WIp - manage role permissions per object

WIP - field level permission
WIP - permissions working as expected
2025-12-30 06:16:54 +01:00 · 2025-12-30 05:54:56 +01:00 · 2025-12-30 04:50:51 +01:00 · 2025-12-30 04:43:51 +01:00 · 2025-12-30 04:22:56 +01:00 · 2025-12-30 03:26:50 +01:00
61 changed files with 997 additions and 9322 deletions
--- a/.env.web
+++ b/.env.web
@@ -2,4 +2,4 @@ NUXT_PORT=3001
 NUXT_HOST=0.0.0.0

 # Point Nuxt to the API container (not localhost)
-NUXT_PUBLIC_API_BASE_URL=https://tenant1.routebox.co
+NUXT_PUBLIC_API_BASE_URL=http://jupiter.routebox.co:3000
--- a/DEBUG_INCOMING_CALL.md
+++ b/DEBUG_INCOMING_CALL.md
@@ -1,83 +0,0 @@
-# Debugging Incoming Call Issue
-
-## Current Problem
- Hear "Connecting to your call" message (TwiML is executing)
- No ring on mobile after "Connecting" message
- Click Accept button does nothing
- Call never connects
-
-## Root Cause Hypothesis
-The Twilio Device SDK is likely **NOT receiving the incoming call event** from Twilio's Signaling Server. This could be because:
-
-1. **Identity Mismatch**: The Device's identity (from JWT token) doesn't match the `<Client>ID</Client>` in TwiML
-2. **Device Not Registered**: Device registration isn't completing before the call arrives
-3. **Twilio Signaling Issue**: Device isn't connected to Twilio Signaling Server
-
-## How to Debug
-
-### Step 1: Check Device Identity in Console
-When you open the softphone dialog, **open Browser DevTools Console (F12)**
-
-You should see logs like:
-```
-Token received, creating Device...
-Token identity: e6d45fa3-a108-4085-81e5-a8e05e85e6fb
-Token grants: {voice: {...}}
-Registering Twilio Device...
-✓ Twilio Device registered - ready to receive calls
-Device identity: e6d45fa3-a108-4085-81e5-a8e05e85e6fb
-Device state: ready
-```
-
-**Note the Device identity value** - e.g., "e6d45fa3-a108-4085-81e5-a8e05e85e6fb"
-
-### Step 2: Check Backend Logs
-When you make an inbound call, look for backend logs showing:
-
-```
-╔════════════════════════════════════════╗
-║ === INBOUND CALL RECEIVED ===
-╚════════════════════════════════════════╝
-...
-Client IDs to dial: e6d45fa3-a108-4085-81e5-a8e05e85e6fb
-First Client ID format check: "e6d45fa3-a108-4085-81e5-a8e05e85e6fb" (length: 36)
-```
-
-### Step 3: Compare Identities
-The Device identity from frontend console MUST MATCH the Client ID from backend logs.
-
-**If they match**: The issue is with Twilio Signaling or Device SDK configuration
-**If they don't match**: We found the bug - identity mismatch
-
-### Step 4: Monitor Incoming Event
-When you make the inbound call, keep watching the browser console for:
-
-```
-🔔 Twilio Device INCOMING event received: {...}
-```
-
-**If this appears**: The Device SDK IS receiving the call, so the Accept button issue is frontend
-**If this doesn't appear**: The Device SDK is NOT receiving the call, so it's an identity/registration issue
-
-## What Changed
- Frontend now relies on **Twilio Device SDK `incoming` event** (not Socket.IO) for showing incoming call
- Added comprehensive logging to Device initialization
- Added logging to Accept button handler
- Backend logs Device ID format for comparison
-
-## Next Steps
-
-1. Make an inbound call
-2. Check browser console for the 5 logs above
-3. Check backend logs for Client ID
-4. Look for "🔔 Twilio Device INCOMING event" in browser console
-5. Try clicking Accept and watch console for "📞 Accepting call" logs
-6. Report back with:
-   - Device identity from console
-   - Client ID from backend logs
-   - Whether "🔔 Twilio Device INCOMING event" appears
-   - Whether any accept logs appear
-
-## Important Files
- Backend: `/backend/src/voice/voice.controller.ts` (lines 205-210 show Client ID logging)
- Frontend: `/frontend/composables/useSoftphone.ts` (Device initialization and incoming handler)
--- a/SOFTPHONE_AI_ASSISTANT.md
+++ b/SOFTPHONE_AI_ASSISTANT.md
@@ -1,173 +0,0 @@
-# Softphone AI Assistant - Complete Implementation
-
-## 🎉 Features Implemented
-
-### ✅ Real-time AI Call Assistant
- **OpenAI Realtime API Integration** - Listens to live calls and provides suggestions
- **Audio Streaming** - Twilio Media Streams fork audio to backend for AI processing
- **Real-time Transcription** - Speech-to-text during calls
- **Smart Suggestions** - AI analyzes conversation and advises the agent
-
-## 🔧 Architecture
-
-### Backend Flow
-```
-Inbound Call → TwiML (<Start><Stream> + <Dial>) 
-→ Media Stream WebSocket → OpenAI Realtime API 
-→ AI Processing → Socket.IO → Frontend
-```
-
-### Key Components
-
-1. **TwiML Structure** (`voice.controller.ts:226-234`)
-   - `<Start><Stream>` - Forks audio for AI processing
-   - `<Dial><Client>` - Connects call to agent's softphone
-
-2. **OpenAI Integration** (`voice.service.ts:431-519`)
-   - WebSocket connection to `wss://api.openai.com/v1/realtime?model=gpt-4o-realtime-preview-2024-10-01`
-   - Session config with custom instructions for agent assistance
-   - Handles transcripts and generates suggestions
-
-3. **AI Message Handler** (`voice.service.ts:609-707`)
-   - Processes OpenAI events (transcripts, suggestions, audio)
-   - Routes suggestions to frontend via Socket.IO
-   - Saves transcripts to database
-
-4. **Voice Gateway** (`voice.gateway.ts:272-289`)
-   - `notifyAiTranscript()` - Real-time transcript chunks
-   - `notifyAiSuggestion()` - AI suggestions to agent
-
-### Frontend Components
-
-1. **Softphone Dialog** (`SoftphoneDialog.vue:104-135`)
-   - AI Assistant section with badge showing suggestion count
-   - Color-coded suggestions (blue=response, green=action, purple=insight)
-   - Animated highlight for newest suggestion
-
-2. **Softphone Composable** (`useSoftphone.ts:515-535`)
-   - Socket.IO event handlers for `ai:suggestion` and `ai:transcript`
-   - Maintains history of last 10 suggestions
-   - Maintains history of last 50 transcript items
-
-## 📋 AI Prompt Configuration
-
-The AI is instructed to:
- **Listen, not talk** - It advises the agent, not the caller
- **Provide concise suggestions** - 1-2 sentences max
- **Use formatted output**:
-  - `💡 Suggestion: [advice]`
-  - `⚠️ Alert: [important notice]`
-  - `📋 Action: [CRM action]`
-
-## 🎨 UI Features
-
-### Suggestion Types
- **Response** (Blue) - Suggested replies or approaches
- **Action** (Green) - Recommended CRM actions
- **Insight** (Purple) - Important alerts or observations
-
-### Visual Feedback
- Badge showing number of suggestions
- Newest suggestion pulses for attention
- Auto-scrolling suggestion list
- Timestamp on each suggestion
-
-## 🔍 How to Monitor
-
-### 1. Backend Logs
-```bash
-# Watch for AI events
-docker logs -f neo-backend-1 | grep -E "AI|OpenAI|transcript|suggestion"
-```
-
-Key log markers:
- `📝 Transcript chunk:` - Real-time speech detection
- `✅ Final transcript:` - Complete transcript saved
- `💡 AI Suggestion:` - AI-generated advice
-
-### 2. Database
-```sql
-- View call transcripts
-SELECT call_sid, ai_transcript, created_at 
-FROM calls 
-ORDER BY created_at DESC 
-LIMIT 5;
-```
-
-### 3. Frontend Console
- Open browser DevTools Console
- Watch for: "AI suggestion:", "AI transcript:"
-
-## 🚀 Testing
-
-1. **Make a test call** to your Twilio number
-2. **Accept the call** in the softphone dialog
-3. **Talk during the call** - Say something like "I need to schedule a follow-up"
-4. **Watch the UI** - AI suggestions appear in real-time
-5. **Check logs** - See transcription and suggestion generation
-
-## 📊 Current Status
-
-✅ **Working**:
- Inbound calls ring softphone
- Media stream forks audio to backend
- OpenAI processes audio (1300+ packets/call)
- AI generates suggestions
- Suggestions appear in frontend
- Transcripts saved to database
-
-## 🔧 Configuration
-
-### Required Environment Variables
-```env
-# OpenAI API Key (set in tenant integrations config)
-OPENAI_API_KEY=sk-...
-
-# Optional overrides
-OPENAI_MODEL=gpt-4o-realtime-preview-2024-10-01
-OPENAI_VOICE=alloy
-```
-
-### Tenant Configuration
-Set in Settings > Integrations:
- OpenAI API Key
- Model (optional)
- Voice (optional)
-
-## 🎯 Next Steps (Optional Enhancements)
-
-1. **CRM Tool Execution** - Implement actual tool calls (search contacts, create tasks)
-2. **Audio Response** - Send OpenAI audio back to caller (two-way AI interaction)
-3. **Sentiment Analysis** - Track call sentiment in real-time
-4. **Call Summary** - Generate post-call summary automatically
-5. **Custom Prompts** - Allow agents to customize AI instructions per call type
-
-## 🐛 Troubleshooting
-
-### No suggestions appearing?
-1. Check OpenAI API key is configured
-2. Verify WebSocket connection logs show "OpenAI Realtime connected"
-3. Check frontend Socket.IO connection is established
-4. Verify user ID matches between backend and frontend
-
-### Transcripts not saving?
-1. Check tenant database connection
-2. Verify `calls` table has `ai_transcript` column
-3. Check logs for "Failed to update transcript" errors
-
-### OpenAI connection fails?
-1. Verify API key is valid
-2. Check model name is correct
-3. Review WebSocket close codes in logs
-
-## 📝 Files Modified
-
-**Backend:**
- `/backend/src/voice/voice.service.ts` - OpenAI integration & AI message handling
- `/backend/src/voice/voice.controller.ts` - TwiML generation with stream fork
- `/backend/src/voice/voice.gateway.ts` - Socket.IO event emission
- `/backend/src/main.ts` - Media stream WebSocket handler
-
-**Frontend:**
- `/frontend/components/SoftphoneDialog.vue` - AI suggestions UI
- `/frontend/composables/useSoftphone.ts` - Socket.IO event handlers
--- a/backend/migrations/tenant/20250129000001_add_authorization_system.js
+++ b/backend/migrations/tenant/20250129000001_add_authorization_system.js
@@ -68,7 +68,6 @@ exports.up = function (knex) {
      table.timestamp('expiresAt').nullable();
      table.timestamp('revokedAt').nullable();
      table.timestamp('createdAt').defaultTo(knex.fn.now());
-      table.timestamp('updatedAt').defaultTo(knex.fn.now());

      table
        .foreign('objectDefinitionId')
--- a/backend/migrations/tenant/20250203000001_create_calls_table.js
+++ b/backend/migrations/tenant/20250203000001_create_calls_table.js
@@ -1,55 +0,0 @@
-/**
- * @param { import("knex").Knex } knex
- * @returns { Promise<void> }
- */
-exports.up = async function (knex) {
-  // Create calls table for tracking voice calls
-  await knex.schema.createTable('calls', (table) => {
-    table.string('id', 36).primary();
-    table.string('call_sid', 100).unique().notNullable().comment('Twilio call SID');
-    table.enum('direction', ['inbound', 'outbound']).notNullable();
-    table.string('from_number', 20).notNullable();
-    table.string('to_number', 20).notNullable();
-    table.enum('status', [
-      'queued',
-      'ringing',
-      'in-progress',
-      'completed',
-      'busy',
-      'failed',
-      'no-answer',
-      'canceled'
-    ]).notNullable().defaultTo('queued');
-    table.integer('duration_seconds').unsigned().nullable();
-    table.string('recording_url', 500).nullable();
-    table.text('ai_transcript').nullable().comment('Full transcript from OpenAI');
-    table.text('ai_summary').nullable().comment('AI-generated summary');
-    table.json('ai_insights').nullable().comment('Structured insights from AI');
-    table.string('user_id', 36).notNullable().comment('User who handled the call');
-    table.timestamp('started_at').nullable();
-    table.timestamp('ended_at').nullable();
-    table.timestamp('created_at').defaultTo(knex.fn.now());
-    table.timestamp('updated_at').defaultTo(knex.fn.now());
-
-    // Indexes
-    table.index('call_sid');
-    table.index('user_id');
-    table.index('status');
-    table.index('direction');
-    table.index(['created_at', 'user_id']);
-
-    // Foreign key to users table
-    table.foreign('user_id').references('id').inTable('users').onDelete('CASCADE');
-  });
-
-  console.log('✅ Created calls table');
-};
-
-/**
- * @param { import("knex").Knex } knex
- * @returns { Promise<void> }
- */
-exports.down = async function (knex) {
-  await knex.schema.dropTableIfExists('calls');
-  console.log('✅ Dropped calls table');
-};
--- a/backend/package-lock.json
+++ b/backend/package-lock.json
--- a/backend/package.json
+++ b/backend/package.json
@@ -27,7 +27,6 @@
  },
  "dependencies": {
    "@casl/ability": "^6.7.5",
-    "@fastify/websocket": "^10.0.1",
    "@nestjs/bullmq": "^10.1.0",
    "@nestjs/common": "^10.3.0",
    "@nestjs/config": "^3.1.1",
@@ -35,9 +34,6 @@
    "@nestjs/jwt": "^10.2.0",
    "@nestjs/passport": "^10.0.3",
    "@nestjs/platform-fastify": "^10.3.0",
-    "@nestjs/platform-socket.io": "^10.4.20",
-    "@nestjs/serve-static": "^4.0.2",
-    "@nestjs/websockets": "^10.4.20",
    "@prisma/client": "^5.8.0",
    "bcrypt": "^5.1.1",
    "bullmq": "^5.1.0",
@@ -47,14 +43,10 @@
    "knex": "^3.1.0",
    "mysql2": "^3.15.3",
    "objection": "^3.1.5",
-    "openai": "^6.15.0",
    "passport": "^0.7.0",
    "passport-jwt": "^4.0.1",
    "reflect-metadata": "^0.2.1",
-    "rxjs": "^7.8.1",
-    "socket.io": "^4.8.3",
-    "twilio": "^5.11.1",
-    "ws": "^8.18.3"
+    "rxjs": "^7.8.1"
  },
  "devDependencies": {
    "@nestjs/cli": "^10.3.0",
--- a/backend/prisma/migrations/20260103054426_add_integrations_config/migration.sql
+++ b/backend/prisma/migrations/20260103054426_add_integrations_config/migration.sql
@@ -1,2 +0,0 @@
-- AlterTable
-ALTER TABLE `tenants` ADD COLUMN `integrationsConfig` JSON NULL;
--- a/backend/prisma/schema-central.prisma
+++ b/backend/prisma/schema-central.prisma
@@ -24,18 +24,17 @@ model User {
 }

 model Tenant {
-  id                 String   @id @default(cuid())
-  name               String
-  slug               String   @unique // Used for identification
-  dbHost             String   // Database host
-  dbPort             Int      @default(3306)
-  dbName             String   // Database name
-  dbUsername         String   // Database username
-  dbPassword         String   // Encrypted database password
-  integrationsConfig Json?    // Encrypted JSON config for external services (Twilio, OpenAI, etc.)
-  status             String   @default("active") // active, suspended, deleted
-  createdAt          DateTime @default(now())
-  updatedAt          DateTime @updatedAt
+  id          String   @id @default(cuid())
+  name        String
+  slug        String   @unique // Used for identification
+  dbHost      String   // Database host
+  dbPort      Int      @default(3306)
+  dbName      String   // Database name
+  dbUsername  String   // Database username
+  dbPassword  String   // Encrypted database password
+  status      String   @default("active") // active, suspended, deleted
+  createdAt   DateTime @default(now())
+  updatedAt   DateTime @updatedAt

  domains     Domain[]

--- a/backend/src/app.module.ts
+++ b/backend/src/app.module.ts
@@ -7,7 +7,6 @@ import { RbacModule } from './rbac/rbac.module';
 import { ObjectModule } from './object/object.module';
 import { AppBuilderModule } from './app-builder/app-builder.module';
 import { PageLayoutModule } from './page-layout/page-layout.module';
-import { VoiceModule } from './voice/voice.module';

@Module({
  imports: [
@@ -21,7 +20,6 @@ import { VoiceModule } from './voice/voice.module';
    ObjectModule,
    AppBuilderModule,
    PageLayoutModule,
-    VoiceModule,
  ],
 })
 export class AppModule {}
--- a/backend/src/main.ts
+++ b/backend/src/main.ts
@@ -3,15 +3,13 @@ import {
  FastifyAdapter,
  NestFastifyApplication,
 } from '@nestjs/platform-fastify';
-import { ValidationPipe, Logger } from '@nestjs/common';
+import { ValidationPipe } from '@nestjs/common';
 import { AppModule } from './app.module';
-import { VoiceService } from './voice/voice.service';
-import { AudioConverterService } from './voice/audio-converter.service';

 async function bootstrap() {
  const app = await NestFactory.create<NestFastifyApplication>(
    AppModule,
-    new FastifyAdapter({ logger: true }),
+    new FastifyAdapter(),
  );

  // Global validation pipe
@@ -35,145 +33,6 @@ async function bootstrap() {
  const port = process.env.PORT || 3000;
  await app.listen(port, '0.0.0.0');

