUps");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ForgetPasswordCode", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Code")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CodeHash")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("CodeSalt")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<string>("Email")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("ExpiresAtUtc")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("FailedAttempts")
+                        .HasColumnType("int");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("ForgetPasswordCodes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.JobTitle", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("JobTitles");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Address1")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Address2")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ExternalLocationId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Latitude")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Longitude")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Title")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.ToTable("Locations");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.PMSchedules", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AssetId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Frequency")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("StartDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AssetId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("PMSchedules");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BillingAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("Date")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ProjectName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("QuotId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ShippingAddress")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("Quotes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.QuotesLineItems", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Descriptions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<decimal?>("Lineitem")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<int?>("LineitemNumber")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("QuoteId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("QuoteId");
+
+                    b.ToTable("QuotesLines");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Region", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Regions");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Service", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("CompletionDocTemplateId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("IconKey")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<bool>("RequiresCompletionDocument")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Trade")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CompletionDocTemplateId");
+
+                    b.HasIndex("IsActive");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.HasIndex("Trade");
+
+                    b.ToTable("Services");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ServiceWorkOrderType", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("ServiceId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ServiceId", "WorkOrderType")
+                        .IsUnique();
+
+                    b.ToTable("ServiceWorkOrderTypes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.SitePreferredVendor", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Trade")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("UpdatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("LocationId", "VendorId")
+                        .IsUnique()
+                        .HasFilter("[Trade] IS NULL");
+
+                    b.HasIndex("LocationId", "VendorId", "Trade")
+                        .IsUnique()
+                        .HasFilter("[Trade] IS NOT NULL");
+
+                    b.ToTable("SitePreferredVendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplate", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("TaskListTemplates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplateItem", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ItemText")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.Property<int>("TaskListTemplateId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("TaskListTemplateId");
+
+                    b.ToTable("TaskListTemplateItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Template", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AfterPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AfterPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AssignTo")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DueDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Priority")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffSignature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderTitle")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AssignTo");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("LocationId");
+
+                    b.ToTable("Templates");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Trade", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<int>("SortOrder")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("Trades");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserPermissionOverride", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("PermissionKey")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<int>("State")
+                        .HasColumnType("int");
+
+                    b.HasKey("UserId", "PermissionKey");
+
+                    b.HasIndex("UserId", "PermissionKey")
+                        .IsUnique()
+                        .HasDatabaseName("IX_UserPermissionOverrides_UserId_PermissionKey");
+
+                    b.ToTable("UserPermissionOverrides");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserServiceArea", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Area")
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.HasKey("UserId", "Area");
+
+                    b.HasIndex("UserId", "Area")
+                        .IsUnique()
+                        .HasDatabaseName("IX_UserServiceAreas_UserId_Area");
+
+                    b.ToTable("UserServiceAreas");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AvailabilityStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("AvailabilityUpdatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("CompanyId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CompanyName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CompanyPhone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ContactName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("GoogleMapsUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Phone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PreferredContact")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TradeSpecialties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CompanyId");
+
+                    b.ToTable("Vendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAccessToken", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime>("ExpiresAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime>("IssuedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("LastUsedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("RevokedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Token")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Token")
+                        .IsUnique();
+
+                    b.HasIndex("VendorId");
+
+                    b.ToTable("VendorAccessTokens");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAuditLog", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Actor")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("FieldName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NewValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("OldValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("VendorId");
+
+                    b.ToTable("VendorAuditLogs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Address")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("AreaId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("City")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CompanyPhone")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Email")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("GoogleMapsUrl")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NormalizedName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<string>("State")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Zip")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AreaId");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique();
+
+                    b.ToTable("VendorCompanies");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompletionDocument", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ContentType")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("OriginalFileName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Purpose")
+                        .IsRequired()
+                        .HasMaxLength(30)
+                        .HasColumnType("nvarchar(30)");
+
+                    b.Property<string>("RejectionReason")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("ReplacesDocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ReviewStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ReviewedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ScanStatus")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ScannedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<long>("SizeBytes")
+                        .HasColumnType("bigint");
+
+                    b.Property<string>("StoredFileName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("VendorId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("Version")
+                        .HasColumnType("int");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DispatchId");
+
+                    b.HasIndex("VendorId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("VendorCompletionDocuments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("AdditionalContacts")
+                        .HasMaxLength(4000)
+                        .HasColumnType("nvarchar(4000)");
+
+                    b.Property<string>("AfterPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("AfterPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateOnly?>("AssignDate")
+                        .HasColumnType("date");
+
+                    b.Property<string>("AssignTo")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("AvetaRequired")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("AvettaTask")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("BeforPhotoIssue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Building")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("CarriedOver")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CompletedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Customer")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DateReported")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("DocStatus")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("DueDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ExternalAssignedTo")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<DateTimeOffset?>("ExternalLastOccurredAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalRecordType")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("ExternalSource")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset?>("ExternalUpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ExternalVersionHash")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("ExternalWorkOrderId")
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ExtraServices")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<string>("FlagColor")
+                        .HasMaxLength(7)
+                        .HasColumnType("nvarchar(7)");
+
+                    b.Property<string>("FrozenCompany")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FrozenPoc")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FrozenSite")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("InternalWONumber")
+                        .HasMaxLength(11)
+                        .HasColumnType("nvarchar(11)");
+
+                    b.Property<bool>("IsAddOn")
+                        .HasColumnType("bit");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("LegacyStatus")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("LifecycleStatus")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("LocationId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("OperationalFlags")
+                        .HasColumnType("int");
+
+                    b.Property<DateOnly?>("OriginalDate")
+                        .HasColumnType("date");
+
+                    b.Property<DateOnly?>("OriginalWeek")
+                        .HasColumnType("date");
+
+                    b.Property<string>("PO")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PocName")
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("PocNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<string>("PocPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int?>("PrimaryDispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Priority")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Problem")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("RescheduleCount")
+                        .HasColumnType("int");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<bool?>("ScheduleWeekOnly")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("ScheduledDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("ScheduledEnd")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("ScheduledStart")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Service")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<int?>("ServiceId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ServiceNameSnapshot")
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("ServiceNotes")
+                        .HasMaxLength(4000)
+                        .HasColumnType("nvarchar(4000)");
+
+                    b.Property<string>("Severity")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffAttachment")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SignOffSignature")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SiteCode")
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<string>("Source")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SourceEmailS3Key")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Status")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("SubTrade")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("TT")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateOnly?>("TargetWeek")
+                        .HasColumnType("date");
+
+                    b.Property<string>("TechPhone")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<string>("Trade")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<decimal?>("VendorNTE")
+                        .HasColumnType("decimal(18,2)");
+
+                    b.Property<string>("VendorNotes")
+                        .HasMaxLength(2000)
+                        .HasColumnType("nvarchar(2000)");
+
+                    b.Property<int?>("WorkOrderType")
+                        .HasColumnType("int");
+
+                    b.Property<string>("WorkerOrderNumber")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("WorkerOrderTitle")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool?>("istemplate")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.HasIndex("ExternalWorkOrderId")
+                        .IsUnique()
+                        .HasFilter("[ExternalWorkOrderId] IS NOT NULL AND [ExternalWorkOrderId] <> ''");
+
+                    b.HasIndex("InternalWONumber")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.HasIndex("LocationId");
+
+                    b.HasIndex("PrimaryDispatchId");
+
+                    b.HasIndex("ScheduledDate");
+
+                    b.HasIndex("ServiceId");
+
+                    b.HasIndex("SiteCode")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.HasIndex("WorkOrderType");
+
+                    b.HasIndex("AssignTo", "ScheduledDate");
+
+                    b.HasIndex("LifecycleStatus", "ScheduledDate")
+                        .HasFilter("[istemplate] = 0");
+
+                    b.ToTable("workOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAttachments", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Attachments")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("Category")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("workOrderAttachments");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAuditLog", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Action")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ActorType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("CorrelationId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("DispatchId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("EventType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FieldName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("NewValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("OldValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UserId");
+
+                    b.HasIndex("WorkOrderId");
+
+                    b.ToTable("WorkOrderAuditLogs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderCategories", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("workOrderCategories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderContacts", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int?>("ContactId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("CreatedDate")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("DeleterUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("DeletionTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool?>("IsDeleted")
+                        .HasColumnType("bit");
+
+                    b.Property<DateTime?>("LastModificationTime")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("LastModifierUserId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkorderId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("createdby")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("ContactId");
+
+                    b.HasIndex("WorkorderId");
+
+                    b.ToTable("WorkOrderContacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderExternalReceipt", b =>
+                {
+                    b.Property<long>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("bigint");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<long>("Id"));
+
+                    b.Property<string>("ExternalId")
+                        .IsRequired()
+                        .HasMaxLength(450)
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Kind")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<DateTimeOffset>("ProcessedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("Source")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset>("UpdatedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("VersionHash")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Source", "Kind", "ExternalId")
+                        .IsUnique()
+                        .HasDatabaseName("IX_WorkOrderExternalReceipts_Source_Kind_ExternalId");
+
+                    b.ToTable("WorkOrderExternalReceipts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderFieldLock", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("FieldName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<DateTime>("LockedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("LockedByUserId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkOrderId", "FieldName")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderFieldLocks");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderReconciliationJob", b =>
+                {
+                    b.Property<int>("Id")
+                        .HasColumnType("int");
+
+                    b.Property<int>("CommentsProcessed")
+                        .HasColumnType("int");
+
+                    b.Property<DateTimeOffset?>("CompletedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("ErrorCode")
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<Guid?>("FenceToken")
+                        .HasColumnType("uniqueidentifier");
+
+                    b.Property<DateTimeOffset?>("LeaseExpiresAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("Reason")
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<DateTimeOffset?>("RequestedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<byte[]>("RowVersion")
+                        .IsConcurrencyToken()
+                        .ValueGeneratedOnAddOrUpdate()
+                        .HasColumnType("rowversion");
+
+                    b.Property<Guid>("RunId")
+                        .HasColumnType("uniqueidentifier");
+
+                    b.Property<DateTimeOffset?>("StartedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<string>("State")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
+                    b.Property<int>("WorkOrdersProcessed")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("State");
+
+                    b.ToTable("WorkOrderReconciliationJobs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWebhookDelivery", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BodySha256")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("DeliveryId")
+                        .IsRequired()
+                        .HasMaxLength(128)
+                        .HasColumnType("nvarchar(128)");
+
+                    b.Property<string>("EventType")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<DateTimeOffset>("OccurredAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.Property<DateTimeOffset>("ProcessedAt")
+                        .HasColumnType("datetimeoffset");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DeliveryId")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderWebhookDeliveries");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWeekRolledLedger", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CorrelationId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("ProcessedAt")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateOnly>("SourceWeekStart")
+                        .HasColumnType("date");
+
+                    b.Property<int>("WorkOrderId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("WorkOrderId", "SourceWeekStart")
+                        .IsUnique();
+
+                    b.ToTable("WorkOrderWeekRolledLedgers");
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRole", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ConcurrencyStamp")
+                        .IsConcurrencyToken()
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.Property<string>("NormalizedName")
+                        .HasMaxLength(256)
+                        .HasColumnType("nvarchar(256)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("NormalizedName")
+                        .IsUnique()
+                        .HasDatabaseName("RoleNameIndex")
+                        .HasFilter("[NormalizedName] IS NOT NULL");
+
+                    b.ToTable("AspNetRoles", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRoleClaim<string>", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ClaimType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ClaimValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("RoleId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AspNetRoleClaims", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserClaim<string>", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("ClaimType")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ClaimValue")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UserId");
+
+                    b.ToTable("AspNetUserClaims", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserLogin<string>", b =>
+                {
+                    b.Property<string>("LoginProvider")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ProviderKey")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("ProviderDisplayName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("UserId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("LoginProvider", "ProviderKey");
+
+                    b.HasIndex("UserId");
+
+                    b.ToTable("AspNetUserLogins", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserRole<string>", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("RoleId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("UserId", "RoleId");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AspNetUserRoles", (string)null);
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserToken<string>", b =>
+                {
+                    b.Property<string>("UserId")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("LoginProvider")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("Value")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("UserId", "LoginProvider", "Name");
+
+                    b.ToTable("AspNetUserTokens", (string)null);
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Addresses", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany("Addresses")
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contact")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Contact");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Comments", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("Comments")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "ApplicationUser")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Comments")
+                        .HasForeignKey("WorkerOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("ApplicationUser");
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.CompletionDocTemplateProcedure", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.CompletionDocTemplate", "CompletionDocTemplate")
+                        .WithMany("Procedures")
+                        .HasForeignKey("CompletionDocTemplateId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("CompletionDocTemplate");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ContactDetails", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contact")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Contact");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany("Contacts")
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany("Contacts")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("Dispatches")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Dispatches")
+                        .HasForeignKey("WorkOrderId");
+
+                    b.Navigation("Vendor");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchChecklistItem", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("ChecklistItems")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchSignoff", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("Signoffs")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchUpliftRequest", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany()
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.VendorCompletionDocument", "EvidenceDocument")
+                        .WithMany()
+                        .HasForeignKey("EvidenceDocumentId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("EvidenceDocument");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.DispatchWorkOrder", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("DispatchWorkOrders")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Department", "Department")
+                        .WithMany("Employees")
+                        .HasForeignKey("DepartmentId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.JobTitle", "JobTitle")
+                        .WithMany("Employees")
+                        .HasForeignKey("JobTitleId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Region", "Region")
+                        .WithMany("Employees")
+                        .HasForeignKey("RegionId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Department");
+
+                    b.Navigation("JobTitle");
+
+                    b.Navigation("Region");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeAddress", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithOne("Address")
+                        .HasForeignKey("Data.SeaHavenIndustries.EmployeeAddress", "EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeeEmail", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany("Emails")
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.EmployeePhone", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany("Phones")
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Employee");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.FollowUps", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Employee", "Employee")
+                        .WithMany()
+                        .HasForeignKey("EmployeeId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("Employee");
+
+                    b.Navigation("Location");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.PMSchedules", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Assets", "Asset")
+                        .WithMany("PMSchedules")
+                        .HasForeignKey("AssetId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Asset");
+
+                    b.Navigation("Location");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "Contacts")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("Quotes")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Contacts");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.QuotesLineItems", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Quotes", "Quotes")
+                        .WithMany("LineItems")
+                        .HasForeignKey("QuoteId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Quotes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Service", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.CompletionDocTemplate", "CompletionDocTemplate")
+                        .WithMany()
+                        .HasForeignKey("CompletionDocTemplateId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("CompletionDocTemplate");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ServiceWorkOrderType", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Service", "Service")
+                        .WithMany("SupportedWorkOrderTypes")
+                        .HasForeignKey("ServiceId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Service");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.SitePreferredVendor", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Location")
+                        .WithMany()
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("SitePreferences")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Location");
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplateItem", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.TaskListTemplate", "Template")
+                        .WithMany("Items")
+                        .HasForeignKey("TaskListTemplateId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Template");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Template", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "AssignToUser")
+                        .WithMany("Templates")
+                        .HasForeignKey("AssignTo")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Category", "Category")
+                        .WithMany("Templates")
+                        .HasForeignKey("CategoryId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "POC")
+                        .WithMany()
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Locations")
+                        .WithMany("Templates")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("AssignToUser");
+
+                    b.Navigation("Category");
+
+                    b.Navigation("Locations");
+
+                    b.Navigation("POC");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserPermissionOverride", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("User");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.UserServiceArea", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany("ServiceAreas")
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("User");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.VendorCompany", "Company")
+                        .WithMany("Vendors")
+                        .HasForeignKey("CompanyId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Company");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAccessToken", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany()
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorAuditLog", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany("AuditLogs")
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Vendor");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Area", "Area")
+                        .WithMany()
+                        .HasForeignKey("AreaId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Area");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompletionDocument", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "Dispatch")
+                        .WithMany("CompletionDocuments")
+                        .HasForeignKey("DispatchId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.Vendor", "Vendor")
+                        .WithMany()
+                        .HasForeignKey("VendorId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("Dispatch");
+
+                    b.Navigation("Vendor");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Accounts", "Account")
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "AssignToUser")
+                        .WithMany("WorkOrders")
+                        .HasForeignKey("AssignTo")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Locations", "Locations")
+                        .WithMany("workOrders")
+                        .HasForeignKey("LocationId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Dispatch", "PrimaryDispatch")
+                        .WithMany()
+                        .HasForeignKey("PrimaryDispatchId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.Service", "ServiceDefinition")
+                        .WithMany()
+                        .HasForeignKey("ServiceId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Account");
+
+                    b.Navigation("AssignToUser");
+
+                    b.Navigation("Locations");
+
+                    b.Navigation("PrimaryDispatch");
+
+                    b.Navigation("ServiceDefinition");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAttachments", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("workOrderAttachments")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderAuditLog", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", "User")
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("User");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderCategories", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Category", "Category")
+                        .WithMany("WorkOrderCategories")
+                        .HasForeignKey("CategoryId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("WorkOrderCategories")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("Category");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderContacts", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.Contacts", "POC")
+                        .WithMany("WorkOrderContacts")
+                        .HasForeignKey("ContactId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("WorkOrderContacts")
+                        .HasForeignKey("WorkorderId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.Navigation("POC");
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderFieldLock", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany("FieldLocks")
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrderWeekRolledLedger", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.WorkOrder", "WorkOrder")
+                        .WithMany()
+                        .HasForeignKey("WorkOrderId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("WorkOrder");
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityRoleClaim<string>", b =>
+                {
+                    b.HasOne("Microsoft.AspNetCore.Identity.IdentityRole", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserClaim<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserLogin<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserRole<string>", b =>
+                {
+                    b.HasOne("Microsoft.AspNetCore.Identity.IdentityRole", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Microsoft.AspNetCore.Identity.IdentityUserToken<string>", b =>
+                {
+                    b.HasOne("Data.SeaHavenIndustries.ApplicationUser", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Accounts", b =>
+                {
+                    b.Navigation("Addresses");
+
+                    b.Navigation("Contacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.ApplicationUser", b =>
+                {
+                    b.Navigation("ServiceAreas");
+
+                    b.Navigation("Templates");
+
+                    b.Navigation("WorkOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Assets", b =>
+                {
+                    b.Navigation("PMSchedules");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Category", b =>
+                {
+                    b.Navigation("Templates");
+
+                    b.Navigation("WorkOrderCategories");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.CompletionDocTemplate", b =>
+                {
+                    b.Navigation("Procedures");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Contacts", b =>
+                {
+                    b.Navigation("WorkOrderContacts");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Department", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Dispatch", b =>
+                {
+                    b.Navigation("ChecklistItems");
+
+                    b.Navigation("Comments");
+
+                    b.Navigation("CompletionDocuments");
+
+                    b.Navigation("DispatchWorkOrders");
+
+                    b.Navigation("Signoffs");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Employee", b =>
+                {
+                    b.Navigation("Address");
+
+                    b.Navigation("Emails");
+
+                    b.Navigation("Phones");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.JobTitle", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Locations", b =>
+                {
+                    b.Navigation("Contacts");
+
+                    b.Navigation("Templates");
+
+                    b.Navigation("workOrders");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Quotes", b =>
+                {
+                    b.Navigation("LineItems");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Region", b =>
+                {
+                    b.Navigation("Employees");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Service", b =>
+                {
+                    b.Navigation("SupportedWorkOrderTypes");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.TaskListTemplate", b =>
+                {
+                    b.Navigation("Items");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.Vendor", b =>
+                {
+                    b.Navigation("AuditLogs");
+
+                    b.Navigation("Dispatches");
+
+                    b.Navigation("SitePreferences");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.VendorCompany", b =>
+                {
+                    b.Navigation("Vendors");
+                });
+
+            modelBuilder.Entity("Data.SeaHavenIndustries.WorkOrder", b =>
+                {
+                    b.Navigation("Comments");
+
+                    b.Navigation("Dispatches");
+
+                    b.Navigation("FieldLocks");
+
+                    b.Navigation("Quotes");
+
+                    b.Navigation("WorkOrderCategories");
+
+                    b.Navigation("WorkOrderContacts");
+
+                    b.Navigation("workOrderAttachments");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/Data.SeaHavenIndustries/Migrations/20260925151249_HashPasswordResetCodes.cs b/Data.SeaHavenIndustries/Migrations/20260925151249_HashPasswordResetCodes.cs
new file mode 100644
index 0000000..9ad344b
--- /dev/null
+++ b/Data.SeaHavenIndustries/Migrations/20260925151249_HashPasswordResetCodes.cs
@@ -0,0 +1,70 @@
+using System;
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Data.SeaHavenIndustries.Migrations
+{
+    /// <inheritdoc />
+    public partial class HashPasswordResetCodes : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            // Pending codes were stored in plaintext with no expiry. They are
+            // short-lived, so they are discarded rather than migrated; affected users
+            // request a new code.
+            migrationBuilder.Sql("DELETE FROM [ForgetPasswordCodes];");
+
+            migrationBuilder.AddColumn<string>(
+                name: "CodeHash",
+                table: "ForgetPasswordCodes",
+                type: "nvarchar(64)",
+                maxLength: 64,
+                nullable: false,
+                defaultValue: "");
+
+            migrationBuilder.AddColumn<string>(
+                name: "CodeSalt",
+                table: "ForgetPasswordCodes",
+                type: "nvarchar(32)",
+                maxLength: 32,
+                nullable: false,
+                defaultValue: "");
+
+            migrationBuilder.AddColumn<DateTime>(
+                name: "ExpiresAtUtc",
+                table: "ForgetPasswordCodes",
+                type: "datetime2",
+                nullable: false,
+                defaultValue: new DateTime(1, 1, 1, 0, 0, 0, 0, DateTimeKind.Unspecified));
+
+            migrationBuilder.AddColumn<int>(
+                name: "FailedAttempts",
+                table: "ForgetPasswordCodes",
+                type: "int",
+                nullable: false,
+                defaultValue: 0);
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropColumn(
+                name: "CodeHash",
+                table: "ForgetPasswordCodes");
+
+            migrationBuilder.DropColumn(
+                name: "CodeSalt",
+                table: "ForgetPasswordCodes");
+
+            migrationBuilder.DropColumn(
+                name: "ExpiresAtUtc",
+                table: "ForgetPasswordCodes");
+
+            migrationBuilder.DropColumn(
+                name: "FailedAttempts",
+                table: "ForgetPasswordCodes");
+        }
+    }
+}
diff --git a/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs b/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
index 795219d..81570fc 100644
--- a/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
+++ b/Data.SeaHavenIndustries/Migrations/ApplicationDbContextModelSnapshot.cs
@@ -1527,10 +1527,26 @@ namespace Data.SeaHavenIndustries.Migrations
                         .IsRequired()
                         .HasColumnType("nvarchar(max)");
 
+                    b.Property<string>("CodeHash")
+                        .IsRequired()
+                        .HasMaxLength(64)
+                        .HasColumnType("nvarchar(64)");
+
+                    b.Property<string>("CodeSalt")
+                        .IsRequired()
+                        .HasMaxLength(32)
+                        .HasColumnType("nvarchar(32)");
+
                     b.Property<string>("Email")
                         .IsRequired()
                         .HasColumnType("nvarchar(max)");
 
+                    b.Property<DateTime>("ExpiresAtUtc")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("FailedAttempts")
+                        .HasColumnType("int");
+
                     b.Property<string>("UserId")
                         .IsRequired()
                         .HasColumnType("nvarchar(max)");
diff --git a/Data.SeaHavenIndustries/Models/ForgetPasswordCode.cs b/Data.SeaHavenIndustries/Models/ForgetPasswordCode.cs
index 6a59aeb..3573851 100644
--- a/Data.SeaHavenIndustries/Models/ForgetPasswordCode.cs
+++ b/Data.SeaHavenIndustries/Models/ForgetPasswordCode.cs
@@ -1,5 +1,6 @@
 using System;
 using System.Collections.Generic;
+using System.ComponentModel.DataAnnotations;
 using System.Linq;
 using System.Text;
 using System.Threading.Tasks;
@@ -11,6 +12,23 @@ namespace Data.SeaHavenIndustries
         public int Id { get; set; }
         public string UserId { get; set; }
         public string Email { get; set; }
-        public string Code { get; set; }
+
+        /// <summary>
+        /// Legacy plaintext column. It is always written empty; only
+        /// <see cref="CodeHash"/> is compared.
+        /// </summary>
+        public string Code { get; set; } = string.Empty;
+
+        /// <summary>Lowercase hex SHA-256 of "<see cref="CodeSalt"/>:code".</summary>
+        [MaxLength(64)]
+        public string CodeHash { get; set; } = string.Empty;
+
+        [MaxLength(32)]
+        public string CodeSalt { get; set; } = string.Empty;
+
+        public DateTime ExpiresAtUtc { get; set; }
+
+        /// <summary>Checks consumed against this code, including concurrent ones still in flight.</summary>
+        public int FailedAttempts { get; set; }
     }
 }
diff --git a/SeaHaven.DataServices/Implementation/ForgetPasswordDataService.cs b/SeaHaven.DataServices/Implementation/ForgetPasswordDataService.cs
index c1781a2..7eec75f 100644
--- a/SeaHaven.DataServices/Implementation/ForgetPasswordDataService.cs
+++ b/SeaHaven.DataServices/Implementation/ForgetPasswordDataService.cs
@@ -13,71 +13,75 @@ namespace SeaHaven.DataServices.Implementation
             _context = context;
         }
 
-        public async Task ReplaceCodeAsync(string email, string userId, string code, CancellationToken cancellationToken)
+        public async Task ReplaceCodeAsync(string email, string userId, string codeHash, string codeSalt, DateTime expiresAtUtc, CancellationToken cancellationToken)
         {
-            var normalizedEmail = email.ToLower().Trim();
+            var normalizedEmail = Normalize(email);
 
             var existing = await _context.ForgetPasswordCodes
                 .Where(u => u.Email.ToLower().Trim() == normalizedEmail)
-                .FirstOrDefaultAsync(cancellationToken);
+                .ToListAsync(cancellationToken);
+            _context.ForgetPasswordCodes.RemoveRange(existing);
 
-            if (existing != null)
-            {
-                _context.ForgetPasswordCodes.Remove(existing);
-                await _context.SaveChangesAsync(cancellationToken);
-            }
-
-            var forgetPasswordCode = new ForgetPasswordCode
+            _context.ForgetPasswordCodes.Add(new ForgetPasswordCode
             {
                 Email = email,
                 UserId = userId,
-                Code = code
-            };
-
-            _context.ForgetPasswordCodes.Add(forgetPasswordCode);
+                Code = string.Empty,
+                CodeHash = codeHash,
+                CodeSalt = codeSalt,
+                ExpiresAtUtc = expiresAtUtc,
+                FailedAttempts = 0
+            });
             await _context.SaveChangesAsync(cancellationToken);
         }
 
-        public async Task<bool> CodeExistsAsync(string code, CancellationToken cancellationToken)
-        {
-            return await _context.ForgetPasswordCodes
-                .AsNoTracking()
-                .Where(u => u.Code == code)
-                .AnyAsync(cancellationToken);
-        }
-
-        public async Task<bool> ExistsByEmailAndCodeAsync(string email, string code, CancellationToken cancellationToken)
-        {
-            var normalizedEmail = email.ToLower().Trim();
-            var trimmedCode = code.Trim();
-
-            return await _context.ForgetPasswordCodes
-                .AsNoTracking()
-                .Where(u => u.Email.ToLower().Trim() == normalizedEmail && u.Code == trimmedCode)
-                .AnyAsync(cancellationToken);
-        }
-
         public async Task<ForgetPasswordCode?> GetByEmailAsync(string email, CancellationToken cancellationToken)
         {
-            var normalizedEmail = email.ToLower().Trim();
+            var normalizedEmail = Normalize(email);
 
             return await _context.ForgetPasswordCodes
+                .AsNoTracking()
                 .Where(u => u.Email.ToLower().Trim() == normalizedEmail)
+                .OrderByDescending(u => u.Id)
                 .FirstOrDefaultAsync(cancellationToken);
         }
 
+        public async Task<bool> TryConsumeAttemptAsync(int id, int maxAttempts, DateTime nowUtc, CancellationToken cancellationToken)
+        {
+            // A single conditional UPDATE, so concurrent checks can never consume
+            // more than maxAttempts between them.
+            var updated = await _context.ForgetPasswordCodes
+                .Where(u => u.Id == id && u.FailedAttempts < maxAttempts && u.ExpiresAtUtc > nowUtc)
+                .ExecuteUpdateAsync(
+                    setters => setters.SetProperty(u => u.FailedAttempts, u => u.FailedAttempts + 1),
+                    cancellationToken);
+            return updated == 1;
+        }
+
+        public async Task RefundAttemptAsync(int id, CancellationToken cancellationToken)
+        {
+            await _context.ForgetPasswordCodes
+                .Where(u => u.Id == id && u.FailedAttempts > 0)
+                .ExecuteUpdateAsync(
+                    setters => setters.SetProperty(u => u.FailedAttempts, u => u.FailedAttempts - 1),
+                    cancellationToken);
+        }
+
+        public async Task RemoveAsync(int id, CancellationToken cancellationToken)
+        {
+            await _context.ForgetPasswordCodes
+                .Where(u => u.Id == id)
+                .ExecuteDeleteAsync(cancellationToken);
+        }
+
         public async Task RemoveByEmailAsync(string email, CancellationToken cancellationToken)
         {
-            var normalizedEmail = email.ToLower().Trim();
-            var records = await _context.ForgetPasswordCodes
+            var normalizedEmail = Normalize(email);
+            await _context.ForgetPasswordCodes
                 .Where(code => code.Email.ToLower().Trim() == normalizedEmail)
-                .ToListAsync(cancellationToken);
-
-            if (records.Count == 0)
-                return;
-
-            _context.ForgetPasswordCodes.RemoveRange(records);
-            await _context.SaveChangesAsync(cancellationToken);
+                .ExecuteDeleteAsync(cancellationToken);
         }
+
+        private static string Normalize(string email) => email.ToLower().Trim();
     }
 }
diff --git a/SeaHaven.DataServices/Interfaces/IForgetPasswordDataService.cs b/SeaHaven.DataServices/Interfaces/IForgetPasswordDataService.cs
index 720e665..e145aa9 100644
--- a/SeaHaven.DataServices/Interfaces/IForgetPasswordDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IForgetPasswordDataService.cs
@@ -4,10 +4,22 @@ namespace SeaHaven.DataServices.Interfaces
 {
     public interface IForgetPasswordDataService
     {
-        Task ReplaceCodeAsync(string email, string userId, string code, CancellationToken cancellationToken);
-        Task<bool> CodeExistsAsync(string code, CancellationToken cancellationToken);
-        Task<bool> ExistsByEmailAndCodeAsync(string email, string code, CancellationToken cancellationToken);
+        /// <summary>Deletes every pending code for the email, then stores the new one.</summary>
+        Task ReplaceCodeAsync(string email, string userId, string codeHash, string codeSalt, DateTime expiresAtUtc, CancellationToken cancellationToken);
+
+        /// <summary>Returns the pending code for exactly this email, or null.</summary>
         Task<ForgetPasswordCode?> GetByEmailAsync(string email, CancellationToken cancellationToken);
+
+        /// <summary>
+        /// Atomically consumes one attempt when the code is unexpired and has fewer
+        /// than <paramref name="maxAttempts"/> consumed. Returns false otherwise.
+        /// </summary>
+        Task<bool> TryConsumeAttemptAsync(int id, int maxAttempts, DateTime nowUtc, CancellationToken cancellationToken);
+
+        /// <summary>Gives back an attempt consumed by a check that matched.</summary>
+        Task RefundAttemptAsync(int id, CancellationToken cancellationToken);
+
+        Task RemoveAsync(int id, CancellationToken cancellationToken);
         Task RemoveByEmailAsync(string email, CancellationToken cancellationToken);
     }
 }
diff --git a/SeaHaven.Services/Helpers/PasswordResetCodeSecrets.cs b/SeaHaven.Services/Helpers/PasswordResetCodeSecrets.cs
new file mode 100644
index 0000000..39762dd
--- /dev/null
+++ b/SeaHaven.Services/Helpers/PasswordResetCodeSecrets.cs
@@ -0,0 +1,40 @@
+using System.Globalization;
+using System.Security.Cryptography;
+using System.Text;
+
+namespace SeaHaven.Services.Helpers
+{
+    /// <summary>
+    /// Generation and hashing for emailed password reset codes. The raw code exists
+    /// only in memory and in the email sent to the account holder.
+    /// </summary>
+    public static class PasswordResetCodeSecrets
+    {
+        public static string NewCode()
+        {
+            return RandomNumberGenerator.GetInt32(0, 1_000_000).ToString("D6", CultureInfo.InvariantCulture);
+        }
+
+        public static string NewSalt()
+        {
+            return Convert.ToHexString(RandomNumberGenerator.GetBytes(16)).ToLowerInvariant();
+        }
+
+        public static string Hash(string salt, string code)
+        {
+            ArgumentNullException.ThrowIfNull(salt);
+            ArgumentNullException.ThrowIfNull(code);
+            return Convert.ToHexString(SHA256.HashData(Encoding.UTF8.GetBytes(salt + ":" + code))).ToLowerInvariant();
+        }
+
+        public static bool Matches(string salt, string candidate, string expectedHash)
+        {
+            if (string.IsNullOrEmpty(salt) || string.IsNullOrEmpty(expectedHash))
+                return false;
+
+            var actual = Encoding.ASCII.GetBytes(Hash(salt, candidate.Trim()));
+            var expected = Encoding.ASCII.GetBytes(expectedHash);
+            return CryptographicOperations.FixedTimeEquals(actual, expected);
+        }
+    }
+}
diff --git a/SeaHaven.Services/Implementation/AuthenticationService.cs b/SeaHaven.Services/Implementation/AuthenticationService.cs
index d86f19a..fa90dff 100644
--- a/SeaHaven.Services/Implementation/AuthenticationService.cs
+++ b/SeaHaven.Services/Implementation/AuthenticationService.cs
@@ -9,7 +9,6 @@ using SeaHaven.Services.Helpers;
 using SeaHaven.Services.Interfaces;
 using System.IdentityModel.Tokens.Jwt;
 using System.Security.Claims;
-using System.Security.Cryptography;
 using System.Text;
 
 namespace SeaHaven.Services.Implementation
@@ -21,18 +20,25 @@ namespace SeaHaven.Services.Implementation
         private readonly IUserDataService _userDataService;
         private readonly IForgetPasswordDataService _forgetPasswordDataService;
         private readonly IEmailSender _emailSender;
+        private readonly TimeProvider _timeProvider;
+
+        public static readonly TimeSpan ResetCodeLifetime = TimeSpan.FromMinutes(15);
+        public const int MaxCodeAttempts = 5;
+
         public AuthenticationService(
             UserManager<ApplicationUser> userManager,
             IOptions<JwtOptions> jwtOptions,
             IUserDataService userDataService,
             IForgetPasswordDataService forgetPasswordDataService,
-            IEmailSender emailSender)
+            IEmailSender emailSender,
+            TimeProvider timeProvider)
         {
             _userManager = userManager;
             _jwtOptions = jwtOptions.Value;
             _userDataService = userDataService;
             _forgetPasswordDataService = forgetPasswordDataService;
             _emailSender = emailSender;
+            _timeProvider = timeProvider;
         }
 
         public async Task<LoginResultDTO?> LoginAsync(string? username, string? password, CancellationToken cancellationToken)
@@ -111,48 +117,100 @@ namespace SeaHaven.Services.Implementation
             };
         }
 
-        public async Task<bool> ForgetPasswordAsync(string email, CancellationToken cancellationToken)
+        public async Task ForgetPasswordAsync(string? email, CancellationToken cancellationToken)
         {
-            var user = await _userDataService.GetByEmailNormalizedAsync(email, cancellationToken);
-            if (user == null) return false;
+            // Registered and unregistered addresses take the same path up to the
+            // email send: one user lookup, one code generated and hashed, one write.
+            var requested = email?.Trim() ?? string.Empty;
+            var user = requested.Length == 0
+                ? null
+                : await _userDataService.GetByEmailNormalizedAsync(requested, cancellationToken);
+            var code = PasswordResetCodeSecrets.NewCode();
+            var salt = PasswordResetCodeSecrets.NewSalt();
+            var hash = PasswordResetCodeSecrets.Hash(salt, code);
 
-            var code = GenerateRandomNo();
-            await _forgetPasswordDataService.ReplaceCodeAsync(user.Email ?? "", user.Id, code, cancellationToken);
-            var body = $"Your Password Reset Code is: " + code;
-            await _emailSender.SendEmailAsync(user.Email ?? email, "Forget Password Request.", body);
+            if (user == null || user.IsDeleted == true || string.IsNullOrWhiteSpace(user.Email))
+            {
+                await _forgetPasswordDataService.RemoveByEmailAsync(requested, cancellationToken);
+                return;
+            }
+
+            var expiresAtUtc = _timeProvider.GetUtcNow().UtcDateTime.Add(ResetCodeLifetime);
+            await _forgetPasswordDataService.ReplaceCodeAsync(user.Email, user.Id, hash, salt, expiresAtUtc, cancellationToken);
+            var body = $"Your Password Reset Code is: {code}. It expires in {(int)ResetCodeLifetime.TotalMinutes} minutes.";
+            await _emailSender.SendEmailAsync(user.Email, "Forget Password Request.", body);
+        }
+
+        public async Task<bool> VerifyCodeAsync(string? email, string? code, CancellationToken cancellationToken)
+        {
+            var pending = await CheckCodeAsync(email, code, cancellationToken);
+            if (pending == null)
+                return false;
+
+            // Verifying is a preview step; a correct code keeps all of its attempts.
+            await _forgetPasswordDataService.RefundAttemptAsync(pending.Id, cancellationToken);
             return true;
         }
 
-        public async Task<bool> VerifyCodeAsync(string code, CancellationToken cancellationToken)
+        public async Task<bool> ResetPasswordAsync(string? email, string? code, string? password, CancellationToken cancellationToken)
         {
-            return await _forgetPasswordDataService.CodeExistsAsync(code, cancellationToken);
-        }
-
-        public async Task<bool> ResetPasswordAsync(string email, string? code, string? password, CancellationToken cancellationToken)
-        {
-            if (string.IsNullOrWhiteSpace(code) || string.IsNullOrWhiteSpace(password))
+            if (string.IsNullOrWhiteSpace(password))
                 return false;
 
-            var matched = await _forgetPasswordDataService.ExistsByEmailAndCodeAsync(email, code, cancellationToken);
-            if (!matched) return false;
-
-            var record = await _forgetPasswordDataService.GetByEmailAsync(email, cancellationToken);
-            if (record == null)
+            var pending = await CheckCodeAsync(email, code, cancellationToken);
+            if (pending == null)
                 return false;
 
-            var user = await _userManager.FindByIdAsync(record.UserId);
-            if (user == null)
+            var user = await _userManager.FindByIdAsync(pending.UserId);
+            if (user == null || user.IsDeleted == true)
+            {
+                await _forgetPasswordDataService.RemoveAsync(pending.Id, cancellationToken);
                 return false;
+            }
 
             var token = await _userManager.GeneratePasswordResetTokenAsync(user);
             var result = await _userManager.ResetPasswordAsync(user, token, password);
             if (!result.Succeeded)
+            {
+                // The code was right and the new password was rejected: the user can
+                // try another password without spending an attempt.
+                await _forgetPasswordDataService.RefundAttemptAsync(pending.Id, cancellationToken);
                 return false;
+            }
 
-            await _forgetPasswordDataService.RemoveByEmailAsync(email, cancellationToken);
+            await _forgetPasswordDataService.RemoveAsync(pending.Id, cancellationToken);
             return true;
         }
 
+        /// <summary>
+        /// Returns the pending code record when <paramref name="code"/> matches the one
+        /// issued to <paramref name="email"/>. Every check consumes an attempt before
+        /// comparing; a check that uses the last attempt without matching deletes the code.
+        /// </summary>
+        private async Task<ForgetPasswordCode?> CheckCodeAsync(string? email, string? code, CancellationToken cancellationToken)
+        {
+            if (string.IsNullOrWhiteSpace(email) || string.IsNullOrWhiteSpace(code))
+                return null;
+
+            var pending = await _forgetPasswordDataService.GetByEmailAsync(email, cancellationToken);
+            if (pending == null)
+                return null;
+
+            var nowUtc = _timeProvider.GetUtcNow().UtcDateTime;
+            if (!await _forgetPasswordDataService.TryConsumeAttemptAsync(pending.Id, MaxCodeAttempts, nowUtc, cancellationToken))
+            {
+                await _forgetPasswordDataService.RemoveAsync(pending.Id, cancellationToken);
+                return null;
+            }
+
+            if (PasswordResetCodeSecrets.Matches(pending.CodeSalt, code, pending.CodeHash))
+                return pending;
+
+            if (pending.FailedAttempts + 1 >= MaxCodeAttempts)
+                await _forgetPasswordDataService.RemoveAsync(pending.Id, cancellationToken);
+            return null;
+        }
+
         private JwtSecurityToken GetToken(List<Claim> authClaims)
         {
             var authSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(_jwtOptions.Secret));
@@ -165,10 +223,5 @@ namespace SeaHaven.Services.Implementation
                 );
             return token;
         }
-
-        private static string GenerateRandomNo()
-        {
-            return RandomNumberGenerator.GetInt32(1_000_000).ToString("D6");
-        }
     }
 }
diff --git a/SeaHaven.Services/Interfaces/IAuthenticationService.cs b/SeaHaven.Services/Interfaces/IAuthenticationService.cs
index 426eb5f..210efd6 100644
--- a/SeaHaven.Services/Interfaces/IAuthenticationService.cs
+++ b/SeaHaven.Services/Interfaces/IAuthenticationService.cs
@@ -7,8 +7,13 @@ namespace SeaHaven.Services.Interfaces
         Task<LoginResultDTO?> LoginAsync(string? username, string? password, CancellationToken cancellationToken);
         Task<bool> ChangePasswordAsync(string userId, string? currentPassword, string? confirmPassword, CancellationToken cancellationToken);
         Task<UserProfileDTO?> UpdateProfileAsync(string userId, UpdateProfileRequestDTO dto, CancellationToken cancellationToken);
-        Task<bool> ForgetPasswordAsync(string email, CancellationToken cancellationToken);
-        Task<bool> VerifyCodeAsync(string code, CancellationToken cancellationToken);
-        Task<bool> ResetPasswordAsync(string email, string? code, string? password, CancellationToken cancellationToken);
+        /// <summary>
+        /// Emails a reset code when the address belongs to an active account. Gives no
+        /// indication either way, so callers cannot learn which emails are registered.
+        /// </summary>
+        Task ForgetPasswordAsync(string? email, CancellationToken cancellationToken);
+        /// <summary>Checks a code against the one issued to this email only.</summary>
+        Task<bool> VerifyCodeAsync(string? email, string? code, CancellationToken cancellationToken);
+        Task<bool> ResetPasswordAsync(string? email, string? code, string? password, CancellationToken cancellationToken);
     }
 }
diff --git a/SeaHavenIndustries.Tests/PasswordResetFlowTests.cs b/SeaHavenIndustries.Tests/PasswordResetFlowTests.cs
new file mode 100644
index 0000000..97b3630
--- /dev/null
+++ b/SeaHavenIndustries.Tests/PasswordResetFlowTests.cs
@@ -0,0 +1,375 @@
+using System.Net;
+using System.Security.Cryptography;
+using System.Text;
+using Api.SeaHavenIndustries.Controllers;
+using Api.SeaHavenIndustries.Infrastructure;
+using Microsoft.Extensions.DependencyInjection;
+using SeaHaven.DataServices.Interfaces;
+using SeaHaven.Services.Interfaces;
+
+namespace SeaHavenIndustries.Tests;
+
+/// <summary>
+/// The anonymous Forgot Password flow over HTTP, against the real controller,
+/// services, Identity and a relational database.
+/// </summary>
+public sealed class PasswordResetFlowTests
+{
+    private const string Alice = "alice@example.com";
+    private const string Bob = "bob@example.com";
+    private const string OldPassword = "Old@12345";
+    private const string NewPassword = "New@67890";
+    private const string CodeNotMatched = "{\"status\":\"Error\",\"message\":\"Code Not Matched\"}";
+    private const string ResetFailed = "{\"status\":\"Error\",\"message\":\"Your email or code not found please check\"}";
+
+    [Fact]
+    public async Task Registered_user_resets_password_end_to_end_and_signs_in_with_the_new_one()
+    {
+        await using var host = await PasswordResetTestHost.StartAsync();
+        await host.AddUserAsync(Alice, OldPassword);
+
+        var requested = await host.ForgetPasswordAsync(Alice);
+        Assert.Equal(HttpStatusCode.OK, requested.StatusCode);
+        var code = host.Sent.LatestCodeFor(Alice);
+        Assert.Matches("^[0-9]{6}$", code);
+
+        var verified = await host.VerifyAsync(Alice, code);
+        Assert.Equal(HttpStatusCode.OK, verified.StatusCode);
+        Assert.Contains("Code Matched", await verified.Content.ReadAsStringAsync());
+
+        var reset = await host.ResetAsync(Alice, code, NewPassword);
+        Assert.Equal(HttpStatusCode.OK, reset.StatusCode);
+
+        Assert.Equal(HttpStatusCode.OK, (await host.LoginAsync(Alice, NewPassword)).StatusCode);
+        Assert.Equal(HttpStatusCode.Unauthorized, (await host.LoginAsync(Alice, OldPassword)).StatusCode);
+
+        // A used code cannot be replayed.
+        Assert.Equal(ResetFailed, await (await host.ResetAsync(Alice, code, "Other@24680")).Content.ReadAsStringAsync());
+        Assert.Empty(await host.PendingCodesAsync());
+    }
+
+    [Fact]
+    public async Task ForgetPassword_answers_registered_and_unregistered_emails_identically_and_emails_only_the_registered_one()
+    {
+        await using var host = await PasswordResetTestHost.StartAsync();
+        await host.AddUserAsync(Alice, OldPassword);
+
+        var registered = await host.ForgetPasswordAsync(Alice);
+        var unregistered = await host.ForgetPasswordAsync("nobody@example.com");
+
+        Assert.Equal(HttpStatusCode.OK, registered.StatusCode);
+        Assert.Equal(registered.StatusCode, unregistered.StatusCode);
+        Assert.Equal(await registered.Content.ReadAsStringAsync(), await unregistered.Content.ReadAsStringAsync());
+        Assert.Contains(AuthenticationController.ForgetPasswordMessage, await registered.Content.ReadAsStringAsync());
+
+        var message = Assert.Single(host.Sent.Messages);
+        Assert.Equal(Alice, message.To);
+        Assert.Single(await host.PendingCodesAsync());
+    }
+
+    [Fact]
+    public async Task ForgetPassword_hides_an_email_delivery_failure_behind_the_same_response()
+    {
+        await using var host = await PasswordResetTestHost.StartAsync(new ThrowingEmailSender());
+        await host.AddUserAsync(Alice, OldPassword);
+
+        var registered = await host.ForgetPasswordAsync(Alice);
+        var unregistered = await host.ForgetPasswordAsync("nobody@example.com");
+
+        Assert.Equal(HttpStatusCode.OK, registered.StatusCode);
+        var body = await registered.Content.ReadAsStringAsync();
+        Assert.Equal(await unregistered.Content.ReadAsStringAsync(), body);
+        Assert.DoesNotContain("smtp-internal-detail", body);
+        Assert.DoesNotContain(host.Logged.Lines, line => line.Contains(Alice, StringComparison.OrdinalIgnoreCase));
+    }
+
+    [Fact]
+    public async Task Stored_code_is_a_salted_hash_and_the_plaintext_is_only_in_the_email()
+    {
+        await using var host = await PasswordResetTestHost.StartAsync();
+        await host.AddUserAsync(Alice, OldPassword);
+
+        await host.ForgetPasswordAsync(Alice);
+        var code = host.Sent.LatestCodeFor(Alice);
+        var row = Assert.Single(await host.PendingCodesAsync());
+
+        Assert.Equal(string.Empty, row.Code);
+        Assert.Matches("^[0-9a-f]{32}$", row.CodeSalt);
+        Assert.Matches("^[0-9a-f]{64}$", row.CodeHash);
+        Assert.NotEqual(Sha256Hex(code), row.CodeHash);
+        Assert.Equal(Sha256Hex(row.CodeSalt + ":" + code), row.CodeHash);
+        Assert.DoesNotContain(code, string.Join("|", row.Code, row.CodeHash, row.CodeSalt, row.Email, row.UserId));
+    }
+
+    [Fact]
+    public async Task Code_expires_fifteen_minutes_after_it_is_issued()
+    {
+        await using var host = await PasswordResetTestHost.StartAsync();
+        await host.AddUserAsync(Alice, OldPassword);
+        await host.ForgetPasswordAsync(Alice);
+        var code = host.Sent.LatestCodeFor(Alice);
+
+        host.Time.Advance(TimeSpan.FromMinutes(15) - TimeSpan.FromSeconds(1));
+        Assert.Equal(HttpStatusCode.OK, (await host.VerifyAsync(Alice, code)).StatusCode);
+
+        host.Time.Advance(TimeSpan.FromSeconds(1));
+        Assert.Equal(CodeNotMatched, await (await host.VerifyAsync(Alice, code)).Content.ReadAsStringAsync());
+        Assert.Equal(ResetFailed, await (await host.ResetAsync(Alice, code, NewPassword)).Content.ReadAsStringAsync());
+        Assert.Equal(HttpStatusCode.OK, (await host.LoginAsync(Alice, OldPassword)).StatusCode);
+    }
+
+    [Fact]
+    public async Task Requesting_a_new_code_invalidates_the_previous_one()
+    {
+        await using var host = await PasswordResetTestHost.StartAsync();
+        await host.AddUserAsync(Alice, OldPassword);
+
+        await host.ForgetPasswordAsync(Alice);
+        var first = host.Sent.LatestCodeFor(Alice);
+        string second;
+        do
+        {
+            await host.ForgetPasswordAsync(Alice);
+            second = host.Sent.LatestCodeFor(Alice);
+        }
+        while (second == first);
+
+        Assert.Equal(CodeNotMatched, await (await host.VerifyAsync(Alice, first)).Content.ReadAsStringAsync());
+        Assert.Single(await host.PendingCodesAsync());
+        Assert.Equal(HttpStatusCode.OK, (await host.ResetAsync(Alice, second, NewPassword)).StatusCode);
+    }
+
+    [Fact]
+    public async Task Five_wrong_attempts_invalidate_the_code_until_a_new_one_is_requested()
+    {
+        await using var host = await PasswordResetTestHost.StartAsync();
+        await host.AddUserAsync(Alice, OldPassword);
+        await host.ForgetPasswordAsync(Alice);
+        var code = host.Sent.LatestCodeFor(Alice);
+        var wrong = WrongCode(code);
+
+        // Verify and reset share one attempt budget.
+        for (var attempt = 0; attempt < 3; attempt++)
+            Assert.Equal(CodeNotMatched, await (await host.VerifyAsync(Alice, wrong)).Content.ReadAsStringAsync());
+        for (var attempt = 0; attempt < 2; attempt++)
+            Assert.Equal(ResetFailed, await (await host.ResetAsync(Alice, wrong, NewPassword)).Content.ReadAsStringAsync());
+
+        Assert.Equal(CodeNotMatched, await (await host.VerifyAsync(Alice, code)).Content.ReadAsStringAsync());
+        Assert.Equal(ResetFailed, await (await host.ResetAsync(Alice, code, NewPassword)).Content.ReadAsStringAsync());
+        Assert.Empty(await host.PendingCodesAsync());
+        Assert.Equal(HttpStatusCode.OK, (await host.LoginAsync(Alice, OldPassword)).StatusCode);
+
+        await host.ForgetPasswordAsync(Alice);
+        Assert.Equal(HttpStatusCode.OK, (await host.ResetAsync(Alice, host.Sent.LatestCodeFor(Alice), NewPassword)).StatusCode);
+    }
+
+    [Fact]
+    public async Task Four_wrong_attempts_then_the_right_code_still_resets()
+    {
+        await using var host = await PasswordResetTestHost.StartAsync();
+        await host.AddUserAsync(Alice, OldPassword);
+        await host.ForgetPasswordAsync(Alice);
+        var code = host.Sent.LatestCodeFor(Alice);
+
+        for (var attempt = 0; attempt < 4; attempt++)
+            Assert.Equal(CodeNotMatched, await (await host.VerifyAsync(Alice, WrongCode(code))).Content.ReadAsStringAsync());
+
+        // A correct verify does not spend an attempt, so the reset after it still succeeds.
+        Assert.Equal(HttpStatusCode.OK, (await host.VerifyAsync(Alice, code)).StatusCode);
+        Assert.Equal(HttpStatusCode.OK, (await host.ResetAsync(Alice, code, NewPassword)).StatusCode);
+    }
+
+    [Fact]
+    public async Task A_rejected_new_password_does_not_spend_an_attempt_or_the_code()
+    {
+        await using var host = await PasswordResetTestHost.StartAsync();
+        await host.AddUserAsync(Alice, OldPassword);
+        await host.ForgetPasswordAsync(Alice);
+        var code = host.Sent.LatestCodeFor(Alice);
+
+        for (var attempt = 0; attempt < 6; attempt++)
+            Assert.Equal(ResetFailed, await (await host.ResetAsync(Alice, code, "weakpassword")).Content.ReadAsStringAsync());
+
+        Assert.Equal(HttpStatusCode.OK, (await host.ResetAsync(Alice, code, NewPassword)).StatusCode);
+    }
+
+    [Fact]
+    public async Task A_code_is_checked_only_against_the_email_it_was_issued_to()
+    {
+        await using var host = await PasswordResetTestHost.StartAsync();
+        await host.AddUserAsync(Alice, OldPassword);
+        await host.AddUserAsync(Bob, OldPassword);
+        await host.ForgetPasswordAsync(Alice);
+        await host.ForgetPasswordAsync(Bob);
+        var aliceCode = host.Sent.LatestCodeFor(Alice);
+        var bobCode = host.Sent.LatestCodeFor(Bob);
+
+        if (aliceCode != bobCode)
+        {
+            Assert.Equal(CodeNotMatched, await (await host.VerifyAsync(Bob, aliceCode)).Content.ReadAsStringAsync());
+            Assert.Equal(ResetFailed, await (await host.ResetAsync(Bob, aliceCode, NewPassword)).Content.ReadAsStringAsync());
+        }
+
+        // Exhausting Bob's attempts leaves Alice's code and budget untouched.
+        for (var attempt = 0; attempt < 5; attempt++)
+            await host.VerifyAsync(Bob, WrongCode(bobCode));
+
+        var alice = Assert.Single(await host.PendingCodesAsync());
+        Assert.Equal(Alice, alice.Email);
+        Assert.Equal(0, alice.FailedAttempts);
+        Assert.Equal(HttpStatusCode.OK, (await host.ResetAsync(Alice, aliceCode, NewPassword)).StatusCode);
+        Assert.Equal(HttpStatusCode.OK, (await host.LoginAsync(Bob, OldPassword)).StatusCode);
+    }
+
+    [Fact]
+    public async Task Concurrent_checks_can_never_consume_more_than_five_attempts()
+    {
+        await using var host = await PasswordResetTestHost.StartAsync();
+        await host.AddUserAsync(Alice, OldPassword);
+        await host.ForgetPasswordAsync(Alice);
+        var row = Assert.Single(await host.PendingCodesAsync());
+        var now = host.Time.GetUtcNow().UtcDateTime;
+
+        var results = await Task.WhenAll(Enumerable.Range(0, 20).Select(async _ =>
+        {
+            await using var scope = host.Services.CreateAsyncScope();
+            return await scope.ServiceProvider.GetRequiredService<IForgetPasswordDataService>()
+                .TryConsumeAttemptAsync(row.Id, 5, now, CancellationToken.None);
+        }));
+
+        Assert.Equal(5, results.Count(consumed => consumed));
+        Assert.Equal(5, Assert.Single(await host.PendingCodesAsync()).FailedAttempts);
+    }
+
+    [Fact]
+    public async Task VerificationCode_without_an_email_fails_generically_and_never_matches_another_users_code()
+    {
+        await using var host = await PasswordResetTestHost.StartAsync();
+        await host.AddUserAsync(Alice, OldPassword);
+        await host.ForgetPasswordAsync(Alice);
+        var code = host.Sent.LatestCodeFor(Alice);
+
+        // The old client contract: code in the query string, no body, no content type.
+        var legacy = await host.Client.SendAsync(PasswordResetTestHost.Post($"api/Authentication/VerificationCode?code={code}"));
+
+        Assert.Equal(HttpStatusCode.BadRequest, legacy.StatusCode);
+        Assert.Equal(CodeNotMatched, await legacy.Content.ReadAsStringAsync());
+        Assert.Equal(0, Assert.Single(await host.PendingCodesAsync()).FailedAttempts);
+    }
+
+    [Fact]
+    public async Task VerificationCode_and_ForgetPassword_still_accept_the_query_string_form()
+    {
+        await using var host = await PasswordResetTestHost.StartAsync();
+        await host.AddUserAsync(Alice, OldPassword);
+
+        var requested = await host.Client.SendAsync(PasswordResetTestHost.Post($"api/Authentication/ForgetPassword?Email={Uri.EscapeDataString(Alice)}"));
+        Assert.Equal(HttpStatusCode.OK, requested.StatusCode);
+        var code = host.Sent.LatestCodeFor(Alice);
+
+        var verified = await host.Client.SendAsync(PasswordResetTestHost.Post(
+            $"api/Authentication/VerificationCode?email={Uri.EscapeDataString(Alice)}&code={code}"));
+        Assert.Equal(HttpStatusCode.OK, verified.StatusCode);
+    }
+
+    [Fact]
+    public async Task Each_endpoint_allows_ten_requests_per_client_per_window_then_answers_429()
+    {
+        await using var host = await PasswordResetTestHost.StartAsync();
+        const string client = "203.0.113.5";
+
+        for (var request = 0; request < PasswordResetRateLimiting.PermitLimit; request++)
+            Assert.Equal(HttpStatusCode.OK, (await host.ForgetPasswordAsync($"n{request}@example.com", client)).StatusCode);
+
+        var limited = await host.ForgetPasswordAsync("n@example.com", client);
+        Assert.Equal(HttpStatusCode.TooManyRequests, limited.StatusCode);
+        Assert.Equal(
+            "{\"status\":\"Error\",\"message\":\"Too many requests. Please try again later.\"}",
+            await limited.Content.ReadAsStringAsync());
+
+        // A left-hand X-Forwarded-For entry written by the caller does not buy a new bucket.
+        Assert.Equal(HttpStatusCode.TooManyRequests, (await host.ForgetPasswordAsync("n@example.com", "198.51.100.1, " + client)).StatusCode);
+
+        // Another client, and the same client on another endpoint, are unaffected.
+        Assert.Equal(HttpStatusCode.OK, (await host.ForgetPasswordAsync("n@example.com", "203.0.113.6")).StatusCode);
+        Assert.Equal(HttpStatusCode.BadRequest, (await host.VerifyAsync("n@example.com", "000000", client)).StatusCode);
+    }
+
+    [Theory]
+    [InlineData("api/Authentication/VerificationCode")]
+    [InlineData("api/Authentication/ResetPassword")]
+    public async Task Verify_and_reset_are_rate_limited_per_client(string path)
+    {
+        await using var host = await PasswordResetTestHost.StartAsync();
+        const string client = "203.0.113.9";
+        var body = new { email = Alice, code = "000000", password = NewPassword };
+
+        for (var request = 0; request < PasswordResetRateLimiting.PermitLimit; request++)
+            Assert.Equal(HttpStatusCode.BadRequest, (await host.Client.SendAsync(PasswordResetTestHost.Post(path, body, client))).StatusCode);
+
+        Assert.Equal(HttpStatusCode.TooManyRequests, (await host.Client.SendAsync(PasswordResetTestHost.Post(path, body, client))).StatusCode);
+    }
+
+    [Fact]
+    public async Task No_code_or_email_reaches_the_logs_during_the_whole_flow()
+    {
+        await using var host = await PasswordResetTestHost.StartAsync();
+        await host.AddUserAsync(Alice, OldPassword);
+
+        await host.ForgetPasswordAsync(Alice);
+        await host.ForgetPasswordAsync("nobody@example.com");
+        var code = host.Sent.LatestCodeFor(Alice);
+        await host.VerifyAsync(Alice, WrongCode(code));
+        await host.VerifyAsync(Alice, code);
+        await host.ResetAsync(Alice, code, NewPassword);
+
+        Assert.NotEmpty(host.Logged.Lines);
+        Assert.DoesNotContain(host.Logged.Lines, line => line.Contains(code, StringComparison.Ordinal));
+        Assert.DoesNotContain(host.Logged.Lines, line => line.Contains(WrongCode(code), StringComparison.Ordinal));
+        Assert.DoesNotContain(host.Logged.Lines, line => line.Contains("@example.com", StringComparison.OrdinalIgnoreCase));
+        Assert.DoesNotContain(host.Logged.Lines, line => line.Contains(NewPassword, StringComparison.Ordinal));
+    }
+
+    [Fact]
+    public void Api_host_registers_forwarded_headers_and_rate_limiting_in_the_right_order()
+    {
+        var program = File.ReadAllText(Path.Combine(RepoRoot(), "Api.SeaHavenIndustries", "Program.cs"));
+
+        Assert.Contains("builder.Services.AddPasswordResetRateLimiting();", program);
+        var build = program.IndexOf("builder.Build()", StringComparison.Ordinal);
+        var forwarded = program.IndexOf("app.UseForwardedHeaders()", StringComparison.Ordinal);
+        var firstMiddleware = program.IndexOf("app.Use", build, StringComparison.Ordinal);
+        var routing = program.IndexOf("app.UseRouting()", StringComparison.Ordinal);
+        var limiter = program.IndexOf("app.UseRateLimiter()", StringComparison.Ordinal);
+        var controllers = program.IndexOf("app.MapControllers()", StringComparison.Ordinal);
+
+        Assert.True(forwarded > build && forwarded == firstMiddleware, "UseForwardedHeaders must be the first middleware.");
+        Assert.True(routing < limiter, "UseRateLimiter must run after UseRouting so endpoint policies apply.");
+        Assert.True(limiter < controllers);
+    }
+
+    private static string WrongCode(string code) =>
+        ((int.Parse(code) + 1) % 1_000_000).ToString("D6");
+
+    private static string Sha256Hex(string value) =>
+        Convert.ToHexString(SHA256.HashData(Encoding.UTF8.GetBytes(value))).ToLowerInvariant();
+
+    private static string RepoRoot()
+    {
+        var directory = new DirectoryInfo(AppContext.BaseDirectory);
+        while (directory is not null
+            && !File.Exists(Path.Combine(directory.FullName, "Api.SeaHavenIndustries", "Program.cs")))
+        {
+            directory = directory.Parent;
+        }
+
+        return directory?.FullName
+            ?? throw new InvalidOperationException("Could not locate the repository root from " + AppContext.BaseDirectory);
+    }
+
+    private sealed class ThrowingEmailSender : IEmailSender
+    {
+        public Task<bool> SendEmailAsync(string emailTo, string subject, string body) =>
+            throw new InvalidOperationException("smtp-internal-detail " + emailTo);
+    }
+}
diff --git a/SeaHavenIndustries.Tests/PasswordResetTestHost.cs b/SeaHavenIndustries.Tests/PasswordResetTestHost.cs
new file mode 100644
index 0000000..bbfe044
--- /dev/null
+++ b/SeaHavenIndustries.Tests/PasswordResetTestHost.cs
@@ -0,0 +1,275 @@
+using System.Collections.Concurrent;
+using System.Net.Http.Json;
+using System.Text.RegularExpressions;
+using Api.SeaHavenIndustries.Controllers;
+using Api.SeaHavenIndustries.Infrastructure;
+using Data.SeaHavenIndustries;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Hosting;
+using Microsoft.AspNetCore.Hosting.Server;
+using Microsoft.AspNetCore.Hosting.Server.Features;
+using Microsoft.AspNetCore.Identity;
+using Microsoft.AspNetCore.Mvc.ApplicationParts;
+using Microsoft.AspNetCore.Mvc.Controllers;
+using Microsoft.Data.Sqlite;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Metadata;
+using Microsoft.Extensions.Configuration;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.DependencyInjection.Extensions;
+using Microsoft.Extensions.Logging;
+using SeaHaven.DataServices.DependencyInjection;
+using SeaHaven.Services.DependencyInjection;
+using SeaHaven.Services.Interfaces;
+
+namespace SeaHavenIndustries.Tests;
+
+/// <summary>
+/// Hosts the real <see cref="AuthenticationController"/> on Kestrel over a SQLite file
+/// database, with the real authentication service, data services, Identity, and the
+/// same rate limiting and forwarded-header registration the API host uses. Email goes
+/// to an in-memory sender, the clock is manual, and every log line is captured.
+/// </summary>
+internal sealed class PasswordResetTestHost : IAsyncDisposable
+{
+    private readonly WebApplication _app;
+    private readonly string _databasePath;
+
+    private PasswordResetTestHost(WebApplication app, string databasePath, HttpClient client)
+    {
+        _app = app;
+        _databasePath = databasePath;
+        Client = client;
+    }
+
+    public HttpClient Client { get; }
+    public CapturingEmailSender Sent { get; private init; } = null!;
+    public ManualTimeProvider Time { get; private init; } = null!;
+    public CapturingLoggerProvider Logged { get; private init; } = null!;
+    public IServiceProvider Services => _app.Services;
+
+    public static async Task<PasswordResetTestHost> StartAsync(IEmailSender? emailSender = null)
+    {
+        var databasePath = Path.Combine(Path.GetTempPath(), $"password-reset-{Guid.NewGuid():N}.db");
+        var connectionString = new SqliteConnectionStringBuilder { DataSource = databasePath, DefaultTimeout = 30 }.ToString();
+
+        var sent = new CapturingEmailSender();
+        var time = new ManualTimeProvider();
+        var logged = new CapturingLoggerProvider();
+
+        var builder = WebApplication.CreateBuilder(new WebApplicationOptions { EnvironmentName = "Testing" });
+        builder.WebHost.UseUrls("http://127.0.0.1:0");
+        builder.Configuration.AddInMemoryCollection(new Dictionary<string, string?>
+        {
+            ["JWT:Secret"] = new string('k', 64),
+            ["JWT:ValidIssuer"] = "issuer",
+            ["JWT:ValidAudience"] = "audience"
+        });
+        builder.Logging.ClearProviders();
+        builder.Logging.SetMinimumLevel(LogLevel.Trace);
+        builder.Logging.AddProvider(logged);
+
+        builder.Services.AddDbContext<ApplicationDbContext>(options => options.UseSqlite(connectionString));
+        builder.Services.Replace(ServiceDescriptor.Scoped<ApplicationDbContext>(provider =>
+            new SqlitePasswordResetDbContext(provider.GetRequiredService<DbContextOptions<ApplicationDbContext>>())));
+        builder.Services.AddIdentity<ApplicationUser, IdentityRole>(options =>
+            {
+                options.User.RequireUniqueEmail = false;
+            })
+            .AddEntityFrameworkStores<ApplicationDbContext>()
+            .AddDefaultTokenProviders();
+        builder.Services.AddSingleton<TimeProvider>(time);
+        builder.Services.AddSingleton<IEmailSender>(emailSender ?? sent);
+        builder.Services.AddDataServices();
+        builder.Services.AddBusinessServices(builder.Configuration);
+        builder.Services.AddControllers()
+            .AddApplicationPart(typeof(AuthenticationController).Assembly)
+            .ConfigureApplicationPartManager(manager =>
+            {
+                manager.FeatureProviders.Clear();
+                manager.FeatureProviders.Add(new OnlyAuthenticationController());
+            });
+        builder.Services.AddPasswordResetRateLimiting();
+
+        var app = builder.Build();
+        app.UseForwardedHeaders();
+        app.UseRouting();
+        app.UseRateLimiter();
+        app.MapControllers();
+
+        await using (var scope = app.Services.CreateAsyncScope())
+            await scope.ServiceProvider.GetRequiredService<ApplicationDbContext>().Database.EnsureCreatedAsync();
+
+        await app.StartAsync();
+        var address = app.Services.GetRequiredService<IServer>().Features
+            .Get<IServerAddressesFeature>()!.Addresses.Single();
+
+        return new PasswordResetTestHost(app, databasePath, new HttpClient { BaseAddress = new Uri(address) })
+        {
+            Sent = sent,
+            Time = time,
+            Logged = logged
+        };
+    }
+
+    public async Task<ApplicationUser> AddUserAsync(string email, string password)
+    {
+        await using var scope = _app.Services.CreateAsyncScope();
+        var users = scope.ServiceProvider.GetRequiredService<UserManager<ApplicationUser>>();
+        var user = new ApplicationUser
+        {
+            UserName = email,
+            Email = email,
+            FirstName = "Alice",
+            LastName = "Q",
+            EmailConfirmed = true,
+            CreatedDate = DateTime.UtcNow
+        };
+        var result = await users.CreateAsync(user, password);
+        Assert.True(result.Succeeded, string.Join("; ", result.Errors.Select(error => error.Description)));
+        return user;
+    }
+
+    public async Task<List<ForgetPasswordCode>> PendingCodesAsync()
+    {
+        await using var scope = _app.Services.CreateAsyncScope();
+        return await scope.ServiceProvider.GetRequiredService<ApplicationDbContext>()
+            .ForgetPasswordCodes.AsNoTracking().OrderBy(code => code.Id).ToListAsync();
+    }
+
+    public static HttpRequestMessage Post(string path, object? json = null, string? clientIp = null)
+    {
+        var request = new HttpRequestMessage(HttpMethod.Post, path);
+        if (json != null)
+            request.Content = JsonContent.Create(json);
+        if (clientIp != null)
+            request.Headers.Add("X-Forwarded-For", clientIp);
+        return request;
+    }
+
+    public Task<HttpResponseMessage> ForgetPasswordAsync(string email, string? clientIp = null) =>
+        Client.SendAsync(Post("api/Authentication/ForgetPassword", new { email }, clientIp));
+
+    public Task<HttpResponseMessage> VerifyAsync(string email, string code, string? clientIp = null) =>
+        Client.SendAsync(Post("api/Authentication/VerificationCode", new { email, code }, clientIp));
+
+    public Task<HttpResponseMessage> ResetAsync(string email, string code, string password, string? clientIp = null) =>
+        Client.SendAsync(Post("api/Authentication/ResetPassword", new { email, code, password }, clientIp));
+
+    public Task<HttpResponseMessage> LoginAsync(string username, string password) =>
+        Client.SendAsync(Post("api/Authentication/login", new { username, password }));
+
+    public async ValueTask DisposeAsync()
+    {
+        Client.Dispose();
+        await _app.StopAsync();
+        await _app.DisposeAsync();
+        SqliteConnection.ClearAllPools();
+        foreach (var path in new[] { _databasePath, _databasePath + "-wal", _databasePath + "-shm", _databasePath + "-journal" })
+        {
+            if (File.Exists(path))
+                File.Delete(path);
+        }
+    }
+
+    private sealed class OnlyAuthenticationController : ControllerFeatureProvider
+    {
+        protected override bool IsController(System.Reflection.TypeInfo typeInfo) =>
+            typeInfo.AsType() == typeof(AuthenticationController);
+    }
+
+    private sealed class SqlitePasswordResetDbContext : ApplicationDbContext
+    {
+        public SqlitePasswordResetDbContext(DbContextOptions<ApplicationDbContext> options)
+            : base(options)
+        {
+        }
+
+        protected override void OnModelCreating(ModelBuilder builder)
+        {
+            base.OnModelCreating(builder);
+
+            foreach (var index in builder.Model.GetEntityTypes().SelectMany(entity => entity.GetIndexes()))
+            {
+                // SQL Server filter syntax does not carry over; a filtered unique index
+                // without its filter would wrongly reject a second user.
+                if (index.GetFilter() is not null)
+                {
+                    index.SetFilter(null);
+                    index.IsUnique = false;
+                }
+            }
+
+            foreach (var property in builder.Model.GetEntityTypes()
+                         .SelectMany(entity => entity.GetProperties())
+                         .Where(property => property.Name == "RowVersion" && property.ClrType == typeof(byte[])))
+            {
+                property.ValueGenerated = ValueGenerated.Never;
+                property.IsConcurrencyToken = false;
+            }
+        }
+    }
+}
+
+internal sealed class ManualTimeProvider : TimeProvider
+{
+    private DateTimeOffset _now = new(2026, 9, 25, 12, 0, 0, TimeSpan.Zero);
+
+    public override DateTimeOffset GetUtcNow() => _now;
+
+    public void Advance(TimeSpan by) => _now = _now.Add(by);
+}
+
+internal sealed class CapturingEmailSender : IEmailSender
+{
+    private static readonly Regex CodePattern = new(@"Your Password Reset Code is: (\d{6})", RegexOptions.CultureInvariant);
+
+    public ConcurrentQueue<(string To, string Subject, string Body)> Messages { get; } = new();
+
+    public Task<bool> SendEmailAsync(string emailTo, string subject, string body)
+    {
+        Messages.Enqueue((emailTo, subject, body));
+        return Task.FromResult(true);
+    }
+
+    public string LatestCodeFor(string email)
+    {
+        var message = Messages.Last(sent => string.Equals(sent.To, email, StringComparison.OrdinalIgnoreCase));
+        return CodePattern.Match(message.Body).Groups[1].Value;
+    }
+}
+
+internal sealed class CapturingLoggerProvider : ILoggerProvider
+{
+    public ConcurrentQueue<string> Lines { get; } = new();
+
+    public ILogger CreateLogger(string categoryName) => new CapturingLogger(this, categoryName);
+
+    public void Dispose()
+    {
+    }
+
+    private sealed class CapturingLogger : ILogger
+    {
+        private readonly CapturingLoggerProvider _owner;
+        private readonly string _category;
+
+        public CapturingLogger(CapturingLoggerProvider owner, string category)
+        {
+            _owner = owner;
+            _category = category;
+        }
+
+        public IDisposable? BeginScope<TState>(TState state) where TState : notnull => null;
+
+        public bool IsEnabled(LogLevel logLevel) => true;
+
+        public void Log<TState>(LogLevel logLevel, EventId eventId, TState state, Exception? exception, Func<TState, Exception?, string> formatter)
+        {
+            var values = state is IEnumerable<KeyValuePair<string, object?>> pairs
+                ? string.Join(" ", pairs.Select(pair => $"{pair.Key}={pair.Value}"))
+                : string.Empty;
+            _owner.Lines.Enqueue($"{logLevel} {_category} {formatter(state, exception)} {values} {exception}");
+        }
+    }
+}

