fix: trying to fix auto-pulls 14 !

.claude/settings.local.json

@@ -0,0 +1,16 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(npm create:*)",
+      "Bash(npm install:*)",
+      "Bash(npm run build:*)",
+      "Bash(python -c:*)",
+      "Bash(npx vite build:*)",
+      "Bash(wc:*)",
+      "Bash(ls:*)",
+      "Bash(node -c:*)",
+      "Bash(npm run lint:*)",
+      "Bash(python:*)"
+    ]
+  }
+}

.env.example

@@ -13,8 +13,6 @@ MQTT_BROKER_PORT=1883
 MQTT_ADMIN_USERNAME=admin
 MQTT_ADMIN_PASSWORD=your-mqtt-admin-password
 MOSQUITTO_PASSWORD_FILE=/etc/mosquitto/passwd
-# Must be unique per running instance (VPS vs local dev)
-MQTT_CLIENT_ID=bellsystems-admin-panel
 # HMAC secret used to derive per-device MQTT passwords (must match firmware)
 MQTT_SECRET=change-me-in-production
 
@@ -25,13 +23,6 @@ DEBUG=true
 NGINX_PORT=80
 
 # Local file storage (override if you want to store data elsewhere)
-SQLITE_DB_PATH=./data/database.db
+SQLITE_DB_PATH=./mqtt_data.db
 BUILT_MELODIES_STORAGE_PATH=./storage/built_melodies
 FIRMWARE_STORAGE_PATH=./storage/firmware
-
-# Nextcloud WebDAV
-NEXTCLOUD_URL=https://cloud.example.com
-NEXTCLOUD_USERNAME=service-account@example.com
-NEXTCLOUD_PASSWORD=your-password-here
-NEXTCLOUD_DAV_USER=admin
-NEXTCLOUD_BASE_PATH=BellSystems/Console

.gitignore

@@ -1,8 +1,3 @@
-# Auto-deploy generated files
-deploy.sh
-deploy.log
-.deploy-trigger
-
 # Secrets
 .env
 firebase-service-account.json
@@ -12,11 +7,6 @@ firebase-service-account.json
 !/data/.gitkeep
 !/data/built_melodies/.gitkeep
 
-# SQLite databases
-*.db
-*.db-shm
-*.db-wal
-
 # Python
 __pycache__/
 *.pyc
@@ -38,6 +28,3 @@ Thumbs.db
 .MAIN-APP-REFERENCE/
 
 .project-vesper-plan.md
-
-# claude
-.claude/

AUTOMATION_ENGINE_STRATEGY.md

@@ -1,395 +0,0 @@
-# BellSystems CP — Automation & Notification Engine Strategy
-
-## Overview
-
-This document defines the architecture and implementation plan for a three-tier intelligence layer built on top of the existing BellSystems Control Panel. The system consists of:
-
-1. **Event Logs** — passive, timestamped record of notable system events
-2. **Notifications** — real-time or near-real-time alerts surfaced in the UI
-3. **Automation Rules** — trigger → condition → action pipelines, configurable via UI
-
-The existing tech stack is unchanged: **FastAPI + SQLite (aiosqlite) + Firestore + React**. Everything new slots in as additional tables in `mqtt_data.db`, new backend modules, and new frontend pages/components.
-
----
-
-## Architecture
-
-```
-┌──────────────────────────────────────────────────┐
-│  Scheduler Loop (runs inside existing FastAPI    │
-│  startup, alongside email_sync_loop)             │
-│                                                  │
-│  Every 60s: evaluate_rules()                     │
-│    ↓                                             │
-│  Rules Engine                                    │
-│    → loads enabled rules from DB                 │
-│    → evaluates conditions against live data      │
-│    → fires Action Executor on match              │
-│                                                  │
-│  Action Executor                                 │
-│    → create_event_log()                          │
-│    → create_notification()                       │
-│    → send_email()           (existing)           │
-│    → mqtt_publish_command() (existing)           │
-│    → update_field()                              │
-└──────────────────────────────────────────────────┘
-                     ↕ REST / WebSocket
-┌──────────────────────────────────────────────────┐
-│  React Frontend                                  │
-│    - Bell icon in Header (unread count badge)    │
-│    - Notifications dropdown/panel                │
-│    - /automations page (rule CRUD)               │
-│    - Event Log viewer (filterable)               │
-└──────────────────────────────────────────────────┘
-```
-
----
-
-## Database Schema (additions to `mqtt_data.db`)
-
-### `event_log`
-Permanent, append-only record of things that happened.
-
-```sql
-CREATE TABLE IF NOT EXISTS event_log (
-    id          TEXT PRIMARY KEY,
-    category    TEXT NOT NULL,  -- 'device' | 'crm' | 'quotation' | 'user' | 'system'
-    entity_type TEXT,           -- 'device' | 'customer' | 'quotation' | 'user'
-    entity_id   TEXT,           -- the ID of the affected record
-    title       TEXT NOT NULL,
-    detail      TEXT,
-    severity    TEXT NOT NULL DEFAULT 'info',  -- 'info' | 'warning' | 'error'
-    rule_id     TEXT,           -- which automation rule triggered this (nullable)
-    created_at  TEXT NOT NULL DEFAULT (datetime('now'))
-);
-CREATE INDEX IF NOT EXISTS idx_event_log_category ON event_log(category, created_at);
-CREATE INDEX IF NOT EXISTS idx_event_log_entity ON event_log(entity_type, entity_id);
-```
-
-### `notifications`
-Short-lived, user-facing alerts. Cleared once read or after TTL.
-
-```sql
-CREATE TABLE IF NOT EXISTS notifications (
-    id          TEXT PRIMARY KEY,
-    title       TEXT NOT NULL,
-    body        TEXT,
-    link        TEXT,           -- optional frontend route, e.g. "/crm/customers/abc123"
-    severity    TEXT NOT NULL DEFAULT 'info',  -- 'info' | 'warning' | 'error' | 'success'
-    is_read     INTEGER NOT NULL DEFAULT 0,
-    rule_id     TEXT,
-    entity_type TEXT,
-    entity_id   TEXT,
-    created_at  TEXT NOT NULL DEFAULT (datetime('now'))
-);
-CREATE INDEX IF NOT EXISTS idx_notifications_read ON notifications(is_read, created_at);
-```
-
-### `automation_rules`
-Stores user-defined rules. Evaluated by the scheduler.
-
-```sql
-CREATE TABLE IF NOT EXISTS automation_rules (
-    id              TEXT PRIMARY KEY,
-    name            TEXT NOT NULL,
-    description     TEXT,
-    enabled         INTEGER NOT NULL DEFAULT 1,
-    trigger_type    TEXT NOT NULL,  -- 'schedule' | 'mqtt_alert' | 'email_received'
-    trigger_config  TEXT NOT NULL DEFAULT '{}',  -- JSON
-    conditions      TEXT NOT NULL DEFAULT '[]',  -- JSON array of condition objects
-    actions         TEXT NOT NULL DEFAULT '[]',  -- JSON array of action objects
-    cooldown_hours  REAL NOT NULL DEFAULT 0,     -- min hours between firing on same entity
-    last_run_at     TEXT,
-    run_count       INTEGER NOT NULL DEFAULT 0,
-    created_at      TEXT NOT NULL DEFAULT (datetime('now')),
-    updated_at      TEXT NOT NULL DEFAULT (datetime('now'))
-);
-```
-
-### `automation_run_log`
-Deduplication and audit trail for rule executions.
-
-```sql
-CREATE TABLE IF NOT EXISTS automation_run_log (
-    id          INTEGER PRIMARY KEY AUTOINCREMENT,
-    rule_id     TEXT NOT NULL,
-    entity_type TEXT,
-    entity_id   TEXT,
-    status      TEXT NOT NULL,  -- 'fired' | 'skipped_cooldown' | 'error'
-    detail      TEXT,
-    fired_at    TEXT NOT NULL DEFAULT (datetime('now'))
-);
-CREATE INDEX IF NOT EXISTS idx_run_log_rule ON automation_run_log(rule_id, fired_at);
-CREATE INDEX IF NOT EXISTS idx_run_log_entity ON automation_run_log(entity_type, entity_id, fired_at);
-```
-
----
-
-## Backend Module: `automation/`
-
-New module at `backend/automation/`, registered in `main.py`.
-
-```
-backend/automation/
-├── __init__.py
-├── router.py        # CRUD for rules, event_log GET, notifications GET/PATCH
-├── models.py        # Pydantic schemas for rules, conditions, actions
-├── engine.py        # evaluate_rules(), condition evaluators, action executors
-├── scheduler.py     # automation_loop() async task, wired into main.py startup
-└── database.py      # DB helpers for all 4 new tables
-```
-
-### Wiring into `main.py`
-
-```python
-from automation.router import router as automation_router
-from automation.scheduler import automation_loop
-
-app.include_router(automation_router)
-
-# In startup():
-asyncio.create_task(automation_loop())
-```
-
----
-
-## Rule Object Structure (JSON, stored in DB)
-
-```json
-{
-  "id": "rule_abc123",
-  "name": "Quotation follow-up after 7 days",
-  "enabled": true,
-  "trigger_type": "schedule",
-  "trigger_config": { "interval_hours": 24 },
-  "conditions": [
-    { "entity": "quotation", "field": "status",              "op": "eq",  "value": "sent" },
-    { "entity": "quotation", "field": "days_since_updated",  "op": "gte", "value": 7 },
-    { "entity": "quotation", "field": "has_reply",           "op": "eq",  "value": false }
-  ],
-  "actions": [
-    {
-      "type": "send_email",
-      "template_key": "quotation_followup",
-      "to": "{{quotation.client_email}}",
-      "subject": "Following up on Quotation {{quotation.quotation_number}}",
-      "body": "Hi {{customer.name}}, did you have a chance to review our quotation?"
-    },
-    {
-      "type": "create_notification",
-      "title": "Follow-up sent to {{customer.name}}",
-      "link": "/crm/customers/{{quotation.customer_id}}"
-    },
-    {
-      "type": "create_event_log",
-      "category": "quotation",
-      "severity": "info",
-      "title": "Auto follow-up sent for {{quotation.quotation_number}}"
-    }
-  ],
-  "cooldown_hours": 168
-}
-```
-
----
-
-## Supported Trigger Types
-
-| Trigger | How it works |
-|---|---|
-| `schedule` | Evaluated every N hours by the background loop |
-| `mqtt_alert` | Fires immediately when `_handle_alerts()` in `mqtt/logger.py` upserts an alert — hook into that function |
-| `email_received` | Fires inside `sync_emails()` in `crm/email_sync.py` after a new inbound email is stored |
-
-> **Note:** `mqtt_alert` and `email_received` triggers bypass the scheduler loop — they are called directly from the relevant handler functions, giving near-real-time response.
-
----
-
-## Supported Condition Operators
-
-| op | Meaning |
-|---|---|
-| `eq` | equals |
-| `neq` | not equals |
-| `gt` / `gte` / `lt` / `lte` | numeric comparisons |
-| `contains` | string contains |
-| `is_null` / `not_null` | field presence |
-| `days_since` | computed: (now - field_datetime) in days |
-
----
-
-## Supported Action Types
-
-| Action | What it does | Notes |
-|---|---|---|
-| `create_event_log` | Writes to `event_log` table | Always safe to fire |
-| `create_notification` | Writes to `notifications` table | Surfaces in UI bell icon |
-| `send_email` | Calls existing `crm.email_sync.send_email()` | Uses existing mail accounts |
-| `update_field` | Updates a field on an entity in DB/Firestore | Use carefully — define allowed fields explicitly |
-| `mqtt_publish` | Calls `mqtt_manager.publish_command()` | For device auto-actions |
-| `webhook` | HTTP POST to an external URL | Future / optional |
-
----
-
-## Notification System (Frontend)
-
-### Bell Icon in Header
-
-- Polling endpoint: `GET /api/notifications?unread=true&limit=20`
-- Poll interval: 30 seconds (or switch to WebSocket push — the WS infrastructure already exists via `mqtt_manager`)
-- Badge shows unread count
-- Click opens a dropdown panel listing recent notifications with title, time, severity color, and optional link
-
-### Notification Panel
-- Mark as read: `PATCH /api/notifications/{id}/read`
-- Mark all read: `PATCH /api/notifications/read-all`
-- Link field navigates to the relevant page on click
-
-### Toast Popups (optional, Phase 3 polish)
-- Triggered by polling detecting new unread notifications since last check
-- Use an existing toast component if one exists, otherwise add a lightweight one
-
----
-
-## Automation Rules UI (`/automations`)
-
-A new sidebar entry under Settings (sysadmin/admin only).
-
-### Rule List Page
-- Table: name, enabled toggle, trigger type, last run, run count, edit/delete
-- "New Rule" button
-
-### Rule Editor (modal or full page)
-- **Name & description** — free text
-- **Trigger** — dropdown: Schedule / MQTT Alert / Email Received
-  - Schedule: interval hours input
-  - MQTT Alert: subsystem filter (optional)
-  - Email Received: from address filter (optional)
-- **Conditions** — dynamic list, each row:
-  - Entity selector (Quotation / Device / Customer / User)
-  - Field selector (populated based on entity)
-  - Operator dropdown
-  - Value input
-- **Actions** — dynamic list, each row:
-  - Action type dropdown
-  - Type-specific fields (to address, subject, body for email; notification title/body; etc.)
-  - Template variables hint: `{{quotation.quotation_number}}`, `{{customer.name}}`, etc.
-- **Cooldown** — hours between firings on the same entity
-- **Enabled** toggle
-
-### Rule Run History
-- Per-rule log: when it fired, on which entity, success/error
-
----
-
-## Event Log UI
-
-Accessible from `/event-log` route, linked from Dashboard.
-
-- Filterable by: category, severity, entity type, date range
-- Columns: time, category, severity badge, title, entity link
-- Append-only (no deletion from UI)
-- Retention: purge entries older than configurable days (e.g. 180 days) via the existing `purge_loop` pattern in `mqtt/database.py`
-
----
-
-## Pre-Built Rules (Seeded on First Run, All Disabled)
-
-These are created on first startup — the admin enables and customizes them.
-
-| Rule | Trigger | Condition | Action |
-|---|---|---|---|
-| Quotation follow-up | Schedule 24h | status=sent AND days_since_updated ≥ 7 AND no reply | Send follow-up email + notify |
-| Device offline warning | Schedule 1h | no heartbeat for > 2h | Create notification + event log |
-| New unknown email | email_received | customer_id IS NULL | Create notification |
-| Subscription expiring soon | Schedule 24h | subscription.expiry_date within 7 days | Notify + send email |
-| Device critical alert | mqtt_alert | state = CRITICAL | Notify + event log + optional MQTT restart |
-| Quotation expired | Schedule 24h | status=sent AND days_since_updated ≥ 30 | Update status → expired + notify |
-
----
-
-## Implementation Phases
-
-### Phase 1 — Foundation (DB + API)
-- [ ] Add 4 new tables to `mqtt/database.py` schema + migrations
-- [ ] Create `automation/database.py` with all DB helpers
-- [ ] Create `automation/models.py` — Pydantic schemas for rules, conditions, actions, notifications, event_log
-- [ ] Create `automation/router.py` — CRUD for rules, GET event_log, GET/PATCH notifications
-- [ ] Wire router into `main.py`
-
-### Phase 2 — Rules Engine + Scheduler
-- [ ] Create `automation/engine.py` — condition evaluator, template renderer, action executor
-- [ ] Create `automation/scheduler.py` — `automation_loop()` async task
-- [ ] Hook `email_received` trigger into `crm/email_sync.sync_emails()`
-- [ ] Hook `mqtt_alert` trigger into `mqtt/logger._handle_alerts()`
-- [ ] Seed pre-built (disabled) rules on first startup
-- [ ] Wire `automation_loop()` into `main.py` startup
-
-### Phase 3 — Notification UI
-- [ ] Bell icon with unread badge in `Header.jsx`
-- [ ] Notifications dropdown panel component
-- [ ] 30s polling hook in React
-- [ ] Mark read / mark all read
-
-### Phase 4 — Automation Rules UI
-- [ ] `/automations` route and rule list page
-- [ ] Rule editor form (conditions + actions dynamic builder)
-- [ ] Enable/disable toggle
-- [ ] Run history per rule
-- [ ] Add "Automations" entry to Sidebar under Settings
-
-### Phase 5 — Event Log UI
-- [ ] `/event-log` route with filterable table
-- [ ] Purge policy wired into existing `purge_loop`
-- [ ] Dashboard widget showing recent high-severity events
-
-### Phase 6 — Polish
-- [ ] Toast notifications on new unread detection
-- [ ] Template variable previewer in rule editor
-- [ ] "Run now" button per rule (for testing without waiting for scheduler)
-- [ ] Named email templates stored in DB (reusable across rules)
-
----
-
-## Key Design Decisions
-
-| Decision | Choice | Reason |
-|---|---|---|
-| Storage | SQLite (same `mqtt_data.db`) | Consistent with existing pattern; no new infra |
-| Scheduler | `asyncio` task in FastAPI startup | Same pattern as `email_sync_loop` and `purge_loop` already in `main.py` |
-| Rule format | JSON columns in DB | Flexible, UI-editable, no schema migrations per new rule type |
-| Template variables | `{{entity.field}}` string interpolation | Simple to implement, readable in UI |
-| Cooldown dedup | `automation_run_log` per (rule_id, entity_id) | Prevents repeat firing on same quotation/device within cooldown window |
-| Notification delivery | DB polling (30s) initially | The WS infra exists (`mqtt_manager._ws_subscribers`) — easy to upgrade later |
-| Pre-built rules | Seeded as disabled | Non-intrusive — admin must consciously enable each one |
-| `update_field` safety | Explicit allowlist of permitted fields | Prevents accidental data corruption from misconfigured rules |
-
----
-
-## Template Variables Reference
-
-Available inside action `body`, `subject`, `title`, `link` fields:
-
-| Variable | Source |
-|---|---|
-| `{{customer.name}}` | Firestore `crm_customers` |
-| `{{customer.organization}}` | Firestore `crm_customers` |
-| `{{quotation.quotation_number}}` | SQLite `crm_quotations` |
-| `{{quotation.final_total}}` | SQLite `crm_quotations` |
-| `{{quotation.status}}` | SQLite `crm_quotations` |
-| `{{quotation.client_email}}` | SQLite `crm_quotations` |
-| `{{device.serial}}` | Firestore `devices` |
-| `{{device.label}}` | Firestore `devices` |
-| `{{alert.subsystem}}` | MQTT alert payload |
-| `{{alert.state}}` | MQTT alert payload |
-| `{{user.email}}` | Firestore `users` |
-
----
-
-## Notes
-
-- `crm/email_sync.send_email()` is reused as-is for the `send_email` action type. The engine constructs the call parameters.
-- `update_field` actions start with an allowlist of: `quotation.status`, `user.status`. Expand deliberately.
-- For MQTT auto-restart, `mqtt_manager.publish_command(serial, "restart", {})` already works — the engine just calls it.
-- Firestore is read-only from the automation engine (for customer/device lookups). All writes go to SQLite, consistent with the existing architecture.
-- The `has_reply` condition on quotations is computed by checking whether any `crm_comms_log` entry exists with `direction='inbound'` and `customer_id` matching the quotation's customer, dated after the quotation's `updated_at`.

CRM_STATUS_SYSTEM_PLAN.md

@@ -1,404 +0,0 @@
-# CRM Customer Status System — Implementation Plan
-
-## Context
-
-This project is a Vue/React + FastAPI + Firestore admin console located at `C:\development\bellsystems-cp`.
-
-The frontend lives in `frontend/src/` and the backend in `backend/`.
-The CRM module is at `frontend/src/crm/` and `backend/crm/`.
-
-Currently, customers have two flat boolean flags on their Firestore document:
-- `negotiating: bool`
-- `has_problem: bool`
-
-These need to be replaced with a richer, structured system as described below.
-
----
-
-## 1. Target Data Model
-
-### 1A. On the Customer Document (`customers/{id}`)
-
-Remove `negotiating` and `has_problem`. Add the following:
-
-```
-relationship_status: string
-  — one of: "lead" | "prospect" | "active" | "inactive" | "churned"
-  — default: "lead"
-
-technical_issues: array of {
-  active: bool,
-  opened_date: Firestore Timestamp,
-  resolved_date: Firestore Timestamp | null,
-  note: string,
-  opened_by: string,       ← display name or user ID of staff member
-  resolved_by: string | null
-}
-
-install_support: array of {
-  active: bool,
-  opened_date: Firestore Timestamp,
-  resolved_date: Firestore Timestamp | null,
-  note: string,
-  opened_by: string,
-  resolved_by: string | null
-}
-
-transaction_history: array of {
-  date: Firestore Timestamp,
-  flow: string,            ← "invoice" | "payment" | "refund" | "credit"
-  payment_type: string | null,  ← "cash" | "bank_transfer" | "card" | "paypal" — null for invoices
-  category: string,        ← "full_payment" | "advance" | "installment"
-  amount: number,
-  currency: string,        ← default "EUR"
-  invoice_ref: string | null,
-  order_ref: string | null,    ← references an order document ID, nullable
-  recorded_by: string,
-  note: string
-}
-```
-
-### 1B. Orders Subcollection (`customers/{id}/orders/{order_id}`)
-
-Orders live **exclusively** as a subcollection under each customer. There is no top-level `orders`
-collection. The existing top-level `orders` collection in Firestore and its corresponding backend
-routes should be **removed entirely** and replaced with subcollection-based routes under
-`/crm/customers/{customer_id}/orders/`.
-
-If cross-customer order querying is ever needed in the future, use Firestore's native
-`collectionGroup("orders")` query — no top-level mirror collection is required.
-
-Each order document carries the following fields:
-
-```
-order_number: string          ← e.g. "ORD-2026-041"  (already exists — keep)
-title: string                 ← NEW: human-readable name e.g. "3x Wall Mount Units - Athens Office"
-created_by: string            ← NEW: staff user ID or display name
-
-status: string                ← REPLACE existing OrderStatus enum with new values:
-  — "negotiating" | "awaiting_quotation" | "awaiting_customer_confirmation"
-  | "awaiting_fulfilment" | "awaiting_payment" | "manufacturing"
-  | "shipped" | "installed" | "declined" | "complete"
-
-status_updated_date: Firestore Timestamp   ← NEW
-status_updated_by: string                  ← NEW
-
-payment_status: object {                   ← NEW — replaces the flat PaymentStatus enum
-  required_amount: number,
-  received_amount: number,       ← computed from transaction_history where order_ref matches
-  balance_due: number,           ← computed: required_amount - received_amount
-  advance_required: bool,
-  advance_amount: number | null,
-  payment_complete: bool
-}
-
-timeline: array of {            ← NEW — order event log
-  date: Firestore Timestamp,
-  type: string,  ← "quote_request" | "quote_sent" | "quote_accepted" | "quote_declined"
-                    | "mfg_started" | "mfg_complete" | "order_shipped" | "installed"
-                    | "payment_received" | "invoice_sent" | "note"
-  note: string,
-  updated_by: string
-}
-```
-
----
-
-## 2. Backend Changes
-
-### 2A. `backend/crm/models.py`
-
-- **Remove** `negotiating: bool` and `has_problem: bool` from `CustomerCreate` and `CustomerUpdate`.
-- **Add** `relationship_status: Optional[str] = "lead"` to `CustomerCreate` and `CustomerUpdate`.
-- **Add** `technical_issues: List[dict] = []` to `CustomerCreate` and `CustomerUpdate`.
-- **Add** `install_support: List[dict] = []` to `CustomerCreate` and `CustomerUpdate`.
-- **Add** `transaction_history: List[dict] = []` to `CustomerCreate` and `CustomerUpdate`.
-- **Add** proper Pydantic models for each of the above array item shapes:
-  - `TechnicalIssue` model
-  - `InstallSupportEntry` model
-  - `TransactionEntry` model
-- **Update** `OrderStatus` enum with the new values:
-  `negotiating`, `awaiting_quotation`, `awaiting_customer_confirmation`,
-  `awaiting_fulfilment`, `awaiting_payment`, `manufacturing`,
-  `shipped`, `installed`, `declined`, `complete`
-- **Replace** the flat `PaymentStatus` enum on `OrderCreate` / `OrderUpdate` with a new `OrderPaymentStatus` Pydantic model matching the structure above.
-- **Add** `title: Optional[str]`, `created_by: Optional[str]`, `status_updated_date: Optional[str]`,
-  `status_updated_by: Optional[str]`, and `timeline: List[dict] = []` to `OrderCreate` and `OrderUpdate`.
-
-### 2B. `backend/crm/customers_router.py`
-
-- Update any route that reads/writes `negotiating` or `has_problem` to use the new fields.
-- Add new dedicated endpoints:
-
-```
-POST   /crm/customers/{id}/technical-issues
-  — body: { note: str, opened_by: str }
-  — appends a new active issue to the array
-
-PATCH  /crm/customers/{id}/technical-issues/{index}/resolve
-  — body: { resolved_by: str }
-  — sets active=false and resolved_date=now on the item at that index
-
-POST   /crm/customers/{id}/install-support
-  — same pattern as technical-issues above
-
-PATCH  /crm/customers/{id}/install-support/{index}/resolve
-  — same as technical-issues resolve
-
-POST   /crm/customers/{id}/transactions
-  — body: TransactionEntry (see model above)
-  — appends to transaction_history
-
-PATCH  /crm/customers/{id}/relationship-status
-  — body: { status: str }
-  — updates relationship_status field
-```
-
-### 2C. `backend/crm/orders_router.py`
-
-- **Remove** all top-level `/crm/orders/` routes entirely.
-- Re-implement all order CRUD under `/crm/customers/{customer_id}/orders/`:
-
-```
-GET    /crm/customers/{customer_id}/orders/
-POST   /crm/customers/{customer_id}/orders/
-GET    /crm/customers/{customer_id}/orders/{order_id}
-PATCH  /crm/customers/{customer_id}/orders/{order_id}
-DELETE /crm/customers/{customer_id}/orders/{order_id}
-```
-
-- Add endpoint to append a timeline event:
-
-```
-POST   /crm/customers/{customer_id}/orders/{order_id}/timeline
-  — body: { type: str, note: str, updated_by: str }
-  — appends to the timeline array and updates status_updated_date + status_updated_by
-```
-
-- Add endpoint to update payment status:
-
-```
-PATCH  /crm/customers/{customer_id}/orders/{order_id}/payment-status
-  — body: OrderPaymentStatus fields (partial update allowed)
-```
-
-- Add a dedicated "Init Negotiations" endpoint:
-
-```
-POST   /crm/customers/{customer_id}/orders/init-negotiations
-  — body: { title: str, note: str, date: datetime, created_by: str }
-  — creates a new order with status="negotiating", auto-fills all other fields
-  — simultaneously updates the customer's relationship_status to "active"
-    (only if currently "lead" or "prospect" — do not downgrade an already "active" customer)
-  — returns the newly created order document
-```
-
----
-
-## 3. Frontend Changes
-
-### 3A. `frontend/src/crm/customers/CustomerList.jsx`
-
-- When Notes: Quick filter is set, replace the `negotiating` and `has_problem` boolean badge display in the Status column with:
-  - A **relationship status chip** (color-coded pill: lead=grey, prospect=blue, active=green, inactive=amber, churned=soft red)
-  - A small **red dot / warning icon** if `technical_issues.some(i => i.active)` is true, under a new "Support" column. Add this column to the list of arrangeable and toggleable columns.
-  - A small **amber dot / support icon** if `install_support.some(i => i.active)` is true, under the same "Support" column.
-  - These are derived from the arrays — do not store a separate boolean on the document.
-- When Notes: Expanded filter is set, replace the `negotiating` and `has_problem` verbose displays with the active order status (if any) in this format:
-  `"<Status Label> — <Date> — <Note>"` e.g. `"Negotiating — 24.03.26 — Customer requested a more affordable quotation"`
-
-### 3B. `frontend/src/crm/customers/CustomerDetail.jsx`
-
-The customer detail page currently has a tab structure: Overview, Orders, Quotations, Communication, Files & Media, Devices.
-
-Make the following changes:
-
-#### Whole page
-- On the top of the page where we display the name, organization and full address, change it to:
-  Line 1: `Full Title + Name + Surname`
-  Line 2: `Organization · City` (city only, not full address)
-- Remove the horizontal separation line after the title and before the tabs.
-- On the top right side, there is an Edit Customer button. To its left, add **3 new buttons** in this
-  order (left → right): **Init Negotiations**, **Record Issue/Support**, **Record Payment**, then
-  the existing Edit button. All 4 buttons are the same size. Add solid single-color icons to each.
-
-  **"Init Negotiations" button** (blue/indigo accent):
-  - Opens a mini modal.
-  - Fields: Date (defaults to NOW), Title (text input, required), Note (textarea, optional).
-  - Auto-filled server-side: `status = "negotiating"`, `created_by` = current user,
-    `status_updated_date` = now, `status_updated_by` = current user,
-    `payment_status` defaults to zeroed object.
-  - On confirm: calls `POST /crm/customers/{id}/orders/init-negotiations`.
-  - After success: refreshes customer data and orders list. The customer's `relationship_status`
-    is set to `"active"` server-side — no separate frontend call needed.
-  - This is a fast-entry shortcut only. All subsequent edits to this order happen via the Orders tab.
-
-  **"Record Issue/Support" button** (amber/orange accent):
-  - Opens a mini modal.
-  - At the top: a **2-button toggle selector** (not a dropdown) to choose: `Technical Issue` | `Install Support`.
-  - Fields: Date (defaults to NOW), Note (textarea, required).
-  - On confirm: calls `POST /crm/customers/{id}/technical-issues` or
-    `POST /crm/customers/{id}/install-support` depending on selection.
-
-  **"Record Payment" button** (green accent):
-  - Opens a mini modal.
-  - Fields: Date (defaults to NOW), Payment Type (cash | bank transfer | card | paypal),
-    Category (full payment | advance | installment), Amount (number), Currency (defaults to EUR),
-    Invoice Ref (searchable over the customer's invoices, optional),
-    Order Ref (searchable/selectable from the customer's orders, optional),
-    Note (textarea, optional).
-  - On confirm: calls `POST /crm/customers/{id}/transactions`.
-
-#### Overview Tab
-- The main hero section gets a complete overhaul — start fresh:
-  - **Row 1 — Relationship Status selector**: The 5 statuses (`lead | prospect | active | inactive | churned`) as styled pill/tab buttons in a row. Current status is highlighted with a glow effect. Color-code using global CSS variables (add to `index.css` if not already present). Clicking a status immediately calls `PATCH /crm/customers/{id}/relationship-status`.
-  - **Row 2 — Customer info**: All fields except Name and Organization (shown in page header). Include language, religion, tags, etc.
-  - **Row 3 — Contacts**: All contact entries (phone, email, WhatsApp, etc.).
-  - **Row 4 — Notes**: Responsive column grid. 1 column below 1100px, 2 columns 1100–2000px, 3 columns above 2000px. Masonry/wrap layout with no gaps between note cards.
-- Move the Latest Orders section to just below the hero section, before Latest Communications.
-  Hide this section entirely if no orders exist for this customer.
-- For all other sections (Latest Communications, Latest Quotations, Devices): hide each section
-  entirely if it has no data. Show dynamically when data exists.
-
-#### New "Support" Tab (add to TABS array, after Overview)
-Two full-width section cards:
-
-  **Technical Issues Card**
-  - Header shows active count badge (e.g. "2 active")
-  - All issues listed, newest first (active and resolved)
-  - Each row: colored status dot, opened date, note, opened_by — "Resolve" button if active
-  - If more than 5 items: list is scrollable (fixed max-height), does not expand the page
-  - "Report New Issue" button → small inline form with note field + submit
-
-  **Install Support Card**
-  - Identical structure to Technical Issues card
-  - Same scrollable behavior if more than 5 items
-
-#### New "Financials" Tab (add to TABS array, after Support)
-Two sections:
-
-  **Active Order Payment Status** (shown only if an active order exists)
-  - required_amount, received_amount, balance_due
-  - Advance required indicator + advance amount if applicable
-  - Payment complete indicator
-
-  **Transaction History**
-  - Ledger table: Date | Flow | Amount | Currency | Method | Category | Order Ref | Invoice Ref | Note | Recorded By | Actions
-  - "Add Transaction" button → modal with all TransactionEntry fields
-  - Totals row: Total Invoiced vs Total Paid vs Outstanding Balance
-  - Each row: right-aligned **Actions** button (consistent with other tables in the project)
-    with options: **Edit** (opens edit form) and **Delete** (requires confirmation dialog)
-
-#### Orders Tab (existing — update in place)
-- Each order card/row shows:
-  - `title` as primary heading
-  - `status` with human-readable label and color coding (see Section 4)
-  - `payment_status` summary: required / received / balance due
-  - **"View Timeline"** toggle: expands a vertical event log below the order card
-  - **"Add Timeline Event"** button: small inline form with type dropdown + note field
-- Update all API calls to use `/crm/customers/{customer_id}/orders/` routes.
-
-### 3C. `frontend/src/crm/customers/CustomerForm.jsx`
-
-- Remove `negotiating` and `has_problem` fields.
-- Add `relationship_status` dropdown (default: `"lead"`).
-- No issue/transaction forms needed here — managed from the detail page.
-
-### 3D. `frontend/src/crm/orders/OrderForm.jsx` and `OrderDetail.jsx`
-
-- Update status dropdown with new values and labels:
-  - `negotiating` → "Negotiating"
-  - `awaiting_quotation` → "Awaiting Quotation"
-  - `awaiting_customer_confirmation` → "Awaiting Customer Confirmation"
-  - `awaiting_fulfilment` → "Awaiting Fulfilment"
-  - `awaiting_payment` → "Awaiting Payment"
-  - `manufacturing` → "Manufacturing"
-  - `shipped` → "Shipped"
-  - `installed` → "Installed"
-  - `declined` → "Declined"
-  - `complete` → "Complete"
-- Add `title` input field (required).
-- Replace flat `payment_status` enum with the new `payment_status` object fields.
-- Add Timeline section to `OrderDetail.jsx`: vertical event log + add-entry inline form.
-- Update all API calls to use `/crm/customers/{customer_id}/orders/` routes.
-
----
-
-## 4. Status Color Coding Reference
-
-Define all as CSS variables in `index.css` and use consistently across all views:
-
-### Relationship Status
-| Status | Color |
-|---|---|
-| lead | grey / muted |
-| prospect | blue |
-| active | green |
-| inactive | amber |
-| churned | dark or soft red |
-
-### Order Status
-| Status | Color |
-|---|---|
-| negotiating | blue |
-| awaiting_quotation | purple |
-| awaiting_customer_confirmation | indigo |
-| awaiting_fulfilment | amber |
-| awaiting_payment | orange |
-| manufacturing | cyan |
-| shipped | teal |
-| installed | green |
-| declined | red |
-| complete | muted/grey |
-
-### Issue / Support Flags
-| State | Color |
-|---|---|
-| active issue | red |
-| active support | amber |
-| resolved | muted/grey |
-
----
-
-## 5. Migration Notes
-
-- The old `negotiating` and `has_problem` fields will remain in Firestore until the migration script is run. The backend should **read both old and new fields** during the transition period, preferring the new structure if present.
-- A one-time migration script (`backend/migrate_customer_flags.py`) should:
-  1. Read all customer documents
-  2. If `negotiating: true` → create an order in the customer's `orders` subcollection with `status = "negotiating"` and set `relationship_status = "active"` on the customer
-  3. If `has_problem: true` → append one entry to `technical_issues` with `active: true`, `opened_date: customer.updated_at`, `note: "Migrated from legacy has_problem flag"`, `opened_by: "system"`
-  4. Remove `negotiating` and `has_problem` from the customer document
-- Do **not** run the migration script until all frontend and backend changes are deployed and tested.
-
----
-
-## 6. File Summary — What to Touch
-
-```
-backend/crm/models.py                  ← model updates (primary changes)
-backend/crm/customers_router.py        ← new endpoints + field updates
-backend/crm/orders_router.py           ← remove top-level routes, re-implement as subcollection,
-                                          add timeline + payment-status + init-negotiations endpoints
-backend/migrate_customer_flags.py      ← NEW one-time migration script
-
-frontend/src/index.css                         ← add CSS variables for all new status colors
-frontend/src/crm/customers/CustomerList.jsx    ← relationship status chip + support flag dots column
-frontend/src/crm/customers/CustomerDetail.jsx  ← page header, 3 new quick-entry buttons + modals,
-                                                  Overview tab overhaul, new Support tab,
-                                                  new Financials tab, Orders tab updates
-frontend/src/crm/customers/CustomerForm.jsx    ← remove old flags, add relationship_status
-frontend/src/crm/orders/OrderForm.jsx          ← new status values, title field, payment_status,
-                                                  updated API route paths
-frontend/src/crm/orders/OrderDetail.jsx        ← timeline section, updated status/payment,
-                                                  updated API route paths
-```
-
----
-
-## 7. Do NOT Change (out of scope)
-
-- Quotations system — leave as-is
-- Communications / inbox — leave as-is
-- Files & Media tab — leave as-is
-- Devices tab — leave as-is
-- Any other module outside `crm/`

backend/Dockerfile

@@ -1,16 +1,16 @@
 FROM python:3.11-slim
 
-# System dependencies: WeasyPrint (pango/cairo), ffmpeg (video thumbs), poppler (pdf2image)
 RUN apt-get update && apt-get install -y --no-install-recommends \
-    libpango-1.0-0 \
-    libpangocairo-1.0-0 \
-    libgdk-pixbuf-2.0-0 \
-    libffi-dev \
-    shared-mime-info \
-    fonts-dejavu-core \
-    ffmpeg \
-    poppler-utils \
-    && apt-get clean && rm -rf /var/lib/apt/lists/*
+    git \
+    curl \
+    && curl -fsSL https://download.docker.com/linux/static/stable/x86_64/docker-27.5.1.tgz \
+    | tar -xz --strip-components=1 -C /usr/local/bin docker/docker \
+    && curl -fsSL "https://github.com/docker/compose/releases/download/v2.32.4/docker-compose-linux-x86_64" \
+    -o /usr/local/bin/docker-compose \
+    && chmod +x /usr/local/bin/docker-compose \
+    && mkdir -p /usr/local/lib/docker/cli-plugins \
+    && ln -s /usr/local/bin/docker-compose /usr/local/lib/docker/cli-plugins/docker-compose \
+    && rm -rf /var/lib/apt/lists/*
 
 WORKDIR /app
 

backend/admin/router.py

@@ -42,12 +42,23 @@ async def deploy(request: Request):
 
     logger.info("Auto-deploy triggered via Gitea webhook")
 
-    # Write a trigger file to the host-mounted project path.
-    # A host-side watcher service (bellsystems-deploy-watcher) polls for this
-    # file and runs deploy-host.sh as the bellsystems user when it appears.
-    trigger_path = f"{settings.deploy_project_path}/.deploy-trigger"
-    with open(trigger_path, "w") as f:
-        f.write("deploy\n")
+    project_path = settings.deploy_project_path
+    cmd = (
+        f"git config --global --add safe.directory {project_path} && "
+        f"cd {project_path} && "
+        f"git fetch origin main && "
+        f"git reset --hard origin/main && "
+        f"docker-compose up -d --build"
+    )
 
-    logger.info("Auto-deploy trigger file written")
+    # Fire and forget — run deploy in background so we can respond before
+    # the container restarts (which would kill this very process).
+    await asyncio.create_subprocess_shell(
+        cmd,
+        stdout=asyncio.subprocess.DEVNULL,
+        stderr=asyncio.subprocess.DEVNULL,
+        start_new_session=True,
+    )
+
+    logger.info("Auto-deploy started in background")
     return {"ok": True, "message": "Deploy started"}

backend/auth/models.py

@@ -10,141 +10,45 @@ class Role(str, Enum):
     user = "user"
 
 
-class MelodiesPermissions(BaseModel):
-    view: bool = False
-    add: bool = False
-    delete: bool = False
-    safe_edit: bool = False
-    full_edit: bool = False
-    archetype_access: bool = False
-    settings_access: bool = False
-    compose_access: bool = False
-
-
-class DevicesPermissions(BaseModel):
-    view: bool = False
-    add: bool = False
-    delete: bool = False
-    safe_edit: bool = False
-    edit_bells: bool = False
-    edit_clock: bool = False
-    edit_warranty: bool = False
-    full_edit: bool = False
-    control: bool = False
-
-
-class AppUsersPermissions(BaseModel):
-    view: bool = False
-    add: bool = False
-    delete: bool = False
-    safe_edit: bool = False
-    full_edit: bool = False
-
-
-class IssuesNotesPermissions(BaseModel):
-    view: bool = False
-    add: bool = False
-    delete: bool = False
-    edit: bool = False
-
-
-class MailPermissions(BaseModel):
-    view: bool = False
-    compose: bool = False
-    reply: bool = False
-
-
-class CrmPermissions(BaseModel):
-    activity_log: bool = False
-
-
-class CrmCustomersPermissions(BaseModel):
-    full_access: bool = False
-    overview: bool = False
-    orders_view: bool = False
-    orders_edit: bool = False
-    quotations_view: bool = False
-    quotations_edit: bool = False
-    comms_view: bool = False
-    comms_log: bool = False
-    comms_edit: bool = False
-    comms_compose: bool = False
-    add: bool = False
-    delete: bool = False
-    files_view: bool = False
-    files_edit: bool = False
-    devices_view: bool = False
-    devices_edit: bool = False
-
-
-class CrmProductsPermissions(BaseModel):
+class SectionPermissions(BaseModel):
     view: bool = False
     add: bool = False
     edit: bool = False
-
-
-class MfgPermissions(BaseModel):
-    view_inventory: bool = False
-    edit: bool = False
-    provision: bool = False
-    firmware_view: bool = False
-    firmware_edit: bool = False
-
-
-class ApiReferencePermissions(BaseModel):
-    access: bool = False
-
-
-class MqttPermissions(BaseModel):
-    access: bool = False
+    delete: bool = False
 
 
 class StaffPermissions(BaseModel):
-    melodies: MelodiesPermissions = MelodiesPermissions()
-    devices: DevicesPermissions = DevicesPermissions()
-    app_users: AppUsersPermissions = AppUsersPermissions()
-    issues_notes: IssuesNotesPermissions = IssuesNotesPermissions()
-    mail: MailPermissions = MailPermissions()
-    crm: CrmPermissions = CrmPermissions()
-    crm_customers: CrmCustomersPermissions = CrmCustomersPermissions()
-    crm_products: CrmProductsPermissions = CrmProductsPermissions()
-    mfg: MfgPermissions = MfgPermissions()
-    api_reference: ApiReferencePermissions = ApiReferencePermissions()
-    mqtt: MqttPermissions = MqttPermissions()
+    melodies: SectionPermissions = SectionPermissions()
+    devices: SectionPermissions = SectionPermissions()
+    app_users: SectionPermissions = SectionPermissions()
+    equipment: SectionPermissions = SectionPermissions()
+    manufacturing: SectionPermissions = SectionPermissions()
+    mqtt: bool = False
 
 
+# Default permissions per role
 def default_permissions_for_role(role: str) -> Optional[dict]:
     if role in ("sysadmin", "admin"):
         return None  # Full access, permissions field not used
-
+    full = {"view": True, "add": True, "edit": True, "delete": True}
+    view_only = {"view": True, "add": False, "edit": False, "delete": False}
     if role == "editor":
         return {
-            "melodies": {"view": True, "add": True, "delete": True, "safe_edit": True, "full_edit": True, "archetype_access": True, "settings_access": True, "compose_access": True},
-            "devices": {"view": True, "add": True, "delete": True, "safe_edit": True, "edit_bells": True, "edit_clock": True, "edit_warranty": True, "full_edit": True, "control": True},
-            "app_users": {"view": True, "add": True, "delete": True, "safe_edit": True, "full_edit": True},
-            "issues_notes": {"view": True, "add": True, "delete": True, "edit": True},
-            "mail": {"view": True, "compose": True, "reply": True},
-            "crm": {"activity_log": True},
-            "crm_customers": {"full_access": True, "overview": True, "orders_view": True, "orders_edit": True, "quotations_view": True, "quotations_edit": True, "comms_view": True, "comms_log": True, "comms_edit": True, "comms_compose": True, "add": True, "delete": True, "files_view": True, "files_edit": True, "devices_view": True, "devices_edit": True},
-            "crm_products": {"view": True, "add": True, "edit": True},
-            "mfg": {"view_inventory": True, "edit": True, "provision": True, "firmware_view": True, "firmware_edit": True},
-            "api_reference": {"access": True},
-            "mqtt": {"access": True},
+            "melodies": full,
+            "devices": full,
+            "app_users": full,
+            "equipment": full,
+            "manufacturing": view_only,
+            "mqtt": True,
         }
-
     # user role - view only
     return {
-        "melodies": {"view": True, "add": False, "delete": False, "safe_edit": False, "full_edit": False, "archetype_access": False, "settings_access": False, "compose_access": False},
-        "devices": {"view": True, "add": False, "delete": False, "safe_edit": False, "edit_bells": False, "edit_clock": False, "edit_warranty": False, "full_edit": False, "control": False},
-        "app_users": {"view": True, "add": False, "delete": False, "safe_edit": False, "full_edit": False},
-        "issues_notes": {"view": True, "add": False, "delete": False, "edit": False},
-        "mail": {"view": True, "compose": False, "reply": False},
-        "crm": {"activity_log": False},
-        "crm_customers": {"full_access": False, "overview": True, "orders_view": True, "orders_edit": False, "quotations_view": True, "quotations_edit": False, "comms_view": True, "comms_log": False, "comms_edit": False, "comms_compose": False, "add": False, "delete": False, "files_view": True, "files_edit": False, "devices_view": True, "devices_edit": False},
-        "crm_products": {"view": True, "add": False, "edit": False},
-        "mfg": {"view_inventory": True, "edit": False, "provision": False, "firmware_view": True, "firmware_edit": False},
-        "api_reference": {"access": False},
-        "mqtt": {"access": False},
+        "melodies": view_only,
+        "devices": view_only,
+        "app_users": view_only,
+        "equipment": view_only,
+        "manufacturing": {"view": False, "add": False, "edit": False, "delete": False},
+        "mqtt": False,
     }
 
 

backend/builder/database.py

@@ -1,38 +1,27 @@
 import json
 import logging
-from database import get_db
+from mqtt.database import get_db
 
 logger = logging.getLogger("builder.database")
 
 
-async def insert_built_melody(melody_id: str, name: str, pid: str, steps: str, is_builtin: bool = False) -> None:
+async def insert_built_melody(melody_id: str, name: str, pid: str, steps: str) -> None:
     db = await get_db()
     await db.execute(
-        """INSERT INTO built_melodies (id, name, pid, steps, assigned_melody_ids, is_builtin)
-           VALUES (?, ?, ?, ?, ?, ?)""",
-        (melody_id, name, pid, steps, json.dumps([]), 1 if is_builtin else 0),
+        """INSERT INTO built_melodies (id, name, pid, steps, assigned_melody_ids)
+           VALUES (?, ?, ?, ?, ?)""",
+        (melody_id, name, pid, steps, json.dumps([])),
     )
     await db.commit()
 
 
-async def update_built_melody(melody_id: str, name: str, pid: str, steps: str, is_builtin: bool = False) -> None:
+async def update_built_melody(melody_id: str, name: str, pid: str, steps: str) -> None:
     db = await get_db()
     await db.execute(
         """UPDATE built_melodies
-           SET name = ?, pid = ?, steps = ?, is_builtin = ?, updated_at = datetime('now')
+           SET name = ?, pid = ?, steps = ?, updated_at = datetime('now')
            WHERE id = ?""",
-        (name, pid, steps, 1 if is_builtin else 0, melody_id),
-    )
-    await db.commit()
-
-
-async def update_builtin_flag(melody_id: str, is_builtin: bool) -> None:
-    db = await get_db()
-    await db.execute(
-        """UPDATE built_melodies
-           SET is_builtin = ?, updated_at = datetime('now')
-           WHERE id = ?""",
-        (1 if is_builtin else 0, melody_id),
+        (name, pid, steps, melody_id),
     )
     await db.commit()
 
@@ -79,7 +68,6 @@ async def get_built_melody(melody_id: str) -> dict | None:
         return None
     row = dict(rows[0])
     row["assigned_melody_ids"] = json.loads(row["assigned_melody_ids"] or "[]")
-    row["is_builtin"] = bool(row.get("is_builtin", 0))
     return row
 
 
@@ -92,7 +80,6 @@ async def list_built_melodies() -> list[dict]:
     for row in rows:
         r = dict(row)
         r["assigned_melody_ids"] = json.loads(r["assigned_melody_ids"] or "[]")
-        r["is_builtin"] = bool(r.get("is_builtin", 0))
         results.append(r)
     return results
 

backend/builder/models.py

@@ -6,14 +6,12 @@ class BuiltMelodyCreate(BaseModel):
     name: str
     pid: str
     steps: str  # raw step string e.g. "1,2,2+1,1,2,3+1"
-    is_builtin: bool = False
 
 
 class BuiltMelodyUpdate(BaseModel):
     name: Optional[str] = None
     pid: Optional[str] = None
     steps: Optional[str] = None
-    is_builtin: Optional[bool] = None
 
 
 class BuiltMelodyInDB(BaseModel):
@@ -21,7 +19,6 @@ class BuiltMelodyInDB(BaseModel):
     name: str
     pid: str
     steps: str
-    is_builtin: bool = False
     binary_path: Optional[str] = None
     binary_url: Optional[str] = None
     progmem_code: Optional[str] = None

backend/builder/router.py

@@ -1,5 +1,5 @@
 from fastapi import APIRouter, Depends, HTTPException
-from fastapi.responses import FileResponse, PlainTextResponse
+from fastapi.responses import FileResponse
 from auth.models import TokenPayload
 from auth.dependencies import require_permission
 from builder.models import (
@@ -20,7 +20,6 @@ async def list_built_melodies(
     melodies = await service.list_built_melodies()
     return BuiltMelodyListResponse(melodies=melodies, total=len(melodies))
 
-
 @router.get("/for-melody/{firestore_melody_id}")
 async def get_for_firestore_melody(
     firestore_melody_id: str,
@@ -33,14 +32,6 @@ async def get_for_firestore_melody(
     return result.model_dump()
 
 
-@router.get("/generate-builtin-list")
-async def generate_builtin_list(
-    _user: TokenPayload = Depends(require_permission("melodies", "view")),
-):
-    """Generate a C++ header with PROGMEM arrays for all is_builtin archetypes."""
-    code = await service.generate_builtin_list()
-    return PlainTextResponse(content=code, media_type="text/plain")
-
 
 @router.get("/{melody_id}", response_model=BuiltMelodyInDB)
 async def get_built_melody(
@@ -75,15 +66,6 @@ async def delete_built_melody(
     await service.delete_built_melody(melody_id)
 
 
-@router.post("/{melody_id}/toggle-builtin", response_model=BuiltMelodyInDB)
-async def toggle_builtin(
-    melody_id: str,
-    _user: TokenPayload = Depends(require_permission("melodies", "edit")),
-):
-    """Toggle the is_builtin flag for an archetype."""
-    return await service.toggle_builtin(melody_id)
-
-
 @router.post("/{melody_id}/build-binary", response_model=BuiltMelodyInDB)
 async def build_binary(
     melody_id: str,

backend/builder/service.py

@@ -32,7 +32,6 @@ def _row_to_built_melody(row: dict) -> BuiltMelodyInDB:
         name=row["name"],
         pid=row["pid"],
         steps=row["steps"],
-        is_builtin=row.get("is_builtin", False),
         binary_path=binary_path,
         binary_url=binary_url,
         progmem_code=row.get("progmem_code"),
@@ -152,12 +151,8 @@ async def create_built_melody(data: BuiltMelodyCreate) -> BuiltMelodyInDB:
         name=data.name,
         pid=data.pid,
         steps=data.steps,
-        is_builtin=data.is_builtin,
     )
-    # Auto-build binary and builtin code on creation
-    result = await get_built_melody(melody_id)
-    result = await _do_build(melody_id)
-    return result
+    return await get_built_melody(melody_id)
 
 
 async def update_built_melody(melody_id: str, data: BuiltMelodyUpdate) -> BuiltMelodyInDB:
@@ -168,22 +163,11 @@ async def update_built_melody(melody_id: str, data: BuiltMelodyUpdate) -> BuiltM
     new_name = data.name if data.name is not None else row["name"]
     new_pid = data.pid if data.pid is not None else row["pid"]
     new_steps = data.steps if data.steps is not None else row["steps"]
-    new_is_builtin = data.is_builtin if data.is_builtin is not None else row.get("is_builtin", False)
 
     await _check_unique(new_name, new_pid or "", exclude_id=melody_id)
 
-    steps_changed = (data.steps is not None) and (data.steps != row["steps"])
-
-    await db.update_built_melody(melody_id, name=new_name, pid=new_pid, steps=new_steps, is_builtin=new_is_builtin)
-
-    # If steps changed, flag all assigned melodies as outdated, then rebuild
-    if steps_changed:
-        assigned_ids = row.get("assigned_melody_ids", [])
-        if assigned_ids:
-            await _flag_melodies_outdated(assigned_ids, True)
-
-    # Auto-rebuild binary and builtin code on every save
-    return await _do_build(melody_id)
+    await db.update_built_melody(melody_id, name=new_name, pid=new_pid, steps=new_steps)
+    return await get_built_melody(melody_id)
 
 
 async def delete_built_melody(melody_id: str) -> None:
@@ -191,11 +175,6 @@ async def delete_built_melody(melody_id: str) -> None:
     if not row:
         raise HTTPException(status_code=404, detail=f"Built melody '{melody_id}' not found")
 
-    # Flag all assigned melodies as outdated before deleting
-    assigned_ids = row.get("assigned_melody_ids", [])
-    if assigned_ids:
-        await _flag_melodies_outdated(assigned_ids, True)
-
     # Delete the .bsm file if it exists
     if row.get("binary_path"):
         bsm_path = Path(row["binary_path"])
@@ -205,26 +184,10 @@ async def delete_built_melody(melody_id: str) -> None:
     await db.delete_built_melody(melody_id)
 
 
-async def toggle_builtin(melody_id: str) -> BuiltMelodyInDB:
-    """Toggle the is_builtin flag for an archetype."""
-    row = await db.get_built_melody(melody_id)
-    if not row:
-        raise HTTPException(status_code=404, detail=f"Built melody '{melody_id}' not found")
-    new_value = not row.get("is_builtin", False)
-    await db.update_builtin_flag(melody_id, new_value)
-    return await get_built_melody(melody_id)
-
-
 # ============================================================================
 # Build Actions
 # ============================================================================
 
-async def _do_build(melody_id: str) -> BuiltMelodyInDB:
-    """Internal: build both binary and PROGMEM code, return updated record."""
-    await build_binary(melody_id)
-    return await build_builtin_code(melody_id)
-
-
 async def build_binary(melody_id: str) -> BuiltMelodyInDB:
     """Parse steps and write a .bsm binary file to storage."""
     row = await db.get_built_melody(melody_id)
@@ -273,48 +236,6 @@ async def get_binary_path(melody_id: str) -> Optional[Path]:
     return path
 
 
-async def generate_builtin_list() -> str:
-    """Generate a C++ header with PROGMEM arrays for all is_builtin archetypes."""
-    rows = await db.list_built_melodies()
-    builtin_rows = [r for r in rows if r.get("is_builtin")]
-
-    if not builtin_rows:
-        return "// No built-in archetypes defined.\n"
-
-    timestamp = datetime.now().strftime("%Y-%m-%d %H:%M:%S")
-    parts = [
-        f"// Auto-generated Built-in Archetype List",
-        f"// Generated: {timestamp}",
-        f"// Total built-ins: {len(builtin_rows)}",
-        "",
-        "#pragma once",
-        "#include <avr/pgmspace.h>",
-        "",
-    ]
-
-    entry_refs = []
-    for row in builtin_rows:
-        values = steps_string_to_values(row["steps"])
-        array_name = f"melody_builtin_{row['name'].lower().replace(' ', '_')}"
-        display_name = row["name"].replace("_", " ").title()
-        pid = row.get("pid") or f"builtin_{row['name'].lower()}"
-
-        parts.append(f"// {display_name}  |  PID: {pid}  |  Steps: {len(values)}")
-        parts.append(format_melody_array(row["name"].lower().replace(" ", "_"), values))
-        parts.append("")
-        entry_refs.append((display_name, pid, array_name, len(values)))
-
-    # Generate MELODY_LIBRARY array
-    parts.append("// --- MELODY_LIBRARY entries ---")
-    parts.append("// Add these to your firmware's MELODY_LIBRARY[] array:")
-    parts.append("// {")
-    for display_name, pid, array_name, step_count in entry_refs:
-        parts.append(f'//     {{ "{display_name}", "{pid}", {array_name}, {step_count} }},')
-    parts.append("// };")
-
-    return "\n".join(parts)
-
-
 # ============================================================================
 # Assignment
 # ============================================================================
@@ -330,9 +251,6 @@ async def assign_to_melody(built_id: str, firestore_melody_id: str) -> BuiltMelo
         assigned.append(firestore_melody_id)
         await db.update_assigned_melody_ids(built_id, assigned)
 
-    # Clear outdated flag on the melody being assigned
-    await _flag_melodies_outdated([firestore_melody_id], False)
-
     return await get_built_melody(built_id)
 
 
@@ -344,10 +262,6 @@ async def unassign_from_melody(built_id: str, firestore_melody_id: str) -> Built
 
     assigned = [mid for mid in row.get("assigned_melody_ids", []) if mid != firestore_melody_id]
     await db.update_assigned_melody_ids(built_id, assigned)
-
-    # Flag the melody as outdated since it no longer has an archetype
-    await _flag_melodies_outdated([firestore_melody_id], True)
-
     return await get_built_melody(built_id)
 
 
@@ -358,48 +272,3 @@ async def get_built_melody_for_firestore_id(firestore_melody_id: str) -> Optiona
         if firestore_melody_id in row.get("assigned_melody_ids", []):
             return _row_to_built_melody(row)
     return None
-
-
-# ============================================================================
-# Outdated Flag Helpers
-# ============================================================================
-
-async def _flag_melodies_outdated(melody_ids: List[str], outdated: bool) -> None:
-    """Set or clear the outdated_archetype flag on a list of Firestore melody IDs.
-
-    This updates both SQLite (melody_drafts) and Firestore (published melodies).
-    We import inline to avoid circular imports.
-    """
-    if not melody_ids:
-        return
-
-    try:
-        from melodies import database as melody_db
-        from shared.firebase import get_db as get_firestore
-    except ImportError:
-        logger.warning("Could not import melody/firebase modules — skipping outdated flag update")
-        return
-
-    firestore_db = get_firestore()
-
-    for melody_id in melody_ids:
-        try:
-            row = await melody_db.get_melody(melody_id)
-            if not row:
-                continue
-
-            data = row["data"]
-            info = dict(data.get("information", {}))
-            info["outdated_archetype"] = outdated
-            data["information"] = info
-
-            await melody_db.update_melody(melody_id, data)
-
-            # If published, also update Firestore
-            if row.get("status") == "published":
-                doc_ref = firestore_db.collection("melodies").document(melody_id)
-                doc_ref.update({"information.outdated_archetype": outdated})
-
-            logger.info(f"Set outdated_archetype={outdated} on melody {melody_id}")
-        except Exception as e:
-            logger.error(f"Failed to set outdated flag on melody {melody_id}: {e}")

backend/config.py

@@ -1,5 +1,5 @@
 from pydantic_settings import BaseSettings
-from typing import List, Dict, Any
+from typing import List
 import json
 