-  // After app is listening, register WebSocket handler
-  const fastifyInstance = app.getHttpAdapter().getInstance();
-  const logger = new Logger('MediaStreamWS');
-  const voiceService = app.get(VoiceService);
-  const audioConverter = app.get(AudioConverterService);
-  
-  const WebSocketServer = require('ws').Server;
-  const wss = new WebSocketServer({ noServer: true });
-
-  // Handle WebSocket upgrades at the server level
-  const server = (fastifyInstance.server as any);
-  
-  // Track active Media Streams connections: streamSid -> WebSocket
-  const mediaStreams: Map<string, any> = new Map();
-  
-  server.on('upgrade', (request: any, socket: any, head: any) => {
-    if (request.url === '/api/voice/media-stream') {
-      logger.log('=== MEDIA STREAM WEBSOCKET UPGRADE REQUEST ===');
-      logger.log(`Path: ${request.url}`);
-      
-      wss.handleUpgrade(request, socket, head, (ws: any) => {
-        logger.log('=== MEDIA STREAM WEBSOCKET UPGRADED SUCCESSFULLY ===');
-        handleMediaStreamSocket(ws);
-      });
-    }
-  });
-  
-  async function handleMediaStreamSocket(ws: any) {
-    let streamSid: string | null = null;
-    let callSid: string | null = null;
-    let tenantDomain: string | null = null;
-    let mediaPacketCount = 0;
-
-    ws.on('message', async (message: Buffer) => {
-      try {
-        const msg = JSON.parse(message.toString());
-
-        switch (msg.event) {
-          case 'connected':
-            logger.log('=== MEDIA STREAM EVENT: CONNECTED ===');
-            logger.log(`Protocol: ${msg.protocol}`);
-            logger.log(`Version: ${msg.version}`);
-            break;
-
-          case 'start':
-            streamSid = msg.streamSid;
-            callSid = msg.start.callSid;
-            tenantDomain = msg.start.customParameters?.tenantId || 'tenant1';
-
-            logger.log(`=== MEDIA STREAM EVENT: START ===`);
-            logger.log(`StreamSid: ${streamSid}`);
-            logger.log(`CallSid: ${callSid}`);
-            logger.log(`Tenant: ${tenantDomain}`);
-            logger.log(`MediaFormat: ${JSON.stringify(msg.start.mediaFormat)}`);
-
-            mediaStreams.set(streamSid, ws);
-            logger.log(`Stored WebSocket for streamSid: ${streamSid}. Total active streams: ${mediaStreams.size}`);
-
-            // Initialize OpenAI Realtime connection
-            logger.log(`Initializing OpenAI Realtime for call ${callSid}...`);
-            try {
-              await voiceService.initializeOpenAIRealtime({
-                callSid,
-                tenantId: tenantDomain,
-                userId: msg.start.customParameters?.userId || 'system',
-              });
-              logger.log(`✓ OpenAI Realtime initialized for call ${callSid}`);
-            } catch (error: any) {
-              logger.error(`Failed to initialize OpenAI: ${error.message}`);
-            }
-            break;
-
-          case 'media':
-            mediaPacketCount++;
-            // Only log every 500 packets to reduce noise
-            if (mediaPacketCount % 500 === 0) {
-              logger.log(`Received media packet #${mediaPacketCount} for StreamSid: ${streamSid}`);
-            }
-
-            if (!callSid || !tenantDomain) {
-              logger.warn('Received media before start event');
-              break;
-            }
-
-            try {
-              // Convert Twilio audio (μ-law 8kHz) to OpenAI format (PCM16 24kHz)
-              const twilioAudio = msg.media.payload;
-              const openaiAudio = audioConverter.twilioToOpenAI(twilioAudio);
-
-              // Send audio to OpenAI Realtime API
-              await voiceService.sendAudioToOpenAI(callSid, openaiAudio);
-            } catch (error: any) {
-              logger.error(`Error processing media: ${error.message}`);
-            }
-            break;
-
-          case 'stop':
-            logger.log(`=== MEDIA STREAM EVENT: STOP ===`);
-            logger.log(`StreamSid: ${streamSid}`);
-            logger.log(`Total media packets received: ${mediaPacketCount}`);
-
-            if (streamSid) {
-              mediaStreams.delete(streamSid);
-              logger.log(`Removed WebSocket for streamSid: ${streamSid}`);
-            }
-
-            // Clean up OpenAI connection
-            if (callSid) {
-              try {
-                logger.log(`Cleaning up OpenAI connection for call ${callSid}...`);
-                await voiceService.cleanupOpenAIConnection(callSid);
-                logger.log(`✓ OpenAI connection cleaned up`);
-              } catch (error: any) {
-                logger.error(`Failed to cleanup OpenAI: ${error.message}`);
-              }
-            }
-            break;
-
-          default:
-            logger.debug(`Unknown media stream event: ${msg.event}`);
-        }
-      } catch (error: any) {
-        logger.error(`Error processing media stream message: ${error.message}`);
-      }
-    });
-
-    ws.on('close', () => {
-      logger.log(`=== MEDIA STREAM WEBSOCKET CLOSED ===`);
-      if (streamSid) {
-        mediaStreams.delete(streamSid);
-      }
-    });
-
-    ws.on('error', (error: Error) => {
-      logger.error(`=== MEDIA STREAM WEBSOCKET ERROR ===`);
-      logger.error(`Error message: ${error.message}`);
-    });
-  }
-
  console.log(`🚀 Application is running on: http://localhost:${port}/api`);
 }

--- a/backend/src/models/record-share.model.ts
+++ b/backend/src/models/record-share.model.ts
@@ -9,27 +9,6 @@ export interface RecordShareAccessLevel {
 export class RecordShare extends BaseModel {
  static tableName = 'record_shares';

-  // Don't use snake_case mapping since DB columns are already camelCase
-  static get columnNameMappers() {
-    return {
-      parse(obj: any) {
-        return obj;
-      },
-      format(obj: any) {
-        return obj;
-      },
-    };
-  }
-
-  // Don't auto-set timestamps - let DB defaults handle them
-  $beforeInsert() {
-    // Don't call super - skip BaseModel's timestamp logic
-  }
-
-  $beforeUpdate() {
-    // Don't call super - skip BaseModel's timestamp logic
-  }
-
  id!: string;
  objectDefinitionId!: string;
  recordId!: string;
@@ -39,7 +18,6 @@ export class RecordShare extends BaseModel {
  expiresAt?: Date;
  revokedAt?: Date;
  createdAt!: Date;
-  updatedAt!: Date;

  static get jsonSchema() {
    return {
@@ -59,22 +37,8 @@ export class RecordShare extends BaseModel {
            canDelete: { type: 'boolean' },
          },
        },
-        expiresAt: {
-          anyOf: [
-            { type: 'string', format: 'date-time' },
-            { type: 'null' },
-            { type: 'object' } // Allow Date objects
-          ]
-        },
-        revokedAt: {
-          anyOf: [
-            { type: 'string', format: 'date-time' },
-            { type: 'null' },
-            { type: 'object' } // Allow Date objects
-          ]
-        },
-        createdAt: { type: ['string', 'object'], format: 'date-time' },
-        updatedAt: { type: ['string', 'object'], format: 'date-time' },
+        expiresAt: { type: 'string', format: 'date-time' },
+        revokedAt: { type: 'string', format: 'date-time' },
      },
    };
  }
--- a/backend/src/object/object.service.ts
+++ b/backend/src/object/object.service.ts
@@ -3,7 +3,6 @@ import { TenantDatabaseService } from '../tenant/tenant-database.service';
 import { CustomMigrationService } from '../migration/custom-migration.service';
 import { ModelService } from './models/model.service';
 import { AuthorizationService } from '../rbac/authorization.service';
-import { SchemaManagementService } from './schema-management.service';
 import { ObjectDefinition } from '../models/object-definition.model';
 import { FieldDefinition } from '../models/field-definition.model';
 import { User } from '../models/user.model';
@@ -271,10 +270,6 @@ export class ObjectService {
      relationObject?: string;
      relationDisplayField?: string;
      defaultValue?: string;
-      length?: number;
-      precision?: number;
-      scale?: number;
-      uiMetadata?: any;
    },
  ) {
    const resolvedTenantId = await this.tenantDbService.resolveTenantId(tenantId);
@@ -287,11 +282,8 @@ export class ObjectService {
    // Use relationObject if provided (alias for referenceObject)
    const referenceObject = data.referenceObject || data.relationObject;

-    // Generate UUID in Node.js instead of using MySQL UUID() function
-    const fieldId = require('crypto').randomUUID();
-
    const fieldData: any = {
-      id: fieldId,
+      id: knex.raw('(UUID())'),
      objectDefinitionId: obj.id,
      apiName: data.apiName,
      label: data.label,
@@ -301,41 +293,20 @@ export class ObjectService {
      isUnique: data.isUnique ?? false,
      referenceObject: referenceObject,
      defaultValue: data.defaultValue,
-      length: data.length,
-      precision: data.precision,
-      scale: data.scale,
      created_at: knex.fn.now(),
      updated_at: knex.fn.now(),
    };
    
-    // Merge UI metadata
-    const uiMetadata: any = {};
+    // Store relationDisplayField in UI metadata if provided
    if (data.relationDisplayField) {
-      uiMetadata.relationDisplayField = data.relationDisplayField;
-    }
-    if (data.uiMetadata) {
-      Object.assign(uiMetadata, data.uiMetadata);
-    }
-    if (Object.keys(uiMetadata).length > 0) {
-      fieldData.ui_metadata = JSON.stringify(uiMetadata);
+      fieldData.ui_metadata = JSON.stringify({
+        relationDisplayField: data.relationDisplayField,
+      });
    }
    
-    await knex('field_definitions').insert(fieldData);
-    const createdField = await knex('field_definitions').where({ id: fieldId }).first();
-
-    // Add the column to the physical table
-    const schemaManagementService = new SchemaManagementService();
-    try {
-      await schemaManagementService.addFieldToTable(knex, objectApiName, createdField);
-      this.logger.log(`Added column ${data.apiName} to table for object ${objectApiName}`);
-    } catch (error) {
-      // If column creation fails, delete the field definition to maintain consistency
-      this.logger.error(`Failed to add column ${data.apiName}: ${error.message}`);
-      await knex('field_definitions').where({ id: fieldId }).delete();
-      throw new Error(`Failed to create field column: ${error.message}`);
-    }
+    const [id] = await knex('field_definitions').insert(fieldData);
    
-    return createdField;
+    return knex('field_definitions').where({ id }).first();
  }

  // Helper to get table name from object definition
@@ -394,7 +365,6 @@ export class ObjectService {
      'url': 'URL',
      'color': 'TEXT',
      'json': 'JSON',
-      'lookup': 'LOOKUP',
      'belongsTo': 'LOOKUP',
      'hasMany': 'LOOKUP',
      'manyToMany': 'LOOKUP',
@@ -772,219 +742,6 @@ export class ObjectService {
    return { success: true };
  }

-  /**
-   * Update a field definition
-   * Can update metadata (label, description, placeholder, helpText, etc.) safely
-   * Cannot update apiName or type if field has existing data (prevent data loss)
-   */
-  async updateFieldDefinition(
-    tenantId: string,
-    objectApiName: string,
-    fieldApiName: string,
-    data: Partial<{
-      label: string;
-      description: string;
-      isRequired: boolean;
-      isUnique: boolean;
-      defaultValue: string;
-      placeholder: string;
-      helpText: string;
-      displayOrder: number;
-      uiMetadata: Record<string, any>;
-    }>,
-  ) {
-    const resolvedTenantId = await this.tenantDbService.resolveTenantId(tenantId);
-    const knex = await this.tenantDbService.getTenantKnexById(resolvedTenantId);
-
-    // Get the object definition
-    const objectDef = await ObjectDefinition.query(knex)
-      .findOne({ apiName: objectApiName });
-    
-    if (!objectDef) {
-      throw new NotFoundException(`Object ${objectApiName} not found`);
-    }
-
-    // Get the field definition
-    const field = await knex('field_definitions')
-      .where({ objectDefinitionId: objectDef.id, apiName: fieldApiName })
-      .first();
-    
-    if (!field) {
-      throw new NotFoundException(`Field ${fieldApiName} not found`);
-    }
-
-    // Check if this field has data (count records)
-    const tableName = this.getTableName(objectApiName);
-    const recordCount = await knex(tableName).count('* as cnt').first();
-    const hasData = recordCount && (recordCount.cnt as number) > 0;
-
-    // Prepare update object
-    const updateData: any = {
-      updated_at: knex.fn.now(),
-    };
-
-    // Always allow these updates
-    if (data.label !== undefined) updateData.label = data.label;
-    if (data.description !== undefined) updateData.description = data.description;
-    if (data.displayOrder !== undefined) updateData.displayOrder = data.displayOrder;
-    
-    // Merge with existing uiMetadata
-    const existingMetadata = field.ui_metadata ? JSON.parse(field.ui_metadata) : {};
-    const newMetadata = { ...existingMetadata };
-    
-    if (data.placeholder !== undefined) newMetadata.placeholder = data.placeholder;
-    if (data.helpText !== undefined) newMetadata.helpText = data.helpText;
-    if (data.uiMetadata) {
-      Object.assign(newMetadata, data.uiMetadata);
-    }
-
-    if (Object.keys(newMetadata).length > 0) {
-      updateData.ui_metadata = JSON.stringify(newMetadata);
-    }
-
-    // Conditional updates based on data existence
-    if (data.isRequired !== undefined) {
-      if (hasData && data.isRequired && !field.isRequired) {
-        throw new Error('Cannot make a field required when data exists. Existing records may have null values.');
-      }
-      updateData.isRequired = data.isRequired;
-    }
-
-    if (data.isUnique !== undefined) {
-      if (hasData && data.isUnique && !field.isUnique) {
-        throw new Error('Cannot add unique constraint to field with existing data. Existing records may have duplicate values.');
-      }
-      updateData.isUnique = data.isUnique;
-    }
-
-    // Update the field definition
-    await knex('field_definitions')
-      .where({ id: field.id })
-      .update(updateData);
-
-    return knex('field_definitions').where({ id: field.id }).first();
-  }
-
-  /**
-   * Delete a field definition and clean up dependencies
-   * Removes the column from the physical table
-   * Removes field references from page layouts
-   * CASCADE deletion handles role_field_permissions
-   */
-  async deleteFieldDefinition(
-    tenantId: string,
-    objectApiName: string,
-    fieldApiName: string,
-  ) {
-    const resolvedTenantId = await this.tenantDbService.resolveTenantId(tenantId);
-    const knex = await this.tenantDbService.getTenantKnexById(resolvedTenantId);
-
-    // Get the object definition
-    const objectDef = await ObjectDefinition.query(knex)
-      .findOne({ apiName: objectApiName });
-    
-    if (!objectDef) {
-      throw new NotFoundException(`Object ${objectApiName} not found`);
-    }
-
-    // Get the field definition
-    const field = await knex('field_definitions')
-      .where({ objectDefinitionId: objectDef.id, apiName: fieldApiName })
-      .first();
-    
-    if (!field) {
-      throw new NotFoundException(`Field ${fieldApiName} not found`);
-    }
-
-    // Prevent deletion of system fields
-    const systemFieldNames = ['id', 'tenantId', 'ownerId', 'created_at', 'updated_at', 'createdAt', 'updatedAt'];
-    if (systemFieldNames.includes(fieldApiName)) {
-      throw new Error(`Cannot delete system field: ${fieldApiName}`);
-    }
-
-    // Clean up page layouts - remove field references from layoutConfig
-    try {
-      const pageLayouts = await knex('page_layouts')
-        .where({ object_id: objectDef.id });
-      
-      for (const layout of pageLayouts) {
-        // Handle JSON column that might already be parsed
-        let layoutConfig;
-        if (layout.layout_config) {
-          layoutConfig = typeof layout.layout_config === 'string' 
-            ? JSON.parse(layout.layout_config) 
-            : layout.layout_config;
-        } else {
-          layoutConfig = { fields: [] };
-        }
-        
-        // Filter out any field references for this field
-        if (layoutConfig.fields) {
-          layoutConfig.fields = layoutConfig.fields.filter(
-            (f: any) => f.fieldId !== field.id,
-          );
-        }
-        
-        // Update the page layout
-        await knex('page_layouts')
-          .where({ id: layout.id })
-          .update({
-            layout_config: JSON.stringify(layoutConfig),
-            updated_at: knex.fn.now(),
-          });
-      }
-    } catch (error) {
-      // If page layouts table doesn't exist or query fails, log but continue
-      this.logger.warn(`Could not update page layouts for field deletion: ${error.message}`);
-    }
-
-    // Clean up dependsOn references in other fields
-    const otherFields = await knex('field_definitions')
-      .where({ objectDefinitionId: objectDef.id })
-      .whereNot({ id: field.id });
-    
-    for (const otherField of otherFields) {
-      // Handle JSON column that might already be parsed
-      let metadata;
-      if (otherField.ui_metadata) {
-        metadata = typeof otherField.ui_metadata === 'string'
-          ? JSON.parse(otherField.ui_metadata)
-          : otherField.ui_metadata;
-      } else {
-        metadata = {};
-      }
-      
-      if (metadata.dependsOn && Array.isArray(metadata.dependsOn)) {
-        metadata.dependsOn = metadata.dependsOn.filter(
-          (dep: any) => dep !== field.apiName,
-        );
-        
-        await knex('field_definitions')
-          .where({ id: otherField.id })
-          .update({
-            ui_metadata: JSON.stringify(metadata),
-            updated_at: knex.fn.now(),
-          });
-      }
-    }
-
-    // Remove the column from the physical table
-    const tableName = this.getTableName(objectApiName);
-    const schemaManagementService = new SchemaManagementService();
-    
-    try {
-      await schemaManagementService.removeFieldFromTable(knex, objectApiName, fieldApiName);
-    } catch (error) {
-      this.logger.warn(`Failed to remove column ${fieldApiName} from table ${tableName}: ${error.message}`);
-      // Continue with deletion even if column removal fails - field definition must be cleaned up
-    }
-
-    // Delete the field definition (CASCADE will delete role_field_permissions)
-    await knex('field_definitions').where({ id: field.id }).delete();
-
-    return { success: true };
-  }
-
  async getFieldPermissions(tenantId: string, objectId: string) {
    const resolvedTenantId = await this.tenantDbService.resolveTenantId(tenantId);
    const knex = await this.tenantDbService.getTenantKnexById(resolvedTenantId);
--- a/backend/src/object/schema-management.service.ts
+++ b/backend/src/object/schema-management.service.ts
@@ -71,37 +71,6 @@ export class SchemaManagementService {
    this.logger.log(`Removed field ${fieldApiName} from table ${tableName}`);
  }

-  /**
-   * Alter a field in an existing object table
-   * Handles safe updates like changing NOT NULL or constraints
-   * Warns about potentially destructive operations
-   */
-  async alterFieldInTable(
-    knex: Knex,
-    objectApiName: string,
-    fieldApiName: string,
-    field: FieldDefinition,
-    options?: {
-      skipTypeChange?: boolean; // Skip if type change would lose data
-    },
-  ) {
-    const tableName = this.getTableName(objectApiName);
-    const skipTypeChange = options?.skipTypeChange ?? true;
-
-    await knex.schema.alterTable(tableName, (table) => {
-      // Drop the existing column and recreate with new definition
-      // Note: This approach works for metadata changes, but type changes may need data migration
-      table.dropColumn(fieldApiName);
-    });
-
-    // Recreate the column with new definition
-    await knex.schema.alterTable(tableName, (table) => {
-      this.addFieldColumn(table, field);
-    });
-
-    this.logger.log(`Altered field ${fieldApiName} in table ${tableName}`);
-  }
-
  /**
   * Drop an object table
   */
@@ -125,30 +94,15 @@ export class SchemaManagementService {
    let column: Knex.ColumnBuilder;

    switch (field.type) {
-      // Text types
      case 'String':
-      case 'TEXT':
-      case 'EMAIL':
-      case 'PHONE':
-      case 'URL':
        column = table.string(columnName, field.length || 255);
        break;

      case 'Text':
-      case 'LONG_TEXT':
        column = table.text(columnName);
        break;

-      case 'PICKLIST':
-      case 'MULTI_PICKLIST':
-        column = table.string(columnName, 255);
-        break;
-
-      // Numeric types
      case 'Number':
-      case 'NUMBER':
-      case 'CURRENCY':
-      case 'PERCENT':
        if (field.scale && field.scale > 0) {
          column = table.decimal(
            columnName,
@@ -161,28 +115,18 @@ export class SchemaManagementService {
        break;

      case 'Boolean':
-      case 'BOOLEAN':
        column = table.boolean(columnName).defaultTo(false);
        break;