From bcc9b6d7a247a02f2ef4bc700a20396fba3f9c7f Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 12:31:17 -0300
Subject: [PATCH 150/183] fix(auth): invalidate every pending reset code for an
 email together

Two concurrent first requests can leave two pending codes for one email.
Exhausting or using one now deletes all of them, so a sibling code cannot
become live afterwards.
---
 .../AuthenticationServiceTests.cs             |  2 +-
 .../ForgetPasswordDataService.cs              |  7 -----
 .../Interfaces/IForgetPasswordDataService.cs  |  1 -
 .../Implementation/AuthenticationService.cs   |  8 ++---
 .../PasswordResetFlowTests.cs                 | 31 +++++++++++++++++++
 .../PasswordResetTestHost.cs                  | 22 +++++++++++++
 6 files changed, 58 insertions(+), 13 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs b/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs
index 1e1c1f0..ef8a297 100644
--- a/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs
@@ -206,7 +206,7 @@ public class AuthenticationServiceTests
         var result = await service.ResetPasswordAsync("a@b.com", "123456", "New@67890", CancellationToken.None);
 
         result.Should().BeFalse();
-        forget.Verify(f => f.RemoveAsync(7, It.IsAny<CancellationToken>()), Times.Once);
+        forget.Verify(f => f.RemoveByEmailAsync("a@b.com", It.IsAny<CancellationToken>()), Times.Once);
         store.Verify(s => s.FindByIdAsync(It.IsAny<string>(), It.IsAny<CancellationToken>()), Times.Never);
     }
 
diff --git a/SeaHaven.DataServices/Implementation/ForgetPasswordDataService.cs b/SeaHaven.DataServices/Implementation/ForgetPasswordDataService.cs
index 7eec75f..7e3b3c4 100644
--- a/SeaHaven.DataServices/Implementation/ForgetPasswordDataService.cs
+++ b/SeaHaven.DataServices/Implementation/ForgetPasswordDataService.cs
@@ -67,13 +67,6 @@ namespace SeaHaven.DataServices.Implementation
                     cancellationToken);
         }
 
-        public async Task RemoveAsync(int id, CancellationToken cancellationToken)
-        {
-            await _context.ForgetPasswordCodes
-                .Where(u => u.Id == id)
-                .ExecuteDeleteAsync(cancellationToken);
-        }
-
         public async Task RemoveByEmailAsync(string email, CancellationToken cancellationToken)
         {
             var normalizedEmail = Normalize(email);
diff --git a/SeaHaven.DataServices/Interfaces/IForgetPasswordDataService.cs b/SeaHaven.DataServices/Interfaces/IForgetPasswordDataService.cs
index e145aa9..a7de61e 100644
--- a/SeaHaven.DataServices/Interfaces/IForgetPasswordDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IForgetPasswordDataService.cs
@@ -19,7 +19,6 @@ namespace SeaHaven.DataServices.Interfaces
         /// <summary>Gives back an attempt consumed by a check that matched.</summary>
         Task RefundAttemptAsync(int id, CancellationToken cancellationToken);
 
-        Task RemoveAsync(int id, CancellationToken cancellationToken);
         Task RemoveByEmailAsync(string email, CancellationToken cancellationToken);
     }
 }
diff --git a/SeaHaven.Services/Implementation/AuthenticationService.cs b/SeaHaven.Services/Implementation/AuthenticationService.cs
index fa90dff..1a0d263 100644
--- a/SeaHaven.Services/Implementation/AuthenticationService.cs
+++ b/SeaHaven.Services/Implementation/AuthenticationService.cs
@@ -164,7 +164,7 @@ namespace SeaHaven.Services.Implementation
             var user = await _userManager.FindByIdAsync(pending.UserId);
             if (user == null || user.IsDeleted == true)
             {
-                await _forgetPasswordDataService.RemoveAsync(pending.Id, cancellationToken);
+                await _forgetPasswordDataService.RemoveByEmailAsync(pending.Email, cancellationToken);
                 return false;
             }
 
@@ -178,7 +178,7 @@ namespace SeaHaven.Services.Implementation
                 return false;
             }
 
-            await _forgetPasswordDataService.RemoveAsync(pending.Id, cancellationToken);
+            await _forgetPasswordDataService.RemoveByEmailAsync(pending.Email, cancellationToken);
             return true;
         }
 
@@ -199,7 +199,7 @@ namespace SeaHaven.Services.Implementation
             var nowUtc = _timeProvider.GetUtcNow().UtcDateTime;
             if (!await _forgetPasswordDataService.TryConsumeAttemptAsync(pending.Id, MaxCodeAttempts, nowUtc, cancellationToken))
             {
-                await _forgetPasswordDataService.RemoveAsync(pending.Id, cancellationToken);
+                await _forgetPasswordDataService.RemoveByEmailAsync(pending.Email, cancellationToken);
                 return null;
             }
 
@@ -207,7 +207,7 @@ namespace SeaHaven.Services.Implementation
                 return pending;
 
             if (pending.FailedAttempts + 1 >= MaxCodeAttempts)
-                await _forgetPasswordDataService.RemoveAsync(pending.Id, cancellationToken);
+                await _forgetPasswordDataService.RemoveByEmailAsync(pending.Email, cancellationToken);
             return null;
         }
 
diff --git a/SeaHavenIndustries.Tests/PasswordResetFlowTests.cs b/SeaHavenIndustries.Tests/PasswordResetFlowTests.cs
index 97b3630..51f3c70 100644
--- a/SeaHavenIndustries.Tests/PasswordResetFlowTests.cs
+++ b/SeaHavenIndustries.Tests/PasswordResetFlowTests.cs
@@ -163,6 +163,37 @@ public sealed class PasswordResetFlowTests
         Assert.Equal(HttpStatusCode.OK, (await host.ResetAsync(Alice, host.Sent.LatestCodeFor(Alice), NewPassword)).StatusCode);
     }
 
+    [Fact]
+    public async Task Exhausting_a_code_invalidates_every_pending_code_for_that_email()
+    {
+        await using var host = await PasswordResetTestHost.StartAsync();
+        var user = await host.AddUserAsync(Alice, OldPassword);
+        await host.ForgetPasswordAsync(Alice);
+        var older = host.Sent.LatestCodeFor(Alice);
+        var newest = await host.AddSiblingCodeAsync(Alice, user.Id);
+
+        for (var attempt = 0; attempt < 5; attempt++)
+            await host.VerifyAsync(Alice, WrongCode(newest));
+
+        Assert.Empty(await host.PendingCodesAsync());
+        Assert.Equal(ResetFailed, await (await host.ResetAsync(Alice, older, NewPassword)).Content.ReadAsStringAsync());
+    }
+
+    [Fact]
+    public async Task A_successful_reset_invalidates_every_pending_code_for_that_email()
+    {
+        await using var host = await PasswordResetTestHost.StartAsync();
+        var user = await host.AddUserAsync(Alice, OldPassword);
+        await host.ForgetPasswordAsync(Alice);
+        var older = host.Sent.LatestCodeFor(Alice);
+        var newest = await host.AddSiblingCodeAsync(Alice, user.Id);
+
+        Assert.Equal(HttpStatusCode.OK, (await host.ResetAsync(Alice, newest, NewPassword)).StatusCode);
+
+        Assert.Empty(await host.PendingCodesAsync());
+        Assert.Equal(ResetFailed, await (await host.ResetAsync(Alice, older, "Other@24680")).Content.ReadAsStringAsync());
+    }
+
     [Fact]
     public async Task Four_wrong_attempts_then_the_right_code_still_resets()
     {
diff --git a/SeaHavenIndustries.Tests/PasswordResetTestHost.cs b/SeaHavenIndustries.Tests/PasswordResetTestHost.cs
index bbfe044..6904954 100644
--- a/SeaHavenIndustries.Tests/PasswordResetTestHost.cs
+++ b/SeaHavenIndustries.Tests/PasswordResetTestHost.cs
@@ -137,6 +137,28 @@ internal sealed class PasswordResetTestHost : IAsyncDisposable
             .ForgetPasswordCodes.AsNoTracking().OrderBy(code => code.Id).ToListAsync();
     }
 
+    /// <summary>
+    /// Stores a second pending code for the email directly, as two concurrent first
+    /// requests could, and returns it. The new row is the newest one.
+    /// </summary>
+    public async Task<string> AddSiblingCodeAsync(string email, string userId)
+    {
+        const string code = "424242";
+        const string salt = "0123456789abcdef0123456789abcdef";
+        await using var scope = _app.Services.CreateAsyncScope();
+        var context = scope.ServiceProvider.GetRequiredService<ApplicationDbContext>();
+        context.ForgetPasswordCodes.Add(new ForgetPasswordCode
+        {
+            Email = email,
+            UserId = userId,
+            CodeSalt = salt,
+            CodeHash = SeaHaven.Services.Helpers.PasswordResetCodeSecrets.Hash(salt, code),
+            ExpiresAtUtc = Time.GetUtcNow().UtcDateTime.AddMinutes(15)
+        });
+        await context.SaveChangesAsync();
+        return code;
+    }
+
     public static HttpRequestMessage Post(string path, object? json = null, string? clientIp = null)
     {
         var request = new HttpRequestMessage(HttpMethod.Post, path);

From 561873a7973a839705f32bcd83ed2bd3488a9152 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 12:39:36 -0300
Subject: [PATCH 151/183] chore(migrations): regenerate the reset-code
 migration on the current main model

---
 ....cs => 20260925153843_HashPasswordResetCodes.Designer.cs} | 5 ++++-
 ...esetCodes.cs => 20260925153843_HashPasswordResetCodes.cs} | 0
 2 files changed, 4 insertions(+), 1 deletion(-)
 rename Data.SeaHavenIndustries/Migrations/{20260925151249_HashPasswordResetCodes.Designer.cs => 20260925153843_HashPasswordResetCodes.Designer.cs} (99%)
 rename Data.SeaHavenIndustries/Migrations/{20260925151249_HashPasswordResetCodes.cs => 20260925153843_HashPasswordResetCodes.cs} (100%)

diff --git a/Data.SeaHavenIndustries/Migrations/20260925151249_HashPasswordResetCodes.Designer.cs b/Data.SeaHavenIndustries/Migrations/20260925153843_HashPasswordResetCodes.Designer.cs
similarity index 99%
rename from Data.SeaHavenIndustries/Migrations/20260925151249_HashPasswordResetCodes.Designer.cs
rename to Data.SeaHavenIndustries/Migrations/20260925153843_HashPasswordResetCodes.Designer.cs
index a38743c..59a88ee 100644
--- a/Data.SeaHavenIndustries/Migrations/20260925151249_HashPasswordResetCodes.Designer.cs
+++ b/Data.SeaHavenIndustries/Migrations/20260925153843_HashPasswordResetCodes.Designer.cs
@@ -12,7 +12,7 @@ using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
 namespace Data.SeaHavenIndustries.Migrations
 {
     [DbContext(typeof(ApplicationDbContext))]
-    [Migration("20260925151249_HashPasswordResetCodes")]
+    [Migration("20260925153843_HashPasswordResetCodes")]
     partial class HashPasswordResetCodes
     {
         /// <inheritdoc />
@@ -1635,6 +1635,9 @@ namespace Data.SeaHavenIndustries.Migrations
                     b.Property<string>("Name")
                         .HasColumnType("nvarchar(max)");
 
+                    b.Property<string>("Notes")
+                        .HasColumnType("nvarchar(max)");
+
                     b.Property<string>("PhoneNumber")
                         .HasColumnType("nvarchar(max)");
 
diff --git a/Data.SeaHavenIndustries/Migrations/20260925151249_HashPasswordResetCodes.cs b/Data.SeaHavenIndustries/Migrations/20260925153843_HashPasswordResetCodes.cs
similarity index 100%
rename from Data.SeaHavenIndustries/Migrations/20260925151249_HashPasswordResetCodes.cs
rename to Data.SeaHavenIndustries/Migrations/20260925153843_HashPasswordResetCodes.cs

From f491d4c721551e82e6aba38af1d88b0ab447d5c8 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 12:45:04 -0300
Subject: [PATCH 152/183] fix(team-members): delete invites with their member,
 re-invite on email change, trust only 2xx SendGrid responses

---
 .../SendMessageTests.cs                       | 105 +++++++++++++++++
 Api.SeaHavenIndustries/Helper/SendMessage.cs  |  46 +++++---
 .../Implementation/UserDataService.cs         |   4 +
 .../Implementation/TeamMemberInviteService.cs |  22 +++-
 .../Implementation/TeamMemberService.cs       |   7 +-
 .../Interfaces/ITeamMemberInviteService.cs    |   8 ++
 .../TeamMemberInviteLifecycleTests.cs         | 106 ++++++++++++++++++
 7 files changed, 279 insertions(+), 19 deletions(-)
 create mode 100644 Api.SeaHavenIndustries.Tests/SendMessageTests.cs
 create mode 100644 SeaHavenIndustries.Tests/TeamMemberInviteLifecycleTests.cs

diff --git a/Api.SeaHavenIndustries.Tests/SendMessageTests.cs b/Api.SeaHavenIndustries.Tests/SendMessageTests.cs
new file mode 100644
index 0000000..806bcd1
--- /dev/null
+++ b/Api.SeaHavenIndustries.Tests/SendMessageTests.cs
@@ -0,0 +1,105 @@
+using System.Net;
+using Api.SeaHavenIndustries.Helper;
+using Microsoft.Extensions.Configuration;
+using Microsoft.Extensions.Logging;
+using Moq;
+using SendGrid;
+using SendGrid.Helpers.Mail;
+using Xunit;
+
+namespace Api.SeaHavenIndustries.Tests;
+
+public sealed class SendMessageTests
+{
+    private const string Recipient = "taylor@example.com";
+    private const string Subject = "You're invited to Seahaven";
+    private const string RejectionBody = "{\"errors\":[{\"message\":\"taylor@example.com does not exist\"}]}";
+
+    [Theory]
+    [InlineData(HttpStatusCode.OK, true)]
+    [InlineData(HttpStatusCode.Accepted, true)]
+    [InlineData(HttpStatusCode.BadRequest, false)]
+    [InlineData(HttpStatusCode.Unauthorized, false)]
+    [InlineData(HttpStatusCode.TooManyRequests, false)]
+    [InlineData(HttpStatusCode.InternalServerError, false)]
+    public async Task EverySendPath_ReportsDeliveryOnlyForASuccessStatus(HttpStatusCode status, bool delivered)
+    {
+        var sender = new StubbedSendMessage(status, new CapturingLogger());
+
+        Assert.Equal(delivered, await sender.SendEMail(Recipient, Subject, "<p>Hi</p>"));
+        Assert.Equal(delivered, await sender.SendEmailAsync(Recipient, Subject, "<p>Hi</p>"));
+        Assert.Equal(delivered, await sender.SendEMailAttachment(Recipient, Subject, new byte[] { 1, 2, 3 }));
+        Assert.Equal(delivered, await sender.SendDispatchEmail(Recipient, Subject, "<p>Hi</p>", null));
+    }
+
+    [Fact]
+    public async Task ARejectedSend_LogsOnlyTheStatusCode()
+    {
+        var logger = new CapturingLogger();
+        var sender = new StubbedSendMessage(HttpStatusCode.BadRequest, logger);
+
+        Assert.False(await sender.SendEMail(Recipient, Subject, "<p>secret link</p>"));
+
+        var entry = Assert.Single(logger.Entries);
+        Assert.Contains("400", entry);
+        Assert.DoesNotContain(Recipient, entry);
+        Assert.DoesNotContain(Subject, entry);
+        Assert.DoesNotContain("secret link", entry);
+        Assert.DoesNotContain("errors", entry);
+    }
+
+    [Fact]
+    public async Task AFailedSend_LogsOnlyTheExceptionType()
+    {
+        var logger = new CapturingLogger();
+        var sender = new StubbedSendMessage(
+            new HttpRequestException($"could not reach SendGrid for {Recipient}"),
+            logger);
+
+        Assert.False(await sender.SendEMail(Recipient, Subject, "<p>Hi</p>"));
+
+        var entry = Assert.Single(logger.Entries);
+        Assert.Contains(nameof(HttpRequestException), entry);
+        Assert.DoesNotContain(Recipient, entry);
+    }
+
+    private sealed class StubbedSendMessage : SendMessage
+    {
+        private readonly Mock<ISendGridClient> _client = new();
+
+        public StubbedSendMessage(HttpStatusCode status, ILogger<SendMessage> logger)
+            : base(new ConfigurationBuilder().Build(), logger)
+        {
+            _client
+                .Setup(client => client.SendEmailAsync(It.IsAny<SendGridMessage>(), It.IsAny<CancellationToken>()))
+                .ReturnsAsync(() => new Response(status, new StringContent(RejectionBody), null));
+        }
+
+        public StubbedSendMessage(Exception failure, ILogger<SendMessage> logger)
+            : base(new ConfigurationBuilder().Build(), logger)
+        {
+            _client
+                .Setup(client => client.SendEmailAsync(It.IsAny<SendGridMessage>(), It.IsAny<CancellationToken>()))
+                .ThrowsAsync(failure);
+        }
+
+        protected override ISendGridClient CreateClient(string? apiKey) => _client.Object;
+    }
+
+    private sealed class CapturingLogger : ILogger<SendMessage>
+    {
+        public List<string> Entries { get; } = new();
+
+        public IDisposable? BeginScope<TState>(TState state) where TState : notnull => null;
+
+        public bool IsEnabled(LogLevel logLevel) => true;
+
+        public void Log<TState>(
+            LogLevel logLevel,
+            EventId eventId,
+            TState state,
+            Exception? exception,
+            Func<TState, Exception?, string> formatter) =>
+            Entries.Add($"{formatter(state, exception)} {exception}");
+    }
+}
diff --git a/Api.SeaHavenIndustries/Helper/SendMessage.cs b/Api.SeaHavenIndustries/Helper/SendMessage.cs
index 08db640..5bab7ee 100644
--- a/Api.SeaHavenIndustries/Helper/SendMessage.cs
+++ b/Api.SeaHavenIndustries/Helper/SendMessage.cs
@@ -9,14 +9,37 @@ namespace Api.SeaHavenIndustries.Helper
     public class SendMessage : IEmailSender
     {
         private IConfiguration _configuration;
+        private readonly ILogger<SendMessage> _logger;
         //string keysapi = "";
 
-        public SendMessage(IConfiguration configuration)
+        public SendMessage(IConfiguration configuration, ILogger<SendMessage> logger)
         {
             _configuration = configuration;
+            _logger = logger;
             //keysapi = _configuration.GetValue<string>("SendGrid:ApiKey");
         }
 
+        protected virtual ISendGridClient CreateClient(string? apiKey) => new SendGridClient(apiKey);
+
+        /// <summary>
+        /// SendGrid reports a rejected message through the status code, not an exception.
+        /// Only the status is logged: never the recipient, subject or response body.
+        /// </summary>
+        private bool Delivered(Response response)
+        {
+            if (response.IsSuccessStatusCode)
+                return true;
+
+            _logger.LogWarning("SendGrid rejected an email with status {StatusCode}.", (int)response.StatusCode);
+            return false;
+        }
+
+        private bool Failed(Exception ex)
+        {
+            _logger.LogWarning("SendGrid email send failed with {ExceptionType}.", ex.GetType().Name);
+            return false;
+        }
+
         public async Task<bool> SendEMail(string emailTo, string subject, string body)
         {
             try
@@ -41,7 +64,7 @@ namespace Api.SeaHavenIndustries.Helper
                 var apiKey = _configuration.GetValue<string>("SendGrid:ApiKey");
 
                 //var apiKey = "<SENDGRID_API_KEY>";
-                var client = new SendGridClient(apiKey);
+                var client = CreateClient(apiKey);
                 var from = new EmailAddress("tech@seahavenind.com", "Sea haven Industries");
                 //var subject = "Sending with SendGrid is Fun";
                 var to = new EmailAddress(emailTo, "");
@@ -51,12 +74,11 @@ namespace Api.SeaHavenIndustries.Helper
                 var htmlContent = body;
                 var msg = MailHelper.CreateSingleEmail(from, to, subject, plainTextContent, htmlContent);
                 var response = await client.SendEmailAsync(msg);
-                var dd = response.Body.ReadAsStringAsync();
-                return true;
+                return Delivered(response);
             }
             catch (Exception ex)
             {
-                return false;
+                return Failed(ex);
             }
         }
         public async Task<bool> SendEmailAsync(string emailTo, string subject, string htmlBody)
@@ -69,7 +91,7 @@ namespace Api.SeaHavenIndustries.Helper
                 var apiKey = _configuration.GetValue<string>("SendGrid:ApiKey");
 
                 //var apiKey = "<SENDGRID_API_KEY>";
-                var client = new SendGridClient(apiKey);
+                var client = CreateClient(apiKey);
                 var from = new EmailAddress("tech@seahavenind.com", "Sea haven Industries");
                 //var subject = "Sending with SendGrid is Fun";
                 var to = new EmailAddress(emailTo, "");
@@ -92,13 +114,11 @@ namespace Api.SeaHavenIndustries.Helper
                 msg.Attachments = new List<SendGrid.Helpers.Mail.Attachment> { attachment };
 
                 var response = await client.SendEmailAsync(msg);
-
-                var dd = response.Body.ReadAsStringAsync();
-                return true;
+                return Delivered(response);
             }
             catch (Exception ex)
             {
-                return false;
+                return Failed(ex);
             }
         }
         public async Task<bool> SendDispatchEmail(string emailTo, string subject, string htmlBody, string? replyTo)
@@ -106,7 +126,7 @@ namespace Api.SeaHavenIndustries.Helper
             try
             {
                 var apiKey = _configuration.GetValue<string>("SendGrid:ApiKey");
-                var client = new SendGridClient(apiKey);
+                var client = CreateClient(apiKey);
                 var from = new EmailAddress("tech@seahavenind.com", "Sea Haven Industries");
                 var to = new EmailAddress(emailTo, "");
 
@@ -116,11 +136,11 @@ namespace Api.SeaHavenIndustries.Helper
                     msg.SetReplyTo(new EmailAddress(replyTo));
 
                 var response = await client.SendEmailAsync(msg);
-                return true;
+                return Delivered(response);
             }
             catch (Exception ex)
             {
-                return false;
+                return Failed(ex);
             }
         }
     }
diff --git a/SeaHaven.DataServices/Implementation/UserDataService.cs b/SeaHaven.DataServices/Implementation/UserDataService.cs
index 32ac851..dce7af1 100644
--- a/SeaHaven.DataServices/Implementation/UserDataService.cs
+++ b/SeaHaven.DataServices/Implementation/UserDataService.cs
@@ -159,6 +159,10 @@ namespace SeaHaven.DataServices.Implementation
                 .Where(permissionOverride => permissionOverride.UserId == id)
                 .ExecuteDeleteAsync(cancellationToken);
 
+            await _context.TeamMemberInvites
+                .Where(invite => invite.UserId == id)
+                .ExecuteDeleteAsync(cancellationToken);
+
             await _context.Users
                 .Where(existingUser => existingUser.Id == id)
                 .ExecuteDeleteAsync(cancellationToken);
diff --git a/SeaHaven.Services/Implementation/TeamMemberInviteService.cs b/SeaHaven.Services/Implementation/TeamMemberInviteService.cs
index 330254b..3b355ba 100644
--- a/SeaHaven.Services/Implementation/TeamMemberInviteService.cs
+++ b/SeaHaven.Services/Implementation/TeamMemberInviteService.cs
@@ -89,16 +89,28 @@ public sealed class TeamMemberInviteService : ITeamMemberInviteService
         if (user.IsDeleted == true || user.PendingRegistration != true || string.IsNullOrWhiteSpace(user.Email))
             return ResendFailure("Only pending team members can be re-invited.");
 
-        var (invite, issued) = NewInvite(user.Id);
-        await _inviteDataService.ReplaceOpenForUserAsync(invite, NowUtc(), cancellationToken);
-
-        var name = $"{user.FirstName ?? ""} {user.LastName ?? ""}".Trim();
-        if (!await SendAsync(issued, user.Email, name, cancellationToken))
+        if (!await ReissueAsync(user, cancellationToken))
             return ResendFailure("The invite could not be emailed. Try again.");
 
         return new TeamMemberInviteResendOutcomeDTO { Success = true };
     }
 
+    public async Task<bool> ReissueAsync(ApplicationUser user, CancellationToken cancellationToken)
+    {
+        ArgumentNullException.ThrowIfNull(user);
+        ArgumentException.ThrowIfNullOrWhiteSpace(user.Email);
+
+        var (invite, issued) = NewInvite(user.Id);
+        await _inviteDataService.ReplaceOpenForUserAsync(invite, NowUtc(), cancellationToken);
+
+        // A deactivated member cannot register; the admin re-sends the invite after reactivating them.
+        if (user.IsDeleted == true)
+            return true;
+
+        var name = $"{user.FirstName ?? ""} {user.LastName ?? ""}".Trim();
+        return await SendAsync(issued, user.Email, name, cancellationToken);
+    }
+
     private (TeamMemberInvite Invite, IssuedTeamMemberInvite Issued) NewInvite(string userId)
     {
         var now = NowUtc();
diff --git a/SeaHaven.Services/Implementation/TeamMemberService.cs b/SeaHaven.Services/Implementation/TeamMemberService.cs
index 2f62818..d15a347 100644
--- a/SeaHaven.Services/Implementation/TeamMemberService.cs
+++ b/SeaHaven.Services/Implementation/TeamMemberService.cs
@@ -199,7 +199,8 @@ public sealed class TeamMemberService : ITeamMemberService
         user.UniqueName = request.IsActive ? ActiveStatus : "Inactive";
         user.IsDeleted = !request.IsActive;
 
-        if (!string.Equals(user.Email, email, StringComparison.OrdinalIgnoreCase))
+        var emailChanged = !string.Equals(user.Email, email, StringComparison.OrdinalIgnoreCase);
+        if (emailChanged)
         {
             var emailResult = await _userManager.SetEmailAsync(user, email!);
             if (!emailResult.Succeeded)
@@ -237,6 +238,10 @@ public sealed class TeamMemberService : ITeamMemberService
                 await _permissionDataService.SetOverridesAsync(user.Id, overrides!, cancellationToken);
         }
 
+        // An invite sent to the old address, and any code confirmed through it, must not register the new one.
+        if (emailChanged && user.PendingRegistration == true)
+            await _inviteService.ReissueAsync(user, cancellationToken);
+
         return await OperationSuccessAsync(user, caller, cancellationToken);
     }
 
diff --git a/SeaHaven.Services/Interfaces/ITeamMemberInviteService.cs b/SeaHaven.Services/Interfaces/ITeamMemberInviteService.cs
index 9b12928..54eb702 100644
--- a/SeaHaven.Services/Interfaces/ITeamMemberInviteService.cs
+++ b/SeaHaven.Services/Interfaces/ITeamMemberInviteService.cs
@@ -1,4 +1,5 @@
 using System.Security.Claims;
+using Data.SeaHavenIndustries;
 using SeaHaven.Services.DTOs;
 
 namespace SeaHaven.Services.Interfaces;
@@ -15,6 +16,13 @@ public interface ITeamMemberInviteService
         string name,
         CancellationToken cancellationToken);
 
+    /// <summary>
+    /// Revokes the member's open invites, including any email confirmation made through them,
+    /// and emails a new invite to their current address unless they are deactivated.
+    /// Returns false when that email failed.
+    /// </summary>
+    Task<bool> ReissueAsync(ApplicationUser user, CancellationToken cancellationToken);
+
     /// <summary>Admin-only: revokes a pending member's open invites and emails a new one.</summary>
     Task<TeamMemberInviteResendOutcomeDTO> ResendAsync(
         string userId,
diff --git a/SeaHavenIndustries.Tests/TeamMemberInviteLifecycleTests.cs b/SeaHavenIndustries.Tests/TeamMemberInviteLifecycleTests.cs
new file mode 100644
index 0000000..521d7a4
--- /dev/null
+++ b/SeaHavenIndustries.Tests/TeamMemberInviteLifecycleTests.cs
@@ -0,0 +1,106 @@
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.DependencyInjection;
+using Data.SeaHavenIndustries;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Interfaces;
+
+namespace SeaHavenIndustries.Tests;
+
+/// <summary>What happens to a member's invites when an admin edits or deletes that member.</summary>
+public sealed class TeamMemberInviteLifecycleTests
+{
+    private const string Email = "taylor@example.com";
+    private const string CorrectedEmail = "taylor.reed@example.com";
+    private const string Password = "Abc1!x";
+
+    [Fact]
+    public async Task DeletingAnInvitedMember_RemovesTheMemberAndTheirInvites()
+    {
+        await using var host = await TeamMemberInviteTestHost.CreateAsync();
+        var (userId, token) = await host.AddPendingMemberAsync(Email);
+        await host.SendCodeAsync(token, Email);
+        Assert.True((await ResendInviteAsync(host, userId)).Success);
+        Assert.Equal(2, (await host.InvitesAsync(userId)).Count);
+
+        var deleted = await host.InScopeAsync(provider => provider.GetRequiredService<IUserService>()
+            .DeleteUserAsync(userId, TeamMemberInviteTestHost.Admin(), CancellationToken.None));
+
+        Assert.True(deleted.Success, deleted.Error);
+        Assert.Empty(await host.InvitesAsync(userId));
+        Assert.False(await host.InScopeAsync(provider => provider.GetRequiredService<ApplicationDbContext>()
+            .Users.AnyAsync(user => user.Id == userId)));
+    }
+
+    [Fact]
+    public async Task ChangingAPendingMembersEmail_RevokesTheOldInviteAndItsConfirmation()
+    {
+        await using var host = await TeamMemberInviteTestHost.CreateAsync();
+        var (userId, oldToken) = await host.AddPendingMemberAsync(Email);
+        await host.ConfirmEmailAsync(oldToken, Email);
+
+        var updated = await UpdateAsync(host, userId, CorrectedEmail, role: "admin");
+        Assert.True(updated.Success, updated.Error);
+
+        Assert.Equal(TeamMemberRegistrationStatus.InvalidInvite,
+            (await host.RegistrationAsync(service => service.ResolveAsync(oldToken, CancellationToken.None))).Status);
+        Assert.Equal(TeamMemberRegistrationStatus.InvalidInvite,
+            (await host.RegistrationAsync(service => service.SendCodeAsync(oldToken, CancellationToken.None))).Status);
+        Assert.Equal(TeamMemberRegistrationStatus.InvalidInvite, (await CompleteAsync(host, oldToken)).Status);
+
+        var user = await host.ReloadUserAsync(userId);
+        Assert.False(user.EmailConfirmed);
+        Assert.True(user.PendingRegistration);
+
+        // The new address gets its own invite, and it must be confirmed again before finishing.
+        var newToken = host.Sent.LatestTokenFor(CorrectedEmail);
+        Assert.NotEqual(oldToken, newToken);
+        Assert.Equal(TeamMemberRegistrationStatus.EmailNotConfirmed, (await CompleteAsync(host, newToken)).Status);
+        await host.ConfirmEmailAsync(newToken, CorrectedEmail);
+        Assert.Equal(TeamMemberRegistrationStatus.Ok, (await CompleteAsync(host, newToken)).Status);
+    }
+
+    [Fact]
+    public async Task EditingAPendingMemberWithoutChangingTheirEmail_KeepsTheirInvite()
+    {
+        await using var host = await TeamMemberInviteTestHost.CreateAsync();
+        var (userId, token) = await host.AddPendingMemberAsync(Email);
+        var emailsBefore = host.Sent.Messages.Count;
+
+        var updated = await UpdateAsync(host, userId, Email.ToUpperInvariant(), role: "dispatcher");
+
+        Assert.True(updated.Success, updated.Error);
+        Assert.Equal(emailsBefore, host.Sent.Messages.Count);
+        var invite = Assert.Single(await host.InvitesAsync(userId));
+        Assert.Null(invite.RevokedAt);
+        Assert.Equal(TeamMemberRegistrationStatus.Ok,
+            (await host.RegistrationAsync(service => service.ResolveAsync(token, CancellationToken.None))).Status);
+    }
+
+    private static Task<TeamMemberOperationOutcomeDTO> UpdateAsync(
+        TeamMemberInviteTestHost host,
+        string userId,
+        string email,
+        string role) =>
+        host.InScopeAsync(provider => provider.GetRequiredService<ITeamMemberService>().UpdateAsync(
+            userId,
+            new UpdateTeamMemberRequestDTO
+            {
+                Name = "Taylor Reed",
+                Role = role,
+                Color = "#0D9488",
+                Email = email,
+                Phone = "555-0100",
+                ServiceAreas = role == "dispatcher" ? new[] { "East" } : Array.Empty<string>()
+            },
+            TeamMemberInviteTestHost.Admin(),
+            CancellationToken.None));
+
+    private static Task<TeamMemberRegistrationOutcomeDTO> CompleteAsync(TeamMemberInviteTestHost host, string token) =>
+        host.RegistrationAsync(service => service.CompleteAsync(
+            new CompleteTeamMemberRegistrationRequestDTO { Token = token, Password = Password },
+            CancellationToken.None));
+
+    private static Task<TeamMemberInviteResendOutcomeDTO> ResendInviteAsync(TeamMemberInviteTestHost host, string userId) =>
+        host.InScopeAsync(provider => provider.GetRequiredService<ITeamMemberInviteService>()
+            .ResendAsync(userId, TeamMemberInviteTestHost.Admin(), CancellationToken.None));
+}

From b50cd5f5df316b0c5d7e6f3bf46fae99434ff0aa Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 12:54:27 -0300
Subject: [PATCH 153/183] feat(team-members): report whether the re-invite
 after an email change was emailed

---
 SeaHaven.Services/DTOs/TeamMemberDTOs.cs         |  5 ++++-
 .../Implementation/TeamMemberService.cs          |  9 ++++++---
 .../TeamMemberInviteLifecycleTests.cs            | 16 ++++++++++++++++
 3 files changed, 26 insertions(+), 4 deletions(-)

diff --git a/SeaHaven.Services/DTOs/TeamMemberDTOs.cs b/SeaHaven.Services/DTOs/TeamMemberDTOs.cs
index 3a830fe..e0b8e31 100644
--- a/SeaHaven.Services/DTOs/TeamMemberDTOs.cs
+++ b/SeaHaven.Services/DTOs/TeamMemberDTOs.cs
@@ -25,7 +25,10 @@ public class TeamMemberCreatedDTO
     public required IReadOnlyList<string> ServiceAreas { get; init; }
     public bool PendingRegistration { get; init; }
 
-    /// <summary>Set only on create: false means the member exists but the invite email failed; re-invite from their details.</summary>
+    /// <summary>
+    /// Set only when an invite was emailed: on create, and on an update that changed a pending member's email.
+    /// False means the invite email failed; re-invite from their details.
+    /// </summary>
     [JsonIgnore(Condition = JsonIgnoreCondition.WhenWritingNull)]
     public bool? InviteEmailSent { get; init; }
 }
diff --git a/SeaHaven.Services/Implementation/TeamMemberService.cs b/SeaHaven.Services/Implementation/TeamMemberService.cs
index d15a347..6d78a7b 100644
--- a/SeaHaven.Services/Implementation/TeamMemberService.cs
+++ b/SeaHaven.Services/Implementation/TeamMemberService.cs
@@ -239,10 +239,11 @@ public sealed class TeamMemberService : ITeamMemberService
         }
 
         // An invite sent to the old address, and any code confirmed through it, must not register the new one.
+        bool? inviteEmailSent = null;
         if (emailChanged && user.PendingRegistration == true)
-            await _inviteService.ReissueAsync(user, cancellationToken);
+            inviteEmailSent = await _inviteService.ReissueAsync(user, cancellationToken);
 
-        return await OperationSuccessAsync(user, caller, cancellationToken);
+        return await OperationSuccessAsync(user, caller, cancellationToken, inviteEmailSent);
     }
 
     private static void ApplyName(ApplicationUser user, string fullName)
@@ -277,7 +278,8 @@ public sealed class TeamMemberService : ITeamMemberService
     private async Task<TeamMemberOperationOutcomeDTO> OperationSuccessAsync(
         ApplicationUser user,
         ClaimsPrincipal caller,
-        CancellationToken cancellationToken)
+        CancellationToken cancellationToken,
+        bool? inviteEmailSent = null)
     {
         var roles = await _userManager.GetRolesAsync(user);
         var profile = await _permissionService.GetProfileAsync(user.Id, caller, cancellationToken);
@@ -295,6 +297,7 @@ public sealed class TeamMemberService : ITeamMemberService
                 Phone = user.Contact ?? user.PhoneNumber,
                 ServiceAreas = areas,
                 PendingRegistration = user.PendingRegistration == true,
+                InviteEmailSent = inviteEmailSent,
                 Status = user.UniqueName ?? "Active",
                 IsAccountOwner = user.IsAccountOwner,
                 Permissions = profile?.Value?.Permissions ?? Array.Empty<TeamPermissionValueDTO>()
diff --git a/SeaHavenIndustries.Tests/TeamMemberInviteLifecycleTests.cs b/SeaHavenIndustries.Tests/TeamMemberInviteLifecycleTests.cs
index 521d7a4..c963a62 100644
--- a/SeaHavenIndustries.Tests/TeamMemberInviteLifecycleTests.cs
+++ b/SeaHavenIndustries.Tests/TeamMemberInviteLifecycleTests.cs
@@ -40,6 +40,7 @@ public sealed class TeamMemberInviteLifecycleTests
 
         var updated = await UpdateAsync(host, userId, CorrectedEmail, role: "admin");
         Assert.True(updated.Success, updated.Error);
+        Assert.True(updated.Member!.InviteEmailSent);
 
         Assert.Equal(TeamMemberRegistrationStatus.InvalidInvite,
             (await host.RegistrationAsync(service => service.ResolveAsync(oldToken, CancellationToken.None))).Status);
@@ -59,6 +60,20 @@ public sealed class TeamMemberInviteLifecycleTests
         Assert.Equal(TeamMemberRegistrationStatus.Ok, (await CompleteAsync(host, newToken)).Status);
     }
 
+    [Fact]
+    public async Task ChangingAPendingMembersEmail_ReportsWhenTheNewInviteCouldNotBeEmailed()
+    {
+        await using var host = await TeamMemberInviteTestHost.CreateAsync();
+        var (userId, _) = await host.AddPendingMemberAsync(Email);
+        host.Sent.Succeeds = false;
+
+        var updated = await UpdateAsync(host, userId, CorrectedEmail, role: "dispatcher");
+
+        Assert.True(updated.Success, updated.Error);
+        Assert.Equal(CorrectedEmail, updated.Member!.Email);
+        Assert.False(updated.Member.InviteEmailSent);
+    }
+
     [Fact]
     public async Task EditingAPendingMemberWithoutChangingTheirEmail_KeepsTheirInvite()
     {
@@ -69,6 +84,7 @@ public sealed class TeamMemberInviteLifecycleTests
         var updated = await UpdateAsync(host, userId, Email.ToUpperInvariant(), role: "dispatcher");
 
         Assert.True(updated.Success, updated.Error);
+        Assert.Null(updated.Member!.InviteEmailSent);
         Assert.Equal(emailsBefore, host.Sent.Messages.Count);
         var invite = Assert.Single(await host.InvitesAsync(userId));
         Assert.Null(invite.RevokedAt);

From 77a10e38caa6b292fe5e0e9fccb3816eb4012745 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 13:00:03 -0300
Subject: [PATCH 154/183] fix(auth): cap reset abuse per account, key code
 hashes, send reset email off the request path

- Forgot Password is limited to 3 codes an hour and 10 a day per email, and
  an account gets 10 failed code checks a day across every code it is sent,
  so new client addresses and new codes no longer buy more guesses. Refused
  requests answer exactly like accepted ones.
- The reset email is queued to a background sender, and unregistered
  addresses store a row no code can match, so both paths do the same work
  and return without waiting on the mail provider. Each request also clears
  expired codes.
- Code hashes are HMAC-SHA256 under a key derived with HKDF from the JWT
  signing secret; rows in the previous unkeyed format stop matching.
- Email and code are read only from the JSON body.
---
 .../AuthenticationControllerTests.cs          |  16 +-
 .../AuthenticationServiceTests.cs             |  72 +++---
 .../Controllers/AuthenticationController.cs   |  11 +-
 .../PasswordResetEmailDelivery.cs             |  99 +++++++
 Api.SeaHavenIndustries/Program.cs             |   1 +
 .../ForgetPasswordDataService.cs              |  21 +-
 .../Interfaces/IForgetPasswordDataService.cs  |   9 +-
 .../DependencyInjection/ServicesModule.cs     |   3 +
 .../Helpers/InMemoryPasswordResetThrottle.cs  | 119 +++++++++
 .../Helpers/PasswordResetCodeSecrets.cs       |  35 ++-
 .../Implementation/AuthenticationService.cs   |  70 +++--
 .../Interfaces/IPasswordResetEmailQueue.cs    |  13 +
 .../Interfaces/IPasswordResetThrottle.cs      |  24 ++
 .../PasswordResetAbuseLimitsTests.cs          | 241 ++++++++++++++++++
 .../PasswordResetFlowTests.cs                 |  30 ++-
 .../PasswordResetTestHost.cs                  |  33 ++-
 16 files changed, 702 insertions(+), 95 deletions(-)
 create mode 100644 Api.SeaHavenIndustries/HostedServices/PasswordResetEmailDelivery.cs
 create mode 100644 SeaHaven.Services/Helpers/InMemoryPasswordResetThrottle.cs
 create mode 100644 SeaHaven.Services/Interfaces/IPasswordResetEmailQueue.cs
 create mode 100644 SeaHaven.Services/Interfaces/IPasswordResetThrottle.cs
 create mode 100644 SeaHavenIndustries.Tests/PasswordResetAbuseLimitsTests.cs

diff --git a/Api.SeaHavenIndustries.Tests/AuthenticationControllerTests.cs b/Api.SeaHavenIndustries.Tests/AuthenticationControllerTests.cs
index 5ec4371..14a61da 100644
--- a/Api.SeaHavenIndustries.Tests/AuthenticationControllerTests.cs
+++ b/Api.SeaHavenIndustries.Tests/AuthenticationControllerTests.cs
@@ -173,8 +173,8 @@ public class AuthenticationControllerTests
         var service = new Mock<IAuthenticationService>();
         var controller = NewController(service);
 
-        var registered = await controller.ForgetPassword(new ForgetPasswordRequest_Dto { Email = "a@b.com" }, null, CancellationToken.None);
-        var unregistered = await controller.ForgetPassword(null, "x@y.com", CancellationToken.None);
+        var registered = await controller.ForgetPassword(new ForgetPasswordRequest_Dto { Email = "a@b.com" }, CancellationToken.None);
+        var unregistered = await controller.ForgetPassword(new ForgetPasswordRequest_Dto { Email = "x@y.com" }, CancellationToken.None);
 
         var ok = registered.Should().BeOfType<OkObjectResult>().Subject;
         var response = ok.Value.Should().BeOfType<Response>().Subject;
@@ -195,7 +195,7 @@ public class AuthenticationControllerTests
         logger.Setup(x => x.IsEnabled(It.IsAny<LogLevel>())).Returns(true);
         var controller = new AuthenticationController(service.Object, logger.Object);
 
-        var result = await controller.ForgetPassword(new ForgetPasswordRequest_Dto { Email = "a@b.com" }, null, CancellationToken.None);
+        var result = await controller.ForgetPassword(new ForgetPasswordRequest_Dto { Email = "a@b.com" }, CancellationToken.None);
 
         var response = result.Should().BeOfType<OkObjectResult>().Subject.Value.Should().BeOfType<Response>().Subject;
         response.Message.Should().Be(AuthenticationController.ForgetPasswordMessage);
@@ -219,7 +219,7 @@ public class AuthenticationControllerTests
 
         var controller = NewController(service);
 
-        var result = await controller.VerificationCode(new VerificationCode_Dto { Email = "a@b.com", Code = "123456" }, null, null, CancellationToken.None);
+        var result = await controller.VerificationCode(new VerificationCode_Dto { Email = "a@b.com", Code = "123456" }, CancellationToken.None);
 
         if (matched)
         {
@@ -238,16 +238,16 @@ public class AuthenticationControllerTests
     }
 
     [Fact]
-    public async Task VerificationCode_QueryOnlyCode_PassesNoEmailToTheService()
+    public async Task VerificationCode_WithoutABody_PassesNoEmailOrCodeToTheService()
     {
         var service = new Mock<IAuthenticationService>();
         var controller = NewController(service);
 
-        var result = await controller.VerificationCode(null, null, "123456", CancellationToken.None);
+        var result = await controller.VerificationCode(null, CancellationToken.None);
 
         result.Should().BeOfType<BadRequestObjectResult>().Subject.Value.Should().BeOfType<Response>()
             .Which.Message.Should().Be("Code Not Matched");
-        service.Verify(s => s.VerifyCodeAsync(null, "123456", It.IsAny<CancellationToken>()), Times.Once);
+        service.Verify(s => s.VerifyCodeAsync(null, null, It.IsAny<CancellationToken>()), Times.Once);
     }
 
     [Fact]
@@ -258,7 +258,7 @@ public class AuthenticationControllerTests
             .ThrowsAsync(new InvalidOperationException("SECRET-internal-stack-detail"));
         var controller = NewController(service);
 
-        var result = await controller.VerificationCode(new VerificationCode_Dto { Email = "a@b.com", Code = "1" }, null, null, CancellationToken.None);
+        var result = await controller.VerificationCode(new VerificationCode_Dto { Email = "a@b.com", Code = "1" }, CancellationToken.None);
 
         Json(result.Should().BeOfType<BadRequestObjectResult>().Subject.Value)
             .Should().Be(Json(new Response { Status = "Error", Message = "Code Not Matched" }));
diff --git a/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs b/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs
index ef8a297..6b539d2 100644
--- a/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs
@@ -19,14 +19,14 @@ public class AuthenticationServiceTests
     private static AuthenticationService NewService(
         Mock<IUserDataService> userData,
         Mock<IForgetPasswordDataService> forget,
-        Mock<IEmailSender> email,
+        Mock<IPasswordResetEmailQueue> email,
         out Mock<IUserRoleStore<ApplicationUser>> store,
         out Mock<IPasswordHasher<ApplicationUser>> hasher)
     {
         var (manager, s, h) = IdentityTestHelpers.CreateUserManager();
         store = s;
         hasher = h;
-        return new AuthenticationService(manager, Microsoft.Extensions.Options.Options.Create(JwtOptions), userData.Object, forget.Object, email.Object, TimeProvider.System);
+        return new AuthenticationService(manager, Microsoft.Extensions.Options.Options.Create(JwtOptions), userData.Object, forget.Object, email.Object, new InMemoryPasswordResetThrottle(TimeProvider.System), TimeProvider.System);
     }
 
     private static JwtOptions JwtOptions => new()
@@ -39,7 +39,7 @@ public class AuthenticationServiceTests
     [Fact]
     public async Task Login_UnknownUser_ReturnsNull()
     {
-        var service = NewService(new Mock<IUserDataService>(), new Mock<IForgetPasswordDataService>(), new Mock<IEmailSender>(), out var store, out _);
+        var service = NewService(new Mock<IUserDataService>(), new Mock<IForgetPasswordDataService>(), new Mock<IPasswordResetEmailQueue>(), out var store, out _);
         store.Setup(s => s.FindByNameAsync(It.IsAny<string>(), It.IsAny<CancellationToken>())).ReturnsAsync((ApplicationUser?)null);
 
         var result = await service.LoginAsync("nobody", "pw", CancellationToken.None);
@@ -51,7 +51,7 @@ public class AuthenticationServiceTests
     public async Task Login_DeletedUser_RejectedBeforePasswordCheck()
     {
         var deletedUser = IdentityTestHelpers.User(isDeleted: true);
-        var service = NewService(new Mock<IUserDataService>(), new Mock<IForgetPasswordDataService>(), new Mock<IEmailSender>(), out var store, out var hasher);
+        var service = NewService(new Mock<IUserDataService>(), new Mock<IForgetPasswordDataService>(), new Mock<IPasswordResetEmailQueue>(), out var store, out var hasher);
         store.Setup(s => s.FindByNameAsync(It.IsAny<string>(), It.IsAny<CancellationToken>())).ReturnsAsync(deletedUser);
         store.Setup(s => s.GetRolesAsync(deletedUser, It.IsAny<CancellationToken>())).ReturnsAsync(new List<string>());
 
@@ -65,7 +65,7 @@ public class AuthenticationServiceTests
     public async Task Login_ValidUser_ReturnsTokenFirstRoleAndIdentity()
     {
         var user = IdentityTestHelpers.User();
-        var service = NewService(new Mock<IUserDataService>(), new Mock<IForgetPasswordDataService>(), new Mock<IEmailSender>(), out var store, out var hasher);
+        var service = NewService(new Mock<IUserDataService>(), new Mock<IForgetPasswordDataService>(), new Mock<IPasswordResetEmailQueue>(), out var store, out var hasher);
         store.Setup(s => s.FindByNameAsync(It.IsAny<string>(), It.IsAny<CancellationToken>())).ReturnsAsync(user);
         store.Setup(s => s.GetRolesAsync(user, It.IsAny<CancellationToken>())).ReturnsAsync(new List<string> { "Admin", "Manager" });
         store.As<Microsoft.AspNetCore.Identity.IUserPasswordStore<ApplicationUser>>()
@@ -88,7 +88,7 @@ public class AuthenticationServiceTests
     public async Task Login_BadPassword_ReturnsNull()
     {
         var user = IdentityTestHelpers.User();
-        var service = NewService(new Mock<IUserDataService>(), new Mock<IForgetPasswordDataService>(), new Mock<IEmailSender>(), out var store, out var hasher);
+        var service = NewService(new Mock<IUserDataService>(), new Mock<IForgetPasswordDataService>(), new Mock<IPasswordResetEmailQueue>(), out var store, out var hasher);
         store.Setup(s => s.FindByNameAsync(It.IsAny<string>(), It.IsAny<CancellationToken>())).ReturnsAsync(user);
         store.As<Microsoft.AspNetCore.Identity.IUserPasswordStore<ApplicationUser>>()
             .Setup(s => s.GetPasswordHashAsync(user, It.IsAny<CancellationToken>())).ReturnsAsync("hash");
@@ -99,22 +99,24 @@ public class AuthenticationServiceTests
         result.Should().BeNull();
     }
 
+    private static byte[] ResetKey => PasswordResetCodeSecrets.DeriveKey(JwtOptions.Secret);
+
     [Fact]
-    public async Task ForgetPassword_RegisteredEmail_StoresOnlyASaltedHashAndEmailsTheCode()
+    public async Task ForgetPassword_RegisteredEmail_StoresOnlyAKeyedHashAndQueuesTheCode()
     {
         var user = IdentityTestHelpers.User();
         var userData = new Mock<IUserDataService>();
         userData.Setup(u => u.GetByEmailNormalizedAsync("alice@example.com", It.IsAny<CancellationToken>())).ReturnsAsync(user);
         var forget = new Mock<IForgetPasswordDataService>();
-        var email = new Mock<IEmailSender>();
+        var email = new Mock<IPasswordResetEmailQueue>();
         string? stored = null, salt = null, body = null;
         DateTime expires = default;
-        forget.Setup(f => f.ReplaceCodeAsync(user.Email!, user.Id, It.IsAny<string>(), It.IsAny<string>(), It.IsAny<DateTime>(), It.IsAny<CancellationToken>()))
-            .Callback<string, string, string, string, DateTime, CancellationToken>((_, _, h, s, e, _) => { stored = h; salt = s; expires = e; })
+        forget.Setup(f => f.ReplaceCodeAsync(user.Email!, user.Id, It.IsAny<string>(), It.IsAny<string>(), It.IsAny<DateTime>(), It.IsAny<DateTime>(), It.IsAny<CancellationToken>()))
+            .Callback<string, string, string, string, DateTime, DateTime, CancellationToken>((_, _, h, s, e, _, _) => { stored = h; salt = s; expires = e; })
             .Returns(Task.CompletedTask);
-        email.Setup(e => e.SendEmailAsync(user.Email!, "Forget Password Request.", It.IsAny<string>()))
+        email.Setup(e => e.TryEnqueue(user.Email!, "Forget Password Request.", It.IsAny<string>()))
             .Callback<string, string, string>((_, _, b) => body = b)
-            .ReturnsAsync(true);
+            .Returns(true);
 
         var service = NewService(userData, forget, email, out _, out _);
         var before = DateTime.UtcNow;
@@ -124,25 +126,27 @@ public class AuthenticationServiceTests
         var code = System.Text.RegularExpressions.Regex.Match(body!, @"Your Password Reset Code is: (\d{6})").Groups[1].Value;
         code.Should().HaveLength(6);
         stored.Should().NotBe(code).And.MatchRegex("^[0-9a-f]{64}$");
-        PasswordResetCodeSecrets.Matches(salt!, code, stored!).Should().BeTrue();
+        PasswordResetCodeSecrets.Matches(ResetKey, salt!, code, stored!).Should().BeTrue();
         expires.Should().BeCloseTo(before.AddMinutes(15), TimeSpan.FromSeconds(5));
     }
 
     [Fact]
-    public async Task ForgetPassword_UnknownEmail_SendsNothingButStillDoesTheDatabaseRoundTrip()
+    public async Task ForgetPassword_UnknownEmail_MakesTheSameDataCallsAndQueuesNothing()
     {
         var userData = new Mock<IUserDataService>();
-        userData.Setup(u => u.GetByEmailNormalizedAsync(It.IsAny<string>(), It.IsAny<CancellationToken>())).ReturnsAsync((ApplicationUser?)null);
-        var forget = new Mock<IForgetPasswordDataService>();
-        var email = new Mock<IEmailSender>();
+        userData.Setup(u => u.GetByEmailNormalizedAsync("alice@example.com", It.IsAny<CancellationToken>())).ReturnsAsync(IdentityTestHelpers.User());
+        var registered = new Mock<IForgetPasswordDataService>();
+        var unregistered = new Mock<IForgetPasswordDataService>();
+        var email = new Mock<IPasswordResetEmailQueue>();
 
-        var service = NewService(userData, forget, email, out _, out _);
+        await NewService(userData, registered, email, out _, out _).ForgetPasswordAsync("alice@example.com", CancellationToken.None);
+        await NewService(userData, unregistered, email, out _, out _).ForgetPasswordAsync("nope@example.com", CancellationToken.None);
 
-        await service.ForgetPasswordAsync("nope@example.com", CancellationToken.None);
-
-        forget.Verify(f => f.RemoveByEmailAsync("nope@example.com", It.IsAny<CancellationToken>()), Times.Once);
-        forget.Verify(f => f.ReplaceCodeAsync(It.IsAny<string>(), It.IsAny<string>(), It.IsAny<string>(), It.IsAny<string>(), It.IsAny<DateTime>(), It.IsAny<CancellationToken>()), Times.Never);
-        email.Verify(e => e.SendEmailAsync(It.IsAny<string>(), It.IsAny<string>(), It.IsAny<string>()), Times.Never);
+        registered.Invocations.Select(call => call.Method.Name)
+            .Should().Equal(unregistered.Invocations.Select(call => call.Method.Name))
+            .And.Equal(nameof(IForgetPasswordDataService.ReplaceCodeAsync));
+        unregistered.Verify(f => f.ReplaceCodeAsync("nope@example.com", string.Empty, It.IsAny<string>(), It.IsAny<string>(), It.IsAny<DateTime>(), It.IsAny<DateTime>(), It.IsAny<CancellationToken>()), Times.Once);
+        email.Verify(e => e.TryEnqueue(It.IsAny<string>(), It.IsAny<string>(), It.IsAny<string>()), Times.Once);
     }
 
     [Fact]
@@ -152,13 +156,13 @@ public class AuthenticationServiceTests
         userData.Setup(u => u.GetByEmailNormalizedAsync(It.IsAny<string>(), It.IsAny<CancellationToken>()))
             .ReturnsAsync(IdentityTestHelpers.User(isDeleted: true));
         var forget = new Mock<IForgetPasswordDataService>();
-        var email = new Mock<IEmailSender>();
+        var email = new Mock<IPasswordResetEmailQueue>();
 
         var service = NewService(userData, forget, email, out _, out _);
 
         await service.ForgetPasswordAsync("alice@example.com", CancellationToken.None);
 
-        email.Verify(e => e.SendEmailAsync(It.IsAny<string>(), It.IsAny<string>(), It.IsAny<string>()), Times.Never);
+        email.Verify(e => e.TryEnqueue(It.IsAny<string>(), It.IsAny<string>(), It.IsAny<string>()), Times.Never);
     }
 
     [Theory]
@@ -171,7 +175,7 @@ public class AuthenticationServiceTests
     {
         var forget = new Mock<IForgetPasswordDataService>(MockBehavior.Strict);
 
-        var service = NewService(new Mock<IUserDataService>(), forget, new Mock<IEmailSender>(), out _, out _);
+        var service = NewService(new Mock<IUserDataService>(), forget, new Mock<IPasswordResetEmailQueue>(), out _, out _);
 
         var result = await service.VerifyCodeAsync(emailAddress, code, CancellationToken.None);
 
@@ -184,7 +188,7 @@ public class AuthenticationServiceTests
         var forget = new Mock<IForgetPasswordDataService>();
         forget.Setup(f => f.GetByEmailAsync(It.IsAny<string>(), It.IsAny<CancellationToken>())).ReturnsAsync((ForgetPasswordCode?)null);
 
-        var service = NewService(new Mock<IUserDataService>(), forget, new Mock<IEmailSender>(), out var store, out _);
+        var service = NewService(new Mock<IUserDataService>(), forget, new Mock<IPasswordResetEmailQueue>(), out var store, out _);
 
         var result = await service.ResetPasswordAsync("a@b.com", "999999", "new", CancellationToken.None);
 
@@ -196,12 +200,12 @@ public class AuthenticationServiceTests
     [Fact]
     public async Task ResetPassword_AttemptBudgetSpent_DeletesTheCodeAndFails()
     {
-        var pending = new ForgetPasswordCode { Id = 7, Email = "a@b.com", UserId = "u1", CodeSalt = "s", CodeHash = PasswordResetCodeSecrets.Hash("s", "123456"), FailedAttempts = 5 };
+        var pending = new ForgetPasswordCode { Id = 7, Email = "a@b.com", UserId = "u1", CodeSalt = "s", CodeHash = PasswordResetCodeSecrets.Hash(ResetKey, "s", "123456"), FailedAttempts = 5 };
         var forget = new Mock<IForgetPasswordDataService>();
         forget.Setup(f => f.GetByEmailAsync("a@b.com", It.IsAny<CancellationToken>())).ReturnsAsync(pending);
         forget.Setup(f => f.TryConsumeAttemptAsync(7, AuthenticationService.MaxCodeAttempts, It.IsAny<DateTime>(), It.IsAny<CancellationToken>())).ReturnsAsync(false);
 