 
@@ -20,16 +20,14 @@ class Settings(BaseSettings):
     mqtt_admin_password: str = ""
     mqtt_secret: str = "change-me-in-production"
     mosquitto_password_file: str = "/etc/mosquitto/passwd"
-    mqtt_client_id: str = "bellsystems-admin-panel"
 
-    # SQLite (local application database)
-    sqlite_db_path: str = "./data/database.db"
+    # SQLite (MQTT data storage)
+    sqlite_db_path: str = "./mqtt_data.db"
     mqtt_data_retention_days: int = 90
 
     # Local file storage
     built_melodies_storage_path: str = "./storage/built_melodies"
     firmware_storage_path: str = "./storage/firmware"
-    flash_assets_storage_path: str = "./storage/flash_assets"
 
     # Email (Resend)
     resend_api_key: str = "re_placeholder_change_me"
@@ -39,30 +37,6 @@ class Settings(BaseSettings):
     backend_cors_origins: str = '["http://localhost:5173"]'
     debug: bool = True
 
-    # Nextcloud WebDAV
-    nextcloud_url: str = ""
-    nextcloud_username: str = ""       # WebDAV login & URL path username
-    nextcloud_password: str = ""       # Use an app password for better security
-    nextcloud_dav_user: str = ""       # Override URL path username if different from login
-    nextcloud_base_path: str = "BellSystems"
-
-    # IMAP/SMTP Email
-    imap_host: str = ""
-    imap_port: int = 993
-    imap_username: str = ""
-    imap_password: str = ""
-    imap_use_ssl: bool = True
-    smtp_host: str = ""
-    smtp_port: int = 587
-    smtp_username: str = ""
-    smtp_password: str = ""
-    smtp_use_tls: bool = True
-    email_sync_interval_minutes: int = 15
-    # Multi-mailbox config (JSON array). If empty, legacy single-account IMAP/SMTP is used.
-    # Example item:
-    # {"key":"sales","label":"Sales","email":"sales@bellsystems.gr","imap_host":"...","imap_username":"...","imap_password":"...","smtp_host":"...","smtp_username":"...","smtp_password":"...","sync_inbound":true,"allow_send":true}
-    mail_accounts_json: str = "[]"
-
     # Auto-deploy (Gitea webhook)
     deploy_secret: str = ""
     deploy_project_path: str = "/app"
@@ -71,14 +45,6 @@ class Settings(BaseSettings):
     def cors_origins(self) -> List[str]:
         return json.loads(self.backend_cors_origins)
 
-    @property
-    def mail_accounts(self) -> List[Dict[str, Any]]:
-        try:
-            raw = json.loads(self.mail_accounts_json or "[]")
-            return raw if isinstance(raw, list) else []
-        except Exception:
-            return []
-
     model_config = {"env_file": ".env", "extra": "ignore"}
 
 

backend/crm/comms_router.py

@@ -1,417 +0,0 @@
-import base64
-import json
-from fastapi import APIRouter, Depends, HTTPException, Query, Form, File, UploadFile
-from pydantic import BaseModel
-from typing import List, Optional
-
-from auth.models import TokenPayload
-from auth.dependencies import require_permission
-from config import settings
-from crm.models import CommCreate, CommUpdate, CommInDB, CommListResponse, MediaCreate, MediaDirection
-from crm import service
-from crm import email_sync
-from crm.mail_accounts import get_mail_accounts
-
-router = APIRouter(prefix="/api/crm/comms", tags=["crm-comms"])
-
-
-class EmailSendResponse(BaseModel):
-    entry: dict
-
-
-class EmailSyncResponse(BaseModel):
-    new_count: int
-
-
-class MailListResponse(BaseModel):
-    entries: list
-    total: int
-
-
-@router.get("/all", response_model=CommListResponse)
-async def list_all_comms(
-    type: Optional[str] = Query(None),
-    direction: Optional[str] = Query(None),
-    limit: int = Query(200, le=500),
-    _user: TokenPayload = Depends(require_permission("crm", "view")),
-):
-    entries = await service.list_all_comms(type=type, direction=direction, limit=limit)
-    return CommListResponse(entries=entries, total=len(entries))
-
-
-@router.get("", response_model=CommListResponse)
-async def list_comms(
-    customer_id: str = Query(...),
-    type: Optional[str] = Query(None),
-    direction: Optional[str] = Query(None),
-    _user: TokenPayload = Depends(require_permission("crm", "view")),
-):
-    entries = await service.list_comms(customer_id=customer_id, type=type, direction=direction)
-    return CommListResponse(entries=entries, total=len(entries))
-
-
-@router.post("", response_model=CommInDB, status_code=201)
-async def create_comm(
-    body: CommCreate,
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    return await service.create_comm(body)
-
-
-@router.get("/email/all", response_model=MailListResponse)
-async def list_all_emails(
-    direction: Optional[str] = Query(None),
-    customers_only: bool = Query(False),
-    mailbox: Optional[str] = Query(None, description="sales|support|both|all or account key"),
-    limit: int = Query(500, le=1000),
-    _user: TokenPayload = Depends(require_permission("crm", "view")),
-):
-    """Return all email comms (all senders + unmatched), for the Mail page."""
-    selected_accounts = None
-    if mailbox and mailbox not in {"all", "both"}:
-      if mailbox == "sales":
-          selected_accounts = ["sales"]
-      elif mailbox == "support":
-          selected_accounts = ["support"]
-      else:
-          selected_accounts = [mailbox]
-    entries = await service.list_all_emails(
-        direction=direction,
-        customers_only=customers_only,
-        mail_accounts=selected_accounts,
-        limit=limit,
-    )
-    return MailListResponse(entries=entries, total=len(entries))
-
-
-@router.get("/email/accounts")
-async def list_mail_accounts(
-    _user: TokenPayload = Depends(require_permission("crm", "view")),
-):
-    accounts = get_mail_accounts()
-    return {
-        "accounts": [
-            {
-                "key": a["key"],
-                "label": a["label"],
-                "email": a["email"],
-                "sync_inbound": bool(a.get("sync_inbound")),
-                "allow_send": bool(a.get("allow_send")),
-            }
-            for a in accounts
-        ]
-    }
-
-
-@router.get("/email/check")
-async def check_new_emails(
-    _user: TokenPayload = Depends(require_permission("crm", "view")),
-):
-    """Lightweight check: returns how many emails are on the server vs. stored locally."""
-    return await email_sync.check_new_emails()
-
-
-# Email endpoints — must be before /{comm_id} wildcard routes
-@router.post("/email/send", response_model=EmailSendResponse)
-async def send_email_endpoint(
-    customer_id: Optional[str] = Form(None),
-    from_account: Optional[str] = Form(None),
-    to: str = Form(...),
-    subject: str = Form(...),
-    body: str = Form(...),
-    body_html: str = Form(""),
-    cc: str = Form("[]"),  # JSON-encoded list of strings
-    files: List[UploadFile] = File(default=[]),
-    user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    if not get_mail_accounts():
-        raise HTTPException(status_code=503, detail="SMTP not configured")
-    try:
-        cc_list: List[str] = json.loads(cc) if cc else []
-    except Exception:
-        cc_list = []
-
-    # Read all uploaded files into memory
-    file_attachments = []
-    for f in files:
-        content = await f.read()
-        mime_type = f.content_type or "application/octet-stream"
-        file_attachments.append((f.filename, content, mime_type))
-
-    from crm.email_sync import send_email
-    try:
-        entry = await send_email(
-            customer_id=customer_id or None,
-            from_account=from_account,
-            to=to,
-            subject=subject,
-            body=body,
-            body_html=body_html,
-            cc=cc_list,
-            sent_by=user.name or user.sub,
-            file_attachments=file_attachments if file_attachments else None,
-        )
-    except RuntimeError as e:
-        raise HTTPException(status_code=400, detail=str(e))
-    return EmailSendResponse(entry=entry)
-
-
-@router.post("/email/sync", response_model=EmailSyncResponse)
-async def sync_email_endpoint(
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    if not get_mail_accounts():
-        raise HTTPException(status_code=503, detail="IMAP not configured")
-    from crm.email_sync import sync_emails
-    new_count = await sync_emails()
-    return EmailSyncResponse(new_count=new_count)
-
-
-class SaveInlineRequest(BaseModel):
-    data_uri: str
-    filename: str
-    subfolder: str = "received_media"
-    mime_type: Optional[str] = None
-
-
-async def _resolve_customer_folder(customer_id: str) -> str:
-    """Return the Nextcloud folder_id for a customer (falls back to customer_id)."""
-    from shared.firebase import get_db as get_firestore
-    firestore_db = get_firestore()
-    doc = firestore_db.collection("crm_customers").document(customer_id).get()
-    if not doc.exists:
-        raise HTTPException(status_code=404, detail="Customer not found")
-    data = doc.to_dict()
-    return data.get("folder_id") or customer_id
-
-
-async def _upload_to_nc(folder_id: str, subfolder: str, filename: str,
-                        content: bytes, mime_type: str, customer_id: str,
-                        uploaded_by: str, tags: list[str]) -> dict:
-    from crm import nextcloud
-    target_folder = f"customers/{folder_id}/{subfolder}"
-    file_path = f"{target_folder}/{filename}"
-    await nextcloud.ensure_folder(target_folder)
-    await nextcloud.upload_file(file_path, content, mime_type)
-    media = await service.create_media(MediaCreate(
-        customer_id=customer_id,
-        filename=filename,
-        nextcloud_path=file_path,
-        mime_type=mime_type,
-        direction=MediaDirection.received,
-        tags=tags,
-        uploaded_by=uploaded_by,
-    ))
-    return {"ok": True, "media_id": media.id, "nextcloud_path": file_path}
-
-
-@router.post("/email/{comm_id}/save-inline")
-async def save_email_inline_image(
-    comm_id: str,
-    body: SaveInlineRequest,
-    user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    """Save an inline image (data-URI from email HTML body) to Nextcloud."""
-    comm = await service.get_comm(comm_id)
-    customer_id = comm.customer_id
-    if not customer_id:
-        raise HTTPException(status_code=400, detail="This email is not linked to a customer")
-
-    folder_id = await _resolve_customer_folder(customer_id)
-
-    # Parse data URI
-    data_uri = body.data_uri
-    mime_type = body.mime_type or "image/png"
-    if "," in data_uri:
-        header, encoded = data_uri.split(",", 1)
-        try:
-            mime_type = header.split(":")[1].split(";")[0]
-        except Exception:
-            pass
-    else:
-        encoded = data_uri
-    try:
-        content = base64.b64decode(encoded)
-    except Exception:
-        raise HTTPException(status_code=400, detail="Invalid base64 data")
-
-    return await _upload_to_nc(
-        folder_id, body.subfolder, body.filename,
-        content, mime_type, customer_id,
-        user.name or user.sub, ["email-inline-image"],
-    )
-
-
-@router.post("/email/{comm_id}/save-attachment/{attachment_index}")
-async def save_email_attachment(
-    comm_id: str,
-    attachment_index: int,
-    filename: str = Form(...),
-    subfolder: str = Form("received_media"),
-    user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    """
-    Re-fetch a specific attachment from IMAP (by index in the email's attachment list)
-    and save it to the customer's Nextcloud media folder.
-    """
-    import asyncio
-    comm = await service.get_comm(comm_id)
-    customer_id = comm.customer_id
-    if not customer_id:
-        raise HTTPException(status_code=400, detail="This email is not linked to a customer")
-
-    ext_message_id = comm.ext_message_id
-    if not ext_message_id:
-        raise HTTPException(status_code=400, detail="No message ID stored for this email")
-
-    attachments_meta = comm.attachments or []
-    if attachment_index < 0 or attachment_index >= len(attachments_meta):
-        raise HTTPException(status_code=400, detail="Attachment index out of range")
-
-    att_meta = attachments_meta[attachment_index]
-    mime_type = att_meta.content_type or "application/octet-stream"
-    from crm.mail_accounts import account_by_key, account_by_email
-    account = account_by_key(comm.mail_account) or account_by_email(comm.from_addr)
-    if not account:
-        raise HTTPException(status_code=400, detail="Email account config not found for this message")
-
-    # Re-fetch from IMAP in executor
-    def _fetch_attachment():
-        import imaplib, email as _email
-        if account.get("imap_use_ssl"):
-            imap = imaplib.IMAP4_SSL(account["imap_host"], int(account["imap_port"]))
-        else:
-            imap = imaplib.IMAP4(account["imap_host"], int(account["imap_port"]))
-        imap.login(account["imap_username"], account["imap_password"])
-        imap.select(account.get("imap_inbox", "INBOX"))
-
-        # Search by Message-ID header
-        _, data = imap.search(None, f'HEADER Message-ID "{ext_message_id}"')
-        uids = data[0].split() if data[0] else []
-        if not uids:
-            raise ValueError(f"Message not found on IMAP server: {ext_message_id}")
-
-        _, msg_data = imap.fetch(uids[0], "(RFC822)")
-        raw = msg_data[0][1]
-        msg = _email.message_from_bytes(raw)
-        imap.logout()
-
-        # Walk attachments in order — find the one at attachment_index
-        found_idx = 0
-        for part in msg.walk():
-            cd = str(part.get("Content-Disposition", ""))
-            if "attachment" not in cd:
-                continue
-            if found_idx == attachment_index:
-                payload = part.get_payload(decode=True)
-                if payload is None:
-                    raise ValueError("Attachment payload is empty")
-                return payload
-            found_idx += 1
-
-        raise ValueError(f"Attachment index {attachment_index} not found in message")
-
-    loop = asyncio.get_event_loop()
-    try:
-        content = await loop.run_in_executor(None, _fetch_attachment)
-    except ValueError as e:
-        raise HTTPException(status_code=404, detail=str(e))
-    except Exception as e:
-        raise HTTPException(status_code=502, detail=f"IMAP fetch failed: {e}")
-
-    folder_id = await _resolve_customer_folder(customer_id)
-    return await _upload_to_nc(
-        folder_id, subfolder, filename,
-        content, mime_type, customer_id,
-        user.name or user.sub, ["email-attachment"],
-    )
-
-
-class BulkDeleteRequest(BaseModel):
-    ids: List[str]
-
-
-class ToggleImportantRequest(BaseModel):
-    important: bool
-
-
-class ToggleReadRequest(BaseModel):
-    read: bool
-
-
-@router.post("/bulk-delete", status_code=200)
-async def bulk_delete_comms(
-    body: BulkDeleteRequest,
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    # Try remote IMAP delete for email rows first (best-effort), then local delete.
-    for comm_id in body.ids:
-        try:
-            comm = await service.get_comm(comm_id)
-            if comm.type == "email" and comm.ext_message_id:
-                await email_sync.delete_remote_email(
-                    comm.ext_message_id,
-                    comm.mail_account,
-                    comm.from_addr,
-                )
-        except Exception:
-            # Keep delete resilient; local delete still proceeds.
-            pass
-    count = await service.delete_comms_bulk(body.ids)
-    return {"deleted": count}
-
-
-@router.patch("/{comm_id}/important", response_model=CommInDB)
-async def set_comm_important(
-    comm_id: str,
-    body: ToggleImportantRequest,
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    return await service.set_comm_important(comm_id, body.important)
-
-
-@router.patch("/{comm_id}/read", response_model=CommInDB)
-async def set_comm_read(
-    comm_id: str,
-    body: ToggleReadRequest,
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    try:
-        comm = await service.get_comm(comm_id)
-        if comm.type == "email" and comm.ext_message_id:
-            await email_sync.set_remote_read(
-                comm.ext_message_id,
-                comm.mail_account,
-                comm.from_addr,
-                body.read,
-            )
-    except Exception:
-        pass
-    return await service.set_comm_read(comm_id, body.read)
-
-
-@router.put("/{comm_id}", response_model=CommInDB)
-async def update_comm(
-    comm_id: str,
-    body: CommUpdate,
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    return await service.update_comm(comm_id, body)
-
-
-@router.delete("/{comm_id}", status_code=204)
-async def delete_comm(
-    comm_id: str,
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    try:
-        comm = await service.get_comm(comm_id)
-        if comm.type == "email" and comm.ext_message_id:
-            await email_sync.delete_remote_email(
-                comm.ext_message_id,
-                comm.mail_account,
-                comm.from_addr,
-            )
-    except Exception:
-        pass
-    await service.delete_comm(comm_id)

backend/crm/customers_router.py

@@ -1,245 +0,0 @@
-import asyncio
-import logging
-from fastapi import APIRouter, Depends, Query, BackgroundTasks, Body
-from typing import Optional
-
-from auth.models import TokenPayload
-from auth.dependencies import require_permission
-from crm.models import CustomerCreate, CustomerUpdate, CustomerInDB, CustomerListResponse, TransactionEntry
-from crm import service, nextcloud
-from config import settings
-
-router = APIRouter(prefix="/api/crm/customers", tags=["crm-customers"])
-logger = logging.getLogger(__name__)
-
-
-@router.get("", response_model=CustomerListResponse)
-async def list_customers(
-    search: Optional[str] = Query(None),
-    tag: Optional[str] = Query(None),
-    sort: Optional[str] = Query(None),
-    _user: TokenPayload = Depends(require_permission("crm", "view")),
-):
-    customers = service.list_customers(search=search, tag=tag, sort=sort)
-    if sort == "latest_comm":
-        customers = await service.list_customers_sorted_by_latest_comm(customers)
-    return CustomerListResponse(customers=customers, total=len(customers))
-
-
-@router.get("/tags", response_model=list[str])
-def list_tags(
-    _user: TokenPayload = Depends(require_permission("crm", "view")),
-):
-    return service.list_all_tags()
-
-
-@router.get("/{customer_id}", response_model=CustomerInDB)
-def get_customer(
-    customer_id: str,
-    _user: TokenPayload = Depends(require_permission("crm", "view")),
-):
-    return service.get_customer(customer_id)
-
-
-@router.post("", response_model=CustomerInDB, status_code=201)
-async def create_customer(
-    body: CustomerCreate,
-    background_tasks: BackgroundTasks,
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    customer = service.create_customer(body)
-    if settings.nextcloud_url:
-        background_tasks.add_task(_init_nextcloud_folder, customer)
-    return customer
-
-
-async def _init_nextcloud_folder(customer) -> None:
-    try:
-        nc_path = service.get_customer_nc_path(customer)
-        base = f"customers/{nc_path}"
-        for sub in ("media", "documents", "sent", "received"):
-            await nextcloud.ensure_folder(f"{base}/{sub}")
-        await nextcloud.write_info_file(base, customer.name, customer.id)
-    except Exception as e:
-        logger.warning("Nextcloud folder init failed for customer %s: %s", customer.id, e)
-
-
-@router.put("/{customer_id}", response_model=CustomerInDB)
-def update_customer(
-    customer_id: str,
-    body: CustomerUpdate,
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    return service.update_customer(customer_id, body)
-
-
-@router.delete("/{customer_id}", status_code=204)
-async def delete_customer(
-    customer_id: str,
-    wipe_comms: bool = Query(False),
-    wipe_files: bool = Query(False),
-    wipe_nextcloud: bool = Query(False),
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    customer = service.delete_customer(customer_id)
-    nc_path = service.get_customer_nc_path(customer)
-
-    if wipe_comms or wipe_nextcloud:
-        await service.delete_customer_comms(customer_id)
-
-    if wipe_files or wipe_nextcloud:
-        await service.delete_customer_media_entries(customer_id)
-
-    if settings.nextcloud_url:
-        folder = f"customers/{nc_path}"
-        if wipe_nextcloud:
-            try:
-                await nextcloud.delete_file(folder)
-            except Exception as e:
-                logger.warning("Could not delete NC folder for customer %s: %s", customer_id, e)
-        elif wipe_files:
-            stale_folder = f"customers/STALE_{nc_path}"
-            try:
-                await nextcloud.rename_folder(folder, stale_folder)
-            except Exception as e:
-                logger.warning("Could not rename NC folder for customer %s: %s", customer_id, e)
-
-
-@router.get("/{customer_id}/last-comm-direction")
-async def get_last_comm_direction(
-    customer_id: str,
-    _user: TokenPayload = Depends(require_permission("crm", "view")),
-):
-    result = await service.get_last_comm_direction(customer_id)
-    return result
-
-
-# ── Relationship Status ───────────────────────────────────────────────────────
-
-@router.patch("/{customer_id}/relationship-status", response_model=CustomerInDB)
-def update_relationship_status(
-    customer_id: str,
-    body: dict = Body(...),
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    return service.update_relationship_status(customer_id, body.get("status", ""))
-
-
-# ── Technical Issues ──────────────────────────────────────────────────────────
-
-@router.post("/{customer_id}/technical-issues", response_model=CustomerInDB)
-def add_technical_issue(
-    customer_id: str,
-    body: dict = Body(...),
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    return service.add_technical_issue(
-        customer_id,
-        note=body.get("note", ""),
-        opened_by=body.get("opened_by", ""),
-        date=body.get("date"),
-    )
-
-
-@router.patch("/{customer_id}/technical-issues/{index}/resolve", response_model=CustomerInDB)
-def resolve_technical_issue(
-    customer_id: str,
-    index: int,
-    body: dict = Body(...),
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    return service.resolve_technical_issue(customer_id, index, body.get("resolved_by", ""))
-
-
-@router.patch("/{customer_id}/technical-issues/{index}", response_model=CustomerInDB)
-def edit_technical_issue(
-    customer_id: str,
-    index: int,
-    body: dict = Body(...),
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    return service.edit_technical_issue(customer_id, index, body.get("note", ""), body.get("opened_date"))
-
-
-@router.delete("/{customer_id}/technical-issues/{index}", response_model=CustomerInDB)
-def delete_technical_issue(
-    customer_id: str,
-    index: int,
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    return service.delete_technical_issue(customer_id, index)
-
-
-# ── Install Support ───────────────────────────────────────────────────────────
-
-@router.post("/{customer_id}/install-support", response_model=CustomerInDB)
-def add_install_support(
-    customer_id: str,
-    body: dict = Body(...),
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    return service.add_install_support(
-        customer_id,
-        note=body.get("note", ""),
-        opened_by=body.get("opened_by", ""),
-        date=body.get("date"),
-    )
-
-
-@router.patch("/{customer_id}/install-support/{index}/resolve", response_model=CustomerInDB)
-def resolve_install_support(
-    customer_id: str,
-    index: int,
-    body: dict = Body(...),
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    return service.resolve_install_support(customer_id, index, body.get("resolved_by", ""))
-
-
-@router.patch("/{customer_id}/install-support/{index}", response_model=CustomerInDB)
-def edit_install_support(
-    customer_id: str,
-    index: int,
-    body: dict = Body(...),
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    return service.edit_install_support(customer_id, index, body.get("note", ""), body.get("opened_date"))
-
-
-@router.delete("/{customer_id}/install-support/{index}", response_model=CustomerInDB)
-def delete_install_support(
-    customer_id: str,
-    index: int,
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    return service.delete_install_support(customer_id, index)
-
-
-# ── Transactions ──────────────────────────────────────────────────────────────
-
-@router.post("/{customer_id}/transactions", response_model=CustomerInDB)
-def add_transaction(
-    customer_id: str,
-    body: TransactionEntry,
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    return service.add_transaction(customer_id, body)
-
-
-@router.patch("/{customer_id}/transactions/{index}", response_model=CustomerInDB)
-def update_transaction(
-    customer_id: str,
-    index: int,
-    body: TransactionEntry,
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    return service.update_transaction(customer_id, index, body)
-
-
-@router.delete("/{customer_id}/transactions/{index}", response_model=CustomerInDB)
-def delete_transaction(
-    customer_id: str,
-    index: int,
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    return service.delete_transaction(customer_id, index)

backend/crm/email_sync.py

@@ -1,837 +0,0 @@
-"""
-IMAP email sync and SMTP email send for CRM.
-Uses only stdlib imaplib/smtplib — no extra dependencies.
-Sync is run in an executor to avoid blocking the event loop.
-"""
-import asyncio
-import base64
-import email
-import email.header
-import email.utils
-import html.parser
-import imaplib
-import json
-import logging
-import re
-import smtplib
-import uuid
-from datetime import datetime, timezone
-from email.mime.base import MIMEBase
-from email.mime.multipart import MIMEMultipart
-from email.mime.text import MIMEText
-from email import encoders
-from typing import List, Optional, Tuple
-
-from config import settings
-import database as mqtt_db
-from crm.mail_accounts import get_mail_accounts, account_by_key, account_by_email
-
-logger = logging.getLogger("crm.email_sync")
-
-
-# ---------------------------------------------------------------------------
-# Helpers
-# ---------------------------------------------------------------------------
-
-def _decode_header(raw: str) -> str:
-    """Decode an RFC2047-encoded email header value."""
-    if not raw:
-        return ""
-    parts = email.header.decode_header(raw)
-    decoded = []
-    for part, enc in parts:
-        if isinstance(part, bytes):
-            decoded.append(part.decode(enc or "utf-8", errors="replace"))
-        else:
-            decoded.append(part)
-    return " ".join(decoded)
-
-
-class _HTMLStripper(html.parser.HTMLParser):
-    def __init__(self):
-        super().__init__()
-        self._text = []
-
-    def handle_data(self, data):
-        self._text.append(data)
-
-    def get_text(self):
-        return " ".join(self._text)
-
-
-def _strip_html(html_str: str) -> str:
-    s = _HTMLStripper()
-    s.feed(html_str)
-    return s.get_text()
-
-
-def _extract_inline_data_images(html_body: str) -> tuple[str, list[tuple[str, bytes, str]]]:
-    """Replace data-URI images in HTML with cid: references and return inline parts.
-    Returns: (new_html, [(cid, image_bytes, mime_type), ...])
-    """
-    if not html_body:
-        return "", []
-
-    inline_parts: list[tuple[str, bytes, str]] = []
-    seen: dict[str, str] = {}  # data-uri -> cid
-
-    src_pattern = re.compile(r"""src=(['"])(data:image/[^'"]+)\1""", re.IGNORECASE)
-    data_pattern = re.compile(r"^data:(image/[a-zA-Z0-9.+-]+);base64,(.+)$", re.IGNORECASE | re.DOTALL)
-
-    def _replace(match: re.Match) -> str:
-        quote = match.group(1)
-        data_uri = match.group(2)
-
-        if data_uri in seen:
-            cid = seen[data_uri]
-            return f"src={quote}cid:{cid}{quote}"
-
-        parsed = data_pattern.match(data_uri)
-        if not parsed:
-            return match.group(0)
-
-        mime_type = parsed.group(1).lower()
-        b64_data = parsed.group(2).strip()
-        try:
-            payload = base64.b64decode(b64_data, validate=False)
-        except Exception:
-            return match.group(0)
-
-        cid = f"inline-{uuid.uuid4().hex}"
-        seen[data_uri] = cid
-        inline_parts.append((cid, payload, mime_type))
-        return f"src={quote}cid:{cid}{quote}"
-
-    return src_pattern.sub(_replace, html_body), inline_parts
-
-
-def _load_customer_email_map() -> dict[str, str]:
-    """Build a lookup of customer email -> customer_id from Firestore."""
-    from shared.firebase import get_db as get_firestore
-    firestore_db = get_firestore()
-    addr_to_customer: dict[str, str] = {}
-    for doc in firestore_db.collection("crm_customers").stream():
-        data = doc.to_dict() or {}
-        for contact in (data.get("contacts") or []):
-            if contact.get("type") == "email" and contact.get("value"):
-                addr_to_customer[str(contact["value"]).strip().lower()] = doc.id
-    return addr_to_customer
-
-
-def _get_body(msg: email.message.Message) -> tuple[str, str]:
-    """Extract (plain_text, html_body) from an email message.
-    Inline images (cid: references) are substituted with data-URIs so they
-    render correctly in a sandboxed iframe without external requests.
-    """
-    import base64 as _b64
-    plain = None
-    html_body = None
-    # Map Content-ID → data-URI for inline images
-    cid_map: dict[str, str] = {}
-
-    if msg.is_multipart():
-        for part in msg.walk():
-            ct = part.get_content_type()
-            cd = str(part.get("Content-Disposition", ""))
-            cid = part.get("Content-ID", "").strip().strip("<>")
-
-            if "attachment" in cd:
-                continue
-
-            if ct == "text/plain" and plain is None:
-                raw = part.get_payload(decode=True)
-                charset = part.get_content_charset() or "utf-8"
-                plain = raw.decode(charset, errors="replace")
-            elif ct == "text/html" and html_body is None:
-                raw = part.get_payload(decode=True)
-                charset = part.get_content_charset() or "utf-8"
-                html_body = raw.decode(charset, errors="replace")
-            elif ct.startswith("image/") and cid:
-                raw = part.get_payload(decode=True)
-                if raw:
-                    b64 = _b64.b64encode(raw).decode("ascii")
-                    cid_map[cid] = f"data:{ct};base64,{b64}"
-    else:
-        ct = msg.get_content_type()
-        payload = msg.get_payload(decode=True)
-        charset = msg.get_content_charset() or "utf-8"
-        if payload:
-            text = payload.decode(charset, errors="replace")
-            if ct == "text/plain":
-                plain = text
-            elif ct == "text/html":
-                html_body = text
-
-    # Substitute cid: references with data-URIs
-    if html_body and cid_map:
-        for cid, data_uri in cid_map.items():
-            html_body = html_body.replace(f"cid:{cid}", data_uri)
-
-    plain_text = (plain or (html_body and _strip_html(html_body)) or "").strip()
-    return plain_text, (html_body or "").strip()
-
-
-def _get_attachments(msg: email.message.Message) -> list[dict]:
-    """Extract attachment info (filename, content_type, size) without storing content."""
-    attachments = []
-    if msg.is_multipart():
-        for part in msg.walk():
-            cd = str(part.get("Content-Disposition", ""))
-            if "attachment" in cd:
-                filename = part.get_filename() or "attachment"
-                filename = _decode_header(filename)
-                ct = part.get_content_type() or "application/octet-stream"
-                payload = part.get_payload(decode=True)
-                size = len(payload) if payload else 0
-                attachments.append({"filename": filename, "content_type": ct, "size": size})
-    return attachments
-
-
-# ---------------------------------------------------------------------------
-# IMAP sync (synchronous — called via run_in_executor)
-# ---------------------------------------------------------------------------
-
-def _sync_account_emails_sync(account: dict) -> tuple[list[dict], bool]:
-    if not account.get("imap_host") or not account.get("imap_username") or not account.get("imap_password"):
-        return [], False
-    if account.get("imap_use_ssl"):
-        imap = imaplib.IMAP4_SSL(account["imap_host"], int(account["imap_port"]))
-    else:
-        imap = imaplib.IMAP4(account["imap_host"], int(account["imap_port"]))
-    imap.login(account["imap_username"], account["imap_password"])
-    # readonly=True prevents marking messages as \Seen while syncing.
-    imap.select(account.get("imap_inbox", "INBOX"), readonly=True)
-    _, data = imap.search(None, "ALL")
-    uids = data[0].split() if data[0] else []
-
-    results = []
-    complete = True
-    for uid in uids:
-        try:
-            _, msg_data = imap.fetch(uid, "(FLAGS RFC822)")
-            meta = msg_data[0][0] if msg_data and isinstance(msg_data[0], tuple) else b""
-            raw = msg_data[0][1]
-            msg = email.message_from_bytes(raw)
-            message_id = msg.get("Message-ID", "").strip()
-            from_addr = email.utils.parseaddr(msg.get("From", ""))[1]
-            to_addrs_raw = msg.get("To", "")
-            to_addrs = [a for _, a in email.utils.getaddresses([to_addrs_raw])]
-            subject = _decode_header(msg.get("Subject", ""))
-            date_str = msg.get("Date", "")
-            try:
-                occurred_at = email.utils.parsedate_to_datetime(date_str).isoformat()
-            except Exception:
-                occurred_at = datetime.now(timezone.utc).isoformat()
-            is_read = b"\\Seen" in (meta or b"")
-            try:
-                body, body_html = _get_body(msg)
-            except Exception:
-                body, body_html = "", ""
-            try:
-                file_attachments = _get_attachments(msg)
-            except Exception:
-                file_attachments = []
-            results.append({
-                "mail_account": account["key"],
-                "message_id": message_id,
-                "from_addr": from_addr,
-                "to_addrs": to_addrs,
-                "subject": subject,
-                "body": body,
-                "body_html": body_html,
-                "attachments": file_attachments,
-                "occurred_at": occurred_at,
-                "is_read": bool(is_read),
-            })
-        except Exception as e:
-            complete = False
-            logger.warning(f"[EMAIL SYNC] Failed to parse message uid={uid} account={account['key']}: {e}")
-    imap.logout()
-    return results, complete
-
-
-def _sync_emails_sync() -> tuple[list[dict], bool]:
-    all_msgs: list[dict] = []
-    all_complete = True
-    # Deduplicate by physical inbox source. Aliases often share the same mailbox.
-    seen_sources: set[tuple] = set()
-    for acc in get_mail_accounts():
-        if not acc.get("sync_inbound"):
-            continue
-        source = (
-            (acc.get("imap_host") or "").lower(),
-            int(acc.get("imap_port") or 0),
-            (acc.get("imap_username") or "").lower(),
-            (acc.get("imap_inbox") or "INBOX").upper(),
-        )
-        if source in seen_sources:
-            continue
-        seen_sources.add(source)
-        msgs, complete = _sync_account_emails_sync(acc)
-        all_msgs.extend(msgs)
-        all_complete = all_complete and complete
-    return all_msgs, all_complete
-
-
-async def sync_emails() -> int:
-    """
-    Pull emails from IMAP, match against CRM customers, store new ones.
-    Returns count of new entries created.
-    """
-    if not get_mail_accounts():
-        return 0
-
-    loop = asyncio.get_event_loop()
-    try:
-        messages, fetch_complete = await loop.run_in_executor(None, _sync_emails_sync)
-    except Exception as e:
-        logger.error(f"[EMAIL SYNC] IMAP connect/fetch failed: {e}")
-        raise
-
-    db = await mqtt_db.get_db()
-
-    # Load all customer email contacts into a flat lookup: email -> customer_id
-    addr_to_customer = _load_customer_email_map()
-
-    # Load already-synced message-ids from DB
-    rows = await db.execute_fetchall(
-        "SELECT id, ext_message_id, COALESCE(mail_account, '') as mail_account, direction, is_read, customer_id "
-        "FROM crm_comms_log WHERE type='email' AND ext_message_id IS NOT NULL"
-    )
-    known_map = {
-        (r[1], r[2] or ""): {
-            "id": r[0],
-            "direction": r[3],
-            "is_read": int(r[4] or 0),
-            "customer_id": r[5],
-        }
-        for r in rows
-    }
-
-    new_count = 0
-    now = datetime.now(timezone.utc).isoformat()
-    server_ids_by_account: dict[str, set[str]] = {}
-    # Global inbound IDs from server snapshot, used to avoid account-classification delete oscillation.
-    inbound_server_ids: set[str] = set()
-    accounts = get_mail_accounts()
-    accounts_by_email = {a["email"].lower(): a for a in accounts}
-    # Initialize tracked inbound accounts even if inbox is empty.
-    for a in accounts:
-        if a.get("sync_inbound"):
-            server_ids_by_account[a["key"]] = set()
-
-    for msg in messages:
-        mid = msg["message_id"]
-        fetch_account_key = (msg.get("mail_account") or "").strip().lower()
-        from_addr = msg["from_addr"].lower()
-        to_addrs = [a.lower() for a in msg["to_addrs"]]
-
-        sender_acc = accounts_by_email.get(from_addr)
-        if sender_acc:
-            direction = "outbound"
-            resolved_account_key = sender_acc["key"]
-            customer_addrs = to_addrs
-        else:
-            direction = "inbound"
-            target_acc = None
-            for addr in to_addrs:
-                if addr in accounts_by_email:
-                    target_acc = accounts_by_email[addr]
-                    break
-            resolved_account_key = (target_acc["key"] if target_acc else fetch_account_key)
-            customer_addrs = [from_addr]
-            if target_acc and not target_acc.get("sync_inbound"):
-                # Ignore inbound for non-synced aliases (e.g. info/news).
-                continue
-
-        if direction == "inbound" and mid and resolved_account_key in server_ids_by_account:
-            server_ids_by_account[resolved_account_key].add(mid)
-            inbound_server_ids.add(mid)
-        # Find matching customer (may be None - we still store the email)
-        customer_id = None
-        for addr in customer_addrs:
-            if addr in addr_to_customer:
-                customer_id = addr_to_customer[addr]
-                break
-
-        if mid and (mid, resolved_account_key) in known_map:
-            existing = known_map[(mid, resolved_account_key)]
-            # Backfill customer linkage for rows created without customer_id.
-            if customer_id and not existing.get("customer_id"):
-                await db.execute(
-                    "UPDATE crm_comms_log SET customer_id=? WHERE id=?",
-                    (customer_id, existing["id"]),
-                )
-            # Existing inbound message: sync read/unread state from server.
-            if direction == "inbound":
-                server_read = 1 if msg.get("is_read") else 0
-                await db.execute(
-                    "UPDATE crm_comms_log SET is_read=? "
-                    "WHERE type='email' AND direction='inbound' AND ext_message_id=? AND mail_account=?",
-                    (server_read, mid, resolved_account_key),
-                )
-            continue  # already stored
-
-        attachments_json = json.dumps(msg.get("attachments") or [])
-        to_addrs_json = json.dumps(to_addrs)
-
-        entry_id = str(uuid.uuid4())
-        await db.execute(
-            """INSERT INTO crm_comms_log
-               (id, customer_id, type, mail_account, direction, subject, body, body_html, attachments,
-                ext_message_id, from_addr, to_addrs, logged_by, occurred_at, created_at, is_read)
-               VALUES (?, ?, 'email', ?, ?, ?, ?, ?, ?, ?, ?, ?, 'system', ?, ?, ?)""",
-            (entry_id, customer_id, resolved_account_key, direction, msg["subject"], msg["body"],
-             msg.get("body_html", ""), attachments_json,
-             mid, from_addr, to_addrs_json, msg["occurred_at"], now, 1 if msg.get("is_read") else 0),
-        )
-        new_count += 1
-
-    # Mirror remote deletes based on global inbound message-id snapshot.
-    # To avoid transient IMAP inconsistency causing add/remove oscillation,
-    # require two consecutive "missing" syncs before local deletion.
-    sync_keys = [a["key"] for a in accounts if a.get("sync_inbound")]
-    if sync_keys and fetch_complete:
-        placeholders = ",".join("?" for _ in sync_keys)
-        local_rows = await db.execute_fetchall(
-            f"SELECT id, ext_message_id, mail_account FROM crm_comms_log "
-            f"WHERE type='email' AND direction='inbound' AND mail_account IN ({placeholders}) "
-            "AND ext_message_id IS NOT NULL",
-            sync_keys,
-        )
-        to_delete: list[str] = []
-        for row in local_rows:
-            row_id, ext_id, acc_key = row[0], row[1], row[2]
-            if not ext_id:
-                continue
-            state_key = f"missing_email::{acc_key}::{ext_id}"
-            if ext_id in inbound_server_ids:
-                await db.execute("DELETE FROM crm_sync_state WHERE key = ?", (state_key,))
-                continue
-            prev = await db.execute_fetchall("SELECT value FROM crm_sync_state WHERE key = ?", (state_key,))
-            prev_count = int(prev[0][0]) if prev and (prev[0][0] or "").isdigit() else 0
-            new_count = prev_count + 1
-            await db.execute(
-                "INSERT INTO crm_sync_state (key, value) VALUES (?, ?) "
-                "ON CONFLICT(key) DO UPDATE SET value=excluded.value",
-                (state_key, str(new_count)),
-            )
-            if new_count >= 2:
-                to_delete.append(row_id)
-                await db.execute("DELETE FROM crm_sync_state WHERE key = ?", (state_key,))
-        if to_delete:
-            del_ph = ",".join("?" for _ in to_delete)
-            await db.execute(f"DELETE FROM crm_comms_log WHERE id IN ({del_ph})", to_delete)
-
-    if new_count or server_ids_by_account:
-        await db.commit()
-
-    # Update last sync time
-    await db.execute(
-        "INSERT INTO crm_sync_state (key, value) VALUES ('last_email_sync', ?) "
-        "ON CONFLICT(key) DO UPDATE SET value=excluded.value",
-        (now,),
-    )
-    await db.commit()
-
-    logger.info(f"[EMAIL SYNC] Done — {new_count} new emails stored")
-    return new_count
-
-
-# ---------------------------------------------------------------------------
-# Lightweight new-mail check (synchronous — called via run_in_executor)
-# ---------------------------------------------------------------------------
-
-def _check_server_count_sync() -> int:
-    # Keep this for backward compatibility; no longer used by check_new_emails().
-    total = 0
-    seen_sources: set[tuple] = set()
-    for acc in get_mail_accounts():
-        if not acc.get("sync_inbound"):
-            continue
-        source = (
-            (acc.get("imap_host") or "").lower(),
-            int(acc.get("imap_port") or 0),
-            (acc.get("imap_username") or "").lower(),
-            (acc.get("imap_inbox") or "INBOX").upper(),
-        )
-        if source in seen_sources:
-            continue
-        seen_sources.add(source)
-        if acc.get("imap_use_ssl"):
-            imap = imaplib.IMAP4_SSL(acc["imap_host"], int(acc["imap_port"]))
-        else:
-            imap = imaplib.IMAP4(acc["imap_host"], int(acc["imap_port"]))
-        imap.login(acc["imap_username"], acc["imap_password"])
-        imap.select(acc.get("imap_inbox", "INBOX"), readonly=True)
-        _, data = imap.search(None, "ALL")
-        total += len(data[0].split()) if data[0] else 0
-        imap.logout()
-    return total
-
-
-async def check_new_emails() -> dict:
-    """
-    Compare server message count vs. locally stored count.
-    Returns {"new_count": int} — does NOT download or store anything.
-    """
-    if not get_mail_accounts():
-        return {"new_count": 0}
-
-    loop = asyncio.get_event_loop()
-    try:
-        # Reuse same account-resolution logic as sync to avoid false positives.
-        messages, _ = await loop.run_in_executor(None, _sync_emails_sync)
-    except Exception as e:
-        logger.warning(f"[EMAIL CHECK] IMAP check failed: {e}")
-        raise
-
-    accounts = get_mail_accounts()
-    accounts_by_email = {a["email"].lower(): a for a in accounts}
-    db = await mqtt_db.get_db()
-    rows = await db.execute_fetchall(
-        "SELECT ext_message_id, COALESCE(mail_account, '') as mail_account FROM crm_comms_log "
-        "WHERE type='email' AND ext_message_id IS NOT NULL"
-    )
-    known_ids = {(r[0], r[1] or "") for r in rows}
-
-    new_count = 0
-    for msg in messages:
-        mid = (msg.get("message_id") or "").strip()
-        if not mid:
-            continue
-        fetch_account_key = (msg.get("mail_account") or "").strip().lower()
-        from_addr = (msg.get("from_addr") or "").lower()
-        to_addrs = [(a or "").lower() for a in (msg.get("to_addrs") or [])]
-
-        sender_acc = accounts_by_email.get(from_addr)
-        if sender_acc:
-            # Outbound copy in mailbox; not part of "new inbound mail" banner.
-            continue
-
-        target_acc = None
-        for addr in to_addrs:
-            if addr in accounts_by_email:
-                target_acc = accounts_by_email[addr]
-                break
-        resolved_account_key = (target_acc["key"] if target_acc else fetch_account_key)
-        if target_acc and not target_acc.get("sync_inbound"):
-            continue
-        if (mid, resolved_account_key) not in known_ids:
-            new_count += 1
-
-    return {"new_count": new_count}
-
-
-# ---------------------------------------------------------------------------
-# SMTP send (synchronous — called via run_in_executor)
-# ---------------------------------------------------------------------------
-
-def _append_to_sent_sync(account: dict, raw_message: bytes) -> None:
-    """Best-effort append of sent MIME message to IMAP Sent folder."""
-    if not raw_message:
-        return
-    try:
-        if account.get("imap_use_ssl"):
-            imap = imaplib.IMAP4_SSL(account["imap_host"], int(account["imap_port"]))
-        else:
-            imap = imaplib.IMAP4(account["imap_host"], int(account["imap_port"]))
-        imap.login(account["imap_username"], account["imap_password"])
-
-        preferred = str(account.get("imap_sent") or "Sent").strip() or "Sent"
-        candidates = [preferred, "Sent", "INBOX.Sent", "Sent Items", "INBOX.Sent Items"]
-        seen = set()
-        ordered_candidates = []
-        for name in candidates:
-            key = name.lower()
-            if key not in seen:
-                seen.add(key)
-                ordered_candidates.append(name)
-
-        appended = False
-        for mailbox in ordered_candidates:
-            try:
-                status, _ = imap.append(mailbox, "\\Seen", None, raw_message)
-                if status == "OK":
-                    appended = True
-                    break
-            except Exception:
-                continue
-
-        if not appended:
-            logger.warning("[EMAIL SEND] Sent copy append failed for account=%s", account.get("key"))
-        imap.logout()
-    except Exception as e:
-        logger.warning("[EMAIL SEND] IMAP append to Sent failed for account=%s: %s", account.get("key"), e)
-
-
-def _send_email_sync(
-    account: dict,
-    to: str,
-    subject: str,
-    body: str,
-    body_html: str,
-    cc: List[str],
-    file_attachments: Optional[List[Tuple[str, bytes, str]]] = None,
-) -> str:
-    """Send via SMTP. Returns the Message-ID header.
-    file_attachments: list of (filename, content_bytes, mime_type)
-    """
-    html_with_cids, inline_images = _extract_inline_data_images(body_html or "")
-
-    # Build body tree:
-    # - with inline images: related(alternative(text/plain, text/html), image parts)
-    # - without inline images: alternative(text/plain, text/html)
-    if inline_images:
-        body_part = MIMEMultipart("related")
-        alt_part = MIMEMultipart("alternative")
-        alt_part.attach(MIMEText(body, "plain", "utf-8"))
-        if html_with_cids:
-            alt_part.attach(MIMEText(html_with_cids, "html", "utf-8"))
-        body_part.attach(alt_part)
-
-        for idx, (cid, content, mime_type) in enumerate(inline_images, start=1):
-            maintype, _, subtype = mime_type.partition("/")
-            img_part = MIMEBase(maintype or "image", subtype or "png")
-            img_part.set_payload(content)
-            encoders.encode_base64(img_part)
-            img_part.add_header("Content-ID", f"<{cid}>")
-            img_part.add_header("Content-Disposition", "inline", filename=f"inline-{idx}.{subtype or 'png'}")
-            body_part.attach(img_part)
-    else:
-        body_part = MIMEMultipart("alternative")
-        body_part.attach(MIMEText(body, "plain", "utf-8"))
-        if body_html:
-            body_part.attach(MIMEText(body_html, "html", "utf-8"))
-
-    # Wrap with mixed only when classic file attachments exist.
-    if file_attachments:
-        msg = MIMEMultipart("mixed")
-        msg.attach(body_part)
-    else:
-        msg = body_part
-
-    from_addr = account["email"]
-    msg["From"] = from_addr
-    msg["To"] = to
-    msg["Subject"] = subject
-    if cc:
-        msg["Cc"] = ", ".join(cc)
-
-    msg_id = f"<{uuid.uuid4()}@bellsystems>"
-    msg["Message-ID"] = msg_id
-
-    # Attach files
-    for filename, content, mime_type in (file_attachments or []):
-        maintype, _, subtype = mime_type.partition("/")
-        part = MIMEBase(maintype or "application", subtype or "octet-stream")
-        part.set_payload(content)
-        encoders.encode_base64(part)
-        part.add_header("Content-Disposition", "attachment", filename=filename)
-        msg.attach(part)
-
-    recipients = [to] + cc
-    raw_for_append = msg.as_bytes()
-    if account.get("smtp_use_tls"):
-        server = smtplib.SMTP(account["smtp_host"], int(account["smtp_port"]))
-        server.starttls()
-    else:
-        server = smtplib.SMTP_SSL(account["smtp_host"], int(account["smtp_port"]))
-
-    server.login(account["smtp_username"], account["smtp_password"])
-    server.sendmail(from_addr, recipients, msg.as_string())
-    server.quit()
-    _append_to_sent_sync(account, raw_for_append)
-
-    return msg_id
-
-
-async def send_email(
-    customer_id: str | None,
-    from_account: str | None,
-    to: str,
-    subject: str,
-    body: str,
-    body_html: str,
-    cc: List[str],
-    sent_by: str,
-    file_attachments: Optional[List[Tuple[str, bytes, str]]] = None,
-) -> dict:
-    """Send an email and record it in crm_comms_log. Returns the new log entry.
-    file_attachments: list of (filename, content_bytes, mime_type)
-    """
-    accounts = get_mail_accounts()
-    if not accounts:
-        raise RuntimeError("SMTP not configured")
-    account = account_by_key(from_account) if from_account else None
-    if not account:
-        raise RuntimeError("Please select a valid sender account")
-    if not account.get("allow_send"):
-        raise RuntimeError("Selected account is not allowed to send")
-    if not account.get("smtp_host") or not account.get("smtp_username") or not account.get("smtp_password"):
-        raise RuntimeError("SMTP not configured for selected account")
-
-    # If the caller did not provide a customer_id (e.g. compose from Mail page),
-    # auto-link by matching recipient addresses against CRM customer emails.
-    resolved_customer_id = customer_id
-    if not resolved_customer_id:
-        addr_to_customer = _load_customer_email_map()
-        rcpts = [to, *cc]
-        parsed_rcpts = [addr for _, addr in email.utils.getaddresses(rcpts) if addr]
-        for addr in parsed_rcpts:
-            key = (addr or "").strip().lower()
-            if key in addr_to_customer:
-                resolved_customer_id = addr_to_customer[key]
-                break
-
-    loop = asyncio.get_event_loop()
-    import functools
-    msg_id = await loop.run_in_executor(
-        None,
-        functools.partial(_send_email_sync, account, to, subject, body, body_html, cc, file_attachments or []),
-    )
-
-    # Upload attachments to Nextcloud and register in crm_media
-    comm_attachments = []
-    if file_attachments and resolved_customer_id:
-        from crm import nextcloud, service
-        from crm.models import MediaCreate, MediaDirection
-        from shared.firebase import get_db as get_firestore
-        firestore_db = get_firestore()
-        doc = firestore_db.collection("crm_customers").document(resolved_customer_id).get()
-        if doc.exists:
-            data = doc.to_dict()
-            # Build a minimal CustomerInDB-like object for get_customer_nc_path
-            folder_id = data.get("folder_id") or resolved_customer_id
-            nc_path = folder_id
-
-            for filename, content, mime_type in file_attachments:
-                # images/video → sent_media, everything else → documents
-                if mime_type.startswith("image/") or mime_type.startswith("video/"):
-                    subfolder = "sent_media"
-                else:
-                    subfolder = "documents"
-                target_folder = f"customers/{nc_path}/{subfolder}"
-                file_path = f"{target_folder}/{filename}"
-                try:
-                    await nextcloud.ensure_folder(target_folder)
-                    await nextcloud.upload_file(file_path, content, mime_type)
-                    await service.create_media(MediaCreate(
-                        customer_id=resolved_customer_id,
-                        filename=filename,
-                        nextcloud_path=file_path,
-                        mime_type=mime_type,
-                        direction=MediaDirection.sent,
-                        tags=["email-attachment"],
-                        uploaded_by=sent_by,
-                    ))
-                    comm_attachments.append({"filename": filename, "nextcloud_path": file_path})
-                except Exception as e:
-                    logger.warning(f"[EMAIL SEND] Failed to upload attachment {filename}: {e}")
-
-    now = datetime.now(timezone.utc).isoformat()
-    entry_id = str(uuid.uuid4())
-    db = await mqtt_db.get_db()
-    our_addr = account["email"].lower()
-    to_addrs_json = json.dumps([to] + cc)
-    attachments_json = json.dumps(comm_attachments)
-    await db.execute(
-        """INSERT INTO crm_comms_log
-           (id, customer_id, type, mail_account, direction, subject, body, body_html, attachments,
-            ext_message_id, from_addr, to_addrs, logged_by, occurred_at, created_at)
-           VALUES (?, ?, 'email', ?, 'outbound', ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)""",
-        (entry_id, resolved_customer_id, account["key"], subject, body, body_html, attachments_json, msg_id,
-         our_addr, to_addrs_json, sent_by, now, now),
-    )
-    await db.commit()
-
-    return {
-        "id": entry_id,
-        "customer_id": resolved_customer_id,
-        "type": "email",
-        "mail_account": account["key"],
-        "direction": "outbound",
-        "subject": subject,
-        "body": body,
-        "body_html": body_html,
-        "attachments": comm_attachments,
-        "ext_message_id": msg_id,
-        "from_addr": our_addr,
-        "to_addrs": [to] + cc,
-        "logged_by": sent_by,
-        "occurred_at": now,
-        "created_at": now,
-    }
-
-
-def _delete_remote_email_sync(account: dict, ext_message_id: str) -> bool:
-    if not ext_message_id:
-        return False
-    if account.get("imap_use_ssl"):
-        imap = imaplib.IMAP4_SSL(account["imap_host"], int(account["imap_port"]))
-    else:
-        imap = imaplib.IMAP4(account["imap_host"], int(account["imap_port"]))
-    imap.login(account["imap_username"], account["imap_password"])
-    imap.select(account.get("imap_inbox", "INBOX"))
-    _, data = imap.search(None, f'HEADER Message-ID "{ext_message_id}"')
-    uids = data[0].split() if data and data[0] else []
-    if not uids:
-        imap.logout()
-        return False
-    for uid in uids:
-        imap.store(uid, "+FLAGS", "\\Deleted")
-    imap.expunge()
-    imap.logout()
-    return True
-
-
-async def delete_remote_email(ext_message_id: str, mail_account: str | None, from_addr: str | None = None) -> bool:
-    account = account_by_key(mail_account) if mail_account else None
-    if not account:
-        account = account_by_email(from_addr)
-    if not account or not account.get("imap_host"):
-        return False
-    loop = asyncio.get_event_loop()
-    try:
-        return await loop.run_in_executor(None, lambda: _delete_remote_email_sync(account, ext_message_id))
-    except Exception as e:
-        logger.warning(f"[EMAIL DELETE] Failed remote delete for {ext_message_id}: {e}")
-        return False
-
-
-def _set_remote_read_sync(account: dict, ext_message_id: str, read: bool) -> bool:
-    if not ext_message_id:
-        return False
-    if account.get("imap_use_ssl"):
-        imap = imaplib.IMAP4_SSL(account["imap_host"], int(account["imap_port"]))
-    else:
-        imap = imaplib.IMAP4(account["imap_host"], int(account["imap_port"]))
-    imap.login(account["imap_username"], account["imap_password"])
-    imap.select(account.get("imap_inbox", "INBOX"))
-    _, data = imap.search(None, f'HEADER Message-ID "{ext_message_id}"')
-    uids = data[0].split() if data and data[0] else []
-    if not uids:
-        imap.logout()
-        return False
-    flag_op = "+FLAGS" if read else "-FLAGS"
-    for uid in uids:
-        imap.store(uid, flag_op, "\\Seen")
-    imap.logout()
-    return True
-
-
-async def set_remote_read(ext_message_id: str, mail_account: str | None, from_addr: str | None, read: bool) -> bool:
-    account = account_by_key(mail_account) if mail_account else None
-    if not account:
-        account = account_by_email(from_addr)
-    if not account or not account.get("imap_host"):
-        return False
-    loop = asyncio.get_event_loop()
-    try:
-        return await loop.run_in_executor(None, lambda: _set_remote_read_sync(account, ext_message_id, read))
-    except Exception as e:
-        logger.warning(f"[EMAIL READ] Failed remote read update for {ext_message_id}: {e}")
-        return False
-
-
-

backend/crm/mail_accounts.py

@@ -1,104 +0,0 @@
-from __future__ import annotations
-
-from typing import Any
-
-from config import settings
-
-
-def _bool(v: Any, default: bool) -> bool:
-    if isinstance(v, bool):
-        return v
-    if isinstance(v, str):
-        return v.strip().lower() in {"1", "true", "yes", "on"}
-    if v is None:
-        return default
-    return bool(v)
-
-
-def get_mail_accounts() -> list[dict]:
-    """
-    Returns normalized account dictionaries.
-    Falls back to legacy single-account config if MAIL_ACCOUNTS_JSON is empty.
-    """
-    configured = settings.mail_accounts
-    normalized: list[dict] = []
-
-    for idx, raw in enumerate(configured):
-        if not isinstance(raw, dict):
-            continue
-        key = str(raw.get("key") or "").strip().lower()
-        email = str(raw.get("email") or "").strip().lower()
-        if not key or not email:
-            continue
-        normalized.append(
-            {
-                "key": key,
-                "label": str(raw.get("label") or key.title()),
-                "email": email,
-                "imap_host": raw.get("imap_host") or settings.imap_host,
-                "imap_port": int(raw.get("imap_port") or settings.imap_port or 993),
-                "imap_username": raw.get("imap_username") or email,
-                "imap_password": raw.get("imap_password") or settings.imap_password,
-                "imap_use_ssl": _bool(raw.get("imap_use_ssl"), settings.imap_use_ssl),
-                "imap_inbox": str(raw.get("imap_inbox") or "INBOX"),
-                "imap_sent": str(raw.get("imap_sent") or "Sent"),
-                "smtp_host": raw.get("smtp_host") or settings.smtp_host,
-                "smtp_port": int(raw.get("smtp_port") or settings.smtp_port or 587),
-                "smtp_username": raw.get("smtp_username") or email,
-                "smtp_password": raw.get("smtp_password") or settings.smtp_password,
-                "smtp_use_tls": _bool(raw.get("smtp_use_tls"), settings.smtp_use_tls),
-                "sync_inbound": _bool(raw.get("sync_inbound"), True),
-                "allow_send": _bool(raw.get("allow_send"), True),
-            }
-        )
-
-    if normalized:
-        return normalized
-
-    # Legacy single-account fallback
-    if settings.imap_host or settings.smtp_host:
-        legacy_email = (settings.smtp_username or settings.imap_username or "").strip().lower()
-        if legacy_email:
-            return [
-                {
-                    "key": "default",
-                    "label": "Default",
-                    "email": legacy_email,
-                    "imap_host": settings.imap_host,
-                    "imap_port": settings.imap_port,
-                    "imap_username": settings.imap_username,
-                    "imap_password": settings.imap_password,
-                    "imap_use_ssl": settings.imap_use_ssl,
-                    "imap_inbox": "INBOX",
-                    "imap_sent": "Sent",
-                    "smtp_host": settings.smtp_host,
-                    "smtp_port": settings.smtp_port,
-                    "smtp_username": settings.smtp_username,
-                    "smtp_password": settings.smtp_password,
-                    "smtp_use_tls": settings.smtp_use_tls,
-                    "sync_inbound": True,
-                    "allow_send": True,
-                }
-            ]
-
-    return []
-
-
-def account_by_key(key: str | None) -> dict | None:
-    k = (key or "").strip().lower()
-    if not k:
-        return None
-    for acc in get_mail_accounts():
-        if acc["key"] == k:
-            return acc
-    return None
-
-
-def account_by_email(email_addr: str | None) -> dict | None:
-    e = (email_addr or "").strip().lower()
-    if not e:
-        return None
-    for acc in get_mail_accounts():
-        if acc["email"] == e:
-            return acc
-    return None