-      // Date types
      case 'Date':
-      case 'DATE':
        column = table.date(columnName);
        break;

      case 'DateTime':
-      case 'DATE_TIME':
        column = table.datetime(columnName);
        break;

-      case 'TIME':
-        column = table.time(columnName);
-        break;
-
-      // Relationship types
      case 'Reference':
-      case 'LOOKUP':
        column = table.uuid(columnName);
        if (field.referenceObject) {
          const refTableName = this.getTableName(field.referenceObject);
@@ -190,30 +134,19 @@ export class SchemaManagementService {
        }
        break;

-      // Email (legacy)
      case 'Email':
        column = table.string(columnName, 255);
        break;

-      // Phone (legacy)
      case 'Phone':
        column = table.string(columnName, 50);
        break;

-      // Url (legacy)
      case 'Url':
        column = table.string(columnName, 255);
        break;

-      // File types
-      case 'FILE':
-      case 'IMAGE':
-        column = table.text(columnName); // Store file path or URL
-        break;
-
-      // JSON
      case 'Json':
-      case 'JSON':
        column = table.json(columnName);
        break;

--- a/backend/src/object/setup-object.controller.ts
+++ b/backend/src/object/setup-object.controller.ts
@@ -4,7 +4,6 @@ import {
  Post,
  Patch,
  Put,
-  Delete,
  Param,
  Body,
  UseGuards,
@@ -73,35 +72,6 @@ export class SetupObjectController {
    return this.fieldMapperService.mapFieldToDTO(field);
  }

-  @Put(':objectApiName/fields/:fieldApiName')
-  async updateFieldDefinition(
-    @TenantId() tenantId: string,
-    @Param('objectApiName') objectApiName: string,
-    @Param('fieldApiName') fieldApiName: string,
-    @Body() data: any,
-  ) {
-    const field = await this.objectService.updateFieldDefinition(
-      tenantId,
-      objectApiName,
-      fieldApiName,
-      data,
-    );
-    return this.fieldMapperService.mapFieldToDTO(field);
-  }
-
-  @Delete(':objectApiName/fields/:fieldApiName')
-  async deleteFieldDefinition(
-    @TenantId() tenantId: string,
-    @Param('objectApiName') objectApiName: string,
-    @Param('fieldApiName') fieldApiName: string,
-  ) {
-    return this.objectService.deleteFieldDefinition(
-      tenantId,
-      objectApiName,
-      fieldApiName,
-    );
-  }
-
  @Patch(':objectApiName')
  async updateObjectDefinition(
    @TenantId() tenantId: string,
--- a/backend/src/rbac/dto/create-record-share.dto.ts
+++ b/backend/src/rbac/dto/create-record-share.dto.ts
@@ -1,19 +0,0 @@
-import { IsString, IsBoolean, IsOptional, IsDateString } from 'class-validator';
-
-export class CreateRecordShareDto {
-  @IsString()
-  granteeUserId: string;
-
-  @IsBoolean()
-  canRead: boolean;
-
-  @IsBoolean()
-  canEdit: boolean;
-
-  @IsBoolean()
-  canDelete: boolean;
-
-  @IsOptional()
-  @IsDateString()
-  expiresAt?: string;
-}
--- a/backend/src/rbac/rbac.module.ts
+++ b/backend/src/rbac/rbac.module.ts
@@ -3,13 +3,11 @@ import { RbacService } from './rbac.service';
 import { AbilityFactory } from './ability.factory';
 import { AuthorizationService } from './authorization.service';
 import { SetupRolesController } from './setup-roles.controller';
-import { SetupUsersController } from './setup-users.controller';
-import { RecordSharingController } from './record-sharing.controller';
 import { TenantModule } from '../tenant/tenant.module';

@Module({
  imports: [TenantModule],
-  controllers: [SetupRolesController, SetupUsersController, RecordSharingController],
+  controllers: [SetupRolesController],
  providers: [RbacService, AbilityFactory, AuthorizationService],
  exports: [RbacService, AbilityFactory, AuthorizationService],
 })
--- a/backend/src/rbac/record-sharing.controller.ts
+++ b/backend/src/rbac/record-sharing.controller.ts
@@ -1,324 +0,0 @@
-import {
-  Controller,
-  Get,
-  Post,
-  Delete,
-  Param,
-  Body,
-  UseGuards,
-  ForbiddenException,
-} from '@nestjs/common';
-import { JwtAuthGuard } from '../auth/jwt-auth.guard';
-import { TenantId } from '../tenant/tenant.decorator';
-import { CurrentUser } from '../auth/current-user.decorator';
-import { TenantDatabaseService } from '../tenant/tenant-database.service';
-import { RecordShare } from '../models/record-share.model';
-import { ObjectDefinition } from '../models/object-definition.model';
-import { User } from '../models/user.model';
-import { AuthorizationService } from './authorization.service';
-import { CreateRecordShareDto } from './dto/create-record-share.dto';
-
-@Controller('runtime/objects/:objectApiName/records/:recordId/shares')
-@UseGuards(JwtAuthGuard)
-export class RecordSharingController {
-  constructor(
-    private tenantDbService: TenantDatabaseService,
-    private authService: AuthorizationService,
-  ) {}
-
-  @Get()
-  async getRecordShares(
-    @TenantId() tenantId: string,
-    @Param('objectApiName') objectApiName: string,
-    @Param('recordId') recordId: string,
-    @CurrentUser() currentUser: any,
-  ) {
-    const resolvedTenantId = await this.tenantDbService.resolveTenantId(tenantId);
-    const knex = await this.tenantDbService.getTenantKnexById(resolvedTenantId);
-
-    // Get object definition
-    const objectDef = await ObjectDefinition.query(knex)
-      .findOne({ apiName: objectApiName });
-
-    if (!objectDef) {
-      throw new Error('Object not found');
-    }
-
-    // Get the record to check ownership
-    const tableName = this.getTableName(objectDef.apiName);
-    const record = await knex(tableName)
-      .where({ id: recordId })
-      .first();
-
-    if (!record) {
-      throw new Error('Record not found');
-    }
-
-    // Only owner can view shares
-    if (record.ownerId !== currentUser.userId) {
-      // Check if user has modify all permission
-      const user: any = await User.query(knex)
-        .findById(currentUser.userId)
-        .withGraphFetched('roles.objectPermissions');
-
-      if (!user) {
-        throw new ForbiddenException('User not found');
-      }
-
-      const hasModifyAll = user.roles?.some(role =>
-        role.objectPermissions?.some(
-          perm => perm.objectDefinitionId === objectDef.id && perm.canModifyAll
-        )
-      );
-
-      if (!hasModifyAll) {
-        throw new ForbiddenException('Only the record owner or users with Modify All permission can view shares');
-      }
-    }
-
-    // Get all active shares for this record
-    const shares = await RecordShare.query(knex)
-      .where({ objectDefinitionId: objectDef.id, recordId })
-      .whereNull('revokedAt')
-      .where(builder => {
-        builder.whereNull('expiresAt').orWhere('expiresAt', '>', new Date());
-      })
-      .withGraphFetched('[granteeUser]')
-      .orderBy('createdAt', 'desc');
-
-    return shares;
-  }
-
-  @Post()
-  async createRecordShare(
-    @TenantId() tenantId: string,
-    @Param('objectApiName') objectApiName: string,
-    @Param('recordId') recordId: string,
-    @CurrentUser() currentUser: any,
-    @Body() data: CreateRecordShareDto,
-  ) {
-    const resolvedTenantId = await this.tenantDbService.resolveTenantId(tenantId);
-    const knex = await this.tenantDbService.getTenantKnexById(resolvedTenantId);
-
-    // Get object definition
-    const objectDef = await ObjectDefinition.query(knex)
-      .findOne({ apiName: objectApiName });
-
-    if (!objectDef) {
-      throw new Error('Object not found');
-    }
-
-    // Get the record to check ownership
-    const tableName = this.getTableName(objectDef.apiName);
-    const record = await knex(tableName)
-      .where({ id: recordId })
-      .first();
-
-    if (!record) {
-      throw new Error('Record not found');
-    }
-
-    // Check if user can share - either owner or has modify permissions
-    const canShare = await this.canUserShareRecord(
-      currentUser.userId,
-      record,
-      objectDef,
-      knex,
-    );
-
-    if (!canShare) {
-      throw new ForbiddenException('You do not have permission to share this record');
-    }
-
-    // Cannot share with self
-    if (data.granteeUserId === currentUser.userId) {
-      throw new Error('Cannot share record with yourself');
-    }
-
-    // Check if share already exists
-    const existingShare = await RecordShare.query(knex)
-      .where({
-        objectDefinitionId: objectDef.id,
-        recordId,
-        granteeUserId: data.granteeUserId,
-      })
-      .whereNull('revokedAt')
-      .first();
-
-    if (existingShare) {
-      // Update existing share
-      const updated = await RecordShare.query(knex)
-        .patchAndFetchById(existingShare.id, {
-          accessLevel: {
-            canRead: data.canRead,
-            canEdit: data.canEdit,
-            canDelete: data.canDelete,
-          },
-          // Convert ISO string to MySQL datetime format
-          expiresAt: data.expiresAt 
-            ? knex.raw('?', [new Date(data.expiresAt).toISOString().slice(0, 19).replace('T', ' ')]) 
-            : null,
-        } as any);
-
-      return RecordShare.query(knex)
-        .findById(updated.id)
-        .withGraphFetched('[granteeUser]');
-    }
-
-    // Create new share
-    const share = await RecordShare.query(knex).insertAndFetch({
-      objectDefinitionId: objectDef.id,
-      recordId,
-      granteeUserId: data.granteeUserId,
-      grantedByUserId: currentUser.userId,
-      accessLevel: {
-        canRead: data.canRead,
-        canEdit: data.canEdit,
-        canDelete: data.canDelete,
-      },
-      // Convert ISO string to MySQL datetime format: YYYY-MM-DD HH:MM:SS
-      expiresAt: data.expiresAt 
-        ? knex.raw('?', [new Date(data.expiresAt).toISOString().slice(0, 19).replace('T', ' ')]) 
-        : null,
-    } as any);
-
-    return RecordShare.query(knex)
-      .findById(share.id)
-      .withGraphFetched('[granteeUser]');
-  }
-
-  @Delete(':shareId')
-  async deleteRecordShare(
-    @TenantId() tenantId: string,
-    @Param('objectApiName') objectApiName: string,
-    @Param('recordId') recordId: string,
-    @Param('shareId') shareId: string,
-    @CurrentUser() currentUser: any,
-  ) {
-    const resolvedTenantId = await this.tenantDbService.resolveTenantId(tenantId);
-    const knex = await this.tenantDbService.getTenantKnexById(resolvedTenantId);
-
-    // Get object definition
-    const objectDef = await ObjectDefinition.query(knex)
-      .findOne({ apiName: objectApiName });
-
-    if (!objectDef) {
-      throw new Error('Object not found');
-    }
-
-    // Get the record to check ownership
-    const tableName = this.getTableName(objectDef.apiName);
-    const record = await knex(tableName)
-      .where({ id: recordId })
-      .first();
-
-    if (!record) {
-      throw new Error('Record not found');
-    }
-
-    // Only owner can revoke shares
-    if (record.ownerId !== currentUser.userId) {
-      // Check if user has modify all permission
-      const user: any = await User.query(knex)
-        .findById(currentUser.userId)
-        .withGraphFetched('roles.objectPermissions');
-
-      if (!user) {
-        throw new ForbiddenException('User not found');
-      }
-
-      const hasModifyAll = user.roles?.some(role =>
-        role.objectPermissions?.some(
-          perm => perm.objectDefinitionId === objectDef.id && perm.canModifyAll
-        )
-      );
-
-      if (!hasModifyAll) {
-        throw new ForbiddenException('Only the record owner or users with Modify All permission can revoke shares');
-      }
-    }
-
-    // Revoke the share (soft delete)
-    await RecordShare.query(knex)
-      .patchAndFetchById(shareId, {
-        revokedAt: knex.fn.now() as any,
-      });
-
-    return { success: true };
-  }
-
-  private async canUserShareRecord(
-    userId: string,
-    record: any,
-    objectDef: ObjectDefinition,
-    knex: any,
-  ): Promise<boolean> {
-    // Owner can always share
-    if (record.ownerId === userId) {
-      return true;
-    }
-
-    // Check if user has modify all or edit permissions
-    const user: any = await User.query(knex)
-      .findById(userId)
-      .withGraphFetched('roles.objectPermissions');
-
-    if (!user) {
-      return false;
-    }
-
-    // Check for canModifyAll permission
-    const hasModifyAll = user.roles?.some(role =>
-      role.objectPermissions?.some(
-        perm => perm.objectDefinitionId === objectDef.id && perm.canModifyAll
-      )
-    );
-
-    if (hasModifyAll) {
-      return true;
-    }
-
-    // Check for canEdit permission (user needs edit to share)
-    const hasEdit = user.roles?.some(role =>
-      role.objectPermissions?.some(
-        perm => perm.objectDefinitionId === objectDef.id && perm.canEdit
-      )
-    );
-
-    // If user has edit permission, check if they can actually edit this record
-    // by using the authorization service
-    if (hasEdit) {
-      try {
-        await this.authService.assertCanPerformAction(
-          'update',
-          objectDef,
-          record,
-          user,
-          knex,
-        );
-        return true;
-      } catch {
-        return false;
-      }
-    }
-
-    return false;
-  }
-
-  private getTableName(apiName: string): string {
-    // Convert CamelCase to snake_case and pluralize
-    const snakeCase = apiName
-      .replace(/([A-Z])/g, '_$1')
-      .toLowerCase()
-      .replace(/^_/, '');
-    
-    // Simple pluralization
-    if (snakeCase.endsWith('y')) {
-      return snakeCase.slice(0, -1) + 'ies';
-    } else if (snakeCase.endsWith('s')) {
-      return snakeCase + 'es';
-    } else {
-      return snakeCase + 's';
-    }
-  }
-}
--- a/backend/src/rbac/setup-roles.controller.ts
+++ b/backend/src/rbac/setup-roles.controller.ts
@@ -1,11 +1,6 @@
 import {
  Controller,
  Get,
-  Post,
-  Patch,
-  Delete,
-  Param,
-  Body,
  UseGuards,
 } from '@nestjs/common';
 import { JwtAuthGuard } from '../auth/jwt-auth.guard';
@@ -25,117 +20,4 @@ export class SetupRolesController {
    