-        var service = NewService(new Mock<IUserDataService>(), forget, new Mock<IEmailSender>(), out var store, out _);
+        var service = NewService(new Mock<IUserDataService>(), forget, new Mock<IPasswordResetEmailQueue>(), out var store, out _);
 
         var result = await service.ResetPasswordAsync("a@b.com", "123456", "New@67890", CancellationToken.None);
 
@@ -217,11 +221,11 @@ public class AuthenticationServiceTests
     public void ResetCodeHash_IsSaltedAndComparedByValue(string issued, string candidate, bool expected)
     {
         var salt = PasswordResetCodeSecrets.NewSalt();
-        var hash = PasswordResetCodeSecrets.Hash(salt, issued);
+        var hash = PasswordResetCodeSecrets.Hash(ResetKey, salt, issued);
 
-        PasswordResetCodeSecrets.Matches(salt, candidate, hash).Should().Be(expected);
-        PasswordResetCodeSecrets.Hash(PasswordResetCodeSecrets.NewSalt(), issued).Should().NotBe(hash);
-        PasswordResetCodeSecrets.Matches("", issued, hash).Should().BeFalse();
-        PasswordResetCodeSecrets.Matches(salt, issued, "").Should().BeFalse();
+        PasswordResetCodeSecrets.Matches(ResetKey, salt, candidate, hash).Should().Be(expected);
+        PasswordResetCodeSecrets.Hash(ResetKey, PasswordResetCodeSecrets.NewSalt(), issued).Should().NotBe(hash);
+        PasswordResetCodeSecrets.Matches(ResetKey, "", issued, hash).Should().BeFalse();
+        PasswordResetCodeSecrets.Matches(ResetKey, salt, issued, "").Should().BeFalse();
     }
 }
diff --git a/Api.SeaHavenIndustries/Controllers/AuthenticationController.cs b/Api.SeaHavenIndustries/Controllers/AuthenticationController.cs
index 469c1e9..1c4ddf4 100644
--- a/Api.SeaHavenIndustries/Controllers/AuthenticationController.cs
+++ b/Api.SeaHavenIndustries/Controllers/AuthenticationController.cs
@@ -111,20 +111,19 @@ namespace Api.SeaHavenIndustries.Controllers
         public const string ForgetPasswordMessage =
             "If that email belongs to an account, a reset code has been sent to it.";
 
-        // Email and code are read from the JSON body so they stay out of URLs and proxy
-        // access logs; the query-string form is still accepted for older clients.
+        // Email and code are read only from the JSON body, so they never appear in URLs
+        // or in proxy and load balancer access logs.
         [AllowAnonymous]
         [HttpPost()]
         [Route("ForgetPassword")]
         [EnableRateLimiting(PasswordResetRateLimiting.ForgetPasswordPolicy)]
         public async Task<IActionResult> ForgetPassword(
             [FromBody(EmptyBodyBehavior = EmptyBodyBehavior.Allow)] ForgetPasswordRequest_Dto? body,
-            [FromQuery(Name = "Email")] string? email,
             CancellationToken cancellationToken)
         {
             try
             {
-                await _authenticationService.ForgetPasswordAsync(body?.Email ?? email, cancellationToken);
+                await _authenticationService.ForgetPasswordAsync(body?.Email, cancellationToken);
             }
             catch (Exception ex)
             {
@@ -142,13 +141,11 @@ namespace Api.SeaHavenIndustries.Controllers
         [EnableRateLimiting(PasswordResetRateLimiting.VerificationCodePolicy)]
         public async Task<IActionResult> VerificationCode(
             [FromBody(EmptyBodyBehavior = EmptyBodyBehavior.Allow)] VerificationCode_Dto? body,
-            [FromQuery] string? email,
-            [FromQuery] string? code,
             CancellationToken cancellationToken)
         {
             try
             {
-                if (await _authenticationService.VerifyCodeAsync(body?.Email ?? email, body?.Code ?? code, cancellationToken))
+                if (await _authenticationService.VerifyCodeAsync(body?.Email, body?.Code, cancellationToken))
                 {
 
                     return Ok(new Response { Status = "Success ", Message = "Code Matched" });
diff --git a/Api.SeaHavenIndustries/HostedServices/PasswordResetEmailDelivery.cs b/Api.SeaHavenIndustries/HostedServices/PasswordResetEmailDelivery.cs
new file mode 100644
index 0000000..348073f
--- /dev/null
+++ b/Api.SeaHavenIndustries/HostedServices/PasswordResetEmailDelivery.cs
@@ -0,0 +1,99 @@
+using System.Threading.Channels;
+using SeaHaven.Services.Interfaces;
+
+namespace Api.SeaHavenIndustries.HostedServices
+{
+    public static class PasswordResetEmailDelivery
+    {
+        /// <summary>
+        /// Registers the process-wide reset email queue and the background service that
+        /// drains it. Both must be singletons: the request and the sender share one channel.
+        /// </summary>
+        public static IServiceCollection AddPasswordResetEmailDelivery(this IServiceCollection services)
+        {
+            services.AddSingleton<PasswordResetEmailChannel>();
+            services.AddSingleton<IPasswordResetEmailQueue>(provider => provider.GetRequiredService<PasswordResetEmailChannel>());
+            services.AddHostedService<PasswordResetEmailSenderHostedService>();
+            return services;
+        }
+    }
+
+    public sealed record PasswordResetEmail(string EmailTo, string Subject, string Body);
+
+    public sealed class PasswordResetEmailChannel : IPasswordResetEmailQueue
+    {
+        public const int Capacity = 1000;
+
+        private readonly Channel<PasswordResetEmail> _channel = Channel.CreateBounded<PasswordResetEmail>(
+            new BoundedChannelOptions(Capacity)
+            {
+                FullMode = BoundedChannelFullMode.DropWrite,
+                SingleReader = true
+            });
+        private readonly ILogger<PasswordResetEmailChannel> _logger;
+        private int _pending;
+
+        public PasswordResetEmailChannel(ILogger<PasswordResetEmailChannel> logger)
+        {
+            _logger = logger;
+        }
+
+        public ChannelReader<PasswordResetEmail> Reader => _channel.Reader;
+
+        /// <summary>Emails accepted and not yet handed to the mail provider.</summary>
+        public int Pending => Volatile.Read(ref _pending);
+
+        public bool TryEnqueue(string emailTo, string subject, string body)
+        {
+            Interlocked.Increment(ref _pending);
+            if (_channel.Writer.TryWrite(new PasswordResetEmail(emailTo, subject, body)))
+                return true;
+
+            Interlocked.Decrement(ref _pending);
+            _logger.LogWarning("Password reset email queue is full; an email was dropped.");
+            return false;
+        }
+
+        public void MarkHandled() => Interlocked.Decrement(ref _pending);
+    }
+
+    public sealed class PasswordResetEmailSenderHostedService : BackgroundService
+    {
+        private readonly PasswordResetEmailChannel _channel;
+        private readonly IServiceScopeFactory _scopeFactory;
+        private readonly ILogger<PasswordResetEmailSenderHostedService> _logger;
+
+        public PasswordResetEmailSenderHostedService(
+            PasswordResetEmailChannel channel,
+            IServiceScopeFactory scopeFactory,
+            ILogger<PasswordResetEmailSenderHostedService> logger)
+        {
+            _channel = channel;
+            _scopeFactory = scopeFactory;
+            _logger = logger;
+        }
+
+        protected override async Task ExecuteAsync(CancellationToken stoppingToken)
+        {
+            await foreach (var email in _channel.Reader.ReadAllAsync(stoppingToken))
+            {
+                try
+                {
+                    await using var scope = _scopeFactory.CreateAsyncScope();
+                    var sender = scope.ServiceProvider.GetRequiredService<IEmailSender>();
+                    if (!await sender.SendEmailAsync(email.EmailTo, email.Subject, email.Body))
+                        _logger.LogWarning("Password reset email was not accepted by the mail provider.");
+                }
+                catch (Exception ex)
+                {
+                    // The message can echo the recipient or the body, so only the type is logged.
+                    _logger.LogError("Password reset email failed with {ExceptionType}.", ex.GetType().FullName);
+                }
+                finally
+                {
+                    _channel.MarkHandled();
+                }
+            }
+        }
+    }
+}
diff --git a/Api.SeaHavenIndustries/Program.cs b/Api.SeaHavenIndustries/Program.cs
index 5dd1d2f..073a64a 100644
--- a/Api.SeaHavenIndustries/Program.cs
+++ b/Api.SeaHavenIndustries/Program.cs
@@ -65,6 +65,7 @@ builder.Services.AddResponseCompression(opts =>
        new[] { "application/octet-stream" });
 });
 builder.Services.AddPasswordResetRateLimiting();
+builder.Services.AddPasswordResetEmailDelivery();
 builder.Services.AddCors(option =>
 option.AddDefaultPolicy(builder => builder.AllowAnyOrigin().AllowAnyHeader().AllowAnyMethod()));
 
diff --git a/SeaHaven.DataServices/Implementation/ForgetPasswordDataService.cs b/SeaHaven.DataServices/Implementation/ForgetPasswordDataService.cs
index 7e3b3c4..c824fc9 100644
--- a/SeaHaven.DataServices/Implementation/ForgetPasswordDataService.cs
+++ b/SeaHaven.DataServices/Implementation/ForgetPasswordDataService.cs
@@ -13,14 +13,17 @@ namespace SeaHaven.DataServices.Implementation
             _context = context;
         }
 
-        public async Task ReplaceCodeAsync(string email, string userId, string codeHash, string codeSalt, DateTime expiresAtUtc, CancellationToken cancellationToken)
+        public async Task ReplaceCodeAsync(string email, string userId, string codeHash, string codeSalt, DateTime expiresAtUtc, DateTime nowUtc, CancellationToken cancellationToken)
         {
             var normalizedEmail = Normalize(email);
 
-            var existing = await _context.ForgetPasswordCodes
-                .Where(u => u.Email.ToLower().Trim() == normalizedEmail)
-                .ToListAsync(cancellationToken);
-            _context.ForgetPasswordCodes.RemoveRange(existing);
+            await using var transaction = await _context.Database.BeginTransactionAsync(cancellationToken);
+
+            // Every request also clears expired codes of any email, which keeps the
+            // table bounded and gives each request the same database work.
+            await _context.ForgetPasswordCodes
+                .Where(u => u.Email.ToLower().Trim() == normalizedEmail || u.ExpiresAtUtc <= nowUtc)
+                .ExecuteDeleteAsync(cancellationToken);
 
             _context.ForgetPasswordCodes.Add(new ForgetPasswordCode
             {
@@ -33,6 +36,14 @@ namespace SeaHaven.DataServices.Implementation
                 FailedAttempts = 0
             });
             await _context.SaveChangesAsync(cancellationToken);
+            await transaction.CommitAsync(cancellationToken);
+        }
+
+        public async Task PurgeExpiredAsync(DateTime nowUtc, CancellationToken cancellationToken)
+        {
+            await _context.ForgetPasswordCodes
+                .Where(u => u.ExpiresAtUtc <= nowUtc)
+                .ExecuteDeleteAsync(cancellationToken);
         }
 
         public async Task<ForgetPasswordCode?> GetByEmailAsync(string email, CancellationToken cancellationToken)
diff --git a/SeaHaven.DataServices/Interfaces/IForgetPasswordDataService.cs b/SeaHaven.DataServices/Interfaces/IForgetPasswordDataService.cs
index a7de61e..c34e9ba 100644
--- a/SeaHaven.DataServices/Interfaces/IForgetPasswordDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IForgetPasswordDataService.cs
@@ -4,8 +4,13 @@ namespace SeaHaven.DataServices.Interfaces
 {
     public interface IForgetPasswordDataService
     {
-        /// <summary>Deletes every pending code for the email, then stores the new one.</summary>
-        Task ReplaceCodeAsync(string email, string userId, string codeHash, string codeSalt, DateTime expiresAtUtc, CancellationToken cancellationToken);
+        /// <summary>
+        /// In one transaction, deletes every pending code for the email and every expired
+        /// code, then stores the new one.
+        /// </summary>
+        Task ReplaceCodeAsync(string email, string userId, string codeHash, string codeSalt, DateTime expiresAtUtc, DateTime nowUtc, CancellationToken cancellationToken);
+
+        Task PurgeExpiredAsync(DateTime nowUtc, CancellationToken cancellationToken);
 
         /// <summary>Returns the pending code for exactly this email, or null.</summary>
         Task<ForgetPasswordCode?> GetByEmailAsync(string email, CancellationToken cancellationToken);
diff --git a/SeaHaven.Services/DependencyInjection/ServicesModule.cs b/SeaHaven.Services/DependencyInjection/ServicesModule.cs
index e24dec3..a6c2f53 100644
--- a/SeaHaven.Services/DependencyInjection/ServicesModule.cs
+++ b/SeaHaven.Services/DependencyInjection/ServicesModule.cs
@@ -73,6 +73,9 @@ namespace SeaHaven.Services.DependencyInjection
 
             services.AddValidatorsFromAssembly(assembly);
 
+            // Process-wide counters: a scoped instance would start empty on every request.
+            services.AddSingleton<IPasswordResetThrottle, Helpers.InMemoryPasswordResetThrottle>();
+
             services.AddScoped<IWorkOrderReconciliationRunner>(
                 sp => (IWorkOrderReconciliationRunner)sp.GetRequiredService<IWorkOrderReconciliationService>());
 
diff --git a/SeaHaven.Services/Helpers/InMemoryPasswordResetThrottle.cs b/SeaHaven.Services/Helpers/InMemoryPasswordResetThrottle.cs
new file mode 100644
index 0000000..00ad7aa
--- /dev/null
+++ b/SeaHaven.Services/Helpers/InMemoryPasswordResetThrottle.cs
@@ -0,0 +1,119 @@
+using System.Security.Cryptography;
+using System.Text;
+using SeaHaven.Services.Interfaces;
+
+namespace SeaHaven.Services.Helpers
+{
+    /// <summary>
+    /// Process-wide sliding-window counters for <see cref="IPasswordResetThrottle"/>.
+    /// Registered as a singleton; the API runs as a single instance, and a restart
+    /// clears the windows. Emails are held only as SHA-256 digests.
+    /// </summary>
+    public sealed class InMemoryPasswordResetThrottle : IPasswordResetThrottle
+    {
+        public const int CodeRequestsPerHour = 3;
+        public const int CodeRequestsPerDay = 10;
+        public const int FailedChecksPerDay = 10;
+
+        private static readonly TimeSpan Hour = TimeSpan.FromHours(1);
+        private static readonly TimeSpan Day = TimeSpan.FromDays(1);
+        private const int SweepEvery = 1024;
+
+        private readonly TimeProvider _timeProvider;
+        private readonly object _gate = new();
+        private readonly Dictionary<string, Account> _accounts = new(StringComparer.Ordinal);
+        private int _operations;
+
+        public InMemoryPasswordResetThrottle(TimeProvider timeProvider)
+        {
+            _timeProvider = timeProvider;
+        }
+
+        public bool TryAcceptCodeRequest(string email)
+        {
+            var now = _timeProvider.GetUtcNow();
+            lock (_gate)
+            {
+                var account = AccountFor(email, now);
+                if (account.Requests.Count >= CodeRequestsPerDay
+                    || account.Requests.Count(at => at > now - Hour) >= CodeRequestsPerHour)
+                {
+                    return false;
+                }
+
+                account.Requests.Add(now);
+                return true;
+            }
+        }
+
+        public bool TryReserveCheck(string email)
+        {
+            var now = _timeProvider.GetUtcNow();
+            lock (_gate)
+            {
+                var account = AccountFor(email, now);
+                if (account.FailedChecks.Count >= FailedChecksPerDay)
+                    return false;
+
+                account.FailedChecks.Add(now);
+                return true;
+            }
+        }
+
+        public void ReleaseCheck(string email)
+        {
+            var now = _timeProvider.GetUtcNow();
+            lock (_gate)
+            {
+                var account = AccountFor(email, now);
+                if (account.FailedChecks.Count > 0)
+                    account.FailedChecks.RemoveAt(account.FailedChecks.Count - 1);
+            }
+        }
+
+        /// <summary>The same normalization the user lookup applies: trimmed, invariant upper case.</summary>
+        public static string KeyFor(string email)
+        {
+            var normalized = (email ?? string.Empty).Trim().ToUpperInvariant();
+            return Convert.ToHexString(SHA256.HashData(Encoding.UTF8.GetBytes(normalized)));
+        }
+
+        private Account AccountFor(string email, DateTimeOffset now)
+        {
+            if (++_operations % SweepEvery == 0)
+                Sweep(now);
+
+            var key = KeyFor(email);
+            if (!_accounts.TryGetValue(key, out var account))
+            {
+                account = new Account();
+                _accounts[key] = account;
+            }
+
+            account.Prune(now - Day);
+            return account;
+        }
+
+        private void Sweep(DateTimeOffset now)
+        {
+            foreach (var (key, account) in _accounts.ToList())
+            {
+                account.Prune(now - Day);
+                if (account.Requests.Count == 0 && account.FailedChecks.Count == 0)
+                    _accounts.Remove(key);
+            }
+        }
+
+        private sealed class Account
+        {
+            public List<DateTimeOffset> Requests { get; } = new();
+            public List<DateTimeOffset> FailedChecks { get; } = new();
+
+            public void Prune(DateTimeOffset cutoff)
+            {
+                Requests.RemoveAll(at => at <= cutoff);
+                FailedChecks.RemoveAll(at => at <= cutoff);
+            }
+        }
+    }
+}
diff --git a/SeaHaven.Services/Helpers/PasswordResetCodeSecrets.cs b/SeaHaven.Services/Helpers/PasswordResetCodeSecrets.cs
index 39762dd..edee811 100644
--- a/SeaHaven.Services/Helpers/PasswordResetCodeSecrets.cs
+++ b/SeaHaven.Services/Helpers/PasswordResetCodeSecrets.cs
@@ -6,10 +6,24 @@ namespace SeaHaven.Services.Helpers
 {
     /// <summary>
     /// Generation and hashing for emailed password reset codes. The raw code exists
-    /// only in memory and in the email sent to the account holder.
+    /// only in memory and in the email sent to the account holder. Hashes are keyed
+    /// with a server-side key, so a copy of the database alone cannot be used to
+    /// brute-force the six-digit codes offline.
     /// </summary>
     public static class PasswordResetCodeSecrets
     {
+        private static readonly byte[] KeyInfo = Encoding.UTF8.GetBytes("password-reset-code-v1");
+
+        /// <summary>
+        /// Derives the code-hashing key from an existing server secret with HKDF, so no
+        /// new secret is needed and the derived key is useless for anything else.
+        /// </summary>
+        public static byte[] DeriveKey(string serverSecret)
+        {
+            ArgumentException.ThrowIfNullOrEmpty(serverSecret);
+            return HKDF.DeriveKey(HashAlgorithmName.SHA256, Encoding.UTF8.GetBytes(serverSecret), 32, Array.Empty<byte>(), KeyInfo);
+        }
+
         public static string NewCode()
         {
             return RandomNumberGenerator.GetInt32(0, 1_000_000).ToString("D6", CultureInfo.InvariantCulture);
@@ -20,19 +34,26 @@ namespace SeaHaven.Services.Helpers
             return Convert.ToHexString(RandomNumberGenerator.GetBytes(16)).ToLowerInvariant();
         }
 
-        public static string Hash(string salt, string code)
+        /// <summary>A value shaped like a hash that no code can match.</summary>
+        public static string NewUnmatchableHash()
         {
-            ArgumentNullException.ThrowIfNull(salt);
-            ArgumentNullException.ThrowIfNull(code);
-            return Convert.ToHexString(SHA256.HashData(Encoding.UTF8.GetBytes(salt + ":" + code))).ToLowerInvariant();
+            return Convert.ToHexString(RandomNumberGenerator.GetBytes(32)).ToLowerInvariant();
         }
 
-        public static bool Matches(string salt, string candidate, string expectedHash)
+        public static string Hash(byte[] key, string salt, string code)
+        {
+            ArgumentNullException.ThrowIfNull(key);
+            ArgumentNullException.ThrowIfNull(salt);
+            ArgumentNullException.ThrowIfNull(code);
+            return Convert.ToHexString(HMACSHA256.HashData(key, Encoding.UTF8.GetBytes(salt + ":" + code))).ToLowerInvariant();
+        }
+
+        public static bool Matches(byte[] key, string salt, string candidate, string expectedHash)
         {
             if (string.IsNullOrEmpty(salt) || string.IsNullOrEmpty(expectedHash))
                 return false;
 
-            var actual = Encoding.ASCII.GetBytes(Hash(salt, candidate.Trim()));
+            var actual = Encoding.ASCII.GetBytes(Hash(key, salt, candidate.Trim()));
             var expected = Encoding.ASCII.GetBytes(expectedHash);
             return CryptographicOperations.FixedTimeEquals(actual, expected);
         }
diff --git a/SeaHaven.Services/Implementation/AuthenticationService.cs b/SeaHaven.Services/Implementation/AuthenticationService.cs
index 1a0d263..94e0833 100644
--- a/SeaHaven.Services/Implementation/AuthenticationService.cs
+++ b/SeaHaven.Services/Implementation/AuthenticationService.cs
@@ -19,28 +19,37 @@ namespace SeaHaven.Services.Implementation
         private readonly JwtOptions _jwtOptions;
         private readonly IUserDataService _userDataService;
         private readonly IForgetPasswordDataService _forgetPasswordDataService;
-        private readonly IEmailSender _emailSender;
+        private readonly IPasswordResetEmailQueue _resetEmails;
+        private readonly IPasswordResetThrottle _resetThrottle;
         private readonly TimeProvider _timeProvider;
+        private byte[]? _resetCodeKey;
 
         public static readonly TimeSpan ResetCodeLifetime = TimeSpan.FromMinutes(15);
         public const int MaxCodeAttempts = 5;
 
+        /// <summary>Longest address stored for a reset request; Identity caps emails at 256.</summary>
+        public const int MaxResetEmailLength = 256;
+
         public AuthenticationService(
             UserManager<ApplicationUser> userManager,
             IOptions<JwtOptions> jwtOptions,
             IUserDataService userDataService,
             IForgetPasswordDataService forgetPasswordDataService,
-            IEmailSender emailSender,
+            IPasswordResetEmailQueue resetEmails,
+            IPasswordResetThrottle resetThrottle,
             TimeProvider timeProvider)
         {
             _userManager = userManager;
             _jwtOptions = jwtOptions.Value;
             _userDataService = userDataService;
             _forgetPasswordDataService = forgetPasswordDataService;
-            _emailSender = emailSender;
+            _resetEmails = resetEmails;
+            _resetThrottle = resetThrottle;
             _timeProvider = timeProvider;
         }
 
+        private byte[] ResetCodeKey => _resetCodeKey ??= PasswordResetCodeSecrets.DeriveKey(_jwtOptions.Secret);
+
         public async Task<LoginResultDTO?> LoginAsync(string? username, string? password, CancellationToken cancellationToken)
         {
             var user = await _userManager.FindByNameAsync(username ?? "");
@@ -119,26 +128,42 @@ namespace SeaHaven.Services.Implementation
 
         public async Task ForgetPasswordAsync(string? email, CancellationToken cancellationToken)
         {
-            // Registered and unregistered addresses take the same path up to the
-            // email send: one user lookup, one code generated and hashed, one write.
+            // Registered and unregistered addresses do the same work: one user lookup,
+            // one code generated and hashed, and the same replace in the database. An
+            // unregistered address gets a row no code can match. The email itself is
+            // queued, so the response never waits on the mail provider.
             var requested = email?.Trim() ?? string.Empty;
-            var user = requested.Length == 0
-                ? null
-                : await _userDataService.GetByEmailNormalizedAsync(requested, cancellationToken);
-            var code = PasswordResetCodeSecrets.NewCode();
-            var salt = PasswordResetCodeSecrets.NewSalt();
-            var hash = PasswordResetCodeSecrets.Hash(salt, code);
+            if (requested.Length == 0 || requested.Length > MaxResetEmailLength)
+                return;
 
-            if (user == null || user.IsDeleted == true || string.IsNullOrWhiteSpace(user.Email))
+            var user = await _userDataService.GetByEmailNormalizedAsync(requested, cancellationToken);
+            var nowUtc = _timeProvider.GetUtcNow().UtcDateTime;
+            if (!_resetThrottle.TryAcceptCodeRequest(requested))
             {
-                await _forgetPasswordDataService.RemoveByEmailAsync(requested, cancellationToken);
+                // Over the per-email limit: keep the current code and send nothing.
+                await _forgetPasswordDataService.PurgeExpiredAsync(nowUtc, cancellationToken);
                 return;
             }
 
-            var expiresAtUtc = _timeProvider.GetUtcNow().UtcDateTime.Add(ResetCodeLifetime);
-            await _forgetPasswordDataService.ReplaceCodeAsync(user.Email, user.Id, hash, salt, expiresAtUtc, cancellationToken);
-            var body = $"Your Password Reset Code is: {code}. It expires in {(int)ResetCodeLifetime.TotalMinutes} minutes.";
-            await _emailSender.SendEmailAsync(user.Email, "Forget Password Request.", body);
+            var code = PasswordResetCodeSecrets.NewCode();
+            var salt = PasswordResetCodeSecrets.NewSalt();
+            var hash = PasswordResetCodeSecrets.Hash(ResetCodeKey, salt, code);
+            var active = user != null && user.IsDeleted != true && !string.IsNullOrWhiteSpace(user.Email);
+
+            await _forgetPasswordDataService.ReplaceCodeAsync(
+                active ? user!.Email! : requested,
+                active ? user!.Id : string.Empty,
+                active ? hash : PasswordResetCodeSecrets.NewUnmatchableHash(),
+                salt,
+                nowUtc.Add(ResetCodeLifetime),
+                nowUtc,
+                cancellationToken);
+
+            if (active)
+            {
+                var body = $"Your Password Reset Code is: {code}. It expires in {(int)ResetCodeLifetime.TotalMinutes} minutes.";
+                _resetEmails.TryEnqueue(user!.Email!, "Forget Password Request.", body);
+            }
         }
 
         public async Task<bool> VerifyCodeAsync(string? email, string? code, CancellationToken cancellationToken)
@@ -192,6 +217,12 @@ namespace SeaHaven.Services.Implementation
             if (string.IsNullOrWhiteSpace(email) || string.IsNullOrWhiteSpace(code))
                 return null;
 
+            // The per-account budget spans every code the account is sent, so asking for
+            // new codes does not buy more guesses. A slot is reserved before comparing and
+            // given back only when the code matches.
+            if (!_resetThrottle.TryReserveCheck(email))
+                return null;
+
             var pending = await _forgetPasswordDataService.GetByEmailAsync(email, cancellationToken);
             if (pending == null)
                 return null;
@@ -203,8 +234,11 @@ namespace SeaHaven.Services.Implementation
                 return null;
             }
 
-            if (PasswordResetCodeSecrets.Matches(pending.CodeSalt, code, pending.CodeHash))
+            if (PasswordResetCodeSecrets.Matches(ResetCodeKey, pending.CodeSalt, code, pending.CodeHash))
+            {
+                _resetThrottle.ReleaseCheck(email);
                 return pending;
+            }
 
             if (pending.FailedAttempts + 1 >= MaxCodeAttempts)
                 await _forgetPasswordDataService.RemoveByEmailAsync(pending.Email, cancellationToken);
diff --git a/SeaHaven.Services/Interfaces/IPasswordResetEmailQueue.cs b/SeaHaven.Services/Interfaces/IPasswordResetEmailQueue.cs
new file mode 100644
index 0000000..948f2d0
--- /dev/null
+++ b/SeaHaven.Services/Interfaces/IPasswordResetEmailQueue.cs
@@ -0,0 +1,13 @@
+namespace SeaHaven.Services.Interfaces
+{
+    /// <summary>
+    /// Hands a password reset email to a background sender, so the request that asked
+    /// for it does not wait on the mail provider and cannot be timed against one that
+    /// sent nothing.
+    /// </summary>
+    public interface IPasswordResetEmailQueue
+    {
+        /// <summary>Returns false when the queue is full and the email was dropped.</summary>
+        bool TryEnqueue(string emailTo, string subject, string body);
+    }
+}
diff --git a/SeaHaven.Services/Interfaces/IPasswordResetThrottle.cs b/SeaHaven.Services/Interfaces/IPasswordResetThrottle.cs
new file mode 100644
index 0000000..8cdcc2e
--- /dev/null
+++ b/SeaHaven.Services/Interfaces/IPasswordResetThrottle.cs
@@ -0,0 +1,24 @@
+namespace SeaHaven.Services.Interfaces
+{
+    /// <summary>
+    /// Per-account limits on the anonymous password reset flow, keyed on the
+    /// normalized email so they hold however many client addresses an attacker uses.
+    /// </summary>
+    public interface IPasswordResetThrottle
+    {
+        /// <summary>
+        /// Counts a code request for the email and returns true while it is within the
+        /// hourly and daily limits. A refused request is not counted.
+        /// </summary>
+        bool TryAcceptCodeRequest(string email);
+
+        /// <summary>
+        /// Reserves one failed check for the email before a code is compared. Returns
+        /// false once the account has used its failed checks for the window.
+        /// </summary>
+        bool TryReserveCheck(string email);
+
+        /// <summary>Gives back the reservation of a check whose code matched.</summary>
+        void ReleaseCheck(string email);
+    }
+}
diff --git a/SeaHavenIndustries.Tests/PasswordResetAbuseLimitsTests.cs b/SeaHavenIndustries.Tests/PasswordResetAbuseLimitsTests.cs
new file mode 100644
index 0000000..2431cc4
--- /dev/null
+++ b/SeaHavenIndustries.Tests/PasswordResetAbuseLimitsTests.cs
@@ -0,0 +1,241 @@
+using System.Net;
+using Api.SeaHavenIndustries.Controllers;
+using Api.SeaHavenIndustries.HostedServices;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Hosting;
+using SeaHaven.Services.Helpers;
+using SeaHaven.Services.Interfaces;
+
+namespace SeaHavenIndustries.Tests;
+
+/// <summary>
+/// Limits that hold per account rather than per client address, the email send
+/// being off the request path, and the keyed code hash.
+/// </summary>
+public sealed class PasswordResetAbuseLimitsTests
+{
+    private const string Alice = "alice@example.com";
+    private const string OldPassword = "Old@12345";
+    private const string NewPassword = "New@67890";
+    private const string CodeNotMatched = "{\"status\":\"Error\",\"message\":\"Code Not Matched\"}";
+    private const string ResetFailed = "{\"status\":\"Error\",\"message\":\"Your email or code not found please check\"}";
+
+    private static int _nextClient;
+
+    // A fresh client address per request, so the per-IP limit never masks the per-account one.
+    private static string NextClient()
+    {
+        var n = Interlocked.Increment(ref _nextClient);
+        return $"198.51.{n / 250 % 250}.{n % 250 + 1}";
+    }
+
+    [Fact]
+    public async Task Code_requests_are_capped_per_email_at_three_an_hour_and_ten_a_day()
+    {
+        await using var host = await PasswordResetTestHost.StartAsync();
+        await host.AddUserAsync(Alice, OldPassword);
+
+        var responses = new List<string>();
+        for (var request = 0; request < 3; request++)
+            responses.Add(await (await host.ForgetPasswordAsync(Alice, NextClient())).Content.ReadAsStringAsync());
+        var liveCode = host.Sent.LatestCodeFor(Alice);
+
+        // A differently cased and padded address is the same account.
+        responses.Add(await (await host.ForgetPasswordAsync("  ALICE@Example.com ", NextClient())).Content.ReadAsStringAsync());
+
+        Assert.Equal(3, host.Sent.Messages.Count);
+        Assert.Single(responses.Distinct());
+        // The refused request neither sent a code nor replaced the one already sent.
+        Assert.Equal(HttpStatusCode.OK, (await host.VerifyAsync(Alice, liveCode, NextClient())).StatusCode);
+
+        for (var hour = 1; hour <= 3; hour++)
+        {
+            host.Time.Advance(TimeSpan.FromHours(1));
+            for (var request = 0; request < 3; request++)
+                await host.ForgetPasswordAsync(Alice, NextClient());
+        }
+
+        Assert.Equal(10, host.Sent.Messages.Count);
+
+        host.Time.Advance(TimeSpan.FromHours(20));
+        await host.ForgetPasswordAsync(Alice, NextClient());
+        Assert.Equal(10, host.Sent.Messages.Count);
+
+        host.Time.Advance(TimeSpan.FromHours(1));
+        await host.ForgetPasswordAsync(Alice, NextClient());
+        Assert.Equal(11, host.Sent.Messages.Count);
+    }
+
+    [Fact]
+    public async Task Failed_checks_are_capped_per_account_across_every_code_it_is_sent()
+    {
+        await using var host = await PasswordResetTestHost.StartAsync();
+        await host.AddUserAsync(Alice, OldPassword);
+
+        for (var round = 0; round < 2; round++)
+        {
+            await host.ForgetPasswordAsync(Alice, NextClient());
+            var code = host.Sent.LatestCodeFor(Alice);
+            for (var attempt = 0; attempt < 5; attempt++)
+                await host.VerifyAsync(Alice, WrongCode(code), NextClient());
+        }
+
+        await host.ForgetPasswordAsync(Alice, NextClient());
+        var third = host.Sent.LatestCodeFor(Alice);
+
+        Assert.Equal(CodeNotMatched, await (await host.VerifyAsync(Alice, third, NextClient())).Content.ReadAsStringAsync());
+        Assert.Equal(ResetFailed, await (await host.ResetAsync(Alice, third, NewPassword, NextClient())).Content.ReadAsStringAsync());
+        Assert.Equal(HttpStatusCode.OK, (await host.LoginAsync(Alice, OldPassword)).StatusCode);
+
+        host.Time.Advance(TimeSpan.FromDays(1));
+        await host.ForgetPasswordAsync(Alice, NextClient());
+        Assert.Equal(HttpStatusCode.OK, (await host.ResetAsync(Alice, host.Sent.LatestCodeFor(Alice), NewPassword, NextClient())).StatusCode);
+    }
+
+    [Fact]
+    public void Concurrent_checks_can_never_exceed_the_account_budget()
+    {
+        var throttle = new InMemoryPasswordResetThrottle(new ManualTimeProvider());
+
+        var reserved = 0;
+        Parallel.For(0, 64, _ =>
+        {
+            if (throttle.TryReserveCheck(Alice))
+                Interlocked.Increment(ref reserved);
+        });
+
+        Assert.Equal(InMemoryPasswordResetThrottle.FailedChecksPerDay, reserved);
+    }
+
+    [Fact]
+    public void A_matching_check_gives_its_reservation_back()
+    {
+        var throttle = new InMemoryPasswordResetThrottle(new ManualTimeProvider());
+
+        for (var check = 0; check < 50; check++)
+        {
+            Assert.True(throttle.TryReserveCheck(Alice));
+            throttle.ReleaseCheck(Alice);
+        }
+
+        Assert.True(throttle.TryReserveCheck(Alice.ToUpperInvariant()));
+    }
+
+    [Fact]
+    public async Task ForgetPassword_answers_before_the_email_is_sent()
+    {
+        var sender = new BlockingEmailSender();
+        await using var host = await PasswordResetTestHost.StartAsync(sender);
+        await host.AddUserAsync(Alice, OldPassword);
+        try
+        {
+            var response = await host.Client
+                .SendAsync(PasswordResetTestHost.Post("api/Authentication/ForgetPassword", new { email = Alice }))
+                .WaitAsync(TimeSpan.FromSeconds(5));
+
+            Assert.Equal(HttpStatusCode.OK, response.StatusCode);
+            Assert.Contains(AuthenticationController.ForgetPasswordMessage, await response.Content.ReadAsStringAsync());
+            Assert.False(sender.Completed);
+        }
+        finally
+        {
+            sender.Release();
+        }
+
+        await host.WaitForEmailDrainAsync();
+        Assert.True(sender.Completed);
+    }
+
+    [Fact]
+    public async Task An_unregistered_email_gets_the_same_database_write_but_a_code_nothing_can_match()
+    {
+        await using var host = await PasswordResetTestHost.StartAsync();
+        var alice = await host.AddUserAsync(Alice, OldPassword);
+
+        await host.ForgetPasswordAsync(Alice);
+        await host.ForgetPasswordAsync("nobody@example.com");
+
+        var rows = await host.PendingCodesAsync();
+        Assert.Equal(2, rows.Count);
+        var registered = Assert.Single(rows, row => row.Email == Alice);
+        var unregistered = Assert.Single(rows, row => row.Email == "nobody@example.com");
+        Assert.Equal(alice.Id, registered.UserId);
+        Assert.Equal(string.Empty, unregistered.UserId);
+        Assert.Matches("^[0-9a-f]{64}$", unregistered.CodeHash);
+        Assert.Equal(registered.ExpiresAtUtc, unregistered.ExpiresAtUtc);
+        Assert.Single(host.Sent.Messages);
+
+        Assert.Equal(CodeNotMatched, await (await host.VerifyAsync("nobody@example.com", "000000")).Content.ReadAsStringAsync());
+    }
+
+    [Fact]
+    public async Task Each_request_clears_expired_codes_so_decoy_rows_do_not_accumulate()
+    {
+        await using var host = await PasswordResetTestHost.StartAsync();
+
+        await host.ForgetPasswordAsync("first@example.com");
+        await host.ForgetPasswordAsync("second@example.com");
+        host.Time.Advance(TimeSpan.FromMinutes(16));
+        await host.ForgetPasswordAsync("third@example.com");
+
+        var row = Assert.Single(await host.PendingCodesAsync());
+        Assert.Equal("third@example.com", row.Email);
+    }
+
+    [Fact]
+    public async Task A_code_stored_in_the_previous_unkeyed_format_no_longer_matches()
+    {
+        await using var host = await PasswordResetTestHost.StartAsync();
+        var alice = await host.AddUserAsync(Alice, OldPassword);
+        var code = await host.AddSiblingCodeAsync(Alice, alice.Id, keyedHash: false);
+
+        Assert.Equal(CodeNotMatched, await (await host.VerifyAsync(Alice, code)).Content.ReadAsStringAsync());
+        Assert.Equal(ResetFailed, await (await host.ResetAsync(Alice, code, NewPassword)).Content.ReadAsStringAsync());
+    }
+
+    [Fact]
+    public void A_code_hashed_under_another_server_secret_does_not_match()
+    {
+        var salt = PasswordResetCodeSecrets.NewSalt();
+        var hash = PasswordResetCodeSecrets.Hash(PasswordResetCodeSecrets.DeriveKey(new string('a', 64)), salt, "123456");
+
+        Assert.True(PasswordResetCodeSecrets.Matches(PasswordResetCodeSecrets.DeriveKey(new string('a', 64)), salt, "123456", hash));
+        Assert.False(PasswordResetCodeSecrets.Matches(PasswordResetCodeSecrets.DeriveKey(new string('b', 64)), salt, "123456", hash));
+    }
+
+    [Fact]
+    public async Task Reset_queue_and_throttle_are_process_wide_and_the_sender_runs()
+    {
+        await using var host = await PasswordResetTestHost.StartAsync();
+
+        object Resolve<T>() where T : notnull
+        {
+            using var scope = host.Services.CreateScope();
+            return scope.ServiceProvider.GetRequiredService<T>();
+        }
+
+        Assert.Same(Resolve<IPasswordResetEmailQueue>(), Resolve<IPasswordResetEmailQueue>());
+        Assert.Same(Resolve<IPasswordResetThrottle>(), Resolve<IPasswordResetThrottle>());
+        Assert.Same(Resolve<PasswordResetEmailChannel>(), Resolve<IPasswordResetEmailQueue>());
+        Assert.Contains(host.Services.GetServices<IHostedService>(), service => service is PasswordResetEmailSenderHostedService);
+    }
+
+    private static string WrongCode(string code) =>
+        ((int.Parse(code) + 1) % 1_000_000).ToString("D6");
+
+    private sealed class BlockingEmailSender : IEmailSender
+    {
+        private readonly TaskCompletionSource _gate = new(TaskCreationOptions.RunContinuationsAsynchronously);
+
+        public bool Completed { get; private set; }
+
+        public void Release() => _gate.TrySetResult();
+
+        public async Task<bool> SendEmailAsync(string emailTo, string subject, string body)
+        {
+            await _gate.Task;
+            Completed = true;
+            return true;
+        }
+    }
+}
diff --git a/SeaHavenIndustries.Tests/PasswordResetFlowTests.cs b/SeaHavenIndustries.Tests/PasswordResetFlowTests.cs
index 51f3c70..fe4984d 100644
--- a/SeaHavenIndustries.Tests/PasswordResetFlowTests.cs
+++ b/SeaHavenIndustries.Tests/PasswordResetFlowTests.cs
@@ -5,6 +5,7 @@ using Api.SeaHavenIndustries.Controllers;
 using Api.SeaHavenIndustries.Infrastructure;
 using Microsoft.Extensions.DependencyInjection;
 using SeaHaven.DataServices.Interfaces;
+using SeaHaven.Services.Helpers;
 using SeaHaven.Services.Interfaces;
 
 namespace SeaHavenIndustries.Tests;
@@ -64,7 +65,7 @@ public sealed class PasswordResetFlowTests
 
         var message = Assert.Single(host.Sent.Messages);
         Assert.Equal(Alice, message.To);
-        Assert.Single(await host.PendingCodesAsync());
+        Assert.Single(await host.PendingCodesAsync(), row => row.UserId.Length > 0);
     }
 
     [Fact]
@@ -84,7 +85,7 @@ public sealed class PasswordResetFlowTests
     }
 
     [Fact]
-    public async Task Stored_code_is_a_salted_hash_and_the_plaintext_is_only_in_the_email()
+    public async Task Stored_code_is_keyed_with_a_server_secret_and_the_plaintext_is_only_in_the_email()
     {
         await using var host = await PasswordResetTestHost.StartAsync();
         await host.AddUserAsync(Alice, OldPassword);
@@ -96,8 +97,11 @@ public sealed class PasswordResetFlowTests
         Assert.Equal(string.Empty, row.Code);
         Assert.Matches("^[0-9a-f]{32}$", row.CodeSalt);
         Assert.Matches("^[0-9a-f]{64}$", row.CodeHash);
-        Assert.NotEqual(Sha256Hex(code), row.CodeHash);
-        Assert.Equal(Sha256Hex(row.CodeSalt + ":" + code), row.CodeHash);
+        // Salt and hash from the row alone are not enough to test a guess offline.
+        Assert.NotEqual(Sha256Hex(row.CodeSalt + ":" + code), row.CodeHash);
+        Assert.Equal(
+            PasswordResetCodeSecrets.Hash(PasswordResetCodeSecrets.DeriveKey(PasswordResetTestHost.JwtSecret), row.CodeSalt, code),
+            row.CodeHash);
         Assert.DoesNotContain(code, string.Join("|", row.Code, row.CodeHash, row.CodeSalt, row.Email, row.UserId));
     }
 
@@ -289,18 +293,25 @@ public sealed class PasswordResetFlowTests
     }
 
     [Fact]
-    public async Task VerificationCode_and_ForgetPassword_still_accept_the_query_string_form()
+    public async Task Email_and_code_in_the_query_string_are_ignored()
     {
         await using var host = await PasswordResetTestHost.StartAsync();
         await host.AddUserAsync(Alice, OldPassword);
 
-        var requested = await host.Client.SendAsync(PasswordResetTestHost.Post($"api/Authentication/ForgetPassword?Email={Uri.EscapeDataString(Alice)}"));
-        Assert.Equal(HttpStatusCode.OK, requested.StatusCode);
-        var code = host.Sent.LatestCodeFor(Alice);
+        var queryRequest = await host.Client.SendAsync(PasswordResetTestHost.Post($"api/Authentication/ForgetPassword?Email={Uri.EscapeDataString(Alice)}"));
+        await host.WaitForEmailDrainAsync();
+        var bodyRequest = await host.ForgetPasswordAsync("nobody@example.com");
+        Assert.Equal(HttpStatusCode.OK, queryRequest.StatusCode);
+        Assert.Equal(await bodyRequest.Content.ReadAsStringAsync(), await queryRequest.Content.ReadAsStringAsync());
+        Assert.Empty(host.Sent.Messages);
 
+        await host.ForgetPasswordAsync(Alice);
+        var code = host.Sent.LatestCodeFor(Alice);
         var verified = await host.Client.SendAsync(PasswordResetTestHost.Post(
             $"api/Authentication/VerificationCode?email={Uri.EscapeDataString(Alice)}&code={code}"));
-        Assert.Equal(HttpStatusCode.OK, verified.StatusCode);
+
+        Assert.Equal(HttpStatusCode.BadRequest, verified.StatusCode);
+        Assert.Equal(CodeNotMatched, await verified.Content.ReadAsStringAsync());
     }
 
     [Fact]
@@ -367,6 +378,7 @@ public sealed class PasswordResetFlowTests
         var program = File.ReadAllText(Path.Combine(RepoRoot(), "Api.SeaHavenIndustries", "Program.cs"));
 
         Assert.Contains("builder.Services.AddPasswordResetRateLimiting();", program);
+        Assert.Contains("builder.Services.AddPasswordResetEmailDelivery();", program);
         var build = program.IndexOf("builder.Build()", StringComparison.Ordinal);
         var forwarded = program.IndexOf("app.UseForwardedHeaders()", StringComparison.Ordinal);
         var firstMiddleware = program.IndexOf("app.Use", build, StringComparison.Ordinal);
diff --git a/SeaHavenIndustries.Tests/PasswordResetTestHost.cs b/SeaHavenIndustries.Tests/PasswordResetTestHost.cs
index 6904954..a16774e 100644
--- a/SeaHavenIndustries.Tests/PasswordResetTestHost.cs
+++ b/SeaHavenIndustries.Tests/PasswordResetTestHost.cs
@@ -2,6 +2,7 @@ using System.Collections.Concurrent;
 using System.Net.Http.Json;
 using System.Text.RegularExpressions;
 using Api.SeaHavenIndustries.Controllers;
+using Api.SeaHavenIndustries.HostedServices;
 using Api.SeaHavenIndustries.Infrastructure;
 using Data.SeaHavenIndustries;
 using Microsoft.AspNetCore.Builder;
@@ -32,6 +33,8 @@ namespace SeaHavenIndustries.Tests;
 /// </summary>
 internal sealed class PasswordResetTestHost : IAsyncDisposable
 {
+    public static readonly string JwtSecret = new('k', 64);
+
     private readonly WebApplication _app;
     private readonly string _databasePath;
 
@@ -61,7 +64,7 @@ internal sealed class PasswordResetTestHost : IAsyncDisposable
         builder.WebHost.UseUrls("http://127.0.0.1:0");
         builder.Configuration.AddInMemoryCollection(new Dictionary<string, string?>
         {
-            ["JWT:Secret"] = new string('k', 64),
+            ["JWT:Secret"] = JwtSecret,
             ["JWT:ValidIssuer"] = "issuer",
             ["JWT:ValidAudience"] = "audience"
         });
@@ -90,6 +93,7 @@ internal sealed class PasswordResetTestHost : IAsyncDisposable
                 manager.FeatureProviders.Add(new OnlyAuthenticationController());
             });
         builder.Services.AddPasswordResetRateLimiting();
+        builder.Services.AddPasswordResetEmailDelivery();
 
         var app = builder.Build();
         app.UseForwardedHeaders();
@@ -141,7 +145,7 @@ internal sealed class PasswordResetTestHost : IAsyncDisposable
     /// Stores a second pending code for the email directly, as two concurrent first
     /// requests could, and returns it. The new row is the newest one.
     /// </summary>
-    public async Task<string> AddSiblingCodeAsync(string email, string userId)
+    public async Task<string> AddSiblingCodeAsync(string email, string userId, bool keyedHash = true)
     {
         const string code = "424242";
         const string salt = "0123456789abcdef0123456789abcdef";
@@ -152,7 +156,9 @@ internal sealed class PasswordResetTestHost : IAsyncDisposable
             Email = email,
             UserId = userId,
             CodeSalt = salt,
-            CodeHash = SeaHaven.Services.Helpers.PasswordResetCodeSecrets.Hash(salt, code),
+            CodeHash = keyedHash
+                ? SeaHaven.Services.Helpers.PasswordResetCodeSecrets.Hash(SeaHaven.Services.Helpers.PasswordResetCodeSecrets.DeriveKey(JwtSecret), salt, code)
+                : Convert.ToHexString(System.Security.Cryptography.SHA256.HashData(System.Text.Encoding.UTF8.GetBytes(salt + ":" + code))).ToLowerInvariant(),
             ExpiresAtUtc = Time.GetUtcNow().UtcDateTime.AddMinutes(15)
         });
         await context.SaveChangesAsync();
@@ -169,8 +175,25 @@ internal sealed class PasswordResetTestHost : IAsyncDisposable
         return request;
     }
 
-    public Task<HttpResponseMessage> ForgetPasswordAsync(string email, string? clientIp = null) =>
-        Client.SendAsync(Post("api/Authentication/ForgetPassword", new { email }, clientIp));
+    /// <summary>Requests a code and waits until any queued email has been handed to the sender.</summary>
+    public async Task<HttpResponseMessage> ForgetPasswordAsync(string email, string? clientIp = null)
+    {
+        var response = await Client.SendAsync(Post("api/Authentication/ForgetPassword", new { email }, clientIp));
+        await WaitForEmailDrainAsync();
+        return response;
+    }
+
+    public async Task WaitForEmailDrainAsync()
+    {
+        var channel = _app.Services.GetRequiredService<PasswordResetEmailChannel>();
+        var deadline = DateTime.UtcNow.AddSeconds(10);
+        while (channel.Pending > 0)
+        {
+            if (DateTime.UtcNow > deadline)
+                throw new TimeoutException("Queued password reset emails were not sent.");
+            await Task.Delay(10);
+        }
+    }
 
     public Task<HttpResponseMessage> VerifyAsync(string email, string code, string? clientIp = null) =>
         Client.SendAsync(Post("api/Authentication/VerificationCode", new { email, code }, clientIp));

From 9091335ff23e6a32c0647c99b67f2fdd2c66f05d Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 13:02:58 -0300
Subject: [PATCH 155/183] fix(auth): reject an unconfirmed new password and
 report only policy failures as weak

---
 .../AuthenticationControllerTests.cs          | 34 +++++++++++++++++
 .../PasswordPolicyTests.cs                    | 38 +++++++++++++++++++
 .../Controllers/AuthenticationController.cs   |  7 ++++
 .../Auth/IdentityPasswordPolicy.cs            | 20 ++++++++++
 SeaHaven.Services/DTOs/IdentityDTOs.cs        |  4 +-
 .../Implementation/AuthenticationService.cs   |  9 +++--
 6 files changed, 108 insertions(+), 4 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/AuthenticationControllerTests.cs b/Api.SeaHavenIndustries.Tests/AuthenticationControllerTests.cs
index 4187a24..0eaa5b4 100644
--- a/Api.SeaHavenIndustries.Tests/AuthenticationControllerTests.cs
+++ b/Api.SeaHavenIndustries.Tests/AuthenticationControllerTests.cs
@@ -166,6 +166,40 @@ public class AuthenticationControllerTests
             "Password must be at least 6 characters and include one uppercase letter, one number, and one special character.");
     }
 
+    [Fact]
+    public async Task ChangePassword_ConfirmationMismatch_IsRejectedWithoutChangingThePassword()
+    {
+        var service = new Mock<IAuthenticationService>();
+        var controller = NewController(service, "42");
+
+        var result = await controller.ChangePassword(
+            new ChangePasswords { Currentpassword = "Current1!", Newpassword = "Next2@x", Confirmpassword = "Next2@y" },
+            CancellationToken.None);
+
+        var bad = result.Should().BeOfType<BadRequestObjectResult>().Subject;
+        bad.Value.Should().BeOfType<Response>().Subject.Message.Should().Be("Passwords don't match");
+        service.Verify(
+            s => s.ChangePasswordAsync(It.IsAny<string>(), It.IsAny<string>(), It.IsAny<string>(), It.IsAny<CancellationToken>()),
+            Times.Never);
+    }
+
+    [Fact]
+    public async Task ChangePassword_NonPolicyFailure_ReturnsTheGenericMessage()
+    {
+        var service = new Mock<IAuthenticationService>();
+        service.Setup(s => s.ChangePasswordAsync("42", "Current1!", "Next2@x", It.IsAny<CancellationToken>()))
+            .ReturnsAsync(new ChangePasswordResultDTO { Status = ChangePasswordStatus.Failed });
+        var controller = NewController(service, "42");
+
+        var result = await controller.ChangePassword(
+            new ChangePasswords { Currentpassword = "Current1!", Newpassword = "Next2@x", Confirmpassword = "Next2@x" },
+            CancellationToken.None);
+
+        var response = result.Should().BeOfType<BadRequestObjectResult>().Subject.Value.Should().BeOfType<Response>().Subject;
+        response.Message.Should().Be("Your password could not be changed. Try again.");
+        response.Message.Should().NotContain("at least 6 characters");
+    }
+
     [Fact]
     public void ChangePassword_RequiresAuthenticatedCaller()
     {
diff --git a/Api.SeaHavenIndustries.Tests/PasswordPolicyTests.cs b/Api.SeaHavenIndustries.Tests/PasswordPolicyTests.cs
index 946a24d..b33d466 100644
--- a/Api.SeaHavenIndustries.Tests/PasswordPolicyTests.cs
+++ b/Api.SeaHavenIndustries.Tests/PasswordPolicyTests.cs
@@ -114,6 +114,44 @@ public sealed class PasswordPolicyTests : IAsyncDisposable
         (await UserManager.CheckPasswordAsync(reloaded!, "Next2@x")).Should().BeTrue();
     }
 
+    [Theory]
+    [InlineData("ConcurrencyFailure")]
+    [InlineData("PasswordMismatch")]
+    [InlineData("DefaultError")]
+    public async Task ChangePassword_NonPolicyIdentityFailure_IsNotReportedAsAWeakPassword(string code)
+    {
+        var user = new ApplicationUser { Id = "member-1", UserName = "member@example.com" };
+        var userManager = new Mock<UserManager<ApplicationUser>>(
+            Mock.Of<IUserStore<ApplicationUser>>(), null!, null!, null!, null!, null!, null!, null!, null!);
+        userManager.Setup(m => m.FindByIdAsync(user.Id)).ReturnsAsync(user);
+        userManager.Setup(m => m.CheckPasswordAsync(user, CurrentPassword)).ReturnsAsync(true);
+        userManager.Setup(m => m.ChangePasswordAsync(user, CurrentPassword, "Next2@x"))
+            .ReturnsAsync(IdentityResult.Failed(new IdentityError { Code = code, Description = "failed" }));
+        var service = new AuthenticationService(
+            userManager.Object,
+            Microsoft.Extensions.Options.Options.Create(new JwtOptions { Secret = new string('x', 64) }),
+            Mock.Of<IUserDataService>(),
+            Mock.Of<IForgetPasswordDataService>(),
+            Mock.Of<IEmailSender>());
+
+        var result = await service.ChangePasswordAsync(user.Id, CurrentPassword, "Next2@x", CancellationToken.None);
+
+        result.Status.Should().Be(ChangePasswordStatus.Failed);
+    }
+
+    [Theory]
+    [InlineData("PasswordTooShort", true)]
+    [InlineData("PasswordRequiresUpper", true)]
+    [InlineData("PasswordRequiresDigit", true)]
+    [InlineData("PasswordRequiresNonAlphanumeric", true)]
+    [InlineData("ConcurrencyFailure", false)]
+    [InlineData("PasswordMismatch", false)]
+    public void IsPolicyRejection_MatchesOnlyThePasswordRuleCodes(string code, bool expected)
+    {
+        IdentityPasswordPolicy.IsPolicyRejection(IdentityResult.Failed(new IdentityError { Code = code }))
+            .Should().Be(expected);
+    }
+
     [Fact]
     public async Task ChangePassword_CancelledToken_Throws()
     {
diff --git a/Api.SeaHavenIndustries/Controllers/AuthenticationController.cs b/Api.SeaHavenIndustries/Controllers/AuthenticationController.cs
index 7b6569a..dcd4dfd 100644
--- a/Api.SeaHavenIndustries/Controllers/AuthenticationController.cs
+++ b/Api.SeaHavenIndustries/Controllers/AuthenticationController.cs
@@ -60,6 +60,11 @@ namespace Api.SeaHavenIndustries.Controllers
         [HttpPost]
         public async Task<IActionResult> ChangePassword(ChangePasswords usermodel, CancellationToken cancellationToken)
         {
+            // [Compare] already rejects this during model validation; the check here keeps the
+            // unconfirmed password from ever being set if that validation is bypassed.
+            if (!string.Equals(usermodel.Newpassword, usermodel.Confirmpassword, StringComparison.Ordinal))
+                return BadRequest(new Response { Status = "Password confirmation does not match", Message = "Passwords don't match" });
+
             var userid = User.FindFirstValue(ClaimTypes.NameIdentifier) ?? "";
             var result = await _authenticationService.ChangePasswordAsync(userid, usermodel.Currentpassword, usermodel.Newpassword, cancellationToken);
             return result.Status switch
@@ -68,6 +73,8 @@ namespace Api.SeaHavenIndustries.Controllers
                     Ok(new Response { Status = "Success ", Message = "Password successfully changed" }),
                 ChangePasswordStatus.PasswordRejected =>
                     BadRequest(new Response { Status = "Password does not meet requirements", Message = PasswordRequirementsMessage }),
+                ChangePasswordStatus.Failed =>
+                    BadRequest(new Response { Status = "Password not changed", Message = "Your password could not be changed. Try again." }),
                 _ => BadRequest(new Response { Status = "Old Password is incorrect", Message = "Current password is incorrect" })
             };
         }
diff --git a/Data.SeaHavenIndustries/Auth/IdentityPasswordPolicy.cs b/Data.SeaHavenIndustries/Auth/IdentityPasswordPolicy.cs
index a0161ff..50e7543 100644
--- a/Data.SeaHavenIndustries/Auth/IdentityPasswordPolicy.cs
+++ b/Data.SeaHavenIndustries/Auth/IdentityPasswordPolicy.cs
@@ -23,5 +23,25 @@ namespace Data.SeaHavenIndustries
             options.RequireLowercase = false;
             options.RequiredUniqueChars = 1;
         }
+
+        private static readonly HashSet<string> PolicyErrorCodes = new(StringComparer.Ordinal)
+        {
+            nameof(IdentityErrorDescriber.PasswordTooShort),
+            nameof(IdentityErrorDescriber.PasswordRequiresUpper),
+            nameof(IdentityErrorDescriber.PasswordRequiresLower),
+            nameof(IdentityErrorDescriber.PasswordRequiresDigit),
+            nameof(IdentityErrorDescriber.PasswordRequiresNonAlphanumeric),
+            nameof(IdentityErrorDescriber.PasswordRequiresUniqueChars)
+        };
+
+        /// <summary>
+        /// True when Identity refused the password itself. Other failures, such as a
+        /// concurrency conflict, must not be reported to the user as a weak password.
+        /// </summary>
+        public static bool IsPolicyRejection(IdentityResult result)
+        {
+            ArgumentNullException.ThrowIfNull(result);
+            return result.Errors.Any(error => PolicyErrorCodes.Contains(error.Code));
+        }
     }
 }
diff --git a/SeaHaven.Services/DTOs/IdentityDTOs.cs b/SeaHaven.Services/DTOs/IdentityDTOs.cs
index e959478..c618500 100644
--- a/SeaHaven.Services/DTOs/IdentityDTOs.cs
+++ b/SeaHaven.Services/DTOs/IdentityDTOs.cs
@@ -15,7 +15,9 @@ namespace SeaHaven.Services.DTOs
     {
         Succeeded,
         CurrentPasswordIncorrect,
-        PasswordRejected
+        PasswordRejected,
+        /// <summary>Identity failed for a reason other than the password policy.</summary>
+        Failed
     }
 
     public sealed class ChangePasswordResultDTO
diff --git a/SeaHaven.Services/Implementation/AuthenticationService.cs b/SeaHaven.Services/Implementation/AuthenticationService.cs
index e293276..2a44325 100644
--- a/SeaHaven.Services/Implementation/AuthenticationService.cs
+++ b/SeaHaven.Services/Implementation/AuthenticationService.cs
@@ -93,9 +93,12 @@ namespace SeaHaven.Services.Implementation
                 return ChangePasswordResult(ChangePasswordStatus.CurrentPasswordIncorrect);
 
             var result = await _userManager.ChangePasswordAsync(user, currentPassword ?? "", newPassword ?? "");
-            return ChangePasswordResult(result.Succeeded
-                ? ChangePasswordStatus.Succeeded
-                : ChangePasswordStatus.PasswordRejected);
+            if (result.Succeeded)
+                return ChangePasswordResult(ChangePasswordStatus.Succeeded);
+
+            return ChangePasswordResult(IdentityPasswordPolicy.IsPolicyRejection(result)
+                ? ChangePasswordStatus.PasswordRejected
+                : ChangePasswordStatus.Failed);
         }
 
         private static ChangePasswordResultDTO ChangePasswordResult(ChangePasswordStatus status) =>

From afc2330184b502602e480d513c403441848ddac9 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 13:05:35 -0300
Subject: [PATCH 156/183] fix(team-members): report only password-rule failures
 at finish as a rejected password

---
 .../TeamMemberRegistrationService.cs          | 13 ++++++---
 .../TeamMemberInviteRegistrationTests.cs      | 27 +++++++++++++++++++
 .../TeamMemberInviteTestHost.cs               | 10 ++++---
 3 files changed, 44 insertions(+), 6 deletions(-)

diff --git a/SeaHaven.Services/Implementation/TeamMemberRegistrationService.cs b/SeaHaven.Services/Implementation/TeamMemberRegistrationService.cs
index c64e119..de7ae0a 100644
--- a/SeaHaven.Services/Implementation/TeamMemberRegistrationService.cs
+++ b/SeaHaven.Services/Implementation/TeamMemberRegistrationService.cs
@@ -228,9 +228,16 @@ public sealed partial class TeamMemberRegistrationService : ITeamMemberRegistrat
     private static TeamMemberRegistrationStatus StatusFor(IdentityResult result)
     {
         // A password already set means the account was registered by another route.
-        return result.Errors.Any(error => error.Code == nameof(IdentityErrorDescriber.UserAlreadyHasPassword))
-            ? TeamMemberRegistrationStatus.InvalidInvite
-            : TeamMemberRegistrationStatus.PasswordRejected;
+        if (result.Errors.Any(error => error.Code == nameof(IdentityErrorDescriber.UserAlreadyHasPassword)))
+            return TeamMemberRegistrationStatus.InvalidInvite;
+
+        if (IdentityPasswordPolicy.IsPolicyRejection(result))
+            return TeamMemberRegistrationStatus.PasswordRejected;
+
+        // Anything else (a concurrency conflict, a store failure) is not the member's password:
+        // roll back and let the endpoint answer with its generic error. Only codes are recorded.
+        throw new InvalidOperationException(
+            "Identity refused the registration: " + string.Join(", ", result.Errors.Select(error => error.Code)));
     }
 
     private DateTime NowUtc() => _timeProvider.GetUtcNow().UtcDateTime;
diff --git a/SeaHavenIndustries.Tests/TeamMemberInviteRegistrationTests.cs b/SeaHavenIndustries.Tests/TeamMemberInviteRegistrationTests.cs
index dac402a..f0a4c49 100644
--- a/SeaHavenIndustries.Tests/TeamMemberInviteRegistrationTests.cs
+++ b/SeaHavenIndustries.Tests/TeamMemberInviteRegistrationTests.cs
@@ -292,6 +292,33 @@ public sealed class TeamMemberInviteRegistrationTests
         Assert.False((await host.ReloadUserAsync(userId)).PendingRegistration);
     }
 
+    [Fact]
+    public async Task Complete_NonPolicyIdentityFailure_IsNotReportedAsAWeakPasswordAndRollsBack()
+    {
+        await using var host = await TeamMemberInviteTestHost.CreateAsync(services =>
+            services.AddScoped<IPasswordValidator<ApplicationUser>, FailingPasswordValidator>());
+        var (userId, token) = await host.AddPendingMemberAsync(Email);
+        await host.ConfirmEmailAsync(token, Email);
+
+        var failure = await Assert.ThrowsAsync<InvalidOperationException>(() => CompleteAsync(host, token, Password));
+
+        Assert.Contains(FailingPasswordValidator.Code, failure.Message);
+        Assert.DoesNotContain(Password, failure.Message);
+        var pending = await host.ReloadUserAsync(userId);
+        Assert.True(pending.PendingRegistration);
+        Assert.Null(pending.PasswordHash);
+        Assert.Null(Assert.Single(await host.InvitesAsync(userId)).UsedAt);
+    }
+
+    /// <summary>Stands in for any Identity failure that is not the password rule itself.</summary>
+    private sealed class FailingPasswordValidator : IPasswordValidator<ApplicationUser>
+    {
+        public const string Code = "ConcurrencyFailure";
+
+        public Task<IdentityResult> ValidateAsync(UserManager<ApplicationUser> manager, ApplicationUser user, string? password) =>
+            Task.FromResult(IdentityResult.Failed(new IdentityError { Code = Code, Description = "Optimistic concurrency failure." }));
+    }
+
     [Fact]
     public async Task Complete_WithoutPhone_KeepsThePhoneTheAdminEntered()
     {
diff --git a/SeaHavenIndustries.Tests/TeamMemberInviteTestHost.cs b/SeaHavenIndustries.Tests/TeamMemberInviteTestHost.cs
index e1d6f9e..a2e5a1a 100644
--- a/SeaHavenIndustries.Tests/TeamMemberInviteTestHost.cs
+++ b/SeaHavenIndustries.Tests/TeamMemberInviteTestHost.cs
@@ -38,7 +38,7 @@ internal sealed class TeamMemberInviteTestHost : IAsyncDisposable
     public ManualTimeProvider Time { get; } = new();
     public CapturingLoggerProvider Logged { get; } = new();
 
-    public static async Task<TeamMemberInviteTestHost> CreateAsync()
+    public static async Task<TeamMemberInviteTestHost> CreateAsync(Action<IServiceCollection>? configure = null)
     {
         var connection = new SqliteConnection("Data Source=:memory:;Foreign Keys=True");
         await connection.OpenAsync();
@@ -48,11 +48,14 @@ internal sealed class TeamMemberInviteTestHost : IAsyncDisposable
             await setup.Database.EnsureCreatedAsync();
 
         var host = new TeamMemberInviteTestHost(connection);
-        host._provider = BuildProvider(connection, host);
+        host._provider = BuildProvider(connection, host, configure);
         return host;
     }
 