backend/crm/media_router.py

@@ -1,35 +0,0 @@
-from fastapi import APIRouter, Depends, Query
-from typing import Optional
-
-from auth.models import TokenPayload
-from auth.dependencies import require_permission
-from crm.models import MediaCreate, MediaInDB, MediaListResponse
-from crm import service
-
-router = APIRouter(prefix="/api/crm/media", tags=["crm-media"])
-
-
-@router.get("", response_model=MediaListResponse)
-async def list_media(
-    customer_id: Optional[str] = Query(None),
-    order_id: Optional[str] = Query(None),
-    _user: TokenPayload = Depends(require_permission("crm", "view")),
-):
-    items = await service.list_media(customer_id=customer_id, order_id=order_id)
-    return MediaListResponse(items=items, total=len(items))
-
-
-@router.post("", response_model=MediaInDB, status_code=201)
-async def create_media(
-    body: MediaCreate,
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    return await service.create_media(body)
-
-
-@router.delete("/{media_id}", status_code=204)
-async def delete_media(
-    media_id: str,
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    await service.delete_media(media_id)

backend/crm/models.py

@@ -1,443 +0,0 @@
-from enum import Enum
-from typing import Any, Dict, List, Optional
-from pydantic import BaseModel
-
-
-class ProductCategory(str, Enum):
-    controller = "controller"
-    striker = "striker"
-    clock = "clock"
-    part = "part"
-    repair_service = "repair_service"
-
-
-class CostLineItem(BaseModel):
-    name: str
-    quantity: float = 1
-    price: float = 0.0
-
-
-class ProductCosts(BaseModel):
-    labor_hours: Optional[float] = None
-    labor_rate: Optional[float] = None
-    items: List[CostLineItem] = []
-    total: Optional[float] = None
-
-
-class ProductStock(BaseModel):
-    on_hand: int = 0
-    reserved: int = 0
-    available: int = 0
-
-
-class ProductCreate(BaseModel):
-    name: str
-    sku: Optional[str] = None
-    category: ProductCategory
-    description: Optional[str] = None
-    name_en: Optional[str] = None
-    name_gr: Optional[str] = None
-    description_en: Optional[str] = None
-    description_gr: Optional[str] = None
-    price: float
-    currency: str = "EUR"
-    costs: Optional[ProductCosts] = None
-    stock: Optional[ProductStock] = None
-    active: bool = True
-    status: str = "active"  # active | discontinued | planned
-    photo_url: Optional[str] = None
-
-
-class ProductUpdate(BaseModel):
-    name: Optional[str] = None
-    sku: Optional[str] = None
-    category: Optional[ProductCategory] = None
-    description: Optional[str] = None
-    name_en: Optional[str] = None
-    name_gr: Optional[str] = None
-    description_en: Optional[str] = None
-    description_gr: Optional[str] = None
-    price: Optional[float] = None
-    currency: Optional[str] = None
-    costs: Optional[ProductCosts] = None
-    stock: Optional[ProductStock] = None
-    active: Optional[bool] = None
-    status: Optional[str] = None
-    photo_url: Optional[str] = None
-
-
-class ProductInDB(ProductCreate):
-    id: str
-    created_at: str
-    updated_at: str
-
-
-class ProductListResponse(BaseModel):
-    products: List[ProductInDB]
-    total: int
-
-
-# ── Customers ────────────────────────────────────────────────────────────────
-
-class ContactType(str, Enum):
-    email = "email"
-    phone = "phone"
-    whatsapp = "whatsapp"
-    other = "other"
-
-
-class CustomerContact(BaseModel):
-    type: ContactType
-    label: str
-    value: str
-    primary: bool = False
-
-
-class CustomerNote(BaseModel):
-    text: str
-    by: str
-    at: str
-
-
-class OwnedItemType(str, Enum):
-    console_device = "console_device"
-    product = "product"
-    freetext = "freetext"
-
-
-class OwnedItem(BaseModel):
-    type: OwnedItemType
-    # console_device fields
-    device_id: Optional[str] = None
-    label: Optional[str] = None
-    # product fields
-    product_id: Optional[str] = None
-    product_name: Optional[str] = None
-    quantity: Optional[int] = None
-    serial_numbers: Optional[List[str]] = None
-    # freetext fields
-    description: Optional[str] = None
-    serial_number: Optional[str] = None
-    notes: Optional[str] = None
-
-
-class CustomerLocation(BaseModel):
-    address: Optional[str] = None
-    city: Optional[str] = None
-    postal_code: Optional[str] = None
-    region: Optional[str] = None
-    country: Optional[str] = None
-
-
-# ── New customer status models ────────────────────────────────────────────────
-
-class TechnicalIssue(BaseModel):
-    active: bool = True
-    opened_date: str  # ISO string
-    resolved_date: Optional[str] = None
-    note: str
-    opened_by: str
-    resolved_by: Optional[str] = None
-
-
-class InstallSupportEntry(BaseModel):
-    active: bool = True
-    opened_date: str  # ISO string
-    resolved_date: Optional[str] = None
-    note: str
-    opened_by: str
-    resolved_by: Optional[str] = None
-
-
-class TransactionEntry(BaseModel):
-    date: str  # ISO string
-    flow: str  # "invoice" | "payment" | "refund" | "credit"
-    payment_type: Optional[str] = None  # "cash" | "bank_transfer" | "card" | "paypal" — null for invoices
-    category: str  # "full_payment" | "advance" | "installment"
-    amount: float
-    currency: str = "EUR"
-    invoice_ref: Optional[str] = None
-    order_ref: Optional[str] = None
-    recorded_by: str
-    note: str = ""
-
-
-# Lightweight summary stored on customer doc for fast CustomerList expanded view
-class CrmSummary(BaseModel):
-    active_order_status: Optional[str] = None
-    active_order_status_date: Optional[str] = None
-    active_order_title: Optional[str] = None
-    active_issues_count: int = 0
-    latest_issue_date: Optional[str] = None
-    active_support_count: int = 0
-    latest_support_date: Optional[str] = None
-
-
-class CustomerCreate(BaseModel):
-    title: Optional[str] = None
-    name: str
-    surname: Optional[str] = None
-    organization: Optional[str] = None
-    religion: Optional[str] = None
-    contacts: List[CustomerContact] = []
-    notes: List[CustomerNote] = []
-    location: Optional[CustomerLocation] = None
-    language: str = "el"
-    tags: List[str] = []
-    owned_items: List[OwnedItem] = []
-    linked_user_ids: List[str] = []
-    nextcloud_folder: Optional[str] = None
-    folder_id: Optional[str] = None
-    relationship_status: str = "lead"
-    technical_issues: List[Dict[str, Any]] = []
-    install_support: List[Dict[str, Any]] = []
-    transaction_history: List[Dict[str, Any]] = []
-    crm_summary: Optional[Dict[str, Any]] = None
-
-
-class CustomerUpdate(BaseModel):
-    title: Optional[str] = None
-    name: Optional[str] = None
-    surname: Optional[str] = None
-    organization: Optional[str] = None
-    religion: Optional[str] = None
-    contacts: Optional[List[CustomerContact]] = None
-    notes: Optional[List[CustomerNote]] = None
-    location: Optional[CustomerLocation] = None
-    language: Optional[str] = None
-    tags: Optional[List[str]] = None
-    owned_items: Optional[List[OwnedItem]] = None
-    linked_user_ids: Optional[List[str]] = None
-    nextcloud_folder: Optional[str] = None
-    relationship_status: Optional[str] = None
-    # folder_id intentionally excluded from update — set once at creation
-
-
-class CustomerInDB(CustomerCreate):
-    id: str
-    created_at: str
-    updated_at: str
-
-
-class CustomerListResponse(BaseModel):
-    customers: List[CustomerInDB]
-    total: int
-
-
-# ── Orders ───────────────────────────────────────────────────────────────────
-
-class OrderStatus(str, Enum):
-    negotiating = "negotiating"
-    awaiting_quotation = "awaiting_quotation"
-    awaiting_customer_confirmation = "awaiting_customer_confirmation"
-    awaiting_fulfilment = "awaiting_fulfilment"
-    awaiting_payment = "awaiting_payment"
-    manufacturing = "manufacturing"
-    shipped = "shipped"
-    installed = "installed"
-    declined = "declined"
-    complete = "complete"
-
-
-class OrderPaymentStatus(BaseModel):
-    required_amount: float = 0
-    received_amount: float = 0
-    balance_due: float = 0
-    advance_required: bool = False
-    advance_amount: Optional[float] = None
-    payment_complete: bool = False
-
-
-class OrderTimelineEvent(BaseModel):
-    date: str  # ISO string
-    type: str  # "quote_request" | "quote_sent" | "quote_accepted" | "quote_declined"
-               # | "mfg_started" | "mfg_complete" | "order_shipped" | "installed"
-               # | "payment_received" | "invoice_sent" | "note"
-    note: str = ""
-    updated_by: str
-
-
-class OrderDiscount(BaseModel):
-    type: str  # "percentage" | "fixed"
-    value: float = 0
-    reason: Optional[str] = None
-
-
-class OrderShipping(BaseModel):
-    method: Optional[str] = None
-    tracking_number: Optional[str] = None
-    carrier: Optional[str] = None
-    shipped_at: Optional[str] = None
-    delivered_at: Optional[str] = None
-    destination: Optional[str] = None
-
-
-class OrderItem(BaseModel):
-    type: str  # console_device | product | freetext
-    product_id: Optional[str] = None
-    product_name: Optional[str] = None
-    description: Optional[str] = None
-    quantity: int = 1
-    unit_price: float = 0.0
-    serial_numbers: List[str] = []
-
-
-class OrderCreate(BaseModel):
-    customer_id: str
-    order_number: Optional[str] = None
-    title: Optional[str] = None
-    created_by: Optional[str] = None
-    status: OrderStatus = OrderStatus.negotiating
-    status_updated_date: Optional[str] = None
-    status_updated_by: Optional[str] = None
-    items: List[OrderItem] = []
-    subtotal: float = 0
-    discount: Optional[OrderDiscount] = None
-    total_price: float = 0
-    currency: str = "EUR"
-    shipping: Optional[OrderShipping] = None
-    payment_status: Optional[Dict[str, Any]] = None
-    invoice_path: Optional[str] = None
-    notes: Optional[str] = None
-    timeline: List[Dict[str, Any]] = []
-
-
-class OrderUpdate(BaseModel):
-    order_number: Optional[str] = None
-    title: Optional[str] = None
-    status: Optional[OrderStatus] = None
-    status_updated_date: Optional[str] = None
-    status_updated_by: Optional[str] = None
-    items: Optional[List[OrderItem]] = None
-    subtotal: Optional[float] = None
-    discount: Optional[OrderDiscount] = None
-    total_price: Optional[float] = None
-    currency: Optional[str] = None
-    shipping: Optional[OrderShipping] = None
-    payment_status: Optional[Dict[str, Any]] = None
-    invoice_path: Optional[str] = None
-    notes: Optional[str] = None
-
-
-class OrderInDB(OrderCreate):
-    id: str
-    created_at: str
-    updated_at: str
-
-
-class OrderListResponse(BaseModel):
-    orders: List[OrderInDB]
-    total: int
-
-
-# ── Comms Log ─────────────────────────────────────────────────────────────────
-
-class CommType(str, Enum):
-    email = "email"
-    whatsapp = "whatsapp"
-    call = "call"
-    sms = "sms"
-    note = "note"
-    in_person = "in_person"
-
-
-class CommDirection(str, Enum):
-    inbound = "inbound"
-    outbound = "outbound"
-    internal = "internal"
-
-
-class CommAttachment(BaseModel):
-    filename: str
-    nextcloud_path: Optional[str] = None
-    content_type: Optional[str] = None
-    size: Optional[int] = None
-
-
-class CommCreate(BaseModel):
-    customer_id: Optional[str] = None
-    type: CommType
-    mail_account: Optional[str] = None
-    direction: CommDirection
-    subject: Optional[str] = None
-    body: Optional[str] = None
-    body_html: Optional[str] = None
-    attachments: List[CommAttachment] = []
-    ext_message_id: Optional[str] = None
-    from_addr: Optional[str] = None
-    to_addrs: Optional[List[str]] = None
-    logged_by: Optional[str] = None
-    occurred_at: Optional[str] = None  # defaults to now if not provided
-
-
-class CommUpdate(BaseModel):
-    type: Optional[CommType] = None
-    direction: Optional[CommDirection] = None
-    subject: Optional[str] = None
-    body: Optional[str] = None
-    logged_by: Optional[str] = None
-    occurred_at: Optional[str] = None
-
-
-class CommInDB(BaseModel):
-    id: str
-    customer_id: Optional[str] = None
-    type: CommType
-    mail_account: Optional[str] = None
-    direction: CommDirection
-    subject: Optional[str] = None
-    body: Optional[str] = None
-    body_html: Optional[str] = None
-    attachments: List[CommAttachment] = []
-    ext_message_id: Optional[str] = None
-    from_addr: Optional[str] = None
-    to_addrs: Optional[List[str]] = None
-    logged_by: Optional[str] = None
-    occurred_at: str
-    created_at: str
-    is_important: bool = False
-    is_read: bool = False
-
-
-class CommListResponse(BaseModel):
-    entries: List[CommInDB]
-    total: int
-
-
-# ── Media ─────────────────────────────────────────────────────────────────────
-
-class MediaDirection(str, Enum):
-    received = "received"
-    sent = "sent"
-    internal = "internal"
-
-
-class MediaCreate(BaseModel):
-    customer_id: Optional[str] = None
-    order_id: Optional[str] = None
-    filename: str
-    nextcloud_path: str
-    mime_type: Optional[str] = None
-    direction: Optional[MediaDirection] = None
-    tags: List[str] = []
-    uploaded_by: Optional[str] = None
-    thumbnail_path: Optional[str] = None
-
-
-class MediaInDB(BaseModel):
-    id: str
-    customer_id: Optional[str] = None
-    order_id: Optional[str] = None
-    filename: str
-    nextcloud_path: str
-    mime_type: Optional[str] = None
-    direction: Optional[MediaDirection] = None
-    tags: List[str] = []
-    uploaded_by: Optional[str] = None
-    created_at: str
-    thumbnail_path: Optional[str] = None
-
-
-class MediaListResponse(BaseModel):
-    items: List[MediaInDB]
-    total: int

backend/crm/nextcloud.py

@@ -1,329 +0,0 @@
-"""
-Nextcloud WebDAV client.
-
-All paths passed to these functions are relative to `settings.nextcloud_base_path`.
-The full WebDAV URL is:
-  {nextcloud_url}/remote.php/dav/files/{username}/{base_path}/{relative_path}
-"""
-import xml.etree.ElementTree as ET
-from typing import List
-from urllib.parse import unquote
-
-import httpx
-from fastapi import HTTPException
-
-from config import settings
-
-DAV_NS = "DAV:"
-
-# Default timeout for all Nextcloud WebDAV requests (seconds)
-_TIMEOUT = 60.0
-
-# Shared async client — reuses TCP connections across requests so Nextcloud
-# doesn't see rapid connection bursts that trigger brute-force throttling.
-_http_client: httpx.AsyncClient | None = None
-
-
-def _get_client() -> httpx.AsyncClient:
-    global _http_client
-    if _http_client is None or _http_client.is_closed:
-        _http_client = httpx.AsyncClient(
-            timeout=_TIMEOUT,
-            follow_redirects=True,
-            headers={"User-Agent": "BellSystems-CP/1.0"},
-        )
-    return _http_client
-
-
-async def close_client() -> None:
-    """Close the shared HTTP client. Call this on application shutdown."""
-    global _http_client
-    if _http_client and not _http_client.is_closed:
-        await _http_client.aclose()
-    _http_client = None
-
-
-async def keepalive_ping() -> None:
-    """
-    Send a lightweight PROPFIND Depth:0 to the Nextcloud base folder to keep
-    the TCP connection alive. Safe to call even if Nextcloud is not configured.
-    """
-    if not settings.nextcloud_url:
-        return
-    try:
-        url = _base_url()
-        client = _get_client()
-        await client.request(
-            "PROPFIND",
-            url,
-            auth=_auth(),
-            headers={"Depth": "0", "Content-Type": "application/xml"},
-            content=_PROPFIND_BODY,
-        )
-    except Exception as e:
-        print(f"[NEXTCLOUD KEEPALIVE] ping failed: {e}")
-
-
-def _dav_user() -> str:
-    """The username used in the WebDAV URL path (may differ from the login username)."""
-    return settings.nextcloud_dav_user or settings.nextcloud_username
-
-
-def _base_url() -> str:
-    if not settings.nextcloud_url:
-        raise HTTPException(status_code=503, detail="Nextcloud not configured")
-    return (
-        f"{settings.nextcloud_url.rstrip('/')}"
-        f"/remote.php/dav/files/{_dav_user()}"
-        f"/{settings.nextcloud_base_path}"
-    )
-
-
-def _auth() -> tuple[str, str]:
-    return (settings.nextcloud_username, settings.nextcloud_password)
-
-
-def _full_url(relative_path: str) -> str:
-    """Build full WebDAV URL for a relative path."""
-    path = relative_path.strip("/")
-    base = _base_url()
-    return f"{base}/{path}" if path else base
-
-
-def _parse_propfind(xml_bytes: bytes, base_path_prefix: str) -> List[dict]:
-    """
-    Parse a PROPFIND XML response.
-    Returns list of file/folder entries, skipping the root itself.
-    """
-    root = ET.fromstring(xml_bytes)
-    results = []
-
-    # The prefix we need to strip from D:href to get the relative path back
-    # href looks like: /remote.php/dav/files/user/BellSystems/Console/customers/abc/
-    dav_prefix = (
-        f"/remote.php/dav/files/{_dav_user()}"
-        f"/{settings.nextcloud_base_path}/"
-    )
-
-    for response in root.findall(f"{{{DAV_NS}}}response"):
-        href_el = response.find(f"{{{DAV_NS}}}href")
-        if href_el is None:
-            continue
-        href = unquote(href_el.text or "")
-
-        # Strip DAV prefix to get relative path within base_path
-        if href.startswith(dav_prefix):
-            rel = href[len(dav_prefix):].rstrip("/")
-        else:
-            rel = href
-
-        # Skip the folder itself (the root of the PROPFIND request)
-        if rel == base_path_prefix.strip("/"):
-            continue
-
-        propstat = response.find(f"{{{DAV_NS}}}propstat")
-        if propstat is None:
-            continue
-        prop = propstat.find(f"{{{DAV_NS}}}prop")
-        if prop is None:
-            continue
-
-        # is_dir: resourcetype contains D:collection
-        resource_type = prop.find(f"{{{DAV_NS}}}resourcetype")
-        is_dir = resource_type is not None and resource_type.find(f"{{{DAV_NS}}}collection") is not None
-
-        content_type_el = prop.find(f"{{{DAV_NS}}}getcontenttype")
-        mime_type = content_type_el.text if content_type_el is not None else (
-            "inode/directory" if is_dir else "application/octet-stream"
-        )
-
-        size_el = prop.find(f"{{{DAV_NS}}}getcontentlength")
-        size = int(size_el.text) if size_el is not None and size_el.text else 0
-
-        modified_el = prop.find(f"{{{DAV_NS}}}getlastmodified")
-        last_modified = modified_el.text if modified_el is not None else None
-
-        filename = rel.split("/")[-1] if rel else ""
-
-        results.append({
-            "filename": filename,
-            "path": rel,
-            "mime_type": mime_type,
-            "size": size,
-            "last_modified": last_modified,
-            "is_dir": is_dir,
-        })
-
-    return results
-
-
-async def ensure_folder(relative_path: str) -> None:
-    """
-    Create a folder (and all parents) in Nextcloud via MKCOL.
-    Includes the base_path segments so the full hierarchy is created from scratch.
-    Silently succeeds if folders already exist.
-    """
-    # Build the complete path list: base_path segments + relative_path segments
-    base_parts = settings.nextcloud_base_path.strip("/").split("/")
-    rel_parts = relative_path.strip("/").split("/") if relative_path.strip("/") else []
-    all_parts = base_parts + rel_parts
-
-    dav_root = f"{settings.nextcloud_url.rstrip('/')}/remote.php/dav/files/{_dav_user()}"
-    client = _get_client()
-    built = ""
-    for part in all_parts:
-        built = f"{built}/{part}" if built else part
-        url = f"{dav_root}/{built}"
-        resp = await client.request("MKCOL", url, auth=_auth())
-        # 201 = created, 405/409 = already exists — both are fine
-        if resp.status_code not in (201, 405, 409):
-            raise HTTPException(
-                status_code=502,
-                detail=f"Failed to create Nextcloud folder '{built}': {resp.status_code}",
-            )
-
-
-async def write_info_file(customer_folder: str, customer_name: str, customer_id: str) -> None:
-    """Write a _info.txt stub into a new customer folder for human browsability."""
-    content = f"Customer: {customer_name}\nID: {customer_id}\n"
-    await upload_file(
-        f"{customer_folder}/_info.txt",
-        content.encode("utf-8"),
-        "text/plain",
-    )
-
-
-_PROPFIND_BODY = b"""<?xml version="1.0"?>
-<D:propfind xmlns:D="DAV:">
-  <D:prop>
-    <D:resourcetype/>
-    <D:getcontenttype/>
-    <D:getcontentlength/>
-    <D:getlastmodified/>
-  </D:prop>
-</D:propfind>"""
-
-
-async def list_folder(relative_path: str) -> List[dict]:
-    """
-    PROPFIND at depth=1 to list a folder's immediate children.
-    relative_path is relative to nextcloud_base_path.
-    """
-    url = _full_url(relative_path)
-    client = _get_client()
-    resp = await client.request(
-        "PROPFIND",
-        url,
-        auth=_auth(),
-        headers={"Depth": "1", "Content-Type": "application/xml"},
-        content=_PROPFIND_BODY,
-    )
-    if resp.status_code == 404:
-        return []
-    if resp.status_code not in (207, 200):
-        raise HTTPException(status_code=502, detail=f"Nextcloud PROPFIND failed: {resp.status_code}")
-    return _parse_propfind(resp.content, relative_path)
-
-
-async def list_folder_recursive(relative_path: str) -> List[dict]:
-    """
-    Recursively list ALL files under a folder (any depth).
-    Tries Depth:infinity first (single call). Falls back to manual recursion
-    via Depth:1 if the server returns 403/400 (some servers disable infinity).
-    Returns only file entries (is_dir=False).
-    """
-    url = _full_url(relative_path)
-    client = _get_client()
-    resp = await client.request(
-        "PROPFIND",
-        url,
-        auth=_auth(),
-        headers={"Depth": "infinity", "Content-Type": "application/xml"},
-        content=_PROPFIND_BODY,
-    )
-
-    if resp.status_code in (207, 200):
-        all_items = _parse_propfind(resp.content, relative_path)
-        return [item for item in all_items if not item["is_dir"]]
-
-    # Depth:infinity not supported — fall back to recursive Depth:1
-    if resp.status_code in (403, 400, 412):
-        return await _list_recursive_fallback(relative_path)
-
-    if resp.status_code == 404:
-        return []
-
-    raise HTTPException(status_code=502, detail=f"Nextcloud PROPFIND failed: {resp.status_code}")
-
-
-async def _list_recursive_fallback(relative_path: str) -> List[dict]:
-    """Manually recurse via Depth:1 calls when Depth:infinity is blocked."""
-    items = await list_folder(relative_path)
-    files = []
-    dirs = []
-    for item in items:
-        if item["is_dir"]:
-            dirs.append(item["path"])
-        else:
-            files.append(item)
-    for dir_path in dirs:
-        child_files = await _list_recursive_fallback(dir_path)
-        files.extend(child_files)
-    return files
-
-
-async def upload_file(relative_path: str, content: bytes, mime_type: str) -> str:
-    """
-    PUT a file to Nextcloud. Returns the relative_path on success.
-    relative_path includes filename, e.g. "customers/abc123/media/photo.jpg"
-    """
-    url = _full_url(relative_path)
-    client = _get_client()
-    resp = await client.put(
-        url,
-        auth=_auth(),
-        content=content,
-        headers={"Content-Type": mime_type},
-    )
-    if resp.status_code not in (200, 201, 204):
-        raise HTTPException(status_code=502, detail=f"Nextcloud upload failed: {resp.status_code}")
-    return relative_path
-
-
-async def download_file(relative_path: str) -> tuple[bytes, str]:
-    """
-    GET a file from Nextcloud. Returns (bytes, mime_type).
-    """
-    url = _full_url(relative_path)
-    client = _get_client()
-    resp = await client.get(url, auth=_auth())
-    if resp.status_code == 404:
-        raise HTTPException(status_code=404, detail="File not found in Nextcloud")
-    if resp.status_code != 200:
-        raise HTTPException(status_code=502, detail=f"Nextcloud download failed: {resp.status_code}")
-    mime = resp.headers.get("content-type", "application/octet-stream").split(";")[0].strip()
-    return resp.content, mime
-
-
-async def delete_file(relative_path: str) -> None:
-    """DELETE a file from Nextcloud."""
-    url = _full_url(relative_path)
-    client = _get_client()
-    resp = await client.request("DELETE", url, auth=_auth())
-    if resp.status_code not in (200, 204, 404):
-        raise HTTPException(status_code=502, detail=f"Nextcloud delete failed: {resp.status_code}")
-
-
-async def rename_folder(old_relative_path: str, new_relative_path: str) -> None:
-    """Rename/move a folder in Nextcloud using WebDAV MOVE."""
-    url = _full_url(old_relative_path)
-    destination = _full_url(new_relative_path)
-    client = _get_client()
-    resp = await client.request(
-        "MOVE",
-        url,
-        auth=_auth(),
-        headers={"Destination": destination, "Overwrite": "F"},
-    )
-    if resp.status_code not in (201, 204):
-        raise HTTPException(status_code=502, detail=f"Nextcloud rename failed: {resp.status_code}")

backend/crm/nextcloud_router.py

@@ -1,490 +0,0 @@
-"""
-Nextcloud WebDAV proxy endpoints.
-
-Folder convention (all paths relative to nextcloud_base_path = BellSystems/Console):
-  customers/{folder_id}/media/
-  customers/{folder_id}/documents/
-  customers/{folder_id}/sent/
-  customers/{folder_id}/received/
-
-folder_id = customer.folder_id if set, else customer.id (legacy fallback).
-"""
-from fastapi import APIRouter, Depends, Query, UploadFile, File, Form, Response, HTTPException, Request
-from fastapi.responses import StreamingResponse
-from typing import Optional
-
-from jose import JWTError
-from auth.models import TokenPayload
-from auth.dependencies import require_permission
-from auth.utils import decode_access_token
-from crm import nextcloud, service
-from config import settings
-from crm.models import MediaCreate, MediaDirection
-from crm.thumbnails import generate_thumbnail
-
-router = APIRouter(prefix="/api/crm/nextcloud", tags=["crm-nextcloud"])
-
-DIRECTION_MAP = {
-    "sent": MediaDirection.sent,
-    "received": MediaDirection.received,
-    "internal": MediaDirection.internal,
-    "media": MediaDirection.internal,
-    "documents": MediaDirection.internal,
-}
-
-
-@router.get("/web-url")
-async def get_web_url(
-    path: str = Query(..., description="Path relative to nextcloud_base_path"),
-    _user: TokenPayload = Depends(require_permission("crm", "view")),
-):
-    """
-    Return the Nextcloud Files web-UI URL for a given file path.
-    Opens the parent folder with the file highlighted.
-    """
-    if not settings.nextcloud_url:
-        raise HTTPException(status_code=503, detail="Nextcloud not configured")
-    base = settings.nextcloud_base_path.strip("/")
-    # path is relative to base, e.g. "customers/abc/media/photo.jpg"
-    parts = path.rsplit("/", 1)
-    folder_rel = parts[0] if len(parts) == 2 else ""
-    filename = parts[-1]
-    nc_dir = f"/{base}/{folder_rel}" if folder_rel else f"/{base}"
-    from urllib.parse import urlencode, quote
-    qs = urlencode({"dir": nc_dir, "scrollto": filename})
-    url = f"{settings.nextcloud_url.rstrip('/')}/index.php/apps/files/?{qs}"
-    return {"url": url}
-
-
-@router.get("/browse")
-async def browse(
-    path: str = Query(..., description="Path relative to nextcloud_base_path"),
-    _user: TokenPayload = Depends(require_permission("crm", "view")),
-):
-    """List immediate children of a Nextcloud folder."""
-    items = await nextcloud.list_folder(path)
-    return {"path": path, "items": items}
-
-
-@router.get("/browse-all")
-async def browse_all(
-    customer_id: str = Query(..., description="Customer ID"),
-    _user: TokenPayload = Depends(require_permission("crm", "view")),
-):
-    """
-    Recursively list ALL files for a customer across all subfolders and any depth.
-    Uses Depth:infinity (one WebDAV call) with automatic fallback to recursive Depth:1.
-    Each file item includes a 'subfolder' key derived from its path.
-    """
-    customer = service.get_customer(customer_id)
-    nc_path = service.get_customer_nc_path(customer)
-    base = f"customers/{nc_path}"
-
-    all_files = await nextcloud.list_folder_recursive(base)
-
-    # Exclude _info.txt stubs — human-readable only, should never appear in the UI.
-    # .thumbs/ files are kept: the frontend needs them to build the thumbnail map
-    # (it already filters them out of the visible file list itself).
-    all_files = [
-        f for f in all_files
-        if not f["path"].endswith("/_info.txt")
-    ]
-
-    # Tag each file with the top-level subfolder it lives under
-    for item in all_files:
-        parts = item["path"].split("/")
-        # path looks like: customers/{nc_path}/{subfolder}/[...]/filename
-        # parts[0]=customers, parts[1]={nc_path}, parts[2]={subfolder}
-        item["subfolder"] = parts[2] if len(parts) > 2 else "other"
-
-    return {"items": all_files}
-
-
-@router.get("/file")
-async def proxy_file(
-    request: Request,
-    path: str = Query(..., description="Path relative to nextcloud_base_path"),
-    token: Optional[str] = Query(None, description="JWT token for browser-native requests (img src, video src, a href) that cannot send an Authorization header"),
-):
-    """
-    Stream a file from Nextcloud through the backend (proxy).
-    Supports HTTP Range requests so videos can be seeked and start playing immediately.
-    Accepts auth via Authorization: Bearer header OR ?token= query param.
-    """
-    if token is None:
-        raise HTTPException(status_code=403, detail="Not authenticated")
-    try:
-        decode_access_token(token)
-    except (JWTError, KeyError):
-        raise HTTPException(status_code=403, detail="Invalid token")
-
-    # Forward the Range header to Nextcloud so we get a true partial response
-    # without buffering the whole file into memory.
-    nc_url = nextcloud._full_url(path)
-    nc_auth = nextcloud._auth()
-    forward_headers = {}
-    range_header = request.headers.get("range")
-    if range_header:
-        forward_headers["Range"] = range_header
-
-    import httpx as _httpx
-
-    # Use a dedicated streaming client — httpx.stream() keeps the connection open
-    # for the lifetime of the generator, so we can't reuse the shared persistent client.
-    # We enter the stream context here to get headers immediately (no body buffering),
-    # then hand the body iterator to StreamingResponse.
-    stream_client = _httpx.AsyncClient(timeout=None, follow_redirects=True)
-    nc_resp_ctx = stream_client.stream("GET", nc_url, auth=nc_auth, headers=forward_headers)
-    nc_resp = await nc_resp_ctx.__aenter__()
-
-    if nc_resp.status_code == 404:
-        await nc_resp_ctx.__aexit__(None, None, None)
-        await stream_client.aclose()
-        raise HTTPException(status_code=404, detail="File not found in Nextcloud")
-    if nc_resp.status_code not in (200, 206):
-        await nc_resp_ctx.__aexit__(None, None, None)
-        await stream_client.aclose()
-        raise HTTPException(status_code=502, detail=f"Nextcloud returned {nc_resp.status_code}")
-
-    mime_type = nc_resp.headers.get("content-type", "application/octet-stream").split(";")[0].strip()
-
-    resp_headers = {"Accept-Ranges": "bytes"}
-    for h in ("content-range", "content-length"):
-        if h in nc_resp.headers:
-            resp_headers[h.title()] = nc_resp.headers[h]
-
-    async def _stream():
-        try:
-            async for chunk in nc_resp.aiter_bytes(chunk_size=64 * 1024):
-                yield chunk
-        finally:
-            await nc_resp_ctx.__aexit__(None, None, None)
-            await stream_client.aclose()
-
-    return StreamingResponse(
-        _stream(),
-        status_code=nc_resp.status_code,
-        media_type=mime_type,
-        headers=resp_headers,
-    )
-
-
-@router.put("/file-put")
-async def put_file(
-    request: Request,
-    path: str = Query(..., description="Path relative to nextcloud_base_path"),
-    token: Optional[str] = Query(None),
-):
-    """
-    Overwrite a file in Nextcloud with a new body (used for TXT in-browser editing).
-    Auth via ?token= query param (same pattern as /file GET).
-    """
-    if token is None:
-        raise HTTPException(status_code=403, detail="Not authenticated")
-    try:
-        decode_access_token(token)
-    except (JWTError, KeyError):
-        raise HTTPException(status_code=403, detail="Invalid token")
-
-    body = await request.body()
-    content_type = request.headers.get("content-type", "text/plain")
-    await nextcloud.upload_file(path, body, content_type)
-    return {"updated": path}
-
-
-@router.post("/upload")
-async def upload_file(
-    file: UploadFile = File(...),
-    customer_id: str = Form(...),
-    subfolder: str = Form("media"),  # "media" | "documents" | "sent" | "received"
-    direction: Optional[str] = Form(None),
-    tags: Optional[str] = Form(None),
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    """
-    Upload a file to the customer's Nextcloud folder and record it in crm_media.
-    Uses the customer's folder_id as the NC path (falls back to UUID for legacy records).
-    """
-    customer = service.get_customer(customer_id)
-    nc_path = service.get_customer_nc_path(customer)
-
-    target_folder = f"customers/{nc_path}/{subfolder}"
-    file_path = f"{target_folder}/{file.filename}"
-
-    # Ensure the target subfolder exists (idempotent, fast for existing folders)
-    await nextcloud.ensure_folder(target_folder)
-
-    # Read and upload
-    content = await file.read()
-    mime_type = file.content_type or "application/octet-stream"
-    await nextcloud.upload_file(file_path, content, mime_type)
-
-    # Generate and upload thumbnail (best-effort, non-blocking)
-    # Always stored as {stem}.jpg regardless of source extension so the thumb
-    # filename is unambiguous and the existence check can never false-positive.
-    thumb_path = None
-    try:
-        thumb_bytes = generate_thumbnail(content, mime_type, file.filename)
-        if thumb_bytes:
-            thumb_folder = f"{target_folder}/.thumbs"
-            stem = file.filename.rsplit(".", 1)[0] if "." in file.filename else file.filename
-            thumb_filename = f"{stem}.jpg"
-            thumb_nc_path = f"{thumb_folder}/{thumb_filename}"
-            await nextcloud.ensure_folder(thumb_folder)
-            await nextcloud.upload_file(thumb_nc_path, thumb_bytes, "image/jpeg")
-            thumb_path = thumb_nc_path
-    except Exception as e:
-        import logging
-        logging.getLogger(__name__).warning("Thumbnail generation failed for %s: %s", file.filename, e)
-
-    # Resolve direction
-    resolved_direction = None
-    if direction:
-        try:
-            resolved_direction = MediaDirection(direction)
-        except ValueError:
-            resolved_direction = DIRECTION_MAP.get(subfolder, MediaDirection.internal)
-    else:
-        resolved_direction = DIRECTION_MAP.get(subfolder, MediaDirection.internal)
-
-    # Save metadata record
-    tag_list = [t.strip() for t in tags.split(",")] if tags else []
-    media_record = await service.create_media(MediaCreate(
-        customer_id=customer_id,
-        filename=file.filename,
-        nextcloud_path=file_path,
-        mime_type=mime_type,
-        direction=resolved_direction,
-        tags=tag_list,
-        uploaded_by=_user.name,
-        thumbnail_path=thumb_path,
-    ))
-
-    return media_record
-
-
-@router.delete("/file")
-async def delete_file(
-    path: str = Query(..., description="Path relative to nextcloud_base_path"),
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    """Delete a file from Nextcloud and remove the matching crm_media record if found."""
-    await nextcloud.delete_file(path)
-
-    # Best-effort: delete the DB record if one matches this path
-    media_list = await service.list_media()
-    for m in media_list:
-        if m.nextcloud_path == path:
-            try:
-                await service.delete_media(m.id)
-            except Exception:
-                pass
-            break
-
-    return {"deleted": path}
-
-
-@router.post("/init-customer-folder")
-async def init_customer_folder(
-    customer_id: str = Form(...),
-    customer_name: str = Form(...),
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    """
-    Create the standard folder structure for a customer in Nextcloud
-    and write an _info.txt stub for human readability.
-    """
-    customer = service.get_customer(customer_id)
-    nc_path = service.get_customer_nc_path(customer)
-    base = f"customers/{nc_path}"
-    for sub in ("media", "documents", "sent", "received"):
-        await nextcloud.ensure_folder(f"{base}/{sub}")
-    await nextcloud.write_info_file(base, customer_name, customer_id)
-    return {"initialized": base}
-
-
-@router.post("/sync")
-async def sync_nextcloud_files(
-    customer_id: str = Form(...),
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    """
-    Scan the customer's Nextcloud folder and register any files not yet tracked in the DB.
-    Returns counts of newly synced and skipped (already tracked) files.
-    """
-    customer = service.get_customer(customer_id)
-    nc_path = service.get_customer_nc_path(customer)
-    base = f"customers/{nc_path}"
-
-    # Collect all NC files recursively (handles nested folders at any depth)
-    all_nc_files = await nextcloud.list_folder_recursive(base)
-    # Skip .thumbs/ folder contents and the _info.txt stub — these are internal
-    all_nc_files = [
-        f for f in all_nc_files
-        if "/.thumbs/" not in f["path"] and not f["path"].endswith("/_info.txt")
-    ]
-    for item in all_nc_files:
-        parts = item["path"].split("/")
-        item["_subfolder"] = parts[2] if len(parts) > 2 else "media"
-
-    # Get existing DB records for this customer
-    existing = await service.list_media(customer_id=customer_id)
-    tracked_paths = {m.nextcloud_path for m in existing}
-
-    synced = 0
-    skipped = 0
-    for f in all_nc_files:
-        if f["path"] in tracked_paths:
-            skipped += 1
-            continue
-        sub = f["_subfolder"]
-        direction = DIRECTION_MAP.get(sub, MediaDirection.internal)
-        await service.create_media(MediaCreate(
-            customer_id=customer_id,
-            filename=f["filename"],
-            nextcloud_path=f["path"],
-            mime_type=f.get("mime_type") or "application/octet-stream",
-            direction=direction,
-            tags=[],
-            uploaded_by="nextcloud-sync",
-        ))
-        synced += 1
-
-    return {"synced": synced, "skipped": skipped}
-
-
-@router.post("/generate-thumbs")
-async def generate_thumbs(
-    customer_id: str = Form(...),
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    """
-    Scan all customer files in Nextcloud and generate thumbnails for any file
-    that doesn't already have one in the corresponding .thumbs/ sub-folder.
-    Skips files inside .thumbs/ itself and file types that can't be thumbnailed.
-    Returns counts of generated, skipped (already exists), and failed files.
-    """
-    customer = service.get_customer(customer_id)
-    nc_path = service.get_customer_nc_path(customer)
-    base = f"customers/{nc_path}"
-
-    all_nc_files = await nextcloud.list_folder_recursive(base)
-
-    # Build a set of existing thumb paths for O(1) lookup
-    existing_thumbs = {
-        f["path"] for f in all_nc_files if "/.thumbs/" in f["path"]
-    }
-
-    # Only process real files (not thumbs themselves)
-    candidates = [f for f in all_nc_files if "/.thumbs/" not in f["path"]]
-
-    generated = 0
-    skipped = 0
-    failed = 0
-
-    for f in candidates:
-        # Derive where the thumb would live
-        path = f["path"]  # e.g. customers/{nc_path}/{subfolder}/photo.jpg
-        parts = path.rsplit("/", 1)
-        if len(parts) != 2:
-            skipped += 1
-            continue
-        parent_folder, filename = parts
-        stem = filename.rsplit(".", 1)[0] if "." in filename else filename
-        thumb_filename = f"{stem}.jpg"
-        thumb_nc_path = f"{parent_folder}/.thumbs/{thumb_filename}"
-
-        if thumb_nc_path in existing_thumbs:
-            skipped += 1
-            continue
-
-        # Download the file, generate thumb, upload
-        try:
-            content, mime_type = await nextcloud.download_file(path)
-            thumb_bytes = generate_thumbnail(content, mime_type, filename)
-            if not thumb_bytes:
-                skipped += 1  # unsupported file type
-                continue
-            thumb_folder = f"{parent_folder}/.thumbs"
-            await nextcloud.ensure_folder(thumb_folder)
-            await nextcloud.upload_file(thumb_nc_path, thumb_bytes, "image/jpeg")
-            generated += 1
-        except Exception as e:
-            import logging
-            logging.getLogger(__name__).warning("Thumb gen failed for %s: %s", path, e)
-            failed += 1
-
-    return {"generated": generated, "skipped": skipped, "failed": failed}
-
-
-@router.post("/clear-thumbs")
-async def clear_thumbs(
-    customer_id: str = Form(...),
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    """
-    Delete all .thumbs sub-folders for a customer across all subfolders.
-    This lets you regenerate thumbnails from scratch.
-    Returns count of .thumbs folders deleted.
-    """
-    customer = service.get_customer(customer_id)
-    nc_path = service.get_customer_nc_path(customer)
-    base = f"customers/{nc_path}"
-
-    all_nc_files = await nextcloud.list_folder_recursive(base)
-
-    # Collect unique .thumbs folder paths
-    thumb_folders = set()
-    for f in all_nc_files:
-        if "/.thumbs/" in f["path"]:
-            folder = f["path"].split("/.thumbs/")[0] + "/.thumbs"
-            thumb_folders.add(folder)
-
-    deleted = 0
-    for folder in thumb_folders:
-        try:
-            await nextcloud.delete_file(folder)
-            deleted += 1
-        except Exception as e:
-            import logging
-            logging.getLogger(__name__).warning("Failed to delete .thumbs folder %s: %s", folder, e)
-
-    return {"deleted_folders": deleted}
-
-
-@router.post("/untrack-deleted")
-async def untrack_deleted_files(
-    customer_id: str = Form(...),
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    """
-    Remove DB records for files that no longer exist in Nextcloud.
-    Returns count of untracked records.
-    """
-    customer = service.get_customer(customer_id)
-    nc_path = service.get_customer_nc_path(customer)
-    base = f"customers/{nc_path}"
-
-    # Collect all NC file paths recursively (excluding thumbs and info stub)
-    all_nc_files = await nextcloud.list_folder_recursive(base)
-    nc_paths = {
-        item["path"] for item in all_nc_files
-        if "/.thumbs/" not in item["path"] and not item["path"].endswith("/_info.txt")
-    }
-
-    # Find DB records whose NC path no longer exists, OR that are internal files
-    # (_info.txt / .thumbs/) which should never have been tracked in the first place.
-    existing = await service.list_media(customer_id=customer_id)
-    untracked = 0
-    for m in existing:
-        is_internal = m.nextcloud_path and (
-            "/.thumbs/" in m.nextcloud_path or m.nextcloud_path.endswith("/_info.txt")
-        )
-        if m.nextcloud_path and (is_internal or m.nextcloud_path not in nc_paths):
-            try:
-                await service.delete_media(m.id)
-                untracked += 1
-            except Exception:
-                pass
-
-    return {"untracked": untracked}

backend/crm/orders_router.py

@@ -1,151 +0,0 @@
-from fastapi import APIRouter, Depends, Query
-from typing import Optional
-
-from auth.models import TokenPayload
-from auth.dependencies import require_permission
-from crm.models import OrderCreate, OrderUpdate, OrderInDB, OrderListResponse
-from crm import service
-
-router = APIRouter(prefix="/api/crm/customers/{customer_id}/orders", tags=["crm-orders"])
-
-
-@router.get("", response_model=OrderListResponse)
-def list_orders(
-    customer_id: str,
-    _user: TokenPayload = Depends(require_permission("crm", "view")),
-):
-    orders = service.list_orders(customer_id)
-    return OrderListResponse(orders=orders, total=len(orders))
-
-
-# IMPORTANT: specific sub-paths must come before /{order_id}
-@router.get("/next-order-number")
-def get_next_order_number(
-    customer_id: str,
-    _user: TokenPayload = Depends(require_permission("crm", "view")),
-):
-    """Return the next globally unique order number (ORD-DDMMYY-NNN across all customers)."""
-    return {"order_number": service._generate_order_number(customer_id)}
-
-
-@router.post("/init-negotiations", response_model=OrderInDB, status_code=201)
-def init_negotiations(
-    customer_id: str,
-    body: dict,
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    return service.init_negotiations(
-        customer_id=customer_id,
-        title=body.get("title", ""),
-        note=body.get("note", ""),
-        date=body.get("date"),
-        created_by=body.get("created_by", ""),
-    )
-
-
-@router.post("", response_model=OrderInDB, status_code=201)
-def create_order(
-    customer_id: str,
-    body: OrderCreate,
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    return service.create_order(customer_id, body)
-
-
-@router.get("/{order_id}", response_model=OrderInDB)
-def get_order(
-    customer_id: str,
-    order_id: str,
-    _user: TokenPayload = Depends(require_permission("crm", "view")),
-):
-    return service.get_order(customer_id, order_id)
-
-
-@router.patch("/{order_id}", response_model=OrderInDB)
-def update_order(
-    customer_id: str,
-    order_id: str,
-    body: OrderUpdate,
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    return service.update_order(customer_id, order_id, body)
-
-
-@router.delete("/{order_id}", status_code=204)
-def delete_order(
-    customer_id: str,
-    order_id: str,
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    service.delete_order(customer_id, order_id)
-
-
-@router.post("/{order_id}/timeline", response_model=OrderInDB)
-def append_timeline_event(
-    customer_id: str,
-    order_id: str,
-    body: dict,
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    return service.append_timeline_event(customer_id, order_id, body)
-
-
-@router.patch("/{order_id}/timeline/{index}", response_model=OrderInDB)
-def update_timeline_event(
-    customer_id: str,
-    order_id: str,
-    index: int,
-    body: dict,
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    return service.update_timeline_event(customer_id, order_id, index, body)
-
-
-@router.delete("/{order_id}/timeline/{index}", response_model=OrderInDB)
-def delete_timeline_event(
-    customer_id: str,
-    order_id: str,
-    index: int,
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    return service.delete_timeline_event(customer_id, order_id, index)
-
-
-@router.patch("/{order_id}/payment-status", response_model=OrderInDB)
-def update_payment_status(
-    customer_id: str,
-    order_id: str,
-    body: dict,
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    return service.update_order_payment_status(customer_id, order_id, body)
-
-
-# ── Global order list (collection group) ─────────────────────────────────────
-# Separate router registered at /api/crm/orders for the global OrderList page
-
-global_router = APIRouter(prefix="/api/crm/orders", tags=["crm-orders-global"])
-
-
-@global_router.get("")
-def list_all_orders(
-    status: Optional[str] = Query(None),
-    _user: TokenPayload = Depends(require_permission("crm", "view")),
-):
-    orders = service.list_all_orders(status=status)
-    # Enrich with customer names
-    customer_ids = list({o.customer_id for o in orders if o.customer_id})
-    customer_names: dict[str, str] = {}
-    for cid in customer_ids:
-        try:
-            c = service.get_customer(cid)
-            parts = [c.name, c.organization] if c.organization else [c.name]
-            customer_names[cid] = " / ".join(filter(None, parts))
-        except Exception:
-            pass
-    enriched = []
-    for o in orders:
-        d = o.model_dump()
-        d["customer_name"] = customer_names.get(o.customer_id)
-        enriched.append(d)
-    return {"orders": enriched, "total": len(enriched)}

backend/crm/quotation_models.py

@@ -1,158 +0,0 @@
-from enum import Enum
-from typing import Any, Dict, List, Optional
-from pydantic import BaseModel
-
-
-class QuotationStatus(str, Enum):
-    draft = "draft"
-    sent = "sent"
-    accepted = "accepted"
-    rejected = "rejected"
-
-
-class QuotationItemCreate(BaseModel):
-    product_id: Optional[str] = None
-    description: Optional[str] = None
-    description_en: Optional[str] = None
-    description_gr: Optional[str] = None
-    unit_type: str = "pcs"  # pcs / kg / m
-    unit_cost: float = 0.0
-    discount_percent: float = 0.0
-    quantity: float = 1.0
-    vat_percent: float = 24.0
-    sort_order: int = 0
-
-
-class QuotationItemInDB(QuotationItemCreate):
-    id: str
-    quotation_id: str
-    line_total: float = 0.0
-
-
-class QuotationCreate(BaseModel):
-    customer_id: str
-    title: Optional[str] = None
-    subtitle: Optional[str] = None
-    language: str = "en"  # en / gr
-    order_type: Optional[str] = None
-    shipping_method: Optional[str] = None
-    estimated_shipping_date: Optional[str] = None
-    global_discount_label: Optional[str] = None
-    global_discount_percent: float = 0.0
-    shipping_cost: float = 0.0
-    shipping_cost_discount: float = 0.0
-    install_cost: float = 0.0
-    install_cost_discount: float = 0.0
-    extras_label: Optional[str] = None
-    extras_cost: float = 0.0
-    comments: List[str] = []
-    quick_notes: Optional[Dict[str, Any]] = None
-    items: List[QuotationItemCreate] = []
-    # Client override fields (for this quotation only; customer record is not modified)
-    client_org: Optional[str] = None
-    client_name: Optional[str] = None
-    client_location: Optional[str] = None
-    client_phone: Optional[str] = None
-    client_email: Optional[str] = None
-    # Legacy quotation fields
-    is_legacy: bool = False
-    legacy_date: Optional[str] = None  # ISO date string, manually set
-    legacy_pdf_path: Optional[str] = None  # Nextcloud path to uploaded PDF
-
-
-class QuotationUpdate(BaseModel):
-    title: Optional[str] = None
-    subtitle: Optional[str] = None
-    language: Optional[str] = None
-    status: Optional[QuotationStatus] = None
-    order_type: Optional[str] = None
-    shipping_method: Optional[str] = None
-    estimated_shipping_date: Optional[str] = None
-    global_discount_label: Optional[str] = None
-    global_discount_percent: Optional[float] = None
-    shipping_cost: Optional[float] = None
-    shipping_cost_discount: Optional[float] = None
-    install_cost: Optional[float] = None
-    install_cost_discount: Optional[float] = None
-    extras_label: Optional[str] = None
-    extras_cost: Optional[float] = None
-    comments: Optional[List[str]] = None
-    quick_notes: Optional[Dict[str, Any]] = None
-    items: Optional[List[QuotationItemCreate]] = None
-    # Client override fields
-    client_org: Optional[str] = None
-    client_name: Optional[str] = None
-    client_location: Optional[str] = None
-    client_phone: Optional[str] = None
-    client_email: Optional[str] = None
-    # Legacy quotation fields
-    is_legacy: Optional[bool] = None
-    legacy_date: Optional[str] = None
-    legacy_pdf_path: Optional[str] = None
-
-
-class QuotationInDB(BaseModel):
-    id: str
-    quotation_number: str
-    customer_id: str
-    title: Optional[str] = None
-    subtitle: Optional[str] = None
-    language: str = "en"
-    status: QuotationStatus = QuotationStatus.draft
-    order_type: Optional[str] = None
-    shipping_method: Optional[str] = None
-    estimated_shipping_date: Optional[str] = None
-    global_discount_label: Optional[str] = None
-    global_discount_percent: float = 0.0
-    shipping_cost: float = 0.0
-    shipping_cost_discount: float = 0.0
-    install_cost: float = 0.0
-    install_cost_discount: float = 0.0
-    extras_label: Optional[str] = None
-    extras_cost: float = 0.0
-    comments: List[str] = []
-    quick_notes: Dict[str, Any] = {}
-    subtotal_before_discount: float = 0.0
-    global_discount_amount: float = 0.0
-    new_subtotal: float = 0.0
-    vat_amount: float = 0.0
-    final_total: float = 0.0
-    nextcloud_pdf_path: Optional[str] = None
-    nextcloud_pdf_url: Optional[str] = None
-    created_at: str
-    updated_at: str
-    items: List[QuotationItemInDB] = []
-    # Client override fields
-    client_org: Optional[str] = None
-    client_name: Optional[str] = None
-    client_location: Optional[str] = None
-    client_phone: Optional[str] = None
-    client_email: Optional[str] = None
-    # Legacy quotation fields
-    is_legacy: bool = False
-    legacy_date: Optional[str] = None
-    legacy_pdf_path: Optional[str] = None
-
-
-class QuotationListItem(BaseModel):
-    id: str
-    quotation_number: str
-    title: Optional[str] = None
-    customer_id: str
-    status: QuotationStatus
-    final_total: float
-    created_at: str
-    updated_at: str
-    nextcloud_pdf_url: Optional[str] = None
-    is_legacy: bool = False
-    legacy_date: Optional[str] = None
-    legacy_pdf_path: Optional[str] = None
-
-
-class QuotationListResponse(BaseModel):
-    quotations: List[QuotationListItem]
-    total: int
-
-
-class NextNumberResponse(BaseModel):
-    next_number: str

backend/crm/quotations_router.py

@@ -1,121 +0,0 @@
-from fastapi import APIRouter, Depends, Query, UploadFile, File
-from fastapi.responses import StreamingResponse
-from typing import Optional
-import io
-
-from auth.dependencies import require_permission
-from auth.models import TokenPayload
-from crm.quotation_models import (
-    NextNumberResponse,
-    QuotationCreate,
-    QuotationInDB,
-    QuotationListResponse,
-    QuotationUpdate,
-)
-from crm import quotations_service as svc
-
-router = APIRouter(prefix="/api/crm/quotations", tags=["crm-quotations"])
-
-
-# IMPORTANT: Static paths must come BEFORE /{id} to avoid route collision in FastAPI
-
-@router.get("/next-number", response_model=NextNumberResponse)
-async def get_next_number(
-    _user: TokenPayload = Depends(require_permission("crm", "view")),
-):
-    """Returns the next available quotation number (preview only — does not commit)."""
-    next_num = await svc.get_next_number()
-    return NextNumberResponse(next_number=next_num)
-
-
-@router.get("/all", response_model=list[dict])
-async def list_all_quotations(
-    _user: TokenPayload = Depends(require_permission("crm", "view")),
-):
-    """Returns all quotations across all customers, each including customer_name."""
-    return await svc.list_all_quotations()
-
-
-@router.get("/customer/{customer_id}", response_model=QuotationListResponse)
-async def list_quotations_for_customer(
-    customer_id: str,
-    _user: TokenPayload = Depends(require_permission("crm", "view")),
-):
-    quotations = await svc.list_quotations(customer_id)
-    return QuotationListResponse(quotations=quotations, total=len(quotations))
-
-
-@router.get("/{quotation_id}/pdf")
-async def proxy_quotation_pdf(
-    quotation_id: str,
-    _user: TokenPayload = Depends(require_permission("crm", "view")),
-):
-    """Proxy the quotation PDF from Nextcloud to bypass browser cookie restrictions."""
-    pdf_bytes = await svc.get_quotation_pdf_bytes(quotation_id)
-    return StreamingResponse(
-        io.BytesIO(pdf_bytes),
-        media_type="application/pdf",
-        headers={"Content-Disposition": "inline"},
-    )
-
-
-@router.get("/{quotation_id}", response_model=QuotationInDB)
-async def get_quotation(
-    quotation_id: str,
-    _user: TokenPayload = Depends(require_permission("crm", "view")),
-):
-    return await svc.get_quotation(quotation_id)
-
-
-@router.post("", response_model=QuotationInDB, status_code=201)
-async def create_quotation(
-    body: QuotationCreate,
-    generate_pdf: bool = Query(False),
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    """
-    Create a quotation. Pass ?generate_pdf=true to immediately generate and upload the PDF.
-    """
-    return await svc.create_quotation(body, generate_pdf=generate_pdf)
-
-
-@router.put("/{quotation_id}", response_model=QuotationInDB)
-async def update_quotation(
-    quotation_id: str,
-    body: QuotationUpdate,
-    generate_pdf: bool = Query(False),
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    """
-    Update a quotation. Pass ?generate_pdf=true to regenerate the PDF.
-    """
-    return await svc.update_quotation(quotation_id, body, generate_pdf=generate_pdf)
-
-
-@router.delete("/{quotation_id}", status_code=204)
-async def delete_quotation(
-    quotation_id: str,
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    await svc.delete_quotation(quotation_id)
-
-
-@router.post("/{quotation_id}/regenerate-pdf", response_model=QuotationInDB)
-async def regenerate_pdf(
-    quotation_id: str,
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    """Force PDF regeneration and re-upload to Nextcloud."""
-    return await svc.regenerate_pdf(quotation_id)
-
-
-@router.post("/{quotation_id}/legacy-pdf", response_model=QuotationInDB)
-async def upload_legacy_pdf(
-    quotation_id: str,
-    file: UploadFile = File(...),
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    """Upload a PDF file for a legacy quotation and store its Nextcloud path."""
-    pdf_bytes = await file.read()
-    filename = file.filename or f"legacy-{quotation_id}.pdf"
-    return await svc.upload_legacy_pdf(quotation_id, pdf_bytes, filename)