    return await Role.query(knex).select('*').orderBy('name', 'asc');
  }
-
-  @Get(':id')
-  async getRole(
-    @TenantId() tenantId: string,
-    @Param('id') id: string,
-  ) {
-    const resolvedTenantId = await this.tenantDbService.resolveTenantId(tenantId);
-    const knex = await this.tenantDbService.getTenantKnexById(resolvedTenantId);
-    
-    return await Role.query(knex).findById(id).withGraphFetched('users');
-  }
-
-  @Post()
-  async createRole(
-    @TenantId() tenantId: string,
-    @Body() data: { name: string; description?: string; guardName?: string },
-  ) {
-    const resolvedTenantId = await this.tenantDbService.resolveTenantId(tenantId);
-    const knex = await this.tenantDbService.getTenantKnexById(resolvedTenantId);
-    
-    const role = await Role.query(knex).insert({
-      name: data.name,
-      description: data.description,
-      guardName: data.guardName || 'tenant',
-    });
-    
-    return role;
-  }
-
-  @Patch(':id')
-  async updateRole(
-    @TenantId() tenantId: string,
-    @Param('id') id: string,
-    @Body() data: { name?: string; description?: string; guardName?: string },
-  ) {
-    const resolvedTenantId = await this.tenantDbService.resolveTenantId(tenantId);
-    const knex = await this.tenantDbService.getTenantKnexById(resolvedTenantId);
-    
-    const updateData: any = {};
-    
-    if (data.name) updateData.name = data.name;
-    if (data.description !== undefined) updateData.description = data.description;
-    if (data.guardName) updateData.guardName = data.guardName;
-    
-    const role = await Role.query(knex).patchAndFetchById(id, updateData);
-    return role;
-  }
-
-  @Delete(':id')
-  async deleteRole(
-    @TenantId() tenantId: string,
-    @Param('id') id: string,
-  ) {
-    const resolvedTenantId = await this.tenantDbService.resolveTenantId(tenantId);
-    const knex = await this.tenantDbService.getTenantKnexById(resolvedTenantId);
-    
-    // Delete role user assignments first
-    await knex('user_roles').where({ roleId: id }).delete();
-    
-    // Delete role permissions
-    await knex('role_permissions').where({ roleId: id }).delete();
-    await knex('role_object_permissions').where({ roleId: id }).delete();
-    
-    // Delete the role
-    await Role.query(knex).deleteById(id);
-    
-    return { success: true };
-  }
-
-  @Post(':roleId/users')
-  async addUserToRole(
-    @TenantId() tenantId: string,
-    @Param('roleId') roleId: string,
-    @Body() data: { userId: string },
-  ) {
-    const resolvedTenantId = await this.tenantDbService.resolveTenantId(tenantId);
-    const knex = await this.tenantDbService.getTenantKnexById(resolvedTenantId);
-    
-    // Check if assignment already exists
-    const existing = await knex('user_roles')
-      .where({ userId: data.userId, roleId })
-      .first();
-    
-    if (existing) {
-      return { success: true, message: 'User already assigned' };
-    }
-    
-    await knex('user_roles').insert({
-      id: knex.raw('(UUID())'),
-      userId: data.userId,
-      roleId,
-      created_at: knex.fn.now(),
-      updated_at: knex.fn.now(),
-    });
-    
-    return { success: true };
-  }
-
-  @Delete(':roleId/users/:userId')
-  async removeUserFromRole(
-    @TenantId() tenantId: string,
-    @Param('roleId') roleId: string,
-    @Param('userId') userId: string,
-  ) {
-    const resolvedTenantId = await this.tenantDbService.resolveTenantId(tenantId);
-    const knex = await this.tenantDbService.getTenantKnexById(resolvedTenantId);
-    
-    await knex('user_roles')
-      .where({ userId, roleId })
-      .delete();
-    
-    return { success: true };
-  }
 }
--- a/backend/src/rbac/setup-users.controller.ts
+++ b/backend/src/rbac/setup-users.controller.ts
@@ -1,146 +0,0 @@
-import {
-  Controller,
-  Get,
-  Post,
-  Patch,
-  Delete,
-  Param,
-  Body,
-  UseGuards,
-} from '@nestjs/common';
-import { JwtAuthGuard } from '../auth/jwt-auth.guard';
-import { TenantId } from '../tenant/tenant.decorator';
-import { TenantDatabaseService } from '../tenant/tenant-database.service';
-import { User } from '../models/user.model';
-import * as bcrypt from 'bcrypt';
-
-@Controller('setup/users')
-@UseGuards(JwtAuthGuard)
-export class SetupUsersController {
-  constructor(private tenantDbService: TenantDatabaseService) {}
-
-  @Get()
-  async getUsers(@TenantId() tenantId: string) {
-    const resolvedTenantId = await this.tenantDbService.resolveTenantId(tenantId);
-    const knex = await this.tenantDbService.getTenantKnexById(resolvedTenantId);
-    return await User.query(knex).withGraphFetched('roles');
-  }
-
-  @Get(':id')
-  async getUser(
-    @TenantId() tenantId: string,
-    @Param('id') id: string,
-  ) {
-    const resolvedTenantId = await this.tenantDbService.resolveTenantId(tenantId);
-    const knex = await this.tenantDbService.getTenantKnexById(resolvedTenantId);
-    return await User.query(knex).findById(id).withGraphFetched('roles');
-  }
-
-  @Post()
-  async createUser(
-    @TenantId() tenantId: string,
-    @Body() data: { email: string; password: string; firstName?: string; lastName?: string },
-  ) {
-    const resolvedTenantId = await this.tenantDbService.resolveTenantId(tenantId);
-    const knex = await this.tenantDbService.getTenantKnexById(resolvedTenantId);
-    
-    // Hash password
-    const hashedPassword = await bcrypt.hash(data.password, 10);
-    
-    const user = await User.query(knex).insert({
-      email: data.email,
-      password: hashedPassword,
-      firstName: data.firstName,
-      lastName: data.lastName,
-      isActive: true,
-    });
-    
-    return user;
-  }
-
-  @Patch(':id')
-  async updateUser(
-    @TenantId() tenantId: string,
-    @Param('id') id: string,
-    @Body() data: { email?: string; password?: string; firstName?: string; lastName?: string },
-  ) {
-    const resolvedTenantId = await this.tenantDbService.resolveTenantId(tenantId);
-    const knex = await this.tenantDbService.getTenantKnexById(resolvedTenantId);
-    
-    const updateData: any = {};
-    
-    if (data.email) updateData.email = data.email;
-    if (data.firstName !== undefined) updateData.firstName = data.firstName;
-    if (data.lastName !== undefined) updateData.lastName = data.lastName;
-    
-    // Hash password if provided
-    if (data.password) {
-      updateData.password = await bcrypt.hash(data.password, 10);
-    }
-    
-    const user = await User.query(knex).patchAndFetchById(id, updateData);
-    return user;
-  }
-
-  @Delete(':id')
-  async deleteUser(
-    @TenantId() tenantId: string,
-    @Param('id') id: string,
-  ) {
-    const resolvedTenantId = await this.tenantDbService.resolveTenantId(tenantId);
-    const knex = await this.tenantDbService.getTenantKnexById(resolvedTenantId);
-    
-    // Delete user role assignments first
-    await knex('user_roles').where({ userId: id }).delete();
-    
-    // Delete the user
-    await User.query(knex).deleteById(id);
-    
-    return { success: true };
-  }
-
-  @Post(':userId/roles')
-  async addRoleToUser(
-    @TenantId() tenantId: string,
-    @Param('userId') userId: string,
-    @Body() data: { roleId: string },
-  ) {
-    const resolvedTenantId = await this.tenantDbService.resolveTenantId(tenantId);
-    const knex = await this.tenantDbService.getTenantKnexById(resolvedTenantId);
-    
-    // Check if assignment already exists
-    const existing = await knex('user_roles')
-      .where({ userId, roleId: data.roleId })
-      .first();
-    
-    if (existing) {
-      return { success: true, message: 'Role already assigned' };
-    }
-    
-    await knex('user_roles').insert({
-      id: knex.raw('(UUID())'),
-      userId,
-      roleId: data.roleId,
-      created_at: knex.fn.now(),
-      updated_at: knex.fn.now(),
-    });
-    
-    return { success: true };
-  }
-
-  @Delete(':userId/roles/:roleId')
-  async removeRoleFromUser(
-    @TenantId() tenantId: string,
-    @Param('userId') userId: string,
-    @Param('roleId') roleId: string,
-  ) {
-    const resolvedTenantId = await this.tenantDbService.resolveTenantId(tenantId);
-    const knex = await this.tenantDbService.getTenantKnexById(resolvedTenantId);
-    
-    await knex('user_roles')
-      .where({ userId, roleId })
-      .delete();
-    
-    return { success: true };
-  }
-}
--- a/backend/src/tenant/tenant-database.service.ts
+++ b/backend/src/tenant/tenant-database.service.ts
@@ -242,26 +242,4 @@ export class TenantDatabaseService {
    decrypted += decipher.final('utf8');
    return decrypted;
  }
-
-  /**
-   * Encrypt integrations config JSON object
-   * @param config - Plain object containing integration credentials
-   * @returns Encrypted JSON string
-   */
-  encryptIntegrationsConfig(config: any): string {
-    if (!config) return null;
-    const jsonString = JSON.stringify(config);
-    return this.encryptPassword(jsonString);
-  }
-
-  /**
-   * Decrypt integrations config JSON string
-   * @param encryptedConfig - Encrypted JSON string
-   * @returns Plain object with integration credentials
-   */
-  decryptIntegrationsConfig(encryptedConfig: string): any {
-    if (!encryptedConfig) return null;
-    const decrypted = this.decryptPassword(encryptedConfig);
-    return JSON.parse(decrypted);
-  }
 }
--- a/backend/src/tenant/tenant-provisioning.service.ts
+++ b/backend/src/tenant/tenant-provisioning.service.ts
@@ -176,7 +176,7 @@ export class TenantProvisioningService {
   * Seed default data for new tenant
   */
  private async seedDefaultData(tenantId: string) {
-    const tenantKnex = await this.tenantDbService.getTenantKnexById(tenantId);
+    const tenantKnex = await this.tenantDbService.getTenantKnex(tenantId);

    try {
      // Create default roles
--- a/backend/src/tenant/tenant.controller.ts
+++ b/backend/src/tenant/tenant.controller.ts
@@ -1,155 +0,0 @@
-import {
-  Controller,
-  Get,
-  Put,
-  Body,
-  UseGuards,
-  Req,
-} from '@nestjs/common';
-import { JwtAuthGuard } from '../auth/jwt-auth.guard';
-import { TenantDatabaseService } from './tenant-database.service';
-import { getCentralPrisma } from '../prisma/central-prisma.service';
-import { TenantId } from './tenant.decorator';
-
-@Controller('tenant')
-@UseGuards(JwtAuthGuard)
-export class TenantController {
-  constructor(private readonly tenantDbService: TenantDatabaseService) {}
-
-  /**
-   * Get integrations configuration for the current tenant
-   */
-  @Get('integrations')
-  async getIntegrationsConfig(@TenantId() domain: string) {
-    const centralPrisma = getCentralPrisma();
-    
-    // Look up tenant by domain
-    const domainRecord = await centralPrisma.domain.findUnique({
-      where: { domain },
-      include: { tenant: { select: { id: true, integrationsConfig: true } } },
-    });
-
-    if (!domainRecord?.tenant || !domainRecord.tenant.integrationsConfig) {
-      return { data: null };
-    }
-
-    // Decrypt the config
-    const config = this.tenantDbService.decryptIntegrationsConfig(
-      domainRecord.tenant.integrationsConfig as any,
-    );
-
-    // Return config with sensitive fields masked
-    const maskedConfig = this.maskSensitiveFields(config);
-
-    return { data: maskedConfig };
-  }
-
-  /**
-   * Update integrations configuration for the current tenant
-   */
-  @Put('integrations')
-  async updateIntegrationsConfig(
-    @TenantId() domain: string,
-    @Body() body: { integrationsConfig: any },
-  ) {
-    const { integrationsConfig } = body;
-
-    if (!domain) {
-      throw new Error('Domain is missing from request');
-    }
-
-    // Look up tenant by domain
-    const centralPrisma = getCentralPrisma();
-    const domainRecord = await centralPrisma.domain.findUnique({
-      where: { domain },
-      include: { tenant: { select: { id: true, integrationsConfig: true } } },
-    });
-
-    if (!domainRecord?.tenant) {
-      throw new Error(`Tenant with domain ${domain} not found`);
-    }
-
-    // Merge with existing config to preserve masked values
-    let finalConfig = integrationsConfig;
-    if (domainRecord.tenant.integrationsConfig) {
-      const existingConfig = this.tenantDbService.decryptIntegrationsConfig(
-        domainRecord.tenant.integrationsConfig as any,
-      );
-
-      // Replace masked values with actual values from existing config
-      finalConfig = this.unmaskConfig(integrationsConfig, existingConfig);
-    }
-
-    // Encrypt the config
-    const encryptedConfig = this.tenantDbService.encryptIntegrationsConfig(
-      finalConfig,
-    );
-
-    // Update in database
-    await centralPrisma.tenant.update({
-      where: { id: domainRecord.tenant.id },
-      data: {
-        integrationsConfig: encryptedConfig as any,
-      },
-    });
-
-    return {
-      success: true,
-      message: 'Integrations configuration updated successfully',
-    };
-  }
-
-  /**
-   * Unmask config by replacing masked values with actual values from existing config
-   */
-  private unmaskConfig(newConfig: any, existingConfig: any): any {
-    const result = { ...newConfig };
-
-    // Unmask Twilio credentials
-    if (result.twilio && existingConfig.twilio) {
-      if (result.twilio.authToken === '••••••••' && existingConfig.twilio.authToken) {
-        result.twilio.authToken = existingConfig.twilio.authToken;
-      }
-      if (result.twilio.apiSecret === '••••••••' && existingConfig.twilio.apiSecret) {
-        result.twilio.apiSecret = existingConfig.twilio.apiSecret;
-      }
-    }
-
-    // Unmask OpenAI credentials
-    if (result.openai && existingConfig.openai) {
-      if (result.openai.apiKey === '••••••••' && existingConfig.openai.apiKey) {
-        result.openai.apiKey = existingConfig.openai.apiKey;
-      }
-    }
-
-    return result;
-  }
-
-  /**
-   * Mask sensitive fields for API responses
-   */
-  private maskSensitiveFields(config: any): any {
-    if (!config) return null;
-
-    const masked = { ...config };
-
-    // Mask Twilio credentials
-    if (masked.twilio) {
-      masked.twilio = {
-        ...masked.twilio,
-        authToken: masked.twilio.authToken ? '••••••••' : '',
-        apiSecret: masked.twilio.apiSecret ? '••••••••' : '',
-      };
-    }
-
-    // Mask OpenAI credentials
-    if (masked.openai) {
-      masked.openai = {
-        ...masked.openai,
-        apiKey: masked.openai.apiKey ? '••••••••' : '',
-      };
-    }
-
-    return masked;
-  }
-}
--- a/backend/src/tenant/tenant.module.ts
+++ b/backend/src/tenant/tenant.module.ts
@@ -4,12 +4,11 @@ import { TenantDatabaseService } from './tenant-database.service';
 import { TenantProvisioningService } from './tenant-provisioning.service';
 import { TenantProvisioningController } from './tenant-provisioning.controller';
 import { CentralAdminController } from './central-admin.controller';
-import { TenantController } from './tenant.controller';
 import { PrismaModule } from '../prisma/prisma.module';