-    private static ServiceProvider BuildProvider(SqliteConnection connection, TeamMemberInviteTestHost fakes)
+    private static ServiceProvider BuildProvider(
+        SqliteConnection connection,
+        TeamMemberInviteTestHost fakes,
+        Action<IServiceCollection>? configure)
     {
         var configuration = new ConfigurationBuilder()
             .AddInMemoryCollection(new Dictionary<string, string?>
@@ -76,6 +79,7 @@ internal sealed class TeamMemberInviteTestHost : IAsyncDisposable
         services.AddSingleton<IEmailSender>(fakes.Sent);
         services.AddDataServices();
         services.AddBusinessServices(configuration);
+        configure?.Invoke(services);
         return services.BuildServiceProvider();
     }
 

From a6dd40b972c2257cd3f0560702c22330cfb20180 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 13:12:49 -0300
Subject: [PATCH 157/183] fix(auth): only count real guesses, drop codes that
 cannot be emailed, trace reset email sends

---
 .../AuthenticationServiceTests.cs             | 21 +++++++++++++
 .../SentryPipelineContractTests.cs            |  1 +
 .../PasswordResetEmailDelivery.cs             | 31 ++++++++++++++++---
 .../Helpers/InMemoryPasswordResetThrottle.cs  | 11 +++++++
 .../Implementation/AuthenticationService.cs   | 14 +++++++--
 .../Interfaces/IPasswordResetThrottle.cs      |  8 ++++-
 .../PasswordResetAbuseLimitsTests.cs          | 28 +++++++++++++++++
 .../PasswordResetTestHost.cs                  |  1 +
 8 files changed, 107 insertions(+), 8 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs b/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs
index 6b539d2..0ac9cde 100644
--- a/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs
@@ -138,6 +138,7 @@ public class AuthenticationServiceTests
         var registered = new Mock<IForgetPasswordDataService>();
         var unregistered = new Mock<IForgetPasswordDataService>();
         var email = new Mock<IPasswordResetEmailQueue>();
+        email.Setup(e => e.TryEnqueue(It.IsAny<string>(), It.IsAny<string>(), It.IsAny<string>())).Returns(true);
 
         await NewService(userData, registered, email, out _, out _).ForgetPasswordAsync("alice@example.com", CancellationToken.None);
         await NewService(userData, unregistered, email, out _, out _).ForgetPasswordAsync("nope@example.com", CancellationToken.None);
@@ -149,6 +150,26 @@ public class AuthenticationServiceTests
         email.Verify(e => e.TryEnqueue(It.IsAny<string>(), It.IsAny<string>(), It.IsAny<string>()), Times.Once);
     }
 
+    [Fact]
+    public async Task ForgetPassword_EmailThatCannotBeQueued_DropsTheCodeAndDoesNotCountTheRequest()
+    {
+        var user = IdentityTestHelpers.User();
+        var userData = new Mock<IUserDataService>();
+        userData.Setup(u => u.GetByEmailNormalizedAsync(It.IsAny<string>(), It.IsAny<CancellationToken>())).ReturnsAsync(user);
+        var forget = new Mock<IForgetPasswordDataService>();
+        var email = new Mock<IPasswordResetEmailQueue>();
+        email.SetupSequence(e => e.TryEnqueue(user.Email!, It.IsAny<string>(), It.IsAny<string>()))
+            .Returns(false).Returns(false).Returns(false).Returns(true);
+
+        var service = NewService(userData, forget, email, out _, out _);
+        for (var request = 0; request < 4; request++)
+            await service.ForgetPasswordAsync("alice@example.com", CancellationToken.None);
+
+        // Three undelivered codes were removed, and they did not use up the hourly limit of three.
+        forget.Verify(f => f.RemoveByEmailAsync(user.Email!, It.IsAny<CancellationToken>()), Times.Exactly(3));
+        email.Verify(e => e.TryEnqueue(user.Email!, It.IsAny<string>(), It.IsAny<string>()), Times.Exactly(4));
+    }
+
     [Fact]
     public async Task ForgetPassword_DeletedAccount_IsTreatedAsUnregistered()
     {
diff --git a/Api.SeaHavenIndustries.Tests/SentryPipelineContractTests.cs b/Api.SeaHavenIndustries.Tests/SentryPipelineContractTests.cs
index b5ff0d3..90f539b 100644
--- a/Api.SeaHavenIndustries.Tests/SentryPipelineContractTests.cs
+++ b/Api.SeaHavenIndustries.Tests/SentryPipelineContractTests.cs
@@ -61,6 +61,7 @@ public class SentryPipelineContractTests
     [InlineData("Api.SeaHavenIndustries/HostedServices/WorkOrderWeekRolledHostedService.cs", "workorders.week-rolled-job")]
     [InlineData("Api.SeaHavenIndustries/HostedServices/PastDueCacheHostedService.cs", "workorders.past-due-cache-job")]
     [InlineData("Api.SeaHavenIndustries/HostedServices/UpliftLifecycleHostedService.cs", "uplifts.lifecycle-sweep")]
+    [InlineData("Api.SeaHavenIndustries/HostedServices/PasswordResetEmailDelivery.cs", "auth.password-reset-email")]
     public void Workers_UseSharedBackgroundTransactionHelper_WithStableNames(string relativePath, string transactionName)
     {
         var source = File.ReadAllText(Path.Combine(RepoRoot(), relativePath));
diff --git a/Api.SeaHavenIndustries/HostedServices/PasswordResetEmailDelivery.cs b/Api.SeaHavenIndustries/HostedServices/PasswordResetEmailDelivery.cs
index 348073f..5b2b7af 100644
--- a/Api.SeaHavenIndustries/HostedServices/PasswordResetEmailDelivery.cs
+++ b/Api.SeaHavenIndustries/HostedServices/PasswordResetEmailDelivery.cs
@@ -1,5 +1,7 @@
 using System.Threading.Channels;
+using Api.SeaHavenIndustries.Observability;
 using SeaHaven.Services.Interfaces;
+using Sentry;
 
 namespace Api.SeaHavenIndustries.HostedServices
 {
@@ -62,32 +64,43 @@ namespace Api.SeaHavenIndustries.HostedServices
         private readonly PasswordResetEmailChannel _channel;
         private readonly IServiceScopeFactory _scopeFactory;
         private readonly ILogger<PasswordResetEmailSenderHostedService> _logger;
+        private readonly IHub _sentryHub;
 
         public PasswordResetEmailSenderHostedService(
             PasswordResetEmailChannel channel,
             IServiceScopeFactory scopeFactory,
-            ILogger<PasswordResetEmailSenderHostedService> logger)
+            ILogger<PasswordResetEmailSenderHostedService> logger,
+            IHub sentryHub)
         {
             _channel = channel;
             _scopeFactory = scopeFactory;
             _logger = logger;
+            _sentryHub = sentryHub;
         }
 
         protected override async Task ExecuteAsync(CancellationToken stoppingToken)
         {
             await foreach (var email in _channel.Reader.ReadAllAsync(stoppingToken))
             {
+                using var transaction = SentryObservability.BeginBackgroundTransaction(
+                    _sentryHub,
+                    "auth.password-reset-email",
+                    $"{nameof(PasswordResetEmailSenderHostedService)}.{nameof(SendAsync)}");
                 try
                 {
-                    await using var scope = _scopeFactory.CreateAsyncScope();
-                    var sender = scope.ServiceProvider.GetRequiredService<IEmailSender>();
-                    if (!await sender.SendEmailAsync(email.EmailTo, email.Subject, email.Body))
-                        _logger.LogWarning("Password reset email was not accepted by the mail provider.");
+                    await SendAsync(email);
+                    transaction.FinishOk();
+                }
+                catch (OperationCanceledException) when (stoppingToken.IsCancellationRequested)
+                {
+                    transaction.FinishCancelled();
+                    throw;
                 }
                 catch (Exception ex)
                 {
                     // The message can echo the recipient or the body, so only the type is logged.
                     _logger.LogError("Password reset email failed with {ExceptionType}.", ex.GetType().FullName);
+                    transaction.FinishError(ex);
                 }
                 finally
                 {
@@ -95,5 +108,13 @@ namespace Api.SeaHavenIndustries.HostedServices
                 }
             }
         }
+
+        private async Task SendAsync(PasswordResetEmail email)
+        {
+            await using var scope = _scopeFactory.CreateAsyncScope();
+            var sender = scope.ServiceProvider.GetRequiredService<IEmailSender>();
+            if (!await sender.SendEmailAsync(email.EmailTo, email.Subject, email.Body))
+                _logger.LogWarning("Password reset email was not accepted by the mail provider.");
+        }
     }
 }
diff --git a/SeaHaven.Services/Helpers/InMemoryPasswordResetThrottle.cs b/SeaHaven.Services/Helpers/InMemoryPasswordResetThrottle.cs
index 00ad7aa..0502f0c 100644
--- a/SeaHaven.Services/Helpers/InMemoryPasswordResetThrottle.cs
+++ b/SeaHaven.Services/Helpers/InMemoryPasswordResetThrottle.cs
@@ -46,6 +46,17 @@ namespace SeaHaven.Services.Helpers
             }
         }
 
+        public void ReleaseCodeRequest(string email)
+        {
+            var now = _timeProvider.GetUtcNow();
+            lock (_gate)
+            {
+                var account = AccountFor(email, now);
+                if (account.Requests.Count > 0)
+                    account.Requests.RemoveAt(account.Requests.Count - 1);
+            }
+        }
+
         public bool TryReserveCheck(string email)
         {
             var now = _timeProvider.GetUtcNow();
diff --git a/SeaHaven.Services/Implementation/AuthenticationService.cs b/SeaHaven.Services/Implementation/AuthenticationService.cs
index 94e0833..32cc06c 100644
--- a/SeaHaven.Services/Implementation/AuthenticationService.cs
+++ b/SeaHaven.Services/Implementation/AuthenticationService.cs
@@ -162,7 +162,12 @@ namespace SeaHaven.Services.Implementation
             if (active)
             {
                 var body = $"Your Password Reset Code is: {code}. It expires in {(int)ResetCodeLifetime.TotalMinutes} minutes.";
-                _resetEmails.TryEnqueue(user!.Email!, "Forget Password Request.", body);
+                if (!_resetEmails.TryEnqueue(user!.Email!, "Forget Password Request.", body))
+                {
+                    // The code will never reach the user: drop it and do not count the request.
+                    await _forgetPasswordDataService.RemoveByEmailAsync(user.Email!, cancellationToken);
+                    _resetThrottle.ReleaseCodeRequest(requested);
+                }
             }
         }
 
@@ -219,17 +224,22 @@ namespace SeaHaven.Services.Implementation
 
             // The per-account budget spans every code the account is sent, so asking for
             // new codes does not buy more guesses. A slot is reserved before comparing and
-            // given back only when the code matches.
+            // given back when the code matches or there is no live code to guess at.
             if (!_resetThrottle.TryReserveCheck(email))
                 return null;
 
             var pending = await _forgetPasswordDataService.GetByEmailAsync(email, cancellationToken);
             if (pending == null)
+            {
+                _resetThrottle.ReleaseCheck(email);
                 return null;
+            }
 
             var nowUtc = _timeProvider.GetUtcNow().UtcDateTime;
             if (!await _forgetPasswordDataService.TryConsumeAttemptAsync(pending.Id, MaxCodeAttempts, nowUtc, cancellationToken))
             {
+                // Expired or out of attempts: nothing was compared, so no guess is counted.
+                _resetThrottle.ReleaseCheck(email);
                 await _forgetPasswordDataService.RemoveByEmailAsync(pending.Email, cancellationToken);
                 return null;
             }
diff --git a/SeaHaven.Services/Interfaces/IPasswordResetThrottle.cs b/SeaHaven.Services/Interfaces/IPasswordResetThrottle.cs
index 8cdcc2e..5484994 100644
--- a/SeaHaven.Services/Interfaces/IPasswordResetThrottle.cs
+++ b/SeaHaven.Services/Interfaces/IPasswordResetThrottle.cs
@@ -12,13 +12,19 @@ namespace SeaHaven.Services.Interfaces
         /// </summary>
         bool TryAcceptCodeRequest(string email);
 
+        /// <summary>Gives back an accepted code request whose email could not be queued.</summary>
+        void ReleaseCodeRequest(string email);
+
         /// <summary>
         /// Reserves one failed check for the email before a code is compared. Returns
         /// false once the account has used its failed checks for the window.
         /// </summary>
         bool TryReserveCheck(string email);
 
-        /// <summary>Gives back the reservation of a check whose code matched.</summary>
+        /// <summary>
+        /// Gives back a reservation that did not become a failed guess: the code matched,
+        /// or there was no live code to compare it with.
+        /// </summary>
         void ReleaseCheck(string email);
     }
 }
diff --git a/SeaHavenIndustries.Tests/PasswordResetAbuseLimitsTests.cs b/SeaHavenIndustries.Tests/PasswordResetAbuseLimitsTests.cs
index 2431cc4..9fd8388 100644
--- a/SeaHavenIndustries.Tests/PasswordResetAbuseLimitsTests.cs
+++ b/SeaHavenIndustries.Tests/PasswordResetAbuseLimitsTests.cs
@@ -92,6 +92,34 @@ public sealed class PasswordResetAbuseLimitsTests
         Assert.Equal(HttpStatusCode.OK, (await host.ResetAsync(Alice, host.Sent.LatestCodeFor(Alice), NewPassword, NextClient())).StatusCode);
     }
 
+    [Fact]
+    public async Task Checks_without_a_live_code_do_not_use_up_the_account_budget()
+    {
+        await using var host = await PasswordResetTestHost.StartAsync();
+        await host.AddUserAsync(Alice, OldPassword);
+
+        // No code issued yet.
+        for (var check = 0; check < 10; check++)
+        {
+            await host.VerifyAsync(Alice, "123456", NextClient());
+            await host.ResetAsync(Alice, "123456", NewPassword, NextClient());
+        }
+
+        // A code that has expired.
+        await host.ForgetPasswordAsync(Alice, NextClient());
+        var expired = host.Sent.LatestCodeFor(Alice);
+        host.Time.Advance(TimeSpan.FromMinutes(16));
+        for (var check = 0; check < 5; check++)
+            await host.VerifyAsync(Alice, expired, NextClient());
+
+        await host.ForgetPasswordAsync(Alice, NextClient());
+        var live = host.Sent.LatestCodeFor(Alice);
+
+        Assert.Equal(HttpStatusCode.OK, (await host.VerifyAsync(Alice, live, NextClient())).StatusCode);
+        Assert.Equal(HttpStatusCode.OK, (await host.ResetAsync(Alice, live, NewPassword, NextClient())).StatusCode);
+        Assert.Equal(HttpStatusCode.OK, (await host.LoginAsync(Alice, NewPassword)).StatusCode);
+    }
+
     [Fact]
     public void Concurrent_checks_can_never_exceed_the_account_budget()
     {
diff --git a/SeaHavenIndustries.Tests/PasswordResetTestHost.cs b/SeaHavenIndustries.Tests/PasswordResetTestHost.cs
index a16774e..1199080 100644
--- a/SeaHavenIndustries.Tests/PasswordResetTestHost.cs
+++ b/SeaHavenIndustries.Tests/PasswordResetTestHost.cs
@@ -93,6 +93,7 @@ internal sealed class PasswordResetTestHost : IAsyncDisposable
                 manager.FeatureProviders.Add(new OnlyAuthenticationController());
             });
         builder.Services.AddPasswordResetRateLimiting();
+        builder.Services.AddSingleton<Sentry.IHub>(Sentry.Extensibility.HubAdapter.Instance);
         builder.Services.AddPasswordResetEmailDelivery();
 
         var app = builder.Build();

From cc328ce22aa14dd087def2b7bf239b2e12ee2ac0 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 13:13:50 -0300
Subject: [PATCH 158/183] fix(team-members): do not report an invite email for
 a deactivated member

---
 .../Implementation/TeamMemberInviteService.cs |  6 +++---
 .../Interfaces/ITeamMemberInviteService.cs    |  4 ++--
 .../TeamMemberInviteLifecycleTests.cs         | 21 +++++++++++++++++--
 3 files changed, 24 insertions(+), 7 deletions(-)

diff --git a/SeaHaven.Services/Implementation/TeamMemberInviteService.cs b/SeaHaven.Services/Implementation/TeamMemberInviteService.cs
index 3b355ba..e78130d 100644
--- a/SeaHaven.Services/Implementation/TeamMemberInviteService.cs
+++ b/SeaHaven.Services/Implementation/TeamMemberInviteService.cs
@@ -89,13 +89,13 @@ public sealed class TeamMemberInviteService : ITeamMemberInviteService
         if (user.IsDeleted == true || user.PendingRegistration != true || string.IsNullOrWhiteSpace(user.Email))
             return ResendFailure("Only pending team members can be re-invited.");
 
-        if (!await ReissueAsync(user, cancellationToken))
+        if (await ReissueAsync(user, cancellationToken) != true)
             return ResendFailure("The invite could not be emailed. Try again.");
 
         return new TeamMemberInviteResendOutcomeDTO { Success = true };
     }
 
-    public async Task<bool> ReissueAsync(ApplicationUser user, CancellationToken cancellationToken)
+    public async Task<bool?> ReissueAsync(ApplicationUser user, CancellationToken cancellationToken)
     {
         ArgumentNullException.ThrowIfNull(user);
         ArgumentException.ThrowIfNullOrWhiteSpace(user.Email);
@@ -105,7 +105,7 @@ public sealed class TeamMemberInviteService : ITeamMemberInviteService
 
         // A deactivated member cannot register; the admin re-sends the invite after reactivating them.
         if (user.IsDeleted == true)
-            return true;
+            return null;
 
         var name = $"{user.FirstName ?? ""} {user.LastName ?? ""}".Trim();
         return await SendAsync(issued, user.Email, name, cancellationToken);
diff --git a/SeaHaven.Services/Interfaces/ITeamMemberInviteService.cs b/SeaHaven.Services/Interfaces/ITeamMemberInviteService.cs
index 54eb702..25d5b6b 100644
--- a/SeaHaven.Services/Interfaces/ITeamMemberInviteService.cs
+++ b/SeaHaven.Services/Interfaces/ITeamMemberInviteService.cs
@@ -19,9 +19,9 @@ public interface ITeamMemberInviteService
     /// <summary>
     /// Revokes the member's open invites, including any email confirmation made through them,
     /// and emails a new invite to their current address unless they are deactivated.
-    /// Returns false when that email failed.
+    /// Returns whether that email went out, or null when the member is deactivated and nothing was emailed.
     /// </summary>
-    Task<bool> ReissueAsync(ApplicationUser user, CancellationToken cancellationToken);
+    Task<bool?> ReissueAsync(ApplicationUser user, CancellationToken cancellationToken);
 
     /// <summary>Admin-only: revokes a pending member's open invites and emails a new one.</summary>
     Task<TeamMemberInviteResendOutcomeDTO> ResendAsync(
diff --git a/SeaHavenIndustries.Tests/TeamMemberInviteLifecycleTests.cs b/SeaHavenIndustries.Tests/TeamMemberInviteLifecycleTests.cs
index c963a62..9ddb383 100644
--- a/SeaHavenIndustries.Tests/TeamMemberInviteLifecycleTests.cs
+++ b/SeaHavenIndustries.Tests/TeamMemberInviteLifecycleTests.cs
@@ -74,6 +74,21 @@ public sealed class TeamMemberInviteLifecycleTests
         Assert.False(updated.Member.InviteEmailSent);
     }
 
+    [Fact]
+    public async Task DeactivatingAPendingMemberWhileChangingTheirEmail_RevokesTheInviteWithoutClaimingAnEmail()
+    {
+        await using var host = await TeamMemberInviteTestHost.CreateAsync();
+        var (userId, oldToken) = await host.AddPendingMemberAsync(Email);
+
+        var updated = await UpdateAsync(host, userId, CorrectedEmail, role: "dispatcher", isActive: false);
+
+        Assert.True(updated.Success, updated.Error);
+        Assert.Null(updated.Member!.InviteEmailSent);
+        Assert.DoesNotContain(host.Sent.Messages, message => message.To == CorrectedEmail);
+        Assert.Equal(TeamMemberRegistrationStatus.InvalidInvite,
+            (await host.RegistrationAsync(service => service.ResolveAsync(oldToken, CancellationToken.None))).Status);
+    }
+
     [Fact]
     public async Task EditingAPendingMemberWithoutChangingTheirEmail_KeepsTheirInvite()
     {
@@ -96,7 +111,8 @@ public sealed class TeamMemberInviteLifecycleTests
         TeamMemberInviteTestHost host,
         string userId,
         string email,
-        string role) =>
+        string role,
+        bool isActive = true) =>
         host.InScopeAsync(provider => provider.GetRequiredService<ITeamMemberService>().UpdateAsync(
             userId,
             new UpdateTeamMemberRequestDTO
@@ -106,7 +122,8 @@ public sealed class TeamMemberInviteLifecycleTests
                 Color = "#0D9488",
                 Email = email,
                 Phone = "555-0100",
-                ServiceAreas = role == "dispatcher" ? new[] { "East" } : Array.Empty<string>()
+                ServiceAreas = role == "dispatcher" ? new[] { "East" } : Array.Empty<string>(),
+                IsActive = isActive
             },
             TeamMemberInviteTestHost.Admin(),
             CancellationToken.None));

From 53538994182e18cf28ddb5df47fc8d09294b4134 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 13:18:06 -0300
Subject: [PATCH 159/183] feat(uplifts): order the rejected queue by decision
 time and include legacy denied rows

---
 .../UpliftQueueReadTests.cs                   | 87 +++++++++++++++++++
 .../Implementation/UpliftDataService.cs       | 14 ++-
 2 files changed, 97 insertions(+), 4 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs b/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
index 5c398cf..b5427f5 100644
--- a/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
+++ b/Api.SeaHavenIndustries.Tests/UpliftQueueReadTests.cs
@@ -164,6 +164,59 @@ public sealed class UpliftQueueReadTests
             new DateTime(2026, 3, 10));
     }
 
+    [Fact]
+    public async Task List_RejectedStatus_OrdersMostRecentlyRejectedFirst()
+    {
+        using var context = NewContext();
+        var vendor = new Vendor { CompanyName = "Gateway", IsActive = true };
+        var workOrder = new WorkOrder { WorkerOrderTitle = "Repair" };
+        context.AddRange(vendor, workOrder);
+        await context.SaveChangesAsync();
+        var dispatch = await SeedDispatchAsync(context, vendor, workOrder, "DIS-1");
+        // Request order (3/1, 3/2, 3/3) deliberately disagrees with decision order.
+        context.DispatchUpliftRequests.AddRange(
+            Request(dispatch, "Rejected", new DateTime(2026, 3, 1), decided: new DateTime(2026, 3, 10)),
+            Request(dispatch, "Rejected", new DateTime(2026, 3, 2), decided: new DateTime(2026, 3, 20)),
+            Request(dispatch, "Rejected", new DateTime(2026, 3, 3), decided: new DateTime(2026, 3, 15)));
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        var result = await service.ListAsync(UserWithRoles("Approver"), "Rejected", null, 1, 25, CancellationToken.None);
+
+        result.Items.Select(i => i.DecidedAt).Should().Equal(
+            new DateTime(2026, 3, 20),
+            new DateTime(2026, 3, 15),
+            new DateTime(2026, 3, 10));
+    }
+
+    [Fact]
+    public async Task List_RejectedStatus_ReturnsOnlyRejectedRequests_IncludingLegacyDenied()
+    {
+        using var context = NewContext();
+        var vendor = new Vendor { CompanyName = "Gateway", IsActive = true };
+        var workOrder = new WorkOrder { WorkerOrderTitle = "Repair" };
+        context.AddRange(vendor, workOrder);
+        await context.SaveChangesAsync();
+        var dispatch = await SeedDispatchAsync(context, vendor, workOrder, "DIS-1");
+        context.DispatchUpliftRequests.AddRange(
+            Request(dispatch, "Pending", new DateTime(2026, 3, 1)),
+            Request(dispatch, "Approved", new DateTime(2026, 3, 2), decided: new DateTime(2026, 3, 3)),
+            Request(dispatch, "Revoked", new DateTime(2026, 3, 4), decided: new DateTime(2026, 3, 5)),
+            Request(dispatch, "Withdrawn", new DateTime(2026, 3, 6)),
+            Request(dispatch, "Rejected", new DateTime(2026, 3, 7), decided: new DateTime(2026, 3, 8)),
+            Request(dispatch, "Denied", new DateTime(2026, 2, 1), decided: new DateTime(2026, 2, 2)));
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        var result = await service.ListAsync(UserWithRoles("Approver"), "Rejected", null, 1, 25, CancellationToken.None);
+
+        result.Total.Should().Be(2);
+        result.Items.Select(i => i.Status).Should().Equal("Rejected", "Rejected");
+        result.Items.Select(i => i.DecidedAt).Should().Equal(
+            new DateTime(2026, 3, 8),
+            new DateTime(2026, 2, 2));
+    }
+
     [Fact]
     public async Task List_WithoutStatusFilter_KeepsHistoricalNewestRequestFirstOrder()
     {
@@ -558,6 +611,40 @@ public sealed class UpliftQueueReadTests
         result.Items.Single().DecidedByName.Should().Be("Grace Hopper");
     }
 
+    [Fact]
+    public async Task List_RejectedRow_CarriesRejecterRequesterDecisionTimeAndReason()
+    {
+        using var context = NewContext();
+        var (vendor, workOrder) = await SeedWorkOrderAsync(context, "WO-R", "SITE-R", "Plumbing");
+        var dispatch = await SeedDispatchAsync(context, vendor, workOrder, "DIS-R");
+        context.Users.Add(new ApplicationUser { Id = "user-7", FirstName = "Ada", LastName = "Lovelace" });
+        await context.SaveChangesAsync();
+        context.DispatchUpliftRequests.Add(new DispatchUpliftRequest
+        {
+            DispatchId = dispatch.Id,
+            Status = "Rejected",
+            CreatedDate = new DateTime(2026, 3, 1),
+            DecidedAt = new DateTime(2026, 3, 2, 16, 40, 0),
+            DecidedByUserId = "user-7",
+            DecisionNote = "Outside this work order's scope",
+            RequestedByVendorName = "Gateway",
+            RequiredTier = 1,
+            RequestedNTE = 250m,
+            NotificationStatus = "Pending"
+        });
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        var result = await service.ListAsync(UserWithRoles("Approver"), "Rejected", null, 1, 25, CancellationToken.None);
+
+        var row = result.Items.Single();
+        row.DecidedByName.Should().Be("Ada Lovelace");
+        row.RequestedByName.Should().Be("Gateway");
+        row.DecidedAt.Should().Be(new DateTime(2026, 3, 2, 16, 40, 0));
+        row.DecisionNote.Should().Be("Outside this work order's scope");
+        row.WorkOrderNumber.Should().Be("WO-R");
+    }
+
     [Fact]
     public async Task List_PendingExposureTotal_SumsEachPendingRequestsIncreaseAcrossTheQueue()
     {
diff --git a/SeaHaven.DataServices/Implementation/UpliftDataService.cs b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
index 09566f3..0c3706c 100644
--- a/SeaHaven.DataServices/Implementation/UpliftDataService.cs
+++ b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
@@ -11,6 +11,9 @@ namespace SeaHaven.DataServices.Implementation
     public class UpliftDataService : IUpliftDataService
     {
         private static readonly ConcurrentDictionary<int, SemaphoreSlim> WorkOrderGates = new();
+
+        // The Rejected queue also surfaces the legacy "Denied" spelling, which reads as Rejected.
+        private static readonly string[] RejectedStatuses = { "Rejected", "Denied" };
         private readonly ApplicationDbContext _context;
 
         public UpliftDataService(ApplicationDbContext context)
@@ -46,7 +49,9 @@ namespace SeaHaven.DataServices.Implementation
                             && (d.IsDeleted == null || d.IsDeleted == false)
                         select new { u, d, v, ev, effectiveWorkOrderId, workOrder, reqUser, decUser };
 
-            if (!string.IsNullOrWhiteSpace(status))
+            if (string.Equals(status, "Rejected", StringComparison.Ordinal))
+                query = query.Where(x => RejectedStatuses.Contains(x.u.Status));
+            else if (!string.IsNullOrWhiteSpace(status))
                 query = query.Where(x => x.u.Status == status);
             if (tier.HasValue)
                 query = query.Where(x => x.u.RequiredTier == tier.Value);
@@ -54,12 +59,13 @@ namespace SeaHaven.DataServices.Implementation
             var total = await query.CountAsync(cancellationToken);
 
             // Approval queue read contract: the actionable queue (Pending) surfaces the
-            // oldest request first; the decision log (Approved) surfaces the most
-            // recently decided first. Every other read keeps the historical
+            // oldest request first; the decision logs (Approved, Rejected) surface the
+            // most recently decided first. Every other read keeps the historical
             // newest-request-first order. Id is the deterministic tiebreaker.
             if (string.Equals(status, "Pending", StringComparison.Ordinal))
                 query = query.OrderBy(x => x.u.CreatedDate).ThenBy(x => x.u.Id);
-            else if (string.Equals(status, "Approved", StringComparison.Ordinal))
+            else if (string.Equals(status, "Approved", StringComparison.Ordinal)
+                || string.Equals(status, "Rejected", StringComparison.Ordinal))
                 query = query.OrderByDescending(x => x.u.DecidedAt).ThenByDescending(x => x.u.Id);
             else
                 query = query.OrderByDescending(x => x.u.CreatedDate).ThenByDescending(x => x.u.Id);

From 57af8a12068a4bc04e9294da556784c7cde261e3 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 13:38:11 -0300
Subject: [PATCH 160/183] fix(auth): store an unmatchable code when the reset
 email cannot be queued, keeping data calls identical

---
 .../AuthenticationServiceTests.cs             | 44 +++++++++++++++++--
 .../Implementation/AuthenticationService.cs   | 24 +++++-----
 2 files changed, 52 insertions(+), 16 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs b/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs
index 0ac9cde..2fd6382 100644
--- a/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs
@@ -157,17 +157,53 @@ public class AuthenticationServiceTests
         var userData = new Mock<IUserDataService>();
         userData.Setup(u => u.GetByEmailNormalizedAsync(It.IsAny<string>(), It.IsAny<CancellationToken>())).ReturnsAsync(user);
         var forget = new Mock<IForgetPasswordDataService>();
+        var stored = new List<(string Hash, string Salt)>();
+        forget.Setup(f => f.ReplaceCodeAsync(user.Email!, user.Id, It.IsAny<string>(), It.IsAny<string>(), It.IsAny<DateTime>(), It.IsAny<DateTime>(), It.IsAny<CancellationToken>()))
+            .Callback<string, string, string, string, DateTime, DateTime, CancellationToken>((_, _, h, s, _, _, _) => stored.Add((h, s)))
+            .Returns(Task.CompletedTask);
         var email = new Mock<IPasswordResetEmailQueue>();
-        email.SetupSequence(e => e.TryEnqueue(user.Email!, It.IsAny<string>(), It.IsAny<string>()))
-            .Returns(false).Returns(false).Returns(false).Returns(true);
+        var bodies = new List<string>();
+        // The queue is full for the first three requests.
+        email.Setup(e => e.TryEnqueue(user.Email!, It.IsAny<string>(), It.IsAny<string>()))
+            .Returns<string, string, string>((_, _, b) =>
+            {
+                bodies.Add(b);
+                return bodies.Count > 3;
+            });
 
         var service = NewService(userData, forget, email, out _, out _);
         for (var request = 0; request < 4; request++)
             await service.ForgetPasswordAsync("alice@example.com", CancellationToken.None);
 
-        // Three undelivered codes were removed, and they did not use up the hourly limit of three.
-        forget.Verify(f => f.RemoveByEmailAsync(user.Email!, It.IsAny<CancellationToken>()), Times.Exactly(3));
+        // The three undelivered requests did not use up the hourly limit of three.
         email.Verify(e => e.TryEnqueue(user.Email!, It.IsAny<string>(), It.IsAny<string>()), Times.Exactly(4));
+        stored.Should().HaveCount(4);
+        for (var request = 0; request < 3; request++)
+        {
+            var code = System.Text.RegularExpressions.Regex.Match(bodies[request], @"Your Password Reset Code is: (\d{6})").Groups[1].Value;
+            PasswordResetCodeSecrets.Matches(ResetKey, stored[request].Salt, code, stored[request].Hash).Should().BeFalse();
+        }
+        var delivered = System.Text.RegularExpressions.Regex.Match(bodies[3], @"Your Password Reset Code is: (\d{6})").Groups[1].Value;
+        PasswordResetCodeSecrets.Matches(ResetKey, stored[3].Salt, delivered, stored[3].Hash).Should().BeTrue();
+        forget.Verify(f => f.RemoveByEmailAsync(It.IsAny<string>(), It.IsAny<CancellationToken>()), Times.Never);
+    }
+
+    [Fact]
+    public async Task ForgetPassword_EmailThatCannotBeQueued_MakesTheSameDataCallsAsAnUnknownEmail()
+    {
+        var userData = new Mock<IUserDataService>();
+        userData.Setup(u => u.GetByEmailNormalizedAsync("alice@example.com", It.IsAny<CancellationToken>())).ReturnsAsync(IdentityTestHelpers.User());
+        var registered = new Mock<IForgetPasswordDataService>();
+        var unregistered = new Mock<IForgetPasswordDataService>();
+        var email = new Mock<IPasswordResetEmailQueue>();
+        email.Setup(e => e.TryEnqueue(It.IsAny<string>(), It.IsAny<string>(), It.IsAny<string>())).Returns(false);
+
+        await NewService(userData, registered, email, out _, out _).ForgetPasswordAsync("alice@example.com", CancellationToken.None);
+        await NewService(userData, unregistered, email, out _, out _).ForgetPasswordAsync("nope@example.com", CancellationToken.None);
+
+        registered.Invocations.Select(call => call.Method.Name)
+            .Should().Equal(unregistered.Invocations.Select(call => call.Method.Name))
+            .And.Equal(nameof(IForgetPasswordDataService.ReplaceCodeAsync));
     }
 
     [Fact]
diff --git a/SeaHaven.Services/Implementation/AuthenticationService.cs b/SeaHaven.Services/Implementation/AuthenticationService.cs
index 32cc06c..f07ff28 100644
--- a/SeaHaven.Services/Implementation/AuthenticationService.cs
+++ b/SeaHaven.Services/Implementation/AuthenticationService.cs
@@ -150,25 +150,25 @@ namespace SeaHaven.Services.Implementation
             var hash = PasswordResetCodeSecrets.Hash(ResetCodeKey, salt, code);
             var active = user != null && user.IsDeleted != true && !string.IsNullOrWhiteSpace(user.Email);
 
+            var queued = false;
+            if (active)
+            {
+                var body = $"Your Password Reset Code is: {code}. It expires in {(int)ResetCodeLifetime.TotalMinutes} minutes.";
+                queued = _resetEmails.TryEnqueue(user!.Email!, "Forget Password Request.", body);
+
+                // A code that cannot be emailed is stored unmatchable and the request is not counted.
+                if (!queued)
+                    _resetThrottle.ReleaseCodeRequest(requested);
+            }
+
             await _forgetPasswordDataService.ReplaceCodeAsync(
                 active ? user!.Email! : requested,
                 active ? user!.Id : string.Empty,
-                active ? hash : PasswordResetCodeSecrets.NewUnmatchableHash(),
+                queued ? hash : PasswordResetCodeSecrets.NewUnmatchableHash(),
                 salt,
                 nowUtc.Add(ResetCodeLifetime),
                 nowUtc,
                 cancellationToken);
-
-            if (active)
-            {
-                var body = $"Your Password Reset Code is: {code}. It expires in {(int)ResetCodeLifetime.TotalMinutes} minutes.";
-                if (!_resetEmails.TryEnqueue(user!.Email!, "Forget Password Request.", body))
-                {
-                    // The code will never reach the user: drop it and do not count the request.
-                    await _forgetPasswordDataService.RemoveByEmailAsync(user.Email!, cancellationToken);
-                    _resetThrottle.ReleaseCodeRequest(requested);
-                }
-            }
         }
 
         public async Task<bool> VerifyCodeAsync(string? email, string? code, CancellationToken cancellationToken)

From 47060f6a73bae943aa6ad6ffe4c9020afd1a8f4e Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 13:41:19 -0300
Subject: [PATCH 161/183] fix(work-orders): never return a severity on an
 Overdue board row

A standalone severity patch on an Overdue WO still stores the value,
because the board patches severity before type when correcting Overdue
to Emergency/Reactive and that write must not be dropped or rejected.
Project the severity as null for Overdue in the board row mapping, which
also feeds the PATCH response, search results and the detail view, so a
stored value never surfaces on a type that carries no severity.
---
 .../Implementation/WorkOrderBoardService.cs   |  7 ++++-
 .../WorkOrderOverdueTypeTests.cs              | 30 ++++++++++++++++++-
 2 files changed, 35 insertions(+), 2 deletions(-)

diff --git a/SeaHaven.Services/Implementation/WorkOrderBoardService.cs b/SeaHaven.Services/Implementation/WorkOrderBoardService.cs
index f21a21c..9341fa8 100644
--- a/SeaHaven.Services/Implementation/WorkOrderBoardService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderBoardService.cs
@@ -147,7 +147,12 @@ namespace SeaHaven.Services.Implementation
                 MediaCount = row.MediaCount,
                 CompletedDate = row.CompletedDate,
                 FlagColor = row.FlagColor,
-                Severity = WorkOrderSeverityRules.ParseLevel(row.Severity),
+                // Overdue never carries a severity. A standalone severity patch can still
+                // store one (the board patches severity before type when correcting Overdue
+                // to Emergency/Reactive), so the row never returns it for an Overdue WO.
+                Severity = row.WorkOrderType == WorkOrderType.Overdue
+                    ? null
+                    : WorkOrderSeverityRules.ParseLevel(row.Severity),
                 PrimaryDispatchId = row.PrimaryDispatchId,
                 RowVersion = row.RowVersion,
                 DispatchRowVersion = row.DispatchRowVersion,
diff --git a/SeaHavenIndustries.Tests/WorkOrderOverdueTypeTests.cs b/SeaHavenIndustries.Tests/WorkOrderOverdueTypeTests.cs
index 7a1ee1e..fe3b61b 100644
--- a/SeaHavenIndustries.Tests/WorkOrderOverdueTypeTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderOverdueTypeTests.cs
@@ -202,12 +202,13 @@ public class WorkOrderOverdueTypeTests
         await context.SaveChangesAsync();
         var service = NewUpdateService(context);
 
-        await service.PatchFieldAsync(1, new WorkOrderBoardPatchRequestDto
+        var severityStep = await service.PatchFieldAsync(1, new WorkOrderBoardPatchRequestDto
         {
             Field = WorkOrderBoardFieldNames.Severity,
             Value = "2",
             WorkOrderVersion = ToVersion(wo)
         }, "actor-1");
+        Assert.Null(severityStep.Severity);
 
         var updated = await context.workOrders.SingleAsync(w => w.Id == 1);
         var result = await service.PatchFieldAsync(1, new WorkOrderBoardPatchRequestDto
@@ -224,6 +225,33 @@ public class WorkOrderOverdueTypeTests
         Assert.Equal("2", persisted.Severity);
     }
 
+    // A severity patch with no following type change leaves a stored value on an
+    // Overdue WO; the board row still reports no severity.
+    [Fact]
+    public async Task PatchSeverity_OnOverdue_RowShowsNoSeverity()
+    {
+        await using var context = NewContext();
+        var wo = new WorkOrder
+        {
+            Id = 1,
+            LifecycleStatus = LifecycleStatus.Scheduled,
+            WorkOrderType = WorkOrderType.Overdue,
+            RowVersion = new byte[] { 1, 0, 0, 0, 0, 0, 0, 1 }
+        };
+        context.workOrders.Add(wo);
+        await context.SaveChangesAsync();
+
+        var result = await NewUpdateService(context).PatchFieldAsync(1, new WorkOrderBoardPatchRequestDto
+        {
+            Field = WorkOrderBoardFieldNames.Severity,
+            Value = "3",
+            WorkOrderVersion = ToVersion(wo)
+        }, "actor-1");
+
+        Assert.Equal(WorkOrderType.Overdue, result.WorkOrderType);
+        Assert.Null(result.Severity);
+    }
+
     [Fact]
     public async Task PatchType_PmWithPmService_ToOverdue_KeepsService()
     {

From ea1370847fb442583e42e2609f992b7976da78ce Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 13:46:37 -0300
Subject: [PATCH 162/183] test(auth): move the password-policy reset case onto
 hashed, attempt-counted codes

---
 .../PasswordPolicyTests.cs                    | 23 +++++++++++++++----
 1 file changed, 18 insertions(+), 5 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/PasswordPolicyTests.cs b/Api.SeaHavenIndustries.Tests/PasswordPolicyTests.cs
index b33d466..8183cf3 100644
--- a/Api.SeaHavenIndustries.Tests/PasswordPolicyTests.cs
+++ b/Api.SeaHavenIndustries.Tests/PasswordPolicyTests.cs
@@ -9,6 +9,7 @@ using Moq;
 using SeaHaven.DataServices.Interfaces;
 using SeaHaven.Services.Configuration;
 using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Helpers;
 using SeaHaven.Services.Implementation;
 using SeaHaven.Services.Interfaces;
 using Xunit;
@@ -132,7 +133,8 @@ public sealed class PasswordPolicyTests : IAsyncDisposable
             Microsoft.Extensions.Options.Options.Create(new JwtOptions { Secret = new string('x', 64) }),
             Mock.Of<IUserDataService>(),
             Mock.Of<IForgetPasswordDataService>(),
-            Mock.Of<IEmailSender>());
+            Mock.Of<IEmailSender>(),
+            TimeProvider.System);
 
         var result = await service.ChangePasswordAsync(user.Id, CurrentPassword, "Next2@x", CancellationToken.None);
 
@@ -169,10 +171,19 @@ public sealed class PasswordPolicyTests : IAsyncDisposable
     {
         var user = await CreateUserAsync();
         var forget = new Mock<IForgetPasswordDataService>();
-        forget.Setup(f => f.ExistsByEmailAndCodeAsync(user.Email!, "123456", It.IsAny<CancellationToken>()))
-            .ReturnsAsync(true);
+        var salt = PasswordResetCodeSecrets.NewSalt();
         forget.Setup(f => f.GetByEmailAsync(user.Email!, It.IsAny<CancellationToken>()))
-            .ReturnsAsync(new ForgetPasswordCode { Email = user.Email!, UserId = user.Id, Code = "123456" });
+            .ReturnsAsync(new ForgetPasswordCode
+            {
+                Id = 7,
+                Email = user.Email!,
+                UserId = user.Id,
+                CodeSalt = salt,
+                CodeHash = PasswordResetCodeSecrets.Hash(salt, "123456"),
+                ExpiresAtUtc = DateTime.UtcNow.AddMinutes(10)
+            });
+        forget.Setup(f => f.TryConsumeAttemptAsync(7, It.IsAny<int>(), It.IsAny<DateTime>(), It.IsAny<CancellationToken>()))
+            .ReturnsAsync(true);
         var service = NewAuthenticationService(forget);
 
         var reset = await service.ResetPasswordAsync(user.Email!, "123456", "abcdef", CancellationToken.None);
@@ -180,6 +191,7 @@ public sealed class PasswordPolicyTests : IAsyncDisposable
         reset.Should().BeFalse();
         (await UserManager.CheckPasswordAsync(user, CurrentPassword)).Should().BeTrue();
         forget.Verify(f => f.RemoveByEmailAsync(It.IsAny<string>(), It.IsAny<CancellationToken>()), Times.Never);
+        forget.Verify(f => f.RefundAttemptAsync(7, It.IsAny<CancellationToken>()), Times.Once);
     }
 
     private async Task<IReadOnlyList<IdentityError>> ValidateAsync(ApplicationUser user, string password)
@@ -208,7 +220,8 @@ public sealed class PasswordPolicyTests : IAsyncDisposable
             Microsoft.Extensions.Options.Options.Create(new JwtOptions { Secret = new string('x', 64) }),
             Mock.Of<IUserDataService>(),
             (forget ?? new Mock<IForgetPasswordDataService>()).Object,
-            Mock.Of<IEmailSender>());
+            Mock.Of<IEmailSender>(),
+            TimeProvider.System);
 
     public async ValueTask DisposeAsync()
     {

From fe5f27c8e1ac9aa11d47f9d1f2e83ebeb35d396d Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 14:08:30 -0300
Subject: [PATCH 163/183] test(auth): build the password-policy service with
 the reset queue, throttle and keyed hash

---
 Api.SeaHavenIndustries.Tests/PasswordPolicyTests.cs | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/PasswordPolicyTests.cs b/Api.SeaHavenIndustries.Tests/PasswordPolicyTests.cs
index 8183cf3..6e3a85e 100644
--- a/Api.SeaHavenIndustries.Tests/PasswordPolicyTests.cs
+++ b/Api.SeaHavenIndustries.Tests/PasswordPolicyTests.cs
@@ -133,7 +133,8 @@ public sealed class PasswordPolicyTests : IAsyncDisposable
             Microsoft.Extensions.Options.Options.Create(new JwtOptions { Secret = new string('x', 64) }),
             Mock.Of<IUserDataService>(),
             Mock.Of<IForgetPasswordDataService>(),
-            Mock.Of<IEmailSender>(),
+            Mock.Of<IPasswordResetEmailQueue>(),
+            new InMemoryPasswordResetThrottle(TimeProvider.System),
             TimeProvider.System);
 
         var result = await service.ChangePasswordAsync(user.Id, CurrentPassword, "Next2@x", CancellationToken.None);
@@ -179,7 +180,7 @@ public sealed class PasswordPolicyTests : IAsyncDisposable
                 Email = user.Email!,
                 UserId = user.Id,
                 CodeSalt = salt,
-                CodeHash = PasswordResetCodeSecrets.Hash(salt, "123456"),
+                CodeHash = PasswordResetCodeSecrets.Hash(PasswordResetCodeSecrets.DeriveKey(new string('x', 64)), salt, "123456"),
                 ExpiresAtUtc = DateTime.UtcNow.AddMinutes(10)
             });
         forget.Setup(f => f.TryConsumeAttemptAsync(7, It.IsAny<int>(), It.IsAny<DateTime>(), It.IsAny<CancellationToken>()))
@@ -220,7 +221,8 @@ public sealed class PasswordPolicyTests : IAsyncDisposable
             Microsoft.Extensions.Options.Options.Create(new JwtOptions { Secret = new string('x', 64) }),
             Mock.Of<IUserDataService>(),
             (forget ?? new Mock<IForgetPasswordDataService>()).Object,
-            Mock.Of<IEmailSender>(),
+            Mock.Of<IPasswordResetEmailQueue>(),
+            new InMemoryPasswordResetThrottle(TimeProvider.System),
             TimeProvider.System);
 
     public async ValueTask DisposeAsync()

From 9084b7f642d0b3a8557336b4bb908670cc23177c Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 16:40:54 -0300
Subject: [PATCH 164/183] fix(team-members): answer invalid_invite when
 send-code finds the invite closed

SendCodeAsync validates the invite, then starts the code with a conditional
update that also requires the invite to still be open. When an admin revoked
the link (or it was used) between those two reads, the refusal was reported as
resend_too_soon with a Retry-After, although the link was already dead.

On a refused start the invite is now read again: a closed invite gets the same
generic invalid_invite response as any other dead link, and a cooldown or send
limit refusal is computed from the fresh row.
---
 .../TeamMemberRegistrationService.cs          |  9 ++-
 .../TeamMemberInviteRegistrationTests.cs      | 70 +++++++++++++++++++
 2 files changed, 78 insertions(+), 1 deletion(-)

diff --git a/SeaHaven.Services/Implementation/TeamMemberRegistrationService.cs b/SeaHaven.Services/Implementation/TeamMemberRegistrationService.cs
index de7ae0a..b83abd8 100644
--- a/SeaHaven.Services/Implementation/TeamMemberRegistrationService.cs
+++ b/SeaHaven.Services/Implementation/TeamMemberRegistrationService.cs
@@ -87,7 +87,14 @@ public sealed partial class TeamMemberRegistrationService : ITeamMemberRegistrat
             },
             cancellationToken);
         if (!started)
-            return ResendRefusal(context.Invite, now);
+        {
+            // The refusal may be the invite closing since it was read, not the cooldown or limit:
+            // read it again so a revoked or used link gets the same answer as any other dead link.
+            var current = await LoadAsync(token, now, cancellationToken);
+            return current is null
+                ? Outcome(TeamMemberRegistrationStatus.InvalidInvite)
+                : ResendRefusal(current.Invite, now);
+        }
 
         // Read the address at send time so an admin's correction is honoured.
         var body =
diff --git a/SeaHavenIndustries.Tests/TeamMemberInviteRegistrationTests.cs b/SeaHavenIndustries.Tests/TeamMemberInviteRegistrationTests.cs
index f0a4c49..1a986a1 100644
--- a/SeaHavenIndustries.Tests/TeamMemberInviteRegistrationTests.cs
+++ b/SeaHavenIndustries.Tests/TeamMemberInviteRegistrationTests.cs
@@ -8,6 +8,9 @@ using Microsoft.AspNetCore.Identity;
 using Microsoft.AspNetCore.Mvc;
 using Microsoft.EntityFrameworkCore;
 using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.DependencyInjection.Extensions;
+using SeaHaven.DataServices.Dto;
+using SeaHaven.DataServices.Implementation;
 using SeaHaven.DataServices.Interfaces;
 using SeaHaven.Services.DTOs;
 using SeaHaven.Services.Implementation;
@@ -259,6 +262,73 @@ public sealed class TeamMemberInviteRegistrationTests
             host.Sent.Messages.Count(message => message.Subject == "Your Seahaven confirmation code"));
     }
 
+    [Theory]
+    [InlineData("revoked")]
+    [InlineData("used")]
+    public async Task SendCode_ForAnInviteClosedMidRequest_GetsTheGenericInvalidInviteResponse(string closedBy)
+    {
+        await using var host = await TeamMemberInviteTestHost.CreateAsync(services =>
+            services.Replace(ServiceDescriptor.Scoped<ITeamMemberInviteDataService>(provider =>
+                new ClosesInviteBeforeCodeStart(
+                    new TeamMemberInviteDataService(provider.GetRequiredService<ApplicationDbContext>()),
+                    provider.GetRequiredService<ApplicationDbContext>(),
+                    closedBy))));
+        var (userId, token) = await host.AddPendingMemberAsync(Email);
+
+        var response = await InvokeControllerAsync(host, controller => controller.SendCode(
+            new TeamMemberInviteTokenRequestDTO { Token = token }, CancellationToken.None));
+
+        Assert.Equal(
+            "400 {\"code\":\"invalid_invite\",\"message\":\"This invite link is invalid or has expired. Ask your admin to send a new invite.\",\"retryAfterSeconds\":null}",
+            response.Body);
+        Assert.Null(response.RetryAfter);
+        Assert.DoesNotContain(host.Sent.Messages, message => message.Subject == "Your Seahaven confirmation code");
+        Assert.Equal(0, Assert.Single(await host.InvitesAsync(userId)).CodeSendCount);
+    }
+
+    /// <summary>Closes the invite after the service has read it and before the conditional code start runs.</summary>
+    private sealed class ClosesInviteBeforeCodeStart : ITeamMemberInviteDataService
+    {
+        private readonly ITeamMemberInviteDataService _inner;
+        private readonly ApplicationDbContext _context;
+        private readonly string _closedBy;
+
+        public ClosesInviteBeforeCodeStart(ITeamMemberInviteDataService inner, ApplicationDbContext context, string closedBy)
+        {
+            _inner = inner;
+            _context = context;
+            _closedBy = closedBy;
+        }
+
+        public async Task<bool> TryStartCodeAsync(StartTeamMemberInviteCodeCommand command, CancellationToken cancellationToken)
+        {
+            var invite = _context.TeamMemberInvites.Where(existing => existing.Id == command.InviteId);
+            if (_closedBy == "revoked")
+                await invite.ExecuteUpdateAsync(setters => setters.SetProperty(existing => existing.RevokedAt, command.Now), cancellationToken);
+            else
+                await invite.ExecuteUpdateAsync(setters => setters.SetProperty(existing => existing.UsedAt, command.Now), cancellationToken);
+            return await _inner.TryStartCodeAsync(command, cancellationToken);
+        }
+
+        public Task AddAsync(TeamMemberInvite invite, CancellationToken cancellationToken) =>
+            _inner.AddAsync(invite, cancellationToken);
+
+        public Task ReplaceOpenForUserAsync(TeamMemberInvite invite, DateTime now, CancellationToken cancellationToken) =>
+            _inner.ReplaceOpenForUserAsync(invite, now, cancellationToken);
+
+        public Task<TeamMemberInviteData?> GetByTokenHashAsync(string tokenHash, CancellationToken cancellationToken) =>
+            _inner.GetByTokenHashAsync(tokenHash, cancellationToken);
+
+        public Task<bool> TryReserveCodeAttemptAsync(int inviteId, int maxAttempts, DateTime now, CancellationToken cancellationToken) =>
+            _inner.TryReserveCodeAttemptAsync(inviteId, maxAttempts, now, cancellationToken);
+
+        public Task<bool> TryConfirmEmailAsync(int inviteId, string codeHash, DateTime now, CancellationToken cancellationToken) =>
+            _inner.TryConfirmEmailAsync(inviteId, codeHash, now, cancellationToken);
+
+        public Task<bool> TryClaimAsync(int inviteId, DateTime now, CancellationToken cancellationToken) =>
+            _inner.TryClaimAsync(inviteId, now, cancellationToken);
+    }
+
     [Fact]
     public async Task Complete_RequiresConfirmedEmail()
     {

From 900e141bda772b1c573d310cdac81f7f4c3deada Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 16:42:03 -0300
Subject: [PATCH 165/183] fix(auth): delete only the checked code and older
 ones, so a code issued concurrently survives

---
 .../AuthenticationServiceTests.cs             |   2 +-
 .../ForgetPasswordDataService.cs              |   8 ++
 .../Interfaces/IForgetPasswordDataService.cs  |   6 +
 .../Implementation/AuthenticationService.cs   |   8 +-
 .../PasswordResetRaceTests.cs                 | 118 ++++++++++++++++++
 .../PasswordResetTestHost.cs                  |   3 +-
 6 files changed, 140 insertions(+), 5 deletions(-)
 create mode 100644 SeaHavenIndustries.Tests/PasswordResetRaceTests.cs

diff --git a/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs b/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs
index ef8a297..88d68fb 100644
--- a/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs
@@ -206,7 +206,7 @@ public class AuthenticationServiceTests
         var result = await service.ResetPasswordAsync("a@b.com", "123456", "New@67890", CancellationToken.None);
 
         result.Should().BeFalse();
-        forget.Verify(f => f.RemoveByEmailAsync("a@b.com", It.IsAny<CancellationToken>()), Times.Once);
+        forget.Verify(f => f.RemoveIssuedThroughAsync("a@b.com", 7, It.IsAny<CancellationToken>()), Times.Once);
         store.Verify(s => s.FindByIdAsync(It.IsAny<string>(), It.IsAny<CancellationToken>()), Times.Never);
     }
 
diff --git a/SeaHaven.DataServices/Implementation/ForgetPasswordDataService.cs b/SeaHaven.DataServices/Implementation/ForgetPasswordDataService.cs
index 7e3b3c4..fe3bd1d 100644
--- a/SeaHaven.DataServices/Implementation/ForgetPasswordDataService.cs
+++ b/SeaHaven.DataServices/Implementation/ForgetPasswordDataService.cs
@@ -75,6 +75,14 @@ namespace SeaHaven.DataServices.Implementation
                 .ExecuteDeleteAsync(cancellationToken);
         }
 
+        public async Task RemoveIssuedThroughAsync(string email, int throughId, CancellationToken cancellationToken)
+        {
+            var normalizedEmail = Normalize(email);
+            await _context.ForgetPasswordCodes
+                .Where(code => code.Email.ToLower().Trim() == normalizedEmail && code.Id <= throughId)
+                .ExecuteDeleteAsync(cancellationToken);
+        }
+
         private static string Normalize(string email) => email.ToLower().Trim();
     }
 }
diff --git a/SeaHaven.DataServices/Interfaces/IForgetPasswordDataService.cs b/SeaHaven.DataServices/Interfaces/IForgetPasswordDataService.cs
index a7de61e..1c7f0ad 100644
--- a/SeaHaven.DataServices/Interfaces/IForgetPasswordDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IForgetPasswordDataService.cs
@@ -20,5 +20,11 @@ namespace SeaHaven.DataServices.Interfaces
         Task RefundAttemptAsync(int id, CancellationToken cancellationToken);
 
         Task RemoveByEmailAsync(string email, CancellationToken cancellationToken);
+
+        /// <summary>
+        /// Deletes the email's codes issued up to and including <paramref name="throughId"/>,
+        /// leaving any code issued after it by a concurrent request.
+        /// </summary>
+        Task RemoveIssuedThroughAsync(string email, int throughId, CancellationToken cancellationToken);
     }
 }
diff --git a/SeaHaven.Services/Implementation/AuthenticationService.cs b/SeaHaven.Services/Implementation/AuthenticationService.cs
index b168f9a..0cd58cf 100644
--- a/SeaHaven.Services/Implementation/AuthenticationService.cs
+++ b/SeaHaven.Services/Implementation/AuthenticationService.cs
@@ -178,7 +178,7 @@ namespace SeaHaven.Services.Implementation
             var user = await _userManager.FindByIdAsync(pending.UserId);
             if (user == null || user.IsDeleted == true)
             {
-                await _forgetPasswordDataService.RemoveByEmailAsync(pending.Email, cancellationToken);
+                await _forgetPasswordDataService.RemoveIssuedThroughAsync(pending.Email, pending.Id, cancellationToken);
                 return false;
             }
 
@@ -211,9 +211,11 @@ namespace SeaHaven.Services.Implementation
                 return null;
 
             var nowUtc = _timeProvider.GetUtcNow().UtcDateTime;
+            // Deletes below stop at this code's id: a code issued by a concurrent request
+            // after this one was read belongs to that request and must survive.
             if (!await _forgetPasswordDataService.TryConsumeAttemptAsync(pending.Id, MaxCodeAttempts, nowUtc, cancellationToken))
             {
-                await _forgetPasswordDataService.RemoveByEmailAsync(pending.Email, cancellationToken);
+                await _forgetPasswordDataService.RemoveIssuedThroughAsync(pending.Email, pending.Id, cancellationToken);
                 return null;
             }
 
@@ -221,7 +223,7 @@ namespace SeaHaven.Services.Implementation
                 return pending;
 
             if (pending.FailedAttempts + 1 >= MaxCodeAttempts)
-                await _forgetPasswordDataService.RemoveByEmailAsync(pending.Email, cancellationToken);
+                await _forgetPasswordDataService.RemoveIssuedThroughAsync(pending.Email, pending.Id, cancellationToken);
             return null;
         }
 
diff --git a/SeaHavenIndustries.Tests/PasswordResetRaceTests.cs b/SeaHavenIndustries.Tests/PasswordResetRaceTests.cs
new file mode 100644
index 0000000..20a89f2
--- /dev/null
+++ b/SeaHavenIndustries.Tests/PasswordResetRaceTests.cs
@@ -0,0 +1,118 @@
+using System.Net;
+using Data.SeaHavenIndustries;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.DependencyInjection.Extensions;
+using SeaHaven.DataServices.Implementation;
+using SeaHaven.DataServices.Interfaces;
+
+namespace SeaHavenIndustries.Tests;
+
+/// <summary>
+/// A new code requested while a check of the previous code is in flight. The
+/// request runs for real, between the check's steps, through the same host.
+/// </summary>
+public sealed class PasswordResetRaceTests
+{
+    private const string Alice = "alice@example.com";
+    private const string OldPassword = "Old@12345";
+    private const string NewPassword = "New@67890";
+
+    private static int _nextClient;
+
+    private static string NextClient()
+    {
+        var n = Interlocked.Increment(ref _nextClient);
+        return $"192.0.{n / 250 % 250}.{n % 250 + 1}";
+    }
+
+    [Fact]
+    public async Task A_code_requested_while_the_previous_one_is_being_checked_still_resets()
+    {
+        var race = new CheckRace();
+        await using var host = await PasswordResetTestHost.StartAsync(configureServices: race.Register);
+        await host.AddUserAsync(Alice, OldPassword);
+        await host.ForgetPasswordAsync(Alice, NextClient());
+        var first = host.Sent.LatestCodeFor(Alice);
+
+        // The check has read the first code; the new request replaces it before the attempt is counted.
+        race.BeforeNextConsume = () => host.ForgetPasswordAsync(Alice, NextClient());
+        Assert.Equal(HttpStatusCode.BadRequest, (await host.VerifyAsync(Alice, first, NextClient())).StatusCode);
+
+        Assert.Equal(2, host.Sent.Messages.Count);
+        var second = host.Sent.LatestCodeFor(Alice);
+        Assert.Equal(HttpStatusCode.OK, (await host.ResetAsync(Alice, second, NewPassword, NextClient())).StatusCode);
+        Assert.Equal(HttpStatusCode.OK, (await host.LoginAsync(Alice, NewPassword)).StatusCode);
+    }
+
+    [Fact]
+    public async Task A_code_requested_while_the_last_wrong_attempt_is_being_checked_still_resets()
+    {
+        var race = new CheckRace();
+        await using var host = await PasswordResetTestHost.StartAsync(configureServices: race.Register);
+        await host.AddUserAsync(Alice, OldPassword);
+        await host.ForgetPasswordAsync(Alice, NextClient());
+        var wrong = host.Sent.LatestCodeFor(Alice) == "000000" ? "111111" : "000000";
+        for (var attempt = 1; attempt < 5; attempt++)
+            await host.VerifyAsync(Alice, wrong, NextClient());
+
+        // The fifth wrong attempt is counted, then the new request lands before the used-up code is deleted.
+        race.AfterNextConsume = () => host.ForgetPasswordAsync(Alice, NextClient());
+        Assert.Equal(HttpStatusCode.BadRequest, (await host.VerifyAsync(Alice, wrong, NextClient())).StatusCode);
+
+        Assert.Equal(2, host.Sent.Messages.Count);
+        var second = host.Sent.LatestCodeFor(Alice);
+        Assert.Equal(HttpStatusCode.OK, (await host.ResetAsync(Alice, second, NewPassword, NextClient())).StatusCode);
+        Assert.Equal(HttpStatusCode.OK, (await host.LoginAsync(Alice, NewPassword)).StatusCode);
+    }
+
+    private sealed class CheckRace
+    {
+        private Func<Task>? _beforeNextConsume;
+        private Func<Task>? _afterNextConsume;
+
+        public Func<Task>? BeforeNextConsume { set => _beforeNextConsume = value; }
+        public Func<Task>? AfterNextConsume { set => _afterNextConsume = value; }
+
+        public void Register(IServiceCollection services) =>
+            services.Replace(ServiceDescriptor.Scoped<IForgetPasswordDataService>(provider =>
+                new RacingForgetPasswordDataService(new ForgetPasswordDataService(provider.GetRequiredService<ApplicationDbContext>()), this)));
+
+        public Task RunBeforeConsumeAsync() => Interlocked.Exchange(ref _beforeNextConsume, null)?.Invoke() ?? Task.CompletedTask;
+        public Task RunAfterConsumeAsync() => Interlocked.Exchange(ref _afterNextConsume, null)?.Invoke() ?? Task.CompletedTask;
+    }
+
+    private sealed class RacingForgetPasswordDataService : IForgetPasswordDataService
+    {
+        private readonly IForgetPasswordDataService _inner;
+        private readonly CheckRace _race;
+
+        public RacingForgetPasswordDataService(IForgetPasswordDataService inner, CheckRace race)
+        {
+            _inner = inner;
+            _race = race;
+        }
+
+        public Task ReplaceCodeAsync(string email, string userId, string codeHash, string codeSalt, DateTime expiresAtUtc, CancellationToken cancellationToken) =>
+            _inner.ReplaceCodeAsync(email, userId, codeHash, codeSalt, expiresAtUtc, cancellationToken);
+
+        public Task<ForgetPasswordCode?> GetByEmailAsync(string email, CancellationToken cancellationToken) =>
+            _inner.GetByEmailAsync(email, cancellationToken);
+
+        public async Task<bool> TryConsumeAttemptAsync(int id, int maxAttempts, DateTime nowUtc, CancellationToken cancellationToken)
+        {
+            await _race.RunBeforeConsumeAsync();
+            var consumed = await _inner.TryConsumeAttemptAsync(id, maxAttempts, nowUtc, cancellationToken);
+            await _race.RunAfterConsumeAsync();
+            return consumed;
+        }
+
+        public Task RefundAttemptAsync(int id, CancellationToken cancellationToken) =>
+            _inner.RefundAttemptAsync(id, cancellationToken);
+
+        public Task RemoveByEmailAsync(string email, CancellationToken cancellationToken) =>
+            _inner.RemoveByEmailAsync(email, cancellationToken);
+
+        public Task RemoveIssuedThroughAsync(string email, int throughId, CancellationToken cancellationToken) =>
+            _inner.RemoveIssuedThroughAsync(email, throughId, cancellationToken);
+    }
+}
diff --git a/SeaHavenIndustries.Tests/PasswordResetTestHost.cs b/SeaHavenIndustries.Tests/PasswordResetTestHost.cs
index 6904954..e44f2df 100644
--- a/SeaHavenIndustries.Tests/PasswordResetTestHost.cs
+++ b/SeaHavenIndustries.Tests/PasswordResetTestHost.cs
@@ -48,7 +48,7 @@ internal sealed class PasswordResetTestHost : IAsyncDisposable
     public CapturingLoggerProvider Logged { get; private init; } = null!;
     public IServiceProvider Services => _app.Services;
 
-    public static async Task<PasswordResetTestHost> StartAsync(IEmailSender? emailSender = null)
+    public static async Task<PasswordResetTestHost> StartAsync(IEmailSender? emailSender = null, Action<IServiceCollection>? configureServices = null)
     {
         var databasePath = Path.Combine(Path.GetTempPath(), $"password-reset-{Guid.NewGuid():N}.db");
         var connectionString = new SqliteConnectionStringBuilder { DataSource = databasePath, DefaultTimeout = 30 }.ToString();
@@ -81,6 +81,7 @@ internal sealed class PasswordResetTestHost : IAsyncDisposable
         builder.Services.AddSingleton<TimeProvider>(time);
         builder.Services.AddSingleton<IEmailSender>(emailSender ?? sent);
         builder.Services.AddDataServices();
+        configureServices?.Invoke(builder.Services);
         builder.Services.AddBusinessServices(builder.Configuration);
         builder.Services.AddControllers()
             .AddApplicationPart(typeof(AuthenticationController).Assembly)