backend/crm/quotations_service.py

@@ -1,558 +0,0 @@
-import json
-import logging
-import os
-import uuid
-from datetime import datetime
-from decimal import Decimal, ROUND_HALF_UP
-from pathlib import Path
-from typing import Optional
-
-from fastapi import HTTPException
-
-from crm import nextcloud
-from crm.quotation_models import (
-    QuotationCreate,
-    QuotationInDB,
-    QuotationItemCreate,
-    QuotationItemInDB,
-    QuotationListItem,
-    QuotationUpdate,
-)
-from crm.service import get_customer
-import database as mqtt_db
-
-logger = logging.getLogger(__name__)
-
-# Path to Jinja2 templates directory (relative to this file)
-_TEMPLATES_DIR = Path(__file__).parent.parent / "templates"
-
-
-# ── Helpers ───────────────────────────────────────────────────────────────────
-
-def _d(value) -> Decimal:
-    """Convert to Decimal safely."""
-    return Decimal(str(value if value is not None else 0))
-
-
-def _float(d: Decimal) -> float:
-    """Round Decimal to 2dp and return as float for storage."""
-    return float(d.quantize(Decimal("0.01"), rounding=ROUND_HALF_UP))
-
-
-def _calculate_totals(
-    items: list,
-    global_discount_percent: float,
-    shipping_cost: float,
-    shipping_cost_discount: float,
-    install_cost: float,
-    install_cost_discount: float,
-    extras_cost: float,
-) -> dict:
-    """
-    Calculate all monetary totals using Decimal arithmetic (ROUND_HALF_UP).
-    VAT is computed per-item from each item's vat_percent field.
-    Shipping and install costs carry 0% VAT.
-    Returns a dict of floats ready for DB storage.
-    """
-    # Per-line totals and per-item VAT
-    item_totals = []
-    item_vat = Decimal(0)
-    for item in items:
-        cost = _d(item.get("unit_cost", 0))
-        qty = _d(item.get("quantity", 1))
-        disc = _d(item.get("discount_percent", 0))
-        net = cost * qty * (1 - disc / 100)
-        item_totals.append(net)
-        vat_pct = _d(item.get("vat_percent", 24))
-        item_vat += net * (vat_pct / 100)
-
-    # Shipping net (VAT = 0%)
-    ship_gross = _d(shipping_cost)
-    ship_disc = _d(shipping_cost_discount)
-    ship_net = ship_gross * (1 - ship_disc / 100)
-
-    # Install net (VAT = 0%)
-    install_gross = _d(install_cost)
-    install_disc = _d(install_cost_discount)
-    install_net = install_gross * (1 - install_disc / 100)
-
-    subtotal = sum(item_totals, Decimal(0)) + ship_net + install_net
-
-    global_disc_pct = _d(global_discount_percent)
-    global_disc_amount = subtotal * (global_disc_pct / 100)
-    new_subtotal = subtotal - global_disc_amount
-
-    # Global discount proportionally reduces VAT too
-    if subtotal > 0:
-        disc_ratio = new_subtotal / subtotal
-        vat_amount = item_vat * disc_ratio
-    else:
-        vat_amount = Decimal(0)
-
-    extras = _d(extras_cost)
-    final_total = new_subtotal + vat_amount + extras
-
-    return {
-        "subtotal_before_discount": _float(subtotal),
-        "global_discount_amount": _float(global_disc_amount),
-        "new_subtotal": _float(new_subtotal),
-        "vat_amount": _float(vat_amount),
-        "final_total": _float(final_total),
-    }
-
-
-def _calc_line_total(item) -> float:
-    cost = _d(item.get("unit_cost", 0))
-    qty = _d(item.get("quantity", 1))
-    disc = _d(item.get("discount_percent", 0))
-    return _float(cost * qty * (1 - disc / 100))
-
-
-async def _generate_quotation_number(db) -> str:
-    year = datetime.utcnow().year
-    prefix = f"QT-{year}-"
-    rows = await db.execute_fetchall(
-        "SELECT quotation_number FROM crm_quotations WHERE quotation_number LIKE ? ORDER BY quotation_number DESC LIMIT 1",
-        (f"{prefix}%",),
-    )
-    if rows:
-        last_num = rows[0][0]  # e.g. "QT-2026-012"
-        try:
-            seq = int(last_num[len(prefix):]) + 1
-        except ValueError:
-            seq = 1
-    else:
-        seq = 1
-    return f"{prefix}{seq:03d}"
-
-
-def _row_to_quotation(row: dict, items: list[dict]) -> QuotationInDB:
-    row = dict(row)
-    row["comments"] = json.loads(row.get("comments") or "[]")
-    row["quick_notes"] = json.loads(row.get("quick_notes") or "{}")
-    item_models = [QuotationItemInDB(**{k: v for k, v in i.items() if k in QuotationItemInDB.model_fields}) for i in items]
-    return QuotationInDB(**{k: v for k, v in row.items() if k in QuotationInDB.model_fields}, items=item_models)
-
-
-def _row_to_list_item(row: dict) -> QuotationListItem:
-    return QuotationListItem(**{k: v for k, v in dict(row).items() if k in QuotationListItem.model_fields})
-
-
-async def _fetch_items(db, quotation_id: str) -> list[dict]:
-    rows = await db.execute_fetchall(
-        "SELECT * FROM crm_quotation_items WHERE quotation_id = ? ORDER BY sort_order ASC",
-        (quotation_id,),
-    )
-    return [dict(r) for r in rows]
-
-
-# ── Public API ────────────────────────────────────────────────────────────────
-
-async def get_next_number() -> str:
-    db = await mqtt_db.get_db()
-    return await _generate_quotation_number(db)
-
-
-async def list_all_quotations() -> list[dict]:
-    """Return all quotations across all customers, with customer_name injected."""
-    from shared.firebase import get_db as get_firestore
-    db = await mqtt_db.get_db()
-    rows = await db.execute_fetchall(
-        "SELECT id, quotation_number, title, customer_id, status, final_total, created_at, updated_at, "
-        "nextcloud_pdf_url, is_legacy, legacy_date, legacy_pdf_path "
-        "FROM crm_quotations ORDER BY created_at DESC",
-        (),
-    )
-    items = [dict(r) for r in rows]
-    # Fetch unique customer names from Firestore in one pass
-    customer_ids = {i["customer_id"] for i in items if i.get("customer_id")}
-    customer_names: dict[str, str] = {}
-    if customer_ids:
-        fstore = get_firestore()
-        for cid in customer_ids:
-            try:
-                doc = fstore.collection("crm_customers").document(cid).get()
-                if doc.exists:
-                    d = doc.to_dict()
-                    parts = [d.get("name", ""), d.get("surname", ""), d.get("organization", "")]
-                    label = " ".join(p for p in parts if p).strip()
-                    customer_names[cid] = label or cid
-            except Exception:
-                customer_names[cid] = cid
-    for item in items:
-        item["customer_name"] = customer_names.get(item["customer_id"], "")
-    return items
-
-
-async def list_quotations(customer_id: str) -> list[QuotationListItem]:
-    db = await mqtt_db.get_db()
-    rows = await db.execute_fetchall(
-        "SELECT id, quotation_number, title, customer_id, status, final_total, created_at, updated_at, "
-        "nextcloud_pdf_url, is_legacy, legacy_date, legacy_pdf_path "
-        "FROM crm_quotations WHERE customer_id = ? ORDER BY created_at DESC",
-        (customer_id,),
-    )
-    return [_row_to_list_item(dict(r)) for r in rows]
-
-
-async def get_quotation(quotation_id: str) -> QuotationInDB:
-    db = await mqtt_db.get_db()
-    rows = await db.execute_fetchall(
-        "SELECT * FROM crm_quotations WHERE id = ?", (quotation_id,)
-    )
-    if not rows:
-        raise HTTPException(status_code=404, detail="Quotation not found")
-    items = await _fetch_items(db, quotation_id)
-    return _row_to_quotation(dict(rows[0]), items)
-
-
-async def create_quotation(data: QuotationCreate, generate_pdf: bool = False) -> QuotationInDB:
-    db = await mqtt_db.get_db()
-    now = datetime.utcnow().isoformat()
-    qid = str(uuid.uuid4())
-    quotation_number = await _generate_quotation_number(db)
-
-    # Build items list for calculation
-    items_raw = [item.model_dump() for item in data.items]
-
-    # Calculate per-item line totals
-    for item in items_raw:
-        item["line_total"] = _calc_line_total(item)
-
-    totals = _calculate_totals(
-        items_raw,
-        data.global_discount_percent,
-        data.shipping_cost,
-        data.shipping_cost_discount,
-        data.install_cost,
-        data.install_cost_discount,
-        data.extras_cost,
-    )
-
-    comments_json = json.dumps(data.comments)
-    quick_notes_json = json.dumps(data.quick_notes or {})
-
-    await db.execute(
-        """INSERT INTO crm_quotations (
-            id, quotation_number, title, subtitle, customer_id,
-            language, status, order_type, shipping_method, estimated_shipping_date,
-            global_discount_label, global_discount_percent,
-            shipping_cost, shipping_cost_discount, install_cost, install_cost_discount,
-            extras_label, extras_cost, comments, quick_notes,
-            subtotal_before_discount, global_discount_amount, new_subtotal, vat_amount, final_total,
-            nextcloud_pdf_path, nextcloud_pdf_url,
-            client_org, client_name, client_location, client_phone, client_email,
-            is_legacy, legacy_date, legacy_pdf_path,
-            created_at, updated_at
-        ) VALUES (
-            ?, ?, ?, ?, ?,
-            ?, 'draft', ?, ?, ?,
-            ?, ?,
-            ?, ?, ?, ?,
-            ?, ?, ?, ?,
-            ?, ?, ?, ?, ?,
-            NULL, NULL,
-            ?, ?, ?, ?, ?,
-            ?, ?, ?,
-            ?, ?
-        )""",
-        (
-            qid, quotation_number, data.title, data.subtitle, data.customer_id,
-            data.language, data.order_type, data.shipping_method, data.estimated_shipping_date,
-            data.global_discount_label, data.global_discount_percent,
-            data.shipping_cost, data.shipping_cost_discount, data.install_cost, data.install_cost_discount,
-            data.extras_label, data.extras_cost, comments_json, quick_notes_json,
-            totals["subtotal_before_discount"], totals["global_discount_amount"],
-            totals["new_subtotal"], totals["vat_amount"], totals["final_total"],
-            data.client_org, data.client_name, data.client_location, data.client_phone, data.client_email,
-            1 if data.is_legacy else 0, data.legacy_date, data.legacy_pdf_path,
-            now, now,
-        ),
-    )
-
-    # Insert items
-    for i, item in enumerate(items_raw):
-        item_id = str(uuid.uuid4())
-        await db.execute(
-            """INSERT INTO crm_quotation_items
-               (id, quotation_id, product_id, description, description_en, description_gr,
-                unit_type, unit_cost, discount_percent, quantity, vat_percent, line_total, sort_order)
-               VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)""",
-            (
-                item_id, qid, item.get("product_id"), item.get("description"),
-                item.get("description_en"), item.get("description_gr"),
-                item.get("unit_type", "pcs"), item.get("unit_cost", 0),
-                item.get("discount_percent", 0), item.get("quantity", 1),
-                item.get("vat_percent", 24), item["line_total"], item.get("sort_order", i),
-            ),
-        )
-
-    await db.commit()
-
-    quotation = await get_quotation(qid)
-
-    if generate_pdf and not data.is_legacy:
-        quotation = await _do_generate_and_upload_pdf(quotation)
-
-    return quotation
-
-
-async def update_quotation(quotation_id: str, data: QuotationUpdate, generate_pdf: bool = False) -> QuotationInDB:
-    db = await mqtt_db.get_db()
-    rows = await db.execute_fetchall(
-        "SELECT * FROM crm_quotations WHERE id = ?", (quotation_id,)
-    )
-    if not rows:
-        raise HTTPException(status_code=404, detail="Quotation not found")
-
-    existing = dict(rows[0])
-    now = datetime.utcnow().isoformat()
-
-    # Merge update into existing values
-    update_fields = data.model_dump(exclude_none=True)
-
-    # Build SET clause — handle comments JSON separately
-    set_parts = []
-    params = []
-
-    scalar_fields = [
-        "title", "subtitle", "language", "status", "order_type", "shipping_method",
-        "estimated_shipping_date", "global_discount_label", "global_discount_percent",
-        "shipping_cost", "shipping_cost_discount", "install_cost",
-        "install_cost_discount", "extras_label", "extras_cost",
-        "client_org", "client_name", "client_location", "client_phone", "client_email",
-        "legacy_date", "legacy_pdf_path",
-    ]
-
-    for field in scalar_fields:
-        if field in update_fields:
-            set_parts.append(f"{field} = ?")
-            params.append(update_fields[field])
-
-    if "comments" in update_fields:
-        set_parts.append("comments = ?")
-        params.append(json.dumps(update_fields["comments"]))
-
-    if "quick_notes" in update_fields:
-        set_parts.append("quick_notes = ?")
-        params.append(json.dumps(update_fields["quick_notes"] or {}))
-
-    # Recalculate totals using merged values
-    merged = {**existing, **{k: update_fields.get(k, existing.get(k)) for k in scalar_fields}}
-
-    # If items are being updated, recalculate with new items; otherwise use existing items
-    if "items" in update_fields:
-        items_raw = [item.model_dump() for item in data.items]
-        for item in items_raw:
-            item["line_total"] = _calc_line_total(item)
-    else:
-        existing_items = await _fetch_items(db, quotation_id)
-        items_raw = existing_items
-
-    totals = _calculate_totals(
-        items_raw,
-        float(merged.get("global_discount_percent", 0)),
-        float(merged.get("shipping_cost", 0)),
-        float(merged.get("shipping_cost_discount", 0)),
-        float(merged.get("install_cost", 0)),
-        float(merged.get("install_cost_discount", 0)),
-        float(merged.get("extras_cost", 0)),
-    )
-
-    for field, val in totals.items():
-        set_parts.append(f"{field} = ?")
-        params.append(val)
-
-    set_parts.append("updated_at = ?")
-    params.append(now)
-    params.append(quotation_id)
-
-    if set_parts:
-        await db.execute(
-            f"UPDATE crm_quotations SET {', '.join(set_parts)} WHERE id = ?",
-            params,
-        )
-
-    # Replace items if provided
-    if "items" in update_fields:
-        await db.execute("DELETE FROM crm_quotation_items WHERE quotation_id = ?", (quotation_id,))
-        for i, item in enumerate(items_raw):
-            item_id = str(uuid.uuid4())
-            await db.execute(
-                """INSERT INTO crm_quotation_items
-                   (id, quotation_id, product_id, description, description_en, description_gr,
-                    unit_type, unit_cost, discount_percent, quantity, vat_percent, line_total, sort_order)
-                   VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)""",
-                (
-                    item_id, quotation_id, item.get("product_id"), item.get("description"),
-                    item.get("description_en"), item.get("description_gr"),
-                    item.get("unit_type", "pcs"), item.get("unit_cost", 0),
-                    item.get("discount_percent", 0), item.get("quantity", 1),
-                    item.get("vat_percent", 24), item["line_total"], item.get("sort_order", i),
-                ),
-            )
-
-    await db.commit()
-
-    quotation = await get_quotation(quotation_id)
-
-    if generate_pdf:
-        quotation = await _do_generate_and_upload_pdf(quotation)
-
-    return quotation
-
-
-async def delete_quotation(quotation_id: str) -> None:
-    db = await mqtt_db.get_db()
-    rows = await db.execute_fetchall(
-        "SELECT nextcloud_pdf_path FROM crm_quotations WHERE id = ?", (quotation_id,)
-    )
-    if not rows:
-        raise HTTPException(status_code=404, detail="Quotation not found")
-
-    pdf_path = dict(rows[0]).get("nextcloud_pdf_path")
-
-    await db.execute("DELETE FROM crm_quotation_items WHERE quotation_id = ?", (quotation_id,))
-    await db.execute("DELETE FROM crm_quotations WHERE id = ?", (quotation_id,))
-    await db.commit()
-
-    # Remove PDF from Nextcloud (best-effort)
-    if pdf_path:
-        try:
-            await nextcloud.delete_file(pdf_path)
-        except Exception as e:
-            logger.warning("Failed to delete PDF from Nextcloud (%s): %s", pdf_path, e)
-
-
-# ── PDF Generation ─────────────────────────────────────────────────────────────
-
-async def _do_generate_and_upload_pdf(quotation: QuotationInDB) -> QuotationInDB:
-    """Generate PDF, upload to Nextcloud, update DB record. Returns updated quotation."""
-    try:
-        customer = get_customer(quotation.customer_id)
-    except Exception as e:
-        logger.error("Cannot generate PDF — customer not found: %s", e)
-        return quotation
-
-    try:
-        pdf_bytes = await _generate_pdf_bytes(quotation, customer)
-    except Exception as e:
-        logger.error("PDF generation failed for quotation %s: %s", quotation.id, e)
-        return quotation
-
-    # Delete old PDF if present
-    if quotation.nextcloud_pdf_path:
-        try:
-            await nextcloud.delete_file(quotation.nextcloud_pdf_path)
-        except Exception:
-            pass
-
-    try:
-        pdf_path, pdf_url = await _upload_pdf(customer, quotation, pdf_bytes)
-    except Exception as e:
-        logger.error("PDF upload failed for quotation %s: %s", quotation.id, e)
-        return quotation
-
-    # Persist paths
-    db = await mqtt_db.get_db()
-    await db.execute(
-        "UPDATE crm_quotations SET nextcloud_pdf_path = ?, nextcloud_pdf_url = ? WHERE id = ?",
-        (pdf_path, pdf_url, quotation.id),
-    )
-    await db.commit()
-
-    return await get_quotation(quotation.id)
-
-
-async def _generate_pdf_bytes(quotation: QuotationInDB, customer) -> bytes:
-    """Render Jinja2 template and convert to PDF via WeasyPrint."""
-    from jinja2 import Environment, FileSystemLoader, select_autoescape
-    import weasyprint
-
-    env = Environment(
-        loader=FileSystemLoader(str(_TEMPLATES_DIR)),
-        autoescape=select_autoescape(["html"]),
-    )
-
-    def format_money(value):
-        try:
-            f = float(value)
-            # Greek-style: dot thousands separator, comma decimal
-            formatted = f"{f:,.2f}".replace(",", "X").replace(".", ",").replace("X", ".")
-            return f"{formatted} €"
-        except (TypeError, ValueError):
-            return "0,00 €"
-
-    env.filters["format_money"] = format_money
-
-    template = env.get_template("quotation.html")
-
-    html_str = template.render(
-        quotation=quotation,
-        customer=customer,
-        lang=quotation.language,
-    )
-
-    pdf = weasyprint.HTML(string=html_str, base_url=str(_TEMPLATES_DIR)).write_pdf()
-    return pdf
-
-
-async def _upload_pdf(customer, quotation: QuotationInDB, pdf_bytes: bytes) -> tuple[str, str]:
-    """Upload PDF to Nextcloud, return (relative_path, public_url)."""
-    from crm.service import get_customer_nc_path
-    from config import settings
-
-    nc_folder = get_customer_nc_path(customer)
-    date_str = datetime.utcnow().strftime("%Y-%m-%d")
-    filename = f"Quotation-{quotation.quotation_number}-{date_str}.pdf"
-    rel_path = f"customers/{nc_folder}/quotations/{filename}"
-
-    await nextcloud.ensure_folder(f"customers/{nc_folder}/quotations")
-    await nextcloud.upload_file(rel_path, pdf_bytes, "application/pdf")
-
-    # Construct a direct WebDAV download URL
-    from crm.nextcloud import _full_url
-    pdf_url = _full_url(rel_path)
-
-    return rel_path, pdf_url
-
-
-async def regenerate_pdf(quotation_id: str) -> QuotationInDB:
-    quotation = await get_quotation(quotation_id)
-    return await _do_generate_and_upload_pdf(quotation)
-
-
-async def get_quotation_pdf_bytes(quotation_id: str) -> bytes:
-    """Download the PDF for a quotation from Nextcloud and return raw bytes."""
-    from fastapi import HTTPException
-    quotation = await get_quotation(quotation_id)
-    # For legacy quotations, the PDF is at legacy_pdf_path
-    path = quotation.legacy_pdf_path if quotation.is_legacy else quotation.nextcloud_pdf_path
-    if not path:
-        raise HTTPException(status_code=404, detail="No PDF available for this quotation")
-    pdf_bytes, _ = await nextcloud.download_file(path)
-    return pdf_bytes
-
-
-async def upload_legacy_pdf(quotation_id: str, pdf_bytes: bytes, filename: str) -> QuotationInDB:
-    """Upload a legacy PDF to Nextcloud and store its path in the quotation record."""
-    quotation = await get_quotation(quotation_id)
-    if not quotation.is_legacy:
-        raise HTTPException(status_code=400, detail="This quotation is not a legacy quotation")
-
-    from crm.service import get_customer, get_customer_nc_path
-    customer = get_customer(quotation.customer_id)
-    nc_folder = get_customer_nc_path(customer)
-
-    await nextcloud.ensure_folder(f"customers/{nc_folder}/quotations")
-    rel_path = f"customers/{nc_folder}/quotations/{filename}"
-    await nextcloud.upload_file(rel_path, pdf_bytes, "application/pdf")
-
-    db = await mqtt_db.get_db()
-    now = datetime.utcnow().isoformat()
-    await db.execute(
-        "UPDATE crm_quotations SET legacy_pdf_path = ?, updated_at = ? WHERE id = ?",
-        (rel_path, now, quotation_id),
-    )
-    await db.commit()
-    return await get_quotation(quotation_id)

backend/crm/router.py

@@ -1,93 +0,0 @@
-from fastapi import APIRouter, Depends, Query, UploadFile, File, HTTPException
-from fastapi.responses import FileResponse
-from typing import Optional
-import os
-import shutil
-
-from auth.models import TokenPayload
-from auth.dependencies import require_permission
-from crm.models import ProductCreate, ProductUpdate, ProductInDB, ProductListResponse
-from crm import service
-
-router = APIRouter(prefix="/api/crm/products", tags=["crm-products"])
-
-PHOTO_DIR = os.path.join(os.path.dirname(__file__), "..", "storage", "product_images")
-os.makedirs(PHOTO_DIR, exist_ok=True)
-
-
-@router.get("", response_model=ProductListResponse)
-def list_products(
-    search: Optional[str] = Query(None),
-    category: Optional[str] = Query(None),
-    active_only: bool = Query(False),
-    _user: TokenPayload = Depends(require_permission("crm", "view")),
-):
-    products = service.list_products(search=search, category=category, active_only=active_only)
-    return ProductListResponse(products=products, total=len(products))
-
-
-@router.get("/{product_id}", response_model=ProductInDB)
-def get_product(
-    product_id: str,
-    _user: TokenPayload = Depends(require_permission("crm", "view")),
-):
-    return service.get_product(product_id)
-
-
-@router.post("", response_model=ProductInDB, status_code=201)
-def create_product(
-    body: ProductCreate,
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    return service.create_product(body)
-
-
-@router.put("/{product_id}", response_model=ProductInDB)
-def update_product(
-    product_id: str,
-    body: ProductUpdate,
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    return service.update_product(product_id, body)
-
-
-@router.delete("/{product_id}", status_code=204)
-def delete_product(
-    product_id: str,
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    service.delete_product(product_id)
-
-
-@router.post("/{product_id}/photo", response_model=ProductInDB)
-async def upload_product_photo(
-    product_id: str,
-    file: UploadFile = File(...),
-    _user: TokenPayload = Depends(require_permission("crm", "edit")),
-):
-    """Upload a product photo. Accepts JPG or PNG, stored on disk."""
-    if file.content_type not in ("image/jpeg", "image/png", "image/webp"):
-        raise HTTPException(status_code=400, detail="Only JPG, PNG, or WebP images are accepted.")
-    ext = {"image/jpeg": "jpg", "image/png": "png", "image/webp": "webp"}.get(file.content_type, "jpg")
-    photo_path = os.path.join(PHOTO_DIR, f"{product_id}.{ext}")
-    # Remove any old photo files for this product
-    for old_ext in ("jpg", "png", "webp"):
-        old_path = os.path.join(PHOTO_DIR, f"{product_id}.{old_ext}")
-        if os.path.exists(old_path) and old_path != photo_path:
-            os.remove(old_path)
-    with open(photo_path, "wb") as f:
-        shutil.copyfileobj(file.file, f)
-    photo_url = f"/crm/products/{product_id}/photo"
-    return service.update_product(product_id, ProductUpdate(photo_url=photo_url))
-
-
-@router.get("/{product_id}/photo")
-def get_product_photo(
-    product_id: str,
-):
-    """Serve a product photo from disk."""
-    for ext in ("jpg", "png", "webp"):
-        photo_path = os.path.join(PHOTO_DIR, f"{product_id}.{ext}")
-        if os.path.exists(photo_path):
-            return FileResponse(photo_path)
-    raise HTTPException(status_code=404, detail="No photo found for this product.")

backend/crm/thumbnails.py

@@ -1,125 +0,0 @@
-"""
-Thumbnail generation for uploaded media files.
-
-Supports:
-  - Images (via Pillow): JPEG thumbnail at 300×300 max
-  - Videos (via ffmpeg subprocess): extract first frame as JPEG
-  - PDFs (via pdf2image + Poppler): render first page as JPEG
-
-Returns None if the type is unsupported or if generation fails.
-"""
-import io
-import logging
-import subprocess
-from pathlib import Path
-
-logger = logging.getLogger(__name__)
-
-THUMB_SIZE = (220, 220)  # small enough for gallery tiles; keeps files ~4-6 KB
-
-
-def _thumb_from_image(content: bytes) -> bytes | None:
-    try:
-        from PIL import Image, ImageOps
-        img = Image.open(io.BytesIO(content))
-        img = ImageOps.exif_transpose(img)  # honour EXIF Orientation tag before resizing
-        img = img.convert("RGB")
-        img.thumbnail(THUMB_SIZE, Image.LANCZOS)
-        out = io.BytesIO()
-        # quality=55 + optimize=True + progressive encoding → ~4-6 KB for typical photos
-        img.save(out, format="JPEG", quality=65, optimize=True, progressive=True)
-        return out.getvalue()
-    except Exception as e:
-        logger.warning("Image thumbnail failed: %s", e)
-        return None
-
-
-def _thumb_from_video(content: bytes) -> bytes | None:
-    """
-    Extract the first frame of a video as a JPEG thumbnail.
-
-    We write the video to a temp file instead of piping it to ffmpeg because
-    most video containers (MP4, MOV, MKV …) store their index (moov atom) at
-    an arbitrary offset and ffmpeg cannot seek on a pipe — causing rc≠0 with
-    "moov atom not found" or similar errors when stdin is used.
-    """
-    import tempfile
-    import os
-    try:
-        # Write to a temp file so ffmpeg can seek freely
-        with tempfile.NamedTemporaryFile(suffix=".video", delete=False) as tmp_in:
-            tmp_in.write(content)
-            tmp_in_path = tmp_in.name
-
-        with tempfile.NamedTemporaryFile(suffix=".jpg", delete=False) as tmp_out:
-            tmp_out_path = tmp_out.name
-
-        try:
-            result = subprocess.run(
-                [
-                    "ffmpeg", "-y",
-                    "-i", tmp_in_path,
-                    "-vframes", "1",
-                    "-vf", f"scale={THUMB_SIZE[0]}:-2",
-                    "-q:v", "4",   # JPEG quality 1-31 (lower = better); 4 ≈ ~80% quality
-                    tmp_out_path,
-                ],
-                capture_output=True,
-                timeout=60,
-            )
-            if result.returncode == 0 and os.path.getsize(tmp_out_path) > 0:
-                with open(tmp_out_path, "rb") as f:
-                    return f.read()
-            logger.warning(
-                "ffmpeg video thumb failed (rc=%s): %s",
-                result.returncode,
-                result.stderr[-400:].decode(errors="replace") if result.stderr else "",
-            )
-            return None
-        finally:
-            os.unlink(tmp_in_path)
-            try:
-                os.unlink(tmp_out_path)
-            except FileNotFoundError:
-                pass
-    except FileNotFoundError:
-        logger.warning("ffmpeg not found — video thumbnails unavailable")
-        return None
-    except Exception as e:
-        logger.warning("Video thumbnail failed: %s", e)
-        return None
-
-
-def _thumb_from_pdf(content: bytes) -> bytes | None:
-    try:
-        from pdf2image import convert_from_bytes
-        pages = convert_from_bytes(content, first_page=1, last_page=1, size=THUMB_SIZE)
-        if not pages:
-            return None
-        out = io.BytesIO()
-        pages[0].save(out, format="JPEG", quality=55, optimize=True, progressive=True)
-        return out.getvalue()
-    except ImportError:
-        logger.warning("pdf2image not installed — PDF thumbnails unavailable")
-        return None
-    except Exception as e:
-        logger.warning("PDF thumbnail failed: %s", e)
-        return None
-
-
-def generate_thumbnail(content: bytes, mime_type: str, filename: str) -> bytes | None:
-    """
-    Generate a small JPEG thumbnail for the given file content.
-    Returns JPEG bytes or None if unsupported / generation fails.
-    """
-    mt = (mime_type or "").lower()
-    fn = (filename or "").lower()
-
-    if mt.startswith("image/"):
-        return _thumb_from_image(content)
-    if mt.startswith("video/"):
-        return _thumb_from_video(content)
-    if mt == "application/pdf" or fn.endswith(".pdf"):
-        return _thumb_from_pdf(content)
-
-    return None

backend/database/__init__.py

@@ -1,39 +0,0 @@
-from database.core import (
-    init_db,
-    close_db,
-    get_db,
-    purge_loop,
-    purge_old_data,
-    insert_log,
-    insert_heartbeat,
-    insert_command,
-    update_command_response,
-    get_logs,
-    get_heartbeats,
-    get_commands,
-    get_latest_heartbeats,
-    get_pending_command,
-    upsert_alert,
-    delete_alert,
-    get_alerts,
-)
-
-__all__ = [
-    "init_db",
-    "close_db",
-    "get_db",
-    "purge_loop",
-    "purge_old_data",
-    "insert_log",
-    "insert_heartbeat",
-    "insert_command",
-    "update_command_response",
-    "get_logs",
-    "get_heartbeats",
-    "get_commands",
-    "get_latest_heartbeats",
-    "get_pending_command",
-    "upsert_alert",
-    "delete_alert",
-    "get_alerts",
-]

backend/database/core.py

@@ -1,454 +0,0 @@
-import aiosqlite
-import asyncio
-import json
-import logging
-import os
-from datetime import datetime, timedelta, timezone
-from config import settings
-
-logger = logging.getLogger("database")
-
-_db: aiosqlite.Connection | None = None
-
-SCHEMA_STATEMENTS = [
-    """CREATE TABLE IF NOT EXISTS device_logs (
-        id INTEGER PRIMARY KEY AUTOINCREMENT,
-        device_serial TEXT NOT NULL,
-        level TEXT NOT NULL,
-        message TEXT NOT NULL,
-        device_timestamp INTEGER,
-        received_at TEXT NOT NULL DEFAULT (datetime('now'))
-    )""",
-    """CREATE TABLE IF NOT EXISTS heartbeats (
-        id INTEGER PRIMARY KEY AUTOINCREMENT,
-        device_serial TEXT NOT NULL,
-        device_id TEXT,
-        firmware_version TEXT,
-        ip_address TEXT,
-        gateway TEXT,
-        uptime_ms INTEGER,
-        uptime_display TEXT,
-        received_at TEXT NOT NULL DEFAULT (datetime('now'))
-    )""",
-    """CREATE TABLE IF NOT EXISTS commands (
-        id INTEGER PRIMARY KEY AUTOINCREMENT,
-        device_serial TEXT NOT NULL,
-        command_name TEXT NOT NULL,
-        command_payload TEXT,
-        status TEXT NOT NULL DEFAULT 'pending',
-        response_payload TEXT,
-        sent_at TEXT NOT NULL DEFAULT (datetime('now')),
-        responded_at TEXT
-    )""",
-    "CREATE INDEX IF NOT EXISTS idx_logs_serial_time ON device_logs(device_serial, received_at)",
-    "CREATE INDEX IF NOT EXISTS idx_logs_level ON device_logs(level)",
-    "CREATE INDEX IF NOT EXISTS idx_heartbeats_serial_time ON heartbeats(device_serial, received_at)",
-    "CREATE INDEX IF NOT EXISTS idx_commands_serial_time ON commands(device_serial, sent_at)",
-    "CREATE INDEX IF NOT EXISTS idx_commands_status ON commands(status)",
-    # Melody drafts table
-    """CREATE TABLE IF NOT EXISTS melody_drafts (
-        id TEXT PRIMARY KEY,
-        status TEXT NOT NULL DEFAULT 'draft',
-        data TEXT NOT NULL,
-        created_at TEXT NOT NULL DEFAULT (datetime('now')),
-        updated_at TEXT NOT NULL DEFAULT (datetime('now'))
-    )""",
-    "CREATE INDEX IF NOT EXISTS idx_melody_drafts_status ON melody_drafts(status)",
-    # Built melodies table (local melody builder)
-    """CREATE TABLE IF NOT EXISTS built_melodies (
-        id TEXT PRIMARY KEY,
-        name TEXT NOT NULL,
-        pid TEXT NOT NULL,
-        steps TEXT NOT NULL,
-        binary_path TEXT,
-        progmem_code TEXT,
-        assigned_melody_ids TEXT NOT NULL DEFAULT '[]',
-        created_at TEXT NOT NULL DEFAULT (datetime('now')),
-        updated_at TEXT NOT NULL DEFAULT (datetime('now'))
-    )""",
-    # Manufacturing audit log
-    """CREATE TABLE IF NOT EXISTS mfg_audit_log (
-        id INTEGER PRIMARY KEY AUTOINCREMENT,
-        timestamp TEXT NOT NULL DEFAULT (datetime('now')),
-        admin_user TEXT NOT NULL,
-        action TEXT NOT NULL,
-        serial_number TEXT,
-        detail TEXT
-    )""",
-    "CREATE INDEX IF NOT EXISTS idx_mfg_audit_time ON mfg_audit_log(timestamp)",
-    "CREATE INDEX IF NOT EXISTS idx_mfg_audit_action ON mfg_audit_log(action)",
-    # Active device alerts (current state, not history)
-    """CREATE TABLE IF NOT EXISTS device_alerts (
-        device_serial TEXT NOT NULL,
-        subsystem     TEXT NOT NULL,
-        state         TEXT NOT NULL,
-        message       TEXT,
-        updated_at    TEXT NOT NULL DEFAULT (datetime('now')),
-        PRIMARY KEY (device_serial, subsystem)
-    )""",
-    "CREATE INDEX IF NOT EXISTS idx_device_alerts_serial ON device_alerts(device_serial)",
-    # CRM communications log
-    """CREATE TABLE IF NOT EXISTS crm_comms_log (
-        id             TEXT PRIMARY KEY,
-        customer_id    TEXT,
-        type           TEXT NOT NULL,
-        mail_account   TEXT,
-        direction      TEXT NOT NULL,
-        subject        TEXT,
-        body           TEXT,
-        body_html      TEXT,
-        attachments    TEXT NOT NULL DEFAULT '[]',
-        ext_message_id TEXT,
-        from_addr      TEXT,
-        to_addrs       TEXT,
-        logged_by      TEXT,
-        occurred_at    TEXT NOT NULL,
-        created_at     TEXT NOT NULL
-    )""",
-    "CREATE INDEX IF NOT EXISTS idx_crm_comms_customer ON crm_comms_log(customer_id, occurred_at)",
-    # CRM media references
-    """CREATE TABLE IF NOT EXISTS crm_media (
-        id             TEXT PRIMARY KEY,
-        customer_id    TEXT,
-        order_id       TEXT,
-        filename       TEXT NOT NULL,
-        nextcloud_path TEXT NOT NULL,
-        mime_type      TEXT,
-        direction      TEXT,
-        tags           TEXT NOT NULL DEFAULT '[]',
-        uploaded_by    TEXT,
-        created_at     TEXT NOT NULL
-    )""",
-    "CREATE INDEX IF NOT EXISTS idx_crm_media_customer ON crm_media(customer_id)",
-    "CREATE INDEX IF NOT EXISTS idx_crm_media_order ON crm_media(order_id)",
-    # CRM sync state (last email sync timestamp, etc.)
-    """CREATE TABLE IF NOT EXISTS crm_sync_state (
-        key   TEXT PRIMARY KEY,
-        value TEXT
-    )""",
-    # CRM Quotations
-    """CREATE TABLE IF NOT EXISTS crm_quotations (
-        id                        TEXT PRIMARY KEY,
-        quotation_number          TEXT UNIQUE NOT NULL,
-        title                     TEXT,
-        subtitle                  TEXT,
-        customer_id               TEXT NOT NULL,
-        language                  TEXT NOT NULL DEFAULT 'en',
-        status                    TEXT NOT NULL DEFAULT 'draft',
-        order_type                TEXT,
-        shipping_method           TEXT,
-        estimated_shipping_date   TEXT,
-        global_discount_label     TEXT,
-        global_discount_percent   REAL NOT NULL DEFAULT 0,
-        vat_percent               REAL NOT NULL DEFAULT 24,
-        shipping_cost             REAL NOT NULL DEFAULT 0,
-        shipping_cost_discount    REAL NOT NULL DEFAULT 0,
-        install_cost              REAL NOT NULL DEFAULT 0,
-        install_cost_discount     REAL NOT NULL DEFAULT 0,
-        extras_label              TEXT,
-        extras_cost               REAL NOT NULL DEFAULT 0,
-        comments                  TEXT NOT NULL DEFAULT '[]',
-        subtotal_before_discount  REAL NOT NULL DEFAULT 0,
-        global_discount_amount    REAL NOT NULL DEFAULT 0,
-        new_subtotal              REAL NOT NULL DEFAULT 0,
-        vat_amount                REAL NOT NULL DEFAULT 0,
-        final_total               REAL NOT NULL DEFAULT 0,
-        nextcloud_pdf_path        TEXT,
-        nextcloud_pdf_url         TEXT,
-        created_at                TEXT NOT NULL,
-        updated_at                TEXT NOT NULL
-    )""",
-    """CREATE TABLE IF NOT EXISTS crm_quotation_items (
-        id               TEXT PRIMARY KEY,
-        quotation_id     TEXT NOT NULL,
-        product_id       TEXT,
-        description      TEXT,
-        description_en   TEXT,
-        description_gr   TEXT,
-        unit_type        TEXT NOT NULL DEFAULT 'pcs',
-        unit_cost        REAL NOT NULL DEFAULT 0,
-        discount_percent REAL NOT NULL DEFAULT 0,
-        quantity         REAL NOT NULL DEFAULT 1,
-        line_total       REAL NOT NULL DEFAULT 0,
-        sort_order       INTEGER NOT NULL DEFAULT 0,
-        FOREIGN KEY (quotation_id) REFERENCES crm_quotations(id)
-    )""",
-    "CREATE INDEX IF NOT EXISTS idx_crm_quotations_customer ON crm_quotations(customer_id)",
-    "CREATE INDEX IF NOT EXISTS idx_crm_quotation_items_quotation ON crm_quotation_items(quotation_id, sort_order)",
-]
-
-
-async def init_db():
-    global _db
-    os.makedirs(os.path.dirname(os.path.abspath(settings.sqlite_db_path)), exist_ok=True)
-    _db = await aiosqlite.connect(settings.sqlite_db_path)
-    _db.row_factory = aiosqlite.Row
-    for stmt in SCHEMA_STATEMENTS:
-        await _db.execute(stmt)
-    await _db.commit()
-    # Migrations: add columns that may not exist in older DBs
-    _migrations = [
-        "ALTER TABLE crm_comms_log ADD COLUMN body_html TEXT",
-        "ALTER TABLE crm_comms_log ADD COLUMN mail_account TEXT",
-        "ALTER TABLE crm_comms_log ADD COLUMN from_addr TEXT",
-        "ALTER TABLE crm_comms_log ADD COLUMN to_addrs TEXT",
-        "ALTER TABLE crm_comms_log ADD COLUMN is_important INTEGER NOT NULL DEFAULT 0",
-        "ALTER TABLE crm_comms_log ADD COLUMN is_read INTEGER NOT NULL DEFAULT 0",
-        "ALTER TABLE crm_quotation_items ADD COLUMN vat_percent REAL NOT NULL DEFAULT 24",
-        "ALTER TABLE crm_quotations ADD COLUMN quick_notes TEXT NOT NULL DEFAULT '{}'",
-        "ALTER TABLE crm_quotations ADD COLUMN client_org TEXT",
-        "ALTER TABLE crm_quotations ADD COLUMN client_name TEXT",
-        "ALTER TABLE crm_quotations ADD COLUMN client_location TEXT",
-        "ALTER TABLE crm_quotations ADD COLUMN client_phone TEXT",
-        "ALTER TABLE crm_quotations ADD COLUMN client_email TEXT",
-        "ALTER TABLE crm_quotations ADD COLUMN is_legacy INTEGER NOT NULL DEFAULT 0",
-        "ALTER TABLE crm_quotations ADD COLUMN legacy_date TEXT",
-        "ALTER TABLE crm_quotations ADD COLUMN legacy_pdf_path TEXT",
-        "ALTER TABLE crm_media ADD COLUMN thumbnail_path TEXT",
-        "ALTER TABLE crm_quotation_items ADD COLUMN description_en TEXT",
-        "ALTER TABLE crm_quotation_items ADD COLUMN description_gr TEXT",
-        "ALTER TABLE built_melodies ADD COLUMN is_builtin INTEGER NOT NULL DEFAULT 0",
-    ]
-    for m in _migrations:
-        try:
-            await _db.execute(m)
-            await _db.commit()
-        except Exception:
-            pass  # column already exists
-
-    # Migration: drop NOT NULL on crm_comms_log.customer_id if it exists.
-    # SQLite doesn't support ALTER COLUMN, so we check via table_info and
-    # rebuild the table if needed.
-    rows = await _db.execute_fetchall("PRAGMA table_info(crm_comms_log)")
-    for row in rows:
-        # row: (cid, name, type, notnull, dflt_value, pk)
-        if row[1] == "customer_id" and row[3] == 1:  # notnull=1
-            logger.info("Migrating crm_comms_log: removing NOT NULL from customer_id")
-            await _db.execute("ALTER TABLE crm_comms_log RENAME TO crm_comms_log_old")
-            await _db.execute("""CREATE TABLE crm_comms_log (
-                id             TEXT PRIMARY KEY,
-                customer_id    TEXT,
-                type           TEXT NOT NULL,
-                mail_account   TEXT,
-                direction      TEXT NOT NULL,
-                subject        TEXT,
-                body           TEXT,
-                body_html      TEXT,
-                attachments    TEXT NOT NULL DEFAULT '[]',
-                ext_message_id TEXT,
-                from_addr      TEXT,
-                to_addrs       TEXT,
-                logged_by      TEXT,
-                occurred_at    TEXT NOT NULL,
-                created_at     TEXT NOT NULL
-            )""")
-            await _db.execute("""INSERT INTO crm_comms_log
-                SELECT id, customer_id, type, NULL, direction, subject, body, body_html,
-                       attachments, ext_message_id, from_addr, to_addrs, logged_by,
-                       occurred_at, created_at
-                FROM crm_comms_log_old""")
-            await _db.execute("DROP TABLE crm_comms_log_old")
-            await _db.execute("CREATE INDEX IF NOT EXISTS idx_crm_comms_customer ON crm_comms_log(customer_id, occurred_at)")
-            await _db.commit()
-            logger.info("Migration complete: crm_comms_log.customer_id is now nullable")
-            break
-    logger.info(f"SQLite database initialized at {settings.sqlite_db_path}")
-
-
-async def close_db():
-    global _db
-    if _db:
-        await _db.close()
-        _db = None
-
-
-async def get_db() -> aiosqlite.Connection:
-    if _db is None:
-        await init_db()
-    return _db
-
-
-# --- Insert Operations ---
-
-async def insert_log(device_serial: str, level: str, message: str,
-                     device_timestamp: int | None = None):
-    db = await get_db()
-    cursor = await db.execute(
-        "INSERT INTO device_logs (device_serial, level, message, device_timestamp) VALUES (?, ?, ?, ?)",
-        (device_serial, level, message, device_timestamp)
-    )
-    await db.commit()
-    return cursor.lastrowid
-
-
-async def insert_heartbeat(device_serial: str, device_id: str,
-                           firmware_version: str, ip_address: str,
-                           gateway: str, uptime_ms: int, uptime_display: str):
-    db = await get_db()
-    cursor = await db.execute(
-        """INSERT INTO heartbeats
-           (device_serial, device_id, firmware_version, ip_address, gateway, uptime_ms, uptime_display)
-           VALUES (?, ?, ?, ?, ?, ?, ?)""",
-        (device_serial, device_id, firmware_version, ip_address, gateway, uptime_ms, uptime_display)
-    )
-    await db.commit()
-    return cursor.lastrowid
-
-
-async def insert_command(device_serial: str, command_name: str,
-                         command_payload: dict) -> int:
-    db = await get_db()
-    cursor = await db.execute(
-        "INSERT INTO commands (device_serial, command_name, command_payload) VALUES (?, ?, ?)",
-        (device_serial, command_name, json.dumps(command_payload))
-    )
-    await db.commit()
-    return cursor.lastrowid
-
-
-async def update_command_response(command_id: int, status: str,
-                                  response_payload: dict | None = None):
-    db = await get_db()
-    await db.execute(
-        """UPDATE commands SET status = ?, response_payload = ?,
-           responded_at = datetime('now') WHERE id = ?""",
-        (status, json.dumps(response_payload) if response_payload else None, command_id)
-    )
-    await db.commit()
-
-
-# --- Query Operations ---
-
-async def get_logs(device_serial: str, level: str | None = None,
-                   search: str | None = None,
-                   limit: int = 100, offset: int = 0) -> tuple[list, int]:
-    db = await get_db()
-    where_clauses = ["device_serial = ?"]
-    params: list = [device_serial]
-
-    if level:
-        where_clauses.append("level = ?")
-        params.append(level)
-    if search:
-        where_clauses.append("message LIKE ?")
-        params.append(f"%{search}%")
-
-    where = " AND ".join(where_clauses)
-
-    count_row = await db.execute_fetchall(
-        f"SELECT COUNT(*) as cnt FROM device_logs WHERE {where}", params
-    )
-    total = count_row[0][0]
-
-    rows = await db.execute_fetchall(
-        f"SELECT * FROM device_logs WHERE {where} ORDER BY received_at DESC LIMIT ? OFFSET ?",
-        params + [limit, offset]
-    )
-    return [dict(r) for r in rows], total
-
-
-async def get_heartbeats(device_serial: str, limit: int = 100,
-                         offset: int = 0) -> tuple[list, int]:
-    db = await get_db()
-    count_row = await db.execute_fetchall(
-        "SELECT COUNT(*) FROM heartbeats WHERE device_serial = ?", (device_serial,)
-    )
-    total = count_row[0][0]
-    rows = await db.execute_fetchall(
-        "SELECT * FROM heartbeats WHERE device_serial = ? ORDER BY received_at DESC LIMIT ? OFFSET ?",
-        (device_serial, limit, offset)
-    )
-    return [dict(r) for r in rows], total
-
-
-async def get_commands(device_serial: str, limit: int = 100,
-                       offset: int = 0) -> tuple[list, int]:
-    db = await get_db()
-    count_row = await db.execute_fetchall(
-        "SELECT COUNT(*) FROM commands WHERE device_serial = ?", (device_serial,)
-    )
-    total = count_row[0][0]
-    rows = await db.execute_fetchall(
-        "SELECT * FROM commands WHERE device_serial = ? ORDER BY sent_at DESC LIMIT ? OFFSET ?",
-        (device_serial, limit, offset)
-    )
-    return [dict(r) for r in rows], total
-
-
-async def get_latest_heartbeats() -> list:
-    db = await get_db()
-    rows = await db.execute_fetchall("""
-        SELECT h.* FROM heartbeats h
-        INNER JOIN (
-            SELECT device_serial, MAX(received_at) as max_time
-            FROM heartbeats GROUP BY device_serial
-        ) latest ON h.device_serial = latest.device_serial
-        AND h.received_at = latest.max_time
-    """)
-    return [dict(r) for r in rows]
-
-
-async def get_pending_command(device_serial: str) -> dict | None:
-    db = await get_db()
-    rows = await db.execute_fetchall(
-        """SELECT * FROM commands WHERE device_serial = ? AND status = 'pending'
-           ORDER BY sent_at DESC LIMIT 1""",
-        (device_serial,)
-    )
-    return dict(rows[0]) if rows else None
-
-
-# --- Cleanup ---
-
-async def purge_old_data(retention_days: int | None = None):
-    days = retention_days or settings.mqtt_data_retention_days
-    cutoff = (datetime.now(timezone.utc) - timedelta(days=days)).isoformat()
-    db = await get_db()
-    await db.execute("DELETE FROM device_logs WHERE received_at < ?", (cutoff,))
-    await db.execute("DELETE FROM heartbeats WHERE received_at < ?", (cutoff,))
-    await db.execute("DELETE FROM commands WHERE sent_at < ?", (cutoff,))
-    await db.commit()
-    logger.info(f"Purged MQTT data older than {days} days")
-
-
-async def purge_loop():
-    while True:
-        await asyncio.sleep(86400)
-        try:
-            await purge_old_data()
-        except Exception as e:
-            logger.error(f"Purge failed: {e}")
-
-
-# --- Device Alerts ---
-
-async def upsert_alert(device_serial: str, subsystem: str, state: str,
-                       message: str | None = None):
-    db = await get_db()
-    await db.execute(
-        """INSERT INTO device_alerts (device_serial, subsystem, state, message, updated_at)
-           VALUES (?, ?, ?, ?, datetime('now'))
-           ON CONFLICT(device_serial, subsystem)
-           DO UPDATE SET state=excluded.state, message=excluded.message,
-                         updated_at=excluded.updated_at""",
-        (device_serial, subsystem, state, message),
-    )
-    await db.commit()
-
-
-async def delete_alert(device_serial: str, subsystem: str):
-    db = await get_db()
-    await db.execute(
-        "DELETE FROM device_alerts WHERE device_serial = ? AND subsystem = ?",
-        (device_serial, subsystem),
-    )
-    await db.commit()
-
-
-async def get_alerts(device_serial: str) -> list:
-    db = await get_db()
-    rows = await db.execute_fetchall(
-        "SELECT * FROM device_alerts WHERE device_serial = ? ORDER BY updated_at DESC",
-        (device_serial,),
-    )
-    return [dict(r) for r in rows]

backend/devices/models.py

@@ -31,11 +31,11 @@ class DeviceTiers(str, Enum):
 class DeviceNetworkSettings(BaseModel):
     hostname: str = ""
     useStaticIP: bool = False
-    ipAddress: Any = []
-    gateway: Any = []
-    subnet: Any = []
-    dns1: Any = []
-    dns2: Any = []
+    ipAddress: List[str] = []
+    gateway: List[str] = []
+    subnet: List[str] = []
+    dns1: List[str] = []
+    dns2: List[str] = []
 
 
 class DeviceClockSettings(BaseModel):
@@ -119,19 +119,13 @@ class DeviceCreate(BaseModel):
     device_subscription: DeviceSubInformation = DeviceSubInformation()
     device_stats: DeviceStatistics = DeviceStatistics()
     events_on: bool = False
-    device_location_coordinates: Any = None  # GeoPoint dict {lat, lng} or legacy str
+    device_location_coordinates: str = ""
     device_melodies_all: List[MelodyMainItem] = []
     device_melodies_favorites: List[str] = []
     user_list: List[str] = []
     websocket_url: str = ""
     churchAssistantURL: str = ""
     staffNotes: str = ""
-    hw_family: str = ""
-    hw_revision: str = ""
-    tags: List[str] = []
-    serial_number: str = ""
-    customer_id: str = ""
-    mfg_status: str = ""
 
 
 class DeviceUpdate(BaseModel):
@@ -144,23 +138,17 @@ class DeviceUpdate(BaseModel):
     device_subscription: Optional[Dict[str, Any]] = None
     device_stats: Optional[Dict[str, Any]] = None
     events_on: Optional[bool] = None
-    device_location_coordinates: Optional[Any] = None  # dict {lat, lng} or legacy str
+    device_location_coordinates: Optional[str] = None
     device_melodies_all: Optional[List[MelodyMainItem]] = None
     device_melodies_favorites: Optional[List[str]] = None
     user_list: Optional[List[str]] = None
     websocket_url: Optional[str] = None
     churchAssistantURL: Optional[str] = None
     staffNotes: Optional[str] = None
-    hw_family: Optional[str] = None
-    hw_revision: Optional[str] = None
-    tags: Optional[List[str]] = None
-    customer_id: Optional[str] = None
-    mfg_status: Optional[str] = None
 
 
 class DeviceInDB(DeviceCreate):
     id: str
-    # Legacy field — kept for backwards compat; new docs use serial_number
     device_id: str = ""
 
 
@@ -169,15 +157,6 @@ class DeviceListResponse(BaseModel):
     total: int
 
 
-class DeviceNoteCreate(BaseModel):
-    content: str
-    created_by: str = ""
-
-
-class DeviceNoteUpdate(BaseModel):
-    content: str
-
-
 class DeviceUserInfo(BaseModel):
     """User info resolved from device_users sub-collection or user_list."""
     user_id: str = ""

backend/devices/router.py

@@ -1,25 +1,15 @@
-import uuid
-from datetime import datetime
-from fastapi import APIRouter, Depends, Query, HTTPException
-from typing import Optional, List
-from pydantic import BaseModel
+from fastapi import APIRouter, Depends, Query
+from typing import Optional
 from auth.models import TokenPayload
 from auth.dependencies import require_permission
 from devices.models import (
     DeviceCreate, DeviceUpdate, DeviceInDB, DeviceListResponse,
     DeviceUsersResponse, DeviceUserInfo,
-    DeviceNoteCreate, DeviceNoteUpdate,
 )
 from devices import service
-import database as mqtt_db
-from mqtt.models import DeviceAlertEntry, DeviceAlertsResponse
-from shared.firebase import get_db as get_firestore
 
 router = APIRouter(prefix="/api/devices", tags=["devices"])
 