@Module({
  imports: [PrismaModule],
-  controllers: [TenantProvisioningController, CentralAdminController, TenantController],
+  controllers: [TenantProvisioningController, CentralAdminController],
  providers: [
    TenantDatabaseService,
    TenantProvisioningService,
--- a/backend/src/voice/audio-converter.service.ts
+++ b/backend/src/voice/audio-converter.service.ts
@@ -1,214 +0,0 @@
-import { Injectable, Logger } from '@nestjs/common';
-
-/**
- * Audio format converter for Twilio <-> OpenAI audio streaming
- * 
- * Twilio Media Streams format:
- * - Codec: μ-law (G.711)
- * - Sample rate: 8kHz
- * - Encoding: base64
- * - Chunk size: 20ms (160 bytes)
- * 
- * OpenAI Realtime API format:
- * - Codec: PCM16
- * - Sample rate: 24kHz
- * - Encoding: base64
- * - Mono channel
- */
-@Injectable()
-export class AudioConverterService {
-  private readonly logger = new Logger(AudioConverterService.name);
-
-  // μ-law decode lookup table
-  private readonly MULAW_DECODE_TABLE = this.buildMuLawDecodeTable();
-
-  // μ-law encode lookup table
-  private readonly MULAW_ENCODE_TABLE = this.buildMuLawEncodeTable();
-
-  /**
-   * Build μ-law to linear PCM16 decode table
-   */
-  private buildMuLawDecodeTable(): Int16Array {
-    const table = new Int16Array(256);
-    for (let i = 0; i < 256; i++) {
-      const mulaw = ~i;
-      const exponent = (mulaw >> 4) & 0x07;
-      const mantissa = mulaw & 0x0f;
-      let sample = (mantissa << 3) + 0x84;
-      sample <<= exponent;
-      sample -= 0x84;
-      if ((mulaw & 0x80) === 0) {
-        sample = -sample;
-      }
-      table[i] = sample;
-    }
-    return table;
-  }
-
-  /**
-   * Build linear PCM16 to μ-law encode table
-   */
-  private buildMuLawEncodeTable(): Uint8Array {
-    const table = new Uint8Array(65536);
-    for (let i = 0; i < 65536; i++) {
-      const sample = (i - 32768);
-      const sign = sample < 0 ? 0x80 : 0x00;
-      const magnitude = Math.abs(sample);
-      
-      // Add bias
-      let biased = magnitude + 0x84;
-      
-      // Find exponent
-      let exponent = 7;
-      for (let exp = 0; exp < 8; exp++) {
-        if (biased <= (0xff << exp)) {
-          exponent = exp;
-          break;
-        }
-      }
-      
-      // Extract mantissa
-      const mantissa = (biased >> (exponent + 3)) & 0x0f;
-      
-      // Combine sign, exponent, mantissa
-      const mulaw = ~(sign | (exponent << 4) | mantissa);
-      table[i] = mulaw & 0xff;
-    }
-    return table;
-  }
-
-  /**
-   * Decode μ-law audio to linear PCM16
-   * @param mulawData - Buffer containing μ-law encoded audio
-   * @returns Buffer containing PCM16 audio (16-bit little-endian)
-   */
-  decodeMuLaw(mulawData: Buffer): Buffer {
-    const pcm16 = Buffer.allocUnsafe(mulawData.length * 2);
-    
-    for (let i = 0; i < mulawData.length; i++) {
-      const sample = this.MULAW_DECODE_TABLE[mulawData[i]];
-      pcm16.writeInt16LE(sample, i * 2);
-    }
-    
-    return pcm16;
-  }
-
-  /**
-   * Encode linear PCM16 to μ-law
-   * @param pcm16Data - Buffer containing PCM16 audio (16-bit little-endian)
-   * @returns Buffer containing μ-law encoded audio
-   */
-  encodeMuLaw(pcm16Data: Buffer): Buffer {
-    const mulaw = Buffer.allocUnsafe(pcm16Data.length / 2);
-    
-    for (let i = 0; i < pcm16Data.length; i += 2) {
-      const sample = pcm16Data.readInt16LE(i);
-      const index = (sample + 32768) & 0xffff;
-      mulaw[i / 2] = this.MULAW_ENCODE_TABLE[index];
-    }
-    
-    return mulaw;
-  }
-
-  /**
-   * Resample audio from 8kHz to 24kHz (linear interpolation)
-   * @param pcm16Data - Buffer containing 8kHz PCM16 audio
-   * @returns Buffer containing 24kHz PCM16 audio
-   */
-  resample8kTo24k(pcm16Data: Buffer): Buffer {
-    const inputSamples = pcm16Data.length / 2;
-    const outputSamples = Math.floor(inputSamples * 3); // 8k * 3 = 24k
-    const output = Buffer.allocUnsafe(outputSamples * 2);
-    
-    for (let i = 0; i < outputSamples; i++) {
-      const srcIndex = i / 3;
-      const srcIndexFloor = Math.floor(srcIndex);
-      const srcIndexCeil = Math.min(srcIndexFloor + 1, inputSamples - 1);
-      const fraction = srcIndex - srcIndexFloor;
-      
-      const sample1 = pcm16Data.readInt16LE(srcIndexFloor * 2);
-      const sample2 = pcm16Data.readInt16LE(srcIndexCeil * 2);
-      
-      // Linear interpolation
-      const interpolated = Math.round(sample1 + (sample2 - sample1) * fraction);
-      output.writeInt16LE(interpolated, i * 2);
-    }
-    
-    return output;
-  }
-
-  /**
-   * Resample audio from 24kHz to 8kHz (decimation with averaging)
-   * @param pcm16Data - Buffer containing 24kHz PCM16 audio
-   * @returns Buffer containing 8kHz PCM16 audio
-   */
-  resample24kTo8k(pcm16Data: Buffer): Buffer {
-    const inputSamples = pcm16Data.length / 2;
-    const outputSamples = Math.floor(inputSamples / 3); // 24k / 3 = 8k
-    const output = Buffer.allocUnsafe(outputSamples * 2);
-    
-    for (let i = 0; i < outputSamples; i++) {
-      // Average 3 samples for anti-aliasing
-      const idx1 = Math.min(i * 3, inputSamples - 1);
-      const idx2 = Math.min(i * 3 + 1, inputSamples - 1);
-      const idx3 = Math.min(i * 3 + 2, inputSamples - 1);
-      
-      const sample1 = pcm16Data.readInt16LE(idx1 * 2);
-      const sample2 = pcm16Data.readInt16LE(idx2 * 2);
-      const sample3 = pcm16Data.readInt16LE(idx3 * 2);
-      
-      const averaged = Math.round((sample1 + sample2 + sample3) / 3);
-      output.writeInt16LE(averaged, i * 2);
-    }
-    
-    return output;
-  }
-
-  /**
-   * Convert Twilio μ-law 8kHz to OpenAI PCM16 24kHz
-   * @param twilioBase64 - Base64-encoded μ-law audio from Twilio
-   * @returns Base64-encoded PCM16 24kHz audio for OpenAI
-   */
-  twilioToOpenAI(twilioBase64: string): string {
-    try {
-      // Decode base64
-      const mulawBuffer = Buffer.from(twilioBase64, 'base64');
-      
-      // μ-law -> PCM16
-      const pcm16_8k = this.decodeMuLaw(mulawBuffer);
-      
-      // 8kHz -> 24kHz
-      const pcm16_24k = this.resample8kTo24k(pcm16_8k);
-      
-      // Encode to base64
-      return pcm16_24k.toString('base64');
-    } catch (error) {
-      this.logger.error('Error converting Twilio to OpenAI audio', error);
-      throw error;
-    }
-  }
-
-  /**
-   * Convert OpenAI PCM16 24kHz to Twilio μ-law 8kHz
-   * @param openaiBase64 - Base64-encoded PCM16 24kHz audio from OpenAI
-   * @returns Base64-encoded μ-law 8kHz audio for Twilio
-   */
-  openAIToTwilio(openaiBase64: string): string {
-    try {
-      // Decode base64
-      const pcm16_24k = Buffer.from(openaiBase64, 'base64');
-      
-      // 24kHz -> 8kHz
-      const pcm16_8k = this.resample24kTo8k(pcm16_24k);
-      
-      // PCM16 -> μ-law
-      const mulawBuffer = this.encodeMuLaw(pcm16_8k);
-      
-      // Encode to base64
-      return mulawBuffer.toString('base64');
-    } catch (error) {
-      this.logger.error('Error converting OpenAI to Twilio audio', error);
-      throw error;
-    }
-  }
-}
--- a/backend/src/voice/dto/call-event.dto.ts
+++ b/backend/src/voice/dto/call-event.dto.ts
@@ -1,25 +0,0 @@
-export interface CallEventDto {
-  callSid: string;
-  direction: 'inbound' | 'outbound';
-  fromNumber: string;
-  toNumber: string;
-  status: string;
-}
-
-export interface DtmfEventDto {
-  callSid: string;
-  digit: string;
-}
-
-export interface TranscriptEventDto {
-  callSid: string;
-  transcript: string;
-  isFinal: boolean;
-}
-
-export interface AiSuggestionDto {
-  callSid: string;
-  suggestion: string;
-  type: 'response' | 'action' | 'insight';
-  data?: any;
-}
--- a/backend/src/voice/dto/initiate-call.dto.ts
+++ b/backend/src/voice/dto/initiate-call.dto.ts
@@ -1,10 +0,0 @@
-import { IsString, IsNotEmpty, Matches } from 'class-validator';
-
-export class InitiateCallDto {
-  @IsString()
-  @IsNotEmpty()
-  @Matches(/^\+?[1-9]\d{1,14}$/, {
-    message: 'Invalid phone number format (use E.164 format)',
-  })
-  toNumber: string;
-}
--- a/backend/src/voice/interfaces/integration-config.interface.ts
+++ b/backend/src/voice/interfaces/integration-config.interface.ts
@@ -1,20 +0,0 @@
-export interface TwilioConfig {
-  accountSid: string;
-  authToken: string;
-  phoneNumber: string;
-  apiKey?: string;  // API Key SID for generating access tokens
-  apiSecret?: string;  // API Key Secret
-  twimlAppSid?: string;  // TwiML App SID for Voice SDK
-}
-
-export interface OpenAIConfig {
-  apiKey: string;
-  assistantId?: string;
-  model?: string;
-  voice?: string;
-}
-
-export interface IntegrationsConfig {
-  twilio?: TwilioConfig;
-  openai?: OpenAIConfig;
-}
--- a/backend/src/voice/voice.controller.ts
+++ b/backend/src/voice/voice.controller.ts
@@ -1,495 +0,0 @@
-import {
-  Controller,
-  Post,
-  Get,
-  Body,
-  Req,
-  Res,
-  UseGuards,
-  Logger,
-  Query,
-} from '@nestjs/common';
-import { FastifyRequest, FastifyReply } from 'fastify';
-import { JwtAuthGuard } from '../auth/jwt-auth.guard';
-import { VoiceService } from './voice.service';
-import { VoiceGateway } from './voice.gateway';
-import { AudioConverterService } from './audio-converter.service';
-import { InitiateCallDto } from './dto/initiate-call.dto';
-import { TenantId } from '../tenant/tenant.decorator';
-
-@Controller('voice')
-export class VoiceController {
-  private readonly logger = new Logger(VoiceController.name);
-
-  // Track active Media Streams connections: streamSid -> WebSocket
-  private mediaStreams: Map<string, any> = new Map();
-
-  constructor(
-    private readonly voiceService: VoiceService,
-    private readonly voiceGateway: VoiceGateway,
-    private readonly audioConverter: AudioConverterService,
-  ) {}
-
-  /**
-   * Initiate outbound call via REST
-   */
-  @Post('call')
-  @UseGuards(JwtAuthGuard)
-  async initiateCall(
-    @Body() body: InitiateCallDto,
-    @Req() req: any,
-    @TenantId() tenantId: string,
-  ) {
-    const userId = req.user?.userId || req.user?.sub;
-
-    const result = await this.voiceService.initiateCall({
-      tenantId,
-      userId,
-      toNumber: body.toNumber,
-    });
-
-    return {
-      success: true,
-      data: result,
-    };
-  }
-
-  /**
-   * Generate Twilio access token for browser client
-   */
-  @Get('token')
-  @UseGuards(JwtAuthGuard)
-  async getAccessToken(
-    @Req() req: any,
-    @TenantId() tenantId: string,
-  ) {
-    const userId = req.user?.userId || req.user?.sub;
-    
-    const token = await this.voiceService.generateAccessToken(tenantId, userId);
-
-    return {
-      success: true,
-      data: { token },
-    };
-  }
-
-  /**
-   * Get call history
-   */
-  @Get('calls')
-  @UseGuards(JwtAuthGuard)
-  async getCallHistory(
-    @Req() req: any,
-    @TenantId() tenantId: string,
-    @Query('limit') limit?: string,
-  ) {
-    const userId = req.user?.userId || req.user?.sub;
-    const calls = await this.voiceService.getCallHistory(
-      tenantId,
-      userId,
-      limit ? parseInt(limit) : 50,
-    );
-
-    return {
-      success: true,
-      data: calls,
-    };
-  }
-
-  /**
-   * TwiML for outbound calls from browser (Twilio Device)
-   */
-  @Post('twiml/outbound')
-  async outboundTwiml(@Req() req: FastifyRequest, @Res() res: FastifyReply) {
-    const body = req.body as any;
-    const to = body.To;
-    const from = body.From;
-    const callSid = body.CallSid;
-
-    this.logger.log(`=== TwiML OUTBOUND REQUEST RECEIVED ===`);
-    this.logger.log(`CallSid: ${callSid}, Body From: ${from}, Body To: ${to}`);
-    this.logger.log(`Full body: ${JSON.stringify(body)}`);
-
-    try {
-      // Extract tenant domain from Host header
-      const host = req.headers.host || '';
-      const tenantDomain = host.split('.')[0]; // e.g., "tenant1" from "tenant1.routebox.co"
-      
-      this.logger.log(`Extracted tenant domain: ${tenantDomain}`);
-
-      // Look up tenant's Twilio phone number from config
-      let callerId = to; // Fallback (will cause error if not found)
-      try {
-        // Get Twilio config to find the phone number
-        const { config } = await this.voiceService['getTwilioClient'](tenantDomain);
-        callerId = config.phoneNumber;
-        this.logger.log(`Retrieved Twilio phone number for tenant: ${callerId}`);
-      } catch (error: any) {
-        this.logger.error(`Failed to get Twilio config: ${error.message}`);
-      }
-
-      const dialNumber = to;
-
-      this.logger.log(`Using callerId: ${callerId}, dialNumber: ${dialNumber}`);
-
-      // Return TwiML to DIAL the phone number with proper callerId
-      const twiml = `<?xml version="1.0" encoding="UTF-8"?>
-<Response>
-  <Dial callerId="${callerId}">
-    <Number>${dialNumber}</Number>
-  </Dial>
-</Response>`;
-
-      this.logger.log(`Returning TwiML with Dial verb - callerId: ${callerId}, to: ${dialNumber}`);
-      res.type('text/xml').send(twiml);
-    } catch (error: any) {
-      this.logger.error(`=== ERROR GENERATING TWIML ===`);
-      this.logger.error(`Error: ${error.message}`);
-      this.logger.error(`Stack: ${error.stack}`);
-      const errorTwiml = `<?xml version="1.0" encoding="UTF-8"?>
-<Response>
-  <Say>An error occurred while processing your call.</Say>
-</Response>`;
-      res.type('text/xml').send(errorTwiml);
-    }
-  }
-
-  /**
-   * TwiML for inbound calls
-   */
-  @Post('twiml/inbound')
-  async inboundTwiml(@Req() req: FastifyRequest, @Res() res: FastifyReply) {
-    const body = req.body as any;
-    const callSid = body.CallSid;
-    const fromNumber = body.From;
-    const toNumber = body.To;
-
-    this.logger.log(`\n\n╔════════════════════════════════════════╗`);
-    this.logger.log(`║ === INBOUND CALL RECEIVED ===`);
-    this.logger.log(`╚════════════════════════════════════════╝`);
-    this.logger.log(`CallSid: ${callSid}`);
-    this.logger.log(`From: ${fromNumber}`);
-    this.logger.log(`To: ${toNumber}`);
-    this.logger.log(`Full body: ${JSON.stringify(body)}`);
-
-    try {
-      // Extract tenant domain from Host header
-      const host = req.headers.host || '';
-      const tenantDomain = host.split('.')[0]; // e.g., "tenant1" from "tenant1.routebox.co"
-      
-      this.logger.log(`Extracted tenant domain: ${tenantDomain}`);
-
-      // Get all connected users for this tenant
-      const connectedUsers = this.voiceGateway.getConnectedUsers(tenantDomain);
-      
-      this.logger.log(`Connected users for tenant ${tenantDomain}: ${connectedUsers.length}`);
-      if (connectedUsers.length > 0) {
-        this.logger.log(`Connected user IDs: ${connectedUsers.join(', ')}`);
-      }
-      
-      if (connectedUsers.length === 0) {
-        // No users online - send to voicemail or play message
-        const twiml = `<?xml version="1.0" encoding="UTF-8"?>
-<Response>
-  <Say>Sorry, no agents are currently available. Please try again later.</Say>
-  <Hangup/>
-</Response>`;
-        this.logger.log(`❌ No users online - returning unavailable message`);
-        return res.type('text/xml').send(twiml);
-      }
-
-      // Build TwiML to dial all connected clients with Media Streams for AI
-      const clientElements = connectedUsers.map(userId => `    <Client>${userId}</Client>`).join('\n');
-      
-      // Use wss:// for secure WebSocket (Traefik handles HTTPS)
-      const streamUrl = `wss://${host}/api/voice/media-stream`;
-      
-      this.logger.log(`Stream URL: ${streamUrl}`);
-      this.logger.log(`Dialing ${connectedUsers.length} client(s)...`);
-      this.logger.log(`Client IDs to dial: ${connectedUsers.join(', ')}`);
-      
-      // Verify we have client IDs in proper format
-      if (connectedUsers.length > 0) {
-        this.logger.log(`First Client ID format check: "${connectedUsers[0]}" (length: ${connectedUsers[0].length})`);
-      }
-
-      // Notify connected users about incoming call via Socket.IO
-      connectedUsers.forEach(userId => {
-        this.voiceGateway.notifyIncomingCall(userId, {
-          callSid,
-          fromNumber,
-          toNumber,
-          tenantDomain,
-        });
-      });
-
-      const twiml = `<?xml version="1.0" encoding="UTF-8"?>
-<Response>
-  <Start>
-    <Stream url="${streamUrl}">
-      <Parameter name="tenantId" value="${tenantDomain}"/>
-      <Parameter name="userId" value="${connectedUsers[0]}"/>
-    </Stream>
-  </Start>
-  <Dial timeout="30">
-${clientElements}
-  </Dial>
-</Response>`;
-
-      this.logger.log(`✓ Returning inbound TwiML with Media Streams - dialing ${connectedUsers.length} client(s)`);
-      this.logger.log(`Generated TwiML:\n${twiml}\n`);
-      res.type('text/xml').send(twiml);
-    } catch (error: any) {
-      this.logger.error(`Error generating inbound TwiML: ${error.message}`);
-      const errorTwiml = `<?xml version="1.0" encoding="UTF-8"?>
-<Response>
-  <Say>Sorry, we are unable to connect your call at this time.</Say>
-  <Hangup/>
-</Response>`;
-      res.type('text/xml').send(errorTwiml);
-    }
-  }
-
-  /**
-   * Twilio status webhook
-   */
-  @Post('webhook/status')
-  async statusWebhook(@Req() req: FastifyRequest) {
-    const body = req.body as any;
-    const callSid = body.CallSid;
-    const status = body.CallStatus;
-    const duration = body.CallDuration ? parseInt(body.CallDuration) : undefined;
-
-    this.logger.log(`Call status webhook - CallSid: ${callSid}, Status: ${status}, Duration: ${duration}`);
-    this.logger.log(`Full status webhook body:`, JSON.stringify(body));
-
-    return { success: true };
-  }
-
-  /**
-   * Twilio recording webhook
-   */
-  @Post('webhook/recording')
-  async recordingWebhook(@Req() req: FastifyRequest) {
-    const body = req.body as any;
-    const callSid = body.CallSid;
-    const recordingSid = body.RecordingSid;
-    const recordingStatus = body.RecordingStatus;
-
-    this.logger.log(`Recording webhook - CallSid: ${callSid}, RecordingSid: ${recordingSid}, Status: ${recordingStatus}`);
-
-    return { success: true };
-  }
-
-  /**
-   * Twilio Media Streams WebSocket endpoint
-   * Receives real-time audio from Twilio and forwards to OpenAI Realtime API
-   * 
-   * This handles the HTTP GET request and upgrades it to WebSocket manually.
-   */
-  @Get('media-stream')
-  mediaStream(@Req() req: FastifyRequest) {
-    // For WebSocket upgrade, we need to access the raw socket
-    let socket: any;
-    
-    try {
-      this.logger.log(`=== MEDIA STREAM REQUEST ===`);
-      this.logger.log(`URL: ${req.url}`);
-      this.logger.log(`Headers keys: ${Object.keys(req.headers).join(', ')}`);
-      this.logger.log(`Headers: ${JSON.stringify(req.headers)}`);
-      
-      // Check if this is a WebSocket upgrade request
-      const hasWebSocketKey = 'sec-websocket-key' in req.headers;
-      const hasWebSocketVersion = 'sec-websocket-version' in req.headers;
-      
-      this.logger.log(`hasWebSocketKey: ${hasWebSocketKey}`);
-      this.logger.log(`hasWebSocketVersion: ${hasWebSocketVersion}`);
-      
-      if (!hasWebSocketKey || !hasWebSocketVersion) {
-        this.logger.log('Not a WebSocket upgrade request - returning');
-        return;
-      }
-
-      this.logger.log('✓ WebSocket upgrade detected');
-      
-      // Get the socket - try different ways
-      socket = (req.raw as any).socket;
-      this.logger.log(`Socket obtained: ${!!socket}`);
-      
-      if (!socket) {
-        this.logger.error('Failed to get socket from req.raw');
-        return;
-      }
-      
-      const rawRequest = req.raw;
-      const head = Buffer.alloc(0);
-      
-      this.logger.log('Creating WebSocketServer...');
-      const WebSocketServer = require('ws').Server;
-      const wss = new WebSocketServer({ noServer: true });
-      
-      this.logger.log('Calling handleUpgrade...');
-      
-      // handleUpgrade will send the 101 response and take over the socket
-      wss.handleUpgrade(rawRequest, socket, head, (ws: any) => {
-        this.logger.log('=== TWILIO MEDIA STREAM WEBSOCKET UPGRADED SUCCESSFULLY ===');
-        this.handleMediaStreamSocket(ws);
-      });
-      