From f0dcba63fde8637d67cae33ec4efff342fdec111 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 17:38:51 -0300
Subject: [PATCH 166/183] fix(auth): give back reset check and request slots
 when a data call fails or is cancelled

---
 .../AuthenticationServiceTests.cs             | 78 +++++++++++++++++
 .../Implementation/AuthenticationService.cs   | 87 +++++++++++--------
 2 files changed, 128 insertions(+), 37 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs b/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs
index 4f6a138..e64014f 100644
--- a/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs
@@ -271,6 +271,84 @@ public class AuthenticationServiceTests
         store.Verify(s => s.FindByIdAsync(It.IsAny<string>(), It.IsAny<CancellationToken>()), Times.Never);
     }
 
+    [Theory]
+    [InlineData(false)]
+    [InlineData(true)]
+    public async Task VerifyCode_FailedOrCancelledLookups_LeaveTheAccountCheckBudgetUntouched(bool cancelled)
+    {
+        var pending = new ForgetPasswordCode { Id = 7, Email = "a@b.com", UserId = "u1", CodeSalt = "s", CodeHash = PasswordResetCodeSecrets.Hash(ResetKey, "s", "123456") };
+        var forget = new Mock<IForgetPasswordDataService>();
+        var lookups = 0;
+        forget.Setup(f => f.GetByEmailAsync("a@b.com", It.IsAny<CancellationToken>()))
+            .Returns(() => ++lookups <= InMemoryPasswordResetThrottle.FailedChecksPerDay
+                ? Task.FromException<ForgetPasswordCode?>(cancelled ? new OperationCanceledException() : new InvalidOperationException("database unavailable"))
+                : Task.FromResult<ForgetPasswordCode?>(pending));
+        forget.Setup(f => f.TryConsumeAttemptAsync(7, AuthenticationService.MaxCodeAttempts, It.IsAny<DateTime>(), It.IsAny<CancellationToken>())).ReturnsAsync(true);
+        var service = NewService(new Mock<IUserDataService>(), forget, new Mock<IPasswordResetEmailQueue>(), out _, out _);
+
+        for (var check = 0; check < InMemoryPasswordResetThrottle.FailedChecksPerDay; check++)
+        {
+            var act = () => service.VerifyCodeAsync("a@b.com", "123456", CancellationToken.None);
+            await act.Should().ThrowAsync<Exception>();
+        }
+
+        (await service.VerifyCodeAsync("a@b.com", "123456", CancellationToken.None)).Should().BeTrue();
+    }
+
+    [Theory]
+    [InlineData(false)]
+    [InlineData(true)]
+    public async Task VerifyCode_FailedOrCancelledAttemptConsumes_LeaveTheAccountCheckBudgetUntouched(bool cancelled)
+    {
+        var pending = new ForgetPasswordCode { Id = 7, Email = "a@b.com", UserId = "u1", CodeSalt = "s", CodeHash = PasswordResetCodeSecrets.Hash(ResetKey, "s", "123456") };
+        var forget = new Mock<IForgetPasswordDataService>();
+        forget.Setup(f => f.GetByEmailAsync("a@b.com", It.IsAny<CancellationToken>())).ReturnsAsync(pending);
+        var consumes = 0;
+        forget.Setup(f => f.TryConsumeAttemptAsync(7, AuthenticationService.MaxCodeAttempts, It.IsAny<DateTime>(), It.IsAny<CancellationToken>()))
+            .Returns(() => ++consumes <= InMemoryPasswordResetThrottle.FailedChecksPerDay
+                ? Task.FromException<bool>(cancelled ? new OperationCanceledException() : new InvalidOperationException("database unavailable"))
+                : Task.FromResult(true));
+        var service = NewService(new Mock<IUserDataService>(), forget, new Mock<IPasswordResetEmailQueue>(), out _, out _);
+
+        for (var check = 0; check < InMemoryPasswordResetThrottle.FailedChecksPerDay; check++)
+        {
+            var act = () => service.VerifyCodeAsync("a@b.com", "123456", CancellationToken.None);
+            await act.Should().ThrowAsync<Exception>();
+        }
+
+        (await service.VerifyCodeAsync("a@b.com", "123456", CancellationToken.None)).Should().BeTrue();
+    }
+
+    [Theory]
+    [InlineData(false)]
+    [InlineData(true)]
+    public async Task ForgetPassword_FailedOrCancelledWrites_DoNotUseUpTheEmailRequestLimit(bool cancelled)
+    {
+        var user = IdentityTestHelpers.User();
+        var userData = new Mock<IUserDataService>();
+        userData.Setup(u => u.GetByEmailNormalizedAsync(It.IsAny<string>(), It.IsAny<CancellationToken>())).ReturnsAsync(user);
+        var forget = new Mock<IForgetPasswordDataService>();
+        var writes = 0;
+        forget.Setup(f => f.ReplaceCodeAsync(It.IsAny<string>(), It.IsAny<string>(), It.IsAny<string>(), It.IsAny<string>(), It.IsAny<DateTime>(), It.IsAny<DateTime>(), It.IsAny<CancellationToken>()))
+            .Returns(() => ++writes <= InMemoryPasswordResetThrottle.CodeRequestsPerHour
+                ? Task.FromException(cancelled ? new OperationCanceledException() : new InvalidOperationException("database unavailable"))
+                : Task.CompletedTask);
+        var email = new Mock<IPasswordResetEmailQueue>();
+        email.Setup(e => e.TryEnqueue(It.IsAny<string>(), It.IsAny<string>(), It.IsAny<string>())).Returns(true);
+        var service = NewService(userData, forget, email, out _, out _);
+
+        for (var request = 0; request < InMemoryPasswordResetThrottle.CodeRequestsPerHour; request++)
+        {
+            var act = () => service.ForgetPasswordAsync("alice@example.com", CancellationToken.None);
+            await act.Should().ThrowAsync<Exception>();
+        }
+
+        await service.ForgetPasswordAsync("alice@example.com", CancellationToken.None);
+
+        writes.Should().Be(InMemoryPasswordResetThrottle.CodeRequestsPerHour + 1);
+        forget.Verify(f => f.PurgeExpiredAsync(It.IsAny<DateTime>(), It.IsAny<CancellationToken>()), Times.Never);
+    }
+
     [Theory]
     [InlineData("123456", "123456", true)]
     [InlineData("123456", " 123456 ", true)]
diff --git a/SeaHaven.Services/Implementation/AuthenticationService.cs b/SeaHaven.Services/Implementation/AuthenticationService.cs
index c00c3c2..73b43d2 100644
--- a/SeaHaven.Services/Implementation/AuthenticationService.cs
+++ b/SeaHaven.Services/Implementation/AuthenticationService.cs
@@ -164,25 +164,34 @@ namespace SeaHaven.Services.Implementation
             var hash = PasswordResetCodeSecrets.Hash(ResetCodeKey, salt, code);
             var active = user != null && user.IsDeleted != true && !string.IsNullOrWhiteSpace(user.Email);
 
-            var queued = false;
-            if (active)
+            // The request stays counted only once its row is stored. A code that cannot be
+            // emailed is stored unmatchable and not counted, and a failed or cancelled
+            // write is not counted either.
+            var counted = false;
+            try
             {
-                var body = $"Your Password Reset Code is: {code}. It expires in {(int)ResetCodeLifetime.TotalMinutes} minutes.";
-                queued = _resetEmails.TryEnqueue(user!.Email!, "Forget Password Request.", body);
+                var queued = false;
+                if (active)
+                {
+                    var body = $"Your Password Reset Code is: {code}. It expires in {(int)ResetCodeLifetime.TotalMinutes} minutes.";
+                    queued = _resetEmails.TryEnqueue(user!.Email!, "Forget Password Request.", body);
+                }
 
-                // A code that cannot be emailed is stored unmatchable and the request is not counted.
-                if (!queued)
+                await _forgetPasswordDataService.ReplaceCodeAsync(
+                    active ? user!.Email! : requested,
+                    active ? user!.Id : string.Empty,
+                    queued ? hash : PasswordResetCodeSecrets.NewUnmatchableHash(),
+                    salt,
+                    nowUtc.Add(ResetCodeLifetime),
+                    nowUtc,
+                    cancellationToken);
+                counted = queued || !active;
+            }
+            finally
+            {
+                if (!counted)
                     _resetThrottle.ReleaseCodeRequest(requested);
             }
-
-            await _forgetPasswordDataService.ReplaceCodeAsync(
-                active ? user!.Email! : requested,
-                active ? user!.Id : string.Empty,
-                queued ? hash : PasswordResetCodeSecrets.NewUnmatchableHash(),
-                salt,
-                nowUtc.Add(ResetCodeLifetime),
-                nowUtc,
-                cancellationToken);
         }
 
         public async Task<bool> VerifyCodeAsync(string? email, string? code, CancellationToken cancellationToken)
@@ -242,33 +251,37 @@ namespace SeaHaven.Services.Implementation
             if (!_resetThrottle.TryReserveCheck(email))
                 return null;
 
-            var pending = await _forgetPasswordDataService.GetByEmailAsync(email, cancellationToken);
-            if (pending == null)
+            // Only a wrong code actually compared keeps the slot. No live code, an expired or
+            // used-up code, a match, and a failed or cancelled call all give it back.
+            var wrongGuess = false;
+            try
             {
-                _resetThrottle.ReleaseCheck(email);
+                var pending = await _forgetPasswordDataService.GetByEmailAsync(email, cancellationToken);
+                if (pending == null)
+                    return null;
+
+                var nowUtc = _timeProvider.GetUtcNow().UtcDateTime;
+                // Deletes below stop at this code's id: a code issued by a concurrent request
+                // after this one was read belongs to that request and must survive.
+                if (!await _forgetPasswordDataService.TryConsumeAttemptAsync(pending.Id, MaxCodeAttempts, nowUtc, cancellationToken))
+                {
+                    await _forgetPasswordDataService.RemoveIssuedThroughAsync(pending.Email, pending.Id, cancellationToken);
+                    return null;
+                }
+
+                if (PasswordResetCodeSecrets.Matches(ResetCodeKey, pending.CodeSalt, code, pending.CodeHash))
+                    return pending;
+
+                wrongGuess = true;
+                if (pending.FailedAttempts + 1 >= MaxCodeAttempts)
+                    await _forgetPasswordDataService.RemoveIssuedThroughAsync(pending.Email, pending.Id, cancellationToken);
                 return null;
             }
-
-            var nowUtc = _timeProvider.GetUtcNow().UtcDateTime;
-            // Deletes below stop at this code's id: a code issued by a concurrent request
-            // after this one was read belongs to that request and must survive.
-            if (!await _forgetPasswordDataService.TryConsumeAttemptAsync(pending.Id, MaxCodeAttempts, nowUtc, cancellationToken))
+            finally
             {
-                // Expired or out of attempts: nothing was compared, so no guess is counted.
-                _resetThrottle.ReleaseCheck(email);
-                await _forgetPasswordDataService.RemoveIssuedThroughAsync(pending.Email, pending.Id, cancellationToken);
-                return null;
+                if (!wrongGuess)
+                    _resetThrottle.ReleaseCheck(email);
             }
-
-            if (PasswordResetCodeSecrets.Matches(ResetCodeKey, pending.CodeSalt, code, pending.CodeHash))
-            {
-                _resetThrottle.ReleaseCheck(email);
-                return pending;
-            }
-
-            if (pending.FailedAttempts + 1 >= MaxCodeAttempts)
-                await _forgetPasswordDataService.RemoveIssuedThroughAsync(pending.Email, pending.Id, cancellationToken);
-            return null;
         }
 
         private JwtSecurityToken GetToken(List<Claim> authClaims)

From 5eb13234196a482c6381dfacb7327c8e9aaaa909 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 17:51:26 -0300
Subject: [PATCH 167/183] test(auth): give the reset test host's helpers names
 of their own

---
 .../PasswordResetAbuseLimitsTests.cs          |  4 ++--
 .../PasswordResetTestHost.cs                  | 22 +++++++++----------
 2 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/SeaHavenIndustries.Tests/PasswordResetAbuseLimitsTests.cs b/SeaHavenIndustries.Tests/PasswordResetAbuseLimitsTests.cs
index 9fd8388..9835a85 100644
--- a/SeaHavenIndustries.Tests/PasswordResetAbuseLimitsTests.cs
+++ b/SeaHavenIndustries.Tests/PasswordResetAbuseLimitsTests.cs
@@ -123,7 +123,7 @@ public sealed class PasswordResetAbuseLimitsTests
     [Fact]
     public void Concurrent_checks_can_never_exceed_the_account_budget()
     {
-        var throttle = new InMemoryPasswordResetThrottle(new ManualTimeProvider());
+        var throttle = new InMemoryPasswordResetThrottle(new ResetTestClock());
 
         var reserved = 0;
         Parallel.For(0, 64, _ =>
@@ -138,7 +138,7 @@ public sealed class PasswordResetAbuseLimitsTests
     [Fact]
     public void A_matching_check_gives_its_reservation_back()
     {
-        var throttle = new InMemoryPasswordResetThrottle(new ManualTimeProvider());
+        var throttle = new InMemoryPasswordResetThrottle(new ResetTestClock());
 
         for (var check = 0; check < 50; check++)
         {
diff --git a/SeaHavenIndustries.Tests/PasswordResetTestHost.cs b/SeaHavenIndustries.Tests/PasswordResetTestHost.cs
index 58ea020..e8e6812 100644
--- a/SeaHavenIndustries.Tests/PasswordResetTestHost.cs
+++ b/SeaHavenIndustries.Tests/PasswordResetTestHost.cs
@@ -46,9 +46,9 @@ internal sealed class PasswordResetTestHost : IAsyncDisposable
     }
 
     public HttpClient Client { get; }
-    public CapturingEmailSender Sent { get; private init; } = null!;
-    public ManualTimeProvider Time { get; private init; } = null!;
-    public CapturingLoggerProvider Logged { get; private init; } = null!;
+    public ResetEmailOutbox Sent { get; private init; } = null!;
+    public ResetTestClock Time { get; private init; } = null!;
+    public ResetLogCapture Logged { get; private init; } = null!;
     public IServiceProvider Services => _app.Services;
 
     public static async Task<PasswordResetTestHost> StartAsync(IEmailSender? emailSender = null, Action<IServiceCollection>? configureServices = null)
@@ -56,9 +56,9 @@ internal sealed class PasswordResetTestHost : IAsyncDisposable
         var databasePath = Path.Combine(Path.GetTempPath(), $"password-reset-{Guid.NewGuid():N}.db");
         var connectionString = new SqliteConnectionStringBuilder { DataSource = databasePath, DefaultTimeout = 30 }.ToString();
 
-        var sent = new CapturingEmailSender();
-        var time = new ManualTimeProvider();
-        var logged = new CapturingLoggerProvider();
+        var sent = new ResetEmailOutbox();
+        var time = new ResetTestClock();
+        var logged = new ResetLogCapture();
 
         var builder = WebApplication.CreateBuilder(new WebApplicationOptions { EnvironmentName = "Testing" });
         builder.WebHost.UseUrls("http://127.0.0.1:0");
@@ -258,7 +258,7 @@ internal sealed class PasswordResetTestHost : IAsyncDisposable
     }
 }
 
-internal sealed class ManualTimeProvider : TimeProvider
+internal sealed class ResetTestClock : TimeProvider
 {
     private DateTimeOffset _now = new(2026, 9, 25, 12, 0, 0, TimeSpan.Zero);
 
@@ -267,7 +267,7 @@ internal sealed class ManualTimeProvider : TimeProvider
     public void Advance(TimeSpan by) => _now = _now.Add(by);
 }
 
-internal sealed class CapturingEmailSender : IEmailSender
+internal sealed class ResetEmailOutbox : IEmailSender
 {
     private static readonly Regex CodePattern = new(@"Your Password Reset Code is: (\d{6})", RegexOptions.CultureInvariant);
 
@@ -286,7 +286,7 @@ internal sealed class CapturingEmailSender : IEmailSender
     }
 }
 
-internal sealed class CapturingLoggerProvider : ILoggerProvider
+internal sealed class ResetLogCapture : ILoggerProvider
 {
     public ConcurrentQueue<string> Lines { get; } = new();
 
@@ -298,10 +298,10 @@ internal sealed class CapturingLoggerProvider : ILoggerProvider
 
     private sealed class CapturingLogger : ILogger
     {
-        private readonly CapturingLoggerProvider _owner;
+        private readonly ResetLogCapture _owner;
         private readonly string _category;
 
-        public CapturingLogger(CapturingLoggerProvider owner, string category)
+        public CapturingLogger(ResetLogCapture owner, string category)
         {
             _owner = owner;
             _category = category;

From 92cd44c4819eda76f00405e09704068ad13953ea Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 17:51:47 -0300
Subject: [PATCH 168/183] fix(work-orders): count only live uplifts for Has
 uplift and the Uplift column

A work order whose uplifts were all cancelled, withdrawn, expired or revoked no
longer matches the advanced-search Has uplift filter, and the board Uplift
column no longer reports it as having an uplift or shows the dead one as its
primary status. One shared live-status list backs both queries. Explicit
cancelled/revoked sub-filter values still find those work orders.
---
 .../Helpers/LiveUpliftStatus.cs               |  26 ++
 .../Helpers/WorkOrderBoardProjection.cs       |   2 +
 .../WorkOrderBoardSearchFacetFilters.cs       |  23 +-
 ...orkOrderUpliftLiveStatusRelationalTests.cs | 162 +++++++++++
 .../WorkOrderUpliftLiveStatusTests.cs         | 266 ++++++++++++++++++
 5 files changed, 470 insertions(+), 9 deletions(-)
 create mode 100644 SeaHaven.DataServices/Helpers/LiveUpliftStatus.cs
 create mode 100644 SeaHavenIndustries.Tests/WorkOrderUpliftLiveStatusRelationalTests.cs
 create mode 100644 SeaHavenIndustries.Tests/WorkOrderUpliftLiveStatusTests.cs

diff --git a/SeaHaven.DataServices/Helpers/LiveUpliftStatus.cs b/SeaHaven.DataServices/Helpers/LiveUpliftStatus.cs
new file mode 100644
index 0000000..e976eea
--- /dev/null
+++ b/SeaHaven.DataServices/Helpers/LiveUpliftStatus.cs
@@ -0,0 +1,26 @@
+namespace SeaHaven.DataServices.Helpers
+{
+    /// <summary>
+    /// Which stored uplift statuses still count as a live uplift on a work order.
+    /// Cancelled (legacy "Cancelled", "Withdrawn", "Expired") and revoked uplifts do not;
+    /// pending, approved, auto-approved and rejected ones do. The advanced-search
+    /// "Has uplift" filter and the board Uplift column both use this, so they cannot drift.
+    /// </summary>
+    public static class LiveUpliftStatus
+    {
+        /// <summary>
+        /// Stored statuses that are not live. Kept as an array so EF translates
+        /// <c>NonLive.Contains(u.Status)</c> inside query predicates.
+        /// </summary>
+        public static readonly string[] NonLive =
+        {
+            "Withdrawn",
+            "Cancelled",
+            "Expired",
+            "Revoked",
+        };
+
+        public static bool IsLive(string? status) =>
+            status == null || !NonLive.Contains(status, StringComparer.Ordinal);
+    }
+}
diff --git a/SeaHaven.DataServices/Helpers/WorkOrderBoardProjection.cs b/SeaHaven.DataServices/Helpers/WorkOrderBoardProjection.cs
index 12d22ce..e14972f 100644
--- a/SeaHaven.DataServices/Helpers/WorkOrderBoardProjection.cs
+++ b/SeaHaven.DataServices/Helpers/WorkOrderBoardProjection.cs
@@ -238,11 +238,13 @@ namespace SeaHaven.DataServices.Helpers
             CancellationToken cancellationToken)
         {
             var workOrderIds = workOrders.Select(w => w.Id);
+            var nonLive = LiveUpliftStatus.NonLive;
 
             var live = context.DispatchUpliftRequests
                 .AsNoTracking()
                 .Where(u =>
                     (u.IsDeleted == null || u.IsDeleted == false)
+                    && !nonLive.Contains(u.Status)
                     && u.Dispatch != null
                     && (u.Dispatch.IsDeleted == null || u.Dispatch.IsDeleted == false));
 
diff --git a/SeaHaven.DataServices/Helpers/WorkOrderBoardSearchFacetFilters.cs b/SeaHaven.DataServices/Helpers/WorkOrderBoardSearchFacetFilters.cs
index d3bdfea..61afea5 100644
--- a/SeaHaven.DataServices/Helpers/WorkOrderBoardSearchFacetFilters.cs
+++ b/SeaHaven.DataServices/Helpers/WorkOrderBoardSearchFacetFilters.cs
@@ -15,12 +15,6 @@ namespace SeaHaven.DataServices.Helpers
             WorkOrderType.Reactive,
         };
 
-        private static readonly string[] RevokedUpliftStatuses =
-        {
-            "Withdrawn",
-            "Cancelled",
-        };
-
         public static IQueryable<WorkOrder> ApplySeverityFilter(
             IQueryable<WorkOrder> query,
             IReadOnlyList<int>? severities)
@@ -125,18 +119,21 @@ namespace SeaHaven.DataServices.Helpers
             if (!hasUplift)
                 return query;
 
+            // No sub-filter: any live uplift. An explicit sub-filter matches exactly the
+            // statuses it names, so "cancelled" / "revoked" still find those work orders.
             var mappedStatuses = MapUpliftStatuses(upliftStatuses);
+            var anyLive = mappedStatuses.Count == 0;
+            var nonLive = LiveUpliftStatus.NonLive;
 
             return query.Where(w => context.DispatchUpliftRequests.Any(u =>
                 (u.IsDeleted == null || u.IsDeleted == false)
-                && u.Status != "Expired"
-                && !RevokedUpliftStatuses.Contains(u.Status)
                 && u.Dispatch != null
                 && (u.Dispatch.IsDeleted == null || u.Dispatch.IsDeleted == false)
                 && (
                     u.Dispatch.WorkOrderId == w.Id
                     || u.Dispatch.DispatchWorkOrders!.Any(link => link.WorkOrderId == w.Id))
-                && (mappedStatuses.Count == 0 || mappedStatuses.Contains(u.Status))));
+                && ((anyLive && !nonLive.Contains(u.Status))
+                    || (!anyLive && mappedStatuses.Contains(u.Status)))));
         }
 
         internal static List<string> MapUpliftStatuses(IReadOnlyList<string>? upliftStatuses)
@@ -166,6 +163,14 @@ namespace SeaHaven.DataServices.Helpers
                         mapped.Add("Rejected");
                         mapped.Add("Denied");
                         break;
+                    case "cancelled":
+                        mapped.Add("Withdrawn");
+                        mapped.Add("Cancelled");
+                        mapped.Add("Expired");
+                        break;
+                    case "revoked":
+                        mapped.Add("Revoked");
+                        break;
                 }
             }
 
diff --git a/SeaHavenIndustries.Tests/WorkOrderUpliftLiveStatusRelationalTests.cs b/SeaHavenIndustries.Tests/WorkOrderUpliftLiveStatusRelationalTests.cs
new file mode 100644
index 0000000..d1f3032
--- /dev/null
+++ b/SeaHavenIndustries.Tests/WorkOrderUpliftLiveStatusRelationalTests.cs
@@ -0,0 +1,162 @@
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using Microsoft.Data.Sqlite;
+using Microsoft.EntityFrameworkCore;
+using SeaHaven.DataServices.Implementation;
+using SeaHaven.DataServices.Interfaces;
+
+namespace SeaHavenIndustries.Tests;
+
+// Relational (SQLite) coverage for the live-uplift predicate. The in-memory provider
+// evaluates LINQ in memory and cannot prove the "Has uplift" filter or the board uplift
+// aggregate translate to SQL, so this runs the advanced search against a real provider,
+// scoped to one account, with a live uplift on another account's work order.
+public sealed class WorkOrderUpliftLiveStatusRelationalTests
+{
+    [Fact]
+    public async Task AdvancedSearch_HasUplift_CountsOnlyLiveUpliftsWithinAccount()
+    {
+        await using var connection = new SqliteConnection("DataSource=:memory:");
+        await connection.OpenAsync();
+
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseSqlite(connection)
+            .Options;
+
+        await using var context = new SqliteLiveUpliftTestDbContext(options);
+        await context.Database.EnsureCreatedAsync();
+
+        var accountA = new Accounts { Name = "Account A" };
+        var accountB = new Accounts { Name = "Account B" };
+        var vendor = new Vendor { CompanyName = "Acme HVAC", IsActive = true };
+        context.AddRange(accountA, accountB, vendor);
+        await context.SaveChangesAsync();
+
+        var revokedOnly = NewWorkOrder("WO-REVOKED", accountA.Id);
+        var cancelledOnly = NewWorkOrder("WO-CANCELLED", accountA.Id);
+        var revokedPlusPending = NewWorkOrder("WO-MIXED", accountA.Id);
+        var otherAccountPending = NewWorkOrder("WO-OTHER", accountB.Id);
+        context.AddRange(revokedOnly, cancelledOnly, revokedPlusPending, otherAccountPending);
+        await context.SaveChangesAsync();
+
+        var revokedDispatch = new Dispatch { VendorId = vendor.Id, DispatchNumber = "DIS-R", Status = "Scheduled" };
+        var cancelledDispatch = new Dispatch { VendorId = vendor.Id, WorkOrderId = cancelledOnly.Id, DispatchNumber = "DIS-C", Status = "Scheduled" };
+        var mixedDispatch = new Dispatch { VendorId = vendor.Id, WorkOrderId = revokedPlusPending.Id, DispatchNumber = "DIS-M", Status = "Scheduled" };
+        var mixedPendingDispatch = new Dispatch { VendorId = vendor.Id, WorkOrderId = revokedPlusPending.Id, DispatchNumber = "DIS-M2", Status = "Scheduled" };
+        var otherDispatch = new Dispatch { VendorId = vendor.Id, WorkOrderId = otherAccountPending.Id, DispatchNumber = "DIS-O", Status = "Scheduled" };
+        context.Dispatches.AddRange(revokedDispatch, cancelledDispatch, mixedDispatch, mixedPendingDispatch, otherDispatch);
+        await context.SaveChangesAsync();
+
+        // The revoked-only work order reaches its uplift through a multi-WO dispatch link.
+        context.DispatchWorkOrders.Add(new DispatchWorkOrder { DispatchId = revokedDispatch.Id, WorkOrderId = revokedOnly.Id });
+        context.DispatchUpliftRequests.AddRange(
+            NewUplift(revokedDispatch.Id, "Revoked", new DateTime(2026, 6, 20, 9, 0, 0)),
+            NewUplift(cancelledDispatch.Id, "Withdrawn", new DateTime(2026, 6, 20, 9, 0, 0)),
+            NewUplift(mixedDispatch.Id, "Revoked", new DateTime(2026, 6, 20, 9, 0, 0)),
+            NewUplift(mixedPendingDispatch.Id, "Pending", new DateTime(2026, 6, 20, 11, 0, 0)),
+            NewUplift(otherDispatch.Id, "Pending", new DateTime(2026, 6, 20, 9, 0, 0)));
+        await context.SaveChangesAsync();
+
+        var data = new WorkOrderAdvancedSearchDataService(context);
+
+        var hasUplift = await data.SearchAsync(Query(accountA.Id, hasUplift: true, upliftStatuses: null));
+        var row = Assert.Single(hasUplift.Rows);
+        Assert.Equal(revokedPlusPending.Id, row.Id);
+        Assert.True(row.HasUplift);
+        Assert.Equal("Pending", row.PrimaryUpliftStatus);
+
+        var revoked = await data.SearchAsync(Query(accountA.Id, hasUplift: true, upliftStatuses: new[] { "revoked" }));
+        Assert.Equal(
+            new[] { revokedOnly.Id, revokedPlusPending.Id }.OrderBy(id => id),
+            revoked.Rows.Select(r => r.Id).OrderBy(id => id));
+
+        var all = await data.SearchAsync(Query(accountA.Id, hasUplift: false, upliftStatuses: null));
+        Assert.Equal(3, all.TotalCount);
+        Assert.DoesNotContain(all.Rows, r => r.Id == otherAccountPending.Id);
+        Assert.False(all.Rows.Single(r => r.Id == revokedOnly.Id).HasUplift);
+        Assert.Null(all.Rows.Single(r => r.Id == revokedOnly.Id).PrimaryUpliftStatus);
+        Assert.False(all.Rows.Single(r => r.Id == cancelledOnly.Id).HasUplift);
+        Assert.True(all.Rows.Single(r => r.Id == revokedPlusPending.Id).HasUplift);
+    }
+
+    private static WorkOrder NewWorkOrder(string number, int accountId) => new()
+    {
+        InternalWONumber = number,
+        WorkerOrderTitle = "Repair",
+        AccountId = accountId,
+        ScheduledDate = new DateTime(2026, 6, 23, 8, 0, 0),
+        LifecycleStatus = LifecycleStatus.Scheduled,
+    };
+
+    private static DispatchUpliftRequest NewUplift(int dispatchId, string status, DateTime createdDate) => new()
+    {
+        DispatchId = dispatchId,
+        Status = status,
+        CreatedDate = createdDate,
+        RequiredTier = 1,
+        RequestedNTE = 750m,
+        NotificationStatus = "Pending",
+    };
+
+    private static WorkOrderAdvancedSearchQuery Query(
+        int accountId,
+        bool hasUplift,
+        IReadOnlyList<string>? upliftStatuses) => new(
+        Search: null,
+        DateFrom: new DateOnly(2026, 6, 22),
+        DateTo: new DateOnly(2026, 6, 28),
+        UnscheduledOnly: false,
+        Sites: null,
+        Regions: null,
+        Types: null,
+        Overdue: false,
+        Dispatchers: null,
+        Statuses: null,
+        PmTypes: null,
+        VendorIds: null,
+        DocStatuses: null,
+        Severities: null,
+        Rescheduled: false,
+        CarriedOver: false,
+        AddOn: false,
+        AvetaOnly: false,
+        FlagColors: null,
+        InternalOnly: false,
+        HasUplift: hasUplift,
+        UpliftStatuses: upliftStatuses,
+        MyWorkOrders: false,
+        CurrentUserId: null,
+        Page: 0,
+        PageSize: 50,
+        SortBy: "scheduledDate",
+        SortDir: "asc",
+        AccountId: accountId);
+
+    private sealed class SqliteLiveUpliftTestDbContext : ApplicationDbContext
+    {
+        public SqliteLiveUpliftTestDbContext(DbContextOptions<ApplicationDbContext> options)
+            : base(options)
+        {
+        }
+
+        protected override void OnModelCreating(ModelBuilder builder)
+        {
+            base.OnModelCreating(builder);
+
+            // SQL Server filtered index syntax is invalid on SQLite.
+            foreach (var index in builder.Model.GetEntityTypes().SelectMany(e => e.GetIndexes()))
+            {
+                if (index.GetFilter() != null)
+                    index.SetFilter(null);
+            }
+
+            // SQLite has no rowversion type; treat as plain nullable blobs.
+            foreach (var entityType in new[] { typeof(WorkOrder), typeof(Dispatch) })
+            {
+                var property = builder.Entity(entityType).Property("RowVersion").Metadata;
+                property.ValueGenerated = Microsoft.EntityFrameworkCore.Metadata.ValueGenerated.Never;
+                property.IsConcurrencyToken = false;
+            }
+        }
+    }
+}
diff --git a/SeaHavenIndustries.Tests/WorkOrderUpliftLiveStatusTests.cs b/SeaHavenIndustries.Tests/WorkOrderUpliftLiveStatusTests.cs
new file mode 100644
index 0000000..0370751
--- /dev/null
+++ b/SeaHavenIndustries.Tests/WorkOrderUpliftLiveStatusTests.cs
@@ -0,0 +1,266 @@
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using Microsoft.EntityFrameworkCore;
+using SeaHaven.DataServices.Helpers;
+using SeaHaven.DataServices.Implementation;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Helpers;
+using SeaHaven.Services.Implementation;
+
+namespace SeaHavenIndustries.Tests;
+
+/// <summary>
+/// "Has uplift" (advanced filter) and the board Uplift column count only live uplifts:
+/// a work order whose uplifts were all cancelled, withdrawn, expired or revoked has none.
+/// </summary>
+public class WorkOrderUpliftLiveStatusTests
+{
+    private static readonly DateOnly WeekStart = new(2026, 6, 22);
+
+    private const int WithdrawnOnly = 1;
+    private const int LegacyCancelledOnly = 2;
+    private const int RevokedOnlyViaLink = 3;
+    private const int RevokedPlusPending = 4;
+    private const int RejectedOnly = 5;
+    private const int ExpiredOnly = 6;
+    private const int NoUplift = 7;
+    private const int NewerRevokedOlderAutoApproved = 8;
+
+    private static readonly int[] LiveUpliftWorkOrders =
+    {
+        RevokedPlusPending,
+        RejectedOnly,
+        NewerRevokedOlderAutoApproved,
+    };
+
+    private static ApplicationDbContext CreateContext()
+    {
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseInMemoryDatabase(Guid.NewGuid().ToString())
+            .Options;
+        return new ApplicationDbContext(options);
+    }
+
+    private static async Task<ApplicationDbContext> SeedAsync()
+    {
+        var context = CreateContext();
+        context.Vendors.Add(new Vendor { Id = 1, CompanyName = "Acme HVAC" });
+
+        for (var id = WithdrawnOnly; id <= NewerRevokedOlderAutoApproved; id++)
+        {
+            // The revoked-only work order reaches its uplift through a multi-WO dispatch link.
+            var linkedOnly = id == RevokedOnlyViaLink;
+            context.Dispatches.Add(new Dispatch
+            {
+                Id = 10 + id,
+                VendorId = 1,
+                WorkOrderId = linkedOnly ? null : id,
+            });
+            if (linkedOnly)
+                context.DispatchWorkOrders.Add(new DispatchWorkOrder { DispatchId = 10 + id, WorkOrderId = id });
+
+            context.workOrders.Add(new WorkOrder
+            {
+                Id = id,
+                InternalWONumber = $"1000000000{id}",
+                ScheduledDate = new DateTime(2026, 6, 23),
+                LifecycleStatus = LifecycleStatus.Scheduled,
+                PrimaryDispatchId = linkedOnly ? null : 10 + id,
+            });
+        }
+
+        var older = new DateTime(2026, 6, 20, 9, 0, 0, DateTimeKind.Utc);
+        var newer = older.AddHours(2);
+        context.DispatchUpliftRequests.AddRange(
+            Uplift(101, WithdrawnOnly, "Withdrawn", older),
+            Uplift(102, LegacyCancelledOnly, "Cancelled", older),
+            Uplift(103, RevokedOnlyViaLink, "Revoked", older),
+            Uplift(104, RevokedPlusPending, "Revoked", older),
+            Uplift(105, RevokedPlusPending, "Pending", newer),
+            Uplift(106, RejectedOnly, "Rejected", older),
+            Uplift(107, ExpiredOnly, "Expired", older),
+            Uplift(108, NewerRevokedOlderAutoApproved, "NoApprovalRequired", older),
+            Uplift(109, NewerRevokedOlderAutoApproved, "Revoked", newer));
+
+        await context.SaveChangesAsync();
+        return context;
+    }
+
+    private static DispatchUpliftRequest Uplift(int id, int workOrderId, string status, DateTime createdDate) => new()
+    {
+        Id = id,
+        DispatchId = 10 + workOrderId,
+        RequestedNTE = 1000m + id,
+        Status = status,
+        RequiredTier = 1,
+        NotificationStatus = "Pending",
+        CreatedDate = createdDate,
+    };
+
+    private static async Task<int[]> SearchIdsAsync(
+        ApplicationDbContext context,
+        bool hasUplift,
+        List<string>? upliftStatuses = null)
+    {
+        var service = new WorkOrderAdvancedSearchService(
+            new WorkOrderAdvancedSearchDataService(context),
+            WorkOrderAccountTestHelpers.Resolver(context));
+
+        var result = await service.SearchAsync(
+            new WorkOrderAdvancedSearchQueryDto
+            {
+                DatePreset = WorkOrderAdvancedSearchDatePreset.Custom,
+                DateFrom = WeekStart,
+                DateTo = WeekStart.AddDays(6),
+                HasUplift = hasUplift,
+                UpliftStatuses = upliftStatuses,
+                PageSize = 50,
+            },
+            WorkOrderAccountTestHelpers.OrgWideAdmin(),
+            null);
+
+        return result.Items.Select(i => i.Id).OrderBy(id => id).ToArray();
+    }
+
+    [Fact]
+    public async Task HasUplift_ExcludesWorkOrdersWhoseOnlyUpliftsAreCancelledOrRevoked()
+    {
+        await using var context = await SeedAsync();
+
+        var ids = await SearchIdsAsync(context, hasUplift: true);
+
+        Assert.Equal(LiveUpliftWorkOrders, ids);
+        Assert.DoesNotContain(WithdrawnOnly, ids);
+        Assert.DoesNotContain(LegacyCancelledOnly, ids);
+        Assert.DoesNotContain(RevokedOnlyViaLink, ids);
+        Assert.DoesNotContain(ExpiredOnly, ids);
+    }
+
+    [Fact]
+    public async Task HasUplift_IncludesWorkOrderWithRevokedAndPendingUplift()
+    {
+        await using var context = await SeedAsync();
+
+        Assert.Contains(RevokedPlusPending, await SearchIdsAsync(context, hasUplift: true));
+        Assert.Equal(
+            new[] { RevokedPlusPending },
+            await SearchIdsAsync(context, hasUplift: true, new List<string> { "pending" }));
+    }
+
+    [Fact]
+    public async Task HasUplift_RejectedUpliftStillCounts()
+    {
+        await using var context = await SeedAsync();
+
+        Assert.Equal(
+            new[] { RejectedOnly },
+            await SearchIdsAsync(context, hasUplift: true, new List<string> { "rejected" }));
+    }
+
+    [Fact]
+    public async Task HasUplift_ExplicitCancelledStatus_FindsCancelledWithdrawnAndExpiredUplifts()
+    {
+        await using var context = await SeedAsync();
+
+        var ids = await SearchIdsAsync(context, hasUplift: true, new List<string> { "cancelled" });
+
+        Assert.Equal(new[] { WithdrawnOnly, LegacyCancelledOnly, ExpiredOnly }, ids);
+    }
+
+    [Fact]
+    public async Task HasUplift_ExplicitRevokedStatus_FindsRevokedUpliftsOnPrimaryAndLinkedDispatches()
+    {
+        await using var context = await SeedAsync();
+
+        var ids = await SearchIdsAsync(context, hasUplift: true, new List<string> { "revoked" });
+
+        Assert.Equal(new[] { RevokedOnlyViaLink, RevokedPlusPending, NewerRevokedOlderAutoApproved }, ids);
+    }
+
+    [Fact]
+    public async Task BoardUpliftColumn_AgreesWithHasUpliftFilter()
+    {
+        await using var context = await SeedAsync();
+        var filtered = await SearchIdsAsync(context, hasUplift: true);
+
+        var boardService = new WorkOrderBoardService(
+            new WorkOrderBoardDataService(context),
+            WorkOrderAccountTestHelpers.Resolver(context));
+        var board = await boardService.GetBoardAsync(
+            new WorkOrderBoardQueryDto { WeekStart = WeekStart },
+            WorkOrderAccountTestHelpers.OrgWideAdmin(),
+            null);
+
+        Assert.Equal(8, board.Scheduled.Count);
+        foreach (var row in board.Scheduled)
+        {
+            Assert.Equal(filtered.Contains(row.Id), row.UpliftSummary!.HasUplift);
+        }
+
+        var searchService = new WorkOrderAdvancedSearchService(
+            new WorkOrderAdvancedSearchDataService(context),
+            WorkOrderAccountTestHelpers.Resolver(context));
+        var unfiltered = await searchService.SearchAsync(
+            new WorkOrderAdvancedSearchQueryDto
+            {
+                DatePreset = WorkOrderAdvancedSearchDatePreset.Custom,
+                DateFrom = WeekStart,
+                DateTo = WeekStart.AddDays(6),
+                PageSize = 50,
+            },
+            WorkOrderAccountTestHelpers.OrgWideAdmin(),
+            null);
+        Assert.Equal(8, unfiltered.Items.Count());
+        foreach (var item in unfiltered.Items)
+        {
+            Assert.Equal(filtered.Contains(item.Id), item.UpliftSummary!.HasUplift);
+        }
+    }
+
+    [Fact]
+    public async Task BoardUpliftColumn_ShowsNewestLiveUpliftAndNoStatusForNonLiveOnly()
+    {
+        await using var context = await SeedAsync();
+
+        var boardService = new WorkOrderBoardService(
+            new WorkOrderBoardDataService(context),
+            WorkOrderAccountTestHelpers.Resolver(context));
+        var board = await boardService.GetBoardAsync(
+            new WorkOrderBoardQueryDto { WeekStart = WeekStart },
+            WorkOrderAccountTestHelpers.OrgWideAdmin(),
+            null);
+        var byId = board.Scheduled.ToDictionary(r => r.Id, r => r.UpliftSummary!);
+
+        foreach (var id in new[] { WithdrawnOnly, LegacyCancelledOnly, RevokedOnlyViaLink, ExpiredOnly, NoUplift })
+        {
+            Assert.False(byId[id].HasUplift);
+            Assert.Null(byId[id].PrimaryStatus);
+            Assert.Null(byId[id].Amount);
+        }
+
+        Assert.Equal("pending", byId[RevokedPlusPending].PrimaryStatus);
+        Assert.Equal(1, byId[RevokedPlusPending].PendingCount);
+        Assert.Equal("rejected", byId[RejectedOnly].PrimaryStatus);
+        Assert.Equal("auto_approved", byId[NewerRevokedOlderAutoApproved].PrimaryStatus);
+        Assert.Equal(1108m, byId[NewerRevokedOlderAutoApproved].Amount);
+    }
+
+    [Theory]
+    [InlineData(UpliftStatus.Pending)]
+    [InlineData(UpliftStatus.Approved)]
+    [InlineData(UpliftStatus.Rejected)]
+    [InlineData(UpliftStatus.ChangesRequested)]
+    [InlineData(UpliftStatus.Withdrawn)]
+    [InlineData(UpliftStatus.Expired)]
+    [InlineData(UpliftStatus.NoApprovalRequired)]
+    [InlineData(UpliftStatus.Revoked)]
+    [InlineData(UpliftStatus.LegacyDenied)]
+    [InlineData(UpliftStatus.LegacyCancelled)]
+    public void LiveUpliftStatus_MatchesFrontendCancelledAndRevokedStatuses(string storedStatus)
+    {
+        var frontendStatus = WorkOrderUpliftContractMapper.ToFrontendStatus(storedStatus);
+        var expectedLive = frontendStatus is not ("cancelled" or "revoked");
+
+        Assert.Equal(expectedLive, LiveUpliftStatus.IsLive(storedStatus));
+    }
+}

From c860936d07c2a7936c96f8933180b20f0e3e6a92 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 17:52:14 -0300
Subject: [PATCH 169/183] test(auth): give the reset test host's helpers names
 of their own

---
 .../PasswordResetTestHost.cs                  | 22 +++++++++----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/SeaHavenIndustries.Tests/PasswordResetTestHost.cs b/SeaHavenIndustries.Tests/PasswordResetTestHost.cs
index e44f2df..323453f 100644
--- a/SeaHavenIndustries.Tests/PasswordResetTestHost.cs
+++ b/SeaHavenIndustries.Tests/PasswordResetTestHost.cs
@@ -43,9 +43,9 @@ internal sealed class PasswordResetTestHost : IAsyncDisposable
     }
 
     public HttpClient Client { get; }
-    public CapturingEmailSender Sent { get; private init; } = null!;
-    public ManualTimeProvider Time { get; private init; } = null!;
-    public CapturingLoggerProvider Logged { get; private init; } = null!;
+    public ResetEmailOutbox Sent { get; private init; } = null!;
+    public ResetTestClock Time { get; private init; } = null!;
+    public ResetLogCapture Logged { get; private init; } = null!;
     public IServiceProvider Services => _app.Services;
 
     public static async Task<PasswordResetTestHost> StartAsync(IEmailSender? emailSender = null, Action<IServiceCollection>? configureServices = null)
@@ -53,9 +53,9 @@ internal sealed class PasswordResetTestHost : IAsyncDisposable
         var databasePath = Path.Combine(Path.GetTempPath(), $"password-reset-{Guid.NewGuid():N}.db");
         var connectionString = new SqliteConnectionStringBuilder { DataSource = databasePath, DefaultTimeout = 30 }.ToString();
 
-        var sent = new CapturingEmailSender();
-        var time = new ManualTimeProvider();
-        var logged = new CapturingLoggerProvider();
+        var sent = new ResetEmailOutbox();
+        var time = new ResetTestClock();
+        var logged = new ResetLogCapture();
 
         var builder = WebApplication.CreateBuilder(new WebApplicationOptions { EnvironmentName = "Testing" });
         builder.WebHost.UseUrls("http://127.0.0.1:0");
@@ -234,7 +234,7 @@ internal sealed class PasswordResetTestHost : IAsyncDisposable
     }
 }
 
-internal sealed class ManualTimeProvider : TimeProvider
+internal sealed class ResetTestClock : TimeProvider
 {
     private DateTimeOffset _now = new(2026, 9, 25, 12, 0, 0, TimeSpan.Zero);
 
@@ -243,7 +243,7 @@ internal sealed class ManualTimeProvider : TimeProvider
     public void Advance(TimeSpan by) => _now = _now.Add(by);
 }
 
-internal sealed class CapturingEmailSender : IEmailSender
+internal sealed class ResetEmailOutbox : IEmailSender
 {
     private static readonly Regex CodePattern = new(@"Your Password Reset Code is: (\d{6})", RegexOptions.CultureInvariant);
 
@@ -262,7 +262,7 @@ internal sealed class CapturingEmailSender : IEmailSender
     }
 }
 
-internal sealed class CapturingLoggerProvider : ILoggerProvider
+internal sealed class ResetLogCapture : ILoggerProvider
 {
     public ConcurrentQueue<string> Lines { get; } = new();
 
@@ -274,10 +274,10 @@ internal sealed class CapturingLoggerProvider : ILoggerProvider
 
     private sealed class CapturingLogger : ILogger
     {
-        private readonly CapturingLoggerProvider _owner;
+        private readonly ResetLogCapture _owner;
         private readonly string _category;
 
-        public CapturingLogger(CapturingLoggerProvider owner, string category)
+        public CapturingLogger(ResetLogCapture owner, string category)
         {
             _owner = owner;
             _category = category;

From 185c84dd8cdd78cf55a83a2ec1f4e06cda96de61 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 18:07:33 -0300
Subject: [PATCH 170/183] fix(uplifts): refuse admin revoke of an auto-approved
 uplift

An admin revoke overturns a human decision, so admins may revoke only
admin-approved uplifts. The work-order revoke path let an admin revoke an
auto-approved uplift they had requested themselves. Both revoke endpoints
now refuse it; dispatchers keep revoking their own auto-approved uplifts.
---
 .../UpliftRevokeEndpointRulesTests.cs         | 276 ++++++++++++++++++
 .../Implementation/WorkOrderUpliftService.cs  |   5 +
 .../WorkOrderUpliftDispatchOwnershipTests.cs  |   2 +-
 .../WorkOrderUpliftServiceTests.cs            |  40 ++-
 4 files changed, 319 insertions(+), 4 deletions(-)
 create mode 100644 Api.SeaHavenIndustries.Tests/UpliftRevokeEndpointRulesTests.cs

diff --git a/Api.SeaHavenIndustries.Tests/UpliftRevokeEndpointRulesTests.cs b/Api.SeaHavenIndustries.Tests/UpliftRevokeEndpointRulesTests.cs
new file mode 100644
index 0000000..41a45df
--- /dev/null
+++ b/Api.SeaHavenIndustries.Tests/UpliftRevokeEndpointRulesTests.cs
@@ -0,0 +1,276 @@
+using System.Security.Claims;
+using Api.SeaHavenIndustries.Controllers;
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using FluentAssertions;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Logging;
+using Moq;
+using SeaHaven.DataServices.Implementation;
+using SeaHaven.Services.Configuration;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Helpers;
+using SeaHaven.Services.Implementation;
+using SeaHaven.Services.Interfaces;
+using Xunit;
+
+namespace Api.SeaHavenIndustries.Tests;
+
+/// <summary>
+/// Revoke rules exercised end to end through both revoke endpoints (the Uplift
+/// Approvals route and the work-order route) against the real services, so a
+/// refusal is observed as the HTTP result and the unchanged stored state.
+/// </summary>
+public sealed class UpliftRevokeEndpointRulesTests
+{
+    private const int WorkOrderId = 1;
+    private const int DispatchId = 10;
+    private const int AutoApprovedId = 100;
+    private const int AdminApprovedId = 101;
+
+    public enum RevokeRoute
+    {
+        UpliftApprovals,
+        WorkOrder,
+    }
+
+    private static ApplicationDbContext CreateContext()
+    {
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseInMemoryDatabase(Guid.NewGuid().ToString())
+            .Options;
+        return new ApplicationDbContext(options);
+    }
+
+    private static ClaimsPrincipal OrgWideUser(string userId, string role) =>
+        new(new ClaimsIdentity(
+            new[]
+            {
+                new Claim(ClaimTypes.NameIdentifier, userId),
+                new Claim(ClaimTypes.Role, role),
+                new Claim(SeaHavenClaimTypes.OrgScope, SeaHavenClaimTypes.OrgScopeAll),
+            },
+            "test"));
+
+    private static async Task SeedAsync(ApplicationDbContext context)
+    {
+        context.Accounts.Add(new Accounts { Id = 1, Name = "Acme Corp", IsDeleted = false });
+        context.Users.Add(new ApplicationUser { Id = "admin-1", UserName = "admin-1", FirstName = "Ada", LastName = "Admin" });
+        context.Users.Add(new ApplicationUser { Id = "dispatcher-1", UserName = "dispatcher-1", FirstName = "Dee", LastName = "Dispatcher" });
+        context.Vendors.Add(new Vendor { Id = 1, CompanyName = "Acme HVAC" });
+        context.Dispatches.Add(new Dispatch
+        {
+            Id = DispatchId,
+            VendorId = 1,
+            WorkOrderId = WorkOrderId,
+            NTEAmount = 2200m,
+            DispatchNumber = "DIS-10",
+            Status = "Scheduled",
+        });
+        context.workOrders.Add(new WorkOrder
+        {
+            Id = WorkOrderId,
+            InternalWONumber = "10000000001",
+            PrimaryDispatchId = DispatchId,
+            AccountId = 1,
+            WorkOrderType = WorkOrderType.PM,
+            LifecycleStatus = LifecycleStatus.Scheduled,
+        });
+        // The admin filed this one themselves and it auto-approved within the allowance.
+        context.DispatchUpliftRequests.Add(new DispatchUpliftRequest
+        {
+            Id = AutoApprovedId,
+            DispatchId = DispatchId,
+            CurrentNTE = 1000m,
+            RequestedNTE = 400m,
+            Status = UpliftStatus.NoApprovalRequired,
+            RequiredTier = 0,
+            NotificationStatus = "Sent",
+            createdby = "admin-1",
+            CreatedDate = DateTime.UtcNow.AddHours(-2),
+        });
+        context.DispatchUpliftRequests.Add(new DispatchUpliftRequest
+        {
+            Id = AdminApprovedId,
+            DispatchId = DispatchId,
+            CurrentNTE = 1400m,
+            RequestedNTE = 800m,
+            Status = UpliftStatus.Approved,
+            RequiredTier = 1,
+            NotificationStatus = "Sent",
+            createdby = "dispatcher-1",
+            CreatedDate = DateTime.UtcNow.AddHours(-1),
+            DecidedAt = DateTime.UtcNow.AddMinutes(-30),
+            DecidedByUserId = "admin-1",
+        });
+        await context.SaveChangesAsync();
+    }
+
+    private static WorkOrderUpliftService NewWorkOrderUpliftService(ApplicationDbContext context) =>
+        new(
+            new UpliftDataService(context),
+            new DispatchDataService(context),
+            new WorkOrderDetailDataService(context),
+            new WorkOrderAccountResolver(new AccountDataService(context), new LocationDataService(context)),
+            new UserDataService(context),
+            new TeamPermissionOverrideDataService(context),
+            new TeamPermissionPolicy(),
+            TimeProvider.System,
+            Microsoft.Extensions.Options.Options.Create(new ApprovalsOptions()));
+
+    private static async Task<IActionResult> RevokeAsync(
+        ApplicationDbContext context,
+        RevokeRoute route,
+        ClaimsPrincipal user,
+        int upliftId,
+        string? reason)
+    {
+        var workOrderFlow = NewWorkOrderUpliftService(context);
+        var httpContext = new DefaultHttpContext { User = user };
+
+        if (route == RevokeRoute.WorkOrder)
+        {
+            var controller = new WorkOrderDetailController(
+                Mock.Of<IWorkOrderDetailService>(),
+                Mock.Of<IWorkOrderCommentService>(),
+                workOrderFlow,
+                Mock.Of<ILogger<WorkOrderDetailController>>())
+            {
+                ControllerContext = new ControllerContext { HttpContext = httpContext },
+            };
+            return await controller.RevokeUplift(
+                WorkOrderId,
+                upliftId,
+                new RevokeWorkOrderUpliftRequestDto { Reason = reason },
+                CancellationToken.None);
+        }
+
+        var upliftService = new UpliftService(
+            new UpliftDataService(context),
+            new DispatchDataService(context),
+            Mock.Of<IVendorDocumentStoragePort>(),
+            TimeProvider.System,
+            Microsoft.Extensions.Options.Options.Create(new ApprovalsOptions()),
+            workOrderFlow);
+        var approvals = new UpliftController(upliftService, Mock.Of<ILogger<UpliftController>>())
+        {
+            ControllerContext = new ControllerContext { HttpContext = httpContext },
+        };
+        return await approvals.Revoke(
+            upliftId,
+            new UpliftController.DecisionRequest { Note = reason },
+            CancellationToken.None);
+    }
+
+    private static async Task AssertUnchangedAsync(ApplicationDbContext context, int upliftId, string status)
+    {
+        var stored = await context.DispatchUpliftRequests.AsNoTracking().SingleAsync(u => u.Id == upliftId);
+        stored.Status.Should().Be(status);
+        stored.DecisionNote.Should().BeNull();
+        (await context.Dispatches.AsNoTracking().SingleAsync(d => d.Id == DispatchId)).NTEAmount.Should().Be(2200m);
+        (await context.WorkOrderAuditLogs.AsNoTracking().AnyAsync(a => a.Action == "uplift_revoke")).Should().BeFalse();
+    }
+
+    [Fact]
+    public async Task WorkOrderRoute_AdminRevokingAutoApprovedUpliftTheyRequested_IsForbiddenAndChangesNothing()
+    {
+        await using var context = CreateContext();
+        await SeedAsync(context);
+
+        var result = await RevokeAsync(
+            context,
+            RevokeRoute.WorkOrder,
+            OrgWideUser("admin-1", "Admin"),
+            AutoApprovedId,
+            "Wrong quote attached");
+
+        var refused = result.Should().BeOfType<ObjectResult>().Subject;
+        refused.StatusCode.Should().Be(StatusCodes.Status403Forbidden);
+        refused.Value.Should().BeOfType<Response>().Which.Message
+            .Should().StartWith("You are not authorized to perform this action");
+        await AssertUnchangedAsync(context, AutoApprovedId, UpliftStatus.NoApprovalRequired);
+    }
+
+    [Fact]
+    public async Task ApprovalsRoute_AdminRevokingAutoApprovedUplift_IsRefusedAndChangesNothing()
+    {
+        await using var context = CreateContext();
+        await SeedAsync(context);
+
+        var result = await RevokeAsync(
+            context,
+            RevokeRoute.UpliftApprovals,
+            OrgWideUser("admin-1", "Admin"),
+            AutoApprovedId,
+            "Wrong quote attached");
+
+        var refused = result.Should().BeOfType<BadRequestObjectResult>().Subject;
+        refused.Value.Should().BeOfType<Response>().Which.Message
+            .Should().StartWith("This uplift request cannot be revoked");
+        await AssertUnchangedAsync(context, AutoApprovedId, UpliftStatus.NoApprovalRequired);
+    }
+
+    [Theory]
+    [InlineData(RevokeRoute.UpliftApprovals)]
+    [InlineData(RevokeRoute.WorkOrder)]
+    public async Task AdminRevokingAdminApprovedUpliftWithReason_Succeeds(RevokeRoute route)
+    {
+        await using var context = CreateContext();
+        await SeedAsync(context);
+
+        var result = await RevokeAsync(
+            context,
+            route,
+            OrgWideUser("admin-1", "Admin"),
+            AdminApprovedId,
+            "  Approved against the wrong quote  ");
+
+        result.Should().BeOfType<OkObjectResult>();
+        var stored = await context.DispatchUpliftRequests.AsNoTracking().SingleAsync(u => u.Id == AdminApprovedId);
+        stored.Status.Should().Be(UpliftStatus.Revoked);
+        stored.DecisionNote.Should().Be("Approved against the wrong quote");
+        (await context.Dispatches.AsNoTracking().SingleAsync(d => d.Id == DispatchId)).NTEAmount.Should().Be(1400m);
+        var audit = await context.WorkOrderAuditLogs.AsNoTracking().SingleAsync(a => a.Action == "uplift_revoke");
+        audit.OldValue.Should().Be(UpliftStatus.Approved);
+        audit.NewValue.Should().Be(UpliftStatus.Revoked);
+    }
+
+    [Theory]
+    [InlineData(RevokeRoute.UpliftApprovals)]
+    [InlineData(RevokeRoute.WorkOrder)]
+    public async Task AdminRevokingAdminApprovedUpliftWithoutReason_IsRefused(RevokeRoute route)
+    {
+        await using var context = CreateContext();
+        await SeedAsync(context);
+
+        var result = await RevokeAsync(context, route, OrgWideUser("admin-1", "Admin"), AdminApprovedId, "   ");
+
+        result.Should().BeOfType<BadRequestObjectResult>();
+        await AssertUnchangedAsync(context, AdminApprovedId, UpliftStatus.Approved);
+    }
+
+    [Fact]
+    public async Task WorkOrderRoute_DispatcherRevokingOwnAutoApprovedUpliftWithoutReason_Succeeds()
+    {
+        await using var context = CreateContext();
+        await SeedAsync(context);
+        var own = await context.DispatchUpliftRequests.SingleAsync(u => u.Id == AutoApprovedId);
+        own.createdby = "dispatcher-1";
+        await context.SaveChangesAsync();
+
+        var result = await RevokeAsync(
+            context,
+            RevokeRoute.WorkOrder,
+            OrgWideUser("dispatcher-1", "Dispatcher"),
+            AutoApprovedId,
+            null);
+
+        result.Should().BeOfType<OkObjectResult>();
+        var stored = await context.DispatchUpliftRequests.AsNoTracking().SingleAsync(u => u.Id == AutoApprovedId);
+        stored.Status.Should().Be(UpliftStatus.Revoked);
+        stored.DecisionNote.Should().BeNull();
+        (await context.Dispatches.AsNoTracking().SingleAsync(d => d.Id == DispatchId)).NTEAmount.Should().Be(1000m);
+    }
+}
diff --git a/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs b/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs
index 0980e0d..87a1834 100644
--- a/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs
@@ -273,6 +273,11 @@ namespace SeaHaven.Services.Implementation
 
             if (canonical == UpliftStatus.NoApprovalRequired)
             {
+                // An admin revoke overturns a human decision, and an auto-approval has none,
+                // so admins are refused here even when they filed the request themselves.
+                if (user.IsInRole("Admin"))
+                    throw new UpliftForbiddenException("Admins can revoke only admin-approved uplifts");
+
                 if (string.IsNullOrWhiteSpace(userId)
                     || !string.Equals(req.createdby, userId, StringComparison.Ordinal))
                 {
diff --git a/SeaHavenIndustries.Tests/WorkOrderUpliftDispatchOwnershipTests.cs b/SeaHavenIndustries.Tests/WorkOrderUpliftDispatchOwnershipTests.cs
index adba1a7..3708240 100644
--- a/SeaHavenIndustries.Tests/WorkOrderUpliftDispatchOwnershipTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderUpliftDispatchOwnershipTests.cs
@@ -212,7 +212,7 @@ public sealed class WorkOrderUpliftDispatchOwnershipTests
             row.Id,
             created!.Id,
             new RevokeWorkOrderUpliftRequestDto(),
-            WorkOrderAccountTestHelpers.AccountUser(),
+            WorkOrderAccountTestHelpers.AccountUser("actor-1", 1, "Dispatcher"),
             CancellationToken.None);
 
         Assert.Equal("revoked", revoked!.Status);
diff --git a/SeaHavenIndustries.Tests/WorkOrderUpliftServiceTests.cs b/SeaHavenIndustries.Tests/WorkOrderUpliftServiceTests.cs
index 390beaf..9685f70 100644
--- a/SeaHavenIndustries.Tests/WorkOrderUpliftServiceTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderUpliftServiceTests.cs
@@ -48,6 +48,11 @@ public sealed class WorkOrderUpliftServiceTests
     private static ClaimsPrincipal Dispatcher(string userId = "dispatcher-1")
         => WorkOrderAccountTestHelpers.OrgWideAdmin(userId);
 
+    // Same user as Dispatcher(), without the Admin role: the only kind of caller that
+    // may revoke an auto-approved uplift, and only their own.
+    private static ClaimsPrincipal DispatcherRoleOnly(string userId = "dispatcher-1")
+        => WorkOrderAccountTestHelpers.AccountUser(userId, 1, "Dispatcher");
+
     private static async Task<(WorkOrder WorkOrder, Dispatch Dispatch)> SeedWorkOrderAsync(
         ApplicationDbContext context,
         WorkOrderType type = WorkOrderType.PM,
@@ -585,7 +590,7 @@ public sealed class WorkOrderUpliftServiceTests
             workOrder.Id,
             created.Id,
             new RevokeWorkOrderUpliftRequestDto(),
-            Dispatcher(),
+            DispatcherRoleOnly(),
             CancellationToken.None);
 
         // SH-196: revoking frees the allowance, so it must release the NTE too. Otherwise
@@ -724,7 +729,7 @@ public sealed class WorkOrderUpliftServiceTests
             workOrder.Id,
             created!.Id,
             new RevokeWorkOrderUpliftRequestDto(),
-            Dispatcher(),
+            DispatcherRoleOnly(),
             CancellationToken.None);
 
         Assert.Equal("revoked", revoked!.Status);
@@ -733,6 +738,35 @@ public sealed class WorkOrderUpliftServiceTests
             .SumAutoApprovedAmountForWorkOrderAsync(workOrder.Id, CancellationToken.None));
     }
 
+    [Fact]
+    public async Task RevokeAsync_AdminOwnerRevokingAutoApproved_IsForbiddenAndKeepsAllowanceConsumed()
+    {
+        await using var context = CreateContext();
+        var (workOrder, _) = await SeedWorkOrderAsync(context);
+        var service = NewService(context);
+
+        var created = await service.CreateAsync(
+            workOrder.Id,
+            new CreateWorkOrderUpliftRequestDto { Amount = 400m, Notes = "Within limit" },
+            Dispatcher(),
+            CancellationToken.None);
+        Assert.Equal("auto_approved", created!.Status);
+
+        await Assert.ThrowsAsync<UpliftForbiddenException>(() => service.RevokeAsync(
+            workOrder.Id,
+            created.Id,
+            new RevokeWorkOrderUpliftRequestDto { Reason = "Wrong quote" },
+            Dispatcher(),
+            CancellationToken.None));
+
+        var stored = context.DispatchUpliftRequests.Single(u => u.Id == created.Id);
+        Assert.Equal(UpliftStatus.NoApprovalRequired, stored.Status);
+        Assert.Null(stored.DecisionNote);
+        Assert.Equal(1400m, context.Dispatches.Single(d => d.Id == 10).NTEAmount);
+        Assert.Equal(400m, await new UpliftDataService(context)
+            .SumAutoApprovedAmountForWorkOrderAsync(workOrder.Id, CancellationToken.None));
+    }
+
     [Theory]
     [InlineData(LifecycleStatus.Completed)]
     [InlineData(LifecycleStatus.Canceled)]
@@ -760,7 +794,7 @@ public sealed class WorkOrderUpliftServiceTests
                 workOrder.Id,
                 100,
                 new RevokeWorkOrderUpliftRequestDto(),
-                Dispatcher(),
+                DispatcherRoleOnly(),
                 CancellationToken.None));
         Assert.Contains("work order", ex.Message, StringComparison.OrdinalIgnoreCase);
     }

From 2f23f6fadca25540e65c5995768c324962b0f2b6 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 18:10:10 -0300
Subject: [PATCH 171/183] test(team-members): register reset email delivery in
 the invite test host

---
 SeaHavenIndustries.Tests/TeamMemberInviteTestHost.cs | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/SeaHavenIndustries.Tests/TeamMemberInviteTestHost.cs b/SeaHavenIndustries.Tests/TeamMemberInviteTestHost.cs
index a2e5a1a..82ec3e7 100644
--- a/SeaHavenIndustries.Tests/TeamMemberInviteTestHost.cs
+++ b/SeaHavenIndustries.Tests/TeamMemberInviteTestHost.cs
@@ -1,6 +1,7 @@
 using System.Collections.Concurrent;
 using System.Security.Claims;
 using System.Text.RegularExpressions;
+using Api.SeaHavenIndustries.HostedServices;
 using Api.SeaHavenIndustries.Infrastructure;
 using Data.SeaHavenIndustries;
 using Microsoft.Data.Sqlite;
@@ -79,6 +80,9 @@ internal sealed class TeamMemberInviteTestHost : IAsyncDisposable
         services.AddSingleton<IEmailSender>(fakes.Sent);
         services.AddDataServices();
         services.AddBusinessServices(configuration);
+        // Registration signs the member in through the authentication service, which
+        // queues password reset email; the API host registers the same delivery.
+        services.AddPasswordResetEmailDelivery();
         configure?.Invoke(services);
         return services.BuildServiceProvider();
     }

From ca9322fa605ad3772be506a9c9a6bfdb37a72d3b Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 18:29:33 -0300
Subject: [PATCH 172/183] fix(auth): queue the reset email only after its code
 is stored

---
 .../AuthenticationServiceTests.cs             | 31 +++++++++++++++----
 .../Implementation/AuthenticationService.cs   | 24 +++++++-------
 2 files changed, 38 insertions(+), 17 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs b/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs
index e64014f..045acea 100644
--- a/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs
@@ -151,7 +151,7 @@ public class AuthenticationServiceTests
     }
 