-NOTES_COLLECTION = "notes"
-CRM_COLLECTION = "crm_customers"
-
 
 @router.get("", response_model=DeviceListResponse)
 async def list_devices(
@@ -77,385 +67,3 @@ async def delete_device(
     _user: TokenPayload = Depends(require_permission("devices", "delete")),
 ):
     service.delete_device(device_id)
-
-
-@router.get("/{device_id}/alerts", response_model=DeviceAlertsResponse)
-async def get_device_alerts(
-    device_id: str,
-    _user: TokenPayload = Depends(require_permission("devices", "view")),
-):
-    """Return the current active alert set for a device. Empty list means fully healthy."""
-    rows = await mqtt_db.get_alerts(device_id)
-    return DeviceAlertsResponse(alerts=[DeviceAlertEntry(**r) for r in rows])
-
-
-# ─────────────────────────────────────────────────────────────────────────────
-# Device Notes
-# ─────────────────────────────────────────────────────────────────────────────
-
-@router.get("/{device_id}/notes")
-async def list_device_notes(
-    device_id: str,
-    _user: TokenPayload = Depends(require_permission("devices", "view")),
-):
-    """List all notes for a device."""
-    db = get_firestore()
-    docs = db.collection(NOTES_COLLECTION).where("device_id", "==", device_id).order_by("created_at").stream()
-    notes = []
-    for doc in docs:
-        note = doc.to_dict()
-        note["id"] = doc.id
-        # Convert Firestore Timestamps to ISO strings
-        for f in ("created_at", "updated_at"):
-            if hasattr(note.get(f), "isoformat"):
-                note[f] = note[f].isoformat()
-        notes.append(note)
-    return {"notes": notes, "total": len(notes)}
-
-
-@router.post("/{device_id}/notes", status_code=201)
-async def create_device_note(
-    device_id: str,
-    body: DeviceNoteCreate,
-    _user: TokenPayload = Depends(require_permission("devices", "edit")),
-):
-    """Create a new note for a device."""
-    db = get_firestore()
-    now = datetime.utcnow()
-    note_id = str(uuid.uuid4())
-    note_data = {
-        "device_id": device_id,
-        "content": body.content,
-        "created_by": body.created_by or _user.name or "",
-        "created_at": now,
-        "updated_at": now,
-    }
-    db.collection(NOTES_COLLECTION).document(note_id).set(note_data)
-    note_data["id"] = note_id
-    note_data["created_at"] = now.isoformat()
-    note_data["updated_at"] = now.isoformat()
-    return note_data
-
-
-@router.put("/{device_id}/notes/{note_id}")
-async def update_device_note(
-    device_id: str,
-    note_id: str,
-    body: DeviceNoteUpdate,
-    _user: TokenPayload = Depends(require_permission("devices", "edit")),
-):
-    """Update an existing device note."""
-    db = get_firestore()
-    doc_ref = db.collection(NOTES_COLLECTION).document(note_id)
-    doc = doc_ref.get()
-    if not doc.exists or doc.to_dict().get("device_id") != device_id:
-        raise HTTPException(status_code=404, detail="Note not found")
-    now = datetime.utcnow()
-    doc_ref.update({"content": body.content, "updated_at": now})
-    updated = doc.to_dict()
-    updated["id"] = note_id
-    updated["content"] = body.content
-    updated["updated_at"] = now.isoformat()
-    if hasattr(updated.get("created_at"), "isoformat"):
-        updated["created_at"] = updated["created_at"].isoformat()
-    return updated
-
-
-@router.delete("/{device_id}/notes/{note_id}", status_code=204)
-async def delete_device_note(
-    device_id: str,
-    note_id: str,
-    _user: TokenPayload = Depends(require_permission("devices", "edit")),
-):
-    """Delete a device note."""
-    db = get_firestore()
-    doc_ref = db.collection(NOTES_COLLECTION).document(note_id)
-    doc = doc_ref.get()
-    if not doc.exists or doc.to_dict().get("device_id") != device_id:
-        raise HTTPException(status_code=404, detail="Note not found")
-    doc_ref.delete()
-
-
-# ─────────────────────────────────────────────────────────────────────────────
-# Device Tags
-# ─────────────────────────────────────────────────────────────────────────────
-
-class TagsUpdate(BaseModel):
-    tags: List[str]
-
-
-@router.put("/{device_id}/tags", response_model=DeviceInDB)
-async def update_device_tags(
-    device_id: str,
-    body: TagsUpdate,
-    _user: TokenPayload = Depends(require_permission("devices", "edit")),
-):
-    """Replace the tags list for a device."""
-    return service.update_device(device_id, DeviceUpdate(tags=body.tags))
-
-
-# ─────────────────────────────────────────────────────────────────────────────
-# Assign Device to Customer
-# ─────────────────────────────────────────────────────────────────────────────
-
-class CustomerSearchResult(BaseModel):
-    id: str
-    name: str
-    email: str
-    organization: str = ""
-
-
-class AssignCustomerBody(BaseModel):
-    customer_id: str
-    label: str = ""
-
-
-@router.get("/{device_id}/customer-search")
-async def search_customers_for_device(
-    device_id: str,
-    q: str = Query(""),
-    _user: TokenPayload = Depends(require_permission("devices", "view")),
-):
-    """Search customers by name, email, phone, org, or tags, returning top 20 matches."""
-    db = get_firestore()
-    docs = db.collection(CRM_COLLECTION).stream()
-    results = []
-    q_lower = q.lower().strip()
-    for doc in docs:
-        data = doc.to_dict()
-        name = data.get("name", "") or ""
-        surname = data.get("surname", "") or ""
-        email = data.get("email", "") or ""
-        organization = data.get("organization", "") or ""
-        phone = data.get("phone", "") or ""
-        tags = " ".join(data.get("tags", []) or [])
-        location = data.get("location") or {}
-        city = location.get("city", "") or ""
-        searchable = f"{name} {surname} {email} {organization} {phone} {tags} {city}".lower()
-        if not q_lower or q_lower in searchable:
-            results.append({
-                "id": doc.id,
-                "name": name,
-                "surname": surname,
-                "email": email,
-                "organization": organization,
-                "city": city,
-            })
-        if len(results) >= 20:
-            break
-    return {"results": results}
-
-
-@router.post("/{device_id}/assign-customer")
-async def assign_device_to_customer(
-    device_id: str,
-    body: AssignCustomerBody,
-    _user: TokenPayload = Depends(require_permission("devices", "edit")),
-):
-    """Assign a device to a customer.
-
-    - Sets owner field on the device document.
-    - Adds a console_device entry to the customer's owned_items list.
-    """
-    db = get_firestore()
-
-    # Verify device exists
-    device = service.get_device(device_id)
-
-    # Get customer
-    customer_ref = db.collection(CRM_COLLECTION).document(body.customer_id)
-    customer_doc = customer_ref.get()
-    if not customer_doc.exists:
-        raise HTTPException(status_code=404, detail="Customer not found")
-    customer_data = customer_doc.to_dict()
-    customer_email = customer_data.get("email", "")
-
-    # Update device: owner email + customer_id
-    device_ref = db.collection("devices").document(device_id)
-    device_ref.update({"owner": customer_email, "customer_id": body.customer_id})
-
-    # Add to customer owned_items (avoid duplicates)
-    owned_items = customer_data.get("owned_items", []) or []
-    already_assigned = any(
-        item.get("type") == "console_device" and item.get("console_device", {}).get("device_id") == device_id
-        for item in owned_items
-    )
-    if not already_assigned:
-        owned_items.append({
-            "type": "console_device",
-            "console_device": {
-                "device_id": device_id,
-                "label": body.label or device.device_name or device_id,
-            }
-        })
-        customer_ref.update({"owned_items": owned_items})
-
-    return {"status": "assigned", "device_id": device_id, "customer_id": body.customer_id}
-
-
-@router.delete("/{device_id}/assign-customer", status_code=204)
-async def unassign_device_from_customer(
-    device_id: str,
-    customer_id: str = Query(...),
-    _user: TokenPayload = Depends(require_permission("devices", "edit")),
-):
-    """Remove device assignment from a customer."""
-    db = get_firestore()
-
-    # Clear customer_id on device
-    device_ref = db.collection("devices").document(device_id)
-    device_ref.update({"customer_id": ""})
-
-    # Remove from customer owned_items
-    customer_ref = db.collection(CRM_COLLECTION).document(customer_id)
-    customer_doc = customer_ref.get()
-    if customer_doc.exists:
-        customer_data = customer_doc.to_dict()
-        owned_items = [
-            item for item in (customer_data.get("owned_items") or [])
-            if not (item.get("type") == "console_device" and item.get("console_device", {}).get("device_id") == device_id)
-        ]
-        customer_ref.update({"owned_items": owned_items})
-
-
-# ─────────────────────────────────────────────────────────────────────────────
-# Customer detail (for Owner display in fleet)
-# ─────────────────────────────────────────────────────────────────────────────
-
-@router.get("/{device_id}/customer")
-async def get_device_customer(
-    device_id: str,
-    _user: TokenPayload = Depends(require_permission("devices", "view")),
-):
-    """Return basic customer details for a device's assigned customer_id."""
-    db = get_firestore()
-    device_ref = db.collection("devices").document(device_id)
-    device_doc = device_ref.get()
-    if not device_doc.exists:
-        raise HTTPException(status_code=404, detail="Device not found")
-    device_data = device_doc.to_dict() or {}
-    customer_id = device_data.get("customer_id")
-    if not customer_id:
-        return {"customer": None}
-    customer_doc = db.collection(CRM_COLLECTION).document(customer_id).get()
-    if not customer_doc.exists:
-        return {"customer": None}
-    cd = customer_doc.to_dict() or {}
-    return {
-        "customer": {
-            "id": customer_doc.id,
-            "name": cd.get("name") or "",
-            "email": cd.get("email") or "",
-            "organization": cd.get("organization") or "",
-            "phone": cd.get("phone") or "",
-        }
-    }
-
-
-# ─────────────────────────────────────────────────────────────────────────────
-# User list management (for Manage tab — assign/remove users from user_list)
-# ─────────────────────────────────────────────────────────────────────────────
-
-class UserSearchResult(BaseModel):
-    id: str
-    display_name: str = ""
-    email: str = ""
-    phone: str = ""
-    photo_url: str = ""
-
-
-@router.get("/{device_id}/user-search")
-async def search_users_for_device(
-    device_id: str,
-    q: str = Query(""),
-    _user: TokenPayload = Depends(require_permission("devices", "view")),
-):
-    """Search the users collection by name, email, or phone."""
-    db = get_firestore()
-    docs = db.collection("users").stream()
-    results = []
-    q_lower = q.lower().strip()
-    for doc in docs:
-        data = doc.to_dict() or {}
-        name = (data.get("display_name") or "").lower()
-        email = (data.get("email") or "").lower()
-        phone = (data.get("phone") or "").lower()
-        if not q_lower or q_lower in name or q_lower in email or q_lower in phone:
-            results.append({
-                "id": doc.id,
-                "display_name": data.get("display_name") or "",
-                "email": data.get("email") or "",
-                "phone": data.get("phone") or "",
-                "photo_url": data.get("photo_url") or "",
-            })
-        if len(results) >= 20:
-            break
-    return {"results": results}
-
-
-class AddUserBody(BaseModel):
-    user_id: str
-
-
-@router.post("/{device_id}/user-list", status_code=200)
-async def add_user_to_device(
-    device_id: str,
-    body: AddUserBody,
-    _user: TokenPayload = Depends(require_permission("devices", "edit")),
-):
-    """Add a user reference to the device's user_list field."""
-    db = get_firestore()
-    device_ref = db.collection("devices").document(device_id)
-    device_doc = device_ref.get()
-    if not device_doc.exists:
-        raise HTTPException(status_code=404, detail="Device not found")
-
-    # Verify user exists
-    user_doc = db.collection("users").document(body.user_id).get()
-    if not user_doc.exists:
-        raise HTTPException(status_code=404, detail="User not found")
-
-    data = device_doc.to_dict() or {}
-    user_list = data.get("user_list", []) or []
-
-    # Avoid duplicates — check both string paths and DocumentReferences
-    from google.cloud.firestore_v1 import DocumentReference as DocRef
-    existing_ids = set()
-    for entry in user_list:
-        if isinstance(entry, DocRef):
-            existing_ids.add(entry.id)
-        elif isinstance(entry, str):
-            existing_ids.add(entry.split("/")[-1])
-
-    if body.user_id not in existing_ids:
-        user_ref = db.collection("users").document(body.user_id)
-        user_list.append(user_ref)
-        device_ref.update({"user_list": user_list})
-
-    return {"status": "added", "user_id": body.user_id}
-
-
-@router.delete("/{device_id}/user-list/{user_id}", status_code=200)
-async def remove_user_from_device(
-    device_id: str,
-    user_id: str,
-    _user: TokenPayload = Depends(require_permission("devices", "edit")),
-):
-    """Remove a user reference from the device's user_list field."""
-    db = get_firestore()
-    device_ref = db.collection("devices").document(device_id)
-    device_doc = device_ref.get()
-    if not device_doc.exists:
-        raise HTTPException(status_code=404, detail="Device not found")
-
-    data = device_doc.to_dict() or {}
-    user_list = data.get("user_list", []) or []
-
-    # Remove any entry that resolves to this user_id
-    new_list = [
-        entry for entry in user_list
-        if not (isinstance(entry, str) and entry.split("/")[-1] == user_id)
-    ]
-    device_ref.update({"user_list": new_list})
-
-    return {"status": "removed", "user_id": user_id}

backend/devices/service.py

@@ -52,11 +52,10 @@ def _generate_serial_number() -> str:
 def _ensure_unique_serial(db) -> str:
     """Generate a serial number and verify it doesn't already exist in Firestore."""
     existing_sns = set()
-    for doc in db.collection(COLLECTION).select(["serial_number"]).stream():
+    for doc in db.collection(COLLECTION).select(["device_id"]).stream():
         data = doc.to_dict()
-        sn = data.get("serial_number") or data.get("device_id")
-        if sn:
-            existing_sns.add(sn)
+        if data.get("device_id"):
+            existing_sns.add(data["device_id"])
 
     for _ in range(100):  # safety limit
         sn = _generate_serial_number()
@@ -72,7 +71,7 @@ def _convert_firestore_value(val):
         # Firestore DatetimeWithNanoseconds is a datetime subclass
         return val.strftime("%d %B %Y at %H:%M:%S UTC%z")
     if isinstance(val, GeoPoint):
-        return {"lat": val.latitude, "lng": val.longitude}
+        return f"{val.latitude}° N, {val.longitude}° E"
     if isinstance(val, DocumentReference):
         # Store the document path (e.g. "users/abc123")
         return val.path
@@ -96,40 +95,18 @@ def _sanitize_dict(d: dict) -> dict:
     return result
 
 
-def _auto_upgrade_claimed(doc_ref, data: dict) -> dict:
-    """If the device has entries in user_list and isn't already claimed/decommissioned,
-    upgrade mfg_status to 'claimed' automatically and return the updated data dict."""
-    current_status = data.get("mfg_status", "")
-    if current_status in ("claimed", "decommissioned"):
-        return data
-    user_list = data.get("user_list", []) or []
-    if user_list:
-        doc_ref.update({"mfg_status": "claimed"})
-        data = dict(data)
-        data["mfg_status"] = "claimed"
-    return data
-
-
 def _doc_to_device(doc) -> DeviceInDB:
-    """Convert a Firestore document snapshot to a DeviceInDB model.
-
-    Also auto-upgrades mfg_status to 'claimed' if user_list is non-empty.
-    """
-    raw = doc.to_dict()
-    raw = _auto_upgrade_claimed(doc.reference, raw)
-    data = _sanitize_dict(raw)
+    """Convert a Firestore document snapshot to a DeviceInDB model."""
+    data = _sanitize_dict(doc.to_dict())
     return DeviceInDB(id=doc.id, **data)
 
 
-FLEET_STATUSES = {"sold", "claimed"}
-
-
 def list_devices(
     search: str | None = None,
     online_only: bool | None = None,
     subscription_tier: str | None = None,
 ) -> list[DeviceInDB]:
-    """List fleet devices (sold + claimed only) with optional filters."""
+    """List devices with optional filters."""
     db = get_db()
     ref = db.collection(COLLECTION)
     query = ref
@@ -141,14 +118,6 @@ def list_devices(
     results = []
 
     for doc in docs:
-        raw = doc.to_dict() or {}
-
-        # Only include sold/claimed devices in the fleet view.
-        # Legacy devices without mfg_status are included to avoid breaking old data.
-        mfg_status = raw.get("mfg_status")
-        if mfg_status and mfg_status not in FLEET_STATUSES:
-            continue
-
         device = _doc_to_device(doc)
 
         # Client-side filters
@@ -159,7 +128,7 @@ def list_devices(
             search_lower = search.lower()
             name_match = search_lower in (device.device_name or "").lower()
             location_match = search_lower in (device.device_location or "").lower()
-            sn_match = search_lower in (device.serial_number or "").lower()
+            sn_match = search_lower in (device.device_id or "").lower()
             if not (name_match or location_match or sn_match):
                 continue
 
@@ -213,11 +182,6 @@ def update_device(device_doc_id: str, data: DeviceUpdate) -> DeviceInDB:
 
     update_data = data.model_dump(exclude_none=True)
 
-    # Convert {lat, lng} dict to a Firestore GeoPoint
-    coords = update_data.get("device_location_coordinates")
-    if isinstance(coords, dict) and "lat" in coords and "lng" in coords:
-        update_data["device_location_coordinates"] = GeoPoint(coords["lat"], coords["lng"])
-
     # Deep-merge nested structs so unmentioned sub-fields are preserved
     existing = doc.to_dict()
     nested_keys = (

backend/equipment/service.py

@@ -4,7 +4,7 @@ from shared.firebase import get_db
 from shared.exceptions import NotFoundError
 from equipment.models import NoteCreate, NoteUpdate, NoteInDB
 
-COLLECTION = "notes"
+COLLECTION = "equipment_notes"
 
 VALID_CATEGORIES = {"general", "maintenance", "installation", "issue", "action_item", "other"}
 

backend/firmware/models.py

@@ -1,29 +1,18 @@
 from pydantic import BaseModel
 from typing import Optional, List
-from enum import Enum
-
-
-class UpdateType(str, Enum):
-    optional  = "optional"   # user-initiated only
-    mandatory = "mandatory"  # auto-installs on next reboot
-    emergency = "emergency"  # auto-installs on reboot + daily check + MQTT push
 
 
 class FirmwareVersion(BaseModel):
     id: str
-    hw_type: str              # e.g. "vesper", "vesper_plus", "vesper_pro", "bespoke"
-    channel: str              # "stable", "beta", "alpha", "testing"
-    version: str              # semver e.g. "1.5"
+    hw_type: str        # "vs", "vp", "vx"
+    channel: str        # "stable", "beta", "alpha", "testing"
+    version: str        # semver e.g. "1.4.2"
     filename: str
     size_bytes: int
     sha256: str
-    update_type: UpdateType = UpdateType.mandatory
-    min_fw_version: Optional[str] = None  # minimum fw version required to install this
     uploaded_at: str
-    changelog: Optional[str] = None
-    release_note: Optional[str] = None
+    notes: Optional[str] = None
     is_latest: bool = False
-    bespoke_uid: Optional[str] = None    # only set when hw_type == "bespoke"
 
 
 class FirmwareListResponse(BaseModel):
@@ -31,36 +20,12 @@ class FirmwareListResponse(BaseModel):
     total: int
 
 
-class FirmwareMetadataResponse(BaseModel):
-    """Returned by both /latest and /{version}/info endpoints.
-
-    Two orthogonal axes:
-      channel     — the release track the device is subscribed to
-                    ("stable" | "beta" | "development")
-                    Firmware validates this matches the channel it requested.
-      update_type — the urgency of THIS release, set by the publisher
-                    ("optional" | "mandatory" | "emergency")
-                    Firmware reads mandatory/emergency booleans derived from this.
-
-    Additional firmware-compatible fields:
-      size        — binary size in bytes (firmware reads "size", not "size_bytes")
-      mandatory   — True when update_type is mandatory or emergency
-      emergency   — True only when update_type is emergency
-    """
+class FirmwareLatestResponse(BaseModel):
     hw_type: str
-    channel: str                       # release track — firmware validates this
+    channel: str
     version: str
-    size: int                          # firmware reads "size"
-    size_bytes: int                    # kept for admin-panel consumers
+    size_bytes: int
     sha256: str
-    update_type: UpdateType            # urgency enum — for admin panel display
-    mandatory: bool                    # derived: update_type in (mandatory, emergency)
-    emergency: bool                    # derived: update_type == emergency
-    min_fw_version: Optional[str] = None
     download_url: str
     uploaded_at: str
-    release_note: Optional[str] = None
-
-
-# Keep backwards-compatible alias
-FirmwareLatestResponse = FirmwareMetadataResponse
+    notes: Optional[str] = None

backend/firmware/router.py

@@ -1,18 +1,13 @@
-from fastapi import APIRouter, Depends, Query, UploadFile, File, Form, HTTPException
-from fastapi.responses import FileResponse, PlainTextResponse
-from pydantic import BaseModel
+from fastapi import APIRouter, Depends, Query, UploadFile, File, Form
+from fastapi.responses import FileResponse
 from typing import Optional
-import logging
 
 from auth.models import TokenPayload
 from auth.dependencies import require_permission
-from firmware.models import FirmwareVersion, FirmwareListResponse, FirmwareMetadataResponse, UpdateType
+from firmware.models import FirmwareVersion, FirmwareListResponse, FirmwareLatestResponse
 from firmware import service
 
-logger = logging.getLogger(__name__)
-
 router = APIRouter(prefix="/api/firmware", tags=["firmware"])
-ota_router = APIRouter(prefix="/api/ota", tags=["ota-telemetry"])
 
 
 @router.post("/upload", response_model=FirmwareVersion, status_code=201)
@@ -20,11 +15,7 @@ async def upload_firmware(
     hw_type: str = Form(...),
     channel: str = Form(...),
     version: str = Form(...),
-    update_type: UpdateType = Form(UpdateType.mandatory),
-    min_fw_version: Optional[str] = Form(None),
-    changelog: Optional[str] = Form(None),
-    release_note: Optional[str] = Form(None),
-    bespoke_uid: Optional[str] = Form(None),
+    notes: Optional[str] = Form(None),
     file: UploadFile = File(...),
     _user: TokenPayload = Depends(require_permission("manufacturing", "add")),
 ):
@@ -34,11 +25,7 @@ async def upload_firmware(
         channel=channel,
         version=version,
         file_bytes=file_bytes,
-        update_type=update_type,
-        min_fw_version=min_fw_version,
-        changelog=changelog,
-        release_note=release_note,
-        bespoke_uid=bespoke_uid,
+        notes=notes,
     )
 
 
@@ -52,37 +39,12 @@ def list_firmware(
     return FirmwareListResponse(firmware=items, total=len(items))
 
 
-@router.get("/{hw_type}/{channel}/latest", response_model=FirmwareMetadataResponse)
-def get_latest_firmware(
-    hw_type: str,
-    channel: str,
-    hw_version: Optional[str] = Query(None, description="Hardware revision from NVS, e.g. '1.0'"),
-    current_version: Optional[str] = Query(None, description="Currently running firmware semver, e.g. '1.2.3'"),
-):
+@router.get("/{hw_type}/{channel}/latest", response_model=FirmwareLatestResponse)
+def get_latest_firmware(hw_type: str, channel: str):
     """Returns metadata for the latest firmware for a given hw_type + channel.
     No auth required — devices call this endpoint to check for updates.
     """
-    return service.get_latest(hw_type, channel, hw_version=hw_version, current_version=current_version)
-
-
-@router.get("/{hw_type}/{channel}/latest/changelog", response_class=PlainTextResponse)
-def get_latest_changelog(hw_type: str, channel: str):
-    """Returns the full changelog for the latest firmware. Plain text."""
-    return service.get_latest_changelog(hw_type, channel)
-
-
-@router.get("/{hw_type}/{channel}/{version}/info/changelog", response_class=PlainTextResponse)
-def get_version_changelog(hw_type: str, channel: str, version: str):
-    """Returns the full changelog for a specific firmware version. Plain text."""
-    return service.get_version_changelog(hw_type, channel, version)
-
-
-@router.get("/{hw_type}/{channel}/{version}/info", response_model=FirmwareMetadataResponse)
-def get_firmware_info(hw_type: str, channel: str, version: str):
-    """Returns metadata for a specific firmware version.
-    No auth required — devices call this to resolve upgrade chains.
-    """
-    return service.get_version_info(hw_type, channel, version)
+    return service.get_latest(hw_type, channel)
 
 
 @router.get("/{hw_type}/{channel}/{version}/firmware.bin")
@@ -96,85 +58,9 @@ def download_firmware(hw_type: str, channel: str, version: str):
     )
 
 
-@router.put("/{firmware_id}", response_model=FirmwareVersion)
-async def edit_firmware(
-    firmware_id: str,
-    channel: Optional[str] = Form(None),
-    version: Optional[str] = Form(None),
-    update_type: Optional[UpdateType] = Form(None),
-    min_fw_version: Optional[str] = Form(None),
-    changelog: Optional[str] = Form(None),
-    release_note: Optional[str] = Form(None),
-    bespoke_uid: Optional[str] = Form(None),
-    file: Optional[UploadFile] = File(None),
-    _user: TokenPayload = Depends(require_permission("manufacturing", "add")),
-):
-    file_bytes = await file.read() if file and file.filename else None
-    return service.edit_firmware(
-        doc_id=firmware_id,
-        channel=channel,
-        version=version,
-        update_type=update_type,
-        min_fw_version=min_fw_version,
-        changelog=changelog,
-        release_note=release_note,
-        bespoke_uid=bespoke_uid,
-        file_bytes=file_bytes,
-    )
-
-
 @router.delete("/{firmware_id}", status_code=204)
 def delete_firmware(
     firmware_id: str,
     _user: TokenPayload = Depends(require_permission("manufacturing", "delete")),
 ):
     service.delete_firmware(firmware_id)
-
-
-# ─────────────────────────────────────────────────────────────────────────────
-# OTA event telemetry — called by devices (no auth, best-effort)
-# ─────────────────────────────────────────────────────────────────────────────
-
-class OtaDownloadEvent(BaseModel):
-    device_uid: str
-    hw_type: str
-    hw_version: str
-    from_version: str
-    to_version: str
-    channel: str
-
-
-class OtaFlashEvent(BaseModel):
-    device_uid: str
-    hw_type: str
-    hw_version: str
-    from_version: str
-    to_version: str
-    channel: str
-    sha256: str
-
-
-@ota_router.post("/events/download", status_code=204)
-def ota_event_download(event: OtaDownloadEvent):
-    """Device reports that firmware was fully written to flash (pre-commit).
-    No auth required — best-effort telemetry from the device.
-    """
-    logger.info(
-        "OTA download event: device=%s hw=%s/%s %s → %s (channel=%s)",
-        event.device_uid, event.hw_type, event.hw_version,
-        event.from_version, event.to_version, event.channel,
-    )
-    service.record_ota_event("download", event.model_dump())
-
-
-@ota_router.post("/events/flash", status_code=204)
-def ota_event_flash(event: OtaFlashEvent):
-    """Device reports that firmware partition was committed and device is rebooting.
-    No auth required — best-effort telemetry from the device.
-    """
-    logger.info(
-        "OTA flash event: device=%s hw=%s/%s %s → %s (channel=%s sha256=%.16s...)",
-        event.device_uid, event.hw_type, event.hw_version,
-        event.from_version, event.to_version, event.channel, event.sha256,
-    )
-    service.record_ota_event("flash", event.model_dump())

backend/firmware/service.py

@@ -1,22 +1,18 @@
 import hashlib
-import logging
 import uuid
 from datetime import datetime, timezone
 from pathlib import Path
-from typing import Any
 
 from fastapi import HTTPException
 
 from config import settings
 from shared.firebase import get_db
 from shared.exceptions import NotFoundError
-from firmware.models import FirmwareVersion, FirmwareMetadataResponse, UpdateType
-
-logger = logging.getLogger(__name__)
+from firmware.models import FirmwareVersion, FirmwareLatestResponse
 
 COLLECTION = "firmware_versions"
 
-VALID_HW_TYPES = {"vesper", "vesper_plus", "vesper_pro", "chronos", "chronos_pro", "agnus", "agnus_mini", "bespoke"}
+VALID_HW_TYPES = {"vs", "vp", "vx"}
 VALID_CHANNELS = {"stable", "beta", "alpha", "testing"}
 
 
@@ -40,34 +36,9 @@ def _doc_to_firmware_version(doc) -> FirmwareVersion:
         filename=data.get("filename", "firmware.bin"),
         size_bytes=data.get("size_bytes", 0),
         sha256=data.get("sha256", ""),
-        update_type=data.get("update_type", UpdateType.mandatory),
-        min_fw_version=data.get("min_fw_version"),
         uploaded_at=uploaded_str,
-        changelog=data.get("changelog"),
-        release_note=data.get("release_note"),
+        notes=data.get("notes"),
         is_latest=data.get("is_latest", False),
-        bespoke_uid=data.get("bespoke_uid"),
-    )
-
-
-def _fw_to_metadata_response(fw: FirmwareVersion) -> FirmwareMetadataResponse:
-    download_url = f"/api/firmware/{fw.hw_type}/{fw.channel}/{fw.version}/firmware.bin"
-    is_emergency = fw.update_type == UpdateType.emergency
-    is_mandatory = fw.update_type in (UpdateType.mandatory, UpdateType.emergency)
-    return FirmwareMetadataResponse(
-        hw_type=fw.hw_type,
-        channel=fw.channel,            # firmware validates this matches requested channel
-        version=fw.version,
-        size=fw.size_bytes,            # firmware reads "size"
-        size_bytes=fw.size_bytes,      # kept for admin-panel consumers
-        sha256=fw.sha256,
-        update_type=fw.update_type,    # urgency enum — for admin panel display
-        mandatory=is_mandatory,        # firmware reads this to decide auto-apply
-        emergency=is_emergency,        # firmware reads this to decide immediate apply
-        min_fw_version=fw.min_fw_version,
-        download_url=download_url,
-        uploaded_at=fw.uploaded_at,
-        release_note=fw.release_note,
     )
 
 
@@ -76,61 +47,33 @@ def upload_firmware(
     channel: str,
     version: str,
     file_bytes: bytes,
-    update_type: UpdateType = UpdateType.mandatory,
-    min_fw_version: str | None = None,
-    changelog: str | None = None,
-    release_note: str | None = None,
-    bespoke_uid: str | None = None,
+    notes: str | None = None,
 ) -> FirmwareVersion:
     if hw_type not in VALID_HW_TYPES:
-        raise HTTPException(status_code=400, detail=f"Invalid hw_type. Must be one of: {', '.join(sorted(VALID_HW_TYPES))}")
+        raise HTTPException(status_code=400, detail=f"Invalid hw_type. Must be one of: {', '.join(VALID_HW_TYPES)}")
     if channel not in VALID_CHANNELS:
-        raise HTTPException(status_code=400, detail=f"Invalid channel. Must be one of: {', '.join(sorted(VALID_CHANNELS))}")
-    if hw_type == "bespoke" and not bespoke_uid:
-        raise HTTPException(status_code=400, detail="bespoke_uid is required when hw_type is 'bespoke'")
-
-    db = get_db()
-    sha256 = hashlib.sha256(file_bytes).hexdigest()
-    now = datetime.now(timezone.utc)
-
-    # For bespoke firmware: if a firmware with the same bespoke_uid already exists,
-    # overwrite it (delete old doc + file, reuse same storage path keyed by uid).
-    if hw_type == "bespoke" and bespoke_uid:
-        existing_docs = list(
-            db.collection(COLLECTION)
-            .where("hw_type", "==", "bespoke")
-            .where("bespoke_uid", "==", bespoke_uid)
-            .stream()
-        )
-        for old_doc in existing_docs:
-            old_data = old_doc.to_dict() or {}
-            old_path = _storage_path("bespoke", old_data.get("channel", channel), old_data.get("version", version))
-            if old_path.exists():
-                old_path.unlink()
-                try:
-                    old_path.parent.rmdir()
-                except OSError:
-                    pass
-            old_doc.reference.delete()
+        raise HTTPException(status_code=400, detail=f"Invalid channel. Must be one of: {', '.join(VALID_CHANNELS)}")
 
     dest = _storage_path(hw_type, channel, version)
     dest.parent.mkdir(parents=True, exist_ok=True)
     dest.write_bytes(file_bytes)
 
+    sha256 = hashlib.sha256(file_bytes).hexdigest()
+    now = datetime.now(timezone.utc)
     doc_id = str(uuid.uuid4())
 
+    db = get_db()
+
     # Mark previous latest for this hw_type+channel as no longer latest
-    # (skip for bespoke — each bespoke_uid is its own independent firmware)
-    if hw_type != "bespoke":
-        prev_docs = (
-            db.collection(COLLECTION)
-            .where("hw_type", "==", hw_type)
-            .where("channel", "==", channel)
-            .where("is_latest", "==", True)
-            .stream()
-        )
-        for prev in prev_docs:
-            prev.reference.update({"is_latest": False})
+    prev_docs = (
+        db.collection(COLLECTION)
+        .where("hw_type", "==", hw_type)
+        .where("channel", "==", channel)
+        .where("is_latest", "==", True)
+        .stream()
+    )
+    for prev in prev_docs:
+        prev.reference.update({"is_latest": False})
 
     doc_ref = db.collection(COLLECTION).document(doc_id)
     doc_ref.set({
@@ -140,13 +83,9 @@ def upload_firmware(
         "filename": "firmware.bin",
         "size_bytes": len(file_bytes),
         "sha256": sha256,
-        "update_type": update_type.value,
-        "min_fw_version": min_fw_version,
         "uploaded_at": now,
-        "changelog": changelog,
-        "release_note": release_note,
+        "notes": notes,
         "is_latest": True,
-        "bespoke_uid": bespoke_uid,
     })
 
     return _doc_to_firmware_version(doc_ref.get())
@@ -169,52 +108,7 @@ def list_firmware(
     return items
 
 
-def get_latest(hw_type: str, channel: str, hw_version: str | None = None, current_version: str | None = None) -> FirmwareMetadataResponse:
-    if hw_type not in VALID_HW_TYPES:
-        raise HTTPException(status_code=400, detail=f"Invalid hw_type '{hw_type}'")
-    if hw_type == "bespoke":
-        raise HTTPException(status_code=400, detail="Bespoke firmware is not served via auto-update. Use the direct download URL.")
-    if channel not in VALID_CHANNELS:
-        raise HTTPException(status_code=400, detail=f"Invalid channel '{channel}'")
-
-    db = get_db()
-    docs = list(
-        db.collection(COLLECTION)
-        .where("hw_type", "==", hw_type)
-        .where("channel", "==", channel)
-        .where("is_latest", "==", True)
-        .limit(1)
-        .stream()
-    )
-    if not docs:
-        raise NotFoundError("Firmware")
-
-    return _fw_to_metadata_response(_doc_to_firmware_version(docs[0]))
-
-
-def get_version_info(hw_type: str, channel: str, version: str) -> FirmwareMetadataResponse:
-    """Fetch metadata for a specific version. Used by devices resolving upgrade chains."""
-    if hw_type not in VALID_HW_TYPES:
-        raise HTTPException(status_code=400, detail=f"Invalid hw_type '{hw_type}'")
-    if channel not in VALID_CHANNELS:
-        raise HTTPException(status_code=400, detail=f"Invalid channel '{channel}'")
-
-    db = get_db()
-    docs = list(
-        db.collection(COLLECTION)
-        .where("hw_type", "==", hw_type)
-        .where("channel", "==", channel)
-        .where("version", "==", version)
-        .limit(1)
-        .stream()
-    )
-    if not docs:
-        raise NotFoundError("Firmware version")
-
-    return _fw_to_metadata_response(_doc_to_firmware_version(docs[0]))
-
-
-def get_latest_changelog(hw_type: str, channel: str) -> str:
+def get_latest(hw_type: str, channel: str) -> FirmwareLatestResponse:
     if hw_type not in VALID_HW_TYPES:
         raise HTTPException(status_code=400, detail=f"Invalid hw_type '{hw_type}'")
     if channel not in VALID_CHANNELS:
@@ -231,33 +125,19 @@ def get_latest_changelog(hw_type: str, channel: str) -> str:
     )
     if not docs:
         raise NotFoundError("Firmware")
+
     fw = _doc_to_firmware_version(docs[0])
-    if not fw.changelog:
-        raise NotFoundError("Changelog")
-    return fw.changelog
-
-
-def get_version_changelog(hw_type: str, channel: str, version: str) -> str:
-    if hw_type not in VALID_HW_TYPES:
-        raise HTTPException(status_code=400, detail=f"Invalid hw_type '{hw_type}'")
-    if channel not in VALID_CHANNELS:
-        raise HTTPException(status_code=400, detail=f"Invalid channel '{channel}'")
-
-    db = get_db()
-    docs = list(
-        db.collection(COLLECTION)
-        .where("hw_type", "==", hw_type)
-        .where("channel", "==", channel)
-        .where("version", "==", version)
-        .limit(1)
-        .stream()
+    download_url = f"/api/firmware/{hw_type}/{channel}/{fw.version}/firmware.bin"
+    return FirmwareLatestResponse(
+        hw_type=fw.hw_type,
+        channel=fw.channel,
+        version=fw.version,
+        size_bytes=fw.size_bytes,
+        sha256=fw.sha256,
+        download_url=download_url,
+        uploaded_at=fw.uploaded_at,
+        notes=fw.notes,
     )
-    if not docs:
-        raise NotFoundError("Firmware version")
-    fw = _doc_to_firmware_version(docs[0])
-    if not fw.changelog:
-        raise NotFoundError("Changelog")
-    return fw.changelog
 
 
 def get_firmware_path(hw_type: str, channel: str, version: str) -> Path:
@@ -267,98 +147,6 @@ def get_firmware_path(hw_type: str, channel: str, version: str) -> Path:
     return path
 
 
-def record_ota_event(event_type: str, payload: dict[str, Any]) -> None:
-    """Persist an OTA telemetry event (download or flash) to Firestore.
-
-    Best-effort — caller should not raise on failure.
-    """
-    try:
-        db = get_db()
-        db.collection("ota_events").add({
-            "event_type": event_type,
-            "received_at": datetime.now(timezone.utc),
-            **payload,
-        })
-    except Exception as exc:
-        logger.warning("Failed to persist OTA event (%s): %s", event_type, exc)
-
-
-def edit_firmware(
-    doc_id: str,
-    channel: str | None = None,
-    version: str | None = None,
-    update_type: UpdateType | None = None,
-    min_fw_version: str | None = None,
-    changelog: str | None = None,
-    release_note: str | None = None,
-    bespoke_uid: str | None = None,
-    file_bytes: bytes | None = None,
-) -> FirmwareVersion:
-    db = get_db()
-    doc_ref = db.collection(COLLECTION).document(doc_id)
-    doc = doc_ref.get()
-    if not doc.exists:
-        raise NotFoundError("Firmware")
-
-    data = doc.to_dict() or {}
-    hw_type = data["hw_type"]
-    old_channel = data.get("channel", "")
-    old_version = data.get("version", "")
-
-    effective_channel = channel if channel is not None else old_channel
-    effective_version = version if version is not None else old_version
-
-    if channel is not None and channel not in VALID_CHANNELS:
-        raise HTTPException(status_code=400, detail=f"Invalid channel. Must be one of: {', '.join(sorted(VALID_CHANNELS))}")
-
-    updates: dict = {}
-    if channel is not None:
-        updates["channel"] = channel
-    if version is not None:
-        updates["version"] = version
-    if update_type is not None:
-        updates["update_type"] = update_type.value
-    if min_fw_version is not None:
-        updates["min_fw_version"] = min_fw_version if min_fw_version else None
-    if changelog is not None:
-        updates["changelog"] = changelog if changelog else None
-    if release_note is not None:
-        updates["release_note"] = release_note if release_note else None
-    if bespoke_uid is not None:
-        updates["bespoke_uid"] = bespoke_uid if bespoke_uid else None
-
-    if file_bytes is not None:
-        # Move binary if path changed
-        old_path = _storage_path(hw_type, old_channel, old_version)
-        new_path = _storage_path(hw_type, effective_channel, effective_version)
-        if old_path != new_path and old_path.exists():
-            old_path.unlink()
-            try:
-                old_path.parent.rmdir()
-            except OSError:
-                pass
-        new_path.parent.mkdir(parents=True, exist_ok=True)
-        new_path.write_bytes(file_bytes)
-        updates["sha256"] = hashlib.sha256(file_bytes).hexdigest()
-        updates["size_bytes"] = len(file_bytes)
-    elif (channel is not None and channel != old_channel) or (version is not None and version != old_version):
-        # Path changed but no new file — move existing binary
-        old_path = _storage_path(hw_type, old_channel, old_version)
-        new_path = _storage_path(hw_type, effective_channel, effective_version)
-        if old_path.exists() and old_path != new_path:
-            new_path.parent.mkdir(parents=True, exist_ok=True)
-            old_path.rename(new_path)
-            try:
-                old_path.parent.rmdir()
-            except OSError:
-                pass
-
-    if updates:
-        doc_ref.update(updates)
-
-    return _doc_to_firmware_version(doc_ref.get())
-
-
 def delete_firmware(doc_id: str) -> None:
     db = get_db()
     doc_ref = db.collection(COLLECTION).document(doc_id)
@@ -390,9 +178,9 @@ def delete_firmware(doc_id: str) -> None:
             db.collection(COLLECTION)
             .where("hw_type", "==", hw_type)
             .where("channel", "==", channel)
+            .order_by("uploaded_at", direction="DESCENDING")
+            .limit(1)
             .stream()
         )
         if remaining:
-            # Sort in Python to avoid needing a composite Firestore index
-            remaining.sort(key=lambda d: d.to_dict().get("uploaded_at", ""), reverse=True)
             remaining[0].reference.update({"is_latest": True})

backend/main.py

@@ -15,20 +15,10 @@ from staff.router import router as staff_router
 from helpdesk.router import router as helpdesk_router
 from builder.router import router as builder_router
 from manufacturing.router import router as manufacturing_router
-from firmware.router import router as firmware_router, ota_router
+from firmware.router import router as firmware_router
 from admin.router import router as admin_router
-from crm.router import router as crm_products_router
-from crm.customers_router import router as crm_customers_router
-from crm.orders_router import router as crm_orders_router, global_router as crm_orders_global_router
-from crm.comms_router import router as crm_comms_router
-from crm.media_router import router as crm_media_router
-from crm.nextcloud_router import router as crm_nextcloud_router
-from crm.quotations_router import router as crm_quotations_router
-from public.router import router as public_router
-from crm.nextcloud import close_client as close_nextcloud_client, keepalive_ping as nextcloud_keepalive
-from crm.mail_accounts import get_mail_accounts
 from mqtt.client import mqtt_manager
-import database as db
+from mqtt import database as mqtt_db
 from melodies import service as melody_service
 
 app = FastAPI(
@@ -59,68 +49,22 @@ app.include_router(staff_router)
 app.include_router(builder_router)
 app.include_router(manufacturing_router)
 app.include_router(firmware_router)
-app.include_router(ota_router)
 app.include_router(admin_router)
-app.include_router(crm_products_router)
-app.include_router(crm_customers_router)
-app.include_router(crm_orders_router)
-app.include_router(crm_orders_global_router)
-app.include_router(crm_comms_router)
-app.include_router(crm_media_router)
-app.include_router(crm_nextcloud_router)
-app.include_router(crm_quotations_router)
-app.include_router(public_router)
-
-
-async def nextcloud_keepalive_loop():
-    await nextcloud_keepalive()  # eager warmup on startup
-    while True:
-        await asyncio.sleep(45)
-        await nextcloud_keepalive()
-
-
-async def email_sync_loop():
-    while True:
-        await asyncio.sleep(settings.email_sync_interval_minutes * 60)
-        try:
-            from crm.email_sync import sync_emails
-            await sync_emails()
-        except Exception as e:
-            print(f"[EMAIL SYNC] Error: {e}")
-
-
-async def crm_poll_loop():
-    while True:
-        await asyncio.sleep(24 * 60 * 60)  # once per day
-        try:
-            from crm.service import poll_crm_customer_statuses
-            poll_crm_customer_statuses()
-        except Exception as e:
-            print(f"[CRM POLL] Error: {e}")
 
 
 @app.on_event("startup")
 async def startup():
     init_firebase()
-    await db.init_db()
+    await mqtt_db.init_db()
     await melody_service.migrate_from_firestore()
     mqtt_manager.start(asyncio.get_event_loop())
-    asyncio.create_task(db.purge_loop())
-    asyncio.create_task(nextcloud_keepalive_loop())
-    asyncio.create_task(crm_poll_loop())
-    sync_accounts = [a for a in get_mail_accounts() if a.get("sync_inbound") and a.get("imap_host")]
-    if sync_accounts:
-        print(f"[EMAIL SYNC] IMAP configured for {len(sync_accounts)} account(s) - starting sync loop")
-        asyncio.create_task(email_sync_loop())
-    else:
-        print("[EMAIL SYNC] IMAP not configured - sync loop disabled")
+    asyncio.create_task(mqtt_db.purge_loop())
 
 
 @app.on_event("shutdown")
 async def shutdown():
     mqtt_manager.stop()
-    await db.close_db()
-    await close_nextcloud_client()
+    await mqtt_db.close_db()
 
 
 @app.get("/api/health")
@@ -130,4 +74,3 @@ async def health_check():
         "firebase": firebase_initialized,
         "mqtt": mqtt_manager.connected,
     }
-

backend/manufacturing/audit.py

@@ -1,6 +1,6 @@
 import json
 import logging
-from database import get_db
+from mqtt.database import get_db
 
 logger = logging.getLogger("manufacturing.audit")
 

backend/manufacturing/models.py

@@ -4,45 +4,15 @@ from enum import Enum
 
 
 class BoardType(str, Enum):
-    vesper      = "vesper"
-    vesper_plus = "vesper_plus"
-    vesper_pro  = "vesper_pro"
-    chronos     = "chronos"
-    chronos_pro = "chronos_pro"
-    agnus_mini  = "agnus_mini"
-    agnus       = "agnus"
+    vs = "vs"   # Vesper
+    vp = "vp"   # Vesper+
+    vx = "vx"   # VesperPro
 
 
 BOARD_TYPE_LABELS = {
-    "vesper":      "Vesper",
-    "vesper_plus": "Vesper Plus",
-    "vesper_pro":  "Vesper Pro",
-    "chronos":     "Chronos",
-    "chronos_pro": "Chronos Pro",
-    "agnus_mini":  "Agnus Mini",
-    "agnus":       "Agnus",
-}
-
-# Family codes (BS + 4 chars = segment 1 of serial number)
-BOARD_FAMILY_CODES = {
-    "vesper":      "VSPR",
-    "vesper_plus": "VSPR",
-    "vesper_pro":  "VSPR",
-    "agnus":       "AGNS",
-    "agnus_mini":  "AGNS",
-    "chronos":     "CRNS",
-    "chronos_pro": "CRNS",
-}
-
-# Variant codes (3 chars = first part of segment 3 of serial number)
-BOARD_VARIANT_CODES = {
-    "vesper":      "STD",
-    "vesper_plus": "PLS",
-    "vesper_pro":  "PRO",
-    "agnus":       "STD",
-    "agnus_mini":  "MIN",
-    "chronos":     "STD",
-    "chronos_pro": "PRO",
+    "vs": "Vesper",
+    "vp": "Vesper+",
+    "vx": "VesperPro",
 }
 
 
@@ -55,20 +25,9 @@ class MfgStatus(str, Enum):
     decommissioned = "decommissioned"
 
 
-class LifecycleEntry(BaseModel):
-    status_id: str
-    date: str  # ISO 8601 UTC string
-    note: Optional[str] = None
-    set_by: Optional[str] = None
-
-
 class BatchCreate(BaseModel):
     board_type: BoardType
-    board_version: str = Field(
-        ...,
-        pattern=r"^\d+(\.\d+)*$",
-        description="SemVer-style version string, e.g. '1.0' or legacy '01'",
-    )
+    board_version: str = Field(..., pattern=r"^\d{2}$", description="2-digit zero-padded version, e.g. '01'")
     quantity: int = Field(..., ge=1, le=100)
 
 
@@ -90,10 +49,6 @@ class DeviceInventoryItem(BaseModel):
     created_at: Optional[str] = None
     owner: Optional[str] = None
     assigned_to: Optional[str] = None
-    device_name: Optional[str] = None
-    lifecycle_history: Optional[List["LifecycleEntry"]] = None
-    customer_id: Optional[str] = None
-    user_list: Optional[List[str]] = None
 
 
 class DeviceInventoryListResponse(BaseModel):
@@ -104,19 +59,11 @@ class DeviceInventoryListResponse(BaseModel):
 class DeviceStatusUpdate(BaseModel):
     status: MfgStatus
     note: Optional[str] = None
-    force_claimed: bool = False
 
 
 class DeviceAssign(BaseModel):
-    customer_id: str
-
-
-class CustomerSearchResult(BaseModel):
-    id: str
-    name: str = ""
-    email: str = ""
-    organization: str = ""
-    phone: str = ""
+    customer_email: str
+    customer_name: Optional[str] = None
 
 
 class RecentActivityItem(BaseModel):

backend/manufacturing/router.py

@@ -1,8 +1,7 @@
-from fastapi import APIRouter, Depends, Query, HTTPException, UploadFile, File
+from fastapi import APIRouter, Depends, Query
 from fastapi.responses import Response
 from fastapi.responses import RedirectResponse
 from typing import Optional
-from pydantic import BaseModel
 
 from auth.models import TokenPayload
 from auth.dependencies import require_permission
@@ -14,24 +13,6 @@ from manufacturing.models import (
 )
 from manufacturing import service
 from manufacturing import audit
-from shared.exceptions import NotFoundError
-from shared.firebase import get_db as get_firestore
-
-
-class LifecycleEntryPatch(BaseModel):
-    index: int
-    date: Optional[str] = None
-    note: Optional[str] = None
-
-class LifecycleEntryCreate(BaseModel):
-    status_id: str
-    date: Optional[str] = None
-    note: Optional[str] = None
-
-VALID_FLASH_ASSETS = {"bootloader.bin", "partitions.bin"}
-VALID_HW_TYPES_MFG = {"vesper", "vesper_plus", "vesper_pro", "agnus", "agnus_mini", "chronos", "chronos_pro"}
-# Bespoke UIDs are dynamic — we allow any non-empty slug that doesn't clash with
-# a standard hw_type name. The flash-asset upload endpoint checks this below.
 
 router = APIRouter(prefix="/api/manufacturing", tags=["manufacturing"])
 
@@ -98,75 +79,13 @@ def get_device(
     return service.get_device_by_sn(sn)
 
 
-@router.get("/customers/search")
-def search_customers(
-    q: str = Query(""),
-    _user: TokenPayload = Depends(require_permission("manufacturing", "view")),
-):
-    """Search CRM customers by name, email, phone, organization, or tags."""
-    results = service.search_customers(q)
-    return {"results": results}
-
-
-@router.get("/customers/{customer_id}")
-def get_customer(
-    customer_id: str,
-    _user: TokenPayload = Depends(require_permission("manufacturing", "view")),
-):
-    """Get a single CRM customer by ID."""
-    db = get_firestore()
-    doc = db.collection("crm_customers").document(customer_id).get()
-    if not doc.exists:
-        raise HTTPException(status_code=404, detail="Customer not found")
-    data = doc.to_dict() or {}
-    loc = data.get("location") or {}
-    city = loc.get("city") if isinstance(loc, dict) else None
-    return {
-        "id": doc.id,
-        "name": data.get("name") or "",
-        "surname": data.get("surname") or "",
-        "email": data.get("email") or "",
-        "organization": data.get("organization") or "",
-        "phone": data.get("phone") or "",
-        "city": city or "",
-    }
-
-
 @router.patch("/devices/{sn}/status", response_model=DeviceInventoryItem)
 async def update_status(
     sn: str,
     body: DeviceStatusUpdate,
     user: TokenPayload = Depends(require_permission("manufacturing", "edit")),
 ):
-    # Guard: claimed requires at least one user in user_list
-    # (allow if explicitly force_claimed=true, which the mfg UI sets after adding a user manually)
-    if body.status.value == "claimed":
-        db = get_firestore()
-        docs = list(db.collection("devices").where("serial_number", "==", sn).limit(1).stream())
-        if docs:
-            data = docs[0].to_dict() or {}
-            user_list = data.get("user_list", []) or []
-            if not user_list and not getattr(body, "force_claimed", False):
-                raise HTTPException(
-                    status_code=400,
-                    detail="Cannot set status to 'claimed': device has no users in user_list. "
-                           "Assign a user first, then set to Claimed.",
-                )
-
-    # Guard: sold requires a customer assigned
-    if body.status.value == "sold":
-        db = get_firestore()
-        docs = list(db.collection("devices").where("serial_number", "==", sn).limit(1).stream())
-        if docs:
-            data = docs[0].to_dict() or {}
-            if not data.get("customer_id"):
-                raise HTTPException(
-                    status_code=400,
-                    detail="Cannot set status to 'sold' without an assigned customer. "
-                           "Use the 'Assign to Customer' action first.",
-                )
-
-    result = service.update_device_status(sn, body, set_by=user.email)
+    result = service.update_device_status(sn, body)
     await audit.log_action(
         admin_user=user.email,
         action="status_updated",
@@ -176,108 +95,12 @@ async def update_status(
     return result
 
 
-@router.patch("/devices/{sn}/lifecycle", response_model=DeviceInventoryItem)
-async def patch_lifecycle_entry(
-    sn: str,
-    body: LifecycleEntryPatch,
-    user: TokenPayload = Depends(require_permission("manufacturing", "edit")),
-):
-    """Edit the date and/or note of a lifecycle history entry by index."""
-    db = get_firestore()
-    docs = list(db.collection("devices").where("serial_number", "==", sn).limit(1).stream())
-    if not docs:
-        raise HTTPException(status_code=404, detail="Device not found")
-    doc_ref = docs[0].reference
-    data = docs[0].to_dict() or {}
-    history = data.get("lifecycle_history") or []
-    if body.index < 0 or body.index >= len(history):
-        raise HTTPException(status_code=400, detail="Invalid lifecycle entry index")
-    if body.date is not None:
-        history[body.index]["date"] = body.date
-    if body.note is not None:
-        history[body.index]["note"] = body.note
-    doc_ref.update({"lifecycle_history": history})
-    from manufacturing.service import _doc_to_inventory_item
-    return _doc_to_inventory_item(doc_ref.get())
-
-
-@router.post("/devices/{sn}/lifecycle", response_model=DeviceInventoryItem, status_code=200)
-async def create_lifecycle_entry(
-    sn: str,
-    body: LifecycleEntryCreate,
-    user: TokenPayload = Depends(require_permission("manufacturing", "edit")),
-):
-    """Upsert a lifecycle history entry for the given status_id.
-
-    If an entry for this status already exists it is overwritten in-place;
-    otherwise a new entry is appended.  This prevents duplicate entries when
-    a status is visited more than once (max one entry per status).
-    """
-    from datetime import datetime, timezone
-    db = get_firestore()
-    docs = list(db.collection("devices").where("serial_number", "==", sn).limit(1).stream())
-    if not docs:
-        raise HTTPException(status_code=404, detail="Device not found")
-    doc_ref = docs[0].reference
-    data = docs[0].to_dict() or {}
-    history = list(data.get("lifecycle_history") or [])
-
-    new_entry = {
-        "status_id": body.status_id,
-        "date": body.date or datetime.now(timezone.utc).isoformat(),
-        "note": body.note,
-        "set_by": user.email,
-    }
-
-    # Overwrite existing entry for this status if present, else append
-    existing_idx = next(
-        (i for i, e in enumerate(history) if e.get("status_id") == body.status_id),
-        None,
-    )
-    if existing_idx is not None:
-        history[existing_idx] = new_entry
-    else:
-        history.append(new_entry)
-
-    doc_ref.update({"lifecycle_history": history})
-    from manufacturing.service import _doc_to_inventory_item
-    return _doc_to_inventory_item(doc_ref.get())
-
-
-@router.delete("/devices/{sn}/lifecycle/{index}", response_model=DeviceInventoryItem)
-async def delete_lifecycle_entry(
-    sn: str,
-    index: int,
-    user: TokenPayload = Depends(require_permission("manufacturing", "edit")),
-):
-    """Delete a lifecycle history entry by index. Cannot delete the entry for the current status."""
-    db = get_firestore()
-    docs = list(db.collection("devices").where("serial_number", "==", sn).limit(1).stream())
-    if not docs:
-        raise HTTPException(status_code=404, detail="Device not found")
-    doc_ref = docs[0].reference
-    data = docs[0].to_dict() or {}
-    history = data.get("lifecycle_history") or []
-    if index < 0 or index >= len(history):
-        raise HTTPException(status_code=400, detail="Invalid lifecycle entry index")
-    current_status = data.get("mfg_status", "")
-    if history[index].get("status_id") == current_status:
-        raise HTTPException(status_code=400, detail="Cannot delete the entry for the current status. Change the status first.")
-    history.pop(index)
-    doc_ref.update({"lifecycle_history": history})
-    from manufacturing.service import _doc_to_inventory_item
-    return _doc_to_inventory_item(doc_ref.get())
-
-
 @router.get("/devices/{sn}/nvs.bin")
 async def download_nvs(
     sn: str,
-    hw_type_override: Optional[str] = Query(None, description="Override hw_type written to NVS (for bespoke firmware)"),
-    hw_revision_override: Optional[str] = Query(None, description="Override hw_revision written to NVS (for bespoke firmware)"),
-    nvs_schema: Optional[str] = Query(None, description="NVS schema to use: 'legacy' or 'new' (default)"),
     user: TokenPayload = Depends(require_permission("manufacturing", "view")),
 ):
-    binary = service.get_nvs_binary(sn, hw_type_override=hw_type_override, hw_revision_override=hw_revision_override, legacy=(nvs_schema == "legacy"))
+    binary = service.get_nvs_binary(sn)
     await audit.log_action(
         admin_user=user.email,
         action="device_flashed",
@@ -296,139 +119,16 @@ async def assign_device(
     body: DeviceAssign,
     user: TokenPayload = Depends(require_permission("manufacturing", "edit")),
 ):
-    try:
-        result = service.assign_device(sn, body)
-    except NotFoundError as e:
-        raise HTTPException(status_code=404, detail=str(e))
+    result = service.assign_device(sn, body)
     await audit.log_action(
         admin_user=user.email,
         action="device_assigned",
         serial_number=sn,
-        detail={"customer_id": body.customer_id},
+        detail={"customer_email": body.customer_email, "customer_name": body.customer_name},
     )
     return result
 
 
-@router.delete("/devices/{sn}", status_code=204)
-async def delete_device(
-    sn: str,
-    force: bool = Query(False, description="Required to delete sold/claimed devices"),
-    user: TokenPayload = Depends(require_permission("manufacturing", "delete")),
-):
-    """Delete a device. Sold/claimed devices require force=true."""
-    try:
-        service.delete_device(sn, force=force)
-    except NotFoundError:
-        raise HTTPException(status_code=404, detail="Device not found")
-    except PermissionError as e:
-        raise HTTPException(status_code=403, detail=str(e))
-    await audit.log_action(
-        admin_user=user.email,
-        action="device_deleted",
-        serial_number=sn,
-        detail={"force": force},
-    )
-
-
-@router.post("/devices/{sn}/email/manufactured", status_code=204)
-async def send_manufactured_email(
-    sn: str,
-    user: TokenPayload = Depends(require_permission("manufacturing", "edit")),
-):
-    """Send the 'device manufactured' notification to the assigned customer's email."""
-    db = get_firestore()
-    docs = list(db.collection("devices").where("serial_number", "==", sn).limit(1).stream())
-    if not docs:
-        raise HTTPException(status_code=404, detail="Device not found")
-    data = docs[0].to_dict() or {}
-    customer_id = data.get("customer_id")
-    if not customer_id:
-        raise HTTPException(status_code=400, detail="No customer assigned to this device")
-    customer_doc = db.collection("crm_customers").document(customer_id).get()
-    if not customer_doc.exists:
-        raise HTTPException(status_code=404, detail="Assigned customer not found")
-    cdata = customer_doc.to_dict() or {}
-    email = cdata.get("email")
-    if not email:
-        raise HTTPException(status_code=400, detail="Customer has no email address")
-    name_parts = [cdata.get("name") or "", cdata.get("surname") or ""]
-    customer_name = " ".join(p for p in name_parts if p).strip() or None
-    hw_family = data.get("hw_family") or data.get("hw_type") or ""
-    from utils.emails.device_mfged_mail import send_device_manufactured_email
-    send_device_manufactured_email(
-        customer_email=email,
-        serial_number=sn,
-        device_name=hw_family.replace("_", " ").title(),
-        customer_name=customer_name,
-    )
-    await audit.log_action(
-        admin_user=user.email,
-        action="email_manufactured_sent",
-        serial_number=sn,
-        detail={"recipient": email},
-    )
-
-
-@router.post("/devices/{sn}/email/assigned", status_code=204)
-async def send_assigned_email(
-    sn: str,
-    user: TokenPayload = Depends(require_permission("manufacturing", "edit")),
-):
-    """Send the 'device assigned / app instructions' email to the assigned user(s)."""
-    db = get_firestore()
-    docs = list(db.collection("devices").where("serial_number", "==", sn).limit(1).stream())
-    if not docs:
-        raise HTTPException(status_code=404, detail="Device not found")
-    data = docs[0].to_dict() or {}
-    user_list = data.get("user_list") or []
-    if not user_list:
-        raise HTTPException(status_code=400, detail="No users assigned to this device")
-    hw_family = data.get("hw_family") or data.get("hw_type") or ""
-    device_name = hw_family.replace("_", " ").title()
-    from utils.emails.device_assigned_mail import send_device_assigned_email
-    errors = []
-    for uid in user_list:
-        try:
-            user_doc = db.collection("users").document(uid).get()
-            if not user_doc.exists:
-                continue
-            udata = user_doc.to_dict() or {}
-            email = udata.get("email")
-            if not email:
-                continue
-            display_name = udata.get("display_name") or udata.get("name") or None
-            send_device_assigned_email(
-                user_email=email,
-                serial_number=sn,
-                device_name=device_name,
-                user_name=display_name,
-            )
-        except Exception as exc:
-            errors.append(str(exc))
-    if errors:
-        raise HTTPException(status_code=500, detail=f"Some emails failed: {'; '.join(errors)}")
-    await audit.log_action(
-        admin_user=user.email,
-        action="email_assigned_sent",
-        serial_number=sn,
-        detail={"user_count": len(user_list)},
-    )
-
-
-@router.delete("/devices", status_code=200)
-async def delete_unprovisioned(
-    user: TokenPayload = Depends(require_permission("manufacturing", "delete")),
-):
-    """Delete all devices with status 'manufactured' (never provisioned)."""
-    deleted = service.delete_unprovisioned_devices()
-    await audit.log_action(
-        admin_user=user.email,
-        action="bulk_delete_unprovisioned",
-        detail={"count": len(deleted), "serial_numbers": deleted},
-    )
-    return {"deleted": deleted, "count": len(deleted)}
-
-
 @router.get("/devices/{sn}/firmware.bin")
 def redirect_firmware(
     sn: str,
@@ -439,123 +139,3 @@ def redirect_firmware(
     """
     url = service.get_firmware_url(sn)
     return RedirectResponse(url=url, status_code=302)
-
-
-# ─────────────────────────────────────────────────────────────────────────────
-# Flash assets — bootloader.bin and partitions.bin per hw_type
-# These are the binaries that must be flashed at fixed addresses during full
-# provisioning (0x1000 bootloader, 0x8000 partition table).
-# They are NOT flashed during OTA updates — only during initial provisioning.
-# Upload once per hw_type after each PlatformIO build that changes the layout.
-# ─────────────────────────────────────────────────────────────────────────────
-
-@router.get("/flash-assets")
-def list_flash_assets(
-    _user: TokenPayload = Depends(require_permission("manufacturing", "view")),
-):
-    """Return asset status for all known board types (and any discovered bespoke UIDs).
-
-    Checks the filesystem directly — no database involved.
-    Each entry contains: hw_type, bootloader (exists, size, uploaded_at), partitions (same), note.
-    """
-    return {"assets": service.list_flash_assets()}
-
-
-@router.delete("/flash-assets/{hw_type}/{asset}", status_code=204)
-async def delete_flash_asset(
-    hw_type: str,
-    asset: str,
-    user: TokenPayload = Depends(require_permission("manufacturing", "delete")),
-):
-    """Delete a single flash asset file (bootloader.bin or partitions.bin)."""
-    if asset not in VALID_FLASH_ASSETS:
-        raise HTTPException(status_code=400, detail=f"Invalid asset. Must be one of: {', '.join(sorted(VALID_FLASH_ASSETS))}")
-    try:
-        service.delete_flash_asset(hw_type, asset)
-    except NotFoundError as e:
-        raise HTTPException(status_code=404, detail=str(e))
-    await audit.log_action(
-        admin_user=user.email,
-        action="flash_asset_deleted",
-        detail={"hw_type": hw_type, "asset": asset},
-    )
-
-
-class FlashAssetNoteBody(BaseModel):
-    note: str
-
-
-@router.put("/flash-assets/{hw_type}/note", status_code=204)
-async def set_flash_asset_note(
-    hw_type: str,
-    body: FlashAssetNoteBody,
-    _user: TokenPayload = Depends(require_permission("manufacturing", "edit")),
-):
-    """Save (or overwrite) the note for a hw_type's flash asset set.
-
-    The note is stored as note.txt next to the binary files.
-    Pass an empty string to clear the note.
-    """
-    service.set_flash_asset_note(hw_type, body.note)
-
-
-@router.post("/flash-assets/{hw_type}/{asset}", status_code=204)
-async def upload_flash_asset(
-    hw_type: str,
-    asset: str,
-    file: UploadFile = File(...),
-    _user: TokenPayload = Depends(require_permission("manufacturing", "add")),
-):
-    """Upload a bootloader.bin or partitions.bin for a given hw_type.
-
-    These are build artifacts from PlatformIO (.pio/build/{env}/bootloader.bin
-    and .pio/build/{env}/partitions.bin). Upload them once per hw_type after
-    each PlatformIO build that changes the partition layout.
-    """
-    # hw_type can be a standard board type OR a bespoke UID (any non-empty slug)
-    if not hw_type or len(hw_type) > 128:
-        raise HTTPException(status_code=400, detail="Invalid hw_type/bespoke UID.")
-    if asset not in VALID_FLASH_ASSETS:
-        raise HTTPException(status_code=400, detail=f"Invalid asset. Must be one of: {', '.join(sorted(VALID_FLASH_ASSETS))}")
-    data = await file.read()
-    service.save_flash_asset(hw_type, asset, data)
-
-
-@router.get("/devices/{sn}/bootloader.bin")
-def download_bootloader(
-    sn: str,
-    hw_type_override: Optional[str] = Query(None, description="Override hw_type for flash asset lookup (for bespoke firmware)"),
-    _user: TokenPayload = Depends(require_permission("manufacturing", "view")),
-):
-    """Return the bootloader.bin for this device's hw_type (flashed at 0x1000)."""
-    item = service.get_device_by_sn(sn)
-    hw_type = hw_type_override or item.hw_type
-    try:
-        data = service.get_flash_asset(hw_type, "bootloader.bin")
-    except NotFoundError as e:
-        raise HTTPException(status_code=404, detail=str(e))
-    return Response(
-        content=data,
-        media_type="application/octet-stream",
-        headers={"Content-Disposition": f'attachment; filename="bootloader_{hw_type}.bin"'},
-    )
-
-
-@router.get("/devices/{sn}/partitions.bin")
-def download_partitions(
-    sn: str,
-    hw_type_override: Optional[str] = Query(None, description="Override hw_type for flash asset lookup (for bespoke firmware)"),
-    _user: TokenPayload = Depends(require_permission("manufacturing", "view")),
-):
-    """Return the partitions.bin for this device's hw_type (flashed at 0x8000)."""
-    item = service.get_device_by_sn(sn)
-    hw_type = hw_type_override or item.hw_type
-    try:
-        data = service.get_flash_asset(hw_type, "partitions.bin")
-    except NotFoundError as e:
-        raise HTTPException(status_code=404, detail=str(e))
-    return Response(
-        content=data,
-        media_type="application/octet-stream",
-        headers={"Content-Disposition": f'attachment; filename="partitions_{hw_type}.bin"'},
-    )

backend/manufacturing/service.py

@@ -1,17 +1,12 @@
-import logging
 import random
 import string
 from datetime import datetime, timezone
-from pathlib import Path
 