-      this.logger.log('handleUpgrade completed');
-    } catch (error: any) {
-      this.logger.error(`=== FAILED TO UPGRADE TO WEBSOCKET ===`);
-      this.logger.error(`Error message: ${error.message}`);
-      this.logger.error(`Error stack: ${error.stack}`);
-    }
-  }
-
-  /**
-   * Handle incoming Media Stream WebSocket messages
-   */
-  private handleMediaStreamSocket(ws: any) {
-    let streamSid: string | null = null;
-    let callSid: string | null = null;
-    let tenantDomain: string | null = null;
-    let mediaPacketCount = 0;
-
-    // WebSocket message handler
-    ws.on('message', async (message: Buffer) => {
-      try {
-        const msg = JSON.parse(message.toString());
-
-        switch (msg.event) {
-          case 'connected':
-            this.logger.log('=== MEDIA STREAM EVENT: CONNECTED ===');
-            this.logger.log(`Protocol: ${msg.protocol}`);
-            this.logger.log(`Version: ${msg.version}`);
-            break;
-
-          case 'start':
-            streamSid = msg.streamSid;
-            callSid = msg.start.callSid;
-
-            // Extract tenant from customParameters if available
-            tenantDomain = msg.start.customParameters?.tenantId || 'tenant1';
-
-            this.logger.log(`=== MEDIA STREAM EVENT: START ===`);
-            this.logger.log(`StreamSid: ${streamSid}`);
-            this.logger.log(`CallSid: ${callSid}`);
-            this.logger.log(`Tenant: ${tenantDomain}`);
-            this.logger.log(`AccountSid: ${msg.start.accountSid}`);
-            this.logger.log(`MediaFormat: ${JSON.stringify(msg.start.mediaFormat)}`);
-            this.logger.log(`Custom Parameters: ${JSON.stringify(msg.start.customParameters)}`);
-
-            // Store WebSocket connection
-            this.mediaStreams.set(streamSid, ws);
-            this.logger.log(`Stored WebSocket for streamSid: ${streamSid}. Total active streams: ${this.mediaStreams.size}`);
-
-            // Initialize OpenAI Realtime connection for this call
-            this.logger.log(`Initializing OpenAI Realtime for call ${callSid}...`);
-            await this.voiceService.initializeOpenAIRealtime({
-              callSid,
-              tenantId: tenantDomain,
-              userId: msg.start.customParameters?.userId || 'system',
-            });
-
-            this.logger.log(`✓ OpenAI Realtime initialized for call ${callSid}`);
-            break;
-
-          case 'media':
-            mediaPacketCount++;
-            if (mediaPacketCount % 50 === 0) {
-              // Log every 50th packet to avoid spam
-              this.logger.log(`Received media packet #${mediaPacketCount} for StreamSid: ${streamSid}, CallSid: ${callSid}, PayloadSize: ${msg.media.payload?.length || 0} bytes`);
-            }
-
-            if (!callSid || !tenantDomain) {
-              this.logger.warn('Received media before start event');
-              break;
-            }
-
-            // msg.media.payload is base64-encoded μ-law audio from Twilio
-            const twilioAudio = msg.media.payload;
-
-            // Convert Twilio audio (μ-law 8kHz) to OpenAI format (PCM16 24kHz)
-            const openaiAudio = this.audioConverter.twilioToOpenAI(twilioAudio);
-
-            // Send audio to OpenAI Realtime API
-            await this.voiceService.sendAudioToOpenAI(callSid, openaiAudio);
-            break;
-
-          case 'stop':
-            this.logger.log(`=== MEDIA STREAM EVENT: STOP ===`);
-            this.logger.log(`StreamSid: ${streamSid}`);
-            this.logger.log(`Total media packets received: ${mediaPacketCount}`);
-
-            if (streamSid) {
-              this.mediaStreams.delete(streamSid);
-              this.logger.log(`Removed WebSocket for streamSid: ${streamSid}. Remaining active streams: ${this.mediaStreams.size}`);
-            }
-
-            // Clean up OpenAI connection
-            if (callSid) {
-              this.logger.log(`Cleaning up OpenAI connection for call ${callSid}...`);
-              await this.voiceService.cleanupOpenAIConnection(callSid);
-              this.logger.log(`✓ OpenAI connection cleaned up for call ${callSid}`);
-            }
-            break;
-
-          default:
-            this.logger.debug(`Unknown media stream event: ${msg.event}`);
-        }
-      } catch (error: any) {
-        this.logger.error(`Error processing media stream message: ${error.message}`);
-        this.logger.error(`Stack: ${error.stack}`);
-      }
-    });
-
-    ws.on('close', () => {
-      this.logger.log(`=== MEDIA STREAM WEBSOCKET CLOSED ===`);
-      this.logger.log(`StreamSid: ${streamSid}`);
-      this.logger.log(`Total media packets in this stream: ${mediaPacketCount}`);
-      if (streamSid) {
-        this.mediaStreams.delete(streamSid);
-        this.logger.log(`Cleaned up streamSid on close. Remaining active streams: ${this.mediaStreams.size}`);
-      }
-    });
-
-    ws.on('error', (error: Error) => {
-      this.logger.error(`=== MEDIA STREAM WEBSOCKET ERROR ===`);
-      this.logger.error(`StreamSid: ${streamSid}`);
-      this.logger.error(`Error message: ${error.message}`);
-      this.logger.error(`Error stack: ${error.stack}`);
-    });
-  }
-
-  /**
-   * Send audio from OpenAI back to Twilio Media Stream
-   */
-  async sendAudioToTwilio(streamSid: string, openaiAudioBase64: string) {
-    const ws = this.mediaStreams.get(streamSid);
-    
-    if (!ws) {
-      this.logger.warn(`No Media Stream found for streamSid: ${streamSid}`);
-      return;
-    }
-
-    try {
-      // Convert OpenAI audio (PCM16 24kHz) to Twilio format (μ-law 8kHz)
-      const twilioAudio = this.audioConverter.openAIToTwilio(openaiAudioBase64);
-      
-      // Send to Twilio Media Stream
-      const message = {
-        event: 'media',
-        streamSid,
-        media: {
-          payload: twilioAudio,
-        },
-      };
-      
-      ws.send(JSON.stringify(message));
-    } catch (error: any) {
-      this.logger.error(`Error sending audio to Twilio: ${error.message}`);
-    }
-  }
-}
-
--- a/backend/src/voice/voice.gateway.ts
+++ b/backend/src/voice/voice.gateway.ts
@@ -1,319 +0,0 @@
-import {
-  WebSocketGateway,
-  WebSocketServer,
-  SubscribeMessage,
-  OnGatewayConnection,
-  OnGatewayDisconnect,
-  ConnectedSocket,
-  MessageBody,
-} from '@nestjs/websockets';
-import { Server, Socket } from 'socket.io';
-import { Logger, UseGuards } from '@nestjs/common';
-import { JwtService } from '@nestjs/jwt';
-import { VoiceService } from './voice.service';
-import { TenantDatabaseService } from '../tenant/tenant-database.service';
-
-interface AuthenticatedSocket extends Socket {
-  tenantId?: string;
-  userId?: string;
-  tenantSlug?: string;
-}
-
-@WebSocketGateway({
-  namespace: 'voice',
-  cors: {
-    origin: true,
-    credentials: true,
-  },
-})
-export class VoiceGateway
-  implements OnGatewayConnection, OnGatewayDisconnect
-{
-  @WebSocketServer()
-  server: Server;
-
-  private readonly logger = new Logger(VoiceGateway.name);
-  private connectedUsers: Map<string, AuthenticatedSocket> = new Map();
-  private activeCallsByUser: Map<string, string> = new Map(); // userId -> callSid
-
-  constructor(
-    private readonly jwtService: JwtService,
-    private readonly voiceService: VoiceService,
-    private readonly tenantDbService: TenantDatabaseService,
-  ) {
-    // Set gateway reference in service to avoid circular dependency
-    this.voiceService.setGateway(this);
-  }
-
-  async handleConnection(client: AuthenticatedSocket) {
-    try {
-      // Extract token from handshake auth
-      const token =
-        client.handshake.auth.token || client.handshake.headers.authorization?.split(' ')[1];
-
-      if (!token) {
-        this.logger.warn('❌ Client connection rejected: No token provided');
-        client.disconnect();
-        return;
-      }
-
-      // Verify JWT token
-      const payload = await this.jwtService.verifyAsync(token);
-      
-      // Extract domain from origin header (e.g., http://tenant1.routebox.co:3001)
-      // The domains table stores just the subdomain part (e.g., "tenant1")
-      const origin = client.handshake.headers.origin || client.handshake.headers.referer;
-      let domain = 'localhost';
-      
-      if (origin) {
-        try {
-          const url = new URL(origin);
-          const hostname = url.hostname; // e.g., tenant1.routebox.co or localhost
-          
-          // Extract first part of subdomain as domain
-          // tenant1.routebox.co -> tenant1
-          // localhost -> localhost
-          domain = hostname.split('.')[0];
-        } catch (error) {
-          this.logger.warn(`Failed to parse origin: ${origin}`);
-        }
-      }
-      
-      client.tenantId = domain; // Store the subdomain as tenantId
-      client.userId = payload.sub;
-      client.tenantSlug = domain; // Same as subdomain
-
-      this.connectedUsers.set(client.userId, client);
-      this.logger.log(
-        `✓ Client connected: ${client.id} (User: ${client.userId}, Domain: ${domain})`,
-      );
-      this.logger.log(`Total connected users in ${domain}: ${this.getConnectedUsers(domain).length}`);
-
-      // Send current call state if any active call
-      const activeCallSid = this.activeCallsByUser.get(client.userId);
-      if (activeCallSid) {
-        const callState = await this.voiceService.getCallState(
-          activeCallSid,
-          client.tenantId,
-        );
-        client.emit('call:state', callState);
-      }
-    } catch (error) {
-      this.logger.error('❌ Authentication failed', error);
-      client.disconnect();
-    }
-  }
-
-  handleDisconnect(client: AuthenticatedSocket) {
-    if (client.userId) {
-      this.connectedUsers.delete(client.userId);
-      this.logger.log(`✓ Client disconnected: ${client.id} (User: ${client.userId})`);
-      this.logger.log(`Remaining connected users: ${this.connectedUsers.size}`);
-    }
-  }
-
-  /**
-   * Initiate outbound call
-   */
-  @SubscribeMessage('call:initiate')
-  async handleInitiateCall(
-    @ConnectedSocket() client: AuthenticatedSocket,
-    @MessageBody() data: { toNumber: string },
-  ) {
-    try {
-      this.logger.log(`Initiating call from user ${client.userId} to ${data.toNumber}`);
-
-      const result = await this.voiceService.initiateCall({
-        tenantId: client.tenantId,
-        userId: client.userId,
-        toNumber: data.toNumber,
-      });
-
-      this.activeCallsByUser.set(client.userId, result.callSid);
-
-      client.emit('call:initiated', {
-        callSid: result.callSid,
-        toNumber: data.toNumber,
-        status: 'queued',
-      });
-
-      return { success: true, callSid: result.callSid };
-    } catch (error) {
-      this.logger.error('Failed to initiate call', error);
-      client.emit('call:error', {
-        message: error.message || 'Failed to initiate call',
-      });
-      return { success: false, error: error.message };
-    }
-  }
-
-  /**
-   * Accept incoming call
-   */
-  @SubscribeMessage('call:accept')
-  async handleAcceptCall(
-    @ConnectedSocket() client: AuthenticatedSocket,
-    @MessageBody() data: { callSid: string },
-  ) {
-    try {
-      this.logger.log(`User ${client.userId} accepting call ${data.callSid}`);
-
-      await this.voiceService.acceptCall({
-        callSid: data.callSid,
-        tenantId: client.tenantId,
-        userId: client.userId,
-      });
-
-      this.activeCallsByUser.set(client.userId, data.callSid);
-
-      client.emit('call:accepted', { callSid: data.callSid });
-
-      return { success: true };
-    } catch (error) {
-      this.logger.error('Failed to accept call', error);
-      return { success: false, error: error.message };
-    }
-  }
-
-  /**
-   * Reject incoming call
-   */
-  @SubscribeMessage('call:reject')
-  async handleRejectCall(
-    @ConnectedSocket() client: AuthenticatedSocket,
-    @MessageBody() data: { callSid: string },
-  ) {
-    try {
-      this.logger.log(`User ${client.userId} rejecting call ${data.callSid}`);
-
-      await this.voiceService.rejectCall(data.callSid, client.tenantId);
-
-      client.emit('call:rejected', { callSid: data.callSid });
-
-      return { success: true };
-    } catch (error) {
-      this.logger.error('Failed to reject call', error);
-      return { success: false, error: error.message };
-    }
-  }
-
-  /**
-   * End active call
-   */
-  @SubscribeMessage('call:end')
-  async handleEndCall(
-    @ConnectedSocket() client: AuthenticatedSocket,
-    @MessageBody() data: { callSid: string },
-  ) {
-    try {
-      this.logger.log(`User ${client.userId} ending call ${data.callSid}`);
-
-      await this.voiceService.endCall(data.callSid, client.tenantId);
-
-      this.activeCallsByUser.delete(client.userId);
-
-      client.emit('call:ended', { callSid: data.callSid });
-
-      return { success: true };
-    } catch (error) {
-      this.logger.error('Failed to end call', error);
-      return { success: false, error: error.message };
-    }
-  }
-
-  /**
-   * Send DTMF tones
-   */
-  @SubscribeMessage('call:dtmf')
-  async handleDtmf(
-    @ConnectedSocket() client: AuthenticatedSocket,
-    @MessageBody() data: { callSid: string; digit: string },
-  ) {
-    try {
-      await this.voiceService.sendDtmf(
-        data.callSid,
-        data.digit,
-        client.tenantId,
-      );
-
-      return { success: true };
-    } catch (error) {
-      this.logger.error('Failed to send DTMF', error);
-      return { success: false, error: error.message };
-    }
-  }
-
-  /**
-   * Emit incoming call notification to specific user
-   */
-  async notifyIncomingCall(userId: string, callData: any) {
-    const socket = this.connectedUsers.get(userId);
-    if (socket) {
-      socket.emit('call:incoming', callData);
-      this.logger.log(`Notified user ${userId} of incoming call`);
-    } else {
-      this.logger.warn(`User ${userId} not connected to receive call notification`);
-    }
-  }
-
-  /**
-   * Emit call status update to user
-   */
-  async notifyCallUpdate(userId: string, callData: any) {
-    const socket = this.connectedUsers.get(userId);
-    if (socket) {
-      socket.emit('call:update', callData);
-    }
-  }
-
-  /**
-   * Emit AI transcript to user
-   */
-  async notifyAiTranscript(userId: string, data: { callSid: string; transcript: string; isFinal: boolean }) {
-    const socket = this.connectedUsers.get(userId);
-    if (socket) {
-      socket.emit('ai:transcript', data);
-    }
-  }
-
-  /**
-   * Emit AI suggestion to user
-   */
-  async notifyAiSuggestion(userId: string, data: any) {
-    const socket = this.connectedUsers.get(userId);
-    this.logger.log(`notifyAiSuggestion - userId: ${userId}, socket connected: ${!!socket}, total connected users: ${this.connectedUsers.size}`);
-    if (socket) {
-      this.logger.log(`Emitting ai:suggestion event with data:`, JSON.stringify(data));
-      socket.emit('ai:suggestion', data);
-    } else {
-      this.logger.warn(`No socket connection found for userId: ${userId}`);
-      this.logger.log(`Connected users: ${Array.from(this.connectedUsers.keys()).join(', ')}`);
-    }
-  }
-
-  /**
-   * Emit AI action result to user
-   */
-  async notifyAiAction(userId: string, data: any) {
-    const socket = this.connectedUsers.get(userId);
-    if (socket) {
-      socket.emit('ai:action', data);
-    }
-  }
-
-  /**
-   * Get connected users for a tenant
-   */
-  getConnectedUsers(tenantDomain?: string): string[] {
-    const userIds: string[] = [];
-    
-    for (const [userId, socket] of this.connectedUsers.entries()) {
-      // If tenantDomain specified, filter by tenant
-      if (!tenantDomain || socket.tenantSlug === tenantDomain) {
-        userIds.push(userId);
-      }
-    }
-    
-    return userIds;
-  }
-}
--- a/backend/src/voice/voice.module.ts
+++ b/backend/src/voice/voice.module.ts
@@ -1,23 +0,0 @@
-import { Module } from '@nestjs/common';
-import { JwtModule } from '@nestjs/jwt';
-import { VoiceGateway } from './voice.gateway';
-import { VoiceService } from './voice.service';
-import { VoiceController } from './voice.controller';
-import { AudioConverterService } from './audio-converter.service';
-import { TenantModule } from '../tenant/tenant.module';
-import { AuthModule } from '../auth/auth.module';
-
-@Module({
-  imports: [
-    TenantModule,
-    AuthModule,
-    JwtModule.register({
-      secret: process.env.JWT_SECRET || 'your-jwt-secret',
-      signOptions: { expiresIn: process.env.JWT_EXPIRES_IN || '24h' },
-    }),
-  ],
-  providers: [VoiceGateway, VoiceService, AudioConverterService],
-  controllers: [VoiceController],
-  exports: [VoiceService],
-})
-export class VoiceModule {}
--- a/backend/src/voice/voice.service.ts
+++ b/backend/src/voice/voice.service.ts
@@ -1,826 +0,0 @@
-import { Injectable, Logger } from '@nestjs/common';
-import { TenantDatabaseService } from '../tenant/tenant-database.service';
-import { getCentralPrisma } from '../prisma/central-prisma.service';
-import { IntegrationsConfig, TwilioConfig, OpenAIConfig } from './interfaces/integration-config.interface';
-import * as Twilio from 'twilio';
-import { WebSocket } from 'ws';
-import { v4 as uuidv4 } from 'uuid';
-
-const AccessToken = Twilio.jwt.AccessToken;
-const VoiceGrant = AccessToken.VoiceGrant;
-
-@Injectable()
-export class VoiceService {
-  private readonly logger = new Logger(VoiceService.name);
-  private twilioClients: Map<string, Twilio.Twilio> = new Map();
-  private openaiConnections: Map<string, WebSocket> = new Map(); // callSid -> WebSocket
-  private callStates: Map<string, any> = new Map(); // callSid -> call state
-  private voiceGateway: any; // Reference to gateway (to avoid circular dependency)
-
-  constructor(
-    private readonly tenantDbService: TenantDatabaseService,
-  ) {}
-
-  /**
-   * Set gateway reference (called by gateway on init)
-   */
-  setGateway(gateway: any) {
-    this.voiceGateway = gateway;
-  }
-
-  /**
-   * Get Twilio client for a tenant
-   */
-  private async getTwilioClient(tenantIdOrDomain: string): Promise<{ client: Twilio.Twilio; config: TwilioConfig; tenantId: string }> {
-    // Check cache first
-    if (this.twilioClients.has(tenantIdOrDomain)) {
-      const centralPrisma = getCentralPrisma();
-      
-      // Look up tenant by domain
-      const domainRecord = await centralPrisma.domain.findUnique({
-        where: { domain: tenantIdOrDomain },
-        include: { tenant: { select: { id: true, integrationsConfig: true } } },
-      });
-
-      const config = this.getIntegrationConfig(domainRecord?.tenant?.integrationsConfig as any);
-      return { 
-        client: this.twilioClients.get(tenantIdOrDomain), 
-        config: config.twilio,
-        tenantId: domainRecord.tenant.id 
-      };
-    }
-
-    // Fetch tenant integrations config
-    const centralPrisma = getCentralPrisma();
-    
-    this.logger.log(`Looking up domain: ${tenantIdOrDomain}`);
-    
-    const domainRecord = await centralPrisma.domain.findUnique({
-      where: { domain: tenantIdOrDomain },
-      include: { tenant: { select: { id: true, integrationsConfig: true } } },
-    });
-
-    this.logger.log(`Domain record found: ${!!domainRecord}, Tenant: ${!!domainRecord?.tenant}, Config: ${!!domainRecord?.tenant?.integrationsConfig}`);
-
-    if (!domainRecord?.tenant) {
-      throw new Error(`Domain ${tenantIdOrDomain} not found`);
-    }
-
-    if (!domainRecord.tenant.integrationsConfig) {
-      throw new Error('Tenant integrations config not found. Please configure Twilio credentials in Settings > Integrations');
-    }
-
-    const config = this.getIntegrationConfig(domainRecord.tenant.integrationsConfig as any);
-
-    this.logger.log(`Config decrypted: ${!!config.twilio}, AccountSid: ${config.twilio?.accountSid?.substring(0, 10)}..., AuthToken: ${config.twilio?.authToken?.substring(0, 10)}..., Phone: ${config.twilio?.phoneNumber}`);
-
-    if (!config.twilio?.accountSid || !config.twilio?.authToken) {
-      throw new Error('Twilio credentials not configured for tenant');
