shoc-backend/TODO.md

SHOC — TODO

Vendor Portal (Next Priority)

• Change dispatch email Accept button to "View Work Order" linking to vendor portal
• Vendor web portal — public pages authenticated by dispatch token
• Vendor can view their dispatches, accept, update status, complete sign-offs, fill checklists
• No login required — token-based access from email link
• Per-WO template selection in multi-WO dispatch

Dispatch & Vendor Communication

• Dispatch detail modal — view/edit status, dates, NTE, description
• Dispatch number — auto-generated DSP-00001
• DispatchId on Comments — tie vendor comments to specific dispatches
• Vendor activity feed per dispatch
• Internal user → vendor email
• Cancel dispatch button
• Checklist items with template support
• Two-party sign-offs (Customer + Vendor)
• Dispatcher verification gate
• Vendor accept via email link
• Time tracking / wait indicators
• Multi-WO dispatch
• Front API integration — replace SendGrid/SES with Front inbox (vendors@seahaven.com)
• Add ability for dispatcher to assign a template checklist after initial dispatch
• Resend dispatch email button

Work Order List

• Pinned Actions column — CSS grid doesn't support sticky horizontal scroll, revisit

Pages Not Yet Built

• /profile — My Profile page (linked from user dropdown)
• /settings — Account Settings page (linked from user dropdown)
• /change-password — Change Password page (linked from user dropdown)

Controllers Not Yet Built

• CalendarController — backend CRUD for calendar/events (frontend pages exist)

Dashboard

• Priority Analysis table — needs backend endpoint to calculate age buckets by severity
• Invoice Analysis table — placeholder data, no backend yet

Data & Integration

• Customer NTE — wire to PO database (placeholder on WO view page)
• Vendor PO detailed format — line items, billing address, payment terms, expiration, T&C
• PDF generation for Vendor PO — QuestPDF or similar
• Address-based distance calculation — upgrade from zip-to-zip to geocoded addresses
• Backfill location zip codes from address strings during sync

Deployment

• When SHOC deploys, switch workorder-ingest Lambda from DynamoDB to direct SHOC API calls
• Retire DynamoDB sync bridge
• GitHub branch protection — requires paid plan for private repos