-logger = logging.getLogger(__name__)
-
-from config import settings
 from shared.firebase import get_db
 from shared.exceptions import NotFoundError
 from utils.serial_number import generate_serial
 from utils.nvs_generator import generate as generate_nvs_binary
-from manufacturing.models import BatchCreate, BatchResponse, DeviceInventoryItem, DeviceStatusUpdate, DeviceAssign, ManufacturingStats, RecentActivityItem, BOARD_TYPE_LABELS
+from manufacturing.models import BatchCreate, BatchResponse, DeviceInventoryItem, DeviceStatusUpdate, DeviceAssign, ManufacturingStats, RecentActivityItem
 
 COLLECTION = "devices"
 _BATCH_ID_CHARS = string.ascii_uppercase + string.digits
@@ -33,18 +28,6 @@ def _get_existing_sns(db) -> set:
     return existing
 
 
-def _resolve_user_list(raw_list: list) -> list[str]:
-    """Convert user_list entries (DocumentReferences or path strings) to plain user ID strings."""
-    from google.cloud.firestore_v1 import DocumentReference
-    result = []
-    for entry in raw_list:
-        if isinstance(entry, DocumentReference):
-            result.append(entry.id)
-        elif isinstance(entry, str):
-            result.append(entry.split("/")[-1])
-    return result
-
-
 def _doc_to_inventory_item(doc) -> DeviceInventoryItem:
     data = doc.to_dict() or {}
     created_raw = data.get("created_at")
@@ -63,10 +46,6 @@ def _doc_to_inventory_item(doc) -> DeviceInventoryItem:
         created_at=created_str,
         owner=data.get("owner"),
         assigned_to=data.get("assigned_to"),
-        device_name=data.get("device_name") or None,
-        lifecycle_history=data.get("lifecycle_history") or [],
-        customer_id=data.get("customer_id"),
-        user_list=_resolve_user_list(data.get("user_list") or []),
     )
 
 
@@ -95,19 +74,11 @@ def create_batch(data: BatchCreate) -> BatchResponse:
             "created_at": now,
             "owner": None,
             "assigned_to": None,
-            "user_list": [],
+            "users_list": [],
             # Legacy fields left empty so existing device views don't break
             "device_name": "",
             "device_location": "",
             "is_Online": False,
-            "lifecycle_history": [
-                {
-                    "status_id": "manufactured",
-                    "date": now.isoformat(),
-                    "note": None,
-                    "set_by": None,
-                }
-            ],
         })
         serial_numbers.append(sn)
 
@@ -158,38 +129,14 @@ def get_device_by_sn(sn: str) -> DeviceInventoryItem:
     return _doc_to_inventory_item(docs[0])
 
 
-def update_device_status(sn: str, data: DeviceStatusUpdate, set_by: str | None = None) -> DeviceInventoryItem:
+def update_device_status(sn: str, data: DeviceStatusUpdate) -> DeviceInventoryItem:
     db = get_db()
     docs = list(db.collection(COLLECTION).where("serial_number", "==", sn).limit(1).stream())
     if not docs:
         raise NotFoundError("Device")
 
     doc_ref = docs[0].reference
-    doc_data = docs[0].to_dict() or {}
-    now = datetime.now(timezone.utc).isoformat()
-
-    history = list(doc_data.get("lifecycle_history") or [])
-
-    # Upsert lifecycle entry — overwrite existing entry for this status if present
-    new_entry = {
-        "status_id": data.status.value,
-        "date": now,
-        "note": data.note if data.note else None,
-        "set_by": set_by,
-    }
-    existing_idx = next(
-        (i for i, e in enumerate(history) if e.get("status_id") == data.status.value),
-        None,
-    )
-    if existing_idx is not None:
-        history[existing_idx] = new_entry
-    else:
-        history.append(new_entry)
-
-    update = {
-        "mfg_status": data.status.value,
-        "lifecycle_history": history,
-    }
+    update = {"mfg_status": data.status.value}
     if data.note:
         update["mfg_status_note"] = data.note
     doc_ref.update(update)
@@ -197,115 +144,39 @@ def update_device_status(sn: str, data: DeviceStatusUpdate, set_by: str | None =
     return _doc_to_inventory_item(doc_ref.get())
 
 
-def get_nvs_binary(sn: str, hw_type_override: str | None = None, hw_revision_override: str | None = None, legacy: bool = False) -> bytes:
+def get_nvs_binary(sn: str) -> bytes:
     item = get_device_by_sn(sn)
     return generate_nvs_binary(
         serial_number=item.serial_number,
-        hw_family=hw_type_override if hw_type_override else item.hw_type,
-        hw_revision=hw_revision_override if hw_revision_override else item.hw_version,
-        legacy=legacy,
+        hw_type=item.hw_type,
+        hw_version=item.hw_version,
     )
 
 
 def assign_device(sn: str, data: DeviceAssign) -> DeviceInventoryItem:
-    """Assign a device to a customer by customer_id.
+    from utils.email import send_device_assignment_invite
 
-    - Stores customer_id on the device doc.
-    - Adds the device to the customer's owned_items list.
-    - Sets mfg_status to 'sold' unless device is already 'claimed'.
-    """
     db = get_db()
-    CRM_COLLECTION = "crm_customers"
-
-    # Get device doc
     docs = list(db.collection(COLLECTION).where("serial_number", "==", sn).limit(1).stream())
     if not docs:
         raise NotFoundError("Device")
 
-    doc_data = docs[0].to_dict() or {}
     doc_ref = docs[0].reference
-    current_status = doc_data.get("mfg_status", "manufactured")
-
-    # Get customer doc
-    customer_ref = db.collection(CRM_COLLECTION).document(data.customer_id)
-    customer_doc = customer_ref.get()
-    if not customer_doc.exists:
-        raise NotFoundError("Customer")
-    customer_data = customer_doc.to_dict() or {}
-
-    # Determine new status: don't downgrade claimed → sold
-    new_status = current_status if current_status == "claimed" else "sold"
-
-    now = datetime.now(timezone.utc).isoformat()
-    history = doc_data.get("lifecycle_history") or []
-    history.append({
-        "status_id": new_status,
-        "date": now,
-        "note": "Assigned to customer",
-        "set_by": None,
-    })
-
     doc_ref.update({
-        "customer_id": data.customer_id,
-        "mfg_status": new_status,
-        "lifecycle_history": history,
+        "owner": data.customer_email,
+        "assigned_to": data.customer_email,
+        "mfg_status": "sold",
     })
 
-    # Add to customer's owned_items (avoid duplicates)
-    owned_items = customer_data.get("owned_items", []) or []
-    device_doc_id = docs[0].id
-    already_assigned = any(
-        item.get("type") == "console_device"
-        and item.get("console_device", {}).get("device_id") == device_doc_id
-        for item in owned_items
+    send_device_assignment_invite(
+        customer_email=data.customer_email,
+        serial_number=sn,
+        customer_name=data.customer_name,
     )
-    if not already_assigned:
-        device_name = doc_data.get("device_name") or BOARD_TYPE_LABELS.get(doc_data.get("hw_type", ""), sn)
-        owned_items.append({
-            "type": "console_device",
-            "console_device": {
-                "device_id": device_doc_id,
-                "serial_number": sn,
-                "label": device_name,
-            },
-        })
-        customer_ref.update({"owned_items": owned_items})
 
     return _doc_to_inventory_item(doc_ref.get())
 
 
-def search_customers(q: str) -> list:
-    """Search crm_customers by name, email, phone, organization, or tags."""
-    db = get_db()
-    CRM_COLLECTION = "crm_customers"
-    docs = db.collection(CRM_COLLECTION).stream()
-    results = []
-    q_lower = q.lower().strip()
-    for doc in docs:
-        data = doc.to_dict() or {}
-        loc = data.get("location") or {}
-        loc = loc if isinstance(loc, dict) else {}
-        city = loc.get("city") or ""
-        searchable = " ".join(filter(None, [
-            data.get("name"), data.get("surname"),
-            data.get("email"), data.get("phone"), data.get("organization"),
-            loc.get("address"), loc.get("city"), loc.get("postal_code"),
-            loc.get("region"), loc.get("country"),
-            " ".join(data.get("tags") or []),
-        ])).lower()
-        if not q_lower or q_lower in searchable:
-            results.append({
-                "id": doc.id,
-                "name": data.get("name") or "",
-                "surname": data.get("surname") or "",
-                "email": data.get("email") or "",
-                "organization": data.get("organization") or "",
-                "phone": data.get("phone") or "",
-                "city": city or "",
-            })
-    return results
-
-
 def get_stats() -> ManufacturingStats:
     db = get_db()
     docs = list(db.collection(COLLECTION).stream())
@@ -346,146 +217,6 @@ def get_stats() -> ManufacturingStats:
     return ManufacturingStats(counts=counts, recent_activity=recent)
 
 
-PROTECTED_STATUSES = {"sold", "claimed"}
-
-
-def delete_device(sn: str, force: bool = False) -> None:
-    """Delete a device by serial number.
-
-    Raises PermissionError if the device is sold/claimed and force is not set.
-    The frontend uses force=True only after the user confirms by typing the SN.
-    """
-    db = get_db()
-    docs = list(db.collection(COLLECTION).where("serial_number", "==", sn).limit(1).stream())
-    if not docs:
-        raise NotFoundError("Device")
-
-    data = docs[0].to_dict() or {}
-    status = data.get("mfg_status", "manufactured")
-
-    if status in PROTECTED_STATUSES and not force:
-        raise PermissionError(
-            f"Device {sn} has status '{status}' and cannot be deleted without explicit confirmation."
-        )
-
-    docs[0].reference.delete()
-
-
-def delete_unprovisioned_devices() -> list[str]:
-    """Delete all devices with status 'manufactured' (never flashed/provisioned).
-
-    Returns the list of deleted serial numbers.
-    """
-    db = get_db()
-    docs = list(db.collection(COLLECTION).where("mfg_status", "==", "manufactured").stream())
-    deleted = []
-    for doc in docs:
-        data = doc.to_dict() or {}
-        sn = data.get("serial_number", "")
-        doc.reference.delete()
-        deleted.append(sn)
-    return deleted
-
-
-KNOWN_HW_TYPES = ["vesper", "vesper_plus", "vesper_pro", "agnus", "agnus_mini", "chronos", "chronos_pro"]
-FLASH_ASSET_FILES = ["bootloader.bin", "partitions.bin"]
-
-
-def _flash_asset_path(hw_type: str, asset: str) -> Path:
-    """Return path to a flash asset (bootloader.bin or partitions.bin) for a given hw_type."""
-    return Path(settings.flash_assets_storage_path) / hw_type / asset
-
-
-def _flash_asset_info(hw_type: str) -> dict:
-    """Build the asset info dict for a single hw_type by inspecting the filesystem."""
-    base = Path(settings.flash_assets_storage_path) / hw_type
-    note_path = base / "note.txt"
-    note = note_path.read_text(encoding="utf-8").strip() if note_path.exists() else ""
-
-    files = {}
-    for fname in FLASH_ASSET_FILES:
-        p = base / fname
-        if p.exists():
-            stat = p.stat()
-            files[fname] = {
-                "exists": True,
-                "size_bytes": stat.st_size,
-                "uploaded_at": datetime.fromtimestamp(stat.st_mtime, tz=timezone.utc).isoformat(),
-            }
-        else:
-            files[fname] = {"exists": False, "size_bytes": None, "uploaded_at": None}
-
-    return {
-        "hw_type": hw_type,
-        "bootloader": files["bootloader.bin"],
-        "partitions": files["partitions.bin"],
-        "note": note,
-    }
-
-
-def list_flash_assets() -> list:
-    """Return asset status for all known board types plus any discovered bespoke directories."""
-    base = Path(settings.flash_assets_storage_path)
-    results = []
-
-    # Always include all known hw types, even if no files uploaded yet
-    seen = set(KNOWN_HW_TYPES)
-    for hw_type in KNOWN_HW_TYPES:
-        results.append(_flash_asset_info(hw_type))
-
-    # Discover bespoke directories (anything in storage/flash_assets/ not in known list)
-    if base.exists():
-        for entry in sorted(base.iterdir()):
-            if entry.is_dir() and entry.name not in seen:
-                seen.add(entry.name)
-                info = _flash_asset_info(entry.name)
-                info["is_bespoke"] = True
-                results.append(info)
-
-    # Mark known types
-    for r in results:
-        r.setdefault("is_bespoke", False)
-
-    return results
-
-
-def save_flash_asset(hw_type: str, asset: str, data: bytes) -> Path:
-    """Persist a flash asset binary. asset must be 'bootloader.bin' or 'partitions.bin'."""
-    if asset not in ("bootloader.bin", "partitions.bin"):
-        raise ValueError(f"Unknown flash asset: {asset}")
-    path = _flash_asset_path(hw_type, asset)
-    path.parent.mkdir(parents=True, exist_ok=True)
-    path.write_bytes(data)
-    return path
-
-
-def delete_flash_asset(hw_type: str, asset: str) -> None:
-    """Delete a flash asset file. Raises NotFoundError if not present."""
-    path = _flash_asset_path(hw_type, asset)
-    if not path.exists():
-        raise NotFoundError(f"Flash asset '{asset}' for '{hw_type}' not found")
-    path.unlink()
-
-
-def set_flash_asset_note(hw_type: str, note: str) -> None:
-    """Write (or clear) the note for a hw_type's flash asset directory."""
-    base = Path(settings.flash_assets_storage_path) / hw_type
-    base.mkdir(parents=True, exist_ok=True)
-    note_path = base / "note.txt"
-    if note.strip():
-        note_path.write_text(note.strip(), encoding="utf-8")
-    elif note_path.exists():
-        note_path.unlink()
-
-
-def get_flash_asset(hw_type: str, asset: str) -> bytes:
-    """Load a flash asset binary. Raises NotFoundError if not uploaded yet."""
-    path = _flash_asset_path(hw_type, asset)
-    if not path.exists():
-        raise NotFoundError(f"Flash asset '{asset}' for hw_type '{hw_type}' — upload it first via POST /api/manufacturing/flash-assets/{{hw_type}}/{{asset}}")
-    return path.read_bytes()
-
-
 def get_firmware_url(sn: str) -> str:
     """Return the FastAPI download URL for the latest stable firmware for this device's hw_type."""
     from firmware.service import get_latest

backend/melodies/database.py

@@ -1,6 +1,6 @@
 import json
 import logging
-from database import get_db
+from mqtt.database import get_db
 
 logger = logging.getLogger("melodies.database")
 

backend/melodies/models.py

@@ -30,7 +30,6 @@ class MelodyInfo(BaseModel):
     isTrueRing: bool = False
     previewURL: str = ""
     archetype_csv: Optional[str] = None
-    outdated_archetype: bool = False
 
 
 class MelodyAttributes(BaseModel):

backend/melodies/router.py

@@ -146,23 +146,6 @@ async def get_files(
     return service.get_storage_files(melody_id, melody.uid)
 
 
-@router.patch("/{melody_id}/set-outdated", response_model=MelodyInDB)
-async def set_outdated(
-    melody_id: str,
-    outdated: bool = Query(...),
-    _user: TokenPayload = Depends(require_permission("melodies", "edit")),
-):
-    """Manually set or clear the outdated_archetype flag on a melody."""
-    melody = await service.get_melody(melody_id)
-    info = melody.information.model_dump()
-    info["outdated_archetype"] = outdated
-    return await service.update_melody(
-        melody_id,
-        MelodyUpdate(information=MelodyInfo(**info)),
-        actor_name=_user.name,
-    )
-
-
 @router.get("/{melody_id}/download/binary")
 async def download_binary_file(
     melody_id: str,

backend/migrate_customer_flags.py

@@ -1,178 +0,0 @@
-"""
-One-time migration script: convert legacy negotiating/has_problem flags to new structure.
-
-Run AFTER deploying the new backend code:
-    cd backend && python migrate_customer_flags.py
-
-What it does:
-  1. For each customer with negotiating=True:
-     - Creates an order subcollection document with status="negotiating"
-     - Sets relationship_status="active" (only if currently "lead" or "prospect")
-  2. For each customer with has_problem=True:
-     - Appends one entry to technical_issues with active=True
-  3. Removes negotiating and has_problem fields from every customer document
-  4. Initialises relationship_status="lead" on any customer missing it
-  5. Recomputes crm_summary for each affected customer
-"""
-
-import sys
-import os
-import uuid
-from datetime import datetime
-
-# Make sure we can import backend modules
-sys.path.insert(0, os.path.dirname(__file__))
-
-from shared.firebase import init_firebase, get_db
-
-init_firebase()
-
-
-def migrate():
-    db = get_db()
-    customers_ref = db.collection("crm_customers")
-    docs = list(customers_ref.stream())
-    print(f"Found {len(docs)} customer documents.")
-
-    migrated_neg = 0
-    migrated_prob = 0
-    now = datetime.utcnow().isoformat()
-
-    for doc in docs:
-        data = doc.to_dict() or {}
-        customer_id = doc.id
-        updates = {}
-        changed = False
-
-        # ── 1. Initialise new fields if missing ──────────────────────────────
-        if "relationship_status" not in data:
-            updates["relationship_status"] = "lead"
-            changed = True
-        if "technical_issues" not in data:
-            updates["technical_issues"] = []
-            changed = True
-        if "install_support" not in data:
-            updates["install_support"] = []
-            changed = True
-        if "transaction_history" not in data:
-            updates["transaction_history"] = []
-            changed = True
-
-        # ── 2. Migrate negotiating flag ───────────────────────────────────────
-        if data.get("negotiating"):
-            order_id = str(uuid.uuid4())
-            order_data = {
-                "customer_id": customer_id,
-                "order_number": f"ORD-{datetime.utcnow().year}-001-migrated",
-                "title": "Migrated from legacy negotiating flag",
-                "created_by": "system",
-                "status": "negotiating",
-                "status_updated_date": now,
-                "status_updated_by": "system",
-                "items": [],
-                "subtotal": 0,
-                "discount": None,
-                "total_price": 0,
-                "currency": "EUR",
-                "shipping": None,
-                "payment_status": {
-                    "required_amount": 0,
-                    "received_amount": 0,
-                    "balance_due": 0,
-                    "advance_required": False,
-                    "advance_amount": None,
-                    "payment_complete": False,
-                },
-                "invoice_path": None,
-                "notes": "Migrated from legacy negotiating flag",
-                "timeline": [{
-                    "date": now,
-                    "type": "note",
-                    "note": "Migrated from legacy negotiating flag",
-                    "updated_by": "system",
-                }],
-                "created_at": now,
-                "updated_at": now,
-            }
-            customers_ref.document(customer_id).collection("orders").document(order_id).set(order_data)
-
-            current_rel = updates.get("relationship_status") or data.get("relationship_status", "lead")
-            if current_rel in ("lead", "prospect"):
-                updates["relationship_status"] = "active"
-
-            migrated_neg += 1
-            print(f"  [{customer_id}] Created negotiating order, set relationship_status=active")
-
-        # ── 3. Migrate has_problem flag ───────────────────────────────────────
-        if data.get("has_problem"):
-            existing_issues = list(updates.get("technical_issues") or data.get("technical_issues") or [])
-            existing_issues.append({
-                "active": True,
-                "opened_date": data.get("updated_at") or now,
-                "resolved_date": None,
-                "note": "Migrated from legacy has_problem flag",
-                "opened_by": "system",
-                "resolved_by": None,
-            })
-            updates["technical_issues"] = existing_issues
-            migrated_prob += 1
-            changed = True
-            print(f"  [{customer_id}] Appended technical issue from has_problem flag")
-
-        # ── 4. Remove legacy fields ───────────────────────────────────────────
-        from google.cloud.firestore_v1 import DELETE_FIELD
-        if "negotiating" in data:
-            updates["negotiating"] = DELETE_FIELD
-            changed = True
-        if "has_problem" in data:
-            updates["has_problem"] = DELETE_FIELD
-            changed = True
-
-        if changed or data.get("negotiating") or data.get("has_problem"):
-            updates["updated_at"] = now
-            customers_ref.document(customer_id).update(updates)
-
-        # ── 5. Recompute crm_summary ──────────────────────────────────────────
-        # Re-read updated doc to compute summary
-        updated_doc = customers_ref.document(customer_id).get()
-        updated_data = updated_doc.to_dict() or {}
-
-        issues = updated_data.get("technical_issues") or []
-        active_issues = [i for i in issues if i.get("active")]
-        support = updated_data.get("install_support") or []
-        active_support = [s for s in support if s.get("active")]
-
-        TERMINAL = {"declined", "complete"}
-        active_order_status = None
-        active_order_status_date = None
-        active_order_title = None
-        latest_date = ""
-        for odoc in customers_ref.document(customer_id).collection("orders").stream():
-            odata = odoc.to_dict() or {}
-            if odata.get("status") not in TERMINAL:
-                upd = odata.get("status_updated_date") or odata.get("created_at") or ""
-                if upd > latest_date:
-                    latest_date = upd
-                    active_order_status = odata.get("status")
-                    active_order_status_date = upd
-                    active_order_title = odata.get("title")
-
-        summary = {
-            "active_order_status": active_order_status,
-            "active_order_status_date": active_order_status_date,
-            "active_order_title": active_order_title,
-            "active_issues_count": len(active_issues),
-            "latest_issue_date": max((i.get("opened_date") or "") for i in active_issues) if active_issues else None,
-            "active_support_count": len(active_support),
-            "latest_support_date": max((s.get("opened_date") or "") for s in active_support) if active_support else None,
-        }
-        customers_ref.document(customer_id).update({"crm_summary": summary})
-
-    print(f"\nMigration complete.")
-    print(f"  Negotiating orders created: {migrated_neg}")
-    print(f"  Technical issues created:   {migrated_prob}")
-    print(f"  Total customers processed:  {len(docs)}")
-
-
-if __name__ == "__main__":
-    migrate()

backend/mqtt/auth.py

@@ -18,7 +18,7 @@ User types handled:
 - Kiosk users (e.g. "PV25L22BP01R01-kiosk"):
     Same HMAC auth derived from the full kiosk username.
     ACL: allowed to access topics of their base device (suffix stripped).
-- admin, bonamin, NodeRED, and other non-device users:
+- bonamin, NodeRED, and other non-device users:
     These connect via the passwd file backend (go-auth file backend).
     They never reach this HTTP backend — go-auth resolves them first.
     The ACL endpoint below handles them defensively anyway (superuser list).
@@ -35,7 +35,7 @@ LEGACY_PASSWORD = "vesper"
 
 # Users authenticated via passwd file (go-auth file backend).
 # If they somehow reach the HTTP ACL endpoint, grant full access.
-SUPERUSERS = {"admin", "bonamin", "NodeRED"}
+SUPERUSERS = {"bonamin", "NodeRED"}
 
 
 def _derive_password(username: str) -> str:
@@ -86,7 +86,7 @@ async def mqtt_auth_user(
                or kiosk variant: "PV25L22BP01R01-kiosk"
     Password = HMAC-derived (new firmware) or "vesper" (legacy firmware)
 
-    Note: admin, bonamin and NodeRED authenticate via the go-auth passwd file backend
+    Note: bonamin and NodeRED authenticate via the go-auth passwd file backend
     and never reach this endpoint.
     """
     if _is_valid_password(username, password):

backend/mqtt/client.py

@@ -26,7 +26,7 @@ class MqttManager:
 
         self._client = paho_mqtt.Client(
             callback_api_version=paho_mqtt.CallbackAPIVersion.VERSION2,
-            client_id=settings.mqtt_client_id,
+            client_id="bellsystems-admin-panel",
             clean_session=True,
         )
 
@@ -64,8 +64,6 @@ class MqttManager:
             client.subscribe([
                 ("vesper/+/data", 1),
                 ("vesper/+/status/heartbeat", 1),
-                ("vesper/+/status/alerts", 1),
-                ("vesper/+/status/info", 0),
                 ("vesper/+/logs", 1),
             ])
         else:

backend/mqtt/database.py

@@ -0,0 +1,254 @@
+import aiosqlite
+import asyncio
+import json
+import logging
+from datetime import datetime, timedelta, timezone
+from config import settings
+
+logger = logging.getLogger("mqtt.database")
+
+_db: aiosqlite.Connection | None = None
+
+SCHEMA_STATEMENTS = [
+    """CREATE TABLE IF NOT EXISTS device_logs (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        device_serial TEXT NOT NULL,
+        level TEXT NOT NULL,
+        message TEXT NOT NULL,
+        device_timestamp INTEGER,
+        received_at TEXT NOT NULL DEFAULT (datetime('now'))
+    )""",
+    """CREATE TABLE IF NOT EXISTS heartbeats (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        device_serial TEXT NOT NULL,
+        device_id TEXT,
+        firmware_version TEXT,
+        ip_address TEXT,
+        gateway TEXT,
+        uptime_ms INTEGER,
+        uptime_display TEXT,
+        received_at TEXT NOT NULL DEFAULT (datetime('now'))
+    )""",
+    """CREATE TABLE IF NOT EXISTS commands (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        device_serial TEXT NOT NULL,
+        command_name TEXT NOT NULL,
+        command_payload TEXT,
+        status TEXT NOT NULL DEFAULT 'pending',
+        response_payload TEXT,
+        sent_at TEXT NOT NULL DEFAULT (datetime('now')),
+        responded_at TEXT
+    )""",
+    "CREATE INDEX IF NOT EXISTS idx_logs_serial_time ON device_logs(device_serial, received_at)",
+    "CREATE INDEX IF NOT EXISTS idx_logs_level ON device_logs(level)",
+    "CREATE INDEX IF NOT EXISTS idx_heartbeats_serial_time ON heartbeats(device_serial, received_at)",
+    "CREATE INDEX IF NOT EXISTS idx_commands_serial_time ON commands(device_serial, sent_at)",
+    "CREATE INDEX IF NOT EXISTS idx_commands_status ON commands(status)",
+    # Melody drafts table
+    """CREATE TABLE IF NOT EXISTS melody_drafts (
+        id TEXT PRIMARY KEY,
+        status TEXT NOT NULL DEFAULT 'draft',
+        data TEXT NOT NULL,
+        created_at TEXT NOT NULL DEFAULT (datetime('now')),
+        updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+    )""",
+    "CREATE INDEX IF NOT EXISTS idx_melody_drafts_status ON melody_drafts(status)",
+    # Built melodies table (local melody builder)
+    """CREATE TABLE IF NOT EXISTS built_melodies (
+        id TEXT PRIMARY KEY,
+        name TEXT NOT NULL,
+        pid TEXT NOT NULL,
+        steps TEXT NOT NULL,
+        binary_path TEXT,
+        progmem_code TEXT,
+        assigned_melody_ids TEXT NOT NULL DEFAULT '[]',
+        created_at TEXT NOT NULL DEFAULT (datetime('now')),
+        updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+    )""",
+    # Manufacturing audit log
+    """CREATE TABLE IF NOT EXISTS mfg_audit_log (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        timestamp TEXT NOT NULL DEFAULT (datetime('now')),
+        admin_user TEXT NOT NULL,
+        action TEXT NOT NULL,
+        serial_number TEXT,
+        detail TEXT
+    )""",
+    "CREATE INDEX IF NOT EXISTS idx_mfg_audit_time ON mfg_audit_log(timestamp)",
+    "CREATE INDEX IF NOT EXISTS idx_mfg_audit_action ON mfg_audit_log(action)",
+]
+
+
+async def init_db():
+    global _db
+    _db = await aiosqlite.connect(settings.sqlite_db_path)
+    _db.row_factory = aiosqlite.Row
+    for stmt in SCHEMA_STATEMENTS:
+        await _db.execute(stmt)
+    await _db.commit()
+    logger.info(f"SQLite database initialized at {settings.sqlite_db_path}")
+
+
+async def close_db():
+    global _db
+    if _db:
+        await _db.close()
+        _db = None
+
+
+async def get_db() -> aiosqlite.Connection:
+    if _db is None:
+        await init_db()
+    return _db
+
+
+# --- Insert Operations ---
+
+async def insert_log(device_serial: str, level: str, message: str,
+                     device_timestamp: int | None = None):
+    db = await get_db()
+    cursor = await db.execute(
+        "INSERT INTO device_logs (device_serial, level, message, device_timestamp) VALUES (?, ?, ?, ?)",
+        (device_serial, level, message, device_timestamp)
+    )
+    await db.commit()
+    return cursor.lastrowid
+
+
+async def insert_heartbeat(device_serial: str, device_id: str,
+                           firmware_version: str, ip_address: str,
+                           gateway: str, uptime_ms: int, uptime_display: str):
+    db = await get_db()
+    cursor = await db.execute(
+        """INSERT INTO heartbeats
+           (device_serial, device_id, firmware_version, ip_address, gateway, uptime_ms, uptime_display)
+           VALUES (?, ?, ?, ?, ?, ?, ?)""",
+        (device_serial, device_id, firmware_version, ip_address, gateway, uptime_ms, uptime_display)
+    )
+    await db.commit()
+    return cursor.lastrowid
+
+
+async def insert_command(device_serial: str, command_name: str,
+                         command_payload: dict) -> int:
+    db = await get_db()
+    cursor = await db.execute(
+        "INSERT INTO commands (device_serial, command_name, command_payload) VALUES (?, ?, ?)",
+        (device_serial, command_name, json.dumps(command_payload))
+    )
+    await db.commit()
+    return cursor.lastrowid
+
+
+async def update_command_response(command_id: int, status: str,
+                                  response_payload: dict | None = None):
+    db = await get_db()
+    await db.execute(
+        """UPDATE commands SET status = ?, response_payload = ?,
+           responded_at = datetime('now') WHERE id = ?""",
+        (status, json.dumps(response_payload) if response_payload else None, command_id)
+    )
+    await db.commit()
+
+
+# --- Query Operations ---
+
+async def get_logs(device_serial: str, level: str | None = None,
+                   search: str | None = None,
+                   limit: int = 100, offset: int = 0) -> tuple[list, int]:
+    db = await get_db()
+    where_clauses = ["device_serial = ?"]
+    params: list = [device_serial]
+
+    if level:
+        where_clauses.append("level = ?")
+        params.append(level)
+    if search:
+        where_clauses.append("message LIKE ?")
+        params.append(f"%{search}%")
+
+    where = " AND ".join(where_clauses)
+
+    count_row = await db.execute_fetchall(
+        f"SELECT COUNT(*) as cnt FROM device_logs WHERE {where}", params
+    )
+    total = count_row[0][0]
+
+    rows = await db.execute_fetchall(
+        f"SELECT * FROM device_logs WHERE {where} ORDER BY received_at DESC LIMIT ? OFFSET ?",
+        params + [limit, offset]
+    )
+    return [dict(r) for r in rows], total
+
+
+async def get_heartbeats(device_serial: str, limit: int = 100,
+                         offset: int = 0) -> tuple[list, int]:
+    db = await get_db()
+    count_row = await db.execute_fetchall(
+        "SELECT COUNT(*) FROM heartbeats WHERE device_serial = ?", (device_serial,)
+    )
+    total = count_row[0][0]
+    rows = await db.execute_fetchall(
+        "SELECT * FROM heartbeats WHERE device_serial = ? ORDER BY received_at DESC LIMIT ? OFFSET ?",
+        (device_serial, limit, offset)
+    )
+    return [dict(r) for r in rows], total
+
+
+async def get_commands(device_serial: str, limit: int = 100,
+                       offset: int = 0) -> tuple[list, int]:
+    db = await get_db()
+    count_row = await db.execute_fetchall(
+        "SELECT COUNT(*) FROM commands WHERE device_serial = ?", (device_serial,)
+    )
+    total = count_row[0][0]
+    rows = await db.execute_fetchall(
+        "SELECT * FROM commands WHERE device_serial = ? ORDER BY sent_at DESC LIMIT ? OFFSET ?",
+        (device_serial, limit, offset)
+    )
+    return [dict(r) for r in rows], total
+
+
+async def get_latest_heartbeats() -> list:
+    db = await get_db()
+    rows = await db.execute_fetchall("""
+        SELECT h.* FROM heartbeats h
+        INNER JOIN (
+            SELECT device_serial, MAX(received_at) as max_time
+            FROM heartbeats GROUP BY device_serial
+        ) latest ON h.device_serial = latest.device_serial
+        AND h.received_at = latest.max_time
+    """)
+    return [dict(r) for r in rows]
+
+
+async def get_pending_command(device_serial: str) -> dict | None:
+    db = await get_db()
+    rows = await db.execute_fetchall(
+        """SELECT * FROM commands WHERE device_serial = ? AND status = 'pending'
+           ORDER BY sent_at DESC LIMIT 1""",
+        (device_serial,)
+    )
+    return dict(rows[0]) if rows else None
+
+
+# --- Cleanup ---
+
+async def purge_old_data(retention_days: int | None = None):
+    days = retention_days or settings.mqtt_data_retention_days
+    cutoff = (datetime.now(timezone.utc) - timedelta(days=days)).isoformat()
+    db = await get_db()
+    await db.execute("DELETE FROM device_logs WHERE received_at < ?", (cutoff,))
+    await db.execute("DELETE FROM heartbeats WHERE received_at < ?", (cutoff,))
+    await db.execute("DELETE FROM commands WHERE sent_at < ?", (cutoff,))
+    await db.commit()
+    logger.info(f"Purged MQTT data older than {days} days")
+
+
+async def purge_loop():
+    while True:
+        await asyncio.sleep(86400)
+        try:
+            await purge_old_data()
+        except Exception as e:
+            logger.error(f"Purge failed: {e}")

backend/mqtt/logger.py

@@ -1,5 +1,5 @@
 import logging
-import database as db
+from mqtt import database as db
 
 logger = logging.getLogger("mqtt.logger")
 
@@ -18,10 +18,6 @@ async def handle_message(serial: str, topic_type: str, payload: dict):
     try:
         if topic_type == "status/heartbeat":
             await _handle_heartbeat(serial, payload)
-        elif topic_type == "status/alerts":
-            await _handle_alerts(serial, payload)
-        elif topic_type == "status/info":
-            await _handle_info(serial, payload)
         elif topic_type == "logs":
             await _handle_log(serial, payload)
         elif topic_type == "data":
@@ -33,8 +29,6 @@ async def handle_message(serial: str, topic_type: str, payload: dict):
 
 
 async def _handle_heartbeat(serial: str, payload: dict):
-    # Store silently — do not log as a visible event.
-    # The console surfaces an alert only when the device goes silent (no heartbeat for 90s).
     inner = payload.get("payload", {})
     await db.insert_heartbeat(
         device_serial=serial,
@@ -61,31 +55,6 @@ async def _handle_log(serial: str, payload: dict):
     )
 
 
-async def _handle_alerts(serial: str, payload: dict):
-    subsystem = payload.get("subsystem", "")
-    state = payload.get("state", "")
-    if not subsystem or not state:
-        logger.warning(f"Malformed alert payload from {serial}: {payload}")
-        return
-
-    if state == "CLEARED":
-        await db.delete_alert(serial, subsystem)
-    else:
-        await db.upsert_alert(serial, subsystem, state, payload.get("msg"))
-
-
-async def _handle_info(serial: str, payload: dict):
-    event_type = payload.get("type", "")
-    data = payload.get("payload", {})
-
-    if event_type == "playback_started":
-        logger.debug(f"{serial}: playback started — melody_uid={data.get('melody_uid')}")
-    elif event_type == "playback_stopped":
-        logger.debug(f"{serial}: playback stopped")
-    else:
-        logger.debug(f"{serial}: info event '{event_type}'")
-
-
 async def _handle_data_response(serial: str, payload: dict):
     status = payload.get("status", "")
 

backend/mqtt/models.py

@@ -84,15 +84,3 @@ class CommandSendResponse(BaseModel):
     success: bool
     command_id: int
     message: str
-
-
-class DeviceAlertEntry(BaseModel):
-    device_serial: str
-    subsystem: str
-    state: str
-    message: Optional[str] = None
-    updated_at: str
-
-
-class DeviceAlertsResponse(BaseModel):
-    alerts: List[DeviceAlertEntry]

backend/mqtt/router.py

@@ -8,7 +8,7 @@ from mqtt.models import (
     CommandListResponse, HeartbeatEntry,
 )
 from mqtt.client import mqtt_manager
-import database as db
+from mqtt import database as db
 from datetime import datetime, timezone
 
 router = APIRouter(prefix="/api/mqtt", tags=["mqtt"])

backend/public/router.py

@@ -1,214 +0,0 @@
-"""
-Public (no-auth) endpoints for CloudFlash and feature gate checks.
-"""
-from fastapi import APIRouter, HTTPException
-from fastapi.responses import Response
-from pydantic import BaseModel
-from typing import List, Optional
-
-from settings.public_features_service import get_public_features
-from firmware.service import list_firmware
-from utils.nvs_generator import generate as generate_nvs
-from manufacturing.service import get_device_by_sn
-from shared.exceptions import NotFoundError
-
-router = APIRouter(prefix="/api/public", tags=["public"])
-
-
-# ── Feature gate ──────────────────────────────────────────────────────────────
-
-class CloudFlashStatus(BaseModel):
-    enabled: bool
-
-
-@router.get("/cloudflash/status", response_model=CloudFlashStatus)
-async def cloudflash_status():
-    """Returns whether the CloudFlash public page is currently enabled."""
-    settings = get_public_features()
-    return CloudFlashStatus(enabled=settings.cloudflash_enabled)
-
-
-def _require_cloudflash_enabled():
-    """Raises 403 if CloudFlash is disabled."""
-    settings = get_public_features()
-    if not settings.cloudflash_enabled:
-        raise HTTPException(status_code=403, detail="CloudFlash is currently disabled.")
-
-
-# ── Public firmware list ───────────────────────────────────────────────────────
-
-class PublicFirmwareOption(BaseModel):
-    hw_type: str
-    hw_type_label: str
-    channel: str
-    version: str
-    download_url: str
-
-
-HW_TYPE_LABELS = {
-    "vesper":      "Vesper",
-    "vesper_plus": "Vesper Plus",
-    "vesper_pro":  "Vesper Pro",
-    "agnus":       "Agnus",
-    "agnus_mini":  "Agnus Mini",
-    "chronos":     "Chronos",
-    "chronos_pro": "Chronos Pro",
-}
-
-
-@router.get("/cloudflash/firmware", response_model=List[PublicFirmwareOption])
-async def list_public_firmware():
-    """
-    Returns all available firmware options (is_latest=True, non-bespoke, stable channel only).
-    No authentication required — used by the public CloudFlash page.
-    """
-    _require_cloudflash_enabled()
-
-    all_fw = list_firmware()
-    options = []
-    for fw in all_fw:
-        if not fw.is_latest:
-            continue
-        if fw.hw_type == "bespoke":
-            continue
-        if fw.channel != "stable":
-            continue
-        options.append(PublicFirmwareOption(
-            hw_type=fw.hw_type,
-            hw_type_label=HW_TYPE_LABELS.get(fw.hw_type, fw.hw_type.replace("_", " ").title()),
-            channel=fw.channel,
-            version=fw.version,
-            download_url=f"/api/firmware/{fw.hw_type}/{fw.channel}/{fw.version}/firmware.bin",
-        ))
-
-    # Sort by hw_type label
-    options.sort(key=lambda x: x.hw_type_label)
-    return options
-
-
-# ── Public serial number validation ──────────────────────────────────────────
-
-class SerialValidationResult(BaseModel):
-    valid: bool
-    hw_type: Optional[str] = None
-    hw_type_label: Optional[str] = None
-    hw_version: Optional[str] = None
-
-
-@router.get("/cloudflash/validate-serial/{serial_number}", response_model=SerialValidationResult)
-async def validate_serial(serial_number: str):
-    """
-    Check whether a serial number exists in the device database.
-    Returns hw_type info if found so the frontend can confirm it matches the user's selection.
-    No sensitive device data is returned.
-    """
-    _require_cloudflash_enabled()
-
-    sn = serial_number.strip().upper()
-    try:
-        device = get_device_by_sn(sn)
-        return SerialValidationResult(
-            valid=True,
-            hw_type=device.hw_type,
-            hw_type_label=HW_TYPE_LABELS.get(device.hw_type, device.hw_type.replace("_", " ").title()),
-            hw_version=device.hw_version,
-        )
-    except Exception:
-        return SerialValidationResult(valid=False)
-
-
-# ── Public NVS generation ─────────────────────────────────────────────────────
-
-class NvsRequest(BaseModel):
-    serial_number: str
-    hw_type: str
-    hw_revision: str
-    nvs_schema: str = "new"  # "legacy" | "new"
-
-    @property
-    def legacy(self) -> bool:
-        return self.nvs_schema == "legacy"
-
-
-@router.post("/cloudflash/nvs.bin")
-async def generate_public_nvs(body: NvsRequest):
-    """
-    Generate an NVS binary for a given serial number + hardware info.
-    No authentication required — used by the public CloudFlash page for Full Wipe flash.
-    The serial number is provided by the user (they read it from the sticker on their device).
-    """
-    _require_cloudflash_enabled()
-
-    sn = body.serial_number.strip().upper()
-    if not sn:
-        raise HTTPException(status_code=422, detail="Serial number is required.")
-
-    hw_type = body.hw_type.strip().lower()
-    hw_revision = body.hw_revision.strip()
-
-    if not hw_type or not hw_revision:
-        raise HTTPException(status_code=422, detail="hw_type and hw_revision are required.")
-
-    try:
-        nvs_bytes = generate_nvs(
-            serial_number=sn,
-            hw_family=hw_type,
-            hw_revision=hw_revision,
-            legacy=body.legacy,
-        )
-    except Exception as e:
-        raise HTTPException(status_code=500, detail=f"NVS generation failed: {str(e)}")
-
-    return Response(
-        content=nvs_bytes,
-        media_type="application/octet-stream",
-        headers={"Content-Disposition": f'attachment; filename="{sn}_nvs.bin"'},
-    )
-
-
-# ── Public flash assets (bootloader + partitions) ─────────────────────────────
-
-@router.get("/cloudflash/{hw_type}/bootloader.bin")
-async def get_public_bootloader(hw_type: str):
-    """
-    Serve the bootloader binary for a given hw_type.
-    No authentication required — used by the public CloudFlash page.
-    """
-    _require_cloudflash_enabled()
-
-    import os
-    from config import settings as cfg
-    from pathlib import Path
-
-    asset_path = Path(cfg.flash_assets_storage_path) / hw_type / "bootloader.bin"
-    if not asset_path.exists():
-        raise HTTPException(status_code=404, detail=f"Bootloader not found for {hw_type}.")
-
-    return Response(
-        content=asset_path.read_bytes(),
-        media_type="application/octet-stream",
-        headers={"Content-Disposition": f'attachment; filename="bootloader_{hw_type}.bin"'},
-    )
-
-
-@router.get("/cloudflash/{hw_type}/partitions.bin")
-async def get_public_partitions(hw_type: str):
-    """
-    Serve the partition table binary for a given hw_type.
-    No authentication required — used by the public CloudFlash page.
-    """
-    _require_cloudflash_enabled()
-
-    import os
-    from config import settings as cfg
-    from pathlib import Path
-
-    asset_path = Path(cfg.flash_assets_storage_path) / hw_type / "partitions.bin"
-    if not asset_path.exists():
-        raise HTTPException(status_code=404, detail=f"Partition table not found for {hw_type}.")
-
-    return Response(
-        content=asset_path.read_bytes(),
-        media_type="application/octet-stream",
-        headers={"Content-Disposition": f'attachment; filename="partitions_{hw_type}.bin"'},
-    )

backend/requirements.txt

@@ -10,8 +10,3 @@ python-multipart==0.0.20
 bcrypt==4.0.1
 aiosqlite==0.20.0
 resend==2.10.0
-httpx>=0.27.0
-weasyprint>=62.0
-jinja2>=3.1.0
-Pillow>=10.0.0
-pdf2image>=1.17.0

backend/settings/public_features_models.py

@@ -1,10 +0,0 @@
-from pydantic import BaseModel
-from typing import Optional
-
-
-class PublicFeaturesSettings(BaseModel):
-    cloudflash_enabled: bool = False
-
-
-class PublicFeaturesSettingsUpdate(BaseModel):
-    cloudflash_enabled: Optional[bool] = None

backend/settings/public_features_service.py

@@ -1,31 +0,0 @@
-from shared.firebase import get_db
-from settings.public_features_models import PublicFeaturesSettings, PublicFeaturesSettingsUpdate
-
-COLLECTION = "admin_settings"
-DOC_ID = "public_features"
-
-
-def get_public_features() -> PublicFeaturesSettings:
-    """Get public features settings from Firestore. Creates defaults if not found."""
-    db = get_db()
-    doc = db.collection(COLLECTION).document(DOC_ID).get()
-    if doc.exists:
-        return PublicFeaturesSettings(**doc.to_dict())
-    defaults = PublicFeaturesSettings()
-    db.collection(COLLECTION).document(DOC_ID).set(defaults.model_dump())
-    return defaults
-
-
-def update_public_features(data: PublicFeaturesSettingsUpdate) -> PublicFeaturesSettings:
-    """Update public features settings. Only provided fields are updated."""
-    db = get_db()
-    doc_ref = db.collection(COLLECTION).document(DOC_ID)
-    doc = doc_ref.get()
-
-    existing = doc.to_dict() if doc.exists else PublicFeaturesSettings().model_dump()
-    update_data = data.model_dump(exclude_none=True)
-    existing.update(update_data)
-
-    normalized = PublicFeaturesSettings(**existing)
-    doc_ref.set(normalized.model_dump())
-    return normalized

backend/settings/router.py

@@ -1,11 +1,8 @@
 from fastapi import APIRouter, Depends
 from auth.models import TokenPayload
-from auth.dependencies import require_permission, require_roles
-from auth.models import Role
+from auth.dependencies import require_permission
 from settings.models import MelodySettings, MelodySettingsUpdate
-from settings.public_features_models import PublicFeaturesSettings, PublicFeaturesSettingsUpdate
 from settings import service
-from settings import public_features_service
 
 router = APIRouter(prefix="/api/settings", tags=["settings"])
 
@@ -23,20 +20,3 @@ async def update_melody_settings(
     _user: TokenPayload = Depends(require_permission("melodies", "edit")),
 ):
     return service.update_melody_settings(body)
-
-
-# ── Public Features Settings (sysadmin / admin only) ─────────────────────────
-
-@router.get("/public-features", response_model=PublicFeaturesSettings)
-async def get_public_features(
-    _user: TokenPayload = Depends(require_roles(Role.sysadmin, Role.admin)),
-):
-    return public_features_service.get_public_features()
-
-
-@router.put("/public-features", response_model=PublicFeaturesSettings)
-async def update_public_features(
-    body: PublicFeaturesSettingsUpdate,
-    _user: TokenPayload = Depends(require_roles(Role.sysadmin, Role.admin)),
-):
-    return public_features_service.update_public_features(body)