-    }
-
-    const client = Twilio.default(config.twilio.accountSid, config.twilio.authToken);
-    this.twilioClients.set(tenantIdOrDomain, client);
-
-    return { client, config: config.twilio, tenantId: domainRecord.tenant.id };
-  }
-
-  /**
-   * Decrypt and parse integrations config
-   */
-  private getIntegrationConfig(encryptedConfig: any): IntegrationsConfig {
-    if (!encryptedConfig) {
-      return {};
-    }
-
-    // If it's already decrypted (object), return it
-    if (typeof encryptedConfig === 'object' && encryptedConfig.twilio) {
-      return encryptedConfig;
-    }
-
-    // If it's encrypted (string), decrypt it
-    if (typeof encryptedConfig === 'string') {
-      return this.tenantDbService.decryptIntegrationsConfig(encryptedConfig);
-    }
-
-    return {};
-  }
-
-  /**
-   * Generate Twilio access token for browser Voice SDK
-   */
-  async generateAccessToken(tenantDomain: string, userId: string): Promise<string> {
-    const { config, tenantId } = await this.getTwilioClient(tenantDomain);
-
-    if (!config.accountSid || !config.apiKey || !config.apiSecret) {
-      throw new Error('Twilio API credentials not configured. Please add API Key and Secret in Settings > Integrations');
-    }
-
-    // Create an access token
-    const token = new AccessToken(
-      config.accountSid,
-      config.apiKey,
-      config.apiSecret,
-      { identity: userId, ttl: 3600 } // 1 hour expiry
-    );
-
-    // Create a Voice grant
-    const voiceGrant = new VoiceGrant({
-      outgoingApplicationSid: config.twimlAppSid, // TwiML App SID for outbound calls
-      incomingAllow: true, // Allow incoming calls
-    });
-
-    token.addGrant(voiceGrant);
-
-    return token.toJwt();
-  }
-
-  /**
-   * Initiate outbound call
-   */
-  async initiateCall(params: {
-    tenantId: string;
-    userId: string;
-    toNumber: string;
-  }) {
-    const { tenantId: tenantDomain, userId, toNumber } = params;
-
-    try {
-      this.logger.log(`=== INITIATING CALL ===`);
-      this.logger.log(`Domain: ${tenantDomain}, To: ${toNumber}, User: ${userId}`);
-
-      // Validate phone number
-      if (!toNumber.match(/^\+?[1-9]\d{1,14}$/)) {
-        throw new Error(`Invalid phone number format: ${toNumber}. Use E.164 format (e.g., +1234567890)`);
-      }
-
-      const { client, config, tenantId } = await this.getTwilioClient(tenantDomain);
-      this.logger.log(`Twilio client obtained for tenant: ${tenantId}`);
-
-      // Get from number
-      const fromNumber = config.phoneNumber;
-      if (!fromNumber) {
-        throw new Error('Twilio phone number not configured');
-      }
-      this.logger.log(`From number: ${fromNumber}`);
-
-      // Construct tenant-specific webhook URLs using HTTPS (for Traefik)
-      const backendUrl = `https://${tenantDomain}`;
-      const twimlUrl = `${backendUrl}/api/voice/twiml/outbound?phoneNumber=${encodeURIComponent(fromNumber)}&toNumber=${encodeURIComponent(toNumber)}`;
-      const statusUrl = `${backendUrl}/api/voice/webhook/status`;
-      
-      this.logger.log(`TwiML URL: ${twimlUrl}`);
-      this.logger.log(`Status URL: ${statusUrl}`);
-
-      // Create call record in database
-      const tenantKnex = await this.tenantDbService.getTenantKnexById(tenantId);
-      const callId = uuidv4();
-
-      // Initiate call via Twilio
-      this.logger.log(`Calling Twilio API...`);
-      
-      // For Device-to-Number calls, we need to use a TwiML App SID
-      // The Twilio SDK will handle the Device connection, and we return TwiML with Dial
-      const call = await client.calls.create({
-        to: toNumber,
-        from: fromNumber,  // Your Twilio phone number
-        url: twimlUrl,
-        statusCallback: statusUrl,
-        statusCallbackEvent: ['initiated', 'ringing', 'answered', 'completed'],
-        statusCallbackMethod: 'POST',
-        record: false,
-        machineDetection: 'Enable',  // Optional: detect answering machines
-      });
-
-      this.logger.log(`Call created successfully: ${call.sid}, Status: ${call.status}`);
-
-      // Store call in database
-      await tenantKnex('calls').insert({
-        id: callId,
-        call_sid: call.sid,
-        direction: 'outbound',
-        from_number: fromNumber,
-        to_number: toNumber,
-        status: 'queued',
-        user_id: userId,
-        created_at: tenantKnex.fn.now(),
-        updated_at: tenantKnex.fn.now(),
-      });
-
-      // Store call state in memory
-      this.callStates.set(call.sid, {
-        callId,
-        callSid: call.sid,
-        tenantId,
-        userId,
-        direction: 'outbound',
-        status: 'queued',
-      });
-
-      this.logger.log(`Outbound call initiated: ${call.sid}`);
-
-      return {
-        callId,
-        callSid: call.sid,
-        status: 'queued',
-      };
-    } catch (error) {
-      this.logger.error('Failed to initiate call', error);
-      throw error;
-    }
-  }
-
-  /**
-   * Accept incoming call
-   */
-  async acceptCall(params: {
-    callSid: string;
-    tenantId: string;
-    userId: string;
-  }) {
-    const { callSid, tenantId, userId } = params;
-
-    try {
-      // Note: Twilio doesn't support updating call to 'in-progress' via API
-      // Call status is managed by TwiML and call flow
-      // We'll update our database status instead
-
-      // Update database
-      const tenantKnex = await this.tenantDbService.getTenantKnexById(tenantId);
-      await tenantKnex('calls')
-        .where({ call_sid: callSid })
-        .update({
-          status: 'in-progress',
-          user_id: userId,
-          started_at: tenantKnex.fn.now(),
-          updated_at: tenantKnex.fn.now(),
-        });
-
-      // Update state
-      const state = this.callStates.get(callSid) || {};
-      this.callStates.set(callSid, {
-        ...state,
-        status: 'in-progress',
-        userId,
-      });
-
-      this.logger.log(`Call accepted: ${callSid} by user ${userId}`);
-    } catch (error) {
-      this.logger.error('Failed to accept call', error);
-      throw error;
-    }
-  }
-
-  /**
-   * Reject incoming call
-   */
-  async rejectCall(callSid: string, tenantId: string) {
-    try {
-      const { client } = await this.getTwilioClient(tenantId);
-
-      // End the call
-      await client.calls(callSid).update({
-        status: 'completed',
-      });
-
-      // Update database
-      const tenantKnex = await this.tenantDbService.getTenantKnexById(tenantId);
-      await tenantKnex('calls')
-        .where({ call_sid: callSid })
-        .update({
-          status: 'canceled',
-          updated_at: tenantKnex.fn.now(),
-        });
-
-      // Clean up state
-      this.callStates.delete(callSid);
-
-      this.logger.log(`Call rejected: ${callSid}`);
-    } catch (error) {
-      this.logger.error('Failed to reject call', error);
-      throw error;
-    }
-  }
-
-  /**
-   * End active call
-   */
-  async endCall(callSid: string, tenantId: string) {
-    try {
-      const { client } = await this.getTwilioClient(tenantId);
-
-      // End the call
-      await client.calls(callSid).update({
-        status: 'completed',
-      });
-
-      // Clean up OpenAI connection if exists
-      const openaiWs = this.openaiConnections.get(callSid);
-      if (openaiWs) {
-        openaiWs.close();
-        this.openaiConnections.delete(callSid);
-      }
-
-      // Update database
-      const tenantKnex = await this.tenantDbService.getTenantKnexById(tenantId);
-      await tenantKnex('calls')
-        .where({ call_sid: callSid })
-        .update({
-          status: 'completed',
-          ended_at: tenantKnex.fn.now(),
-          updated_at: tenantKnex.fn.now(),
-        });
-
-      // Clean up state
-      this.callStates.delete(callSid);
-
-      this.logger.log(`Call ended: ${callSid}`);
-    } catch (error) {
-      this.logger.error('Failed to end call', error);
-      throw error;
-    }
-  }
-
-  /**
-   * Send DTMF tones
-   */
-  async sendDtmf(callSid: string, digit: string, tenantId: string) {
-    try {
-      const { client } = await this.getTwilioClient(tenantId);
-
-      // Twilio doesn't support sending DTMF directly via API
-      // This would need to be handled via TwiML <Play> of DTMF tones
-      this.logger.log(`DTMF requested for call ${callSid}: ${digit}`);
-
-      // TODO: Implement DTMF sending via TwiML update
-    } catch (error) {
-      this.logger.error('Failed to send DTMF', error);
-      throw error;
-    }
-  }
-
-  /**
-   * Get call state
-   */
-  async getCallState(callSid: string, tenantId: string) {
-    // Try memory first
-    if (this.callStates.has(callSid)) {
-      return this.callStates.get(callSid);
-    }
-
-    // Fallback to database
-    const tenantKnex = await this.tenantDbService.getTenantKnexById(tenantId);
-    const call = await tenantKnex('calls')
-      .where({ call_sid: callSid })
-      .first();
-
-    return call || null;
-  }
-
-  /**
-   * Update call status from webhook
-   */
-  async updateCallStatus(params: {
-    callSid: string;
-    tenantId: string;
-    status: string;
-    duration?: number;
-    recordingUrl?: string;
-  }) {
-    const { callSid, tenantId, status, duration, recordingUrl } = params;
-
-    try {
-      const tenantKnex = await this.tenantDbService.getTenantKnexById(tenantId);
-
-      const updateData: any = {
-        status,
-        updated_at: tenantKnex.fn.now(),
-      };
-
-      if (duration !== undefined) {
-        updateData.duration_seconds = duration;
-      }
-
-      if (recordingUrl) {
-        updateData.recording_url = recordingUrl;
-      }
-
-      if (status === 'completed') {
-        updateData.ended_at = tenantKnex.fn.now();
-      }
-
-      await tenantKnex('calls')
-        .where({ call_sid: callSid })
-        .update(updateData);
-
-      // Update state
-      const state = this.callStates.get(callSid);
-      if (state) {
-        this.callStates.set(callSid, { ...state, status });
-      }
-
-      this.logger.log(`Call status updated: ${callSid} -> ${status}`);
-    } catch (error) {
-      this.logger.error('Failed to update call status', error);
-      throw error;
-    }
-  }
-
-  /**
-   * Initialize OpenAI Realtime connection for call
-   */
-  async initializeOpenAIRealtime(params: {
-    callSid: string;
-    tenantId: string;
-    userId: string;
-  }) {
-    const { callSid, tenantId, userId } = params;
-
-    try {
-      // Get OpenAI config - tenantId might be a domain, so look it up
-      const centralPrisma = getCentralPrisma();
-      
-      // Try to find tenant by domain first (if tenantId is like "tenant1")
-      let tenant;
-      if (!tenantId.match(/^[0-9a-f]{8}-[0-9a-f]{4}-/i)) {
-        // Looks like a domain, not a UUID
-        const domainRecord = await centralPrisma.domain.findUnique({
-          where: { domain: tenantId },
-          include: { tenant: { select: { id: true, integrationsConfig: true } } },
-        });
-        tenant = domainRecord?.tenant;
-      } else {
-        // It's a UUID
-        tenant = await centralPrisma.tenant.findUnique({
-          where: { id: tenantId },
-          select: { id: true, integrationsConfig: true },
-        });
-      }
-
-      if (!tenant) {
-        this.logger.warn(`Tenant not found for identifier: ${tenantId}`);
-        return;
-      }
-
-      const config = this.getIntegrationConfig(tenant?.integrationsConfig as any);
-
-      if (!config.openai?.apiKey) {
-        this.logger.warn('OpenAI not configured for tenant, skipping AI features');
-        return;
-      }
-
-      // Connect to OpenAI Realtime API
-      const model = config.openai.model || 'gpt-4o-realtime-preview-2024-10-01';
-      const ws = new WebSocket(`wss://api.openai.com/v1/realtime?model=${model}`, {
-        headers: {
-          'Authorization': `Bearer ${config.openai.apiKey}`,
-          'OpenAI-Beta': 'realtime=v1',
-        },
-      });
-
-      ws.on('open', () => {
-        this.logger.log(`OpenAI Realtime connected for call ${callSid}`);
-
-        // Add to connections map only after it's open
-        this.openaiConnections.set(callSid, ws);
-
-        // Store call state with userId for later use
-        this.callStates.set(callSid, {
-          callSid,
-          tenantId: tenant.id,
-          userId,
-          status: 'in-progress',
-        });
-        this.logger.log(`📝 Stored call state for ${callSid} with userId: ${userId}`);
-
-        // Initialize session
-        ws.send(JSON.stringify({
-          type: 'session.update',
-          session: {
-            model: config.openai.model || 'gpt-4o-realtime-preview',
-            voice: config.openai.voice || 'alloy',
-            instructions: `You are an AI assistant in LISTENING MODE, helping a sales/support agent during their phone call.
-
-IMPORTANT: You are NOT talking to the caller. You are advising the agent who is handling the call.
-
-Your role:
- Listen to the conversation between the agent and the caller
- Provide concise, actionable suggestions to help the agent
- Recommend CRM actions (search contacts, create tasks, update records)
- Alert the agent to important information or next steps
- Keep suggestions brief (1-2 sentences max)
-
-Format your suggestions like:
-"💡 Suggestion: [your advice]"
-"⚠️ Alert: [important notice]"
-"📋 Action: [recommended CRM action]"`,
-            turn_detection: {
-              type: 'server_vad',
-            },
-            tools: this.getOpenAITools(),
-          },
-        }));
-      });
-
-      ws.on('message', (data: Buffer) => {
-        // Pass the tenant UUID (tenant.id) instead of the domain string
-        this.handleOpenAIMessage(callSid, tenant.id, userId, JSON.parse(data.toString()));
-      });
-
-      ws.on('error', (error) => {
-        this.logger.error(`OpenAI WebSocket error for call ${callSid}:`, error);
-        this.openaiConnections.delete(callSid);
-      });
-
-      ws.on('close', (code, reason) => {
-        this.logger.log(`OpenAI Realtime disconnected for call ${callSid} - Code: ${code}, Reason: ${reason.toString()}`);
-        this.openaiConnections.delete(callSid);
-      });
-
-      // Don't add to connections here - wait for 'open' event
-    } catch (error) {
-      this.logger.error('Failed to initialize OpenAI Realtime', error);
-    }
-  }
-
-  /**
-   * Send audio data to OpenAI Realtime API
-   */
-  async sendAudioToOpenAI(callSid: string, audioBase64: string) {
-    const ws = this.openaiConnections.get(callSid);
-    
-    if (!ws) {
-      this.logger.warn(`No OpenAI connection for call ${callSid}`);
-      return;
-    }
-
-    try {
-      // Send audio chunk to OpenAI
-      ws.send(JSON.stringify({
-        type: 'input_audio_buffer.append',
-        audio: audioBase64,
-      }));
-    } catch (error) {
-      this.logger.error(`Failed to send audio to OpenAI for call ${callSid}`, error);
-    }
-  }
-
-  /**
-   * Commit audio buffer to OpenAI (trigger processing)
-   */
-  async commitAudioBuffer(callSid: string) {
-    const ws = this.openaiConnections.get(callSid);
-    
-    if (!ws) {
-      return;
-    }
-
-    try {
-      ws.send(JSON.stringify({
-        type: 'input_audio_buffer.commit',
-      }));
-    } catch (error) {
-      this.logger.error(`Failed to commit audio buffer for call ${callSid}`, error);
-    }
-  }
-
-  /**
-   * Clean up OpenAI connection for a call
-   */
-  async cleanupOpenAIConnection(callSid: string) {
-    const ws = this.openaiConnections.get(callSid);
-    
-    if (ws) {
-      try {
-        ws.close();
-        this.openaiConnections.delete(callSid);
-        this.logger.log(`Cleaned up OpenAI connection for call ${callSid}`);
-      } catch (error) {
-        this.logger.error(`Error cleaning up OpenAI connection for call ${callSid}`, error);
-      }
-    }
-  }
-
-  /**
-   * Handle OpenAI Realtime messages
-   */
-  private async handleOpenAIMessage(
-    callSid: string,
-    tenantId: string,
-    userId: string,
-    message: any,
-  ) {
-    try {
-      switch (message.type) {
-        case 'conversation.item.created':
-          // Skip logging for now
-          break;
-
-        case 'response.audio.delta':
-          // OpenAI is sending audio response (skip logging)
-          const state = this.callStates.get(callSid);
-          if (state?.streamSid && message.delta) {
-            if (!state.pendingAudio) {
-              state.pendingAudio = [];
-            }
-            state.pendingAudio.push(message.delta);
-          }
-          break;
-
-        case 'response.audio.done':
-          // Skip logging
-          break;
-
-        case 'response.audio_transcript.delta':
-          // Skip - not transmitting individual words to frontend
-          break;
-
-        case 'response.audio_transcript.done':
-          // Final transcript - this contains the AI's actual text suggestions!
-          const transcript = message.transcript;
-          this.logger.log(`💡 AI Suggestion: "${transcript}"`);
-          
-          // Save to database
-          await this.updateCallTranscript(callSid, tenantId, transcript);
-          
-          // Also send as suggestion to frontend if it looks like a suggestion
-          if (transcript && transcript.length > 0) {
-            // Determine suggestion type
-            let suggestionType: 'response' | 'action' | 'insight' = 'insight';
-            if (transcript.includes('💡') || transcript.toLowerCase().includes('suggest')) {
-              suggestionType = 'response';
-            } else if (transcript.includes('📋') || transcript.toLowerCase().includes('action')) {
-              suggestionType = 'action';
-            } else if (transcript.includes('⚠️') || transcript.toLowerCase().includes('alert')) {
-              suggestionType = 'insight';
-            }
-            
-            // Emit to frontend
-            const state = this.callStates.get(callSid);
-            this.logger.log(`📊 Call state - userId: ${state?.userId}, gateway: ${!!this.voiceGateway}`);
-            
-            if (state?.userId && this.voiceGateway) {
-              this.logger.log(`📤 Sending to user ${state.userId}`);
-              await this.voiceGateway.notifyAiSuggestion(state.userId, {
-                type: suggestionType,
-                text: transcript,
-                callSid,
-                timestamp: new Date().toISOString(),
-              });
-              this.logger.log(`✅ Suggestion sent to agent`);
-            } else {
-              this.logger.warn(`❌ Cannot send - userId: ${state?.userId}, gateway: ${!!this.voiceGateway}, callStates has ${this.callStates.size} entries`);
-            }
-          }
-          break;
-
-        case 'response.function_call_arguments.done':
-          // Tool call completed
-          await this.handleToolCall(callSid, tenantId, userId, message);
-          break;
-
-        case 'session.created':
-        case 'session.updated':
-        case 'response.created':
-        case 'response.output_item.added':
-        case 'response.content_part.added':
-        case 'response.content_part.done':
-        case 'response.output_item.done':
-        case 'response.done':
-        case 'input_audio_buffer.speech_started':
-        case 'input_audio_buffer.speech_stopped':
-        case 'input_audio_buffer.committed':
-          // Skip logging for these (too noisy)
-          break;
-
-        case 'error':
-          this.logger.error(`OpenAI error for call ${callSid}: ${JSON.stringify(message.error)}`);
-          break;
-
-        default:
-          // Only log unhandled types occasionally
-          break;
-      }
-    } catch (error) {
-      this.logger.error('Failed to handle OpenAI message', error);
-    }
-  }
-
-  /**
-   * Define OpenAI tools for CRM actions
-   */
-  private getOpenAITools(): any[] {
-    return [
-      {
-        type: 'function',
-        name: 'search_contact',
-        description: 'Search for a contact by name, email, or phone number',