     [Fact]
-    public async Task ForgetPassword_EmailThatCannotBeQueued_DropsTheCodeAndDoesNotCountTheRequest()
+    public async Task ForgetPassword_EmailThatCannotBeQueued_DoesNotCountTheRequest()
     {
         var user = IdentityTestHelpers.User();
         var userData = new Mock<IUserDataService>();
@@ -175,19 +175,38 @@ public class AuthenticationServiceTests
         for (var request = 0; request < 4; request++)
             await service.ForgetPasswordAsync("alice@example.com", CancellationToken.None);
 
-        // The three undelivered requests did not use up the hourly limit of three.
+        // The three undelivered requests did not use up the hourly limit of three, and every
+        // email carries the code stored just before it was queued.
         email.Verify(e => e.TryEnqueue(user.Email!, It.IsAny<string>(), It.IsAny<string>()), Times.Exactly(4));
         stored.Should().HaveCount(4);
-        for (var request = 0; request < 3; request++)
+        for (var request = 0; request < 4; request++)
         {
             var code = System.Text.RegularExpressions.Regex.Match(bodies[request], @"Your Password Reset Code is: (\d{6})").Groups[1].Value;
-            PasswordResetCodeSecrets.Matches(ResetKey, stored[request].Salt, code, stored[request].Hash).Should().BeFalse();
+            PasswordResetCodeSecrets.Matches(ResetKey, stored[request].Salt, code, stored[request].Hash).Should().BeTrue();
         }
-        var delivered = System.Text.RegularExpressions.Regex.Match(bodies[3], @"Your Password Reset Code is: (\d{6})").Groups[1].Value;
-        PasswordResetCodeSecrets.Matches(ResetKey, stored[3].Salt, delivered, stored[3].Hash).Should().BeTrue();
         forget.Verify(f => f.RemoveByEmailAsync(It.IsAny<string>(), It.IsAny<CancellationToken>()), Times.Never);
     }
 
+    [Theory]
+    [InlineData(false)]
+    [InlineData(true)]
+    public async Task ForgetPassword_WriteThatFailsOrIsCancelled_QueuesNoEmail(bool cancelled)
+    {
+        var user = IdentityTestHelpers.User();
+        var userData = new Mock<IUserDataService>();
+        userData.Setup(u => u.GetByEmailNormalizedAsync(It.IsAny<string>(), It.IsAny<CancellationToken>())).ReturnsAsync(user);
+        var forget = new Mock<IForgetPasswordDataService>();
+        forget.Setup(f => f.ReplaceCodeAsync(It.IsAny<string>(), It.IsAny<string>(), It.IsAny<string>(), It.IsAny<string>(), It.IsAny<DateTime>(), It.IsAny<DateTime>(), It.IsAny<CancellationToken>()))
+            .Returns(Task.FromException(cancelled ? new OperationCanceledException() : new InvalidOperationException("database unavailable")));
+        var email = new Mock<IPasswordResetEmailQueue>();
+        email.Setup(e => e.TryEnqueue(It.IsAny<string>(), It.IsAny<string>(), It.IsAny<string>())).Returns(true);
+
+        var act = () => NewService(userData, forget, email, out _, out _).ForgetPasswordAsync("alice@example.com", CancellationToken.None);
+
+        await act.Should().ThrowAsync<Exception>();
+        email.Verify(e => e.TryEnqueue(It.IsAny<string>(), It.IsAny<string>(), It.IsAny<string>()), Times.Never);
+    }
+
     [Fact]
     public async Task ForgetPassword_EmailThatCannotBeQueued_MakesTheSameDataCallsAsAnUnknownEmail()
     {
diff --git a/SeaHaven.Services/Implementation/AuthenticationService.cs b/SeaHaven.Services/Implementation/AuthenticationService.cs
index fbc7a2e..1b982d0 100644
--- a/SeaHaven.Services/Implementation/AuthenticationService.cs
+++ b/SeaHaven.Services/Implementation/AuthenticationService.cs
@@ -170,12 +170,22 @@ namespace SeaHaven.Services.Implementation
             var hash = PasswordResetCodeSecrets.Hash(ResetCodeKey, salt, code);
             var active = user != null && user.IsDeleted != true && !string.IsNullOrWhiteSpace(user.Email);
 
-            // The request stays counted only once its row is stored. A code that cannot be
-            // emailed is stored unmatchable and not counted, and a failed or cancelled
-            // write is not counted either.
+            // The email is queued only after its code is stored, so a failed or cancelled
+            // write never sends a code that cannot be used. The request stays counted only
+            // when the row is stored and, for an account, its email was queued; when the
+            // queue is full the stored code is left unsent and the user can ask again.
             var counted = false;
             try
             {
+                await _forgetPasswordDataService.ReplaceCodeAsync(
+                    active ? user!.Email! : requested,
+                    active ? user!.Id : string.Empty,
+                    active ? hash : PasswordResetCodeSecrets.NewUnmatchableHash(),
+                    salt,
+                    nowUtc.Add(ResetCodeLifetime),
+                    nowUtc,
+                    cancellationToken);
+
                 var queued = false;
                 if (active)
                 {
@@ -183,14 +193,6 @@ namespace SeaHaven.Services.Implementation
                     queued = _resetEmails.TryEnqueue(user!.Email!, "Forget Password Request.", body);
                 }
 
-                await _forgetPasswordDataService.ReplaceCodeAsync(
-                    active ? user!.Email! : requested,
-                    active ? user!.Id : string.Empty,
-                    queued ? hash : PasswordResetCodeSecrets.NewUnmatchableHash(),
-                    salt,
-                    nowUtc.Add(ResetCodeLifetime),
-                    nowUtc,
-                    cancellationToken);
                 counted = queued || !active;
             }
             finally

From 9bad363930a0cfdb972c1d83437c27e29fbdd137 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 18:37:56 -0300
Subject: [PATCH 173/183] fix(work-orders): cancelling from the board cancels
 the pending uplift

The board and slide-over cancel a work order through the lifecycle status
patch, which set Canceled without touching uplifts, so a pending uplift
stayed in the approval queue. A patch to Canceled now withdraws pending
uplifts in the same save, each with its own uplift_cancel audit entry, and
runs under the per-work-order gate uplift create uses.
---
 .../WorkOrderBoardUpdateService.cs            |  48 +++-
 .../WorkOrderAccountTestHelpers.cs            |  25 ++
 .../WorkOrderBoardCancelServiceTests.cs       |   2 +-
 .../WorkOrderBoardConcurrencyTests.cs         |   2 +-
 .../WorkOrderBoardPatchCancelUpliftTests.cs   | 254 ++++++++++++++++++
 .../WorkOrderBoardPatchLifecycleRulesTests.cs |   5 +-
 .../WorkOrderBoardUpdateServiceTests.cs       |   2 +-
 .../WorkOrderCompletedSelectiveLockTests.cs   |   5 +-
 .../WorkOrderCompletionFreezeTests.cs         |   5 +-
 .../WorkOrderOverdueTypeTests.cs              |   5 +-
 .../WorkOrderPhase6Tests.cs                   |   4 +-
 .../WorkOrderPocServiceTests.cs               |   5 +-
 .../WorkOrderUpliftDispatchOwnershipTests.cs  |   5 +-
 13 files changed, 342 insertions(+), 25 deletions(-)
 create mode 100644 SeaHavenIndustries.Tests/WorkOrderBoardPatchCancelUpliftTests.cs

diff --git a/SeaHaven.Services/Implementation/WorkOrderBoardUpdateService.cs b/SeaHaven.Services/Implementation/WorkOrderBoardUpdateService.cs
index fcd8721..d34c6fb 100644
--- a/SeaHaven.Services/Implementation/WorkOrderBoardUpdateService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderBoardUpdateService.cs
@@ -16,17 +16,23 @@ namespace SeaHaven.Services.Implementation
         private readonly IWorkOrderBoardDataService _boardDataService;
         private readonly IWorkOrderBoardMutationDataService _mutationData;
         private readonly IWorkOrderAuditService _auditService;
+        private readonly IWorkOrderUpliftService _upliftService;
+        private readonly IUpliftDataService _upliftData;
         private readonly IServicesRegistryService? _servicesRegistryService;
 
         public WorkOrderBoardUpdateService(
             IWorkOrderBoardDataService boardDataService,
             IWorkOrderBoardMutationDataService mutationData,
             IWorkOrderAuditService auditService,
+            IWorkOrderUpliftService upliftService,
+            IUpliftDataService upliftData,
             IServicesRegistryService? servicesRegistryService = null)
         {
             _boardDataService = boardDataService;
             _mutationData = mutationData;
             _auditService = auditService;
+            _upliftService = upliftService;
+            _upliftData = upliftData;
             _servicesRegistryService = servicesRegistryService;
         }
 
@@ -35,7 +41,7 @@ namespace SeaHaven.Services.Implementation
             WorkOrderBoardPatchRequestDto request,
             string? actorId)
         {
-            await _mutationData.ExecuteTransactionalAsync(async ct =>
+            Func<CancellationToken, Task> patch = async ct =>
             {
                 if (string.IsNullOrWhiteSpace(request.Field))
                     throw new WorkOrderBoardValidationException("InvalidField", "Field is required.");
@@ -127,7 +133,17 @@ namespace SeaHaven.Services.Implementation
                 }
 
                 var auditField = WorkOrderBoardFieldNames.ToAuditFieldName(canonicalField);
+                var lifecycleBefore = workOrder.LifecycleStatus;
                 var changes = await ApplyFieldMutationAsync(canonicalField, workOrder, dispatch, request.Value, auditField, ct);
+
+                // Cancelling the work order cancels its pending uplift in the same action: the
+                // withdrawal and its own audit entry are staged here and committed by the same
+                // save as the status change.
+                if (lifecycleBefore != LifecycleStatus.Canceled
+                    && workOrder.LifecycleStatus == LifecycleStatus.Canceled)
+                {
+                    await _upliftService.WithdrawPendingForWorkOrderAsync(workOrderId, actorId, ct);
+                }
                 if (resolved is { Created: true, Dispatch: var createdDispatch }
                     && canonicalField.Equals(WorkOrderBoardFieldNames.VendorId, StringComparison.OrdinalIgnoreCase))
                 {
@@ -173,12 +189,40 @@ namespace SeaHaven.Services.Implementation
                 }
 
                 await SaveTrackedOrThrowAsync(workOrderId, ct);
-            }, CancellationToken.None);
+            };
+
+            // A cancel runs under the per-work-order gate uplift create uses, so a create that
+            // is in flight cannot commit a new pending uplift onto the work order being cancelled.
+            if (IsCancelRequest(request))
+            {
+                await _upliftData.ExecuteWorkOrderMutationAsync(
+                    workOrderId,
+                    async ct =>
+                    {
+                        await patch(ct);
+                        return true;
+                    },
+                    CancellationToken.None);
+            }
+            else
+            {
+                await _mutationData.ExecuteTransactionalAsync(patch, CancellationToken.None);
+            }
 
             var row = await LoadBoardRowAsync(workOrderId);
             return row ?? throw new WorkOrderBoardValidationException("NotFound", "Work order not found.");
         }
 
+        private static bool IsCancelRequest(WorkOrderBoardPatchRequestDto request)
+        {
+            if (string.IsNullOrWhiteSpace(request.Field))
+                return false;
+
+            var canonicalField = WorkOrderBoardFieldNames.Canonicalize(request.Field.Trim());
+            return string.Equals(canonicalField, WorkOrderBoardFieldNames.LifecycleStatus, StringComparison.OrdinalIgnoreCase)
+                && LifecycleStatusMapper.ParseLifecycleStatus(request.Value) == LifecycleStatus.Canceled;
+        }
+
         private async Task<List<FieldChange>> ApplyFieldMutationAsync(
             string field,
             WorkOrder workOrder,
diff --git a/SeaHavenIndustries.Tests/WorkOrderAccountTestHelpers.cs b/SeaHavenIndustries.Tests/WorkOrderAccountTestHelpers.cs
index cb7c9f9..040e235 100644
--- a/SeaHavenIndustries.Tests/WorkOrderAccountTestHelpers.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderAccountTestHelpers.cs
@@ -15,6 +15,31 @@ internal static class WorkOrderAccountTestHelpers
             new AccountDataService(context),
             new LocationDataService(context));
 
+    /// <summary>Board update service over one context, with the real uplift cascade wired.</summary>
+    public static WorkOrderBoardUpdateService BoardUpdateService(
+        ApplicationDbContext context,
+        IWorkOrderAuditService audit,
+        IServicesRegistryService? servicesRegistry = null)
+        => new(
+            new WorkOrderBoardDataService(context),
+            new WorkOrderBoardMutationDataService(context),
+            audit,
+            UpliftService(context),
+            new UpliftDataService(context),
+            servicesRegistry);
+
+    public static WorkOrderUpliftService UpliftService(ApplicationDbContext context)
+        => new(
+            new UpliftDataService(context),
+            new DispatchDataService(context),
+            new WorkOrderDetailDataService(context),
+            Resolver(context),
+            new UserDataService(context),
+            new TeamPermissionOverrideDataService(context),
+            new TeamPermissionPolicy(),
+            TimeProvider.System,
+            Microsoft.Extensions.Options.Options.Create(new SeaHaven.Services.Configuration.ApprovalsOptions()));
+
     public static ClaimsPrincipal AccountUser(
         string userId = "actor-1",
         int accountId = 1,
diff --git a/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs b/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs
index 46e86fc..01e93df 100644
--- a/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs
@@ -28,7 +28,7 @@ public class WorkOrderBoardCancelServiceTests
         var fieldLocks = new WorkOrderFieldLockService(new WorkOrderFieldLockDataService(context));
         var audit = new WorkOrderAuditService(new WorkOrderAuditDataService(context), fieldLocks);
         var cancel = new WorkOrderBoardCancelService(mutationData, boardService, audit, new NoOpUpliftService(), new PassThroughUpliftData());
-        var update = new WorkOrderBoardUpdateService(boardData, mutationData, audit);
+        var update = WorkOrderAccountTestHelpers.BoardUpdateService(context, audit);
         return (context, cancel, update);
     }
 
diff --git a/SeaHavenIndustries.Tests/WorkOrderBoardConcurrencyTests.cs b/SeaHavenIndustries.Tests/WorkOrderBoardConcurrencyTests.cs
index 0aa2a17..9dd9a2a 100644
--- a/SeaHavenIndustries.Tests/WorkOrderBoardConcurrencyTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderBoardConcurrencyTests.cs
@@ -25,7 +25,7 @@ public class WorkOrderBoardConcurrencyTests
         var mutationData = new WorkOrderBoardMutationDataService(context);
         var fieldLocks = new WorkOrderFieldLockService(new WorkOrderFieldLockDataService(context));
         var audit = new WorkOrderAuditService(new WorkOrderAuditDataService(context), fieldLocks);
-        return new WorkOrderBoardUpdateService(boardData, mutationData, audit);
+        return WorkOrderAccountTestHelpers.BoardUpdateService(context, audit);
     }
 
     [Fact]
diff --git a/SeaHavenIndustries.Tests/WorkOrderBoardPatchCancelUpliftTests.cs b/SeaHavenIndustries.Tests/WorkOrderBoardPatchCancelUpliftTests.cs
new file mode 100644
index 0000000..e2ad1f3
--- /dev/null
+++ b/SeaHavenIndustries.Tests/WorkOrderBoardPatchCancelUpliftTests.cs
@@ -0,0 +1,254 @@
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using Microsoft.Data.Sqlite;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Diagnostics;
+using SeaHaven.DataServices.Implementation;
+using SeaHaven.Services.DTOs;
+using SeaHaven.Services.Helpers;
+using SeaHaven.Services.Implementation;
+using Xunit;
+
+namespace SeaHavenIndustries.Tests;
+
+/// <summary>
+/// Cancelling a work order from the board (the lifecycle status PATCH the board and
+/// slide-over use) cancels its pending uplift in the same action and commit, with an
+/// audit entry of its own.
+/// </summary>
+public sealed class WorkOrderBoardPatchCancelUpliftTests
+{
+    private static readonly byte[] Version = { 1, 0, 0, 0, 0, 0, 0, 1 };
+
+    private static async Task<WorkOrderBoardPatchRequestDto> CancelPatchAsync(ApplicationDbContext context)
+    {
+        var stored = await context.workOrders.AsNoTracking().SingleAsync(w => w.Id == 1);
+        return new WorkOrderBoardPatchRequestDto
+        {
+            Field = WorkOrderBoardFieldNames.LifecycleStatus,
+            Value = "Canceled",
+            WorkOrderVersion = Convert.ToBase64String(stored.RowVersion ?? Version),
+        };
+    }
+
+    private static WorkOrderBoardUpdateService NewUpdateService(ApplicationDbContext context)
+    {
+        var fieldLocks = new WorkOrderFieldLockService(new WorkOrderFieldLockDataService(context));
+        var audit = new WorkOrderAuditService(new WorkOrderAuditDataService(context), fieldLocks);
+        return WorkOrderAccountTestHelpers.BoardUpdateService(context, audit);
+    }
+
+    // Saved in stages: the work order and its primary dispatch reference each other, which a
+    // relational provider cannot insert in one statement batch.
+    private static async Task SeedWorkOrderAsync(ApplicationDbContext context)
+    {
+        context.Accounts.Add(new Accounts { Id = 1, Name = "Acme Corp", IsDeleted = false });
+        context.Users.Add(new ApplicationUser { Id = "actor-1", UserName = "actor-1" });
+        context.Users.Add(new ApplicationUser { Id = "dispatcher-1", UserName = "dispatcher-1" });
+        context.Vendors.Add(new Vendor { Id = 1, CompanyName = "Acme HVAC" });
+        var workOrder = new WorkOrder
+        {
+            Id = 1,
+            InternalWONumber = "10000000001",
+            LifecycleStatus = LifecycleStatus.Incomplete,
+            Status = "Incomplete",
+            AccountId = 1,
+            RowVersion = Version,
+        };
+        context.workOrders.Add(workOrder);
+        await context.SaveChangesAsync();
+
+        context.Dispatches.Add(new Dispatch
+        {
+            Id = 10,
+            VendorId = 1,
+            WorkOrderId = 1,
+            NTEAmount = 1900m,
+            DispatchNumber = "DIS-10",
+            Status = "Scheduled",
+        });
+        await context.SaveChangesAsync();
+
+        workOrder.PrimaryDispatchId = 10;
+        await context.SaveChangesAsync();
+    }
+
+    private static DispatchUpliftRequest Uplift(int id, string status, decimal amount) => new()
+    {
+        Id = id,
+        DispatchId = 10,
+        CurrentNTE = 1000m,
+        RequestedNTE = amount,
+        Status = status,
+        RequiredTier = status == "NoApprovalRequired" ? 0 : 1,
+        NotificationStatus = "Sent",
+        createdby = "dispatcher-1",
+        CreatedDate = DateTime.UtcNow.AddHours(-id),
+    };
+
+    [Fact]
+    public async Task PatchToCanceled_CancelsPendingUpliftWithItsOwnAuditAndLeavesDecidedUpliftsAlone()
+    {
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseInMemoryDatabase(Guid.NewGuid().ToString())
+            .Options;
+        await using (var seed = new ApplicationDbContext(options))
+        {
+            await SeedWorkOrderAsync(seed);
+            seed.DispatchUpliftRequests.AddRange(
+                Uplift(100, "Pending", 700m),
+                Uplift(101, "Approved", 600m),
+                Uplift(102, "NoApprovalRequired", 300m),
+                Uplift(103, "Rejected", 900m));
+            await seed.SaveChangesAsync();
+        }
+
+        await using (var context = new ApplicationDbContext(options))
+        {
+            var row = await NewUpdateService(context).PatchFieldAsync(1, await CancelPatchAsync(context), "actor-1");
+            Assert.Equal(LifecycleStatus.Canceled, row.LifecycleStatus);
+        }
+
+        await using var verify = new ApplicationDbContext(options);
+        Assert.Equal(LifecycleStatus.Canceled, verify.workOrders.Single().LifecycleStatus);
+
+        var cancelled = verify.DispatchUpliftRequests.Single(u => u.Id == 100);
+        Assert.Equal(UpliftStatus.Withdrawn, cancelled.Status);
+        Assert.Equal("actor-1", cancelled.DecidedByUserId);
+        Assert.NotNull(cancelled.DecidedAt);
+
+        Assert.Equal(UpliftStatus.Approved, verify.DispatchUpliftRequests.Single(u => u.Id == 101).Status);
+        Assert.Equal(UpliftStatus.NoApprovalRequired, verify.DispatchUpliftRequests.Single(u => u.Id == 102).Status);
+        Assert.Equal(UpliftStatus.Rejected, verify.DispatchUpliftRequests.Single(u => u.Id == 103).Status);
+        Assert.Equal(1900m, verify.Dispatches.Single().NTEAmount);
+
+        var upliftAudit = Assert.Single(verify.WorkOrderAuditLogs, log => log.Action == "uplift_cancel");
+        Assert.Equal(1, upliftAudit.WorkOrderId);
+        Assert.Equal("actor-1", upliftAudit.UserId);
+        Assert.Equal("Dispatch DIS-10 Uplift", upliftAudit.FieldName);
+        Assert.Equal(UpliftStatus.Pending, upliftAudit.OldValue);
+        Assert.Equal(UpliftStatus.Withdrawn, upliftAudit.NewValue);
+
+        var statusAudit = Assert.Single(verify.WorkOrderAuditLogs, log => log.Action == "StatusChanged");
+        Assert.Equal(LifecycleStatus.Canceled.ToString(), statusAudit.NewValue);
+        Assert.NotEqual(upliftAudit.Id, statusAudit.Id);
+    }
+
+    [Fact]
+    public async Task PatchToOtherStatus_LeavesPendingUpliftPending()
+    {
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseInMemoryDatabase(Guid.NewGuid().ToString())
+            .Options;
+        await using (var seed = new ApplicationDbContext(options))
+        {
+            await SeedWorkOrderAsync(seed);
+            seed.DispatchUpliftRequests.Add(Uplift(100, "Pending", 700m));
+            await seed.SaveChangesAsync();
+        }
+
+        await using (var context = new ApplicationDbContext(options))
+        {
+            var patch = await CancelPatchAsync(context);
+            patch.Value = "Pending";
+            await NewUpdateService(context).PatchFieldAsync(1, patch, "actor-1");
+        }
+
+        await using var verify = new ApplicationDbContext(options);
+        Assert.Equal(LifecycleStatus.Pending, verify.workOrders.Single().LifecycleStatus);
+        Assert.Equal(UpliftStatus.Pending, verify.DispatchUpliftRequests.Single().Status);
+        Assert.DoesNotContain(verify.WorkOrderAuditLogs, log => log.Action == "uplift_cancel");
+    }
+
+    [Fact]
+    public async Task PatchToCanceled_FailureAfterTheWrites_RollsBackWorkOrderAndUpliftTogether()
+    {
+        await using var connection = new SqliteConnection("DataSource=:memory:");
+        await connection.OpenAsync();
+        var failAfterSave = new FailAfterSaveInterceptor();
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseSqlite(connection)
+            .AddInterceptors(failAfterSave)
+            .Options;
+
+        await using (var seed = new SqliteRowVersionDbContext(options))
+        {
+            await seed.Database.EnsureCreatedAsync();
+            await SeedWorkOrderAsync(seed);
+            seed.DispatchUpliftRequests.Add(Uplift(100, "Pending", 700m));
+            await seed.SaveChangesAsync();
+        }
+
+        failAfterSave.Armed = true;
+        await using (var context = new SqliteRowVersionDbContext(options))
+        {
+            var patch = await CancelPatchAsync(context);
+            await Assert.ThrowsAsync<InvalidOperationException>(
+                () => NewUpdateService(context).PatchFieldAsync(1, patch, "actor-1"));
+        }
+
+        // The failing save did write both the cancelled work order and the withdrawn
+        // uplift inside the transaction; the failure after it must undo both.
+        Assert.True(failAfterSave.SawWithdrawnUpliftInSave);
+
+        failAfterSave.Armed = false;
+        await using var verify = new SqliteRowVersionDbContext(options);
+        Assert.Equal(LifecycleStatus.Incomplete, (await verify.workOrders.AsNoTracking().SingleAsync()).LifecycleStatus);
+        Assert.Equal(UpliftStatus.Pending, (await verify.DispatchUpliftRequests.AsNoTracking().SingleAsync()).Status);
+        Assert.False(await verify.WorkOrderAuditLogs.AnyAsync());
+    }
+
+    private sealed class FailAfterSaveInterceptor : SaveChangesInterceptor
+    {
+        public bool Armed { get; set; }
+        public bool SawWithdrawnUpliftInSave { get; private set; }
+
+        public override ValueTask<InterceptionResult<int>> SavingChangesAsync(
+            DbContextEventData eventData,
+            InterceptionResult<int> result,
+            CancellationToken cancellationToken = default)
+        {
+            if (Armed && eventData.Context is not null)
+            {
+                SawWithdrawnUpliftInSave = eventData.Context.ChangeTracker
+                    .Entries<DispatchUpliftRequest>()
+                    .Any(entry => entry.State == EntityState.Modified
+                        && entry.Entity.Status == UpliftStatus.Withdrawn);
+            }
+
+            return base.SavingChangesAsync(eventData, result, cancellationToken);
+        }
+
+        public override ValueTask<int> SavedChangesAsync(
+            SaveChangesCompletedEventData eventData,
+            int result,
+            CancellationToken cancellationToken = default)
+        {
+            if (Armed)
+                throw new InvalidOperationException("Simulated failure after the rows were written");
+
+            return base.SavedChangesAsync(eventData, result, cancellationToken);
+        }
+    }
+
+    private sealed class SqliteRowVersionDbContext : ApplicationDbContext
+    {
+        public SqliteRowVersionDbContext(DbContextOptions<ApplicationDbContext> options)
+            : base(options)
+        {
+        }
+
+        protected override void OnModelCreating(ModelBuilder builder)
+        {
+            base.OnModelCreating(builder);
+
+            // SQLite has no rowversion type; store the seeded blobs as plain values.
+            foreach (var entityType in new[] { typeof(WorkOrder), typeof(Dispatch), typeof(DispatchUpliftRequest) })
+            {
+                var property = builder.Entity(entityType).Property("RowVersion").Metadata;
+                property.ValueGenerated = Microsoft.EntityFrameworkCore.Metadata.ValueGenerated.Never;
+                property.IsConcurrencyToken = false;
+            }
+        }
+    }
+}
diff --git a/SeaHavenIndustries.Tests/WorkOrderBoardPatchLifecycleRulesTests.cs b/SeaHavenIndustries.Tests/WorkOrderBoardPatchLifecycleRulesTests.cs
index 050b78b..34a4b9d 100644
--- a/SeaHavenIndustries.Tests/WorkOrderBoardPatchLifecycleRulesTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderBoardPatchLifecycleRulesTests.cs
@@ -22,9 +22,8 @@ public class WorkOrderBoardPatchLifecycleRulesTests
         var context = new ApplicationDbContext(options);
         var fieldLocks = new WorkOrderFieldLockService(new WorkOrderFieldLockDataService(context));
         var audit = new WorkOrderAuditService(new WorkOrderAuditDataService(context), fieldLocks);
-        var service = new WorkOrderBoardUpdateService(
-            new WorkOrderBoardDataService(context),
-            new WorkOrderBoardMutationDataService(context),
+        var service = WorkOrderAccountTestHelpers.BoardUpdateService(
+            context,
             audit);
         return (context, service);
     }
diff --git a/SeaHavenIndustries.Tests/WorkOrderBoardUpdateServiceTests.cs b/SeaHavenIndustries.Tests/WorkOrderBoardUpdateServiceTests.cs
index fcf096e..ae19c33 100644
--- a/SeaHavenIndustries.Tests/WorkOrderBoardUpdateServiceTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderBoardUpdateServiceTests.cs
@@ -23,7 +23,7 @@ public class WorkOrderBoardUpdateServiceTests
         var mutationData = new WorkOrderBoardMutationDataService(context);
         var fieldLocks = new WorkOrderFieldLockService(new WorkOrderFieldLockDataService(context));
         var audit = new WorkOrderAuditService(new WorkOrderAuditDataService(context), fieldLocks);
-        var service = new WorkOrderBoardUpdateService(boardData, mutationData, audit);
+        var service = WorkOrderAccountTestHelpers.BoardUpdateService(context, audit);
         return (context, service);
     }
 
diff --git a/SeaHavenIndustries.Tests/WorkOrderCompletedSelectiveLockTests.cs b/SeaHavenIndustries.Tests/WorkOrderCompletedSelectiveLockTests.cs
index cc765ed..7cce8be 100644
--- a/SeaHavenIndustries.Tests/WorkOrderCompletedSelectiveLockTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderCompletedSelectiveLockTests.cs
@@ -22,9 +22,8 @@ public class WorkOrderCompletedSelectiveLockTests
         var context = new ApplicationDbContext(options);
         var fieldLocks = new WorkOrderFieldLockService(new WorkOrderFieldLockDataService(context));
         var audit = new WorkOrderAuditService(new WorkOrderAuditDataService(context), fieldLocks);
-        var service = new WorkOrderBoardUpdateService(
-            new WorkOrderBoardDataService(context),
-            new WorkOrderBoardMutationDataService(context),
+        var service = WorkOrderAccountTestHelpers.BoardUpdateService(
+            context,
             audit);
         return (context, service);
     }
diff --git a/SeaHavenIndustries.Tests/WorkOrderCompletionFreezeTests.cs b/SeaHavenIndustries.Tests/WorkOrderCompletionFreezeTests.cs
index 6589f9f..11f7ab4 100644
--- a/SeaHavenIndustries.Tests/WorkOrderCompletionFreezeTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderCompletionFreezeTests.cs
@@ -186,9 +186,8 @@ public class WorkOrderCompletionFreezeTests
     private static WorkOrderBoardUpdateService CreateService(ApplicationDbContext context)
     {
         var fieldLocks = new WorkOrderFieldLockService(new WorkOrderFieldLockDataService(context));
-        return new WorkOrderBoardUpdateService(
-            new WorkOrderBoardDataService(context),
-            new WorkOrderBoardMutationDataService(context),
+        return WorkOrderAccountTestHelpers.BoardUpdateService(
+            context,
             new WorkOrderAuditService(new WorkOrderAuditDataService(context), fieldLocks));
     }
 
diff --git a/SeaHavenIndustries.Tests/WorkOrderOverdueTypeTests.cs b/SeaHavenIndustries.Tests/WorkOrderOverdueTypeTests.cs
index d08ac91..ea30df3 100644
--- a/SeaHavenIndustries.Tests/WorkOrderOverdueTypeTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderOverdueTypeTests.cs
@@ -68,9 +68,8 @@ public class WorkOrderOverdueTypeTests
     private static WorkOrderBoardUpdateService NewUpdateService(ApplicationDbContext context)
     {
         var fieldLocks = new WorkOrderFieldLockService(new WorkOrderFieldLockDataService(context));
-        return new WorkOrderBoardUpdateService(
-            new WorkOrderBoardDataService(context),
-            new WorkOrderBoardMutationDataService(context),
+        return WorkOrderAccountTestHelpers.BoardUpdateService(
+            context,
             new WorkOrderAuditService(new WorkOrderAuditDataService(context), fieldLocks),
             new ServicesRegistryService(new ServicesRegistryDataService(context)));
     }
diff --git a/SeaHavenIndustries.Tests/WorkOrderPhase6Tests.cs b/SeaHavenIndustries.Tests/WorkOrderPhase6Tests.cs
index ea77fb4..abca125 100644
--- a/SeaHavenIndustries.Tests/WorkOrderPhase6Tests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderPhase6Tests.cs
@@ -28,7 +28,7 @@ public class WorkOrderDocStatusPatchTests
         var mutationData = new WorkOrderBoardMutationDataService(context);
         var fieldLocks = new WorkOrderFieldLockService(new WorkOrderFieldLockDataService(context));
         var audit = new WorkOrderAuditService(new WorkOrderAuditDataService(context), fieldLocks);
-        var service = new WorkOrderBoardUpdateService(boardData, mutationData, audit);
+        var service = WorkOrderAccountTestHelpers.BoardUpdateService(context, audit);
         return (context, service);
     }
 
@@ -357,7 +357,7 @@ public class WorkOrderDetailServiceTests
         var boardData = new WorkOrderBoardDataService(context);
         var fieldLocks = new WorkOrderFieldLockService(new WorkOrderFieldLockDataService(context));
         var audit = new WorkOrderAuditService(new WorkOrderAuditDataService(context), fieldLocks);
-        var update = new WorkOrderBoardUpdateService(boardData, mutationData, audit);
+        var update = WorkOrderAccountTestHelpers.BoardUpdateService(context, audit);
 
         await update.PatchFieldAsync(1, new WorkOrderBoardPatchRequestDto
         {
diff --git a/SeaHavenIndustries.Tests/WorkOrderPocServiceTests.cs b/SeaHavenIndustries.Tests/WorkOrderPocServiceTests.cs
index ad1ffa2..9e40739 100644
--- a/SeaHavenIndustries.Tests/WorkOrderPocServiceTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderPocServiceTests.cs
@@ -595,9 +595,8 @@ public class WorkOrderPocServiceTests
     private static WorkOrderBoardUpdateService CreateUpdateService(ApplicationDbContext context)
     {
         var fieldLocks = new WorkOrderFieldLockService(new WorkOrderFieldLockDataService(context));
-        return new WorkOrderBoardUpdateService(
-            new WorkOrderBoardDataService(context),
-            new WorkOrderBoardMutationDataService(context),
+        return WorkOrderAccountTestHelpers.BoardUpdateService(
+            context,
             new WorkOrderAuditService(new WorkOrderAuditDataService(context), fieldLocks));
     }
 
diff --git a/SeaHavenIndustries.Tests/WorkOrderUpliftDispatchOwnershipTests.cs b/SeaHavenIndustries.Tests/WorkOrderUpliftDispatchOwnershipTests.cs
index adba1a7..40ff0fd 100644
--- a/SeaHavenIndustries.Tests/WorkOrderUpliftDispatchOwnershipTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderUpliftDispatchOwnershipTests.cs
@@ -59,9 +59,8 @@ public sealed class WorkOrderUpliftDispatchOwnershipTests
     private static WorkOrderBoardUpdateService NewBoardUpdateService(ApplicationDbContext context)
     {
         var fieldLocks = new WorkOrderFieldLockService(new WorkOrderFieldLockDataService(context));
-        return new WorkOrderBoardUpdateService(
-            new WorkOrderBoardDataService(context),
-            new WorkOrderBoardMutationDataService(context),
+        return WorkOrderAccountTestHelpers.BoardUpdateService(
+            context,
             new WorkOrderAuditService(new WorkOrderAuditDataService(context), fieldLocks));
     }
 

From 99499c3281d4c7eba3bbd55e1b82cb0942e80e99 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 18:48:44 -0300
Subject: [PATCH 174/183] Cancel pending uplifts when the CRM cancels a work
 order

The webhook and reconciliation saves now stage the same pending-uplift
cancellation, with its own sync audit row, as the board cancel. The rule
and the write live in one data-layer helper so the paths cannot drift.
---
 .../Helpers/PendingUpliftCancellation.cs      |  79 +++++++
 .../Implementation/UpliftDataService.cs       |  27 +--
 .../WorkOrderWebhookDataService.cs            |  16 ++
 .../Interfaces/IUpliftDataService.cs          |   8 +-
 .../WorkOrderBoardUpdateService.cs            |   3 +-
 .../Implementation/WorkOrderUpliftService.cs  |  36 +--
 .../WorkOrderBoardCancelServiceTests.cs       |   2 +-
 .../WorkOrderBoardPatchCancelUpliftTests.cs   |   7 +-
 .../WorkOrderCrmCancelUpliftTests.cs          | 222 ++++++++++++++++++
 .../WorkOrderReconciliationTests.cs           |  10 +
 10 files changed, 356 insertions(+), 54 deletions(-)
 create mode 100644 SeaHaven.DataServices/Helpers/PendingUpliftCancellation.cs
 create mode 100644 SeaHavenIndustries.Tests/WorkOrderCrmCancelUpliftTests.cs

diff --git a/SeaHaven.DataServices/Helpers/PendingUpliftCancellation.cs b/SeaHaven.DataServices/Helpers/PendingUpliftCancellation.cs
new file mode 100644
index 0000000..1a4e3c4
--- /dev/null
+++ b/SeaHaven.DataServices/Helpers/PendingUpliftCancellation.cs
@@ -0,0 +1,79 @@
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using Microsoft.EntityFrameworkCore;
+
+namespace SeaHaven.DataServices.Helpers
+{
+    /// <summary>
+    /// The single rule and write for "a work order that becomes Canceled cancels its pending
+    /// uplifts in the same action". Every path that can cancel a work order (board update,
+    /// the cancel endpoint, CRM webhook and reconciliation) asks <see cref="Applies"/> and
+    /// stages the cancellation into its own unit of work, so the uplift change and its own
+    /// audit row commit, or roll back, with the work order's status change.
+    /// </summary>
+    public static class PendingUpliftCancellation
+    {
+        public const string AuditAction = "uplift_cancel";
+        public const string CancelledStatus = "Withdrawn";
+
+        private static readonly string[] PendingStatuses = { "Pending", "ChangesRequested" };
+
+        /// <summary>True when a lifecycle change moves a work order into Canceled.</summary>
+        public static bool Applies(LifecycleStatus? before, LifecycleStatus? after)
+            => before != LifecycleStatus.Canceled && after == LifecycleStatus.Canceled;
+
+        /// <summary>
+        /// Uplift requests that belong to a work order: on a live dispatch that the work
+        /// order owns or is linked to.
+        /// </summary>
+        internal static IQueryable<DispatchUpliftRequest> ForWorkOrder(ApplicationDbContext context, int workOrderId)
+            => context.DispatchUpliftRequests.Where(u =>
+                (u.IsDeleted == null || u.IsDeleted == false)
+                && u.Dispatch != null
+                && (u.Dispatch.IsDeleted == null || u.Dispatch.IsDeleted == false)
+                && (
+                    u.Dispatch.WorkOrderId == workOrderId
+                    || u.Dispatch.DispatchWorkOrders!.Any(link => link.WorkOrderId == workOrderId)));
+
+        /// <summary>
+        /// Stages (does not save) the cancellation of every pending uplift on the work order,
+        /// with one audit row per uplift. Returns how many uplifts were cancelled.
+        /// </summary>
+        internal static async Task<int> StageAsync(
+            ApplicationDbContext context,
+            int workOrderId,
+            string? actorId,
+            string actorType,
+            DateTime now,
+            CancellationToken cancellationToken)
+        {
+            var pending = await ForWorkOrder(context, workOrderId)
+                .Include(u => u.Dispatch)
+                .Where(u => PendingStatuses.Contains(u.Status))
+                .ToListAsync(cancellationToken);
+
+            foreach (var request in pending)
+            {
+                var previous = request.Status;
+                request.Status = CancelledStatus;
+                request.DecidedAt = now;
+                request.DecidedByUserId = actorId;
+                request.LastModificationTime = now;
+
+                context.WorkOrderAuditLogs.Add(new WorkOrderAuditLog
+                {
+                    WorkOrderId = workOrderId,
+                    UserId = actorId,
+                    FieldName = $"Dispatch {request.Dispatch!.DispatchNumber} Uplift",
+                    OldValue = previous,
+                    NewValue = CancelledStatus,
+                    Action = AuditAction,
+                    ActorType = actorType,
+                    CreatedAt = now,
+                });
+            }
+
+            return pending.Count;
+        }
+    }
+}
diff --git a/SeaHaven.DataServices/Implementation/UpliftDataService.cs b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
index 0c3706c..3f9cf21 100644
--- a/SeaHaven.DataServices/Implementation/UpliftDataService.cs
+++ b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
@@ -455,15 +455,18 @@ namespace SeaHaven.DataServices.Implementation
                 .SumAsync(cancellationToken);
         }
 
-        public Task<List<DispatchUpliftRequest>> GetPendingForWorkOrderAsync(
+        public Task<int> StageCancelPendingForWorkOrderAsync(
             int workOrderId,
+            string? actorId,
+            DateTime now,
             CancellationToken cancellationToken)
-        {
-            return ForWorkOrder(workOrderId)
-                .Include(u => u.Dispatch)
-                .Where(u => u.Status == "Pending" || u.Status == "ChangesRequested")
-                .ToListAsync(cancellationToken);
-        }
+            => PendingUpliftCancellation.StageAsync(
+                _context,
+                workOrderId,
+                actorId,
+                actorType: "internal",
+                now,
+                cancellationToken);
 
         public async Task<bool> HasActiveAsync(int dispatchId, CancellationToken cancellationToken)
         {
@@ -524,15 +527,7 @@ namespace SeaHaven.DataServices.Implementation
         }
 
         private IQueryable<DispatchUpliftRequest> ForWorkOrder(int workOrderId)
-        {
-            return _context.DispatchUpliftRequests.Where(u =>
-                (u.IsDeleted == null || u.IsDeleted == false)
-                && u.Dispatch != null
-                && (u.Dispatch.IsDeleted == null || u.Dispatch.IsDeleted == false)
-                && (
-                    u.Dispatch.WorkOrderId == workOrderId
-                    || u.Dispatch.DispatchWorkOrders!.Any(link => link.WorkOrderId == workOrderId)));
-        }
+            => PendingUpliftCancellation.ForWorkOrder(_context, workOrderId);
 
         public async Task StageAsync(DispatchUpliftRequest request, CancellationToken cancellationToken)
         {
diff --git a/SeaHaven.DataServices/Implementation/WorkOrderWebhookDataService.cs b/SeaHaven.DataServices/Implementation/WorkOrderWebhookDataService.cs
index f32ebd0..49cdc7b 100644
--- a/SeaHaven.DataServices/Implementation/WorkOrderWebhookDataService.cs
+++ b/SeaHaven.DataServices/Implementation/WorkOrderWebhookDataService.cs
@@ -1,6 +1,8 @@
 using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
 using Microsoft.EntityFrameworkCore;
 using Microsoft.EntityFrameworkCore.Storage;
+using SeaHaven.DataServices.Helpers;
 using SeaHaven.DataServices.Interfaces;
 
 namespace SeaHaven.DataServices.Implementation
@@ -112,8 +114,22 @@ namespace SeaHaven.DataServices.Implementation
                 workOrder.WorkerOrderTitle = mutation.Title ?? mutation.Description;
                 workOrder.Description = mutation.Description;
                 workOrder.Status = mutation.IsCancelled ? "Cancelled" : mutation.Status;
+                var lifecycleBefore = workOrder.LifecycleStatus;
                 if (mutation.LifecycleStatus.HasValue)
                     workOrder.LifecycleStatus = mutation.LifecycleStatus.Value;
+
+                // A CRM cancellation cancels the work order's pending uplifts in this same save.
+                if (workOrder.Id > 0
+                    && PendingUpliftCancellation.Applies(lifecycleBefore, workOrder.LifecycleStatus))
+                {
+                    await PendingUpliftCancellation.StageAsync(
+                        _context,
+                        workOrder.Id,
+                        actorId: null,
+                        actorType: AuditActorType.Sync.ToString(),
+                        mutation.ProcessedAt.UtcDateTime,
+                        cancellationToken);
+                }
                 workOrder.Severity = mutation.Severity;
                 workOrder.Priority = mutation.Priority;
                 workOrder.ExternalAssignedTo = mutation.AssignedTo;
diff --git a/SeaHaven.DataServices/Interfaces/IUpliftDataService.cs b/SeaHaven.DataServices/Interfaces/IUpliftDataService.cs
index 4dfe871..1053202 100644
--- a/SeaHaven.DataServices/Interfaces/IUpliftDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IUpliftDataService.cs
@@ -32,7 +32,13 @@ namespace SeaHaven.DataServices.Interfaces
         // SH-207: queue-wide pending exposure for the approvals header (sum of
         // RequestedNTE over non-deleted Pending requests on non-deleted dispatches).
         Task<decimal> GetPendingExposureTotalAsync(CancellationToken cancellationToken);
-        Task<List<DispatchUpliftRequest>> GetPendingForWorkOrderAsync(int workOrderId, CancellationToken cancellationToken);
+        // Stages (does not save) the cancellation of the work order's pending uplifts, each
+        // with its own audit row, for the caller's unit of work. See PendingUpliftCancellation.
+        Task<int> StageCancelPendingForWorkOrderAsync(
+            int workOrderId,
+            string? actorId,
+            DateTime now,
+            CancellationToken cancellationToken);
         // SH-101: active = Pending or ChangesRequested (the only states that block a new request).
         Task<bool> HasActiveAsync(int dispatchId, CancellationToken cancellationToken);
         Task<DispatchUpliftRequest?> GetActiveRequestAsync(int dispatchId, CancellationToken cancellationToken);
diff --git a/SeaHaven.Services/Implementation/WorkOrderBoardUpdateService.cs b/SeaHaven.Services/Implementation/WorkOrderBoardUpdateService.cs
index d34c6fb..3a194fc 100644
--- a/SeaHaven.Services/Implementation/WorkOrderBoardUpdateService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderBoardUpdateService.cs
@@ -139,8 +139,7 @@ namespace SeaHaven.Services.Implementation
                 // Cancelling the work order cancels its pending uplift in the same action: the
                 // withdrawal and its own audit entry are staged here and committed by the same
                 // save as the status change.
-                if (lifecycleBefore != LifecycleStatus.Canceled
-                    && workOrder.LifecycleStatus == LifecycleStatus.Canceled)
+                if (PendingUpliftCancellation.Applies(lifecycleBefore, workOrder.LifecycleStatus))
                 {
                     await _upliftService.WithdrawPendingForWorkOrderAsync(workOrderId, actorId, ct);
                 }
diff --git a/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs b/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs
index 0980e0d..79da4a2 100644
--- a/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs
@@ -345,37 +345,11 @@ namespace SeaHaven.Services.Implementation
             string? actorId,
             CancellationToken cancellationToken)
         {
-            var pending = await _upliftData.GetPendingForWorkOrderAsync(workOrderId, cancellationToken);
-            if (pending.Count == 0)
-                return;
-
-            var now = _timeProvider.GetUtcNow().UtcDateTime;
-            foreach (var req in pending)
-            {
-                if (!UpliftStatus.CanTransition(req.Status, UpliftStatus.Withdrawn))
-                    continue;
-
-                var dispatch = req.Dispatch ?? await _dispatchData.GetByIdAsync(req.DispatchId);
-                if (dispatch == null)
-                    continue;
-
-                var previous = UpliftStatus.ToCanonical(req.Status);
-                req.Status = UpliftStatus.Withdrawn;
-                req.DecidedAt = now;
-                req.DecidedByUserId = actorId;
-                req.LastModificationTime = now;
-
-                await StageAuditAsync(
-                    dispatch,
-                    workOrderId,
-                    actorId,
-                    previous,
-                    UpliftStatus.Withdrawn,
-                    "uplift_cancel",
-                    now,
-                    cancellationToken,
-                    isStatusTransition: true);
-            }
+            await _upliftData.StageCancelPendingForWorkOrderAsync(
+                workOrderId,
+                actorId,
+                _timeProvider.GetUtcNow().UtcDateTime,
+                cancellationToken);
         }
 
         private async Task<WorkOrderUpliftDto> PersistCreatedAsync(
diff --git a/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs b/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs
index 01e93df..76e521a 100644
--- a/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs
@@ -461,7 +461,7 @@ public class WorkOrderBoardCancelServiceTests
         public Task<decimal> SumAutoApprovedAmountForWorkOrderAsync(int workOrderId, CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<IReadOnlyList<WorkOrderUpliftExposureData>> GetApprovedExposureForWorkOrdersAsync(IReadOnlyCollection<int> workOrderIds, CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<decimal> GetPendingExposureTotalAsync(CancellationToken cancellationToken) => throw new NotSupportedException();
-        public Task<List<DispatchUpliftRequest>> GetPendingForWorkOrderAsync(int workOrderId, CancellationToken cancellationToken) => throw new NotSupportedException();
+        public Task<int> StageCancelPendingForWorkOrderAsync(int workOrderId, string? actorId, DateTime now, CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<bool> HasActiveAsync(int dispatchId, CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<DispatchUpliftRequest?> GetActiveRequestAsync(int dispatchId, CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<DispatchUpliftRequest?> GetByRequestKeyAsync(int dispatchId, string requestKey, CancellationToken cancellationToken) => throw new NotSupportedException();
diff --git a/SeaHavenIndustries.Tests/WorkOrderBoardPatchCancelUpliftTests.cs b/SeaHavenIndustries.Tests/WorkOrderBoardPatchCancelUpliftTests.cs
index e2ad1f3..c2f68aa 100644
--- a/SeaHavenIndustries.Tests/WorkOrderBoardPatchCancelUpliftTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderBoardPatchCancelUpliftTests.cs
@@ -40,7 +40,7 @@ public sealed class WorkOrderBoardPatchCancelUpliftTests
 
     // Saved in stages: the work order and its primary dispatch reference each other, which a
     // relational provider cannot insert in one statement batch.
-    private static async Task SeedWorkOrderAsync(ApplicationDbContext context)
+    internal static async Task SeedWorkOrderAsync(ApplicationDbContext context)
     {
         context.Accounts.Add(new Accounts { Id = 1, Name = "Acme Corp", IsDeleted = false });
         context.Users.Add(new ApplicationUser { Id = "actor-1", UserName = "actor-1" });
@@ -50,6 +50,7 @@ public sealed class WorkOrderBoardPatchCancelUpliftTests
         {
             Id = 1,
             InternalWONumber = "10000000001",
+            ExternalWorkOrderId = "123",
             LifecycleStatus = LifecycleStatus.Incomplete,
             Status = "Incomplete",
             AccountId = 1,
@@ -73,7 +74,7 @@ public sealed class WorkOrderBoardPatchCancelUpliftTests
         await context.SaveChangesAsync();
     }
 
-    private static DispatchUpliftRequest Uplift(int id, string status, decimal amount) => new()
+    internal static DispatchUpliftRequest Uplift(int id, string status, decimal amount) => new()
     {
         Id = id,
         DispatchId = 10,
@@ -231,7 +232,7 @@ public sealed class WorkOrderBoardPatchCancelUpliftTests
         }
     }
 
-    private sealed class SqliteRowVersionDbContext : ApplicationDbContext
+    internal sealed class SqliteRowVersionDbContext : ApplicationDbContext
     {
         public SqliteRowVersionDbContext(DbContextOptions<ApplicationDbContext> options)
             : base(options)
diff --git a/SeaHavenIndustries.Tests/WorkOrderCrmCancelUpliftTests.cs b/SeaHavenIndustries.Tests/WorkOrderCrmCancelUpliftTests.cs
new file mode 100644
index 0000000..f8ae2a1
--- /dev/null
+++ b/SeaHavenIndustries.Tests/WorkOrderCrmCancelUpliftTests.cs
@@ -0,0 +1,222 @@
+using System.Data.Common;
+using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
+using Microsoft.Data.Sqlite;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Diagnostics;
+using SeaHaven.DataServices.Implementation;
+using SeaHaven.DataServices.Interfaces;
+using SeaHaven.Services.Implementation;
+using SeaHaven.Services.Interfaces;
+using Xunit;
+
+namespace SeaHavenIndustries.Tests;
+
+/// <summary>
+/// A work order cancelled by the CRM (webhook or reconciliation, both persisted by the
+/// webhook data service) cancels its pending uplift in the same save, with an audit entry
+/// of its own, exactly as a cancel from the board does.
+/// </summary>
+public sealed class WorkOrderCrmCancelUpliftTests
+{
+    private static readonly DateTimeOffset ProcessedAt = new(2026, 7, 24, 12, 1, 0, TimeSpan.Zero);
+
+    private static WorkOrderWebhookMutation CrmMutation(string eventType, bool cancelled) => new()
+    {
+        DeliveryId = $"delivery-{eventType}",
+        EventType = eventType,
+        OccurredAt = ProcessedAt.AddMinutes(-1),
+        UpdatedAt = ProcessedAt.AddMinutes(-1),
+        ProcessedAt = ProcessedAt,
+        BodySha256 = $"hash-{eventType}",
+        VersionHash = $"hash-{eventType}",
+        ExternalWorkOrderId = "123",
+        WorkerOrderNumber = "00000000123",
+        Source = "procurement",
+        IsStateEvent = true,
+        Customer = "Acme Corp",
+        Status = "Open",
+        IsCancelled = cancelled,
+        LifecycleStatus = cancelled ? LifecycleStatus.Canceled : LifecycleStatus.Pending,
+    };
+
+    private static async Task<DbContextOptions<ApplicationDbContext>> SeedInMemoryAsync(
+        params DispatchUpliftRequest[] uplifts)
+    {
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseInMemoryDatabase(Guid.NewGuid().ToString())
+            .Options;
+        await using var seed = new ApplicationDbContext(options);
+        await WorkOrderBoardPatchCancelUpliftTests.SeedWorkOrderAsync(seed);
+        seed.DispatchUpliftRequests.AddRange(uplifts);
+        await seed.SaveChangesAsync();
+        return options;
+    }
+
+    [Fact]
+    public async Task CrmCancel_CancelsPendingUpliftWithItsOwnSyncAuditAndLeavesDecidedUpliftsAlone()
+    {
+        var options = await SeedInMemoryAsync(
+            WorkOrderBoardPatchCancelUpliftTests.Uplift(100, "Pending", 700m),
+            WorkOrderBoardPatchCancelUpliftTests.Uplift(101, "Approved", 600m),
+            WorkOrderBoardPatchCancelUpliftTests.Uplift(102, "NoApprovalRequired", 300m),
+            WorkOrderBoardPatchCancelUpliftTests.Uplift(103, "Rejected", 900m));
+
+        await using (var context = new ApplicationDbContext(options))
+        {
+            var result = await new WorkOrderWebhookDataService(context)
+                .ApplyAsync(CrmMutation("work_order.cancelled", cancelled: true), CancellationToken.None);
+            Assert.Equal(WorkOrderWebhookPersistenceStatus.Applied, result.Status);
+        }
+
+        await using var verify = new ApplicationDbContext(options);
+        Assert.Equal(LifecycleStatus.Canceled, verify.workOrders.Single().LifecycleStatus);
+
+        var cancelled = verify.DispatchUpliftRequests.Single(u => u.Id == 100);
+        Assert.Equal(UpliftStatus.Withdrawn, cancelled.Status);
+        Assert.Equal(ProcessedAt.UtcDateTime, cancelled.DecidedAt);
+        Assert.Null(cancelled.DecidedByUserId);
+
+        Assert.Equal(UpliftStatus.Approved, verify.DispatchUpliftRequests.Single(u => u.Id == 101).Status);
+        Assert.Equal(UpliftStatus.NoApprovalRequired, verify.DispatchUpliftRequests.Single(u => u.Id == 102).Status);
+        Assert.Equal(UpliftStatus.Rejected, verify.DispatchUpliftRequests.Single(u => u.Id == 103).Status);
+        Assert.Equal(1900m, verify.Dispatches.Single().NTEAmount);
+
+        var upliftAudit = Assert.Single(verify.WorkOrderAuditLogs);
+        Assert.Equal("uplift_cancel", upliftAudit.Action);
+        Assert.Equal(1, upliftAudit.WorkOrderId);
+        Assert.Equal(AuditActorType.Sync.ToString(), upliftAudit.ActorType);
+        Assert.Null(upliftAudit.UserId);
+        Assert.Equal("Dispatch DIS-10 Uplift", upliftAudit.FieldName);
+        Assert.Equal(UpliftStatus.Pending, upliftAudit.OldValue);
+        Assert.Equal(UpliftStatus.Withdrawn, upliftAudit.NewValue);
+    }
+
+    [Fact]
+    public async Task CrmUpdateThatDoesNotCancel_LeavesPendingUpliftPending()
+    {
+        var options = await SeedInMemoryAsync(
+            WorkOrderBoardPatchCancelUpliftTests.Uplift(100, "Pending", 700m));
+
+        await using (var context = new ApplicationDbContext(options))
+        {
+            await new WorkOrderWebhookDataService(context)
+                .ApplyAsync(CrmMutation("work_order.updated", cancelled: false), CancellationToken.None);
+        }
+
+        await using var verify = new ApplicationDbContext(options);
+        Assert.Equal(LifecycleStatus.Pending, verify.workOrders.Single().LifecycleStatus);
+        Assert.Equal(UpliftStatus.Pending, verify.DispatchUpliftRequests.Single().Status);
+        Assert.Empty(verify.WorkOrderAuditLogs);
+    }
+
+    [Fact]
+    public async Task ReconciliationCancel_CancelsPendingUplift()
+    {
+        var options = await SeedInMemoryAsync(
+            WorkOrderBoardPatchCancelUpliftTests.Uplift(100, "Pending", 700m));
+
+        await using (var context = new ApplicationDbContext(options))
+        {
+            var service = WorkOrderReconciliationTests.CreateService(
+                new[]
+                {
+                    new ProcurementWorkOrder
+                    {
+                        WorkOrderId = "123",
+                        WoStatus = "cancelled",
+                        Customer = "Acme Corp",
+                        UpdatedAt = ProcessedAt,
+                    }
+                },
+                new WorkOrderWebhookDataService(context));
+            Assert.True(await service.RunPendingAsync(CancellationToken.None));
+        }
+
+        await using var verify = new ApplicationDbContext(options);
+        Assert.Equal(LifecycleStatus.Canceled, verify.workOrders.Single().LifecycleStatus);
+        Assert.Equal(UpliftStatus.Withdrawn, verify.DispatchUpliftRequests.Single().Status);
+        var upliftAudit = Assert.Single(verify.WorkOrderAuditLogs, log => log.Action == "uplift_cancel");
+        Assert.Equal(AuditActorType.Sync.ToString(), upliftAudit.ActorType);
+    }
+
+    [Fact]
+    public async Task CrmCancel_FailureBeforeCommit_RollsBackWorkOrderAndUpliftTogether()
+    {
+        await using var connection = new SqliteConnection("DataSource=:memory:");
+        await connection.OpenAsync();
+        var writes = new UpdateRecorder();
+        var failCommit = new FailCommitInterceptor();
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseSqlite(connection)
+            .AddInterceptors(writes, failCommit)
+            .Options;
+
+        await using (var seed = new WorkOrderBoardPatchCancelUpliftTests.SqliteRowVersionDbContext(options))
+        {
+            await seed.Database.EnsureCreatedAsync();
+            await WorkOrderBoardPatchCancelUpliftTests.SeedWorkOrderAsync(seed);
+            seed.DispatchUpliftRequests.Add(WorkOrderBoardPatchCancelUpliftTests.Uplift(100, "Pending", 700m));
+            await seed.SaveChangesAsync();
+        }
+
+        writes.Armed = true;
+        failCommit.Armed = true;
+        await using (var context = new WorkOrderBoardPatchCancelUpliftTests.SqliteRowVersionDbContext(options))
+        {
+            await Assert.ThrowsAnyAsync<InvalidOperationException>(() => new WorkOrderWebhookDataService(context)
+                .ApplyAsync(CrmMutation("work_order.cancelled", cancelled: true), CancellationToken.None));
+        }
+
+        // The work order and uplift updates both ran inside the save's transaction before
+        // the commit failed; neither may survive it.
+        Assert.True(writes.UpdatedUplift);
+        Assert.True(writes.UpdatedWorkOrder);
+
+        writes.Armed = false;
+        failCommit.Armed = false;
+        await using var verify = new WorkOrderBoardPatchCancelUpliftTests.SqliteRowVersionDbContext(options);
+        Assert.Equal(LifecycleStatus.Incomplete, (await verify.workOrders.AsNoTracking().SingleAsync()).LifecycleStatus);
+        Assert.Equal(UpliftStatus.Pending, (await verify.DispatchUpliftRequests.AsNoTracking().SingleAsync()).Status);
+        Assert.False(await verify.WorkOrderAuditLogs.AnyAsync());
+    }
+
+    private sealed class UpdateRecorder : DbCommandInterceptor
+    {
+        public bool Armed { get; set; }
+        public bool UpdatedUplift { get; private set; }
+        public bool UpdatedWorkOrder { get; private set; }
+
+        public override ValueTask<InterceptionResult<DbDataReader>> ReaderExecutingAsync(
+            DbCommand command,
+            CommandEventData eventData,
+            InterceptionResult<DbDataReader> result,
+            CancellationToken cancellationToken = default)
+        {
+            if (Armed && command.Transaction is not null)
+            {
+                UpdatedUplift |= command.CommandText.Contains("UPDATE \"DispatchUpliftRequests\"");
+                UpdatedWorkOrder |= command.CommandText.Contains("UPDATE \"workOrders\"");
+            }
+
+            return base.ReaderExecutingAsync(command, eventData, result, cancellationToken);
+        }
+    }
+
+    private sealed class FailCommitInterceptor : DbTransactionInterceptor
+    {
+        public bool Armed { get; set; }
+
+        public override ValueTask<InterceptionResult> TransactionCommittingAsync(
+            DbTransaction transaction,
+            TransactionEventData eventData,
+            InterceptionResult result,
+            CancellationToken cancellationToken = default)
+        {
+            if (Armed)
+                throw new InvalidOperationException("Simulated failure before the commit");
+
+            return base.TransactionCommittingAsync(transaction, eventData, result, cancellationToken);
+        }
+    }
+}
diff --git a/SeaHavenIndustries.Tests/WorkOrderReconciliationTests.cs b/SeaHavenIndustries.Tests/WorkOrderReconciliationTests.cs
index 331ab47..fd37400 100644
--- a/SeaHavenIndustries.Tests/WorkOrderReconciliationTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderReconciliationTests.cs
@@ -216,6 +216,16 @@ public sealed class WorkOrderReconciliationTests
         Assert.Equal("winner", (await context.workOrders.SingleAsync()).WorkerOrderTitle);
     }
 
+    internal static WorkOrderReconciliationService CreateService(
+        IReadOnlyList<ProcurementWorkOrder> workOrders,
+        IWorkOrderWebhookDataService data) =>
+        Create(
+            new MockClient(
+                new[] { new ProcurementPage<ProcurementWorkOrder>(workOrders, null) },
+                new()),
+            data,
+            new RecordingJobs());
+
     private static WorkOrderReconciliationService Create(
         IProcurementWorkOrderClient client,
         IWorkOrderWebhookDataService workOrders,

From e993e1b5fcfd53deb5cafe1086304640c5a80640 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 18:54:10 -0300
Subject: [PATCH 175/183] refactor(auth): compose bearer authentication through
 one registration

---
 .../JwtAuthenticationRegistration.cs          | 41 +++++++++++++++++++
 Api.SeaHavenIndustries/Program.cs             | 25 +----------
 2 files changed, 42 insertions(+), 24 deletions(-)
 create mode 100644 Api.SeaHavenIndustries/Infrastructure/JwtAuthenticationRegistration.cs

diff --git a/Api.SeaHavenIndustries/Infrastructure/JwtAuthenticationRegistration.cs b/Api.SeaHavenIndustries/Infrastructure/JwtAuthenticationRegistration.cs
new file mode 100644
index 0000000..a69bbf1
--- /dev/null
+++ b/Api.SeaHavenIndustries/Infrastructure/JwtAuthenticationRegistration.cs
@@ -0,0 +1,41 @@
+using System.Text;
+using Microsoft.AspNetCore.Authentication.JwtBearer;
+using Microsoft.IdentityModel.Tokens;
+
+namespace Api.SeaHavenIndustries.Infrastructure
+{
+    public static class JwtAuthenticationRegistration
+    {
+        /// <summary>
+        /// Registers bearer-token authentication as the default scheme. Program.cs and the
+        /// behavior tests both compose authentication through this method so the token
+        /// rules under test are the rules that run.
+        /// </summary>
+        public static IServiceCollection AddSeaHavenJwtAuthentication(this IServiceCollection services, IConfiguration configuration)
+        {
+            services.AddAuthentication(options =>
+            {
+                options.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;
+                options.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;
+                options.DefaultScheme = JwtBearerDefaults.AuthenticationScheme;
+            })
+            .AddJwtBearer(options =>
+            {
+                options.SaveToken = true;
+                options.RequireHttpsMetadata = false;
+                options.TokenValidationParameters = new TokenValidationParameters()
+                {
+                    ValidateIssuer = true,
+                    ValidateAudience = true,
+                    ValidAudience = configuration["JWT:ValidAudience"],
+                    ValidIssuer = configuration["JWT:ValidIssuer"],
+                    IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(
+                        configuration["JWT:Secret"]
+                        ?? throw new InvalidOperationException("JWT:Secret configuration is required")))
+                };
+            });
+
+            return services;
+        }
+    }
+}
diff --git a/Api.SeaHavenIndustries/Program.cs b/Api.SeaHavenIndustries/Program.cs
index 0151543..99cfe30 100644
--- a/Api.SeaHavenIndustries/Program.cs
+++ b/Api.SeaHavenIndustries/Program.cs
@@ -5,15 +5,12 @@ using Api.SeaHavenIndustries.Middleware;
 using Api.SeaHavenIndustries.Observability;
 using Api.SeaHavenIndustries.Options;
 using Data.SeaHavenIndustries;
-using Microsoft.AspNetCore.Authentication.JwtBearer;
 using Microsoft.AspNetCore.Identity;
 using Microsoft.AspNetCore.ResponseCompression;
 using Microsoft.EntityFrameworkCore;
-using Microsoft.IdentityModel.Tokens;
 using Microsoft.OpenApi.Models;
 using Sentry.AspNetCore;
 using Sentry.Extensibility;
-using System.Text;
 using SeaHaven.DataServices.DependencyInjection;
 using SeaHaven.Services.DependencyInjection;
 using SeaHaven.Services.Implementation;
@@ -143,27 +140,7 @@ builder.Services.AddOptions<SeaHaven.Services.Implementation.WorkOrderOpsHealthO
             health.LegacySunsetDate = legacy.Value.SunsetDate;
         });
 
-builder.Services.AddAuthentication(options =>
-{
-    options.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;
-    options.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;
-    options.DefaultScheme = JwtBearerDefaults.AuthenticationScheme;
-})
-.AddJwtBearer(options =>
-{
-    options.SaveToken = true;
-    options.RequireHttpsMetadata = false;
-    options.TokenValidationParameters = new TokenValidationParameters()
-    {
-        ValidateIssuer = true,
-        ValidateAudience = true,
-        ValidAudience = configuration["JWT:ValidAudience"],
-        ValidIssuer = configuration["JWT:ValidIssuer"],
-        IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(
-            configuration["JWT:Secret"]
-            ?? throw new InvalidOperationException("JWT:Secret configuration is required")))
-    };
-});
+builder.Services.AddSeaHavenJwtAuthentication(configuration);
 builder.Services.AddEndpointsApiExplorer();
 builder.Services.AddSwaggerGen(c =>
 {