backend/templates/quotation.html

@@ -1,708 +0,0 @@
-<!DOCTYPE html>
-<html lang="{{ lang }}">
-<head>
-<meta charset="UTF-8"/>
-<title>{% if lang == 'gr' %}Προσφορά{% else %}Quotation{% endif %} {{ quotation.quotation_number }}</title>
-<style>
-  @import url('https://fonts.googleapis.com/css2?family=Noto+Sans:ital,wght@0,400;0,600;0,700;1,400&display=swap');
-
-  * { box-sizing: border-box; margin: 0; padding: 0; }
-
-  body {
-    font-family: 'Noto Sans', DejaVu Sans, Arial, sans-serif;
-    font-size: 9.5pt;
-    color: #1a1a2e;
-    background: #fff;
-    line-height: 1.45;
-    display: flex;
-    flex-direction: column;
-    min-height: 100vh;
-    padding-bottom: 36mm;
-  }
-
-  /* pushes notes + validity down toward the fixed footer */
-  .main-content-gap {
-    flex-grow: 1;
-  }
-
-  @page {
-    size: A4;
-    margin: 15mm 15mm 15mm 15mm;
-  }
-
-  /* ── HEADER ── */
-  .header {
-    display: flex;
-    justify-content: space-between;
-    align-items: flex-start;
-    padding-bottom: 10px;
-    border-bottom: 2.5px solid #5886c4;
-    margin-bottom: 14px;
-  }
-
-  .company-block {
-    display: flex;
-    flex-direction: column;
-    justify-content: flex-start;
-  }
-  .company-block img.logo {
-    max-height: 70px;
-    max-width: 250px;
-    object-fit: contain;
-    display: block;
-    margin-bottom: 5px;
-  }
-  .company-block p {
-    font-size: 10pt;
-    color: #6b8fc4;
-    margin-top: 1px;
-  }
-
-  .quotation-meta-block {
-    text-align: right;
-  }
-  .quotation-meta-block .doc-type {
-    font-size: 14pt;
-    font-weight: 700;
-    color: #5886c4;
-    text-transform: uppercase;
-    letter-spacing: 1px;
-    margin-bottom: 4px;
-  }
-  .quotation-meta-block .meta-line {
-    font-size: 8.5pt;
-    text-align: right;
-    white-space: nowrap;
-    line-height: 1.6;
-  }
-  .quotation-meta-block .meta-line .meta-label {
-    color: #7a9cc8;
-  }
-  .quotation-meta-block .meta-line .meta-value {
-    font-weight: 600;
-    color: #1a1a2e;
-  }
-
-  /* ── CLIENT + ORDER META ── */
-  .info-row {
-    display: flex;
-    align-items: stretch;
-    gap: 16px;
-    margin-bottom: 12px;
-  }
-
-  .client-block, .order-block {
-    border: 1px solid #c2d4ec;
-    border-radius: 5px;
-    padding: 6px 10px;
-  }
-  .client-block { flex: 65; }
-  .order-block  { flex: 35; }
-
-  .block-title {
-    font-size: 7.5pt;
-    font-weight: 700;
-    text-transform: uppercase;
-    color: #5886c4;
-    letter-spacing: 0.5px;
-    margin-bottom: 3px;
-    border-bottom: 1px solid #dce9f7;
-    padding-bottom: 2px;
-  }
-
-  .info-row table.fields {
-    border-collapse: collapse;
-    width: 100%;
-  }
-  .info-row table.fields td {
-    padding: 1px 0;
-    vertical-align: top;
-  }
-  .info-row table.fields td.lbl {
-    font-size: 8pt;
-    color: #7a9cc8;
-    white-space: nowrap;
-    padding-right: 8px;
-  }
-  .info-row table.fields td.val {
-    font-size: 8.5pt;
-    font-weight: 500;
-    color: #1a1a2e;
-  }
-
-  /* ── TITLE / SUBTITLE ── */
-  .quotation-title {
-    margin-bottom: 10px;
-  }
-  .quotation-title h2 {
-    font-size: 13pt;
-    font-weight: 700;
-    color: #3a6aad;
-  }
-  .quotation-title p {
-    font-size: 9pt;
-    color: #555;
-    margin-top: 2px;
-  }
-
-  /* ── ITEMS TABLE ── */
-  .items-table {
-    width: 100%;
-    border-collapse: collapse;
-    margin-bottom: 0;
-    font-size: 8.5pt;
-  }
-  .items-table thead tr {
-    background: #5886c4;
-    color: #fff;
-  }
-  .items-table thead th {
-    padding: 6px 8px;
-    text-align: left;
-    font-weight: 600;
-    font-size: 8pt;
-    text-transform: uppercase;
-    letter-spacing: 0.3px;
-  }
-  .items-table thead th.right { text-align: right; }
-  .items-table thead th.center { text-align: center; }
-
-  .items-table tbody tr:nth-child(even) { background: #eef4fc; }
-  .items-table tbody tr:nth-child(odd)  { background: #fff; }
-
-  .items-table tbody td {
-    padding: 5px 8px;
-    border-bottom: 1px solid #dce9f7;
-    vertical-align: middle;
-  }
-  .items-table tbody td.right { text-align: right; }
-  .items-table tbody td.center { text-align: center; }
-  .items-table tbody td.muted { color: #7a9cc8; font-size: 8pt; }
-
-  /* Special rows for shipping/install */
-  .items-table tbody tr.special-row td {
-    background: #edf3fb;
-    border-top: 1px solid #c2d4ec;
-    border-bottom: 1px solid #c2d4ec;
-    font-style: italic;
-    color: #3a6aad;
-  }
-  .items-table tbody tr.special-spacer td {
-    height: 6px;
-    background: #f4f8fd;
-    border: none;
-    padding: 0;
-  }
-
-  /* ── BELOW TABLE ROW: VAT notice + totals ── */
-  .below-table {
-    display: flex;
-    justify-content: space-between;
-    align-items: flex-start;
-    margin-top: 0;
-    margin-bottom: 14px;
-  }
-
-  .vat-notice {
-    flex: 1;
-    padding-top: 8px;
-    padding-right: 16px;
-  }
-  .vat-notice p {
-    font-size: 8pt;
-    font-weight: 700;
-    color: #3a6aad;
-    text-transform: uppercase;
-    letter-spacing: 0.3px;
-    border-left: 3px solid #5886c4;
-    padding-left: 7px;
-    padding-top: 2px;
-    padding-bottom: 2px;
-  }
-
-  /* ── TOTALS ── */
-  .totals-table {
-    width: 280px;
-    border-collapse: collapse;
-    font-size: 8.5pt;
-    flex-shrink: 0;
-  }
-  .totals-table td {
-    padding: 4px 10px;
-    border-bottom: 1px solid #dce9f7;
-  }
-  .totals-table .label { color: #555; text-align: right; }
-  .totals-table .value { text-align: right; font-weight: 500; min-width: 90px; }
-  .totals-table .discount-row { color: #c0392b; }
-  .totals-table .new-subtotal-row td { font-size: 10pt; font-weight: 700; color: #1a1a2e; }
-  .totals-table .vat-row td { color: #7a9cc8; font-style: italic; }
-  .totals-table .final-row td {
-    font-size: 11pt;
-    font-weight: 700;
-    color: #3a6aad;
-    border-top: 2px solid #5886c4;
-    border-bottom: none;
-    padding-top: 6px;
-    padding-bottom: 6px;
-  }
-
-  /* ── COMMENTS ── */
-  .comments-section {
-    margin-bottom: 14px;
-  }
-  .comments-section .section-title {
-    font-size: 8pt;
-    font-weight: 700;
-    text-transform: uppercase;
-    color: #5886c4;
-    letter-spacing: 0.5px;
-    margin-bottom: 5px;
-  }
-  .comments-section ul {
-    padding-left: 14px;
-  }
-  .comments-section li {
-    font-size: 8.5pt;
-    color: #333;
-    margin-bottom: 3px;
-    line-height: 1.4;
-  }
-
-  /* ── FOOTER (validity line only) ── */
-  .footer {
-    border-top: 1px solid #c2d4ec;
-    padding-top: 7px;
-    margin-top: 10px;
-    margin-bottom: 10px;
-  }
-  .footer .validity {
-    font-size: 7.5pt;
-    font-style: italic;
-    color: #7a9cc8;
-  }
-
-  /* ── FIXED BOTTOM FOOTER (repeats on every page) ── */
-  .fixed-footer {
-    position: fixed;
-    bottom: 0;
-    left: 0;
-    right: 0;
-    padding: 8px 0 0 0;
-    border-top: 1.5px solid #5886c4;
-    display: flex;
-    align-items: stretch;
-    gap: 20px;
-    background: #fff;
-  }
-  .footer-block {
-    width: 30%;
-    flex-shrink: 0;
-  }
-  .footer-block-title {
-    font-size: 7pt;
-    font-weight: 700;
-    text-transform: uppercase;
-    color: #5886c4;
-    letter-spacing: 0.4px;
-    margin-bottom: 4px;
-    border-bottom: 1px solid #dce9f7;
-    padding-bottom: 2px;
-  }
-  .footer-block dl {
-    display: grid;
-    grid-template-columns: max-content 1fr;
-    gap: 2px 6px;
-    padding-left: 0;
-    margin-left: 0;
-  }
-  .footer-block dt {
-    font-size: 7pt;
-    color: #7a9cc8;
-    white-space: nowrap;
-  }
-  .footer-block dd {
-    font-size: 7pt;
-    color: #1a1a2e;
-    font-weight: 500;
-  }
-  .footer-ref {
-    margin-left: auto;
-    display: flex;
-    flex-direction: column;
-    justify-content: flex-end;
-    align-items: flex-end;
-    flex-shrink: 0;
-  }
-  .footer-ref .ref-quot {
-    font-size: 7.5pt;
-    font-weight: 700;
-    color: #5886c4;
-    line-height: 1.4;
-  }
-  .footer-ref .ref-page {
-    font-size: 7pt;
-    color: #7a9cc8;
-    line-height: 1.4;
-  }
-  .footer-ref .ref-page::after {
-    content: counter(page) " / " counter(pages);
-  }
-
-  /* ── UTILS ── */
-  .text-muted { color: #aaa; }
-  .dash { color: #ccc; }
-</style>
-</head>
-<body>
-
-{# ── Bilingual labels ── #}
-{% if lang == 'gr' %}
-  {% set L_QUOTATION      = "ΠΡΟΣΦΟΡΑ" %}
-  {% set L_NUMBER         = "Αριθμός" %}
-  {% set L_DATE           = "Ημερομηνία" %}
-  {% set L_CLIENT         = "ΣΤΟΙΧΕΙΑ ΠΕΛΑΤΗ" %}
-  {% set L_ORDER_META     = "ΣΤΟΙΧΕΙΑ ΠΑΡΑΓΓΕΛΙΑΣ" %}
-  {% set L_ORDER_TYPE     = "Τύπος" %}
-  {% set L_SHIP_METHOD    = "Τρ. Αποστολής" %}
-  {% set L_SHIP_DATE      = "Εκτιμώμενη Παράδοση" %}
-  {% set L_DESC           = "Περιγραφή" %}
-  {% set L_UNIT_COST      = "Τιμή Μον." %}
-  {% set L_DISC           = "Έκπτ." %}
-  {% set L_QTY            = "Ποσ." %}
-  {% set L_UNIT           = "Μον." %}
-  {% set L_VAT_COL        = "Φ.Π.Α." %}
-  {% set L_TOTAL          = "Σύνολο" %}
-  {% set L_SUBTOTAL       = "Υποσύνολο" %}
-  {% set L_GLOBAL_DISC    = quotation.global_discount_label or "Έκπτωση" %}
-  {% set L_NEW_SUBTOTAL   = "Νέο Υποσύνολο" %}
-  {% set L_VAT            = "ΣΥΝΟΛΟ Φ.Π.Α." %}
-  {% set L_SHIPPING_COST  = "Μεταφορικά / Shipping" %}
-  {% set L_INSTALL_COST   = "Εγκατάσταση / Installation" %}
-  {% set L_EXTRAS         = quotation.extras_label or "Άλλα" %}
-  {% set L_FINAL          = "ΣΥΝΟΛΟ ΠΛΗΡΩΤΕΟ" %}
-  {% set L_COMMENTS       = "ΣΗΜΕΙΩΣΕΙΣ" %}
-  {% set L_VALIDITY       = "Η προσφορά ισχύει για 30 ημέρες από την ημερομηνία έκδοσής της." %}
-  {% set L_ORG            = "Φορέας" %}
-  {% set L_CONTACT        = "Επικοινωνία" %}
-  {% set L_ADDRESS        = "Διεύθυνση" %}
-  {% set L_PHONE          = "Τηλέφωνο" %}
-  {% set L_COMPANY_ADDR   = "Ε.Ο. Αντιρρίου Ιωαννίνων 23, Αγρίνιο, 30131" %}
-  {% set L_CONTACT_INFO   = "ΣΤΟΙΧΕΙΑ ΕΠΙΚΟΙΝΩΝΙΑΣ" %}
-  {% set L_PAYMENT_INFO   = "ΣΤΟΙΧΕΙΑ ΠΛΗΡΩΜΗΣ" %}
-{% else %}
-  {% set L_QUOTATION      = "QUOTATION" %}
-  {% set L_NUMBER         = "Number" %}
-  {% set L_DATE           = "Date" %}
-  {% set L_CLIENT         = "CLIENT DETAILS" %}
-  {% set L_ORDER_META     = "ORDER DETAILS" %}
-  {% set L_ORDER_TYPE     = "Order Type" %}
-  {% set L_SHIP_METHOD    = "Ship. Method" %}
-  {% set L_SHIP_DATE      = "Est. Delivery" %}
-  {% set L_DESC           = "Description" %}
-  {% set L_UNIT_COST      = "Unit Cost" %}
-  {% set L_DISC           = "Disc." %}
-  {% set L_QTY            = "Qty" %}
-  {% set L_UNIT           = "Unit" %}
-  {% set L_VAT_COL        = "VAT" %}
-  {% set L_TOTAL          = "Total" %}
-  {% set L_SUBTOTAL       = "Subtotal" %}
-  {% set L_GLOBAL_DISC    = quotation.global_discount_label or "Discount" %}
-  {% set L_NEW_SUBTOTAL   = "New Subtotal" %}
-  {% set L_VAT            = "Total VAT" %}
-  {% set L_SHIPPING_COST  = "Shipping / Transport" %}
-  {% set L_INSTALL_COST   = "Installation" %}
-  {% set L_EXTRAS         = quotation.extras_label or "Extras" %}
-  {% set L_FINAL          = "TOTAL DUE" %}
-  {% set L_COMMENTS       = "NOTES" %}
-  {% set L_VALIDITY       = "This quotation is valid for 30 days from the date of issue." %}
-  {% set L_ORG            = "Organization" %}
-  {% set L_CONTACT        = "Contact" %}
-  {% set L_ADDRESS        = "Location" %}
-  {% set L_PHONE          = "Phone" %}
-  {% set L_COMPANY_ADDR   = "E.O. Antirriou Ioanninon 23, Agrinio, 30131, Greece" %}
-  {% set L_CONTACT_INFO   = "CONTACT INFORMATION" %}
-  {% set L_PAYMENT_INFO   = "PAYMENT DETAILS" %}
-{% endif %}
-
-{# ── Derived values ── #}
-{% set today = quotation.created_at[:10] %}
-
-{# ── Find phone/email contacts + check if primary contact is already phone/email ── #}
-{% set ns = namespace(customer_phone='', customer_email='', primary_is_phone=false, primary_is_email=false) %}
-{% for contact in customer.contacts %}
-  {% if contact.type == 'phone' and contact.value %}{% if contact.primary %}{% set ns.customer_phone = contact.value %}{% set ns.primary_is_phone = true %}{% elif not ns.customer_phone %}{% set ns.customer_phone = contact.value %}{% endif %}{% endif %}
-  {% if contact.type == 'email' and contact.value %}{% if contact.primary %}{% set ns.customer_email = contact.value %}{% set ns.primary_is_email = true %}{% elif not ns.customer_email %}{% set ns.customer_email = contact.value %}{% endif %}{% endif %}
-{% endfor %}
-{% set customer_phone = ns.customer_phone %}
-{% set customer_email = ns.customer_email %}
-{% set primary_is_phone = ns.primary_is_phone %}
-{% set primary_is_email = ns.primary_is_email %}
-
-<!-- HEADER -->
-<div class="header">
-  <div class="company-block">
-    <img class="logo" src="./logo.png" alt="BellSystems"/>
-    <p>{{ L_COMPANY_ADDR }}</p>
-  </div>
-  <div class="quotation-meta-block">
-    <div class="doc-type">{{ L_QUOTATION }}</div>
-    <div class="meta-line"><span class="meta-label">{{ L_NUMBER }}: </span><span class="meta-value">{{ quotation.quotation_number }}</span></div>
-    <div class="meta-line"><span class="meta-label">{{ L_DATE }}: </span><span class="meta-value">{{ today }}</span></div>
-  </div>
-</div>
-
-<!-- TITLE / SUBTITLE -->
-{% if quotation.title %}
-<div class="quotation-title">
-  <h2>{{ quotation.title }}</h2>
-  {% if quotation.subtitle %}<p>{{ quotation.subtitle }}</p>{% endif %}
-</div>
-{% endif %}
-
-<!-- CLIENT + ORDER META -->
-<div class="info-row">
-
-  <div class="client-block">
-    <div class="block-title">{{ L_CLIENT }}</div>
-    <table class="fields"><tbody>{% if customer.organization %}<tr><td class="lbl">{{ L_ORG }}</td><td class="val">{{ customer.organization }}</td></tr>{% endif %}{% set name_parts = [customer.title, customer.name, customer.surname] | select | list %}{% if name_parts %}<tr><td class="lbl">{{ L_CONTACT }}</td><td class="val">{{ name_parts | join(' ') }}</td></tr>{% endif %}{% if quotation.client_location %}<tr><td class="lbl">{{ L_ADDRESS }}</td><td class="val">{{ quotation.client_location }}</td></tr>{% elif customer.location %}{% set loc_parts = [customer.location.address, customer.location.city, customer.location.postal_code, customer.location.region, customer.location.country] | select | list %}{% if loc_parts %}<tr><td class="lbl">{{ L_ADDRESS }}</td><td class="val">{{ loc_parts | join(', ') }}</td></tr>{% endif %}{% endif %}{% if customer_email %}<tr><td class="lbl">Email</td><td class="val">{{ customer_email }}</td></tr>{% endif %}{% if customer_phone %}<tr><td class="lbl">{{ L_PHONE }}</td><td class="val">{{ customer_phone }}</td></tr>{% endif %}</tbody></table>
-  </div>
-
-  <div class="order-block">
-    <div class="block-title">{{ L_ORDER_META }}</div>
-    <table class="fields"><tbody>{% if quotation.order_type %}<tr><td class="lbl">{{ L_ORDER_TYPE }}</td><td class="val">{{ quotation.order_type }}</td></tr>{% endif %}{% if quotation.shipping_method %}<tr><td class="lbl">{{ L_SHIP_METHOD }}</td><td class="val">{{ quotation.shipping_method }}</td></tr>{% endif %}{% if quotation.estimated_shipping_date %}<tr><td class="lbl">{{ L_SHIP_DATE }}</td><td class="val">{{ quotation.estimated_shipping_date }}</td></tr>{% else %}<tr><td class="lbl">{{ L_SHIP_DATE }}</td><td class="val text-muted">—</td></tr>{% endif %}</tbody></table>
-  </div>
-
-</div>
-
-<!-- ITEMS TABLE -->
-<table class="items-table">
-  <thead>
-    <tr>
-      <th style="width:38%">{{ L_DESC }}</th>
-      <th class="right" style="width:11%">{{ L_UNIT_COST }}</th>
-      <th class="center" style="width:7%">{{ L_DISC }}</th>
-      <th class="center" style="width:7%">{{ L_QTY }}</th>
-      <th class="center" style="width:7%">{{ L_UNIT }}</th>
-      <th class="center" style="width:6%">{{ L_VAT_COL }}</th>
-      <th class="right" style="width:12%">{{ L_TOTAL }}</th>
-    </tr>
-  </thead>
-  <tbody>
-    {% for item in quotation.items %}
-    <tr>
-      <td>{% if lang == 'gr' %}{{ item.description_gr or item.description or '' }}{% else %}{{ item.description_en or item.description or '' }}{% endif %}</td>
-      <td class="right">{{ item.unit_cost | format_money }}</td>
-      <td class="center">
-        {% if item.discount_percent and item.discount_percent > 0 %}
-          {{ item.discount_percent | int }}%
-        {% else %}
-          <span class="dash">—</span>
-        {% endif %}
-      </td>
-      <td class="center">{{ item.quantity | int if item.quantity == (item.quantity | int) else item.quantity }}</td>
-      <td class="center muted">{{ item.unit_type }}</td>
-      <td class="center">
-        {% if item.vat_percent and item.vat_percent > 0 %}
-          {{ item.vat_percent | int }}%
-        {% else %}
-          <span class="dash">—</span>
-        {% endif %}
-      </td>
-      <td class="right">{{ item.line_total | format_money }}</td>
-    </tr>
-    {% endfor %}
-    {% if quotation.items | length == 0 %}
-    <tr>
-      <td colspan="7" class="text-muted" style="text-align:center; padding: 12px;">—</td>
-    </tr>
-    {% endif %}
-
-    {# ── Shipping / Install as special rows ── #}
-    {% set has_special = (quotation.shipping_cost and quotation.shipping_cost > 0) or (quotation.install_cost and quotation.install_cost > 0) %}
-    {% if has_special %}
-    <tr class="special-spacer"><td colspan="7"></td></tr>
-    {% endif %}
-
-    {% if quotation.shipping_cost and quotation.shipping_cost > 0 %}
-    {% set ship_net = quotation.shipping_cost * (1 - quotation.shipping_cost_discount / 100) %}
-    <tr class="special-row">
-      <td>{{ L_SHIPPING_COST }}{% if quotation.shipping_cost_discount and quotation.shipping_cost_discount > 0 %} <span style="font-size:7.5pt; color:#7a9cc8;">(-{{ quotation.shipping_cost_discount | int }}%)</span>{% endif %}</td>
-      <td class="right">{{ quotation.shipping_cost | format_money }}</td>
-      <td class="center"><span class="dash">—</span></td>
-      <td class="center">1</td>
-      <td class="center muted">—</td>
-      <td class="center"><span class="dash">—</span></td>
-      <td class="right">{{ ship_net | format_money }}</td>
-    </tr>
-    {% endif %}
-
-    {% if quotation.install_cost and quotation.install_cost > 0 %}
-    {% set install_net = quotation.install_cost * (1 - quotation.install_cost_discount / 100) %}
-    <tr class="special-row">
-      <td>{{ L_INSTALL_COST }}{% if quotation.install_cost_discount and quotation.install_cost_discount > 0 %} <span style="font-size:7.5pt; color:#7a9cc8;">(-{{ quotation.install_cost_discount | int }}%)</span>{% endif %}</td>
-      <td class="right">{{ quotation.install_cost | format_money }}</td>
-      <td class="center"><span class="dash">—</span></td>
-      <td class="center">1</td>
-      <td class="center muted">—</td>
-      <td class="center"><span class="dash">—</span></td>
-      <td class="right">{{ install_net | format_money }}</td>
-    </tr>
-    {% endif %}
-
-  </tbody>
-</table>
-
-<!-- TOTALS + VAT NOTICE -->
-<div class="below-table">
-
-  <div class="vat-notice">
-  </div>
-
-  <table class="totals-table">
-    <tr>
-      <td class="label">{{ L_SUBTOTAL }}</td>
-      <td class="value">{{ quotation.subtotal_before_discount | format_money }}</td>
-    </tr>
-    {% if quotation.global_discount_percent and quotation.global_discount_percent > 0 %}
-    <tr class="discount-row">
-      <td class="label">{{ L_GLOBAL_DISC }} ({{ quotation.global_discount_percent | int }}%)</td>
-      <td class="value">- {{ quotation.global_discount_amount | format_money }}</td>
-    </tr>
-    <tr class="new-subtotal-row">
-      <td class="label">{{ L_NEW_SUBTOTAL }}</td>
-      <td class="value">{{ quotation.new_subtotal | format_money }}</td>
-    </tr>
-    {% endif %}
-    <tr class="vat-row">
-      <td class="label">{{ L_VAT }}</td>
-      <td class="value">{{ quotation.vat_amount | format_money }}</td>
-    </tr>
-    {% if quotation.extras_cost and quotation.extras_cost > 0 %}
-    <tr>
-      <td class="label">{{ L_EXTRAS }}</td>
-      <td class="value">{{ quotation.extras_cost | format_money }}</td>
-    </tr>
-    {% endif %}
-    <tr class="final-row">
-      <td class="label">{{ L_FINAL }}</td>
-      <td class="value">{{ quotation.final_total | format_money }}</td>
-    </tr>
-  </table>
-
-</div>
-
-<!-- SPACER: flexible gap between totals and notes -->
-<div class="main-content-gap"></div>
-
-<!-- COMMENTS / NOTES -->
-{% set qn = quotation.quick_notes or {} %}
-{% set has_quick = (qn.payment_advance and qn.payment_advance.enabled) or (qn.lead_time and qn.lead_time.enabled) or (qn.backup_relays and qn.backup_relays.enabled) %}
-{% set has_comments = quotation.comments and quotation.comments | length > 0 %}
-
-{% if has_quick or has_comments %}
-<div class="comments-section">
-  <div class="section-title">{{ L_COMMENTS }}</div>
-  <ul>
-
-    {# ── Quick Notes ── #}
-
-    {# Payment Advance #}
-    {% if qn.payment_advance and qn.payment_advance.enabled %}
-      {% set pct = qn.payment_advance.percent | string %}
-      {% if lang == 'gr' %}
-        <li>Απαιτείται προκαταβολή <strong>{{ pct }}%</strong> με την επιβεβαίωση της παραγγελίας.</li>
-      {% else %}
-        <li><strong>{{ pct }}%</strong> advance payment is required upon order confirmation.</li>
-      {% endif %}
-    {% endif %}
-
-    {# Lead Time #}
-    {% if qn.lead_time and qn.lead_time.enabled %}
-      {% set days = qn.lead_time.days | string %}
-      {% if lang == 'gr' %}
-        <li>Εκτιμώμενος χρόνος παράδοσης, <strong>{{ days }} εργάσιμες ημέρες</strong> από την επιβεβαίωση της παραγγελίας και παραλαβή της προκαταβολής.</li>
-      {% else %}
-        <li>Estimated delivery time is <strong>{{ days }} working days</strong> from order confirmation and receipt of advance payment.</li>
-      {% endif %}
-    {% endif %}
-
-    {# Backup Relays #}
-    {% if qn.backup_relays and qn.backup_relays.enabled %}
-      {% set n = qn.backup_relays.count | int %}
-      {% if lang == 'gr' %}
-        {% if n == 1 %}
-          <li>Συμπεριλαμβάνονται: <strong>{{ n }} έξτρα Εφεδρικό Ρελέ Ισχύος</strong></li>
-        {% else %}
-          <li>Συμπεριλαμβάνονται: <strong>{{ n }} έξτρα Εφεδρικά Ρελέ Ισχύος</strong></li>
-        {% endif %}
-      {% else %}
-        {% if n == 1 %}
-          <li><strong>{{ n }} Extra Relay</strong> included as Backup, free of charge.</li>
-        {% else %}
-          <li><strong>{{ n }} Extra Relays</strong> included as Backups, free of charge.</li>
-        {% endif %}
-      {% endif %}
-    {% endif %}
-
-    {# ── Dynamic comments ── #}
-    {% if has_comments %}
-      {% for comment in quotation.comments %}
-        {% if comment and comment.strip() %}
-        <li>{{ comment }}</li>
-        {% endif %}
-      {% endfor %}
-    {% endif %}
-
-  </ul>
-</div>
-{% endif %}
-
-<!-- VALIDITY -->
-<div class="footer">
-  <span class="validity">{{ L_VALIDITY }}</span>
-</div>
-
-<!-- FIXED BOTTOM FOOTER: contact + payment (repeats every page) -->
-<div class="fixed-footer">
-
-  <div class="footer-block">
-    <div class="footer-block-title">{{ L_CONTACT_INFO }}</div>
-    <dl>
-      <dt>{% if lang == 'gr' %}Εταιρεία{% else %}Company{% endif %}</dt>
-      <dd>BellSystems</dd>
-      <dt>{% if lang == 'gr' %}Τηλ.{% else %}Phone{% endif %}</dt>
-      <dd>+(30) 26410 33344</dd>
-      <dt>{% if lang == 'gr' %}Email{% else %}Email{% endif %}</dt>
-      <dd>sales@bellsystems.gr</dd>
-      <dt>Web</dt>
-      <dd>www.bellsystems.gr</dd>
-      <dt>Links</dt>
-      <dd><img src="./linktree.png" alt="linktr.ee/bellsystems" style="height: 7pt; vertical-align: middle;"/></dd>
-    </dl>
-  </div>
-
-  <div class="footer-block">
-    <div class="footer-block-title">{{ L_PAYMENT_INFO }}</div>
-    <dl>
-      <dt>{% if lang == 'gr' %}Τράπεζα{% else %}Bank{% endif %}</dt>
-      <dd>Piraeus Bank</dd>
-      <dt>{% if lang == 'gr' %}Δικαιούχος{% else %}Holder{% endif %}</dt>
-      <dd>Pontikas Georgios</dd>
-      <dt>{% if lang == 'gr' %}Αριθμός{% else %}Account No.{% endif %}</dt>
-      <dd>6264-1484-35226</dd>
-      <dt>IBAN</dt>
-      <dd>GR8101712640006264148435226</dd>
-      <dt>BIC/SWIFT</dt>
-      <dd>PIRBGRAA</dd>
-    </dl>
-  </div>
-
-  <div class="footer-ref">
-    <span class="ref-quot">{{ quotation.quotation_number }}</span>
-    <span class="ref-page">{% if lang == 'gr' %}Σελίδα {% else %}Page {% endif %}</span>
-  </div>
-
-</div>
-
-</body>
-</html>

backend/utils/email.py

@@ -5,11 +5,15 @@ from config import settings
 logger = logging.getLogger(__name__)
 
 
+def _get_client() -> resend.Resend:
+    return resend.Resend(api_key=settings.resend_api_key)
+
+
 def send_email(to: str, subject: str, html: str) -> None:
     """Send a transactional email via Resend. Logs errors but does not raise."""
     try:
-        resend.api_key = settings.resend_api_key
-        resend.Emails.send({
+        client = _get_client()
+        client.emails.send({
             "from": settings.email_from,
             "to": to,
             "subject": subject,
@@ -24,99 +28,29 @@ def send_email(to: str, subject: str, html: str) -> None:
 def send_device_assignment_invite(
     customer_email: str,
     serial_number: str,
-    device_name: str,
     customer_name: str | None = None,
 ) -> None:
-    """Notify a customer that a Bell Systems device has been assigned and shipped to them."""
-    greeting = f"Dear {customer_name}," if customer_name else "Dear Customer,"
+    """Notify a customer that a Vesper device has been assigned to them."""
+    greeting = f"Hi {customer_name}," if customer_name else "Hello,"
     html = f"""
-    <!DOCTYPE html>
-    <html lang="en">
-    <head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"></head>
-    <body style="margin:0; padding:0; background-color:#f4f4f7; font-family: 'Helvetica Neue', Helvetica, Arial, sans-serif;">
-      <table width="100%" cellpadding="0" cellspacing="0" style="background-color:#f4f4f7; padding: 40px 0;">
-        <tr>
-          <td align="center">
-            <table width="600" cellpadding="0" cellspacing="0" style="background-color:#ffffff; border-radius:8px; overflow:hidden; box-shadow: 0 2px 8px rgba(0,0,0,0.08); max-width:600px; width:100%;">
-
-              <!-- Header -->
-              <tr>
-                <td style="background-color:#0f172a; padding: 32px 40px; text-align:center;">
-                  <h1 style="color:#ffffff; margin:0; font-size:22px; font-weight:700; letter-spacing:1px;">BELLSYSTEMS</h1>
-                  <p style="color:#94a3b8; margin:6px 0 0; font-size:13px; letter-spacing:2px; text-transform:uppercase;">Device Shipment Confirmation</p>
-                </td>
-              </tr>
-
-              <!-- Body -->
-              <tr>
-                <td style="padding: 40px 40px 32px;">
-                  <p style="margin:0 0 20px; font-size:16px; color:#1e293b;">{greeting}</p>
-
-                  <p style="margin:0 0 16px; font-size:15px; color:#334155; line-height:1.7;">
-                    Your <strong>Bell Systems {device_name}</strong> device has been successfully manufactured and shipped.
-                    We are delighted to have it on its way to you!
-                  </p>
-
-                  <p style="margin:0 0 24px; font-size:15px; color:#334155; line-height:1.7;">
-                    To get started, download our controller application from the Google Play Store and follow the in-app setup instructions.
-                  </p>
-
-                  <!-- CTA Button -->
-                  <table cellpadding="0" cellspacing="0" width="100%" style="margin: 28px 0;">
-                    <tr>
-                      <td align="center">
-                        <a href="https://play.google.com/store/apps/details?id=com.bellsystems.vesper"
-                           style="display:inline-block; background-color:#0f172a; color:#ffffff; text-decoration:none;
-                                  padding:14px 32px; border-radius:6px; font-size:15px; font-weight:600; letter-spacing:0.5px;">
-                          Download on Google Play
-                        </a>
-                      </td>
-                    </tr>
-                  </table>
-
-                  <!-- Device info card -->
-                  <table width="100%" cellpadding="0" cellspacing="0" style="background:#f8fafc; border:1px solid #e2e8f0; border-radius:6px; margin-bottom:28px;">
-                    <tr>
-                      <td style="padding:16px 20px; border-bottom:1px solid #e2e8f0;">
-                        <span style="font-size:12px; color:#64748b; text-transform:uppercase; letter-spacing:1px; font-weight:600;">Device</span><br>
-                        <span style="font-size:15px; color:#0f172a; font-weight:600;">Bell Systems {device_name}</span>
-                      </td>
-                    </tr>
-                    <tr>
-                      <td style="padding:16px 20px;">
-                        <span style="font-size:12px; color:#64748b; text-transform:uppercase; letter-spacing:1px; font-weight:600;">Serial Number</span><br>
-                        <code style="font-size:14px; color:#0f172a; background:#e2e8f0; padding:3px 8px; border-radius:4px; font-family:monospace;">{serial_number}</code>
-                      </td>
-                    </tr>
-                  </table>
-
-                  <p style="margin:0; font-size:15px; color:#334155; line-height:1.7;">
-                    Thank you very much. We greatly appreciate your choice in our products.
-                  </p>
-                </td>
-              </tr>
-
-              <!-- Footer -->
-              <tr>
-                <td style="background-color:#f8fafc; border-top:1px solid #e2e8f0; padding:24px 40px; text-align:center;">
-                  <p style="margin:0 0 4px; font-size:14px; color:#0f172a; font-weight:700;">BellSystems.gr</p>
-                  <p style="margin:0; font-size:12px; color:#94a3b8;">
-                    If you did not expect this email, please contact us at
-                    <a href="mailto:support@bellsystems.gr" style="color:#64748b;">support@bellsystems.gr</a>
-                  </p>
-                </td>
-              </tr>
-
-            </table>
-          </td>
-        </tr>
-      </table>
-    </body>
-    </html>
+    <div style="font-family: sans-serif; max-width: 600px; margin: 0 auto;">
+      <h2 style="color: #111827;">Your Vesper device is ready</h2>
+      <p>{greeting}</p>
+      <p>A Vesper bell automation device has been registered and assigned to you.</p>
+      <p>
+        <strong>Serial Number:</strong>
+        <code style="background: #f3f4f6; padding: 2px 6px; border-radius: 4px; font-size: 14px;">{serial_number}</code>
+      </p>
+      <p>Open the Vesper app and enter this serial number to get started.</p>
+      <hr style="border: none; border-top: 1px solid #e5e7eb; margin: 24px 0;" />
+      <p style="color: #6b7280; font-size: 12px;">
+        If you did not expect this email, please contact your system administrator.
+      </p>
+    </div>
     """
     send_email(
         to=customer_email,
-        subject=f"Your Bell Systems {device_name} is on its way! 🎉",
+        subject=f"Your Vesper device is ready — {serial_number}",
         html=html,
     )
 

backend/utils/emails/device_assigned_mail.py

@@ -1,220 +0,0 @@
-import logging
-import base64
-import os
-import resend
-from config import settings
-
-logger = logging.getLogger(__name__)
-
-_LOGO_PATH = os.path.join(os.path.dirname(__file__), "assets", "bell_systems_horizontal_darkMode.png")
-try:
-    with open(_LOGO_PATH, "rb") as _f:
-        _LOGO_B64 = base64.b64encode(_f.read()).decode()
-    _LOGO_SRC = f"data:image/png;base64,{_LOGO_B64}"
-except Exception:
-    _LOGO_SRC = ""
-
-
-def send_email(to: str, subject: str, html: str) -> None:
-    """Send a transactional email via Resend."""
-    try:
-        resend.api_key = settings.resend_api_key
-        resend.Emails.send({
-            "from": settings.email_from,
-            "to": to,
-            "subject": subject,
-            "html": html,
-        })
-        logger.info("Email sent to %s — subject: %s", to, subject)
-    except Exception as exc:
-        logger.error("Failed to send email to %s: %s", to, exc)
-        raise
-
-
-_OPT_IN_URL = "https://play.google.com/apps/testing/com.bellsystems.vesper"
-_APP_URL = "https://play.google.com/store/apps/details?id=com.bellsystems.vesper"
-
-
-def send_device_assigned_email(
-    user_email: str,
-    serial_number: str,
-    device_name: str,
-    user_name: str | None = None,
-) -> None:
-    """
-    Notify a user that a BellSystems device has been assigned to their account,
-    with links to opt in to the Vesper beta programme and download the app.
-    """
-    greeting = f"Dear {user_name}," if user_name else "Dear valued customer,"
-
-    html = f"""<!DOCTYPE html>
-<html lang="en">
-<head>
-  <meta charset="UTF-8">
-  <meta name="viewport" content="width=device-width, initial-scale=1.0">
-  <title>Your BellSystems Device Is Ready</title>
-</head>
-<body style="margin:0; padding:0; background-color:#0d1117; font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;">
-  <table width="100%" cellpadding="0" cellspacing="0" style="background-color:#0d1117; padding:40px 16px;">
-    <tr>
-      <td align="center">
-        <table width="580" cellpadding="0" cellspacing="0"
-          style="background-color:#161b22; border-radius:12px; overflow:hidden;
-                 box-shadow:0 4px 24px rgba(0,0,0,0.5); max-width:580px; width:100%;
-                 border:1px solid #30363d;">
-
-          <!-- Header with logo -->
-          <tr>
-            <td style="background-color:#0f172a; padding:32px 40px 28px; text-align:center;
-                       border-bottom:1px solid #21262d;">
-              {"<img src='" + _LOGO_SRC + "' alt='BellSystems' width='180' style='display:block; margin:0 auto; max-width:180px;'>" if _LOGO_SRC else "<h1 style='color:#ffffff; margin:0; font-size:22px; font-weight:700; letter-spacing:1px;'>BELLSYSTEMS</h1>"}
-              <p style="color:#64748b; margin:14px 0 0; font-size:11px; letter-spacing:2.5px;
-                        text-transform:uppercase; font-weight:600;">Device Activation</p>
-            </td>
-          </tr>
-
-          <!-- Body -->
-          <tr>
-            <td style="padding:36px 40px 28px;">
-
-              <p style="margin:0 0 24px; font-size:16px; color:#c9d1d9; font-weight:500;">
-                {greeting}
-              </p>
-
-              <p style="margin:0 0 18px; font-size:15px; color:#8b949e; line-height:1.75;">
-                Exciting news — your
-                <strong style="color:#c9d1d9;">BellSystems {device_name}</strong>
-                has been assigned to your account and is ready to use!
-              </p>
-
-              <p style="margin:0 0 28px; font-size:15px; color:#8b949e; line-height:1.75;">
-                To get started, join the <strong style="color:#c9d1d9;">Vesper</strong> programme
-                and download the companion app from the Google Play Store. The app gives you full
-                control over your device, including scheduling, customisation, and real-time
-                monitoring.
-              </p>
-
-              <!-- CTA buttons -->
-              <table cellpadding="0" cellspacing="0" width="100%" style="margin:0 0 32px;">
-                <tr>
-                  <td align="center" style="padding-bottom:12px;">
-                    <a href="{_OPT_IN_URL}"
-                       style="display:inline-block; background-color:#238636; color:#ffffff;
-                              text-decoration:none; padding:14px 32px; border-radius:8px;
-                              font-size:14px; font-weight:700; letter-spacing:0.4px;
-                              border:1px solid #2ea043; width:240px; text-align:center;">
-                      Join the Vesper Programme
-                    </a>
-                  </td>
-                </tr>
-                <tr>
-                  <td align="center">
-                    <a href="{_APP_URL}"
-                       style="display:inline-block; background-color:#1f6feb; color:#ffffff;
-                              text-decoration:none; padding:14px 32px; border-radius:8px;
-                              font-size:14px; font-weight:700; letter-spacing:0.4px;
-                              border:1px solid #388bfd; width:240px; text-align:center;">
-                      Download on Google Play
-                    </a>
-                  </td>
-                </tr>
-              </table>
-
-              <!-- Device info card -->
-              <table width="100%" cellpadding="0" cellspacing="0"
-                style="background:#0d1117; border:1px solid #30363d; border-radius:8px; margin-bottom:28px;">
-                <tr>
-                  <td style="padding:16px 20px; border-bottom:1px solid #21262d;">
-                    <span style="font-size:11px; color:#58a6ff; text-transform:uppercase;
-                                 letter-spacing:1.2px; font-weight:700;">Device Model</span><br>
-                    <span style="font-size:15px; color:#c9d1d9; font-weight:600; margin-top:4px; display:block;">
-                      BellSystems {device_name}
-                    </span>
-                  </td>
-                </tr>
-                <tr>
-                  <td style="padding:16px 20px;">
-                    <span style="font-size:11px; color:#58a6ff; text-transform:uppercase;
-                                 letter-spacing:1.2px; font-weight:700;">Serial Number</span><br>
-                    <code style="font-size:14px; color:#79c0ff; background:#161b22;
-                                 padding:4px 10px; border-radius:4px; font-family:monospace;
-                                 border:1px solid #30363d; margin-top:6px; display:inline-block;">
-                      {serial_number}
-                    </code>
-                  </td>
-                </tr>
-              </table>
-
-              <!-- How it works steps -->
-              <table width="100%" cellpadding="0" cellspacing="0"
-                style="background:#0d1117; border:1px solid #30363d; border-radius:8px; margin-bottom:28px;">
-                <tr>
-                  <td style="padding:16px 20px; border-bottom:1px solid #21262d;">
-                    <span style="font-size:11px; color:#8b949e; text-transform:uppercase;
-                                 letter-spacing:1.2px; font-weight:700;">Getting Started</span>
-                  </td>
-                </tr>
-                <tr>
-                  <td style="padding:14px 20px; border-bottom:1px solid #21262d;">
-                    <span style="color:#58a6ff; font-weight:700; font-size:13px;">1 &nbsp;</span>
-                    <span style="color:#8b949e; font-size:13px; line-height:1.6;">
-                      Click <strong style="color:#c9d1d9;">Join the Vesper Programme</strong> above to opt in via the Google Play testing programme.
-                    </span>
-                  </td>
-                </tr>
-                <tr>
-                  <td style="padding:14px 20px; border-bottom:1px solid #21262d;">
-                    <span style="color:#58a6ff; font-weight:700; font-size:13px;">2 &nbsp;</span>
-                    <span style="color:#8b949e; font-size:13px; line-height:1.6;">
-                      Download the <strong style="color:#c9d1d9;">Vesper</strong> app from the Google Play Store.
-                    </span>
-                  </td>
-                </tr>
-                <tr>
-                  <td style="padding:14px 20px;">
-                    <span style="color:#58a6ff; font-weight:700; font-size:13px;">3 &nbsp;</span>
-                    <span style="color:#8b949e; font-size:13px; line-height:1.6;">
-                      Sign in with your account and your device will appear automatically.
-                    </span>
-                  </td>
-                </tr>
-              </table>
-
-              <p style="margin:0; font-size:14px; color:#6e7681; line-height:1.7;">
-                If you have any questions or need assistance with setup, our support team is
-                always happy to help.
-              </p>
-
-            </td>
-          </tr>
-
-          <!-- Footer -->
-          <tr>
-            <td style="background-color:#0d1117; border-top:1px solid #21262d;
-                       padding:24px 40px; text-align:center;">
-              <p style="margin:0 0 6px; font-size:13px; color:#8b949e; font-weight:600;">
-                BellSystems.gr
-              </p>
-              <p style="margin:0; font-size:12px; color:#6e7681;">
-                Questions? Contact us at
-                <a href="mailto:support@bellsystems.gr"
-                   style="color:#58a6ff; text-decoration:none;">support@bellsystems.gr</a>
-              </p>
-              <p style="margin:8px 0 0; font-size:11px; color:#484f58;">
-                If you did not expect this notification, please disregard this message.
-              </p>
-            </td>
-          </tr>
-
-        </table>
-      </td>
-    </tr>
-  </table>
-</body>
-</html>"""
-
-    send_email(
-        to=user_email,
-        subject=f"Your BellSystems {device_name} is ready — get started now!",
-        html=html,
-    )

backend/utils/emails/device_mfged_mail.py

@@ -1,155 +0,0 @@
-import logging
-import base64
-import os
-import resend
-from config import settings
-
-logger = logging.getLogger(__name__)
-
-# Embed logo as base64 so it works in any email client without a public URL
-_LOGO_PATH = os.path.join(os.path.dirname(__file__), "assets", "bell_systems_horizontal_darkMode.png")
-try:
-    with open(_LOGO_PATH, "rb") as _f:
-        _LOGO_B64 = base64.b64encode(_f.read()).decode()
-    _LOGO_SRC = f"data:image/png;base64,{_LOGO_B64}"
-except Exception:
-    _LOGO_SRC = ""  # fallback: image won't appear but email still sends
-
-
-def send_email(to: str, subject: str, html: str) -> None:
-    """Send a transactional email via Resend."""
-    try:
-        resend.api_key = settings.resend_api_key
-        resend.Emails.send({
-            "from": settings.email_from,
-            "to": to,
-            "subject": subject,
-            "html": html,
-        })
-        logger.info("Email sent to %s — subject: %s", to, subject)
-    except Exception as exc:
-        logger.error("Failed to send email to %s: %s", to, exc)
-        raise
-
-
-def send_device_manufactured_email(
-    customer_email: str,
-    serial_number: str,
-    device_name: str,
-    customer_name: str | None = None,
-) -> None:
-    """
-    Notify a customer that their BellSystems device has been manufactured
-    and is being prepared for shipment.
-    """
-    greeting = f"Dear {customer_name}," if customer_name else "Dear valued customer,"
-
-    html = f"""<!DOCTYPE html>
-<html lang="en">
-<head>
-  <meta charset="UTF-8">
-  <meta name="viewport" content="width=device-width, initial-scale=1.0">
-  <title>Your BellSystems Device Has Been Manufactured</title>
-</head>
-<body style="margin:0; padding:0; background-color:#0d1117; font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;">
-  <table width="100%" cellpadding="0" cellspacing="0" style="background-color:#0d1117; padding:40px 16px;">
-    <tr>
-      <td align="center">
-        <table width="580" cellpadding="0" cellspacing="0"
-          style="background-color:#161b22; border-radius:12px; overflow:hidden;
-                 box-shadow:0 4px 24px rgba(0,0,0,0.5); max-width:580px; width:100%;
-                 border:1px solid #30363d;">
-
-          <!-- Header with logo -->
-          <tr>
-            <td style="background-color:#0f172a; padding:32px 40px 28px; text-align:center;
-                       border-bottom:1px solid #21262d;">
-              {"<img src='" + _LOGO_SRC + "' alt='BellSystems' width='180' style='display:block; margin:0 auto; max-width:180px;'>" if _LOGO_SRC else "<h1 style='color:#ffffff; margin:0; font-size:22px; font-weight:700; letter-spacing:1px;'>BELLSYSTEMS</h1>"}
-              <p style="color:#64748b; margin:14px 0 0; font-size:11px; letter-spacing:2.5px;
-                        text-transform:uppercase; font-weight:600;">Manufacturing Update</p>
-            </td>
-          </tr>
-
-          <!-- Body -->
-          <tr>
-            <td style="padding:36px 40px 28px;">
-
-              <p style="margin:0 0 24px; font-size:16px; color:#c9d1d9; font-weight:500;">
-                {greeting}
-              </p>
-
-              <p style="margin:0 0 18px; font-size:15px; color:#8b949e; line-height:1.75;">
-                We are pleased to inform you that your
-                <strong style="color:#c9d1d9;">BellSystems {device_name}</strong>
-                has been successfully manufactured and has passed all quality checks.
-              </p>
-
-              <p style="margin:0 0 28px; font-size:15px; color:#8b949e; line-height:1.75;">
-                Your device is now being prepared for delivery. You will receive a separate
-                notification with tracking information once it has been dispatched.
-              </p>
-
-              <!-- Device info card -->
-              <table width="100%" cellpadding="0" cellspacing="0"
-                style="background:#0d1117; border:1px solid #30363d; border-radius:8px; margin-bottom:32px;">
-                <tr>
-                  <td style="padding:16px 20px; border-bottom:1px solid #21262d;">
-                    <span style="font-size:11px; color:#58a6ff; text-transform:uppercase;
-                                 letter-spacing:1.2px; font-weight:700;">Device Model</span><br>
-                    <span style="font-size:15px; color:#c9d1d9; font-weight:600; margin-top:4px; display:block;">
-                      BellSystems {device_name}
-                    </span>
-                  </td>
-                </tr>
-                <tr>
-                  <td style="padding:16px 20px;">
-                    <span style="font-size:11px; color:#58a6ff; text-transform:uppercase;
-                                 letter-spacing:1.2px; font-weight:700;">Serial Number</span><br>
-                    <code style="font-size:14px; color:#79c0ff; background:#161b22;
-                                 padding:4px 10px; border-radius:4px; font-family:monospace;
-                                 border:1px solid #30363d; margin-top:6px; display:inline-block;">
-                      {serial_number}
-                    </code>
-                  </td>
-                </tr>
-              </table>
-
-              <p style="margin:0 0 8px; font-size:14px; color:#6e7681; line-height:1.7;">
-                Thank you for choosing BellSystems. We take great pride in crafting each device
-                with care and precision, and we look forward to delivering an exceptional
-                experience to you.
-              </p>
-
-            </td>
-          </tr>
-
-          <!-- Footer -->
-          <tr>
-            <td style="background-color:#0d1117; border-top:1px solid #21262d;
-                       padding:24px 40px; text-align:center;">
-              <p style="margin:0 0 6px; font-size:13px; color:#8b949e; font-weight:600;">
-                BellSystems.gr
-              </p>
-              <p style="margin:0; font-size:12px; color:#6e7681;">
-                Questions? Contact us at
-                <a href="mailto:support@bellsystems.gr"
-                   style="color:#58a6ff; text-decoration:none;">support@bellsystems.gr</a>
-              </p>
-              <p style="margin:8px 0 0; font-size:11px; color:#484f58;">
-                If you did not expect this notification, please disregard this message.
-              </p>
-            </td>
-          </tr>
-
-        </table>
-      </td>
-    </tr>
-  </table>
-</body>
-</html>"""
-
-    send_email(
-        to=customer_email,
-        subject=f"Your BellSystems {device_name} has been manufactured",
-        html=html,
-    )

backend/utils/nvs_generator.py

@@ -60,8 +60,7 @@ ENTRY_TYPE_STRING    = 0x21
 
 
 def _crc32(data: bytes) -> int:
-    # ESP-IDF uses 0xFFFFFFFF as the initial CRC seed (matches esp_rom_crc32_le)
-    return binascii.crc32(data, 0xFFFFFFFF) & 0xFFFFFFFF
+    return binascii.crc32(data) & 0xFFFFFFFF
 
 
 def _page_header_crc(seq: int, version: int) -> int:
@@ -177,16 +176,12 @@ def _build_page(entries: List[bytes], slot_counts: List[int], seq: int = 0) -> b
     return page
 
 
-def generate(serial_number: str, hw_family: str, hw_revision: str, legacy: bool = False) -> bytes:
+def generate(serial_number: str, hw_type: str, hw_version: str) -> bytes:
     """Generate a 0x5000-byte NVS partition binary for a Vesper device.
 
-    serial_number: full SN string e.g. 'BSVSPR-26C13X-STD01R-X7KQA'
-    hw_family: board family e.g. 'vesper-standard', 'vesper-plus'
-    hw_revision: hardware revision string e.g. '1.0'
-    legacy: if True, writes old key names expected by legacy firmware (pre-new-schema):
-              device_uid, hw_type, hw_version
-            if False (default), writes new key names:
-              serial, hw_family, hw_revision
+    serial_number: full SN string e.g. 'PV-26B27-VS01R-X7KQA'
+    hw_type: lowercase board type e.g. 'vs', 'vp', 'vx'
+    hw_version: zero-padded version e.g. '01'
 
     Returns raw bytes ready to flash at 0x9000.
     """
@@ -194,14 +189,9 @@ def generate(serial_number: str, hw_family: str, hw_revision: str, legacy: bool
 
     # Build entries for namespace "device_id"
     ns_entry, ns_span = _build_namespace_entry("device_id", ns_index)
-    if legacy:
-        uid_entry, uid_span = _build_string_entry(ns_index, "device_uid",  serial_number)
-        hwt_entry, hwt_span = _build_string_entry(ns_index, "hw_type",     hw_family.lower())
-        hwv_entry, hwv_span = _build_string_entry(ns_index, "hw_version",  hw_revision)
-    else:
-        uid_entry, uid_span = _build_string_entry(ns_index, "serial",      serial_number)
-        hwt_entry, hwt_span = _build_string_entry(ns_index, "hw_family",   hw_family.lower())
-        hwv_entry, hwv_span = _build_string_entry(ns_index, "hw_revision", hw_revision)
+    uid_entry, uid_span = _build_string_entry(ns_index, "device_uid", serial_number)
+    hwt_entry, hwt_span = _build_string_entry(ns_index, "hw_type", hw_type.lower())
+    hwv_entry, hwv_span = _build_string_entry(ns_index, "hw_version", hw_version)
 
     entries = [ns_entry, uid_entry, hwt_entry, hwv_entry]
     spans   = [ns_span,  uid_span,  hwt_span,  hwv_span]

backend/utils/serial_number.py

@@ -4,75 +4,16 @@ from datetime import datetime
 MONTH_CODES = "ABCDEFGHIJKL"
 SAFE_CHARS = "ABCDEFGHJKLMNPQRSTUVWXYZ23456789"  # No 0, O, 1, I — avoids label confusion
 
-# Family segment (chars 3-6 of segment 1, after "BS")
-BOARD_FAMILY_CODES = {
-    "vesper":      "VSPR",
-    "vesper_plus": "VSPR",
-    "vesper_pro":  "VSPR",
-    "agnus":       "AGNS",
-    "agnus_mini":  "AGNS",
-    "chronos":     "CRNS",
-    "chronos_pro": "CRNS",
-}
-
-# Variant segment (first 3 chars of segment 3)
-BOARD_VARIANT_CODES = {
-    "vesper":      "STD",
-    "vesper_plus": "PLS",
-    "vesper_pro":  "PRO",
-    "agnus":       "STD",
-    "agnus_mini":  "MIN",
-    "chronos":     "STD",
-    "chronos_pro": "PRO",
-}
-
-
-def _version_suffix(board_version: str) -> str:
-    """Convert version string to 3-char suffix.
-
-    Rules:
-    - Strip the dot: "2.3" → "23", "10.2" → "102"
-    - If result is 2 digits, append "R": "23" → "23R"
-    - If result is already 3 digits, use as-is: "102" → "102"
-    """
-    digits = board_version.replace(".", "")
-    if len(digits) >= 3:
-        return digits[:3]
-    return digits.ljust(2, "0") + "R"
-
 
 def generate_serial(board_type: str, board_version: str) -> str:
-    """Generate a serial number in the format BSFFFF-YYMDDFX-VVVHHH-XXXXXX.
+    """Generate a serial number in the format PV-YYMMM-BBTTR-XXXXX.
 
-    Format: BSFFFF-YYMDDf-VVVvvv-XXXXXX
-      BS     = Bell Systems (static)
-      FFFF   = 4-char family code (VSPR, AGNS, CRNS)
-      YY     = 2-digit year
-      M      = month code A-L
-      DD     = 2-digit day
-      f      = random filler char
-      VVV    = 3-char variant (STD, PLS, PRO, MIN)
-      vvv    = 3-char version suffix (e.g. 23R, 102)
-      XXXXXX = 6-char random suffix
-
-    board_type: enum value e.g. 'vesper', 'vesper_plus', 'vesper_pro'
-    board_version: version string e.g. '2.3', '10.2'
+    board_type: 2-char uppercase code, e.g. 'VS', 'VP', 'VX'
+    board_version: 2-char zero-padded version, e.g. '01'
     """
-    key = board_type.lower()
-    family  = BOARD_FAMILY_CODES.get(key, "UNKN")
-    variant = BOARD_VARIANT_CODES.get(key, "UNK")
-    ver     = _version_suffix(board_version)
-
     now = datetime.utcnow()
-    year  = now.strftime("%y")
+    year = now.strftime("%y")
     month = MONTH_CODES[now.month - 1]
-    day   = now.strftime("%d")
-    filler = random.choice(SAFE_CHARS)
-    suffix = "".join(random.choices(SAFE_CHARS, k=6))
-
-    seg1 = f"BS{family}"           # e.g. BSVSPR
-    seg2 = f"{year}{month}{day}{filler}"  # e.g. 26C13X
-    seg3 = f"{variant}{ver}"       # e.g. PRO23R
-    seg4 = suffix                  # e.g. X9K4M2
-
-    return f"{seg1}-{seg2}-{seg3}-{seg4}"
+    day = now.strftime("%d")
+    suffix = "".join(random.choices(SAFE_CHARS, k=5))
+    return f"PV-{year}{month}{day}-{board_type.upper()}{board_version}R-{suffix}"

deploy-host.sh

@@ -1,11 +0,0 @@
-#!/bin/sh
-set -e
-
-PROJECT=/home/bellsystems/bellsystems-cp
-
-echo "Deploy started at $(date)"
-cd "$PROJECT"
-git fetch origin main
-git reset --hard origin/main
-docker compose up -d --build 2>&1
-echo "Deploy finished at $(date)"

docker-compose.yml

@@ -6,13 +6,13 @@ services:
     volumes:
       - ./backend:/app
       # Persistent data - lives outside the container
-      - ./data:/app/data
+      - ./data/mqtt_data.db:/app/mqtt_data.db
       - ./data/built_melodies:/app/storage/built_melodies
       - ./data/firmware:/app/storage/firmware
-      - ./data/flash_assets:/app/storage/flash_assets
       - ./data/firebase-service-account.json:/app/firebase-service-account.json:ro
-      # Auto-deploy: project root so container can write the trigger file
+      # Auto-deploy: project root and Docker socket
       - /home/bellsystems/bellsystems-cp:/home/bellsystems/bellsystems-cp
+      - /var/run/docker.sock:/var/run/docker.sock
     ports:
       - "8000:8000"
     depends_on: []

frontend/index.html

@@ -2,7 +2,7 @@
 <html lang="en">
   <head>
     <meta charset="UTF-8" />
-    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <link rel="icon" type="image/svg+xml" href="/vite.svg" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>BellSystems Admin</title>
   </head>

