chore(config): document Phase 7 feature flags in appsettings and .env.example

.env.example

@@ -1,11 +1,11 @@
-# Sea Haven Industries — shoc-backend required configuration
+# Sea Haven Industries ÔÇö shoc-backend required configuration
 #
 # This file documents the secrets that used to be hardcoded in appsettings*.json
 # and source files. Copy the values into one of the supported configuration sources;
 # do NOT commit real values.
 #
 # .NET resolves configuration in this order (later wins):
-#   1. appsettings.json / appsettings.{Environment}.json  (committed — placeholders only)
+#   1. appsettings.json / appsettings.{Environment}.json  (committed ÔÇö placeholders only)
 #   2. User Secrets (local dev):  dotnet user-secrets set "Key:Sub" "value"
 #   3. Environment variables       (use "__" as the section separator)
 #
@@ -32,3 +32,16 @@ GoogleMaps__ApiKey=AIzaSyXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
 # AWS_ACCESS_KEY_ID=
 # AWS_SECRET_ACCESS_KEY=
 # AWS_REGION=us-east-2
+
+# --- Work Order ingest (Lambda cutover) ---
+# Leave Enabled=false until ApiKey is a real secret (min 32 chars). Do not use appsettings placeholders.
+WorkOrderIngest__Enabled=false
+WorkOrderIngest__ApiKey=<shared-secret-for-X-Ingest-Key-min-32-chars>
+
+# --- Dynamo sync bridge (keep false after Lambda cutover; avoid dual-run with ingest) ---
+Sync__Enabled=true
+
+# --- Legacy endpoint deprecation headers ---
+LegacyEndpoints__DeprecationEnabled=false
+LegacyEndpoints__SunsetDate=2026-12-31
+

Api.SeaHavenIndustries/appsettings.json

@@ -1,4 +1,4 @@
-{
+{
   "ConnectionStrings": {
     //"DefaultConnection": "Server=DESKTOP-64LC14O\SQLEXPRESS;Database=SeahavenIndustries;TrustServerCertificate=True;Trusted_Connection=True;MultipleActiveResultSets=true",
 
@@ -27,5 +27,18 @@
   "WorkOrderJobs": {
     "WeekRolled": { "Enabled": true, "RunAtUtc": "00:05", "DayOfWeek": "Monday" },
     "PastDueCache": { "Enabled": false, "RunAtUtc": "00:10" }
-  }
+  },
-}
+  "WorkOrderIngest": {
+    "Enabled": false,
+    "ApiKey": "${WORKORDER_INGEST_API_KEY}"
+  },
+  "Sync": {
+    "Enabled": true
+  },
+  "LegacyEndpoints": {
+    "DeprecationEnabled": false,
+    "SunsetDate": "2026-12-31"
+  },
+  "FrontendBaseUrl": "https://shoc.seahaven.com"
+}
+

SeaHavenIndustries/appsettings.json

@@ -1,10 +1,5 @@
 {
   "ConnectionStrings": {
-    //"DefaultConnection": "Server=.;Database=SeahavenIndustries;TrustServerCertificate=True;Trusted_Connection=True;MultipleActiveResultSets=true",
-    //"DefaultConnection": "Server=.\\SqlExpress;Database=SeahavenIndustries;TrustServerCertificate=True;Trusted_Connection=True;MultipleActiveResultSets=true",
-
-    // Provide the real value via environment variable ConnectionStrings__DefaultConnection,
-    // user-secrets, or appsettings.Development.json (which is gitignored). Do NOT commit credentials.
     "DefaultConnection": "${CONNECTION_STRING}",
     "excelconnection": "Provider=Microsoft.ACE.OLEDB.12.0;Data Source={0};Extended Properties='Excel 8.0;HDR=YES'"
   },
@@ -15,12 +10,14 @@
     }
   },
   "SendGrid": {
-    // Provide the real value via environment variable SendGrid__ApiKey or user-secrets.
     "ApiKey": "${SENDGRID_API_KEY}"
   },
   "GoogleMaps": {
-    // Provide the real value via environment variable GoogleMaps__ApiKey or user-secrets.
     "ApiKey": "${GOOGLE_MAPS_API_KEY}"
   },
-  "AllowedHosts": "*"
+  "AllowedHosts": "*",
+  "BlazorWorkOrderSunset": {
+    "Enabled": false,
+    "ShocBaseUrl": "https://shoc.seahaven.com"
+  }
 }