From 306ab159cccc7a0448703f73d0fc182b3f883212 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 19:01:37 -0300
Subject: [PATCH 176/183] Cancel pending uplifts when the legacy ingest cancels
 a work order

The ingest writes only the status text, so the shared helper gains a
status-text form of the same rule and the ingest stages the same
sync-attributed cancellation in its batch save.
---
 .../Helpers/PendingUpliftCancellation.cs      | 13 +++-
 .../WorkOrderIngestDataService.cs             | 11 ++++
 .../Interfaces/IWorkOrderIngestDataService.cs |  3 +
 .../Implementation/WorkOrderIngestService.cs  |  8 +++
 .../WorkOrderCrmCancelUpliftTests.cs          | 60 ++++++++++++++++++-
 5 files changed, 92 insertions(+), 3 deletions(-)

diff --git a/SeaHaven.DataServices/Helpers/PendingUpliftCancellation.cs b/SeaHaven.DataServices/Helpers/PendingUpliftCancellation.cs
index 1a4e3c4..2264a2a 100644
--- a/SeaHaven.DataServices/Helpers/PendingUpliftCancellation.cs
+++ b/SeaHaven.DataServices/Helpers/PendingUpliftCancellation.cs
@@ -7,7 +7,7 @@ namespace SeaHaven.DataServices.Helpers
     /// <summary>
     /// The single rule and write for "a work order that becomes Canceled cancels its pending
     /// uplifts in the same action". Every path that can cancel a work order (board update,
-    /// the cancel endpoint, CRM webhook and reconciliation) asks <see cref="Applies"/> and
+    /// CRM webhook and reconciliation, legacy ingest) asks <see cref="Applies"/> and
     /// stages the cancellation into its own unit of work, so the uplift change and its own
     /// audit row commit, or roll back, with the work order's status change.
     /// </summary>
@@ -22,6 +22,17 @@ namespace SeaHaven.DataServices.Helpers
         public static bool Applies(LifecycleStatus? before, LifecycleStatus? after)
             => before != LifecycleStatus.Canceled && after == LifecycleStatus.Canceled;
 
+        /// <summary>
+        /// True when a status-text change moves a work order into Cancelled. The legacy ingest
+        /// sync writes only the status text, never the lifecycle status.
+        /// </summary>
+        public static bool AppliesToStatusText(string? before, string? after)
+            => !IsCancelledText(before) && IsCancelledText(after);
+
+        private static bool IsCancelledText(string? status)
+            => string.Equals(status, "Cancelled", StringComparison.OrdinalIgnoreCase)
+                || string.Equals(status, "Canceled", StringComparison.OrdinalIgnoreCase);
+
         /// <summary>
         /// Uplift requests that belong to a work order: on a live dispatch that the work
         /// order owns or is linked to.
diff --git a/SeaHaven.DataServices/Implementation/WorkOrderIngestDataService.cs b/SeaHaven.DataServices/Implementation/WorkOrderIngestDataService.cs
index 5a2a835..6c13dce 100644
--- a/SeaHaven.DataServices/Implementation/WorkOrderIngestDataService.cs
+++ b/SeaHaven.DataServices/Implementation/WorkOrderIngestDataService.cs
@@ -1,5 +1,7 @@
 using Data.SeaHavenIndustries;
+using Data.SeaHavenIndustries.Enums;
 using Microsoft.EntityFrameworkCore;
+using SeaHaven.DataServices.Helpers;
 using SeaHaven.DataServices.Interfaces;
 
 namespace SeaHaven.DataServices.Implementation
@@ -31,6 +33,15 @@ namespace SeaHaven.DataServices.Implementation
             await _context.SaveChangesAsync(cancellationToken);
         }
 
+        public Task<int> StageCancelPendingUpliftsAsync(int workOrderId, CancellationToken cancellationToken)
+            => PendingUpliftCancellation.StageAsync(
+                _context,
+                workOrderId,
+                actorId: null,
+                actorType: AuditActorType.Sync.ToString(),
+                DateTime.UtcNow,
+                cancellationToken);
+
         public async Task ExecuteTransactionalAsync(Func<CancellationToken, Task> work, CancellationToken cancellationToken)
         {
             await using var transaction = _context.Database.IsRelational()
diff --git a/SeaHaven.DataServices/Interfaces/IWorkOrderIngestDataService.cs b/SeaHaven.DataServices/Interfaces/IWorkOrderIngestDataService.cs
index b97d7c1..5017633 100644
--- a/SeaHaven.DataServices/Interfaces/IWorkOrderIngestDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IWorkOrderIngestDataService.cs
@@ -9,6 +9,9 @@ namespace SeaHaven.DataServices.Interfaces
         void TrackWorkOrder(WorkOrder workOrder);
         Task<Locations?> FindLocationAsync(string name, CancellationToken cancellationToken);
         Task AddAndSaveLocationAsync(Locations location, CancellationToken cancellationToken);
+        // Stages (does not save) the sync-attributed cancellation of the work order's pending
+        // uplifts, each with its own audit row. See PendingUpliftCancellation.
+        Task<int> StageCancelPendingUpliftsAsync(int workOrderId, CancellationToken cancellationToken);
         Task ExecuteTransactionalAsync(Func<CancellationToken, Task> work, CancellationToken cancellationToken);
         Task SaveAsync(CancellationToken cancellationToken);
     }
diff --git a/SeaHaven.Services/Implementation/WorkOrderIngestService.cs b/SeaHaven.Services/Implementation/WorkOrderIngestService.cs
index bdadab1..a232128 100644
--- a/SeaHaven.Services/Implementation/WorkOrderIngestService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderIngestService.cs
@@ -1,4 +1,5 @@
 using Data.SeaHavenIndustries;
+using SeaHaven.DataServices.Helpers;
 using SeaHaven.DataServices.Interfaces;
 using SeaHaven.Services.DTOs;
 using SeaHaven.Services.Helpers;
@@ -134,8 +135,15 @@ namespace SeaHaven.Services.Implementation
 
             var mappedStatus = WorkOrderIngestFieldMapper.MapStatus(item.WoStatus);
             if (mappedStatus != null)
+            {
+                var statusBefore = existing.Status;
                 await _mergePolicy.TryApplyAsync(syncContext, "Status", mappedStatus);
 
+                // A sync cancellation cancels the work order's pending uplifts in the same save.
+                if (PendingUpliftCancellation.AppliesToStatusText(statusBefore, existing.Status))
+                    await _ingestData.StageCancelPendingUpliftsAsync(existing.Id, cancellationToken);
+            }
+
             var priority = WorkOrderIngestFieldMapper.MapSeverityToPriority(item.Severity);
             if (priority != null)
                 await _mergePolicy.TryApplyAsync(syncContext, "Priority", priority);
diff --git a/SeaHavenIndustries.Tests/WorkOrderCrmCancelUpliftTests.cs b/SeaHavenIndustries.Tests/WorkOrderCrmCancelUpliftTests.cs
index f8ae2a1..8b7c42a 100644
--- a/SeaHavenIndustries.Tests/WorkOrderCrmCancelUpliftTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderCrmCancelUpliftTests.cs
@@ -6,6 +6,7 @@ using Microsoft.EntityFrameworkCore;
 using Microsoft.EntityFrameworkCore.Diagnostics;
 using SeaHaven.DataServices.Implementation;
 using SeaHaven.DataServices.Interfaces;
+using SeaHaven.Services.DTOs;
 using SeaHaven.Services.Implementation;
 using SeaHaven.Services.Interfaces;
 using Xunit;
@@ -14,8 +15,8 @@ namespace SeaHavenIndustries.Tests;
 
 /// <summary>
 /// A work order cancelled by the CRM (webhook or reconciliation, both persisted by the
-/// webhook data service) cancels its pending uplift in the same save, with an audit entry
-/// of its own, exactly as a cancel from the board does.
+/// webhook data service, or the legacy ingest) cancels its pending uplift in the same save,
+/// with an audit entry of its own, exactly as a cancel from the board does.
 /// </summary>
 public sealed class WorkOrderCrmCancelUpliftTests
 {
@@ -140,6 +141,61 @@ public sealed class WorkOrderCrmCancelUpliftTests
         Assert.Equal(AuditActorType.Sync.ToString(), upliftAudit.ActorType);
     }
 
+    [Fact]
+    public async Task LegacyIngestCancel_CancelsPendingUpliftWithItsOwnSyncAuditAndLeavesDecidedUpliftsAlone()
+    {
+        var options = await SeedInMemoryAsync(
+            WorkOrderBoardPatchCancelUpliftTests.Uplift(100, "Pending", 700m),
+            WorkOrderBoardPatchCancelUpliftTests.Uplift(101, "Approved", 600m));
+
+        await using (var context = new ApplicationDbContext(options))
+        {
+            await NewIngestService(context).UpsertBatchAsync(new[]
+            {
+                new WorkOrderIngestPayloadDto { ExternalWorkOrderId = "123", WoStatus = "cancelled" }
+            });
+        }
+
+        await using var verify = new ApplicationDbContext(options);
+        Assert.Equal("Cancelled", verify.workOrders.Single().Status);
+        Assert.Equal(UpliftStatus.Withdrawn, verify.DispatchUpliftRequests.Single(u => u.Id == 100).Status);
+        Assert.Equal(UpliftStatus.Approved, verify.DispatchUpliftRequests.Single(u => u.Id == 101).Status);
+        var upliftAudit = Assert.Single(verify.WorkOrderAuditLogs, log => log.Action == "uplift_cancel");
+        Assert.Equal(AuditActorType.Sync.ToString(), upliftAudit.ActorType);
+        Assert.Equal("Dispatch DIS-10 Uplift", upliftAudit.FieldName);
+    }
+
+    [Fact]
+    public async Task LegacyIngestUpdateThatDoesNotCancel_LeavesPendingUpliftPending()
+    {
+        var options = await SeedInMemoryAsync(
+            WorkOrderBoardPatchCancelUpliftTests.Uplift(100, "Pending", 700m));
+
+        await using (var context = new ApplicationDbContext(options))
+        {
+            await NewIngestService(context).UpsertBatchAsync(new[]
+            {
+                new WorkOrderIngestPayloadDto { ExternalWorkOrderId = "123", WoStatus = "in_progress" }
+            });
+        }
+
+        await using var verify = new ApplicationDbContext(options);
+        Assert.Equal(UpliftStatus.Pending, verify.DispatchUpliftRequests.Single().Status);
+        Assert.DoesNotContain(verify.WorkOrderAuditLogs, log => log.Action == "uplift_cancel");
+    }
+
+    private static WorkOrderIngestService NewIngestService(ApplicationDbContext context)
+    {
+        var fieldLocks = new WorkOrderFieldLockService(new WorkOrderFieldLockDataService(context));
+        var audit = new WorkOrderAuditService(new WorkOrderAuditDataService(context), fieldLocks);
+        return new WorkOrderIngestService(
+            new WorkOrderIngestDataService(context),
+            new SyncFieldMergePolicy(fieldLocks),
+            fieldLocks,
+            audit,
+            WorkOrderAccountTestHelpers.Resolver(context));
+    }
+
     [Fact]
     public async Task CrmCancel_FailureBeforeCommit_RollsBackWorkOrderAndUpliftTogether()
     {

From b7be07411ea25aa3fb0c19ec1e4fa47b17c813e9 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 19:08:33 -0300
Subject: [PATCH 177/183] fix(auth): end earlier sessions when a password or
 account status changes

Tokens now carry a keyed hash of the account's security stamp, and every
authenticated request compares it with the stored stamp (cached for 60 s,
evicted in-process on change). A password reset or change, a deactivation
and a deletion all rotate or remove the stamp, so tokens issued before them
get 401. Tokens without the claim get 401 too.
---
 .../AuthenticationServiceTests.cs             |   4 +-
 .../PasswordPolicyTests.cs                    |   6 +-
 .../ServiceRegistrationTests.cs               |  15 +
 .../SessionStampServiceTests.cs               | 138 +++++++++
 .../TeamMemberServiceTests.cs                 |   6 +-
 .../UserServiceTests.cs                       |   3 +-
 .../JwtAuthenticationRegistration.cs          |  26 ++
 .../Implementation/UserDataService.cs         |   9 +
 .../Interfaces/IUserDataService.cs            |   3 +
 .../DependencyInjection/ServicesModule.cs     |   2 +
 .../Helpers/SeaHavenClaimTypes.cs             |   6 +
 .../Implementation/AuthenticationService.cs   |  23 +-
 .../Implementation/SessionStampService.cs     | 109 +++++++
 .../Implementation/TeamMemberService.cs       |  14 +-
 .../Implementation/UserService.cs             |   9 +-
 .../Interfaces/ISessionStampCache.cs          |  20 ++
 .../Interfaces/ISessionStampService.cs        |  21 ++
 .../SessionRevocationTests.cs                 | 191 +++++++++++++
 SeaHavenIndustries.Tests/SessionTestHost.cs   | 268 ++++++++++++++++++
 19 files changed, 863 insertions(+), 10 deletions(-)
 create mode 100644 Api.SeaHavenIndustries.Tests/SessionStampServiceTests.cs
 create mode 100644 SeaHaven.Services/Implementation/SessionStampService.cs
 create mode 100644 SeaHaven.Services/Interfaces/ISessionStampCache.cs
 create mode 100644 SeaHaven.Services/Interfaces/ISessionStampService.cs
 create mode 100644 SeaHavenIndustries.Tests/SessionRevocationTests.cs
 create mode 100644 SeaHavenIndustries.Tests/SessionTestHost.cs

diff --git a/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs b/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs
index 7d9aa08..a26fb62 100644
--- a/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/AuthenticationServiceTests.cs
@@ -25,7 +25,9 @@ public class AuthenticationServiceTests
         var (manager, s, h) = IdentityTestHelpers.CreateUserManager();
         store = s;
         hasher = h;
-        return new AuthenticationService(manager, Microsoft.Extensions.Options.Options.Create(JwtOptions), userData.Object, forget.Object, email.Object);
+        var jwtOptions = Microsoft.Extensions.Options.Options.Create(JwtOptions);
+        var sessionStamps = new SessionStampService(userData.Object, new InMemorySessionStampCache(TimeProvider.System), jwtOptions);
+        return new AuthenticationService(manager, jwtOptions, userData.Object, forget.Object, email.Object, sessionStamps);
     }
 
     private static JwtOptions JwtOptions => new()
diff --git a/Api.SeaHavenIndustries.Tests/PasswordPolicyTests.cs b/Api.SeaHavenIndustries.Tests/PasswordPolicyTests.cs
index b33d466..3f5a7a0 100644
--- a/Api.SeaHavenIndustries.Tests/PasswordPolicyTests.cs
+++ b/Api.SeaHavenIndustries.Tests/PasswordPolicyTests.cs
@@ -132,7 +132,8 @@ public sealed class PasswordPolicyTests : IAsyncDisposable
             Microsoft.Extensions.Options.Options.Create(new JwtOptions { Secret = new string('x', 64) }),
             Mock.Of<IUserDataService>(),
             Mock.Of<IForgetPasswordDataService>(),
-            Mock.Of<IEmailSender>());
+            Mock.Of<IEmailSender>(),
+            Mock.Of<ISessionStampService>());
 
         var result = await service.ChangePasswordAsync(user.Id, CurrentPassword, "Next2@x", CancellationToken.None);
 
@@ -208,7 +209,8 @@ public sealed class PasswordPolicyTests : IAsyncDisposable
             Microsoft.Extensions.Options.Options.Create(new JwtOptions { Secret = new string('x', 64) }),
             Mock.Of<IUserDataService>(),
             (forget ?? new Mock<IForgetPasswordDataService>()).Object,
-            Mock.Of<IEmailSender>());
+            Mock.Of<IEmailSender>(),
+            Mock.Of<ISessionStampService>());
 
     public async ValueTask DisposeAsync()
     {
diff --git a/Api.SeaHavenIndustries.Tests/ServiceRegistrationTests.cs b/Api.SeaHavenIndustries.Tests/ServiceRegistrationTests.cs
index 84da086..b3e0e3d 100644
--- a/Api.SeaHavenIndustries.Tests/ServiceRegistrationTests.cs
+++ b/Api.SeaHavenIndustries.Tests/ServiceRegistrationTests.cs
@@ -72,4 +72,19 @@ public class ServiceRegistrationTests
 
         AssertScopedConventionRegistrations(services, candidates, "SeaHaven.DataServices");
     }
+
+    [Fact]
+    public void SessionStampCache_IsOneInstanceForTheWholeProcess()
+    {
+        // A scoped cache would never be hit, and a stamp change on one request would
+        // never evict the value another request cached.
+        using var provider = BuildConventionServices().BuildServiceProvider();
+        using var first = provider.CreateScope();
+        using var second = provider.CreateScope();
+
+        var cache = first.ServiceProvider.GetRequiredService<SeaHaven.Services.Interfaces.ISessionStampCache>();
+
+        cache.Should().BeOfType<InMemorySessionStampCache>();
+        second.ServiceProvider.GetRequiredService<SeaHaven.Services.Interfaces.ISessionStampCache>().Should().BeSameAs(cache);
+    }
 }
diff --git a/Api.SeaHavenIndustries.Tests/SessionStampServiceTests.cs b/Api.SeaHavenIndustries.Tests/SessionStampServiceTests.cs
new file mode 100644
index 0000000..1706b5a
--- /dev/null
+++ b/Api.SeaHavenIndustries.Tests/SessionStampServiceTests.cs
@@ -0,0 +1,138 @@
+using FluentAssertions;
+using Moq;
+using SeaHaven.DataServices.Interfaces;
+using SeaHaven.Services.Configuration;
+using SeaHaven.Services.Implementation;
+using Xunit;
+
+namespace Api.SeaHavenIndustries.Tests;
+
+public class SessionStampServiceTests
+{
+    private const string UserId = "user-1";
+
+    private readonly Mock<IUserDataService> _users = new();
+    private readonly SteppedTimeProvider _time = new();
+    private readonly InMemorySessionStampCache _cache;
+
+    public SessionStampServiceTests()
+    {
+        _cache = new InMemorySessionStampCache(_time);
+    }
+
+    private SessionStampService NewService(string secret = "0123456789abcdef0123456789abcdef0123456789abcdef") =>
+        new(_users.Object, _cache, Microsoft.Extensions.Options.Options.Create(new JwtOptions { Secret = secret }));
+
+    private void StoredStamp(string? stamp) =>
+        _users.Setup(users => users.GetActiveSecurityStampAsync(UserId, It.IsAny<CancellationToken>())).ReturnsAsync(stamp);
+
+    [Fact]
+    public void The_token_carries_a_keyed_hash_never_the_stamp_itself()
+    {
+        var value = NewService().ClaimValueFor("STAMP-ONE");
+
+        value.Should().NotContain("STAMP-ONE");
+        value.Should().Be(NewService().ClaimValueFor("STAMP-ONE"));
+        value.Should().NotBe(NewService().ClaimValueFor("STAMP-TWO"));
+        value.Should().NotBe(NewService(new string('z', 64)).ClaimValueFor("STAMP-ONE"));
+    }
+
+    [Fact]
+    public async Task A_matching_stamp_is_read_once_per_cache_lifetime()
+    {
+        StoredStamp("STAMP-ONE");
+        var service = NewService();
+        var issued = service.ClaimValueFor("STAMP-ONE");
+
+        (await service.IsCurrentAsync(UserId, issued, CancellationToken.None)).Should().BeTrue();
+        (await NewService().IsCurrentAsync(UserId, issued, CancellationToken.None)).Should().BeTrue();
+
+        _users.Verify(users => users.GetActiveSecurityStampAsync(UserId, It.IsAny<CancellationToken>()), Times.Once);
+    }
+
+    [Fact]
+    public async Task A_stamp_changed_by_another_instance_is_enforced_once_the_cached_value_expires()
+    {
+        StoredStamp("STAMP-ONE");
+        var service = NewService();
+        var issued = service.ClaimValueFor("STAMP-ONE");
+        (await service.IsCurrentAsync(UserId, issued, CancellationToken.None)).Should().BeTrue();
+
+        StoredStamp("STAMP-TWO");
+        _time.Advance(InMemorySessionStampCache.Lifetime - TimeSpan.FromSeconds(1));
+        (await service.IsCurrentAsync(UserId, issued, CancellationToken.None)).Should().BeTrue();
+
+        _time.Advance(TimeSpan.FromSeconds(1));
+        (await service.IsCurrentAsync(UserId, issued, CancellationToken.None)).Should().BeFalse();
+    }
+
+    [Fact]
+    public async Task A_stamp_changed_by_this_instance_is_enforced_at_once()
+    {
+        StoredStamp("STAMP-ONE");
+        var service = NewService();
+        var issued = service.ClaimValueFor("STAMP-ONE");
+        (await service.IsCurrentAsync(UserId, issued, CancellationToken.None)).Should().BeTrue();
+
+        StoredStamp("STAMP-TWO");
+        service.Forget(UserId);
+
+        (await service.IsCurrentAsync(UserId, issued, CancellationToken.None)).Should().BeFalse();
+    }
+
+    [Fact]
+    public async Task A_read_that_races_a_change_is_not_cached()
+    {
+        var service = NewService();
+        var issued = service.ClaimValueFor("STAMP-ONE");
+        var reads = 0;
+        _users.Setup(users => users.GetActiveSecurityStampAsync(UserId, It.IsAny<CancellationToken>()))
+            .ReturnsAsync(() =>
+            {
+                // The first read returns the old stamp while this instance saves a new one.
+                if (reads++ == 0)
+                {
+                    service.Forget(UserId);
+                    return "STAMP-ONE";
+                }
+
+                return "STAMP-TWO";
+            });
+
+        (await service.IsCurrentAsync(UserId, issued, CancellationToken.None)).Should().BeTrue();
+        (await service.IsCurrentAsync(UserId, issued, CancellationToken.None)).Should().BeFalse();
+    }
+
+    [Theory]
+    [InlineData(null)]
+    [InlineData("")]
+    public async Task A_missing_deleted_or_stampless_account_matches_nothing(string? stored)
+    {
+        StoredStamp(stored);
+        var service = NewService();
+
+        (await service.IsCurrentAsync(UserId, service.ClaimValueFor("STAMP-ONE"), CancellationToken.None)).Should().BeFalse();
+        (await service.IsCurrentAsync(UserId, "", CancellationToken.None)).Should().BeFalse();
+    }
+
+    [Theory]
+    [InlineData(null)]
+    [InlineData("")]
+    public async Task A_token_without_a_stamp_is_refused_without_a_lookup(string? claimValue)
+    {
+        StoredStamp("STAMP-ONE");
+
+        (await NewService().IsCurrentAsync(UserId, claimValue, CancellationToken.None)).Should().BeFalse();
+
+        _users.Verify(users => users.GetActiveSecurityStampAsync(It.IsAny<string>(), It.IsAny<CancellationToken>()), Times.Never);
+    }
+
+    private sealed class SteppedTimeProvider : TimeProvider
+    {
+        private DateTimeOffset _now = new(2026, 9, 25, 12, 0, 0, TimeSpan.Zero);
+
+        public override DateTimeOffset GetUtcNow() => _now;
+
+        public void Advance(TimeSpan by) => _now = _now.Add(by);
+    }
+}
diff --git a/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs b/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs
index 3297fb1..3521716 100644
--- a/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/TeamMemberServiceTests.cs
@@ -29,7 +29,8 @@ public sealed class TeamMemberServiceTests
             Mock.Of<ITeamPermissionOverrideDataService>(),
             Mock.Of<IUserDataService>(),
             Mock.Of<ITeamPermissionService>(),
-            Mock.Of<ITeamMemberInviteService>());
+            Mock.Of<ITeamMemberInviteService>(),
+            Mock.Of<ISessionStampService>());
 
         var result = await service.CreateAsync(
             ValidRequest() with { ServiceAreas = Array.Empty<string>() },
@@ -410,7 +411,8 @@ public sealed class TeamMemberServiceTests
             overrides.Object,
             userData.Object,
             permissions.Object,
-            Mock.Of<ITeamMemberInviteService>());
+            Mock.Of<ITeamMemberInviteService>(),
+            Mock.Of<ISessionStampService>());
     }
 
     private static Mock<UserManager<ApplicationUser>> UserManager()
diff --git a/Api.SeaHavenIndustries.Tests/UserServiceTests.cs b/Api.SeaHavenIndustries.Tests/UserServiceTests.cs
index 916d0ec..62fa837 100644
--- a/Api.SeaHavenIndustries.Tests/UserServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/UserServiceTests.cs
@@ -34,7 +34,8 @@ public class UserServiceTests
             manager,
             userData.Object,
             (accounts ?? new Mock<IAccountDataService>()).Object,
-            email.Object);
+            email.Object,
+            Mock.Of<ISessionStampService>());
     }
 
     [Fact]
diff --git a/Api.SeaHavenIndustries/Infrastructure/JwtAuthenticationRegistration.cs b/Api.SeaHavenIndustries/Infrastructure/JwtAuthenticationRegistration.cs
index a69bbf1..976a6b2 100644
--- a/Api.SeaHavenIndustries/Infrastructure/JwtAuthenticationRegistration.cs
+++ b/Api.SeaHavenIndustries/Infrastructure/JwtAuthenticationRegistration.cs
@@ -1,6 +1,9 @@
+using System.Security.Claims;
 using System.Text;
 using Microsoft.AspNetCore.Authentication.JwtBearer;
 using Microsoft.IdentityModel.Tokens;
+using SeaHaven.Services.Helpers;
+using SeaHaven.Services.Interfaces;
 
 namespace Api.SeaHavenIndustries.Infrastructure
 {
@@ -33,9 +36,32 @@ namespace Api.SeaHavenIndustries.Infrastructure
                         configuration["JWT:Secret"]
                         ?? throw new InvalidOperationException("JWT:Secret configuration is required")))
                 };
+                options.Events = new JwtBearerEvents
+                {
+                    OnTokenValidated = RejectEndedSessionAsync
+                };
             });
 
             return services;
         }
+
+        /// <summary>
+        /// Refuses a correctly signed token whose session stamp no longer matches the
+        /// account: the password was reset or changed, or the account was deactivated or
+        /// deleted, after the token was issued. A token without a stamp is refused too.
+        /// </summary>
+        private static async Task RejectEndedSessionAsync(TokenValidatedContext context)
+        {
+            var userId = context.Principal?.FindFirstValue(ClaimTypes.NameIdentifier);
+            var claimValue = context.Principal?.FindFirstValue(SeaHavenClaimTypes.SessionStamp);
+            var sessions = context.HttpContext.RequestServices.GetRequiredService<ISessionStampService>();
+
+            if (string.IsNullOrEmpty(userId)
+                || !await sessions.IsCurrentAsync(userId, claimValue, context.HttpContext.RequestAborted))
+            {
+                // The handler logs this text; it names no account, token or stamp.
+                context.Fail("The session has ended.");
+            }
+        }
     }
 }
diff --git a/SeaHaven.DataServices/Implementation/UserDataService.cs b/SeaHaven.DataServices/Implementation/UserDataService.cs
index dce7af1..37932bf 100644
--- a/SeaHaven.DataServices/Implementation/UserDataService.cs
+++ b/SeaHaven.DataServices/Implementation/UserDataService.cs
@@ -189,6 +189,15 @@ namespace SeaHaven.DataServices.Implementation
             }
         }
 
+        public async Task<string?> GetActiveSecurityStampAsync(string userId, CancellationToken cancellationToken)
+        {
+            return await _context.Users
+                .AsNoTracking()
+                .Where(user => user.Id == userId && user.IsDeleted != true)
+                .Select(user => user.SecurityStamp)
+                .FirstOrDefaultAsync(cancellationToken);
+        }
+
         public async Task<string?> GetEmailByIdAsync(
             string userId, CancellationToken cancellationToken)
         {
diff --git a/SeaHaven.DataServices/Interfaces/IUserDataService.cs b/SeaHaven.DataServices/Interfaces/IUserDataService.cs
index 3c74dcf..1fd8680 100644
--- a/SeaHaven.DataServices/Interfaces/IUserDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IUserDataService.cs
@@ -20,6 +20,9 @@ namespace SeaHaven.DataServices.Interfaces
         Task DeleteUserWithCascadeAsync(ApplicationUser user, CancellationToken cancellationToken);
         Task ExecuteTransactionalAsync(Func<CancellationToken, Task> callback, CancellationToken cancellationToken);
         Task<string?> GetEmailByIdAsync(string userId, CancellationToken cancellationToken);
+
+        /// <summary>The security stamp of an account that exists and is not deleted; otherwise null.</summary>
+        Task<string?> GetActiveSecurityStampAsync(string userId, CancellationToken cancellationToken);
         Task<IReadOnlyDictionary<string, string>> GetDisplayNamesByIdsAsync(IEnumerable<string> ids);
     }
 }
diff --git a/SeaHaven.Services/DependencyInjection/ServicesModule.cs b/SeaHaven.Services/DependencyInjection/ServicesModule.cs
index 455a0a8..1ef9e77 100644
--- a/SeaHaven.Services/DependencyInjection/ServicesModule.cs
+++ b/SeaHaven.Services/DependencyInjection/ServicesModule.cs
@@ -3,6 +3,7 @@ using Microsoft.Extensions.Configuration;
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.DependencyInjection.Extensions;
 using SeaHaven.Services.Configuration;
+using SeaHaven.Services.Implementation;
 using SeaHaven.Services.Interfaces;
 using System.Reflection;
 
@@ -15,6 +16,7 @@ namespace SeaHaven.Services.DependencyInjection
         public static IServiceCollection AddBusinessServices(this IServiceCollection services, IConfiguration configuration)
         {
             services.TryAddSingleton(TimeProvider.System);
+            services.TryAddSingleton<ISessionStampCache, InMemorySessionStampCache>();
             services.Configure<FrontendOptions>(configuration);
             services.Configure<JwtOptions>(configuration.GetSection(JwtOptions.SectionName));
             services.Configure<ApprovalsOptions>(configuration.GetSection(ApprovalsOptions.SectionName));
diff --git a/SeaHaven.Services/Helpers/SeaHavenClaimTypes.cs b/SeaHaven.Services/Helpers/SeaHavenClaimTypes.cs
index 51437cb..711a21e 100644
--- a/SeaHaven.Services/Helpers/SeaHavenClaimTypes.cs
+++ b/SeaHaven.Services/Helpers/SeaHavenClaimTypes.cs
@@ -11,6 +11,12 @@ namespace SeaHaven.Services.Helpers
 
         /// <summary>Signed org-wide elevation (Admin without AccountId).</summary>
         public const string OrgScopeAll = "all";
+
+        /// <summary>
+        /// A keyed hash of the account's security stamp at sign-in. Never the stamp
+        /// itself: the token is readable by whoever holds it.
+        /// </summary>
+        public const string SessionStamp = "session_stamp";
     }
 
     /// <summary>Resolved media tenant scope from signed claims (fail-closed when Missing).</summary>
diff --git a/SeaHaven.Services/Implementation/AuthenticationService.cs b/SeaHaven.Services/Implementation/AuthenticationService.cs
index a9489a1..543f8a2 100644
--- a/SeaHaven.Services/Implementation/AuthenticationService.cs
+++ b/SeaHaven.Services/Implementation/AuthenticationService.cs
@@ -21,18 +21,21 @@ namespace SeaHaven.Services.Implementation
         private readonly IUserDataService _userDataService;
         private readonly IForgetPasswordDataService _forgetPasswordDataService;
         private readonly IEmailSender _emailSender;
+        private readonly ISessionStampService _sessionStamps;
         public AuthenticationService(
             UserManager<ApplicationUser> userManager,
             IOptions<JwtOptions> jwtOptions,
             IUserDataService userDataService,
             IForgetPasswordDataService forgetPasswordDataService,
-            IEmailSender emailSender)
+            IEmailSender emailSender,
+            ISessionStampService sessionStamps)
         {
             _userManager = userManager;
             _jwtOptions = jwtOptions.Value;
             _userDataService = userDataService;
             _forgetPasswordDataService = forgetPasswordDataService;
             _emailSender = emailSender;
+            _sessionStamps = sessionStamps;
         }
 
         public async Task<LoginResultDTO?> LoginAsync(string? username, string? password, CancellationToken cancellationToken)
@@ -49,12 +52,22 @@ namespace SeaHaven.Services.Implementation
             ArgumentNullException.ThrowIfNull(user);
             cancellationToken.ThrowIfCancellationRequested();
 
+            // Every request checks the token's stamp against the account's, so an account
+            // without one would get a token that never works.
+            if (string.IsNullOrEmpty(user.SecurityStamp))
+            {
+                var stamped = await _userManager.UpdateSecurityStampAsync(user);
+                if (!stamped.Succeeded)
+                    throw new InvalidOperationException("The account's security stamp could not be set.");
+            }
+
             var userRoles = await _userManager.GetRolesAsync(user);
             var authClaims = new List<Claim>
             {
                 new Claim(ClaimTypes.Name, user.UserName ?? ""),
                 new Claim(ClaimTypes.NameIdentifier, user.Id),
-                new Claim(JwtRegisteredClaimNames.Jti, Guid.NewGuid().ToString())
+                new Claim(JwtRegisteredClaimNames.Jti, Guid.NewGuid().ToString()),
+                new Claim(SeaHavenClaimTypes.SessionStamp, _sessionStamps.ClaimValueFor(user.SecurityStamp!))
             };
             foreach (var userRole in userRoles)
             {
@@ -98,9 +111,13 @@ namespace SeaHaven.Services.Implementation
             if (!await _userManager.CheckPasswordAsync(user, currentPassword ?? ""))
                 return ChangePasswordResult(ChangePasswordStatus.CurrentPasswordIncorrect);
 
+            // A changed password rotates the security stamp, which ends every earlier session.
             var result = await _userManager.ChangePasswordAsync(user, currentPassword ?? "", newPassword ?? "");
             if (result.Succeeded)
+            {
+                _sessionStamps.Forget(user.Id);
                 return ChangePasswordResult(ChangePasswordStatus.Succeeded);
+            }
 
             return ChangePasswordResult(IdentityPasswordPolicy.IsPolicyRejection(result)
                 ? ChangePasswordStatus.PasswordRejected
@@ -165,10 +182,12 @@ namespace SeaHaven.Services.Implementation
                 return false;
 
             var token = await _userManager.GeneratePasswordResetTokenAsync(user);
+            // A reset rotates the security stamp, which ends every earlier session.
             var result = await _userManager.ResetPasswordAsync(user, token, password);
             if (!result.Succeeded)
                 return false;
 
+            _sessionStamps.Forget(user.Id);
             await _forgetPasswordDataService.RemoveByEmailAsync(email, cancellationToken);
             return true;
         }
diff --git a/SeaHaven.Services/Implementation/SessionStampService.cs b/SeaHaven.Services/Implementation/SessionStampService.cs
new file mode 100644
index 0000000..bd1daab
--- /dev/null
+++ b/SeaHaven.Services/Implementation/SessionStampService.cs
@@ -0,0 +1,109 @@
+using System.Collections.Concurrent;
+using System.Security.Cryptography;
+using System.Text;
+using Microsoft.Extensions.Options;
+using Microsoft.IdentityModel.Tokens;
+using SeaHaven.DataServices.Interfaces;
+using SeaHaven.Services.Configuration;
+using SeaHaven.Services.Interfaces;
+
+namespace SeaHaven.Services.Implementation
+{
+    public class SessionStampService : ISessionStampService
+    {
+        private readonly IUserDataService _userDataService;
+        private readonly ISessionStampCache _cache;
+        private readonly byte[] _key;
+
+        public SessionStampService(
+            IUserDataService userDataService,
+            ISessionStampCache cache,
+            IOptions<JwtOptions> jwtOptions)
+        {
+            _userDataService = userDataService;
+            _cache = cache;
+            _key = HKDF.DeriveKey(
+                HashAlgorithmName.SHA256,
+                Encoding.UTF8.GetBytes(jwtOptions.Value.Secret),
+                32,
+                info: Encoding.UTF8.GetBytes("session-stamp-v1"));
+        }
+
+        public string ClaimValueFor(string securityStamp)
+        {
+            ArgumentException.ThrowIfNullOrEmpty(securityStamp);
+            return Base64UrlEncoder.Encode(HMACSHA256.HashData(_key, Encoding.UTF8.GetBytes(securityStamp)));
+        }
+
+        public async Task<bool> IsCurrentAsync(string userId, string? claimValue, CancellationToken cancellationToken)
+        {
+            if (string.IsNullOrEmpty(userId) || string.IsNullOrEmpty(claimValue))
+                return false;
+
+            if (!_cache.TryGet(userId, out var expected))
+            {
+                var generation = _cache.Generation;
+                var stamp = await _userDataService.GetActiveSecurityStampAsync(userId, cancellationToken);
+                // A missing, deleted or stampless account has no current value: nothing matches it.
+                expected = string.IsNullOrEmpty(stamp) ? null : ClaimValueFor(stamp);
+                _cache.Set(userId, expected, generation);
+            }
+
+            return expected != null && CryptographicOperations.FixedTimeEquals(
+                Encoding.UTF8.GetBytes(expected),
+                Encoding.UTF8.GetBytes(claimValue));
+        }
+
+        public void Forget(string userId) => _cache.Remove(userId);
+    }
+
+    /// <summary>
+    /// Holds each expected value for <see cref="Lifetime"/>, so a change saved by another
+    /// instance is enforced here within that time; a change saved by this instance is
+    /// enforced at once through <see cref="Remove"/>.
+    /// </summary>
+    public sealed class InMemorySessionStampCache : ISessionStampCache
+    {
+        public static readonly TimeSpan Lifetime = TimeSpan.FromSeconds(60);
+
+        private readonly ConcurrentDictionary<string, Entry> _entries = new(StringComparer.Ordinal);
+        private readonly TimeProvider _timeProvider;
+        private long _generation;
+
+        public InMemorySessionStampCache(TimeProvider timeProvider)
+        {
+            _timeProvider = timeProvider;
+        }
+
+        public long Generation => Interlocked.Read(ref _generation);
+
+        public bool TryGet(string userId, out string? expected)
+        {
+            if (_entries.TryGetValue(userId, out var entry) && entry.ExpiresAt > _timeProvider.GetUtcNow())
+            {
+                expected = entry.Expected;
+                return true;
+            }
+
+            expected = null;
+            return false;
+        }
+
+        public void Set(string userId, string? expected, long generation)
+        {
+            var entry = new Entry(expected, _timeProvider.GetUtcNow().Add(Lifetime));
+            _entries[userId] = entry;
+            // A removal since the read may have raced it: drop the value rather than keep it.
+            if (Generation != generation)
+                _entries.TryRemove(new KeyValuePair<string, Entry>(userId, entry));
+        }
+
+        public void Remove(string userId)
+        {
+            Interlocked.Increment(ref _generation);
+            _entries.TryRemove(userId, out _);
+        }
+
+        private sealed record Entry(string? Expected, DateTimeOffset ExpiresAt);
+    }
+}
diff --git a/SeaHaven.Services/Implementation/TeamMemberService.cs b/SeaHaven.Services/Implementation/TeamMemberService.cs
index 6d78a7b..958edd9 100644
--- a/SeaHaven.Services/Implementation/TeamMemberService.cs
+++ b/SeaHaven.Services/Implementation/TeamMemberService.cs
@@ -21,6 +21,7 @@ public sealed class TeamMemberService : ITeamMemberService
     private readonly IUserDataService _userDataService;
     private readonly ITeamPermissionService _permissionService;
     private readonly ITeamMemberInviteService _inviteService;
+    private readonly ISessionStampService _sessionStamps;
 
     public TeamMemberService(
         UserManager<ApplicationUser> userManager,
@@ -29,8 +30,10 @@ public sealed class TeamMemberService : ITeamMemberService
         ITeamPermissionOverrideDataService permissionDataService,
         IUserDataService userDataService,
         ITeamPermissionService permissionService,
-        ITeamMemberInviteService inviteService)
+        ITeamMemberInviteService inviteService,
+        ISessionStampService sessionStamps)
     {
+        _sessionStamps = sessionStamps;
         _userManager = userManager;
         _roleManager = roleManager;
         _areaDataService = areaDataService;
@@ -197,6 +200,8 @@ public sealed class TeamMemberService : ITeamMemberService
         user.PhoneNumber = candidate.Phone?.Trim();
         user.Color = color;
         user.UniqueName = request.IsActive ? ActiveStatus : "Inactive";
+        var activeChanged = request.IsActive == (user.IsDeleted == true);
+        var deactivated = activeChanged && !request.IsActive;
         user.IsDeleted = !request.IsActive;
 
         var emailChanged = !string.Equals(user.Email, email, StringComparison.OrdinalIgnoreCase);
@@ -229,7 +234,14 @@ public sealed class TeamMemberService : ITeamMemberService
                 return OperationFailure(addRoleResult.Errors.FirstOrDefault()?.Description ?? "Unable to update role.");
         }
 
+        // A new stamp ends the member's earlier sessions, and keeps them ended if the
+        // member is reactivated later.
+        if (deactivated)
+            user.SecurityStamp = Guid.NewGuid().ToString("N");
+
         await _userDataService.UpdateUserAsync(user, cancellationToken);
+        if (activeChanged || emailChanged)
+            _sessionStamps.Forget(user.Id);
         await _areaDataService.ReplaceAsync(user.Id, areas!, cancellationToken);
         if (roleChanged || request.PermissionOverrides is not null)
         {
diff --git a/SeaHaven.Services/Implementation/UserService.cs b/SeaHaven.Services/Implementation/UserService.cs
index f448a1f..94a1b4c 100644
--- a/SeaHaven.Services/Implementation/UserService.cs
+++ b/SeaHaven.Services/Implementation/UserService.cs
@@ -15,17 +15,20 @@ namespace SeaHaven.Services.Implementation
         private readonly IUserDataService _userDataService;
         private readonly IAccountDataService _accountDataService;
         private readonly IEmailSender _emailSender;
+        private readonly ISessionStampService _sessionStamps;
 
         public UserService(
             UserManager<ApplicationUser> userManager,
             IUserDataService userDataService,
             IAccountDataService accountDataService,
-            IEmailSender emailSender)
+            IEmailSender emailSender,
+            ISessionStampService sessionStamps)
         {
             _userManager = userManager;
             _userDataService = userDataService;
             _accountDataService = accountDataService;
             _emailSender = emailSender;
+            _sessionStamps = sessionStamps;
         }
 
         public async Task<IEnumerable<UserListRowDTO>> GetUsersAsync(CancellationToken cancellationToken)
@@ -185,6 +188,7 @@ namespace SeaHaven.Services.Implementation
                 return new AddUserOutcomeDTO { Success = false, Error = UserMutationErrors.Forbidden };
 
             await _userDataService.DeleteUserWithCascadeAsync(data, cancellationToken);
+            _sessionStamps.Forget(data.Id);
             return new AddUserOutcomeDTO { Success = true };
         }
 
@@ -193,8 +197,11 @@ namespace SeaHaven.Services.Implementation
             var exist = await _userDataService.GetForEditAsync(userId, cancellationToken);
             if (exist != null && !await _userDataService.IsAccountOwnerAsync(exist.Id, cancellationToken))
             {
+                // A new stamp keeps this account's earlier sessions ended even if it is restored.
                 exist.IsDeleted = true;
+                exist.SecurityStamp = Guid.NewGuid().ToString("N");
                 await _userDataService.UpdateUserAsync(exist, cancellationToken);
+                _sessionStamps.Forget(exist.Id);
             }
         }
 
diff --git a/SeaHaven.Services/Interfaces/ISessionStampCache.cs b/SeaHaven.Services/Interfaces/ISessionStampCache.cs
new file mode 100644
index 0000000..28339a0
--- /dev/null
+++ b/SeaHaven.Services/Interfaces/ISessionStampCache.cs
@@ -0,0 +1,20 @@
+namespace SeaHaven.Services.Interfaces
+{
+    /// <summary>
+    /// The process-wide cache of expected session stamp values, keyed by user id.
+    /// Registered as a singleton.
+    /// </summary>
+    public interface ISessionStampCache
+    {
+        /// <summary>Changes on every removal; a read that spans one is not cached.</summary>
+        long Generation { get; }
+
+        /// <summary>True with the cached value (null: the account matches nothing) while it is fresh.</summary>
+        bool TryGet(string userId, out string? expected);
+
+        /// <summary>Caches a value read at <paramref name="generation"/>, unless a removal has happened since.</summary>
+        void Set(string userId, string? expected, long generation);
+
+        void Remove(string userId);
+    }
+}
diff --git a/SeaHaven.Services/Interfaces/ISessionStampService.cs b/SeaHaven.Services/Interfaces/ISessionStampService.cs
new file mode 100644
index 0000000..30dff75
--- /dev/null
+++ b/SeaHaven.Services/Interfaces/ISessionStampService.cs
@@ -0,0 +1,21 @@
+namespace SeaHaven.Services.Interfaces
+{
+    /// <summary>
+    /// Ties a sign-in token to the account's security stamp, so a password reset or
+    /// change, a deactivation, or a deletion ends every session issued before it.
+    /// </summary>
+    public interface ISessionStampService
+    {
+        /// <summary>The value a token carries for <paramref name="securityStamp"/>.</summary>
+        string ClaimValueFor(string securityStamp);
+
+        /// <summary>
+        /// True when <paramref name="claimValue"/> matches the stamp of an account that
+        /// exists and is not deleted. Stored stamps are cached briefly.
+        /// </summary>
+        Task<bool> IsCurrentAsync(string userId, string? claimValue, CancellationToken cancellationToken);
+
+        /// <summary>Drops the cached stamp; call after a change to the stamp or the account is saved.</summary>
+        void Forget(string userId);
+    }
+}
diff --git a/SeaHavenIndustries.Tests/SessionRevocationTests.cs b/SeaHavenIndustries.Tests/SessionRevocationTests.cs
new file mode 100644
index 0000000..a2b5d85
--- /dev/null
+++ b/SeaHavenIndustries.Tests/SessionRevocationTests.cs
@@ -0,0 +1,191 @@
+using System.IdentityModel.Tokens.Jwt;
+using System.Net;
+using System.Security.Claims;
+
+namespace SeaHavenIndustries.Tests;
+
+/// <summary>
+/// A sign-in token must stop working once the account's password is reset or changed,
+/// or once the account is deactivated or deleted. Every case goes through the real API
+/// host: sign in over HTTP, change the account through its endpoint, then call an
+/// authorized endpoint with the old and the new token.
+/// </summary>
+public sealed class SessionRevocationTests
+{
+    private const string SessionStampClaim = "session_stamp";
+    private const string NewPassword = "Quiet-Tide-77!";
+
+    [Fact]
+    public async Task A_token_issued_before_a_password_reset_is_refused_and_the_new_sign_in_works()
+    {
+        await using var host = await SessionTestHost.StartAsync();
+        await host.AddUserAsync("sam@example.com");
+        var before = await host.SignInAsync("sam@example.com");
+        await AssertAcceptedAsync(host, before);
+
+        await host.ResetPasswordAsync("sam@example.com", NewPassword);
+
+        await AssertRefusedAsync(host, before);
+        var after = await host.SignInAsync("sam@example.com", NewPassword);
+        await AssertAcceptedAsync(host, after);
+    }
+
+    [Fact]
+    public async Task A_token_issued_before_a_password_change_is_refused_and_the_new_sign_in_works()
+    {
+        await using var host = await SessionTestHost.StartAsync();
+        await host.AddUserAsync("sam@example.com");
+        var before = await host.SignInAsync("sam@example.com");
+        var other = await host.SignInAsync("sam@example.com");
+        await AssertAcceptedAsync(host, other);
+
+        using (var changed = await host.SendAsync(HttpMethod.Post, "api/Authentication/ChangePassword", before, new
+               {
+                   currentpassword = SessionTestHost.Password,
+                   newpassword = NewPassword,
+                   confirmpassword = NewPassword
+               }))
+            Assert.Equal(HttpStatusCode.OK, changed.StatusCode);
+
+        await AssertRefusedAsync(host, before);
+        await AssertRefusedAsync(host, other);
+        var after = await host.SignInAsync("sam@example.com", NewPassword);
+        await AssertAcceptedAsync(host, after);
+    }
+
+    [Fact]
+    public async Task A_deactivated_member_is_refused_and_the_old_token_stays_refused_after_reactivation()
+    {
+        await using var host = await SessionTestHost.StartAsync();
+        await host.AddUserAsync("admin@example.com", "Admin");
+        var member = await host.AddUserAsync("sam@example.com", "Scheduler");
+        var admin = await host.SignInAsync("admin@example.com");
+        var before = await host.SignInAsync("sam@example.com");
+        await AssertAcceptedAsync(host, before);
+
+        await UpdateMemberAsync(host, admin, member.Id, isActive: false);
+        await AssertRefusedAsync(host, before);
+
+        await UpdateMemberAsync(host, admin, member.Id, isActive: true);
+        await AssertRefusedAsync(host, before);
+        var after = await host.SignInAsync("sam@example.com");
+        await AssertAcceptedAsync(host, after);
+    }
+
+    [Fact]
+    public async Task A_token_for_an_account_its_owner_deleted_is_refused()
+    {
+        await using var host = await SessionTestHost.StartAsync();
+        await host.AddUserAsync("sam@example.com");
+        var before = await host.SignInAsync("sam@example.com");
+
+        using (var deleted = await host.SendAsync(HttpMethod.Post, "api/User/DeleteCurrentUser", before))
+            Assert.Equal(HttpStatusCode.OK, deleted.StatusCode);
+
+        await AssertRefusedAsync(host, before);
+    }
+
+    [Fact]
+    public async Task A_token_for_an_account_an_admin_deleted_is_refused()
+    {
+        await using var host = await SessionTestHost.StartAsync();
+        await host.AddUserAsync("admin@example.com", "Admin");
+        var member = await host.AddUserAsync("sam@example.com");
+        var admin = await host.SignInAsync("admin@example.com");
+        var before = await host.SignInAsync("sam@example.com");
+        await AssertAcceptedAsync(host, before);
+
+        using (var deleted = await host.SendAsync(HttpMethod.Delete, "api/User/DeleteUser", admin, new { id = member.Id }))
+            Assert.Equal(HttpStatusCode.OK, deleted.StatusCode);
+
+        await AssertRefusedAsync(host, before);
+    }
+
+    [Fact]
+    public async Task A_correctly_signed_token_with_a_forged_session_stamp_is_refused()
+    {
+        await using var host = await SessionTestHost.StartAsync();
+        await host.AddUserAsync("sam@example.com");
+        var issued = await host.SignInAsync("sam@example.com");
+        await AssertAcceptedAsync(host, issued);
+
+        var forged = SessionTestHost.Resign(issued, claims =>
+        {
+            claims.RemoveAll(claim => claim.Type == SessionStampClaim);
+            claims.Add(new Claim(SessionStampClaim, "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"));
+        });
+        var resignedUnchanged = SessionTestHost.Resign(issued, _ => { });
+
+        await AssertAcceptedAsync(host, resignedUnchanged);
+        await AssertRefusedAsync(host, forged);
+    }
+
+    [Fact]
+    public async Task A_correctly_signed_token_without_a_session_stamp_is_refused()
+    {
+        // The shape of every token issued before this check shipped.
+        await using var host = await SessionTestHost.StartAsync();
+        await host.AddUserAsync("sam@example.com");
+        var issued = await host.SignInAsync("sam@example.com");
+
+        var stampless = SessionTestHost.Resign(issued, claims => claims.RemoveAll(claim => claim.Type == SessionStampClaim));
+
+        await AssertRefusedAsync(host, stampless);
+    }
+
+    [Fact]
+    public async Task A_refused_token_gets_the_same_401_as_no_token_and_nothing_sensitive_is_logged()
+    {
+        await using var host = await SessionTestHost.StartAsync();
+        var user = await host.AddUserAsync("sam@example.com");
+        var before = await host.SignInAsync("sam@example.com");
+        var stampClaim = new JwtSecurityTokenHandler().ReadJwtToken(before).Claims
+            .SingleOrDefault(claim => claim.Type == SessionStampClaim)?.Value;
+        var oldStamp = await host.StoredSecurityStampAsync(user.Id);
+
+        await host.ResetPasswordAsync("sam@example.com", NewPassword);
+
+        using var refused = await host.ProfileAsync(before);
+        using var anonymous = await host.ProfileAsync(null);
+        Assert.Equal(HttpStatusCode.Unauthorized, refused.StatusCode);
+        Assert.Equal(HttpStatusCode.Unauthorized, anonymous.StatusCode);
+        Assert.Equal(await anonymous.Content.ReadAsStringAsync(), await refused.Content.ReadAsStringAsync());
+        Assert.Empty(await refused.Content.ReadAsStringAsync());
+
+        var newStamp = await host.StoredSecurityStampAsync(user.Id);
+        var secrets = new[] { before, oldStamp, newStamp, stampClaim, "sam@example.com" }
+            .Where(secret => !string.IsNullOrEmpty(secret))
+            .ToList();
+        var leaks = host.Logged.Entries
+            .Where(entry => secrets.Any(secret => entry.Contains(secret!, StringComparison.OrdinalIgnoreCase)))
+            .ToList();
+        Assert.Empty(leaks);
+    }
+
+    private static async Task UpdateMemberAsync(SessionTestHost host, string adminToken, string userId, bool isActive)
+    {
+        using var response = await host.SendAsync(HttpMethod.Put, $"api/team-members/{userId}", adminToken, new
+        {
+            name = "Sam Lee",
+            role = "Scheduler",
+            color = "#0D9488",
+            email = "sam@example.com",
+            phone = "555-0100",
+            serviceAreas = Array.Empty<string>(),
+            isActive
+        });
+        Assert.True(response.StatusCode == HttpStatusCode.OK, await response.Content.ReadAsStringAsync());
+    }
+
+    private static async Task AssertAcceptedAsync(SessionTestHost host, string token)
+    {
+        using var response = await host.ProfileAsync(token);
+        Assert.Equal(HttpStatusCode.OK, response.StatusCode);
+    }
+
+    private static async Task AssertRefusedAsync(SessionTestHost host, string token)
+    {
+        using var response = await host.ProfileAsync(token);
+        Assert.Equal(HttpStatusCode.Unauthorized, response.StatusCode);
+    }
+}
diff --git a/SeaHavenIndustries.Tests/SessionTestHost.cs b/SeaHavenIndustries.Tests/SessionTestHost.cs
new file mode 100644
index 0000000..31bcf79
--- /dev/null
+++ b/SeaHavenIndustries.Tests/SessionTestHost.cs
@@ -0,0 +1,268 @@
+using System.IdentityModel.Tokens.Jwt;
+using System.Net.Http.Headers;
+using System.Net.Http.Json;
+using System.Text;
+using System.Text.Json;
+using System.Text.RegularExpressions;
+using Api.SeaHavenIndustries.Controllers;
+using Api.SeaHavenIndustries.Infrastructure;
+using Data.SeaHavenIndustries;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Hosting;
+using Microsoft.AspNetCore.Hosting.Server;
+using Microsoft.AspNetCore.Hosting.Server.Features;
+using Microsoft.AspNetCore.Identity;
+using Microsoft.AspNetCore.Mvc.Controllers;
+using Microsoft.Data.Sqlite;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Metadata;
+using Microsoft.Extensions.Configuration;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.DependencyInjection.Extensions;
+using Microsoft.Extensions.Logging;
+using Microsoft.IdentityModel.Tokens;
+using SeaHaven.DataServices.DependencyInjection;
+using SeaHaven.Services.DependencyInjection;
+using SeaHaven.Services.Interfaces;
+
+namespace SeaHavenIndustries.Tests;
+
+/// <summary>
+/// Hosts the real sign-in, user and team member controllers on Kestrel over a SQLite
+/// file database, with Identity and bearer authentication registered exactly as the
+/// API host registers them. Email goes to an in-memory sender and every log line is
+/// captured.
+/// </summary>
+internal sealed class SessionTestHost : IAsyncDisposable
+{
+    public static readonly string JwtSecret = new('s', 64);
+    public const string Issuer = "issuer";
+    public const string Audience = "audience";
+    public const string Password = "Harbor-Light-42!";
+
+    private static readonly Regex ResetCode = new(@"Reset Code is: (\d{6})", RegexOptions.CultureInvariant);
+
+    private readonly WebApplication _app;
+    private readonly string _databasePath;
+
+    private SessionTestHost(WebApplication app, string databasePath, HttpClient client)
+    {
+        _app = app;
+        _databasePath = databasePath;
+        Client = client;
+    }
+
+    public HttpClient Client { get; }
+    public CapturingEmailSender Sent { get; private set; } = null!;
+    public CapturingLoggerProvider Logged { get; private set; } = null!;
+
+    public static async Task<SessionTestHost> StartAsync()
+    {
+        var databasePath = Path.Combine(Path.GetTempPath(), $"sessions-{Guid.NewGuid():N}.db");
+        var connectionString = new SqliteConnectionStringBuilder { DataSource = databasePath, DefaultTimeout = 30 }.ToString();
+
+        var builder = WebApplication.CreateBuilder(new WebApplicationOptions { EnvironmentName = "Testing" });
+        builder.WebHost.UseUrls("http://127.0.0.1:0");
+        builder.Configuration.AddInMemoryCollection(new Dictionary<string, string?>
+        {
+            ["JWT:Secret"] = JwtSecret,
+            ["JWT:ValidIssuer"] = Issuer,
+            ["JWT:ValidAudience"] = Audience
+        });
+
+        var sent = new CapturingEmailSender();
+        var logged = new CapturingLoggerProvider();
+        builder.Logging.ClearProviders();
+        builder.Logging.SetMinimumLevel(LogLevel.Trace);
+        builder.Logging.AddProvider(logged);
+
+        builder.Services.AddDbContext<ApplicationDbContext>(options => options.UseSqlite(connectionString));
+        builder.Services.Replace(ServiceDescriptor.Scoped<ApplicationDbContext>(provider =>
+            new SqliteSessionDbContext(provider.GetRequiredService<DbContextOptions<ApplicationDbContext>>())));
+        builder.Services.AddSeaHavenIdentity();
+        builder.Services.AddSingleton<IEmailSender>(sent);
+        builder.Services.AddDataServices();
+        builder.Services.AddBusinessServices(builder.Configuration);
+        builder.Services.AddSeaHavenJwtAuthentication(builder.Configuration);
+        builder.Services.AddControllers()
+            .AddApplicationPart(typeof(AuthenticationController).Assembly)
+            .ConfigureApplicationPartManager(manager =>
+            {
+                manager.FeatureProviders.Clear();
+                manager.FeatureProviders.Add(new SessionControllers());
+            });
+
+        var app = builder.Build();
+        app.UseRouting();
+        app.UseAuthentication();
+        app.UseAuthorization();
+        app.MapControllers();
+
+        await using (var scope = app.Services.CreateAsyncScope())
+            await scope.ServiceProvider.GetRequiredService<ApplicationDbContext>().Database.EnsureCreatedAsync();
+
+        await app.StartAsync();
+        var address = app.Services.GetRequiredService<IServer>().Features
+            .Get<IServerAddressesFeature>()!.Addresses.Single();
+
+        var host = new SessionTestHost(app, databasePath, new HttpClient { BaseAddress = new Uri(address) });
+        host.Sent = sent;
+        host.Logged = logged;
+        return host;
+    }
+
+    public async Task<ApplicationUser> AddUserAsync(string email, string? role = null)
+    {
+        await using var scope = _app.Services.CreateAsyncScope();
+        var users = scope.ServiceProvider.GetRequiredService<UserManager<ApplicationUser>>();
+        var user = new ApplicationUser
+        {
+            UserName = email,
+            Email = email,
+            FirstName = "Sam",
+            LastName = "Lee",
+            EmailConfirmed = true,
+            UniqueName = "Active",
+            CreatedDate = DateTime.UtcNow
+        };
+        var created = await users.CreateAsync(user, Password);
+        Assert.True(created.Succeeded, string.Join("; ", created.Errors.Select(error => error.Description)));
+
+        if (role != null)
+        {
+            var roles = scope.ServiceProvider.GetRequiredService<RoleManager<IdentityRole>>();
+            if (!await roles.RoleExistsAsync(role))
+                await roles.CreateAsync(new IdentityRole(role));
+            await users.AddToRoleAsync(user, role);
+        }
+
+        return user;
+    }
+
+    public async Task<string> SignInAsync(string email, string password = Password)
+    {
+        using var response = await Client.PostAsJsonAsync("api/Authentication/login", new { username = email, password });
+        Assert.Equal(System.Net.HttpStatusCode.OK, response.StatusCode);
+        using var payload = JsonDocument.Parse(await response.Content.ReadAsStringAsync());
+        return payload.RootElement.GetProperty("token").GetString()!;
+    }
+
+    public Task<HttpResponseMessage> SendAsync(HttpMethod method, string path, string? token, object? json = null)
+    {
+        var request = new HttpRequestMessage(method, path);
+        if (token != null)
+            request.Headers.Authorization = new AuthenticationHeaderValue("Bearer", token);
+        if (json != null)
+            request.Content = JsonContent.Create(json);
+        return Client.SendAsync(request);
+    }
+
+    /// <summary>An authorized read that only succeeds for a signed-in, accepted session.</summary>
+    public Task<HttpResponseMessage> ProfileAsync(string? token) =>
+        SendAsync(HttpMethod.Get, "api/User/UserProfile", token);
+
+    /// <summary>Runs Forgot Password end to end: request a code, read it from the email, reset.</summary>
+    public async Task ResetPasswordAsync(string email, string newPassword)
+    {
+        var before = Sent.Messages.Count;
+        using (var requested = await SendAsync(
+                   HttpMethod.Post, $"api/Authentication/ForgetPassword?Email={Uri.EscapeDataString(email)}", null, new { email }))
+            Assert.Equal(System.Net.HttpStatusCode.OK, requested.StatusCode);
+
+        var deadline = DateTime.UtcNow.AddSeconds(10);
+        SentEmail? message;
+        while ((message = Sent.Messages.Skip(before).LastOrDefault(sent => sent.To == email && ResetCode.IsMatch(sent.Body))) == null)
+        {
+            if (DateTime.UtcNow > deadline)
+                throw new TimeoutException("No password reset email was sent.");
+            await Task.Delay(10);
+        }
+
+        var code = ResetCode.Match(message.Body).Groups[1].Value;
+        using var reset = await SendAsync(
+            HttpMethod.Post, "api/Authentication/ResetPassword", null, new { email, code, password = newPassword });
+        Assert.Equal(System.Net.HttpStatusCode.OK, reset.StatusCode);
+    }
+
+    public async Task<string?> StoredSecurityStampAsync(string userId)
+    {
+        await using var scope = _app.Services.CreateAsyncScope();
+        return await scope.ServiceProvider.GetRequiredService<ApplicationDbContext>()
+            .Users.AsNoTracking().Where(user => user.Id == userId).Select(user => user.SecurityStamp).SingleOrDefaultAsync();
+    }
+
+    /// <summary>
+    /// Re-signs <paramref name="token"/> with the host's real signing key after letting
+    /// <paramref name="edit"/> change its claims, so only the claims differ from a token
+    /// the API issued.
+    /// </summary>
+    public static string Resign(string token, Action<List<System.Security.Claims.Claim>> edit)
+    {
+        var original = new JwtSecurityTokenHandler().ReadJwtToken(token);
+        var claims = original.Claims
+            .Where(claim => claim.Type is not (JwtRegisteredClaimNames.Exp or JwtRegisteredClaimNames.Iss or JwtRegisteredClaimNames.Aud or JwtRegisteredClaimNames.Nbf or JwtRegisteredClaimNames.Iat))
+            .ToList();
+        edit(claims);
+        var key = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(JwtSecret));
+        var resigned = new JwtSecurityToken(
+            issuer: Issuer,
+            audience: Audience,
+            claims: claims,
+            expires: original.ValidTo,
+            signingCredentials: new SigningCredentials(key, SecurityAlgorithms.HmacSha256));
+        return new JwtSecurityTokenHandler().WriteToken(resigned);
+    }
+
+    public async ValueTask DisposeAsync()
+    {
+        Client.Dispose();
+        await _app.StopAsync();
+        await _app.DisposeAsync();
+        SqliteConnection.ClearAllPools();
+        foreach (var path in new[] { _databasePath, _databasePath + "-wal", _databasePath + "-shm", _databasePath + "-journal" })
+        {
+            if (File.Exists(path))
+                File.Delete(path);
+        }
+    }
+
+    private sealed class SessionControllers : ControllerFeatureProvider
+    {
+        protected override bool IsController(System.Reflection.TypeInfo typeInfo) =>
+            typeInfo.AsType() == typeof(AuthenticationController)
+            || typeInfo.AsType() == typeof(UserController)
+            || typeInfo.AsType() == typeof(TeamMemberController);
+    }
+
+    private sealed class SqliteSessionDbContext : ApplicationDbContext
+    {
+        public SqliteSessionDbContext(DbContextOptions<ApplicationDbContext> options)
+            : base(options)
+        {
+        }
+
+        protected override void OnModelCreating(ModelBuilder builder)
+        {
+            base.OnModelCreating(builder);
+
+            foreach (var index in builder.Model.GetEntityTypes().SelectMany(entity => entity.GetIndexes()))
+            {
+                // SQL Server filter syntax does not carry over; a filtered unique index
+                // without its filter would wrongly reject a second user.
+                if (index.GetFilter() is not null)
+                {
+                    index.SetFilter(null);
+                    index.IsUnique = false;
+                }
+            }
+
+            foreach (var property in builder.Model.GetEntityTypes()
+                         .SelectMany(entity => entity.GetProperties())
+                         .Where(property => property.Name == "RowVersion" && property.ClrType == typeof(byte[])))
+            {
+                property.ValueGenerated = ValueGenerated.Never;
+                property.IsConcurrencyToken = false;
+            }
+        }
+    }
+}

From cc4695025479d39ab11a9581cbc6c602b09a9658 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 19:10:46 -0300
Subject: [PATCH 178/183] test(auth): format the password change request

---
 SeaHavenIndustries.Tests/SessionRevocationTests.cs | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/SeaHavenIndustries.Tests/SessionRevocationTests.cs b/SeaHavenIndustries.Tests/SessionRevocationTests.cs
index a2b5d85..1cd9bd7 100644
--- a/SeaHavenIndustries.Tests/SessionRevocationTests.cs
+++ b/SeaHavenIndustries.Tests/SessionRevocationTests.cs
@@ -39,12 +39,13 @@ public sealed class SessionRevocationTests
         var other = await host.SignInAsync("sam@example.com");
         await AssertAcceptedAsync(host, other);
 