frontend/package-lock.json

@@ -10,7 +10,6 @@
       "dependencies": {
         "esptool-js": "^0.5.7",
         "leaflet": "^1.9.4",
-        "qrcode": "^1.5.4",
         "react": "^19.2.0",
         "react-dom": "^19.2.0",
         "react-leaflet": "^5.0.0",
@@ -27,8 +26,7 @@
         "eslint-plugin-react-refresh": "^0.4.24",
         "globals": "^16.5.0",
         "tailwindcss": "^4.1.18",
-        "vite": "^7.3.1",
-        "vite-plugin-svgr": "^4.5.0"
+        "vite": "^7.3.1"
       }
     },
     "node_modules/@babel/code-frame": {
@@ -1032,29 +1030,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/@rollup/pluginutils": {
-      "version": "5.3.0",
-      "resolved": "https://registry.npmjs.org/@rollup/pluginutils/-/pluginutils-5.3.0.tgz",
-      "integrity": "sha512-5EdhGZtnu3V88ces7s53hhfK5KSASnJZv8Lulpc04cWO3REESroJXg73DFsOmgbU2BhwV0E20bu2IDZb3VKW4Q==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@types/estree": "^1.0.0",
-        "estree-walker": "^2.0.2",
-        "picomatch": "^4.0.2"
-      },
-      "engines": {
-        "node": ">=14.0.0"
-      },
-      "peerDependencies": {
-        "rollup": "^1.20.0||^2.0.0||^3.0.0||^4.0.0"
-      },
-      "peerDependenciesMeta": {
-        "rollup": {
-          "optional": true
-        }
-      }
-    },
     "node_modules/@rollup/rollup-android-arm-eabi": {
       "version": "4.57.1",
       "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm-eabi/-/rollup-android-arm-eabi-4.57.1.tgz",
@@ -1405,231 +1380,6 @@
         "win32"
       ]
     },
-    "node_modules/@svgr/babel-plugin-add-jsx-attribute": {
-      "version": "8.0.0",
-      "resolved": "https://registry.npmjs.org/@svgr/babel-plugin-add-jsx-attribute/-/babel-plugin-add-jsx-attribute-8.0.0.tgz",
-      "integrity": "sha512-b9MIk7yhdS1pMCZM8VeNfUlSKVRhsHZNMl5O9SfaX0l0t5wjdgu4IDzGB8bpnGBBOjGST3rRFVsaaEtI4W6f7g==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=14"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/gregberge"
-      },
-      "peerDependencies": {
-        "@babel/core": "^7.0.0-0"
-      }
-    },
-    "node_modules/@svgr/babel-plugin-remove-jsx-attribute": {
-      "version": "8.0.0",
-      "resolved": "https://registry.npmjs.org/@svgr/babel-plugin-remove-jsx-attribute/-/babel-plugin-remove-jsx-attribute-8.0.0.tgz",
-      "integrity": "sha512-BcCkm/STipKvbCl6b7QFrMh/vx00vIP63k2eM66MfHJzPr6O2U0jYEViXkHJWqXqQYjdeA9cuCl5KWmlwjDvbA==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=14"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/gregberge"
-      },
-      "peerDependencies": {
-        "@babel/core": "^7.0.0-0"
-      }
-    },
-    "node_modules/@svgr/babel-plugin-remove-jsx-empty-expression": {
-      "version": "8.0.0",
-      "resolved": "https://registry.npmjs.org/@svgr/babel-plugin-remove-jsx-empty-expression/-/babel-plugin-remove-jsx-empty-expression-8.0.0.tgz",
-      "integrity": "sha512-5BcGCBfBxB5+XSDSWnhTThfI9jcO5f0Ai2V24gZpG+wXF14BzwxxdDb4g6trdOux0rhibGs385BeFMSmxtS3uA==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=14"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/gregberge"
-      },
-      "peerDependencies": {
-        "@babel/core": "^7.0.0-0"
-      }
-    },
-    "node_modules/@svgr/babel-plugin-replace-jsx-attribute-value": {
-      "version": "8.0.0",
-      "resolved": "https://registry.npmjs.org/@svgr/babel-plugin-replace-jsx-attribute-value/-/babel-plugin-replace-jsx-attribute-value-8.0.0.tgz",
-      "integrity": "sha512-KVQ+PtIjb1BuYT3ht8M5KbzWBhdAjjUPdlMtpuw/VjT8coTrItWX6Qafl9+ji831JaJcu6PJNKCV0bp01lBNzQ==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=14"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/gregberge"
-      },
-      "peerDependencies": {
-        "@babel/core": "^7.0.0-0"
-      }
-    },
-    "node_modules/@svgr/babel-plugin-svg-dynamic-title": {
-      "version": "8.0.0",
-      "resolved": "https://registry.npmjs.org/@svgr/babel-plugin-svg-dynamic-title/-/babel-plugin-svg-dynamic-title-8.0.0.tgz",
-      "integrity": "sha512-omNiKqwjNmOQJ2v6ge4SErBbkooV2aAWwaPFs2vUY7p7GhVkzRkJ00kILXQvRhA6miHnNpXv7MRnnSjdRjK8og==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=14"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/gregberge"
-      },
-      "peerDependencies": {
-        "@babel/core": "^7.0.0-0"
-      }
-    },
-    "node_modules/@svgr/babel-plugin-svg-em-dimensions": {
-      "version": "8.0.0",
-      "resolved": "https://registry.npmjs.org/@svgr/babel-plugin-svg-em-dimensions/-/babel-plugin-svg-em-dimensions-8.0.0.tgz",
-      "integrity": "sha512-mURHYnu6Iw3UBTbhGwE/vsngtCIbHE43xCRK7kCw4t01xyGqb2Pd+WXekRRoFOBIY29ZoOhUCTEweDMdrjfi9g==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=14"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/gregberge"
-      },
-      "peerDependencies": {
-        "@babel/core": "^7.0.0-0"
-      }
-    },
-    "node_modules/@svgr/babel-plugin-transform-react-native-svg": {
-      "version": "8.1.0",
-      "resolved": "https://registry.npmjs.org/@svgr/babel-plugin-transform-react-native-svg/-/babel-plugin-transform-react-native-svg-8.1.0.tgz",
-      "integrity": "sha512-Tx8T58CHo+7nwJ+EhUwx3LfdNSG9R2OKfaIXXs5soiy5HtgoAEkDay9LIimLOcG8dJQH1wPZp/cnAv6S9CrR1Q==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=14"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/gregberge"
-      },
-      "peerDependencies": {
-        "@babel/core": "^7.0.0-0"
-      }
-    },
-    "node_modules/@svgr/babel-plugin-transform-svg-component": {
-      "version": "8.0.0",
-      "resolved": "https://registry.npmjs.org/@svgr/babel-plugin-transform-svg-component/-/babel-plugin-transform-svg-component-8.0.0.tgz",
-      "integrity": "sha512-DFx8xa3cZXTdb/k3kfPeaixecQLgKh5NVBMwD0AQxOzcZawK4oo1Jh9LbrcACUivsCA7TLG8eeWgrDXjTMhRmw==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/gregberge"
-      },
-      "peerDependencies": {
-        "@babel/core": "^7.0.0-0"
-      }
-    },
-    "node_modules/@svgr/babel-preset": {
-      "version": "8.1.0",
-      "resolved": "https://registry.npmjs.org/@svgr/babel-preset/-/babel-preset-8.1.0.tgz",
-      "integrity": "sha512-7EYDbHE7MxHpv4sxvnVPngw5fuR6pw79SkcrILHJ/iMpuKySNCl5W1qcwPEpU+LgyRXOaAFgH0KhwD18wwg6ug==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@svgr/babel-plugin-add-jsx-attribute": "8.0.0",
-        "@svgr/babel-plugin-remove-jsx-attribute": "8.0.0",
-        "@svgr/babel-plugin-remove-jsx-empty-expression": "8.0.0",
-        "@svgr/babel-plugin-replace-jsx-attribute-value": "8.0.0",
-        "@svgr/babel-plugin-svg-dynamic-title": "8.0.0",
-        "@svgr/babel-plugin-svg-em-dimensions": "8.0.0",
-        "@svgr/babel-plugin-transform-react-native-svg": "8.1.0",
-        "@svgr/babel-plugin-transform-svg-component": "8.0.0"
-      },
-      "engines": {
-        "node": ">=14"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/gregberge"
-      },
-      "peerDependencies": {
-        "@babel/core": "^7.0.0-0"
-      }
-    },
-    "node_modules/@svgr/core": {
-      "version": "8.1.0",
-      "resolved": "https://registry.npmjs.org/@svgr/core/-/core-8.1.0.tgz",
-      "integrity": "sha512-8QqtOQT5ACVlmsvKOJNEaWmRPmcojMOzCz4Hs2BGG/toAp/K38LcsMRyLp349glq5AzJbCEeimEoxaX6v/fLrA==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@babel/core": "^7.21.3",
-        "@svgr/babel-preset": "8.1.0",
-        "camelcase": "^6.2.0",
-        "cosmiconfig": "^8.1.3",
-        "snake-case": "^3.0.4"
-      },
-      "engines": {
-        "node": ">=14"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/gregberge"
-      }
-    },
-    "node_modules/@svgr/hast-util-to-babel-ast": {
-      "version": "8.0.0",
-      "resolved": "https://registry.npmjs.org/@svgr/hast-util-to-babel-ast/-/hast-util-to-babel-ast-8.0.0.tgz",
-      "integrity": "sha512-EbDKwO9GpfWP4jN9sGdYwPBU0kdomaPIL2Eu4YwmgP+sJeXT+L7bMwJUBnhzfH8Q2qMBqZ4fJwpCyYsAN3mt2Q==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@babel/types": "^7.21.3",
-        "entities": "^4.4.0"
-      },
-      "engines": {
-        "node": ">=14"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/gregberge"
-      }
-    },
-    "node_modules/@svgr/plugin-jsx": {
-      "version": "8.1.0",
-      "resolved": "https://registry.npmjs.org/@svgr/plugin-jsx/-/plugin-jsx-8.1.0.tgz",
-      "integrity": "sha512-0xiIyBsLlr8quN+WyuxooNW9RJ0Dpr8uOnH/xrCVO8GLUcwHISwj1AG0k+LFzteTkAA0GbX0kj9q6Dk70PTiPA==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@babel/core": "^7.21.3",
-        "@svgr/babel-preset": "8.1.0",
-        "@svgr/hast-util-to-babel-ast": "8.0.0",
-        "svg-parser": "^2.0.4"
-      },
-      "engines": {
-        "node": ">=14"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/gregberge"
-      },
-      "peerDependencies": {
-        "@svgr/core": "*"
-      }
-    },
     "node_modules/@tailwindcss/node": {
       "version": "4.1.18",
       "resolved": "https://registry.npmjs.org/@tailwindcss/node/-/node-4.1.18.tgz",
@@ -2042,19 +1792,11 @@
         "url": "https://github.com/sponsors/epoberezkin"
       }
     },
-    "node_modules/ansi-regex": {
-      "version": "5.0.1",
-      "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz",
-      "integrity": "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==",
-      "license": "MIT",
-      "engines": {
-        "node": ">=8"
-      }
-    },
     "node_modules/ansi-styles": {
       "version": "4.3.0",
       "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz",
       "integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "color-convert": "^2.0.1"
@@ -2151,19 +1893,6 @@
         "node": ">=6"
       }
     },
-    "node_modules/camelcase": {
-      "version": "6.3.0",
-      "resolved": "https://registry.npmjs.org/camelcase/-/camelcase-6.3.0.tgz",
-      "integrity": "sha512-Gmy6FhYlCY7uOElZUSbxo2UCDH8owEk996gkbrpsgGtrJLM3J7jGxl9Ic7Qwwj4ivOE5AWZWRMecDdF7hqGjFA==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=10"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
     "node_modules/caniuse-lite": {
       "version": "1.0.30001770",
       "resolved": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001770.tgz",
@@ -2202,21 +1931,11 @@
         "url": "https://github.com/chalk/chalk?sponsor=1"
       }
     },
-    "node_modules/cliui": {
-      "version": "6.0.0",
-      "resolved": "https://registry.npmjs.org/cliui/-/cliui-6.0.0.tgz",
-      "integrity": "sha512-t6wbgtoCXvAzst7QgXxJYqPt0usEfbgQdftEPbLL/cvv6HPE5VgvqCuAIDR0NgU52ds6rFwqrgakNLrHEjCbrQ==",
-      "license": "ISC",
-      "dependencies": {
-        "string-width": "^4.2.0",
-        "strip-ansi": "^6.0.0",
-        "wrap-ansi": "^6.2.0"
-      }
-    },
     "node_modules/color-convert": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz",
       "integrity": "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "color-name": "~1.1.4"
@@ -2229,6 +1948,7 @@
       "version": "1.1.4",
       "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz",
       "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==",
+      "dev": true,
       "license": "MIT"
     },
     "node_modules/concat-map": {
@@ -2258,33 +1978,6 @@
         "url": "https://opencollective.com/express"
       }
     },
-    "node_modules/cosmiconfig": {
-      "version": "8.3.6",
-      "resolved": "https://registry.npmjs.org/cosmiconfig/-/cosmiconfig-8.3.6.tgz",
-      "integrity": "sha512-kcZ6+W5QzcJ3P1Mt+83OUv/oHFqZHIx8DuxG6eZ5RGMERoLqp4BuGjhHLYGK+Kf5XVkQvqBSmAy/nGWN3qDgEA==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "import-fresh": "^3.3.0",
-        "js-yaml": "^4.1.0",
-        "parse-json": "^5.2.0",
-        "path-type": "^4.0.0"
-      },
-      "engines": {
-        "node": ">=14"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/d-fischer"
-      },
-      "peerDependencies": {
-        "typescript": ">=4.9.5"
-      },
-      "peerDependenciesMeta": {
-        "typescript": {
-          "optional": true
-        }
-      }
-    },
     "node_modules/cross-spawn": {
       "version": "7.0.6",
       "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
@@ -2325,15 +2018,6 @@
         }
       }
     },
-    "node_modules/decamelize": {
-      "version": "1.2.0",
-      "resolved": "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz",
-      "integrity": "sha512-z2S+W9X73hAUUki+N+9Za2lBlun89zigOyGrsax+KUQ6wKW4ZoWpEYBkGhQjwAjjDCkWxhY0VKEhk8wzY7F5cA==",
-      "license": "MIT",
-      "engines": {
-        "node": ">=0.10.0"
-      }
-    },
     "node_modules/deep-is": {
       "version": "0.1.4",
       "resolved": "https://registry.npmjs.org/deep-is/-/deep-is-0.1.4.tgz",
@@ -2351,23 +2035,6 @@
         "node": ">=8"
       }
     },
-    "node_modules/dijkstrajs": {
-      "version": "1.0.3",
-      "resolved": "https://registry.npmjs.org/dijkstrajs/-/dijkstrajs-1.0.3.tgz",
-      "integrity": "sha512-qiSlmBq9+BCdCA/L46dw8Uy93mloxsPSbwnm5yrKn2vMPiy8KyAskTF6zuV/j5BMsmOGZDPs7KjU+mjb670kfA==",
-      "license": "MIT"
-    },
-    "node_modules/dot-case": {
-      "version": "3.0.4",
-      "resolved": "https://registry.npmjs.org/dot-case/-/dot-case-3.0.4.tgz",
-      "integrity": "sha512-Kv5nKlh6yRrdrGvxeJ2e5y2eRUpkUosIW4A2AS38zwSz27zu7ufDwQPi5Jhs3XAlGNetl3bmnGhQsMtkKJnj3w==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "no-case": "^3.0.4",
-        "tslib": "^2.0.3"
-      }
-    },
     "node_modules/electron-to-chromium": {
       "version": "1.5.286",
       "resolved": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.5.286.tgz",
@@ -2375,12 +2042,6 @@
       "dev": true,
       "license": "ISC"
     },
-    "node_modules/emoji-regex": {
-      "version": "8.0.0",
-      "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz",
-      "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==",
-      "license": "MIT"
-    },
     "node_modules/enhanced-resolve": {
       "version": "5.19.0",
       "resolved": "https://registry.npmjs.org/enhanced-resolve/-/enhanced-resolve-5.19.0.tgz",
@@ -2395,29 +2056,6 @@
         "node": ">=10.13.0"
       }
     },
-    "node_modules/entities": {
-      "version": "4.5.0",
-      "resolved": "https://registry.npmjs.org/entities/-/entities-4.5.0.tgz",
-      "integrity": "sha512-V0hjH4dGPh9Ao5p0MoRY6BVqtwCjhz6vI5LT8AJ55H+4g9/4vbHx1I54fS0XuclLhDHArPQCiMjDxjaL8fPxhw==",
-      "dev": true,
-      "license": "BSD-2-Clause",
-      "engines": {
-        "node": ">=0.12"
-      },
-      "funding": {
-        "url": "https://github.com/fb55/entities?sponsor=1"
-      }
-    },
-    "node_modules/error-ex": {
-      "version": "1.3.4",
-      "resolved": "https://registry.npmjs.org/error-ex/-/error-ex-1.3.4.tgz",
-      "integrity": "sha512-sqQamAnR14VgCr1A618A3sGrygcpK+HEbenA/HiEAkkUwcZIIB/tgWqHFxWgOyDh4nB4JCRimh79dR5Ywc9MDQ==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "is-arrayish": "^0.2.1"
-      }
-    },
     "node_modules/esbuild": {
       "version": "0.27.3",
       "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.27.3.tgz",
@@ -2668,13 +2306,6 @@
         "node": ">=4.0"
       }
     },
-    "node_modules/estree-walker": {
-      "version": "2.0.2",
-      "resolved": "https://registry.npmjs.org/estree-walker/-/estree-walker-2.0.2.tgz",
-      "integrity": "sha512-Rfkk/Mp/DL7JVje3u18FxFujQlTNR2q6QfMSMB7AvCBx91NGj/ba3kCfza0f6dVDbw7YlRf/nDrn7pQrCCyQ/w==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/esutils": {
       "version": "2.0.3",
       "resolved": "https://registry.npmjs.org/esutils/-/esutils-2.0.3.tgz",
@@ -2800,15 +2431,6 @@
         "node": ">=6.9.0"
       }
     },
-    "node_modules/get-caller-file": {
-      "version": "2.0.5",
-      "resolved": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz",
-      "integrity": "sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg==",
-      "license": "ISC",
-      "engines": {
-        "node": "6.* || 8.* || >= 10.*"
-      }
-    },
     "node_modules/glob-parent": {
       "version": "6.0.2",
       "resolved": "https://registry.npmjs.org/glob-parent/-/glob-parent-6.0.2.tgz",
@@ -2906,13 +2528,6 @@
         "node": ">=0.8.19"
       }
     },
-    "node_modules/is-arrayish": {
-      "version": "0.2.1",
-      "resolved": "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.2.1.tgz",
-      "integrity": "sha512-zz06S8t0ozoDXMG+ube26zeCTNXcKIPJZJi8hBrF4idCLms4CG9QtK7qBl1boi5ODzFpjswb5JPmHCbMpjaYzg==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/is-extglob": {
       "version": "2.1.1",
       "resolved": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz",
@@ -2923,15 +2538,6 @@
         "node": ">=0.10.0"
       }
     },
-    "node_modules/is-fullwidth-code-point": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz",
-      "integrity": "sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==",
-      "license": "MIT",
-      "engines": {
-        "node": ">=8"
-      }
-    },
     "node_modules/is-glob": {
       "version": "4.0.3",
       "resolved": "https://registry.npmjs.org/is-glob/-/is-glob-4.0.3.tgz",
@@ -3002,13 +2608,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/json-parse-even-better-errors": {
-      "version": "2.3.1",
-      "resolved": "https://registry.npmjs.org/json-parse-even-better-errors/-/json-parse-even-better-errors-2.3.1.tgz",
-      "integrity": "sha512-xyFwyhro/JEof6Ghe2iz2NcXoj2sloNsWr/XsERDK/oiPCfaNhl5ONfp+jQdAZRQQ0IJWNzH9zIZF7li91kh2w==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/json-schema-traverse": {
       "version": "0.4.1",
       "resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz",
@@ -3327,13 +2926,6 @@
         "url": "https://opencollective.com/parcel"
       }
     },
-    "node_modules/lines-and-columns": {
-      "version": "1.2.4",
-      "resolved": "https://registry.npmjs.org/lines-and-columns/-/lines-and-columns-1.2.4.tgz",
-      "integrity": "sha512-7ylylesZQ/PV29jhEDl3Ufjo6ZX7gCqJr5F7PKrqc93v7fzSymt1BpwEU8nAUXs8qzzvqhbjhK5QZg6Mt/HkBg==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/locate-path": {
       "version": "6.0.0",
       "resolved": "https://registry.npmjs.org/locate-path/-/locate-path-6.0.0.tgz",
@@ -3357,16 +2949,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/lower-case": {
-      "version": "2.0.2",
-      "resolved": "https://registry.npmjs.org/lower-case/-/lower-case-2.0.2.tgz",
-      "integrity": "sha512-7fm3l3NAF9WfN6W3JOmf5drwpVqX78JtoGJ3A6W0a6ZnldM41w2fV5D490psKFTpMds8TJse/eHLFFsNHHjHgg==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "tslib": "^2.0.3"
-      }
-    },
     "node_modules/lru-cache": {
       "version": "5.1.1",
       "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-5.1.1.tgz",
@@ -3433,17 +3015,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/no-case": {
-      "version": "3.0.4",
-      "resolved": "https://registry.npmjs.org/no-case/-/no-case-3.0.4.tgz",
-      "integrity": "sha512-fgAN3jGAh+RoxUGZHTSOLJIqUc2wmoBwGR4tbpNAKmmovFoWq0OdRkb0VkldReO2a2iBT/OEulG9XSUc10r3zg==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "lower-case": "^2.0.2",
-        "tslib": "^2.0.3"
-      }
-    },
     "node_modules/node-releases": {
       "version": "2.0.27",
       "resolved": "https://registry.npmjs.org/node-releases/-/node-releases-2.0.27.tgz",
@@ -3501,15 +3072,6 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/p-try": {
-      "version": "2.2.0",
-      "resolved": "https://registry.npmjs.org/p-try/-/p-try-2.2.0.tgz",
-      "integrity": "sha512-R4nPAVTAU0B9D35/Gk3uJf/7XYbQcyohSKdvAxIRSNghFl4e71hVoGnBNQz9cWaXxO2I10KTC+3jMdvvoKw6dQ==",
-      "license": "MIT",
-      "engines": {
-        "node": ">=6"
-      }
-    },
     "node_modules/pako": {
       "version": "2.1.0",
       "resolved": "https://registry.npmjs.org/pako/-/pako-2.1.0.tgz",
@@ -3529,29 +3091,11 @@
         "node": ">=6"
       }
     },
-    "node_modules/parse-json": {
-      "version": "5.2.0",
-      "resolved": "https://registry.npmjs.org/parse-json/-/parse-json-5.2.0.tgz",
-      "integrity": "sha512-ayCKvm/phCGxOkYRSCM82iDwct8/EonSEgCSxWxD7ve6jHggsFl4fZVQBPRNgQoKiuV/odhFrGzQXZwbifC8Rg==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@babel/code-frame": "^7.0.0",
-        "error-ex": "^1.3.1",
-        "json-parse-even-better-errors": "^2.3.0",
-        "lines-and-columns": "^1.1.6"
-      },
-      "engines": {
-        "node": ">=8"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
     "node_modules/path-exists": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/path-exists/-/path-exists-4.0.0.tgz",
       "integrity": "sha512-ak9Qy5Q7jYb2Wwcey5Fpvg2KoAc/ZIhLSLOSBmRmygPsGwkVVt0fZa0qrtMz+m6tJTAHfZQ8FnmB4MG4LWy7/w==",
+      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=8"
@@ -3567,16 +3111,6 @@
         "node": ">=8"
       }
     },
-    "node_modules/path-type": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/path-type/-/path-type-4.0.0.tgz",
-      "integrity": "sha512-gDKb8aZMDeD/tZWs9P6+q0J9Mwkdl6xMV8TjnGP3qJVJ06bdMgkbBlLU8IdfOsIsFz2BW1rNVT3XuNEl8zPAvw==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=8"
-      }
-    },
     "node_modules/picocolors": {
       "version": "1.1.1",
       "resolved": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz",
@@ -3597,15 +3131,6 @@
         "url": "https://github.com/sponsors/jonschlinkert"
       }
     },
-    "node_modules/pngjs": {
-      "version": "5.0.0",
-      "resolved": "https://registry.npmjs.org/pngjs/-/pngjs-5.0.0.tgz",
-      "integrity": "sha512-40QW5YalBNfQo5yRYmiw7Yz6TKKVr3h6970B2YE+3fQpsWcrbj1PzJgxeJ19DRQjhMbKPIuMY8rFaXc8moolVw==",
-      "license": "MIT",
-      "engines": {
-        "node": ">=10.13.0"
-      }
-    },
     "node_modules/postcss": {
       "version": "8.5.6",
       "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.6.tgz",
@@ -3655,23 +3180,6 @@
         "node": ">=6"
       }
     },
-    "node_modules/qrcode": {
-      "version": "1.5.4",
-      "resolved": "https://registry.npmjs.org/qrcode/-/qrcode-1.5.4.tgz",
-      "integrity": "sha512-1ca71Zgiu6ORjHqFBDpnSMTR2ReToX4l1Au1VFLyVeBTFavzQnv5JxMFr3ukHVKpSrSA2MCk0lNJSykjUfz7Zg==",
-      "license": "MIT",
-      "dependencies": {
-        "dijkstrajs": "^1.0.1",
-        "pngjs": "^5.0.0",
-        "yargs": "^15.3.1"
-      },
-      "bin": {
-        "qrcode": "bin/qrcode"
-      },
-      "engines": {
-        "node": ">=10.13.0"
-      }
-    },
     "node_modules/react": {
       "version": "19.2.4",
       "resolved": "https://registry.npmjs.org/react/-/react-19.2.4.tgz",
@@ -3755,21 +3263,6 @@
         "react-dom": ">=18"
       }
     },
-    "node_modules/require-directory": {
-      "version": "2.1.1",
-      "resolved": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz",
-      "integrity": "sha512-fGxEI7+wsG9xrvdjsrlmL22OMTTiHRwAMroiEeMgq8gzoLC/PQr7RsRDSTLUg/bZAZtF+TVIkHc6/4RIKrui+Q==",
-      "license": "MIT",
-      "engines": {
-        "node": ">=0.10.0"
-      }
-    },
-    "node_modules/require-main-filename": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/require-main-filename/-/require-main-filename-2.0.0.tgz",
-      "integrity": "sha512-NKN5kMDylKuldxYLSUfrbo5Tuzh4hd+2E8NPPX02mZtn1VuREQToYe/ZdlJy+J3uCpfaiGF05e7B8W0iXbQHmg==",
-      "license": "ISC"
-    },
     "node_modules/resolve-from": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/resolve-from/-/resolve-from-4.0.0.tgz",
@@ -3841,12 +3334,6 @@
         "semver": "bin/semver.js"
       }
     },
-    "node_modules/set-blocking": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz",
-      "integrity": "sha512-KiKBS8AnWGEyLzofFfmvKwpdPzqiy16LvQfK3yv/fVH7Bj13/wl3JSR1J+rfgRE9q7xUJK4qvgS8raSOeLUehw==",
-      "license": "ISC"
-    },
     "node_modules/set-cookie-parser": {
       "version": "2.7.2",
       "resolved": "https://registry.npmjs.org/set-cookie-parser/-/set-cookie-parser-2.7.2.tgz",
@@ -3876,17 +3363,6 @@
         "node": ">=8"
       }
     },
-    "node_modules/snake-case": {
-      "version": "3.0.4",
-      "resolved": "https://registry.npmjs.org/snake-case/-/snake-case-3.0.4.tgz",
-      "integrity": "sha512-LAOh4z89bGQvl9pFfNF8V146i7o7/CqFPbqzYgP+yYzDIDeS9HaNFtXABamRW+AQzEVODcvE79ljJ+8a9YSdMg==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "dot-case": "^3.0.4",
-        "tslib": "^2.0.3"
-      }
-    },
     "node_modules/source-map-js": {
       "version": "1.2.1",
       "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.1.tgz",
@@ -3897,32 +3373,6 @@
         "node": ">=0.10.0"
       }
     },
-    "node_modules/string-width": {
-      "version": "4.2.3",
-      "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz",
-      "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==",
-      "license": "MIT",
-      "dependencies": {
-        "emoji-regex": "^8.0.0",
-        "is-fullwidth-code-point": "^3.0.0",
-        "strip-ansi": "^6.0.1"
-      },
-      "engines": {
-        "node": ">=8"
-      }
-    },
-    "node_modules/strip-ansi": {
-      "version": "6.0.1",
-      "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz",
-      "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==",
-      "license": "MIT",
-      "dependencies": {
-        "ansi-regex": "^5.0.1"
-      },
-      "engines": {
-        "node": ">=8"
-      }
-    },
     "node_modules/strip-json-comments": {
       "version": "3.1.1",
       "resolved": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-3.1.1.tgz",
@@ -3949,13 +3399,6 @@
         "node": ">=8"
       }
     },
-    "node_modules/svg-parser": {
-      "version": "2.0.4",
-      "resolved": "https://registry.npmjs.org/svg-parser/-/svg-parser-2.0.4.tgz",
-      "integrity": "sha512-e4hG1hRwoOdRb37cIMSgzNsxyzKfayW6VOflrwvR+/bzrkyxY/31WkbgnQpgtrNp1SdpJvpUAGTa/ZoiPNDuRQ==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/tailwindcss": {
       "version": "4.1.18",
       "resolved": "https://registry.npmjs.org/tailwindcss/-/tailwindcss-4.1.18.tgz",
@@ -4129,21 +3572,6 @@
         }
       }
     },
-    "node_modules/vite-plugin-svgr": {
-      "version": "4.5.0",
-      "resolved": "https://registry.npmjs.org/vite-plugin-svgr/-/vite-plugin-svgr-4.5.0.tgz",
-      "integrity": "sha512-W+uoSpmVkSmNOGPSsDCWVW/DDAyv+9fap9AZXBvWiQqrboJ08j2vh0tFxTD/LjwqwAd3yYSVJgm54S/1GhbdnA==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@rollup/pluginutils": "^5.2.0",
-        "@svgr/core": "^8.1.0",
-        "@svgr/plugin-jsx": "^8.1.0"
-      },
-      "peerDependencies": {
-        "vite": ">=2.6.0"
-      }
-    },
     "node_modules/which": {
       "version": "2.0.2",
       "resolved": "https://registry.npmjs.org/which/-/which-2.0.2.tgz",
@@ -4160,12 +3588,6 @@
         "node": ">= 8"
       }
     },
-    "node_modules/which-module": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/which-module/-/which-module-2.0.1.tgz",
-      "integrity": "sha512-iBdZ57RDvnOR9AGBhML2vFZf7h8vmBjhoaZqODJBFWHVtKkDmKuHai3cx5PgVMrX5YDNp27AofYbAwctSS+vhQ==",
-      "license": "ISC"
-    },
     "node_modules/word-wrap": {
       "version": "1.2.5",
       "resolved": "https://registry.npmjs.org/word-wrap/-/word-wrap-1.2.5.tgz",
@@ -4176,26 +3598,6 @@
         "node": ">=0.10.0"
       }
     },
-    "node_modules/wrap-ansi": {
-      "version": "6.2.0",
-      "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-6.2.0.tgz",
-      "integrity": "sha512-r6lPcBGxZXlIcymEu7InxDMhdW0KDxpLgoFLcguasxCaJ/SOIZwINatK9KY/tf+ZrlywOKU0UDj3ATXUBfxJXA==",
-      "license": "MIT",
-      "dependencies": {
-        "ansi-styles": "^4.0.0",
-        "string-width": "^4.1.0",
-        "strip-ansi": "^6.0.0"
-      },
-      "engines": {
-        "node": ">=8"
-      }
-    },
-    "node_modules/y18n": {
-      "version": "4.0.3",
-      "resolved": "https://registry.npmjs.org/y18n/-/y18n-4.0.3.tgz",
-      "integrity": "sha512-JKhqTOwSrqNA1NY5lSztJ1GrBiUodLMmIZuLiDaMRJ+itFd+ABVE8XBjOvIWL+rSqNDC74LCSFmlb/U4UZ4hJQ==",
-      "license": "ISC"
-    },
     "node_modules/yallist": {
       "version": "3.1.1",
       "resolved": "https://registry.npmjs.org/yallist/-/yallist-3.1.1.tgz",
@@ -4203,102 +3605,6 @@
       "dev": true,
       "license": "ISC"
     },
-    "node_modules/yargs": {
-      "version": "15.4.1",
-      "resolved": "https://registry.npmjs.org/yargs/-/yargs-15.4.1.tgz",
-      "integrity": "sha512-aePbxDmcYW++PaqBsJ+HYUFwCdv4LVvdnhBy78E57PIor8/OVvhMrADFFEDh8DHDFRv/O9i3lPhsENjO7QX0+A==",
-      "license": "MIT",
-      "dependencies": {
-        "cliui": "^6.0.0",
-        "decamelize": "^1.2.0",
-        "find-up": "^4.1.0",
-        "get-caller-file": "^2.0.1",
-        "require-directory": "^2.1.1",
-        "require-main-filename": "^2.0.0",
-        "set-blocking": "^2.0.0",
-        "string-width": "^4.2.0",
-        "which-module": "^2.0.0",
-        "y18n": "^4.0.0",
-        "yargs-parser": "^18.1.2"
-      },
-      "engines": {
-        "node": ">=8"
-      }
-    },
-    "node_modules/yargs-parser": {
-      "version": "18.1.3",
-      "resolved": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-18.1.3.tgz",
-      "integrity": "sha512-o50j0JeToy/4K6OZcaQmW6lyXXKhq7csREXcDwk2omFPJEwUNOVtJKvmDr9EI1fAJZUyZcRF7kxGBWmRXudrCQ==",
-      "license": "ISC",
-      "dependencies": {
-        "camelcase": "^5.0.0",
-        "decamelize": "^1.2.0"
-      },
-      "engines": {
-        "node": ">=6"
-      }
-    },
-    "node_modules/yargs-parser/node_modules/camelcase": {
-      "version": "5.3.1",
-      "resolved": "https://registry.npmjs.org/camelcase/-/camelcase-5.3.1.tgz",
-      "integrity": "sha512-L28STB170nwWS63UjtlEOE3dldQApaJXZkOI1uMFfzf3rRuPegHaHesyee+YxQ+W6SvRDQV6UrdOdRiR153wJg==",
-      "license": "MIT",
-      "engines": {
-        "node": ">=6"
-      }
-    },
-    "node_modules/yargs/node_modules/find-up": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/find-up/-/find-up-4.1.0.tgz",
-      "integrity": "sha512-PpOwAdQ/YlXQ2vj8a3h8IipDuYRi3wceVQQGYWxNINccq40Anw7BlsEXCMbt1Zt+OLA6Fq9suIpIWD0OsnISlw==",
-      "license": "MIT",
-      "dependencies": {
-        "locate-path": "^5.0.0",
-        "path-exists": "^4.0.0"
-      },
-      "engines": {
-        "node": ">=8"
-      }
-    },
-    "node_modules/yargs/node_modules/locate-path": {
-      "version": "5.0.0",
-      "resolved": "https://registry.npmjs.org/locate-path/-/locate-path-5.0.0.tgz",
-      "integrity": "sha512-t7hw9pI+WvuwNJXwk5zVHpyhIqzg2qTlklJOf0mVxGSbe3Fp2VieZcduNYjaLDoy6p9uGpQEGWG87WpMKlNq8g==",
-      "license": "MIT",
-      "dependencies": {
-        "p-locate": "^4.1.0"
-      },
-      "engines": {
-        "node": ">=8"
-      }
-    },
-    "node_modules/yargs/node_modules/p-limit": {
-      "version": "2.3.0",
-      "resolved": "https://registry.npmjs.org/p-limit/-/p-limit-2.3.0.tgz",
-      "integrity": "sha512-//88mFWSJx8lxCzwdAABTJL2MyWB12+eIY7MDL2SqLmAkeKU9qxRvWuSyTjm3FUmpBEMuFfckAIqEaVGUDxb6w==",
-      "license": "MIT",
-      "dependencies": {
-        "p-try": "^2.0.0"
-      },
-      "engines": {
-        "node": ">=6"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
-    "node_modules/yargs/node_modules/p-locate": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/p-locate/-/p-locate-4.1.0.tgz",
-      "integrity": "sha512-R79ZZ/0wAxKGu3oYMlz8jy/kbhsNrS7SKZ7PxEHBgJ5+F2mtFW2fK2cOtBh1cHYkQsbzFV7I+EoRKe6Yt0oK7A==",
-      "license": "MIT",
-      "dependencies": {
-        "p-limit": "^2.2.0"
-      },
-      "engines": {
-        "node": ">=8"
-      }
-    },
     "node_modules/yocto-queue": {
       "version": "0.1.0",
       "resolved": "https://registry.npmjs.org/yocto-queue/-/yocto-queue-0.1.0.tgz",

frontend/package.json

@@ -12,7 +12,6 @@
   "dependencies": {
     "esptool-js": "^0.5.7",
     "leaflet": "^1.9.4",
-    "qrcode": "^1.5.4",
     "react": "^19.2.0",
     "react-dom": "^19.2.0",
     "react-leaflet": "^5.0.0",
@@ -29,7 +28,6 @@
     "eslint-plugin-react-refresh": "^0.4.24",
     "globals": "^16.5.0",
     "tailwindcss": "^4.1.18",
-    "vite": "^7.3.1",
-    "vite-plugin-svgr": "^4.5.0"
+    "vite": "^7.3.1"
   }
 }

frontend/src/App.jsx

@@ -1,9 +1,5 @@
 import { Routes, Route, Navigate } from "react-router-dom";
 import { useAuth } from "./auth/AuthContext";
-import CloudFlashPage from "./cloudflash/CloudFlashPage";
-import SerialMonitorPage from "./serial/SerialMonitorPage";
-import SerialLogViewer from "./serial/SerialLogViewer";
-import PublicFeaturesSettings from "./settings/PublicFeaturesSettings";
 import LoginPage from "./auth/LoginPage";
 import MainLayout from "./layout/MainLayout";
 import MelodyList from "./melodies/MelodyList";
@@ -34,13 +30,6 @@ import DeviceInventoryDetail from "./manufacturing/DeviceInventoryDetail";
 import ProvisioningWizard from "./manufacturing/ProvisioningWizard";
 import FirmwareManager from "./firmware/FirmwareManager";
 import DashboardPage from "./dashboard/DashboardPage";
-import ApiReferencePage from "./developer/ApiReferencePage";
-import { ProductList, ProductForm } from "./crm/products";
-import { CustomerList, CustomerForm, CustomerDetail } from "./crm/customers";
-import { OrderList } from "./crm/orders";
-import { QuotationForm, AllQuotationsList } from "./crm/quotations";
-import CommsPage from "./crm/inbox/CommsPage";
-import MailPage from "./crm/mail/MailPage";
 
 function ProtectedRoute({ children }) {
   const { user, loading } = useAuth();
@@ -110,10 +99,6 @@ function RoleGate({ roles, children }) {
 export default function App() {
   return (
     <Routes>
-      {/* Public routes — no login required */}
-      <Route path="/cloudflash" element={<CloudFlashPage />} />
-      <Route path="/serial-monitor" element={<SerialMonitorPage />} />
-
       <Route path="/login" element={<LoginPage />} />
       <Route
         element={
@@ -165,40 +150,12 @@ export default function App() {
         <Route path="manufacturing/devices/:sn" element={<PermissionGate section="manufacturing"><DeviceInventoryDetail /></PermissionGate>} />
         <Route path="firmware" element={<PermissionGate section="manufacturing"><FirmwareManager /></PermissionGate>} />
 
-        {/* Mail */}
-        <Route path="mail" element={<PermissionGate section="crm"><MailPage /></PermissionGate>} />
-
-        {/* CRM */}
-        <Route path="crm/comms" element={<PermissionGate section="crm"><CommsPage /></PermissionGate>} />
-        <Route path="crm/inbox" element={<Navigate to="/crm/comms" replace />} />
-        <Route path="crm/products" element={<PermissionGate section="crm"><ProductList /></PermissionGate>} />
-        <Route path="crm/products/new" element={<PermissionGate section="crm" action="edit"><ProductForm /></PermissionGate>} />
-        <Route path="crm/products/:id" element={<PermissionGate section="crm"><ProductForm /></PermissionGate>} />
-        <Route path="crm/customers" element={<PermissionGate section="crm"><CustomerList /></PermissionGate>} />
-        <Route path="crm/customers/new" element={<PermissionGate section="crm" action="edit"><CustomerForm /></PermissionGate>} />
-        <Route path="crm/customers/:id" element={<PermissionGate section="crm"><CustomerDetail /></PermissionGate>} />
-        <Route path="crm/customers/:id/edit" element={<PermissionGate section="crm" action="edit"><CustomerForm /></PermissionGate>} />
-        <Route path="crm/orders" element={<PermissionGate section="crm"><OrderList /></PermissionGate>} />
-        <Route path="crm/quotations" element={<PermissionGate section="crm"><AllQuotationsList /></PermissionGate>} />
-        <Route path="crm/quotations/new" element={<PermissionGate section="crm" action="edit"><QuotationForm /></PermissionGate>} />
-        <Route path="crm/quotations/:id" element={<PermissionGate section="crm" action="edit"><QuotationForm /></PermissionGate>} />
-
-        {/* Developer */}
-        {/* TODO: replace RoleGate with a dedicated "developer" permission once granular permissions are implemented */}
-        <Route path="developer/api" element={<RoleGate roles={["sysadmin", "admin"]}><ApiReferencePage /></RoleGate>} />
-
         {/* Settings - Staff Management */}
         <Route path="settings/staff" element={<RoleGate roles={["sysadmin", "admin"]}><StaffList /></RoleGate>} />
         <Route path="settings/staff/new" element={<RoleGate roles={["sysadmin", "admin"]}><StaffForm /></RoleGate>} />
         <Route path="settings/staff/:id" element={<RoleGate roles={["sysadmin", "admin"]}><StaffDetail /></RoleGate>} />
         <Route path="settings/staff/:id/edit" element={<RoleGate roles={["sysadmin", "admin"]}><StaffForm /></RoleGate>} />
 
-        {/* Settings - Public Features */}
-        <Route path="settings/public-features" element={<RoleGate roles={["sysadmin", "admin"]}><PublicFeaturesSettings /></RoleGate>} />
-
-        {/* Settings - Serial Log Viewer */}
-        <Route path="settings/serial-logs" element={<RoleGate roles={["sysadmin", "admin"]}><SerialLogViewer /></RoleGate>} />
-
         <Route path="*" element={<Navigate to="/" replace />} />
       </Route>
     </Routes>

frontend/src/assets/comms/call.svg

@@ -1,25 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-
-<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
-<!-- Uploaded to: SVG Repo, www.svgrepo.com, Generator: SVG Repo Mixer Tools -->
-<svg height="800px" width="800px" version="1.1" id="_x32_" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" 
-	 viewBox="0 0 512 512"  xml:space="preserve">
-<style type="text/css">
-	.st0{fill:#000000;}
-</style>
-<g>
-	<path class="st0" d="M500.177,55.798c0,0-21.735-7.434-39.551-11.967C411.686,31.369,308.824,24.727,256,24.727
-		S100.314,31.369,51.374,43.831c-17.816,4.534-39.551,11.967-39.551,11.967c-7.542,2.28-12.444,9.524-11.76,17.374l8.507,97.835
-		c0.757,8.596,7.957,15.201,16.581,15.201h84.787c8.506,0,15.643-6.416,16.553-14.878l4.28-39.973
-		c0.847-7.93,7.2-14.138,15.148-14.815c0,0,68.484-6.182,110.081-6.182c41.586,0,110.08,6.182,110.08,6.182
-		c7.949,0.676,14.302,6.885,15.148,14.815l4.29,39.973c0.9,8.462,8.038,14.878,16.545,14.878h84.777
-		c8.632,0,15.832-6.605,16.589-15.201l8.507-97.835C512.621,65.322,507.72,58.078,500.177,55.798z"/>
-	<path class="st0" d="M357.503,136.629h-55.365v46.137h-92.275v-46.137h-55.365c0,0-9.228,119.957-119.957,207.618
-		c0,32.296,0,129.95,0,129.95c0,7.218,5.857,13.076,13.075,13.076h416.768c7.218,0,13.076-5.858,13.076-13.076
-		c0,0,0-97.654,0-129.95C366.73,256.586,357.503,136.629,357.503,136.629z M338.768,391.42v37.406h-37.396V391.42H338.768z
-		 M338.768,332.27v37.406h-37.396V332.27H338.768z M301.372,310.518v-37.396h37.396v37.396H301.372z M274.698,391.42v37.406h-37.396
-		V391.42H274.698z M274.698,332.27v37.406h-37.396V332.27H274.698z M274.698,273.122v37.396h-37.396v-37.396H274.698z
-		 M210.629,391.42v37.406h-37.397V391.42H210.629z M210.629,332.27v37.406h-37.397V332.27H210.629z M210.629,273.122v37.396h-37.397
-		v-37.396H210.629z"/>
-</g>
-</svg>

frontend/src/assets/comms/email.svg

@@ -1,8 +0,0 @@
-<?xml version="1.0" ?>
-
-<!-- Uploaded to: SVG Repo, www.svgrepo.com, Generator: SVG Repo Mixer Tools -->
-<svg width="800px" height="800px" viewBox="0 0 6.3500002 6.3500002" id="svg1976" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:cc="http://creativecommons.org/ns#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd" xmlns:svg="http://www.w3.org/2000/svg">
-
-<defs id="defs1970"/>
-
-<g id="layer1" style="display:inline">

frontend/src/assets/comms/inbound.svg

@@ -1,4 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?><!-- Uploaded to: SVG Repo, www.svgrepo.com, Generator: SVG Repo Mixer Tools -->
-<svg width="800px" height="800px" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg">
-<path d="M9.16421 9.66421L15.4142 3.41421L12.5858 0.585785L6.33579 6.83578L3.5 4L2 5.5V14H10.5L12 12.5L9.16421 9.66421Z" fill="#000000"/>
-</svg>

frontend/src/assets/comms/inperson.svg

@@ -1,17 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-
-<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
-<!-- Uploaded to: SVG Repo, www.svgrepo.com, Generator: SVG Repo Mixer Tools -->
-<svg height="800px" width="800px" version="1.1" id="_x32_" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" 
-	 viewBox="0 0 512 512"  xml:space="preserve">
-<style type="text/css">
-	.st0{fill:#000000;}
-</style>
-<g>
-	<path class="st0" d="M458.159,404.216c-18.93-33.65-49.934-71.764-100.409-93.431c-28.868,20.196-63.938,32.087-101.745,32.087
-		c-37.828,0-72.898-11.89-101.767-32.087c-50.474,21.667-81.479,59.782-100.398,93.431C28.731,448.848,48.417,512,91.842,512
-		c43.426,0,164.164,0,164.164,0s120.726,0,164.153,0C463.583,512,483.269,448.848,458.159,404.216z"/>
-	<path class="st0" d="M256.005,300.641c74.144,0,134.231-60.108,134.231-134.242v-32.158C390.236,60.108,330.149,0,256.005,0
-		c-74.155,0-134.252,60.108-134.252,134.242V166.4C121.753,240.533,181.851,300.641,256.005,300.641z"/>
-</g>
-</svg>

frontend/src/assets/comms/internal.svg

@@ -1,8 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?><!-- Uploaded to: SVG Repo, www.svgrepo.com, Generator: SVG Repo Mixer Tools -->
-<svg width="800px" height="800px" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">
-<path d="M6 18V9C6 7.34315 7.34315 6 9 6H39C40.6569 6 42 7.34315 42 9V18" stroke="#000000" stroke-width="4" stroke-linecap="round" stroke-linejoin="round"/>
-<path d="M32 24V31" stroke="#000000" stroke-width="4" stroke-linecap="round" stroke-linejoin="round"/>
-<path d="M24 15V31" stroke="#000000" stroke-width="4" stroke-linecap="round" stroke-linejoin="round"/>
-<path d="M16 19V31" stroke="#000000" stroke-width="4" stroke-linecap="round" stroke-linejoin="round"/>
-<path d="M6 30V39C6 40.6569 7.34315 42 9 42H39C40.6569 42 42 40.6569 42 39V30" stroke="#000000" stroke-width="4" stroke-linecap="round" stroke-linejoin="round"/>
-</svg>

frontend/src/assets/comms/mail.svg

@@ -1,2 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?><!-- Uploaded to: SVG Repo, www.svgrepo.com, Generator: SVG Repo Mixer Tools -->
-<svg width="800px" height="800px" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg" id="phone-out" class="icon glyph"><path d="M21,15v3.93a2,2,0,0,1-2.29,2A18,18,0,0,1,3.14,5.29,2,2,0,0,1,5.13,3H9a1,1,0,0,1,1,.89,10.74,10.74,0,0,0,1,3.78,1,1,0,0,1-.42,1.26l-.86.49a1,1,0,0,0-.33,1.46,14.08,14.08,0,0,0,3.69,3.69,1,1,0,0,0,1.46-.33l.49-.86A1,1,0,0,1,16.33,13a10.74,10.74,0,0,0,3.78,1A1,1,0,0,1,21,15Z" style="fill:#231f20"></path><path d="M21,10a1,1,0,0,1-1-1,5,5,0,0,0-5-5,1,1,0,0,1,0-2,7,7,0,0,1,7,7A1,1,0,0,1,21,10Z" style="fill:#231f20"></path><path d="M17,10a1,1,0,0,1-1-1,1,1,0,0,0-1-1,1,1,0,0,1,0-2,3,3,0,0,1,3,3A1,1,0,0,1,17,10Z" style="fill:#231f20"></path></svg>

frontend/src/assets/comms/note.svg

@@ -1,2 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?><!-- Uploaded to: SVG Repo, www.svgrepo.com, Generator: SVG Repo Mixer Tools -->
-<svg width="800px" height="800px" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg" id="create-note" class="icon glyph"><path d="M20.71,3.29a2.91,2.91,0,0,0-2.2-.84,3.25,3.25,0,0,0-2.17,1L9.46,10.29s0,0,0,0a.62.62,0,0,0-.11.17,1,1,0,0,0-.1.18l0,0L8,14.72A1,1,0,0,0,9,16a.9.9,0,0,0,.28,0l4-1.17,0,0,.18-.1a.62.62,0,0,0,.17-.11l0,0,6.87-6.88a3.25,3.25,0,0,0,1-2.17A2.91,2.91,0,0,0,20.71,3.29Z"></path><path d="M20,22H4a2,2,0,0,1-2-2V4A2,2,0,0,1,4,2h8a1,1,0,0,1,0,2H4V20H20V12a1,1,0,0,1,2,0v8A2,2,0,0,1,20,22Z" style="fill:#231f20"></path></svg>

frontend/src/assets/comms/outbound.svg

@@ -1,4 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?><!-- Uploaded to: SVG Repo, www.svgrepo.com, Generator: SVG Repo Mixer Tools -->
-<svg width="800px" height="800px" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg">
-<path d="M14 2H5.50003L4.00003 3.5L6.83581 6.33579L0.585815 12.5858L3.41424 15.4142L9.66424 9.16421L12.5 12L14 10.5L14 2Z" fill="#000000"/>
-</svg>

frontend/src/assets/comms/sms.svg

@@ -1,2 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?><!-- Uploaded to: SVG Repo, www.svgrepo.com, Generator: SVG Repo Mixer Tools -->
-<svg fill="#000000" width="800px" height="800px" viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="M256 32C114.6 32 0 125.1 0 240c0 49.6 21.4 95 57 130.7C44.5 421.1 2.7 466 2.2 466.5c-2.2 2.3-2.8 5.7-1.5 8.7 1.3 3 4.1 4.8 7.3 4.8 66.3 0 116-31.8 140.6-51.4 32.7 12.3 69 19.4 107.4 19.4 141.4 0 256-93.1 256-208S397.4 32 256 32zM128.2 304H116c-4.4 0-8-3.6-8-8v-16c0-4.4 3.6-8 8-8h12.3c6 0 10.4-3.5 10.4-6.6 0-1.3-.8-2.7-2.1-3.8l-21.9-18.8c-8.5-7.2-13.3-17.5-13.3-28.1 0-21.3 19-38.6 42.4-38.6H156c4.4 0 8 3.6 8 8v16c0 4.4-3.6 8-8 8h-12.3c-6 0-10.4 3.5-10.4 6.6 0 1.3.8 2.7 2.1 3.8l21.9 18.8c8.5 7.2 13.3 17.5 13.3 28.1.1 21.3-19 38.6-42.4 38.6zm191.8-8c0 4.4-3.6 8-8 8h-16c-4.4 0-8-3.6-8-8v-68.2l-24.8 55.8c-2.9 5.9-11.4 5.9-14.3 0L224 227.8V296c0 4.4-3.6 8-8 8h-16c-4.4 0-8-3.6-8-8V192c0-8.8 7.2-16 16-16h16c6.1 0 11.6 3.4 14.3 8.8l17.7 35.4 17.7-35.4c2.7-5.4 8.3-8.8 14.3-8.8h16c8.8 0 16 7.2 16 16v104zm48.3 8H356c-4.4 0-8-3.6-8-8v-16c0-4.4 3.6-8 8-8h12.3c6 0 10.4-3.5 10.4-6.6 0-1.3-.8-2.7-2.1-3.8l-21.9-18.8c-8.5-7.2-13.3-17.5-13.3-28.1 0-21.3 19-38.6 42.4-38.6H396c4.4 0 8 3.6 8 8v16c0 4.4-3.6 8-8 8h-12.3c-6 0-10.4 3.5-10.4 6.6 0 1.3.8 2.7 2.1 3.8l21.9 18.8c8.5 7.2 13.3 17.5 13.3 28.1.1 21.3-18.9 38.6-42.3 38.6z"/></svg>

frontend/src/assets/comms/whatsapp.svg

@@ -1,12 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-
-<!-- Uploaded to: SVG Repo, www.svgrepo.com, Generator: SVG Repo Mixer Tools -->
-<svg fill="#000000" height="800px" width="800px" version="1.1" id="Icons" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" 
-	 viewBox="0 0 32 32" xml:space="preserve">
-<path d="M17,0C8.7,0,2,6.7,2,15c0,3.4,1.1,6.6,3.2,9.2l-2.1,6.4c-0.1,0.4,0,0.8,0.3,1.1C3.5,31.9,3.8,32,4,32c0.1,0,0.3,0,0.4-0.1
-	l6.9-3.1C13.1,29.6,15,30,17,30c8.3,0,15-6.7,15-15S25.3,0,17,0z M25.7,20.5c-0.4,1.2-1.9,2.2-3.2,2.4C22.2,23,21.9,23,21.5,23
-	c-0.8,0-2-0.2-4.1-1.1c-2.4-1-4.8-3.1-6.7-5.8L10.7,16C10.1,15.1,9,13.4,9,11.6c0-2.2,1.1-3.3,1.5-3.8c0.5-0.5,1.2-0.8,2-0.8
-	c0.2,0,0.3,0,0.5,0c0.7,0,1.2,0.2,1.7,1.2l0.4,0.8c0.3,0.8,0.7,1.7,0.8,1.8c0.3,0.6,0.3,1.1,0,1.6c-0.1,0.3-0.3,0.5-0.5,0.7
-	c-0.1,0.2-0.2,0.3-0.3,0.3c-0.1,0.1-0.1,0.1-0.2,0.2c0.3,0.5,0.9,1.4,1.7,2.1c1.2,1.1,2.1,1.4,2.6,1.6l0,0c0.2-0.2,0.4-0.6,0.7-0.9
-	l0.1-0.2c0.5-0.7,1.3-0.9,2.1-0.6c0.4,0.2,2.6,1.2,2.6,1.2l0.2,0.1c0.3,0.2,0.7,0.3,0.9,0.7C26.2,18.5,25.9,19.8,25.7,20.5z"/>
-</svg>

frontend/src/assets/customer-status/3-months.svg

@@ -1,6 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<svg id="Layer_2" data-name="Layer 2" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 44.73 44.73">
-  <g id="Layer_1-2" data-name="Layer 1">
-    <path d="m4.09,8.19v32.45h32.45v4.09H4.09c-1.1,0-2.06-.41-2.87-1.22-.81-.81-1.22-1.77-1.22-2.87V8.19h4.09ZM40.64,0c1.1,0,2.06.41,2.87,1.22.81.81,1.22,1.77,1.22,2.87v28.46c0,1.1-.41,2.05-1.22,2.83-.81.78-1.77,1.17-2.87,1.17H12.18c-1.1,0-2.05-.39-2.83-1.17-.78-.78-1.17-1.72-1.17-2.83V4.09c0-1.1.39-2.06,1.17-2.87.78-.81,1.72-1.22,2.83-1.22h28.46Zm0,32.55V4.09H12.18v28.46h28.46Zm-8.09-8.19c0,1.14-.41,2.1-1.22,2.9-.81.8-1.77,1.19-2.87,1.19h-8.09v-4.09h8.09v-4h-4.09v-4.09h4.09v-4.09h-8.09v-4h8.09c1.1,0,2.06.38,2.87,1.15.81.76,1.22,1.71,1.22,2.85v3.02c0,.88-.29,1.61-.88,2.19-.58.58-1.3.88-2.14.88.84,0,1.56.29,2.14.88.58.58.88,1.3.88,2.14v3.07Z"/>
-  </g>
-</svg>

frontend/src/assets/customer-status/6-months.svg

@@ -1,6 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<svg id="Layer_2" data-name="Layer 2" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 44.73 44.73">
-  <g id="Layer_1-2" data-name="Layer 1">
-    <path d="m4.09,8.19v32.45h32.45v4.09H4.09c-1.1,0-2.06-.41-2.87-1.22-.81-.81-1.22-1.77-1.22-2.87V8.19h4.09ZM40.64,0c1.1,0,2.06.41,2.87,1.22.81.81,1.22,1.77,1.22,2.87v28.46c0,1.1-.41,2.05-1.22,2.83-.81.78-1.77,1.17-2.87,1.17H12.18c-1.1,0-2.05-.39-2.83-1.17-.78-.78-1.17-1.72-1.17-2.83V4.09c0-1.1.39-2.06,1.17-2.87.78-.81,1.72-1.22,2.83-1.22h28.46Zm0,32.55V4.09H12.18v28.46h28.46Zm-16.27-4.09c-1.1,0-2.05-.4-2.83-1.19-.78-.8-1.17-1.76-1.17-2.9v-12.18c0-1.14.39-2.09,1.17-2.85.78-.76,1.72-1.15,2.83-1.15h8.19v4h-8.19v4.09h4.09c1.1,0,2.06.4,2.87,1.19.81.8,1.22,1.76,1.22,2.9v4c0,1.14-.41,2.1-1.22,2.9-.81.8-1.77,1.19-2.87,1.19h-4.09Zm0-8.09v4h4.09v-4h-4.09Z"/>
-  </g>
-</svg>

frontend/src/assets/customer-status/9-months.svg

@@ -1,6 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<svg id="Layer_2" data-name="Layer 2" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 44.68 44.68">
-  <g id="Layer_1-2" data-name="Layer 1">
-    <path d="m4.09,8.18v32.41h32.41v4.09H4.09c-1.1,0-2.06-.41-2.87-1.22-.81-.81-1.22-1.77-1.22-2.87V8.18h4.09ZM40.59,0c1.1,0,2.06.41,2.87,1.22.81.81,1.22,1.77,1.22,2.87v28.42c0,1.1-.41,2.04-1.22,2.82-.81.78-1.77,1.17-2.87,1.17H12.17c-1.1,0-2.04-.39-2.82-1.17s-1.17-1.72-1.17-2.82V4.09c0-1.1.39-2.06,1.17-2.87.78-.81,1.72-1.22,2.82-1.22h28.42Zm0,32.51V4.09H12.17v28.42h28.42Zm-12.17-24.33c1.1,0,2.06.38,2.87,1.14.81.76,1.22,1.71,1.22,2.85v12.17c0,1.14-.41,2.1-1.22,2.9-.81.8-1.77,1.19-2.87,1.19h-8.08v-4.09h8.08v-3.99h-4.09c-1.1,0-2.04-.4-2.82-1.19-.78-.79-1.17-1.76-1.17-2.9v-4.09c0-1.14.39-2.08,1.17-2.85.78-.76,1.72-1.14,2.82-1.14h4.09Zm0,8.08v-4.09h-4.09v4.09h4.09Z"/>
-  </g>
-</svg>

frontend/src/assets/customer-status/awaiting-confirmation.svg

@@ -1,9 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<svg id="Layer_2" data-name="Layer 2" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 44.14 44.14">
-  <g id="Layer_1-2" data-name="Layer 1">
-    <g>
-      <path d="m24.72,10.46v13.65c0,.25-.09.47-.27.66-.18.18-.42.27-.71.27h-9.72c-.29,0-.53-.09-.71-.27-.18-.18-.27-.4-.27-.66v-1.97c0-.29.09-.53.27-.71.18-.18.42-.27.71-.27h6.83v-10.71c0-.29.09-.53.27-.71s.4-.27.66-.27h1.97c.29,0,.53.09.71.27.18.18.27.42.27.71Z"/>
-      <path d="m0,22.07c0-6.09,2.16-11.3,6.49-15.62C10.81,2.12,16.01-.03,22.07,0c6.06.03,11.27,2.18,15.62,6.44,4.35,4.27,6.5,9.48,6.44,15.62-.06,6.15-2.21,11.36-6.44,15.62-4.24,4.27-9.45,6.41-15.62,6.44-6.18.03-11.37-2.12-15.58-6.44C2.28,33.37.12,28.16,0,22.07Zm4.81,0c0,4.77,1.69,8.83,5.08,12.18,3.38,3.35,7.44,5.05,12.18,5.08,4.74.03,8.8-1.66,12.18-5.08,3.38-3.41,5.08-7.47,5.08-12.18s-1.69-8.77-5.08-12.18c-3.38-3.41-7.44-5.1-12.18-5.08-4.74.03-8.8,1.72-12.18,5.08-3.38,3.35-5.08,7.42-5.08,12.18Z"/>
-    </g>
-  </g>
-</svg>

frontend/src/assets/customer-status/awaiting-payment.svg

@@ -1,9 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<svg id="Layer_2" data-name="Layer 2" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 44.14 44.14">
-  <g id="Layer_1-2" data-name="Layer 1">
-    <g>
-      <path d="m0,22.07c0-6.09,2.16-11.3,6.49-15.62C10.81,2.12,16.01-.03,22.07,0c6.06.03,11.27,2.18,15.62,6.44,4.35,4.27,6.5,9.48,6.44,15.62-.06,6.15-2.21,11.36-6.44,15.62s-9.45,6.41-15.62,6.44c-6.18.03-11.37-2.12-15.58-6.44C2.28,33.37.12,28.16,0,22.07Zm4.81,0c0,4.77,1.69,8.83,5.08,12.18,3.38,3.35,7.44,5.05,12.18,5.08,4.74.03,8.8-1.66,12.18-5.08,3.38-3.41,5.08-7.47,5.08-12.18s-1.69-8.77-5.08-12.18c-3.38-3.41-7.44-5.1-12.18-5.08-4.74.03-8.8,1.72-12.18,5.08-3.38,3.35-5.08,7.42-5.08,12.18Z"/>
-      <path d="m23.69,30.21c1.22-.03,2.25-.5,3.1-1.38.85-.89,1.28-1.96,1.28-3.21,0-1.01-.3-1.93-.91-2.77-.61-.83-1.38-1.39-2.32-1.67l-4.59-1.36c-.28-.07-.5-.23-.65-.47-.16-.24-.23-.54-.23-.89s.11-.65.34-.91c.23-.26.51-.39.86-.39h2.87c.42,0,.85.14,1.3.42.14.1.3.15.5.13.19-.02.37-.1.55-.23l1.2-1.15c.17-.14.25-.34.23-.6-.02-.26-.11-.46-.29-.6-.9-.7-1.98-1.08-3.23-1.15v-2.5c0-.24-.08-.44-.23-.6s-.34-.23-.55-.23h-1.67c-.21,0-.39.08-.55.23s-.23.36-.23.6v2.45c-1.22.04-2.25.5-3.1,1.38-.85.89-1.28,1.96-1.28,3.21,0,1.01.3,1.93.91,2.77.61.83,1.38,1.39,2.32,1.67l4.59,1.36c.24.07.45.23.63.5.17.26.26.53.26.81,0,.38-.11.7-.34.97-.23.26-.51.39-.86.39h-2.87c-.38,0-.82-.12-1.3-.37-.17-.1-.36-.16-.55-.16s-.36.07-.5.21l-1.2,1.15c-.17.17-.25.39-.23.65.02.26.13.46.34.6.94.7,2,1.08,3.18,1.15v2.45c0,.24.08.44.23.6.16.16.34.23.55.23h1.67c.21,0,.39-.08.55-.23.16-.16.23-.36.23-.6v-2.45Z"/>
-    </g>
-  </g>
-</svg>

frontend/src/assets/customer-status/awating-quotation.svg

@@ -1,10 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<svg id="Layer_2" data-name="Layer 2" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 48.38 43">
-  <g id="Layer_1-2" data-name="Layer 1">
-    <g>
-      <path d="m32.25,10.23c0-.54-.2-1.02-.6-1.42L23.43.6c-.4-.4-.87-.6-1.42-.6h-.52v10.75h10.75v-.52Z"/>
-      <path d="m19.4,29.15c-.26-.26-.39-.57-.39-.95v-2.67c0-.37.13-.69.39-.97.26-.27.57-.41.95-.41h11.9v-10.75h-11.44c-.54,0-1.01-.19-1.4-.58-.39-.39-.58-.85-.58-1.4V0H2.02c-.54,0-1.02.19-1.42.58-.4.39-.6.87-.6,1.44v38.96c0,.54.2,1.02.6,1.42s.87.6,1.42.6h28.21c.57,0,1.05-.2,1.44-.6.39-.4.58-.87.58-1.42v-11.44h-11.9c-.37,0-.69-.13-.95-.39Zm-5.34-2.56c-.7.73-1.56,1.11-2.56,1.14v2.02c0,.2-.06.37-.19.49-.13.13-.28.19-.45.19h-1.38c-.17,0-.32-.06-.45-.19-.13-.13-.19-.29-.19-.49v-2.02c-.97-.06-1.85-.37-2.62-.95-.17-.11-.27-.28-.28-.49-.01-.22.05-.39.19-.54l.99-.95c.11-.11.25-.17.41-.17s.31.04.45.13c.4.2.76.3,1.07.3h2.37c.29,0,.52-.11.71-.32.19-.22.28-.48.28-.8,0-.23-.07-.45-.21-.67-.14-.22-.32-.35-.52-.41l-3.78-1.12c-.77-.23-1.41-.69-1.91-1.38-.5-.69-.75-1.45-.75-2.28,0-1.03.35-1.91,1.05-2.64.7-.73,1.55-1.11,2.56-1.14v-2.02c0-.2.06-.37.19-.49.13-.13.28-.19.45-.19h1.38c.17,0,.32.06.45.19.13.13.19.29.19.49v2.06c1.03.06,1.92.37,2.67.95.14.11.22.28.24.49.01.22-.05.38-.19.49l-.99.95c-.14.11-.29.18-.45.19-.16.01-.29-.02-.41-.11-.37-.23-.73-.34-1.07-.34h-2.37c-.29,0-.52.11-.71.32-.19.21-.28.47-.28.75s.06.53.19.73c.13.2.31.33.54.39l3.78,1.12c.77.23,1.41.69,1.91,1.38.5.69.75,1.45.75,2.28,0,1.03-.35,1.91-1.05,2.64Z"/>
-      <path d="m47.95,25.89l-8.04-8.13c-.26-.26-.57-.39-.95-.39s-.69.13-.95.39c-.26.26-.39.57-.39.95v5.46h-5.37v5.37h5.37v5.5c0,.4.14.72.41.97.27.24.59.37.95.39.36.01.67-.12.92-.41l8.04-8.13c.29-.29.43-.62.43-1.01s-.14-.71-.43-.97Z"/>
-    </g>
-  </g>
-</svg>

frontend/src/assets/customer-status/churned.svg

@@ -1,6 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<svg id="Layer_2" data-name="Layer 2" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 43.63 43.63">
-  <g id="Layer_1-2" data-name="Layer 1">
-    <path d="m2.52,0l41.1,41.15-2.52,2.48-11.34-11.34H11.91l-7.91,7.91V6.53L0,2.52,2.52,0Zm37.2.57c1.08,0,2,.38,2.76,1.14s1.14,1.68,1.14,2.76v23.81c0,1.08-.37,2.01-1.1,2.79-.73.78-1.64,1.18-2.71,1.21l-13.86-13.86h9.76v-4h-13.76l-1.95-1.95h15.72v-4h-15.91v3.81L8.1.57h31.63ZM11.91,18.43h4l-4-4v4Zm4,5.95v-4h-4v4h4Z"/>
-  </g>
-</svg>