-        using (var changed = await host.SendAsync(HttpMethod.Post, "api/Authentication/ChangePassword", before, new
-               {
-                   currentpassword = SessionTestHost.Password,
-                   newpassword = NewPassword,
-                   confirmpassword = NewPassword
-               }))
+        var change = new
+        {
+            currentpassword = SessionTestHost.Password,
+            newpassword = NewPassword,
+            confirmpassword = NewPassword
+        };
+        using (var changed = await host.SendAsync(HttpMethod.Post, "api/Authentication/ChangePassword", before, change))
             Assert.Equal(HttpStatusCode.OK, changed.StatusCode);
 
         await AssertRefusedAsync(host, before);

From 77dc3d85c336676347c993f0d15d57baf836d6af Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 19:15:38 -0300
Subject: [PATCH 179/183] Serialize a CRM cancel with uplift creation on the
 work order lock

The per-work-order gate moves into a shared data-layer helper. A CRM
mutation that cancels an existing work order now runs under it, so a
create in flight either commits first and is cancelled, or sees the
cancelled work order.
---
 .../Helpers/WorkOrderMutationLock.cs          | 79 +++++++++++++++++++
 .../Implementation/UpliftDataService.cs       | 47 +----------
 .../WorkOrderWebhookDataService.cs            | 26 ++++++
 .../WorkOrderCrmCancelUpliftTests.cs          | 37 +++++++++
 4 files changed, 144 insertions(+), 45 deletions(-)
 create mode 100644 SeaHaven.DataServices/Helpers/WorkOrderMutationLock.cs

diff --git a/SeaHaven.DataServices/Helpers/WorkOrderMutationLock.cs b/SeaHaven.DataServices/Helpers/WorkOrderMutationLock.cs
new file mode 100644
index 0000000..e15df5d
--- /dev/null
+++ b/SeaHaven.DataServices/Helpers/WorkOrderMutationLock.cs
@@ -0,0 +1,79 @@
+using System.Collections.Concurrent;
+using Data.SeaHavenIndustries;
+using Microsoft.EntityFrameworkCore;
+
+namespace SeaHaven.DataServices.Helpers
+{
+    /// <summary>
+    /// The per-work-order gate that serializes work-order-scoped invariants (uplift create,
+    /// decide, revoke, and cancelling a work order's pending uplifts): an in-process gate per
+    /// work order, a transaction, and an update lock on the work order row on SQL Server.
+    /// Every caller shares the same gates, so a cancel and a create on one work order never
+    /// interleave.
+    /// </summary>
+    public static class WorkOrderMutationLock
+    {
+        private static readonly ConcurrentDictionary<int, SemaphoreSlim> Gates = new();
+
+        /// <summary>
+        /// Runs <paramref name="work"/> under the work order's gate and row lock. The
+        /// transaction commits when the work returns and <paramref name="commitWhen"/> (when
+        /// given) accepts its result; otherwise, or when the work throws, it rolls back.
+        /// </summary>
+        public static async Task<T> RunAsync<T>(
+            ApplicationDbContext context,
+            int workOrderId,
+            Func<CancellationToken, Task<T>> work,
+            CancellationToken cancellationToken,
+            Func<T, bool>? commitWhen = null)
+        {
+            var gate = Gates.GetOrAdd(workOrderId, _ => new SemaphoreSlim(1, 1));
+            await gate.WaitAsync(cancellationToken);
+            try
+            {
+                await using var transaction = context.Database.IsRelational()
+                    ? await context.Database.BeginTransactionAsync(cancellationToken)
+                    : null;
+                try
+                {
+                    await LockRowAsync(context, workOrderId, cancellationToken);
+                    var result = await work(cancellationToken);
+                    if (transaction is not null)
+                    {
+                        if (commitWhen is null || commitWhen(result))
+                            await transaction.CommitAsync(cancellationToken);
+                        else
+                            await transaction.RollbackAsync(cancellationToken);
+                    }
+                    return result;
+                }
+                catch
+                {
+                    if (transaction is not null)
+                        await transaction.RollbackAsync(cancellationToken);
+                    throw;
+                }
+            }
+            finally
+            {
+                gate.Release();
+            }
+        }
+
+        private static async Task LockRowAsync(
+            ApplicationDbContext context,
+            int workOrderId,
+            CancellationToken cancellationToken)
+        {
+            if (context.Database.ProviderName?.Contains("SqlServer", StringComparison.OrdinalIgnoreCase) != true)
+                return;
+
+            await context.workOrders
+                .FromSqlRaw(
+                    "SELECT * FROM [workOrders] WITH (UPDLOCK, ROWLOCK, HOLDLOCK) WHERE [Id] = {0}",
+                    workOrderId)
+                .Select(workOrder => workOrder.Id)
+                .FirstOrDefaultAsync(cancellationToken);
+        }
+    }
+}
diff --git a/SeaHaven.DataServices/Implementation/UpliftDataService.cs b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
index 3f9cf21..9f4e0c5 100644
--- a/SeaHaven.DataServices/Implementation/UpliftDataService.cs
+++ b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
@@ -1,4 +1,3 @@
-using System.Collections.Concurrent;
 using Data.SeaHavenIndustries;
 using Data.SeaHavenIndustries.Enums;
 using Microsoft.EntityFrameworkCore;
@@ -10,8 +9,6 @@ namespace SeaHaven.DataServices.Implementation
 {
     public class UpliftDataService : IUpliftDataService
     {
-        private static readonly ConcurrentDictionary<int, SemaphoreSlim> WorkOrderGates = new();
-
         // The Rejected queue also surfaces the legacy "Denied" spelling, which reads as Rejected.
         private static readonly string[] RejectedStatuses = { "Rejected", "Denied" };
         private readonly ApplicationDbContext _context;
@@ -590,50 +587,10 @@ namespace SeaHaven.DataServices.Implementation
             return message.Contains(activeDispatchIndex, StringComparison.OrdinalIgnoreCase);
         }
 
-        public async Task<T> ExecuteWorkOrderMutationAsync<T>(
+        public Task<T> ExecuteWorkOrderMutationAsync<T>(
             int workOrderId,
             Func<CancellationToken, Task<T>> work,
             CancellationToken cancellationToken)
-        {
-            var gate = WorkOrderGates.GetOrAdd(workOrderId, _ => new SemaphoreSlim(1, 1));
-            await gate.WaitAsync(cancellationToken);
-            try
-            {
-                await using var transaction = _context.Database.IsRelational()
-                    ? await _context.Database.BeginTransactionAsync(cancellationToken)
-                    : null;
-                try
-                {
-                    await LockWorkOrderRowAsync(workOrderId, cancellationToken);
-                    var result = await work(cancellationToken);
-                    if (transaction is not null)
-                        await transaction.CommitAsync(cancellationToken);
-                    return result;
-                }
-                catch
-                {
-                    if (transaction is not null)
-                        await transaction.RollbackAsync(cancellationToken);
-                    throw;
-                }
-            }
-            finally
-            {
-                gate.Release();
-            }
-        }
-
-        private async Task LockWorkOrderRowAsync(int workOrderId, CancellationToken cancellationToken)
-        {
-            if (_context.Database.ProviderName?.Contains("SqlServer", StringComparison.OrdinalIgnoreCase) != true)
-                return;
-
-            await _context.workOrders
-                .FromSqlRaw(
-                    "SELECT * FROM [workOrders] WITH (UPDLOCK, ROWLOCK, HOLDLOCK) WHERE [Id] = {0}",
-                    workOrderId)
-                .Select(workOrder => workOrder.Id)
-                .FirstOrDefaultAsync(cancellationToken);
-        }
+            => WorkOrderMutationLock.RunAsync(_context, workOrderId, work, cancellationToken);
     }
 }
diff --git a/SeaHaven.DataServices/Implementation/WorkOrderWebhookDataService.cs b/SeaHaven.DataServices/Implementation/WorkOrderWebhookDataService.cs
index 49cdc7b..bc0915a 100644
--- a/SeaHaven.DataServices/Implementation/WorkOrderWebhookDataService.cs
+++ b/SeaHaven.DataServices/Implementation/WorkOrderWebhookDataService.cs
@@ -20,6 +20,32 @@ namespace SeaHaven.DataServices.Implementation
         public async Task<WorkOrderWebhookPersistenceResult> ApplyAsync(
             WorkOrderWebhookMutation mutation,
             CancellationToken cancellationToken)
+        {
+            // A mutation that cancels an existing work order also cancels its pending uplifts,
+            // so it runs under the same per-work-order lock as uplift creation: a create in
+            // flight either commits first (and is cancelled here) or sees the cancelled order.
+            var current = mutation.IsStateEvent && mutation.LifecycleStatus.HasValue
+                ? await _context.workOrders
+                    .AsNoTracking()
+                    .Where(w => w.ExternalWorkOrderId == mutation.ExternalWorkOrderId)
+                    .Select(w => new { w.Id, w.LifecycleStatus })
+                    .SingleOrDefaultAsync(cancellationToken)
+                : null;
+
+            if (current is null || !PendingUpliftCancellation.Applies(current.LifecycleStatus, mutation.LifecycleStatus))
+                return await ApplyUnlockedAsync(mutation, cancellationToken);
+
+            return await WorkOrderMutationLock.RunAsync(
+                _context,
+                current.Id,
+                ct => ApplyUnlockedAsync(mutation, ct),
+                cancellationToken,
+                commitWhen: result => result.Status == WorkOrderWebhookPersistenceStatus.Applied);
+        }
+
+        private async Task<WorkOrderWebhookPersistenceResult> ApplyUnlockedAsync(
+            WorkOrderWebhookMutation mutation,
+            CancellationToken cancellationToken)
         {
             var prior = await _context.WorkOrderWebhookDeliveries
                 .AsNoTracking()
diff --git a/SeaHavenIndustries.Tests/WorkOrderCrmCancelUpliftTests.cs b/SeaHavenIndustries.Tests/WorkOrderCrmCancelUpliftTests.cs
index 8b7c42a..e576095 100644
--- a/SeaHavenIndustries.Tests/WorkOrderCrmCancelUpliftTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderCrmCancelUpliftTests.cs
@@ -93,6 +93,43 @@ public sealed class WorkOrderCrmCancelUpliftTests
         Assert.Equal(UpliftStatus.Withdrawn, upliftAudit.NewValue);
     }
 
+    [Fact]
+    public async Task CrmCancel_WaitsForAnUpliftCreateInFlightAndCancelsWhatItCommitted()
+    {
+        var options = await SeedInMemoryAsync();
+        var createEntered = new TaskCompletionSource(TaskCreationOptions.RunContinuationsAsynchronously);
+        var releaseCreate = new TaskCompletionSource(TaskCreationOptions.RunContinuationsAsynchronously);
+
+        // An uplift create holding the work order's lock, committing its Pending request
+        // only after the CRM cancel has started.
+        await using var createContext = new ApplicationDbContext(options);
+        var create = new UpliftDataService(createContext).ExecuteWorkOrderMutationAsync(1, async ct =>
+        {
+            createEntered.SetResult();
+            await releaseCreate.Task;
+            createContext.DispatchUpliftRequests.Add(WorkOrderBoardPatchCancelUpliftTests.Uplift(200, "Pending", 800m));
+            await createContext.SaveChangesAsync(ct);
+            return true;
+        }, CancellationToken.None);
+        await createEntered.Task;
+
+        await using var crmContext = new ApplicationDbContext(options);
+        var cancel = new WorkOrderWebhookDataService(crmContext)
+            .ApplyAsync(CrmMutation("work_order.cancelled", cancelled: true), CancellationToken.None);
+
+        var finishedFirst = await Task.WhenAny(cancel, Task.Delay(TimeSpan.FromSeconds(2)));
+        Assert.NotSame(cancel, finishedFirst);
+
+        releaseCreate.SetResult();
+        await create;
+        await cancel;
+
+        await using var verify = new ApplicationDbContext(options);
+        Assert.Equal(LifecycleStatus.Canceled, verify.workOrders.Single().LifecycleStatus);
+        Assert.Equal(UpliftStatus.Withdrawn, verify.DispatchUpliftRequests.Single(u => u.Id == 200).Status);
+        Assert.Single(verify.WorkOrderAuditLogs, log => log.Action == "uplift_cancel");
+    }
+
     [Fact]
     public async Task CrmUpdateThatDoesNotCancel_LeavesPendingUpliftPending()
     {

From 498f49a2d88c9123c0d294bd1b0bd83672e3d1f8 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 19:26:25 -0300
Subject: [PATCH 180/183] fix(auth): end earlier sessions when a user's role or
 account changes

A token carries the user's roles and account, so a demoted admin kept admin
claims until the token expired. The team member update and the admin user
edit now rotate the security stamp and evict the cached value when the role,
account or user name changes. Permission overrides are read per request and
are not in the token.
---
 .../UserServiceTests.cs                       | 43 ++++++++++-
 .../Implementation/TeamMemberService.cs       |  9 +--
 .../Implementation/UserService.cs             | 22 +++++-
 .../SessionRevocationTests.cs                 | 71 ++++++++++++++++++-
 SeaHavenIndustries.Tests/SessionTestHost.cs   |  8 +++
 5 files changed, 144 insertions(+), 9 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/UserServiceTests.cs b/Api.SeaHavenIndustries.Tests/UserServiceTests.cs
index 62fa837..3ef307d 100644
--- a/Api.SeaHavenIndustries.Tests/UserServiceTests.cs
+++ b/Api.SeaHavenIndustries.Tests/UserServiceTests.cs
@@ -26,7 +26,8 @@ public class UserServiceTests
         Mock<IUserDataService> userData,
         Mock<IEmailSender> email,
         out Mock<IUserRoleStore<ApplicationUser>> store,
-        Mock<IAccountDataService>? accounts = null)
+        Mock<IAccountDataService>? accounts = null,
+        Mock<ISessionStampService>? sessions = null)
     {
         var (manager, s, _) = IdentityTestHelpers.CreateUserManager();
         store = s;
@@ -35,7 +36,7 @@ public class UserServiceTests
             userData.Object,
             (accounts ?? new Mock<IAccountDataService>()).Object,
             email.Object,
-            Mock.Of<ISessionStampService>());
+            (sessions ?? new Mock<ISessionStampService>()).Object);
     }
 
     [Fact]
@@ -430,4 +431,42 @@ public class UserServiceTests
         && password.Any(char.IsDigit)
         && password.Any(character => !char.IsLetterOrDigit(character));
     }
+
+    [Theory]
+    [InlineData(2, "alice@example.com", "Dispatcher", true)]
+    [InlineData(1, "alice@example.com", "Scheduler", true)]
+    [InlineData(1, "alice.new@example.com", "Dispatcher", true)]
+    [InlineData(1, "ALICE@example.com", "dispatcher", false)]
+    public async Task EditUser_EndsEarlierSessionsOnlyWhenTheTokenClaimsChange(
+        int accountId, string email, string role, bool endsSessions)
+    {
+        var existing = IdentityTestHelpers.User("u1", userName: "alice@example.com");
+        existing.AccountId = 1;
+        var stampBefore = existing.SecurityStamp;
+        var userData = new Mock<IUserDataService>();
+        userData.Setup(u => u.GetForEditAsync("u1", It.IsAny<CancellationToken>())).ReturnsAsync(existing);
+        var accounts = new Mock<IAccountDataService>();
+        accounts.Setup(a => a.ExistsAsync(It.IsAny<int>())).ReturnsAsync(true);
+        var sessions = new Mock<ISessionStampService>();
+        var service = NewService(userData, new Mock<IEmailSender>(), out var store, accounts, sessions);
+        store.Setup(s => s.GetRolesAsync(existing, It.IsAny<CancellationToken>()))
+            .ReturnsAsync(new List<string> { "Dispatcher" });
+
+        var outcome = await service.EditUserAsync(
+            new EditUserRequestDTO { Id = "u1", Name = "Alice", Email = email, Role = role, AccountId = accountId },
+            Principal("Admin"),
+            CancellationToken.None);
+
+        outcome.Success.Should().BeTrue();
+        if (endsSessions)
+        {
+            existing.SecurityStamp.Should().NotBe(stampBefore);
+            sessions.Verify(s => s.Forget("u1"), Times.Once);
+        }
+        else
+        {
+            existing.SecurityStamp.Should().Be(stampBefore);
+            sessions.Verify(s => s.Forget(It.IsAny<string>()), Times.Never);
+        }
+    }
 }
diff --git a/SeaHaven.Services/Implementation/TeamMemberService.cs b/SeaHaven.Services/Implementation/TeamMemberService.cs
index 958edd9..6ba22be 100644
--- a/SeaHaven.Services/Implementation/TeamMemberService.cs
+++ b/SeaHaven.Services/Implementation/TeamMemberService.cs
@@ -234,13 +234,14 @@ public sealed class TeamMemberService : ITeamMemberService
                 return OperationFailure(addRoleResult.Errors.FirstOrDefault()?.Description ?? "Unable to update role.");
         }
 
-        // A new stamp ends the member's earlier sessions, and keeps them ended if the
-        // member is reactivated later.
-        if (deactivated)
+        // A new stamp ends the member's earlier sessions: a deactivated member's stay
+        // ended if the member is reactivated later, and a member whose role changed
+        // signs in again to get a token with the new role.
+        if (deactivated || roleChanged)
             user.SecurityStamp = Guid.NewGuid().ToString("N");
 
         await _userDataService.UpdateUserAsync(user, cancellationToken);
-        if (activeChanged || emailChanged)
+        if (activeChanged || emailChanged || roleChanged)
             _sessionStamps.Forget(user.Id);
         await _areaDataService.ReplaceAsync(user.Id, areas!, cancellationToken);
         if (roleChanged || request.PermissionOverrides is not null)
diff --git a/SeaHaven.Services/Implementation/UserService.cs b/SeaHaven.Services/Implementation/UserService.cs
index 94a1b4c..6e4644a 100644
--- a/SeaHaven.Services/Implementation/UserService.cs
+++ b/SeaHaven.Services/Implementation/UserService.cs
@@ -106,6 +106,10 @@ namespace SeaHaven.Services.Implementation
                     return new AddUserOutcomeDTO { Success = false, Error = UserMutationErrors.UserNotFound };
 
                 var existingRole = await _userManager.GetRolesAsync(exist1);
+                var claimsChanged = exist1.AccountId != dto.AccountId
+                    || existingRole == null
+                    || existingRole.Count != 1
+                    || !string.Equals(existingRole[0], dto.Role, StringComparison.OrdinalIgnoreCase);
 
                 if (existingRole != null && existingRole.Any() && existingRole.FirstOrDefault() != exist1.PhoneNumber)
                 {
@@ -117,11 +121,15 @@ namespace SeaHaven.Services.Implementation
                 exist1.Contact = model.Contact;
                 exist1.PhoneNumber = model.PhoneNumber;
                 exist1.AccountId = dto.AccountId;
+                if (claimsChanged)
+                    exist1.SecurityStamp = Guid.NewGuid().ToString("N");
 
                 await _userDataService.UpdateUserAsync(exist1, cancellationToken);
 
                 await _userManager.AddToRoleAsync(exist1, dto.Role ?? "");
                 await _userManager.UpdateAsync(exist1);
+                if (claimsChanged)
+                    _sessionStamps.Forget(exist1.Id);
                 return new AddUserOutcomeDTO { Success = true };
             }
         }
@@ -150,6 +158,15 @@ namespace SeaHaven.Services.Implementation
             if (string.IsNullOrWhiteSpace(dto.Email))
                 throw new ArgumentException("Email is required.", nameof(dto));
 
+            // The token carries the user name, roles and account, so a change to any of
+            // them needs a fresh sign-in.
+            var existingRole = await _userManager.GetRolesAsync(exist);
+            var claimsChanged = exist.AccountId != dto.AccountId
+                || !string.Equals(exist.UserName, dto.Email, StringComparison.OrdinalIgnoreCase)
+                || existingRole == null
+                || existingRole.Count != 1
+                || !string.Equals(existingRole[0], dto.Role, StringComparison.OrdinalIgnoreCase);
+
             exist.EmailConfirmed = true;
             exist.UserName = dto.Email;
             exist.Email = dto.Email;
@@ -160,14 +177,17 @@ namespace SeaHaven.Services.Implementation
             exist.PhoneNumber = dto.Role;
             exist.AccountId = dto.AccountId;
 
-            var existingRole = await _userManager.GetRolesAsync(exist);
             if (existingRole != null && existingRole.Any())
             {
                 await _userManager.RemoveFromRolesAsync(exist, existingRole);
             }
             await _userManager.AddToRoleAsync(exist, dto.Role ?? "");
 
+            if (claimsChanged)
+                exist.SecurityStamp = Guid.NewGuid().ToString("N");
             await _userDataService.UpdateUserAsync(exist, cancellationToken);
+            if (claimsChanged)
+                _sessionStamps.Forget(exist.Id);
             return new AddUserOutcomeDTO { Success = true };
         }
 
diff --git a/SeaHavenIndustries.Tests/SessionRevocationTests.cs b/SeaHavenIndustries.Tests/SessionRevocationTests.cs
index 1cd9bd7..ec25227 100644
--- a/SeaHavenIndustries.Tests/SessionRevocationTests.cs
+++ b/SeaHavenIndustries.Tests/SessionRevocationTests.cs
@@ -163,12 +163,79 @@ public sealed class SessionRevocationTests
         Assert.Empty(leaks);
     }
 
-    private static async Task UpdateMemberAsync(SessionTestHost host, string adminToken, string userId, bool isActive)
+    [Fact]
+    public async Task A_member_demoted_on_the_team_page_is_refused_and_signs_in_again_with_the_new_role()
+    {
+        await using var host = await SessionTestHost.StartAsync();
+        await host.AddUserAsync("admin@example.com", "Admin");
+        var member = await host.AddUserAsync("sam@example.com", "Admin");
+        await host.EnsureRoleAsync("Scheduler");
+        var admin = await host.SignInAsync("admin@example.com");
+        var before = await host.SignInAsync("sam@example.com");
+        Assert.Equal(new[] { "Admin" }, RolesIn(before));
+        await AssertAcceptedAsync(host, before);
+
+        await UpdateMemberAsync(host, admin, member.Id, isActive: true, role: "Scheduler");
+
+        await AssertRefusedAsync(host, before);
+        var after = await host.SignInAsync("sam@example.com");
+        Assert.Equal(new[] { "Scheduler" }, RolesIn(after));
+        await AssertAcceptedAsync(host, after);
+    }
+
+    [Fact]
+    public async Task A_user_whose_role_an_admin_edits_is_refused_and_signs_in_again_with_the_new_role()
+    {
+        await using var host = await SessionTestHost.StartAsync();
+        await host.AddUserAsync("admin@example.com", "Admin");
+        var member = await host.AddUserAsync("sam@example.com", "Admin");
+        await host.EnsureRoleAsync("Dispatcher");
+        var admin = await host.SignInAsync("admin@example.com");
+        var before = await host.SignInAsync("sam@example.com");
+        await AssertAcceptedAsync(host, before);
+
+        var edit = new
+        {
+            id = member.Id,
+            name = "Sam",
+            email = "sam@example.com",
+            role = "Dispatcher"
+        };
+        using (var edited = await host.SendAsync(HttpMethod.Put, "api/User/EditUser", admin, edit))
+            Assert.Equal(HttpStatusCode.OK, edited.StatusCode);
+
+        await AssertRefusedAsync(host, before);
+        var after = await host.SignInAsync("sam@example.com");
+        Assert.Equal(new[] { "Dispatcher" }, RolesIn(after));
+        await AssertAcceptedAsync(host, after);
+    }
+
+    [Fact]
+    public async Task Editing_a_member_without_changing_role_status_or_email_keeps_their_session()
+    {
+        await using var host = await SessionTestHost.StartAsync();
+        await host.AddUserAsync("admin@example.com", "Admin");
+        var member = await host.AddUserAsync("sam@example.com", "Scheduler");
+        var admin = await host.SignInAsync("admin@example.com");
+        var before = await host.SignInAsync("sam@example.com");
+
+        await UpdateMemberAsync(host, admin, member.Id, isActive: true);
+
+        await AssertAcceptedAsync(host, before);
+    }
+
+    private static string[] RolesIn(string token) =>
+        new JwtSecurityTokenHandler().ReadJwtToken(token).Claims
+            .Where(claim => claim.Type == ClaimTypes.Role)
+            .Select(claim => claim.Value)
+            .ToArray();
+
+    private static async Task UpdateMemberAsync(SessionTestHost host, string adminToken, string userId, bool isActive, string role = "Scheduler")
     {
         using var response = await host.SendAsync(HttpMethod.Put, $"api/team-members/{userId}", adminToken, new
         {
             name = "Sam Lee",
-            role = "Scheduler",
+            role,
             color = "#0D9488",
             email = "sam@example.com",
             phone = "555-0100",
diff --git a/SeaHavenIndustries.Tests/SessionTestHost.cs b/SeaHavenIndustries.Tests/SessionTestHost.cs
index 31bcf79..0dca587 100644
--- a/SeaHavenIndustries.Tests/SessionTestHost.cs
+++ b/SeaHavenIndustries.Tests/SessionTestHost.cs
@@ -139,6 +139,14 @@ internal sealed class SessionTestHost : IAsyncDisposable
         return user;
     }
 
+    public async Task EnsureRoleAsync(string role)
+    {
+        await using var scope = _app.Services.CreateAsyncScope();
+        var roles = scope.ServiceProvider.GetRequiredService<RoleManager<IdentityRole>>();
+        if (!await roles.RoleExistsAsync(role))
+            await roles.CreateAsync(new IdentityRole(role));
+    }
+
     public async Task<string> SignInAsync(string email, string password = Password)
     {
         using var response = await Client.PostAsJsonAsync("api/Authentication/login", new { username = email, password });

From a32471d4c0fb54be28924e201110949d5ffa7eb1 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 19:37:08 -0300
Subject: [PATCH 181/183] Serialize sync cancels and vendor uplift requests on
 the work order lock

The legacy ingest batch holds the per-work-order lock, taken in id order,
for every work order it may cancel until the batch commits. A vendor
uplift request now runs under the same lock. Uplift creation on both
routes refuses a work order cancelled by either lifecycle or status text,
so a request can neither slip past a cancel nor land after one.
---
 .../UpliftWorkflowTests.cs                    |  70 +++++++++++
 .../Helpers/PendingUpliftCancellation.cs      |   7 ++
 .../Helpers/WorkOrderMutationLock.cs          |  33 +++++-
 .../Implementation/UpliftDataService.cs       |  11 ++
 .../WorkOrderIngestDataService.cs             |  39 +++---
 .../Interfaces/IUpliftDataService.cs          |   3 +
 .../Interfaces/IWorkOrderIngestDataService.cs |  10 +-
 .../Implementation/VendorPortalService.cs     | 111 +++++++++++-------
 .../Implementation/WorkOrderIngestService.cs  |  15 ++-
 .../Implementation/WorkOrderUpliftService.cs  |   9 +-
 .../WorkOrderBoardCancelServiceTests.cs       |   1 +
 .../WorkOrderCrmCancelUpliftTests.cs          |  66 +++++++++++
 .../WorkOrderUpliftServiceTests.cs            |  20 ++++
 13 files changed, 323 insertions(+), 72 deletions(-)

diff --git a/Api.SeaHavenIndustries.Tests/UpliftWorkflowTests.cs b/Api.SeaHavenIndustries.Tests/UpliftWorkflowTests.cs
index 0c2f27d..8c72a7e 100644
--- a/Api.SeaHavenIndustries.Tests/UpliftWorkflowTests.cs
+++ b/Api.SeaHavenIndustries.Tests/UpliftWorkflowTests.cs
@@ -230,6 +230,11 @@ public sealed class UpliftWorkflowTests
             .Returns(Task.CompletedTask);
         upliftData.Setup(x => x.SaveChangesAsync(It.IsAny<CancellationToken>()))
             .ThrowsAsync(new SeaHaven.DataServices.Exceptions.UpliftDispatchConflictException());
+        upliftData.Setup(x => x.ExecuteWorkOrderMutationAsync(
+                It.IsAny<int>(),
+                It.IsAny<Func<CancellationToken, Task<DispatchUpliftRequest>>>(),
+                It.IsAny<CancellationToken>()))
+            .Returns((int _, Func<CancellationToken, Task<DispatchUpliftRequest>> work, CancellationToken ct) => work(ct));
 
         var service = NewPortalService(context, new FakeEmailSender(deliver: true), upliftData: upliftData.Object);
         var session = await service.ResolveSessionAsync(Token, CancellationToken.None);
@@ -1041,4 +1046,69 @@ public sealed class UpliftWorkflowTests
 
         result.Outcome.Should().Be(VendorDocumentDownloadOutcome.NotFound);
     }
+
+    // --- A cancelled work order takes no new uplift request ---
+
+    [Theory]
+    [InlineData(true, "Canceled")]
+    [InlineData(false, "Cancelled")]
+    public async Task RequestUplift_OnCancelledWorkOrder_IsRefusedAndCreatesNothing(bool lifecycleCanceled, string statusText)
+    {
+        using var context = NewContext();
+        var (vendor, workOrder, dispatch) = await SeedAsync(context, nte: 1000m);
+        context.VendorCompletionDocuments.Add(EvidenceDocument(vendor.Id, dispatch.Id, workOrder.Id));
+        workOrder.Status = statusText;
+        if (lifecycleCanceled)
+            workOrder.LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Canceled;
+        await context.SaveChangesAsync();
+        var service = NewPortalService(context, new FakeEmailSender(deliver: true));
+
+        var session = await service.ResolveSessionAsync(Token, CancellationToken.None);
+        var act = () => service.RequestUpliftAsync(session!, dispatch.Id, 3500m, "reason", null, 1, CancellationToken.None);
+
+        await act.Should().ThrowAsync<InvalidOperationException>().WithMessage("*cancelled work order*");
+        context.DispatchUpliftRequests.Should().BeEmpty();
+    }
+
+    [Fact]
+    public async Task RequestUplift_WaitsForAWorkOrderCancelInFlightAndIsThenRefused()
+    {
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseInMemoryDatabase(Guid.NewGuid().ToString())
+            .Options;
+        using var context = new ApplicationDbContext(options);
+        var (vendor, workOrder, dispatch) = await SeedAsync(context, nte: 1000m);
+        context.VendorCompletionDocuments.Add(EvidenceDocument(vendor.Id, dispatch.Id, workOrder.Id));
+        await context.SaveChangesAsync();
+        var service = NewPortalService(context, new FakeEmailSender(deliver: true));
+        var session = await service.ResolveSessionAsync(Token, CancellationToken.None);
+
+        // A work order cancel holding the work order's lock, committing only after the
+        // vendor's request has started.
+        var cancelEntered = new TaskCompletionSource(TaskCreationOptions.RunContinuationsAsynchronously);
+        var releaseCancel = new TaskCompletionSource(TaskCreationOptions.RunContinuationsAsynchronously);
+        using var cancelContext = new ApplicationDbContext(options);
+        var cancel = new UpliftDataService(cancelContext).ExecuteWorkOrderMutationAsync(workOrder.Id, async ct =>
+        {
+            cancelEntered.SetResult();
+            await releaseCancel.Task;
+            var tracked = await cancelContext.workOrders.SingleAsync(w => w.Id == workOrder.Id, ct);
+            tracked.LifecycleStatus = Data.SeaHavenIndustries.Enums.LifecycleStatus.Canceled;
+            await cancelContext.SaveChangesAsync(ct);
+            return true;
+        }, CancellationToken.None);
+        await cancelEntered.Task;
+
+        var request = service.RequestUpliftAsync(session!, dispatch.Id, 3500m, "reason", null, 1, CancellationToken.None);
+        var finishedFirst = await Task.WhenAny(request, Task.Delay(TimeSpan.FromSeconds(2)));
+        finishedFirst.Should().NotBeSameAs(request, "the request must wait for the cancel holding the work order lock");
+
+        releaseCancel.SetResult();
+        await cancel;
+
+        await FluentActions.Awaiting(() => request).Should().ThrowAsync<InvalidOperationException>()
+            .WithMessage("*cancelled work order*");
+        using var verify = new ApplicationDbContext(options);
+        verify.DispatchUpliftRequests.Should().BeEmpty();
+    }
 }
diff --git a/SeaHaven.DataServices/Helpers/PendingUpliftCancellation.cs b/SeaHaven.DataServices/Helpers/PendingUpliftCancellation.cs
index 2264a2a..86ec908 100644
--- a/SeaHaven.DataServices/Helpers/PendingUpliftCancellation.cs
+++ b/SeaHaven.DataServices/Helpers/PendingUpliftCancellation.cs
@@ -29,6 +29,13 @@ namespace SeaHaven.DataServices.Helpers
         public static bool AppliesToStatusText(string? before, string? after)
             => !IsCancelledText(before) && IsCancelledText(after);
 
+        /// <summary>
+        /// True when a work order is cancelled by either signal: its lifecycle status, or the
+        /// status text a sync cancel writes. No new uplift may be requested on it.
+        /// </summary>
+        public static bool IsCancelled(LifecycleStatus? lifecycle, string? statusText)
+            => lifecycle == LifecycleStatus.Canceled || IsCancelledText(statusText);
+
         private static bool IsCancelledText(string? status)
             => string.Equals(status, "Cancelled", StringComparison.OrdinalIgnoreCase)
                 || string.Equals(status, "Canceled", StringComparison.OrdinalIgnoreCase);
diff --git a/SeaHaven.DataServices/Helpers/WorkOrderMutationLock.cs b/SeaHaven.DataServices/Helpers/WorkOrderMutationLock.cs
index e15df5d..a1618a0 100644
--- a/SeaHaven.DataServices/Helpers/WorkOrderMutationLock.cs
+++ b/SeaHaven.DataServices/Helpers/WorkOrderMutationLock.cs
@@ -20,23 +20,45 @@ namespace SeaHaven.DataServices.Helpers
         /// transaction commits when the work returns and <paramref name="commitWhen"/> (when
         /// given) accepts its result; otherwise, or when the work throws, it rolls back.
         /// </summary>
-        public static async Task<T> RunAsync<T>(
+        public static Task<T> RunAsync<T>(
             ApplicationDbContext context,
             int workOrderId,
             Func<CancellationToken, Task<T>> work,
             CancellationToken cancellationToken,
             Func<T, bool>? commitWhen = null)
+            => RunManyAsync(context, new[] { workOrderId }, work, cancellationToken, commitWhen);
+
+        /// <summary>
+        /// <see cref="RunAsync{T}"/> for a unit of work that spans several work orders (a sync
+        /// batch). Gates and row locks are taken in ascending id order, so two batches never
+        /// wait on each other in a cycle; an empty set runs the work in a plain transaction.
+        /// </summary>
+        public static async Task<T> RunManyAsync<T>(
+            ApplicationDbContext context,
+            IEnumerable<int> workOrderIds,
+            Func<CancellationToken, Task<T>> work,
+            CancellationToken cancellationToken,
+            Func<T, bool>? commitWhen = null)
         {
-            var gate = Gates.GetOrAdd(workOrderId, _ => new SemaphoreSlim(1, 1));
-            await gate.WaitAsync(cancellationToken);
+            var ids = workOrderIds.Distinct().OrderBy(id => id).ToList();
+            var held = new List<SemaphoreSlim>(ids.Count);
             try
             {
+                foreach (var id in ids)
+                {
+                    var gate = Gates.GetOrAdd(id, _ => new SemaphoreSlim(1, 1));
+                    await gate.WaitAsync(cancellationToken);
+                    held.Add(gate);
+                }
+
                 await using var transaction = context.Database.IsRelational()
                     ? await context.Database.BeginTransactionAsync(cancellationToken)
                     : null;
                 try
                 {
-                    await LockRowAsync(context, workOrderId, cancellationToken);
+                    foreach (var id in ids)
+                        await LockRowAsync(context, id, cancellationToken);
+
                     var result = await work(cancellationToken);
                     if (transaction is not null)
                     {
@@ -56,7 +78,8 @@ namespace SeaHaven.DataServices.Helpers
             }
             finally
             {
-                gate.Release();
+                foreach (var gate in held)
+                    gate.Release();
             }
         }
 
diff --git a/SeaHaven.DataServices/Implementation/UpliftDataService.cs b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
index 9f4e0c5..6bee67c 100644
--- a/SeaHaven.DataServices/Implementation/UpliftDataService.cs
+++ b/SeaHaven.DataServices/Implementation/UpliftDataService.cs
@@ -465,6 +465,17 @@ namespace SeaHaven.DataServices.Implementation
                 now,
                 cancellationToken);
 
+        public async Task<bool> IsWorkOrderCancelledAsync(int workOrderId, CancellationToken cancellationToken)
+        {
+            var workOrder = await _context.workOrders
+                .AsNoTracking()
+                .Where(w => w.Id == workOrderId)
+                .Select(w => new { w.LifecycleStatus, w.Status })
+                .FirstOrDefaultAsync(cancellationToken);
+            return workOrder is not null
+                && PendingUpliftCancellation.IsCancelled(workOrder.LifecycleStatus, workOrder.Status);
+        }
+
         public async Task<bool> HasActiveAsync(int dispatchId, CancellationToken cancellationToken)
         {
             return await _context.DispatchUpliftRequests
diff --git a/SeaHaven.DataServices/Implementation/WorkOrderIngestDataService.cs b/SeaHaven.DataServices/Implementation/WorkOrderIngestDataService.cs
index 6c13dce..5d0f4ff 100644
--- a/SeaHaven.DataServices/Implementation/WorkOrderIngestDataService.cs
+++ b/SeaHaven.DataServices/Implementation/WorkOrderIngestDataService.cs
@@ -42,25 +42,28 @@ namespace SeaHaven.DataServices.Implementation
                 DateTime.UtcNow,
                 cancellationToken);
 
-        public async Task ExecuteTransactionalAsync(Func<CancellationToken, Task> work, CancellationToken cancellationToken)
-        {
-            await using var transaction = _context.Database.IsRelational()
-                ? await _context.Database.BeginTransactionAsync(cancellationToken)
-                : null;
+        public async Task<IReadOnlyList<int>> GetWorkOrderIdsByExternalIdsAsync(
+            IReadOnlyCollection<string> externalWorkOrderIds,
+            CancellationToken cancellationToken)
+            => await _context.workOrders
+                .AsNoTracking()
+                .Where(w => w.ExternalWorkOrderId != null && externalWorkOrderIds.Contains(w.ExternalWorkOrderId))
+                .Select(w => w.Id)
+                .ToListAsync(cancellationToken);
 
-            try
-            {
-                await work(cancellationToken);
-                if (transaction is not null)
-                    await transaction.CommitAsync(cancellationToken);
-            }
-            catch
-            {
-                if (transaction is not null)
-                    await transaction.RollbackAsync(cancellationToken);
-                throw;
-            }
-        }
+        public Task ExecuteTransactionalAsync(
+            IReadOnlyCollection<int> lockedWorkOrderIds,
+            Func<CancellationToken, Task> work,
+            CancellationToken cancellationToken)
+            => WorkOrderMutationLock.RunManyAsync(
+                _context,
+                lockedWorkOrderIds,
+                async ct =>
+                {
+                    await work(ct);
+                    return true;
+                },
+                cancellationToken);
 
         public Task SaveAsync(CancellationToken cancellationToken)
             => _context.SaveChangesAsync(cancellationToken);
diff --git a/SeaHaven.DataServices/Interfaces/IUpliftDataService.cs b/SeaHaven.DataServices/Interfaces/IUpliftDataService.cs
index 1053202..c160561 100644
--- a/SeaHaven.DataServices/Interfaces/IUpliftDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IUpliftDataService.cs
@@ -39,6 +39,9 @@ namespace SeaHaven.DataServices.Interfaces
             string? actorId,
             DateTime now,
             CancellationToken cancellationToken);
+        // True when the work order is cancelled (PendingUpliftCancellation.IsCancelled), so no
+        // new uplift may be requested on it.
+        Task<bool> IsWorkOrderCancelledAsync(int workOrderId, CancellationToken cancellationToken);
         // SH-101: active = Pending or ChangesRequested (the only states that block a new request).
         Task<bool> HasActiveAsync(int dispatchId, CancellationToken cancellationToken);
         Task<DispatchUpliftRequest?> GetActiveRequestAsync(int dispatchId, CancellationToken cancellationToken);
diff --git a/SeaHaven.DataServices/Interfaces/IWorkOrderIngestDataService.cs b/SeaHaven.DataServices/Interfaces/IWorkOrderIngestDataService.cs
index 5017633..8b6d3b8 100644
--- a/SeaHaven.DataServices/Interfaces/IWorkOrderIngestDataService.cs
+++ b/SeaHaven.DataServices/Interfaces/IWorkOrderIngestDataService.cs
@@ -12,7 +12,15 @@ namespace SeaHaven.DataServices.Interfaces
         // Stages (does not save) the sync-attributed cancellation of the work order's pending
         // uplifts, each with its own audit row. See PendingUpliftCancellation.
         Task<int> StageCancelPendingUpliftsAsync(int workOrderId, CancellationToken cancellationToken);
-        Task ExecuteTransactionalAsync(Func<CancellationToken, Task> work, CancellationToken cancellationToken);
+        Task<IReadOnlyList<int>> GetWorkOrderIdsByExternalIdsAsync(
+            IReadOnlyCollection<string> externalWorkOrderIds,
+            CancellationToken cancellationToken);
+        // Runs the batch in one transaction, holding the per-work-order lock on
+        // lockedWorkOrderIds (see WorkOrderMutationLock) until it commits or rolls back.
+        Task ExecuteTransactionalAsync(
+            IReadOnlyCollection<int> lockedWorkOrderIds,
+            Func<CancellationToken, Task> work,
+            CancellationToken cancellationToken);
         Task SaveAsync(CancellationToken cancellationToken);
     }
 }
diff --git a/SeaHaven.Services/Implementation/VendorPortalService.cs b/SeaHaven.Services/Implementation/VendorPortalService.cs
index d0f14d1..e756eb3 100644
--- a/SeaHaven.Services/Implementation/VendorPortalService.cs
+++ b/SeaHaven.Services/Implementation/VendorPortalService.cs
@@ -670,54 +670,75 @@ namespace SeaHaven.Services.Implementation
                 }
             }
 
-            // At most one active (Pending or ChangesRequested) request per dispatch.
-            var activeExists = await _upliftData.HasActiveAsync(id, cancellationToken);
-            if (activeExists)
+            var vendorReason = reason.Trim();
+            var evidenceId = evidence.Id;
+
+            // The active-request check and the insert run under the per-work-order lock a work
+            // order cancel takes: a cancel either sees this request and cancels it, or this
+            // request sees the cancelled work order and is refused.
+            async Task<DispatchUpliftRequest> PersistRequestAsync(CancellationToken ct)
             {
-                throw new InvalidOperationException("An active uplift request already exists for this dispatch");
+                if (dispatch.WorkOrderId is int workOrderId
+                    && await _upliftData.IsWorkOrderCancelledAsync(workOrderId, ct))
+                {
+                    throw new InvalidOperationException("Cannot request uplift on a cancelled work order");
+                }
+
+                // At most one active (Pending or ChangesRequested) request per dispatch.
+                var activeExists = await _upliftData.HasActiveAsync(id, ct);
+                if (activeExists)
+                {
+                    throw new InvalidOperationException("An active uplift request already exists for this dispatch");
+                }
+
+                var tier1Max = _approvalsOptions.UpliftTier1MaxUsd ?? 2500m;
+                var delta = requestedNTE - current;
+                var requiredTier = delta > tier1Max ? 2 : 1;
+                var expiresAt = now + _approvalsOptions.EffectiveExpiration;
+
+                var request = new DispatchUpliftRequest
+                {
+                    DispatchId = id,
+                    CurrentNTE = current,
+                    RequestedNTE = requestedNTE,
+                    VendorReason = vendorReason,
+                    Status = UpliftStatus.Pending,
+                    RequiredTier = requiredTier,
+                    RequestedByVendorName = session.CompanyName,
+                    EvidenceDocumentId = evidenceId,
+                    RequestKey = string.IsNullOrWhiteSpace(requestKey) ? null : requestKey.Trim(),
+                    ExpiresAt = expiresAt,
+                    NotificationStatus = UpliftNotificationStatus.Pending,
+                    CreatedDate = now
+                };
+                await _upliftData.StageAsync(request, ct);
+
+                await _dispatchData.StageAuditLogAsync(new WorkOrderAuditLog
+                {
+                    WorkOrderId = dispatch.WorkOrderId ?? 0,
+                    FieldName = $"Dispatch {dispatch.DispatchNumber} Uplift",
+                    OldValue = $"${current:F2}",
+                    NewValue = $"${requestedNTE:F2}",
+                    Action = "uplift_requested",
+                    ActorType = "vendor",
+                    CreatedAt = now
+                }, ct);
+
+                try
+                {
+                    await _upliftData.SaveChangesAsync(ct);
+                }
+                catch (SeaHaven.DataServices.Exceptions.UpliftDispatchConflictException)
+                {
+                    throw new UpliftConflictException();
+                }
+
+                return request;
             }
 
-            var tier1Max = _approvalsOptions.UpliftTier1MaxUsd ?? 2500m;
-            var delta = requestedNTE - current;
-            var requiredTier = delta > tier1Max ? 2 : 1;
-            var expiresAt = now + _approvalsOptions.EffectiveExpiration;
-
-            var req = new DispatchUpliftRequest
-            {
-                DispatchId = id,
-                CurrentNTE = current,
-                RequestedNTE = requestedNTE,
-                VendorReason = reason.Trim(),
-                Status = UpliftStatus.Pending,
-                RequiredTier = requiredTier,
-                RequestedByVendorName = session.CompanyName,
-                EvidenceDocumentId = evidence.Id,
-                RequestKey = string.IsNullOrWhiteSpace(requestKey) ? null : requestKey.Trim(),
-                ExpiresAt = expiresAt,
-                NotificationStatus = UpliftNotificationStatus.Pending,
-                CreatedDate = now
-            };
-            await _upliftData.StageAsync(req, cancellationToken);
-
-            await _dispatchData.StageAuditLogAsync(new WorkOrderAuditLog
-            {
-                WorkOrderId = dispatch.WorkOrderId ?? 0,
-                FieldName = $"Dispatch {dispatch.DispatchNumber} Uplift",
-                OldValue = $"${current:F2}",
-                NewValue = $"${requestedNTE:F2}",
-                Action = "uplift_requested",
-                ActorType = "vendor",
-                CreatedAt = now
-            }, cancellationToken);
-
-            try
-            {
-                await _upliftData.SaveChangesAsync(cancellationToken);
-            }
-            catch (SeaHaven.DataServices.Exceptions.UpliftDispatchConflictException)
-            {
-                throw new UpliftConflictException();
-            }
+            var req = dispatch.WorkOrderId is int lockedWorkOrderId
+                ? await _upliftData.ExecuteWorkOrderMutationAsync(lockedWorkOrderId, PersistRequestAsync, cancellationToken)
+                : await PersistRequestAsync(cancellationToken);
 
             // Notification is best-effort and persisted separately from workflow state: a failure
             // never destroys the actionable request (the lifecycle sweep retries by sentinel).
diff --git a/SeaHaven.Services/Implementation/WorkOrderIngestService.cs b/SeaHaven.Services/Implementation/WorkOrderIngestService.cs
index a232128..ee4e129 100644
--- a/SeaHaven.Services/Implementation/WorkOrderIngestService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderIngestService.cs
@@ -37,7 +37,20 @@ namespace SeaHaven.Services.Implementation
             if (items.Count == 0)
                 return result;
 
-            await _ingestData.ExecuteTransactionalAsync(async cancellationToken =>
+            // Existing work orders this batch may cancel hold the per-work-order lock until the
+            // batch commits, so an uplift create on one of them either commits first (and is
+            // cancelled below) or waits and then sees the work order cancelled.
+            var cancellingExternalIds = items
+                .Where(item => !string.IsNullOrWhiteSpace(item.ExternalWorkOrderId)
+                    && PendingUpliftCancellation.IsCancelled(null, WorkOrderIngestFieldMapper.MapStatus(item.WoStatus)))
+                .Select(item => item.ExternalWorkOrderId)
+                .Distinct()
+                .ToList();
+            var lockedWorkOrderIds = cancellingExternalIds.Count == 0
+                ? Array.Empty<int>()
+                : await _ingestData.GetWorkOrderIdsByExternalIdsAsync(cancellingExternalIds, cancellationToken);
+
+            await _ingestData.ExecuteTransactionalAsync(lockedWorkOrderIds, async cancellationToken =>
             {
                 var nextSeed = await AllocateNextWoSeedAsync(cancellationToken);
 
diff --git a/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs b/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs
index 79da4a2..cf8131f 100644
--- a/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs
+++ b/SeaHaven.Services/Implementation/WorkOrderUpliftService.cs
@@ -2,6 +2,7 @@ using System.Security.Claims;
 using Data.SeaHavenIndustries;
 using Data.SeaHavenIndustries.Enums;
 using Microsoft.Extensions.Options;
+using SeaHaven.DataServices.Helpers;
 using SeaHaven.DataServices.Interfaces;
 using SeaHaven.Services.Configuration;
 using SeaHaven.Services.Constants;
@@ -139,10 +140,14 @@ namespace SeaHaven.Services.Implementation
             if (workOrder == null)
                 throw new InvalidOperationException("Work order has no primary dispatch for uplift requests");
 
-            if (workOrder.LifecycleStatus is LifecycleStatus.Completed or LifecycleStatus.Canceled)
+            if (workOrder.LifecycleStatus == LifecycleStatus.Completed
+                || PendingUpliftCancellation.IsCancelled(workOrder.LifecycleStatus, workOrder.Status))
             {
+                var closedAs = workOrder.LifecycleStatus == LifecycleStatus.Completed
+                    ? LifecycleStatus.Completed
+                    : LifecycleStatus.Canceled;
                 throw new InvalidOperationException(
-                    $"Cannot create an uplift on a '{workOrder.LifecycleStatus}' work order");
+                    $"Cannot create an uplift on a '{closedAs}' work order");
             }
 
             // SH-393: write to a dispatch the work order's uplift reads resolve back to it.
diff --git a/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs b/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs
index 76e521a..aa93e28 100644
--- a/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderBoardCancelServiceTests.cs
@@ -462,6 +462,7 @@ public class WorkOrderBoardCancelServiceTests
         public Task<IReadOnlyList<WorkOrderUpliftExposureData>> GetApprovedExposureForWorkOrdersAsync(IReadOnlyCollection<int> workOrderIds, CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<decimal> GetPendingExposureTotalAsync(CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<int> StageCancelPendingForWorkOrderAsync(int workOrderId, string? actorId, DateTime now, CancellationToken cancellationToken) => throw new NotSupportedException();
+        public Task<bool> IsWorkOrderCancelledAsync(int workOrderId, CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<bool> HasActiveAsync(int dispatchId, CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<DispatchUpliftRequest?> GetActiveRequestAsync(int dispatchId, CancellationToken cancellationToken) => throw new NotSupportedException();
         public Task<DispatchUpliftRequest?> GetByRequestKeyAsync(int dispatchId, string requestKey, CancellationToken cancellationToken) => throw new NotSupportedException();
diff --git a/SeaHavenIndustries.Tests/WorkOrderCrmCancelUpliftTests.cs b/SeaHavenIndustries.Tests/WorkOrderCrmCancelUpliftTests.cs
index e576095..62d6cb7 100644
--- a/SeaHavenIndustries.Tests/WorkOrderCrmCancelUpliftTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderCrmCancelUpliftTests.cs
@@ -221,6 +221,72 @@ public sealed class WorkOrderCrmCancelUpliftTests
         Assert.DoesNotContain(verify.WorkOrderAuditLogs, log => log.Action == "uplift_cancel");
     }
 
+    [Fact]
+    public async Task LegacyIngestCancel_WaitsForAnUpliftCreateInFlightAndCancelsWhatItCommitted()
+    {
+        var options = await SeedInMemoryAsync();
+        var createEntered = new TaskCompletionSource(TaskCreationOptions.RunContinuationsAsynchronously);
+        var releaseCreate = new TaskCompletionSource(TaskCreationOptions.RunContinuationsAsynchronously);
+
+        await using var createContext = new ApplicationDbContext(options);
+        var create = new UpliftDataService(createContext).ExecuteWorkOrderMutationAsync(1, async ct =>
+        {
+            createEntered.SetResult();
+            await releaseCreate.Task;
+            createContext.DispatchUpliftRequests.Add(WorkOrderBoardPatchCancelUpliftTests.Uplift(200, "Pending", 800m));
+            await createContext.SaveChangesAsync(ct);
+            return true;
+        }, CancellationToken.None);
+        await createEntered.Task;
+
+        await using var ingestContext = new ApplicationDbContext(options);
+        var ingest = NewIngestService(ingestContext).UpsertBatchAsync(new[]
+        {
+            new WorkOrderIngestPayloadDto { ExternalWorkOrderId = "123", WoStatus = "cancelled" }
+        });
+
+        var finishedFirst = await Task.WhenAny(ingest, Task.Delay(TimeSpan.FromSeconds(2)));
+        Assert.NotSame(ingest, finishedFirst);
+
+        releaseCreate.SetResult();
+        await create;
+        await ingest;
+
+        await using var verify = new ApplicationDbContext(options);
+        Assert.Equal("Cancelled", verify.workOrders.Single().Status);
+        Assert.Equal(UpliftStatus.Withdrawn, verify.DispatchUpliftRequests.Single(u => u.Id == 200).Status);
+    }
+
+    [Fact]
+    public async Task LegacyIngestCancel_OnARelationalStore_CancelsPendingUpliftInTheBatchTransaction()
+    {
+        await using var connection = new SqliteConnection("DataSource=:memory:");
+        await connection.OpenAsync();
+        var options = new DbContextOptionsBuilder<ApplicationDbContext>()
+            .UseSqlite(connection)
+            .Options;
+        await using (var seed = new WorkOrderBoardPatchCancelUpliftTests.SqliteRowVersionDbContext(options))
+        {
+            await seed.Database.EnsureCreatedAsync();
+            await WorkOrderBoardPatchCancelUpliftTests.SeedWorkOrderAsync(seed);
+            seed.DispatchUpliftRequests.Add(WorkOrderBoardPatchCancelUpliftTests.Uplift(100, "Pending", 700m));
+            await seed.SaveChangesAsync();
+        }
+
+        await using (var context = new WorkOrderBoardPatchCancelUpliftTests.SqliteRowVersionDbContext(options))
+        {
+            await NewIngestService(context).UpsertBatchAsync(new[]
+            {
+                new WorkOrderIngestPayloadDto { ExternalWorkOrderId = "123", WoStatus = "cancelled" }
+            });
+        }
+
+        await using var verify = new WorkOrderBoardPatchCancelUpliftTests.SqliteRowVersionDbContext(options);
+        Assert.Equal("Cancelled", (await verify.workOrders.AsNoTracking().SingleAsync()).Status);
+        Assert.Equal(UpliftStatus.Withdrawn, (await verify.DispatchUpliftRequests.AsNoTracking().SingleAsync()).Status);
+        Assert.Single(await verify.WorkOrderAuditLogs.Where(log => log.Action == "uplift_cancel").ToListAsync());
+    }
+
     private static WorkOrderIngestService NewIngestService(ApplicationDbContext context)
     {
         var fieldLocks = new WorkOrderFieldLockService(new WorkOrderFieldLockDataService(context));
diff --git a/SeaHavenIndustries.Tests/WorkOrderUpliftServiceTests.cs b/SeaHavenIndustries.Tests/WorkOrderUpliftServiceTests.cs
index 390beaf..a22c10d 100644
--- a/SeaHavenIndustries.Tests/WorkOrderUpliftServiceTests.cs
+++ b/SeaHavenIndustries.Tests/WorkOrderUpliftServiceTests.cs
@@ -603,6 +603,26 @@ public sealed class WorkOrderUpliftServiceTests
         Assert.Equal(1500m, context.Dispatches.Single(d => d.Id == 10).NTEAmount);
     }
 
+    [Fact]
+    public async Task CreateAsync_WorkOrderCancelledBySyncStatusText_IsRefusedAndCreatesNothing()
+    {
+        await using var context = CreateContext();
+        var (workOrder, _) = await SeedWorkOrderAsync(context);
+        // The legacy ingest cancels a work order by its status text alone.
+        workOrder.Status = "Cancelled";
+        await context.SaveChangesAsync();
+        var service = NewService(context);
+
+        await Assert.ThrowsAsync<InvalidOperationException>(() => service.CreateAsync(
+            workOrder.Id,
+            new CreateWorkOrderUpliftRequestDto { Amount = 400m, Notes = "After cancel" },
+            Dispatcher(),
+            CancellationToken.None));
+
+        Assert.Empty(context.DispatchUpliftRequests);
+        Assert.Equal(1000m, context.Dispatches.Single(d => d.Id == 10).NTEAmount);
+    }
+
     [Theory]
     [InlineData(LifecycleStatus.Completed)]
     [InlineData(LifecycleStatus.Canceled)]

From de0e767930638333c08016cc0f681cc2e1282026 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 19:38:53 -0300
Subject: [PATCH 182/183] fix(auth): refuse a reset email when the queue is
 full instead of dropping it

The channel used DropWrite, under which TryWrite reports success and
discards the email, so a full queue still counted the request and never
sent the code. Wait makes TryWrite return false when the queue is full,
without blocking, so the request is released and the user can ask again.
---
 .../PasswordResetEmailChannelTests.cs         | 43 +++++++++++++++++++
 .../PasswordResetEmailDelivery.cs             |  5 ++-
 2 files changed, 47 insertions(+), 1 deletion(-)
 create mode 100644 Api.SeaHavenIndustries.Tests/PasswordResetEmailChannelTests.cs

diff --git a/Api.SeaHavenIndustries.Tests/PasswordResetEmailChannelTests.cs b/Api.SeaHavenIndustries.Tests/PasswordResetEmailChannelTests.cs
new file mode 100644
index 0000000..5366173
--- /dev/null
+++ b/Api.SeaHavenIndustries.Tests/PasswordResetEmailChannelTests.cs
@@ -0,0 +1,43 @@
+using Api.SeaHavenIndustries.HostedServices;
+using FluentAssertions;
+using Microsoft.Extensions.Logging.Abstractions;
+using Xunit;
+
+namespace Api.SeaHavenIndustries.Tests;
+
+public class PasswordResetEmailChannelTests
+{
+    [Fact]
+    public void A_full_queue_refuses_the_email_instead_of_dropping_it_silently()
+    {
+        var channel = new PasswordResetEmailChannel(NullLogger<PasswordResetEmailChannel>.Instance);
+        for (var i = 0; i < PasswordResetEmailChannel.Capacity; i++)
+            channel.TryEnqueue($"user{i}@example.com", "subject", "body").Should().BeTrue();
+
+        var accepted = channel.TryEnqueue("late@example.com", "subject", "body");
+
+        accepted.Should().BeFalse();
+        channel.Pending.Should().Be(PasswordResetEmailChannel.Capacity);
+    }
+
+    [Fact]
+    public async Task A_refused_email_is_never_delivered_and_the_queue_accepts_again_once_drained()
+    {
+        var channel = new PasswordResetEmailChannel(NullLogger<PasswordResetEmailChannel>.Instance);
+        for (var i = 0; i < PasswordResetEmailChannel.Capacity; i++)
+            channel.TryEnqueue($"user{i}@example.com", "subject", "body");
+        channel.TryEnqueue("late@example.com", "subject", "body").Should().BeFalse();
+
+        var delivered = new List<string>();
+        while (channel.Reader.TryRead(out var email))
+        {
+            delivered.Add(email.EmailTo);
+            channel.MarkHandled();
+        }
+
+        delivered.Should().HaveCount(PasswordResetEmailChannel.Capacity).And.NotContain("late@example.com");
+        channel.Pending.Should().Be(0);
+        channel.TryEnqueue("retry@example.com", "subject", "body").Should().BeTrue();
+        (await channel.Reader.ReadAsync()).EmailTo.Should().Be("retry@example.com");
+    }
+}
diff --git a/Api.SeaHavenIndustries/HostedServices/PasswordResetEmailDelivery.cs b/Api.SeaHavenIndustries/HostedServices/PasswordResetEmailDelivery.cs
index 5b2b7af..da87fdd 100644
--- a/Api.SeaHavenIndustries/HostedServices/PasswordResetEmailDelivery.cs
+++ b/Api.SeaHavenIndustries/HostedServices/PasswordResetEmailDelivery.cs
@@ -29,7 +29,10 @@ namespace Api.SeaHavenIndustries.HostedServices
         private readonly Channel<PasswordResetEmail> _channel = Channel.CreateBounded<PasswordResetEmail>(
             new BoundedChannelOptions(Capacity)
             {
-                FullMode = BoundedChannelFullMode.DropWrite,
+                // Wait, not DropWrite: with DropWrite, TryWrite reports success and discards
+                // the email, so a full queue would still count the request. TryWrite never
+                // blocks; under Wait it returns false when the queue is full.
+                FullMode = BoundedChannelFullMode.Wait,
                 SingleReader = true
             });
         private readonly ILogger<PasswordResetEmailChannel> _logger;

From 74d5aa17eb1fa29d82bed03387642dff73f4edb4 Mon Sep 17 00:00:00 2001
From: Alexandre Brandizzi <alex_brandizzi@hotmail.com>
Date: Fri, 25 Sep 2026 20:01:58 -0300
Subject: [PATCH 183/183] fix(auth): trace a reset email the provider rejects
 as an error

A send that the mail provider did not accept finished its background
transaction as ok, so rejected reset emails looked delivered in tracing.
It now finishes as an error with a fixed message that names no recipient.
---
 .../PasswordResetEmailSenderTracingTests.cs   | 55 +++++++++++++++++++
 .../PasswordResetEmailDelivery.cs             | 16 ++++--
 2 files changed, 66 insertions(+), 5 deletions(-)
 create mode 100644 Api.SeaHavenIndustries.Tests/PasswordResetEmailSenderTracingTests.cs

diff --git a/Api.SeaHavenIndustries.Tests/PasswordResetEmailSenderTracingTests.cs b/Api.SeaHavenIndustries.Tests/PasswordResetEmailSenderTracingTests.cs
new file mode 100644
index 0000000..93c912a
--- /dev/null
+++ b/Api.SeaHavenIndustries.Tests/PasswordResetEmailSenderTracingTests.cs
@@ -0,0 +1,55 @@
+using Api.SeaHavenIndustries.HostedServices;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging.Abstractions;
+using Moq;
+using Sentry;
+using SeaHaven.Services.Interfaces;
+using Xunit;
+
+namespace Api.SeaHavenIndustries.Tests;
+
+public class PasswordResetEmailSenderTracingTests
+{
+    [Theory]
+    [InlineData(true)]
+    [InlineData(false)]
+    public async Task Each_send_finishes_its_transaction_as_ok_only_when_the_provider_accepts_it(bool accepted)
+    {
+        var transaction = new Mock<ITransactionTracer>();
+        var hub = new Mock<IHub>();
+        hub.Setup(h => h.PushScope()).Returns(Mock.Of<IDisposable>());
+        hub.Setup(h => h.StartTransaction(It.IsAny<ITransactionContext>(), It.IsAny<IReadOnlyDictionary<string, object?>>()))
+            .Returns(transaction.Object);
+
+        var sender = new Mock<IEmailSender>();
+        sender.Setup(s => s.SendEmailAsync(It.IsAny<string>(), It.IsAny<string>(), It.IsAny<string>())).ReturnsAsync(accepted);
+        var services = new ServiceCollection().AddSingleton(sender.Object).BuildServiceProvider();
+        var channel = new PasswordResetEmailChannel(NullLogger<PasswordResetEmailChannel>.Instance);
+        var worker = new PasswordResetEmailSenderHostedService(
+            channel,
+            services.GetRequiredService<IServiceScopeFactory>(),
+            NullLogger<PasswordResetEmailSenderHostedService>.Instance,
+            hub.Object);
+
+        await worker.StartAsync(CancellationToken.None);
+        Assert.True(channel.TryEnqueue("user@example.com", "subject", "Your code is 123456"));
+        var deadline = DateTime.UtcNow.AddSeconds(10);
+        while (channel.Pending > 0 && DateTime.UtcNow < deadline)
+            await Task.Delay(10);
+        await worker.StopAsync(CancellationToken.None);
+
+        Assert.Equal(0, channel.Pending);
+        if (accepted)
+        {
+            transaction.Verify(t => t.Finish(SpanStatus.Ok), Times.Once);
+            transaction.Verify(t => t.Finish(It.IsAny<Exception>(), It.IsAny<SpanStatus>()), Times.Never);
+        }
+        else
+        {
+            transaction.Verify(t => t.Finish(SpanStatus.Ok), Times.Never);
+            transaction.Verify(t => t.Finish(
+                It.Is<Exception>(ex => !ex.Message.Contains("user@example.com") && !ex.Message.Contains("123456")),
+                SpanStatus.InternalError), Times.Once);
+        }
+    }
+}
diff --git a/Api.SeaHavenIndustries/HostedServices/PasswordResetEmailDelivery.cs b/Api.SeaHavenIndustries/HostedServices/PasswordResetEmailDelivery.cs
index da87fdd..172f678 100644
--- a/Api.SeaHavenIndustries/HostedServices/PasswordResetEmailDelivery.cs
+++ b/Api.SeaHavenIndustries/HostedServices/PasswordResetEmailDelivery.cs
@@ -91,8 +91,10 @@ namespace Api.SeaHavenIndustries.HostedServices
                     $"{nameof(PasswordResetEmailSenderHostedService)}.{nameof(SendAsync)}");
                 try
                 {
-                    await SendAsync(email);
-                    transaction.FinishOk();
+                    if (await SendAsync(email))
+                        transaction.FinishOk();
+                    else
+                        transaction.FinishError(new InvalidOperationException("The mail provider did not accept the password reset email."));
                 }
                 catch (OperationCanceledException) when (stoppingToken.IsCancellationRequested)
                 {
@@ -112,12 +114,16 @@ namespace Api.SeaHavenIndustries.HostedServices
             }
         }
 
-        private async Task SendAsync(PasswordResetEmail email)
+        /// <summary>True when the mail provider accepted the email.</summary>
+        private async Task<bool> SendAsync(PasswordResetEmail email)
         {
             await using var scope = _scopeFactory.CreateAsyncScope();
             var sender = scope.ServiceProvider.GetRequiredService<IEmailSender>();
-            if (!await sender.SendEmailAsync(email.EmailTo, email.Subject, email.Body))
-                _logger.LogWarning("Password reset email was not accepted by the mail provider.");
+            if (await sender.SendEmailAsync(email.EmailTo, email.Subject, email.Body))
+                return true;
+
+            _logger.LogWarning("Password reset email was not accepted by the mail provider.");
+            return false;
         }
     }
 }