-        parameters: {
-          type: 'object',
-          properties: {
-            query: {
-              type: 'string',
-              description: 'Search query (name, email, or phone)',
-            },
-          },
-          required: ['query'],
-        },
-      },
-      {
-        type: 'function',
-        name: 'create_task',
-        description: 'Create a follow-up task based on the call',
-        parameters: {
-          type: 'object',
-          properties: {
-            title: {
-              type: 'string',
-              description: 'Task title',
-            },
-            description: {
-              type: 'string',
-              description: 'Task description',
-            },
-            dueDate: {
-              type: 'string',
-              description: 'Due date (ISO format)',
-            },
-          },
-          required: ['title'],
-        },
-      },
-      {
-        type: 'function',
-        name: 'update_contact',
-        description: 'Update contact information',
-        parameters: {
-          type: 'object',
-          properties: {
-            contactId: {
-              type: 'string',
-              description: 'Contact ID',
-            },
-            fields: {
-              type: 'object',
-              description: 'Fields to update',
-            },
-          },
-          required: ['contactId', 'fields'],
-        },
-      },
-    ];
-  }
-
-  /**
-   * Handle tool calls from OpenAI
-   */
-  private async handleToolCall(
-    callSid: string,
-    tenantId: string,
-    userId: string,
-    message: any,
-  ) {
-    // TODO: Implement actual tool execution
-    // This would call the appropriate services based on the tool name
-    // Respecting RBAC permissions for the user
-    this.logger.log(`Tool call for call ${callSid}: ${message.name}`);
-  }
-
-  /**
-   * Update call transcript
-   */
-  private async updateCallTranscript(
-    callSid: string,
-    tenantId: string,
-    transcript: string,
-  ) {
-    try {
-      const tenantKnex = await this.tenantDbService.getTenantKnexById(tenantId);
-      await tenantKnex('calls')
-        .where({ call_sid: callSid })
-        .update({
-          ai_transcript: transcript,
-          updated_at: tenantKnex.fn.now(),
-        });
-    } catch (error) {
-      this.logger.error('Failed to update transcript', error);
-    }
-  }
-
-  /**
-   * Get call history for user
-   */
-  async getCallHistory(tenantId: string, userId: string, limit = 50) {
-    try {
-      const tenantKnex = await this.tenantDbService.getTenantKnexById(tenantId);
-      const calls = await tenantKnex('calls')
-        .where({ user_id: userId })
-        .orderBy('created_at', 'desc')
-        .limit(limit);
-
-      return calls;
-    } catch (error) {
-      this.logger.error('Failed to get call history', error);
-      throw error;
-    }
-  }
-}
--- a/docs/SOFTPHONE_CHECKLIST.md
+++ b/docs/SOFTPHONE_CHECKLIST.md
@@ -1,219 +0,0 @@
-# Softphone Configuration Checklist
-
-## Pre-Deployment Checklist
-
-### Backend Configuration
-
- [ ] **Environment Variables Set**
-  - [ ] `BACKEND_URL` - Public URL of backend (e.g., `https://api.yourdomain.com`)
-  - [ ] `ENCRYPTION_KEY` - 32-byte hex key for encrypting credentials
-  - [ ] Database connection URLs configured
-
- [ ] **Dependencies Installed**
-  ```bash
-  cd backend
-  npm install
-  ```
-
- [ ] **Migrations Run**
-  ```bash
-  # Generate Prisma client
-  npx prisma generate --schema=./prisma/schema-central.prisma
-  
-  # Run tenant migrations (creates calls table)
-  npm run migrate:all-tenants
-  ```
-
- [ ] **Build Succeeds**
-  ```bash
-  npm run build
-  ```
-
-### Frontend Configuration
-
- [ ] **Environment Variables Set**
-  - [ ] `VITE_BACKEND_URL` - Backend URL (e.g., `https://api.yourdomain.com`)
-
- [ ] **Dependencies Installed**
-  ```bash
-  cd frontend
-  npm install
-  ```
-
- [ ] **Build Succeeds**
-  ```bash
-  npm run build
-  ```
-
-### Twilio Setup
-
- [ ] **Account Created**
-  - [ ] Sign up at https://www.twilio.com
-  - [ ] Verify account (phone/email)
-
- [ ] **Credentials Retrieved**
-  - [ ] Account SID (starts with `AC...`)
-  - [ ] Auth Token (from Twilio Console)
-
- [ ] **Phone Number Purchased**
-  - [ ] Buy a phone number in Twilio Console
-  - [ ] Note the phone number in E.164 format (e.g., `+1234567890`)
-
- [ ] **Webhooks Configured**
-  - [ ] Go to Phone Numbers → Active Numbers → [Your Number]
-  - [ ] Voice Configuration:
-    - [ ] A CALL COMES IN: Webhook
-    - [ ] URL: `https://your-backend-url.com/api/voice/twiml/inbound`
-    - [ ] HTTP: POST
-  - [ ] Status Callback:
-    - [ ] URL: `https://your-backend-url.com/api/voice/webhook/status`
-    - [ ] HTTP: POST
-
- [ ] **Media Streams (Optional)**
-  - [ ] Enable Media Streams in Twilio Console
-  - [ ] Note: Full implementation pending
-
-### OpenAI Setup (Optional)
-
- [ ] **API Key Obtained**
-  - [ ] Sign up at https://platform.openai.com
-  - [ ] Create API key in API Keys section
-  - [ ] Copy key (starts with `sk-...`)
-
- [ ] **Realtime API Access**
-  - [ ] Ensure account has access to Realtime API (beta feature)
-  - [ ] Contact OpenAI support if needed
-
- [ ] **Model & Voice Selected**
-  - [ ] Model: `gpt-4o-realtime-preview` (default)
-  - [ ] Voice: `alloy`, `echo`, `fable`, `onyx`, `nova`, or `shimmer`
-
-### Tenant Configuration
-
- [ ] **Log into Tenant**
-  - [ ] Use tenant subdomain (e.g., `acme.yourdomain.com`)
-  - [ ] Login with tenant user account
-
- [ ] **Navigate to Integrations**
-  - [ ] Go to Settings → Integrations (create page if doesn't exist)
-
- [ ] **Configure Twilio**
-  - [ ] Enter Account SID
-  - [ ] Enter Auth Token
-  - [ ] Enter Phone Number (with country code)
-  - [ ] Click Save Configuration
-
- [ ] **Configure OpenAI (Optional)**
-  - [ ] Enter API Key
-  - [ ] Set Model (or use default)
-  - [ ] Set Voice (or use default)
-  - [ ] Click Save Configuration
-
-### Testing
-
- [ ] **WebSocket Connection**
-  - [ ] Open browser DevTools → Network → WS
-  - [ ] Click "Softphone" button in sidebar
-  - [ ] Verify WebSocket connection to `/voice` namespace
-  - [ ] Check for "Connected" status in softphone dialog
-
- [ ] **Outbound Call**
-  - [ ] Enter a test phone number
-  - [ ] Click "Call"
-  - [ ] Verify call initiates
-  - [ ] Check call appears in Twilio Console → Logs
-  - [ ] Verify call status updates in UI
-
- [ ] **Inbound Call**
-  - [ ] Call your Twilio number from external phone
-  - [ ] Verify incoming call notification appears
-  - [ ] Verify ringtone plays
-  - [ ] Click "Accept"
-  - [ ] Verify call connects
-
- [ ] **AI Features (if OpenAI configured)**
-  - [ ] Make a call
-  - [ ] Speak during call
-  - [ ] Verify transcript appears in real-time
-  - [ ] Check for AI suggestions
-  - [ ] Test AI tool calls (if configured)
-
- [ ] **Call History**
-  - [ ] Make/receive multiple calls
-  - [ ] Open softphone dialog
-  - [ ] Verify recent calls appear
-  - [ ] Click recent call to redial
-
-### Production Readiness
-
- [ ] **Security**
-  - [ ] HTTPS enabled on backend
-  - [ ] WSS (WebSocket Secure) working
-  - [ ] CORS configured correctly
-  - [ ] Environment variables secured
-
- [ ] **Monitoring**
-  - [ ] Backend logs accessible
-  - [ ] Error tracking setup (e.g., Sentry)
-  - [ ] Twilio logs monitored
-
- [ ] **Scalability**
-  - [ ] Redis configured for BullMQ (future)
-  - [ ] Database connection pooling configured
-  - [ ] Load balancer if needed
-
- [ ] **Documentation**
-  - [ ] User guide shared with team
-  - [ ] Twilio credentials documented securely
-  - [ ] Support process defined
-
-## Verification Commands
-
-```bash
-# Check backend build
-cd backend && npm run build
-
-# Check frontend build  
-cd frontend && npm run build
-
-# Verify migrations
-cd backend && npm run migrate:status
-
-# Test WebSocket (after starting backend)
-# In browser console:
-const socket = io('http://localhost:3000/voice', {
-  auth: { token: 'YOUR_JWT_TOKEN' }
-});
-socket.on('connect', () => console.log('Connected!'));
-```
-
-## Common Issues & Solutions
-
-| Issue | Check | Solution |
-|-------|-------|----------|
-| "Not connected" | WebSocket URL | Verify BACKEND_URL in frontend .env |
-| Build fails | Dependencies | Run `npm install` again |
-| Twilio errors | Credentials | Re-enter credentials in settings |
-| No AI features | OpenAI key | Add API key in integrations |
-| Webhook 404 | URL format | Ensure `/api/voice/...` prefix |
-| HTTPS required | Twilio webhooks | Deploy with HTTPS or use ngrok for testing |
-
-## Post-Deployment Tasks
-
- [ ] Train users on softphone features
- [ ] Monitor call quality and errors
- [ ] Collect feedback for improvements
- [ ] Plan for scaling (queue system, routing)
- [ ] Review call logs for insights
-
-## Support Resources
-
- **Twilio Docs**: https://www.twilio.com/docs
- **OpenAI Realtime API**: https://platform.openai.com/docs/guides/realtime
- **Project Docs**: `/docs/SOFTPHONE_IMPLEMENTATION.md`
- **Quick Start**: `/docs/SOFTPHONE_QUICK_START.md`
-
---
-
-**Last Updated**: January 3, 2026
-**Checklist Version**: 1.0
--- a/docs/SOFTPHONE_IMPLEMENTATION.md
+++ b/docs/SOFTPHONE_IMPLEMENTATION.md
@@ -1,370 +0,0 @@
-# Softphone Implementation with Twilio & OpenAI Realtime
-
-## Overview
-
-This implementation adds comprehensive voice calling functionality to the platform using Twilio for telephony and OpenAI Realtime API for AI-assisted calls. The softphone is accessible globally through a Vue component, with call state managed via WebSocket connections.
-
-## Architecture
-
-### Backend (NestJS + Fastify)
-
-#### Core Components
-
-1. **VoiceModule** (`backend/src/voice/`)
-   - `voice.module.ts` - Module configuration
-   - `voice.gateway.ts` - WebSocket gateway for real-time signaling
-   - `voice.service.ts` - Business logic for call orchestration
-   - `voice.controller.ts` - REST endpoints and Twilio webhooks
-   - `dto/` - Data transfer objects for type safety
-   - `interfaces/` - TypeScript interfaces for configuration
-
-2. **Database Schema**
-   - **Central Database**: `integrationsConfig` JSON field in Tenant model (encrypted)
-   - **Tenant Database**: `calls` table for call history and metadata
-
-3. **WebSocket Gateway**
-   - Namespace: `/voice`
-   - Authentication: JWT token validation in handshake
-   - Tenant Context: Extracted from JWT payload
-   - Events: `call:initiate`, `call:accept`, `call:reject`, `call:end`, `call:dtmf`
-   - AI Events: `ai:transcript`, `ai:suggestion`, `ai:action`
-
-4. **Twilio Integration**
-   - SDK: `twilio` npm package
-   - Features: Outbound calls, TwiML responses, Media Streams, webhooks
-   - Credentials: Stored encrypted per tenant in `integrationsConfig.twilio`
-
-5. **OpenAI Realtime Integration**
-   - Connection: WebSocket to `wss://api.openai.com/v1/realtime`
-   - Features: Real-time transcription, AI suggestions, tool calling
-   - Credentials: Stored encrypted per tenant in `integrationsConfig.openai`
-
-### Frontend (Nuxt 3 + Vue 3)
-
-#### Core Components
-
-1. **useSoftphone Composable** (`frontend/composables/useSoftphone.ts`)
-   - Module-level shared state for global access
-   - WebSocket connection management with auto-reconnect
-   - Call state management (current call, incoming call)
-   - Audio management (ringtone playback)
-   - Event handlers for call lifecycle and AI events
-
-2. **SoftphoneDialog Component** (`frontend/components/SoftphoneDialog.vue`)
-   - Global dialog accessible from anywhere
-   - Features:
-     - Dialer with numeric keypad
-     - Incoming call notifications with ringtone
-     - Active call controls (mute, DTMF, hang up)
-     - Real-time transcript display
-     - AI suggestions panel
-     - Recent call history
-
-3. **Integration in Layout** (`frontend/layouts/default.vue`)
-   - SoftphoneDialog included globally
-   - Sidebar button with incoming call indicator
-
-4. **Settings Page** (`frontend/pages/settings/integrations.vue`)
-   - Configure Twilio credentials
-   - Configure OpenAI API settings
-   - Encrypted storage via backend API
-
-## Configuration
-
-### Environment Variables
-
-#### Backend (.env)
-```env
-BACKEND_URL=http://localhost:3000
-ENCRYPTION_KEY=your-32-byte-hex-key
-```
-
-#### Frontend (.env)
-```env
-VITE_BACKEND_URL=http://localhost:3000
-```
-
-### Tenant Configuration
-
-Integrations are configured per tenant via the settings UI or API:
-
-```json
-{
-  "twilio": {
-    "accountSid": "ACxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
-    "authToken": "your-auth-token",
-    "phoneNumber": "+1234567890"
-  },
-  "openai": {
-    "apiKey": "sk-...",
-    "model": "gpt-4o-realtime-preview",
-    "voice": "alloy"
-  }
-}
-```
-
-This configuration is encrypted using AES-256-CBC and stored in the central database.
-
-## API Endpoints
-
-### REST Endpoints
-
- `POST /api/voice/call` - Initiate outbound call
- `GET /api/voice/calls` - Get call history
- `POST /api/voice/twiml/outbound` - TwiML for outbound calls
- `POST /api/voice/twiml/inbound` - TwiML for inbound calls
- `POST /api/voice/webhook/status` - Twilio status webhook
- `POST /api/voice/webhook/recording` - Twilio recording webhook
- `GET /api/tenant/integrations` - Get integrations config (masked)
- `PUT /api/tenant/integrations` - Update integrations config
-
-### WebSocket Events
-
-#### Client → Server
- `call:initiate` - Initiate outbound call
- `call:accept` - Accept incoming call
- `call:reject` - Reject incoming call
- `call:end` - End active call
- `call:dtmf` - Send DTMF tone
-
-#### Server → Client
- `call:incoming` - Incoming call notification
- `call:initiated` - Call initiation confirmed
- `call:accepted` - Call accepted
- `call:rejected` - Call rejected
- `call:ended` - Call ended
- `call:update` - Call status update
- `call:error` - Call error
- `call:state` - Full call state sync
- `ai:transcript` - AI transcription update
- `ai:suggestion` - AI suggestion
- `ai:action` - AI action executed
-
-## Database Schema
-
-### Central Database - Tenant Model
-
-```prisma
-model Tenant {
-  id                 String   @id @default(cuid())
-  name               String
-  slug               String   @unique
-  dbHost             String
-  dbPort             Int      @default(3306)
-  dbName             String
-  dbUsername         String
-  dbPassword         String   // Encrypted
-  integrationsConfig Json?    // NEW: Encrypted JSON config
-  status             String   @default("active")
-  createdAt          DateTime @default(now())
-  updatedAt          DateTime @updatedAt
-  
-  domains            Domain[]
-}
-```
-
-### Tenant Database - Calls Table
-
-```sql
-CREATE TABLE calls (
-  id VARCHAR(36) PRIMARY KEY,
-  call_sid VARCHAR(100) UNIQUE NOT NULL,
-  direction ENUM('inbound', 'outbound') NOT NULL,
-  from_number VARCHAR(20) NOT NULL,
-  to_number VARCHAR(20) NOT NULL,
-  status ENUM('queued', 'ringing', 'in-progress', 'completed', 'busy', 'failed', 'no-answer', 'canceled'),
-  duration_seconds INT UNSIGNED,
-  recording_url VARCHAR(500),
-  ai_transcript TEXT,
-  ai_summary TEXT,
-  ai_insights JSON,
-  user_id VARCHAR(36) NOT NULL,
-  started_at TIMESTAMP,
-  ended_at TIMESTAMP,
-  created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
-  updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
-  
-  FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE,
-  INDEX idx_call_sid (call_sid),
-  INDEX idx_user_id (user_id),
-  INDEX idx_status (status),
-  INDEX idx_direction (direction),
-  INDEX idx_created_user (created_at, user_id)
-);
-```
-
-## Usage
-
-### For Developers
-
-1. **Install Dependencies**
-   ```bash
-   cd backend && npm install
-   cd ../frontend && npm install
-   ```
-
-2. **Configure Environment**
-   - Set `ENCRYPTION_KEY` in backend `.env`
-   - Ensure `BACKEND_URL` matches your deployment
-
-3. **Run Migrations**
-   ```bash
-   cd backend
-   # Central database migration is handled by Prisma
-   npm run migrate:all-tenants  # Run tenant migrations
-   ```
-
-4. **Start Services**
-   ```bash
-   # Backend
-   cd backend && npm run start:dev
-   
-   # Frontend
-   cd frontend && npm run dev
-   ```
-
-### For Users
-
-1. **Configure Integrations**
-   - Navigate to Settings → Integrations
-   - Enter Twilio credentials (Account SID, Auth Token, Phone Number)
-   - Enter OpenAI API key
-   - Click "Save Configuration"
-
-2. **Make a Call**
-   - Click the "Softphone" button in the sidebar
-   - Enter a phone number (E.164 format: +1234567890)
-   - Click "Call"
-
-3. **Receive Calls**
-   - Configure Twilio webhook URLs to point to your backend
-   - Incoming calls will trigger a notification and ringtone
-   - Click "Accept" to answer or "Reject" to decline
-
-## Advanced Features
-
-### AI-Assisted Calling
-
-The OpenAI Realtime API provides:
-
-1. **Real-time Transcription** - Live speech-to-text during calls
-2. **AI Suggestions** - Contextual suggestions for agents
-3. **Tool Calling** - CRM actions via AI (search contacts, create tasks, etc.)
-
-### Tool Definitions
-
-The system includes predefined tools for AI:
-
- `search_contact` - Search CRM for contacts
- `create_task` - Create follow-up tasks
- `update_contact` - Update contact information
-
-Tools automatically respect RBAC permissions as they call existing protected services.
-
-### Call Recording
-
- Automatic recording via Twilio
- Recording URLs stored in call records
- Accessible via API for playback
-
-## Security
-
-1. **Encryption** - All credentials encrypted using AES-256-CBC
-2. **Authentication** - JWT-based auth for WebSocket and REST
-3. **Tenant Isolation** - Multi-tenant architecture with database-per-tenant
-4. **RBAC** - Permission-based access control (future: add voice-specific permissions)
-
-## Limitations & Future Enhancements
-
-### Current Limitations
-
-1. **Media Streaming** - Twilio Media Streams WebSocket not fully implemented
-2. **Call Routing** - No intelligent routing for inbound calls yet
-3. **Queue Management** - Basic call handling, no queue system
-4. **Audio Muting** - UI placeholder, actual audio muting not implemented
-5. **RBAC Permissions** - Voice-specific permissions not yet added
-
-### Planned Enhancements
-
-1. **Media Streams** - Full bidirectional audio between Twilio ↔ OpenAI ↔ User
-2. **Call Routing** - Route calls based on availability, skills, round-robin
-3. **Queue System** - Call queuing with BullMQ integration
-4. **Call Analytics** - Dashboard with call metrics and insights
-5. **RBAC Integration** - Add `voice.make_calls`, `voice.receive_calls` permissions
-6. **WebRTC** - Direct browser-to-Twilio audio (bypass backend)
-
-## Troubleshooting
-
-### WebSocket Connection Issues
-
- Verify `BACKEND_URL` environment variable
- Check CORS settings in backend
- Ensure JWT token is valid and includes tenant information
-
-### Twilio Webhook Errors
-
- Ensure webhook URLs are publicly accessible
- Verify Twilio credentials in integrations config
- Check backend logs for webhook processing errors
-
-### OpenAI Connection Issues
-
- Verify OpenAI API key has Realtime API access
- Check network connectivity to OpenAI endpoints
- Monitor backend logs for WebSocket errors
-
-## Testing
-
-### Manual Testing
-
-1. **Outbound Calls**
-   ```bash
-   # Open softphone dialog
-   # Enter test number (use Twilio test credentials)
-   # Click Call
-   # Verify call status updates
-   ```
-
-2. **Inbound Calls**
-   ```bash
-   # Configure Twilio number webhook
-   # Call the Twilio number from external phone
-   # Verify incoming call notification
-   # Accept call and verify connection
-   ```
-
-3. **AI Features**
-   ```bash
-   # Make a call with OpenAI configured
-   # Speak during the call
-   # Verify transcript appears in UI
-   # Check for AI suggestions
-   ```
-
-## Dependencies
-
-### Backend
- `@nestjs/websockets` - WebSocket support
- `@nestjs/platform-socket.io` - Socket.IO adapter
- `@fastify/websocket` - Fastify WebSocket plugin
- `socket.io` - WebSocket library
- `twilio` - Twilio SDK
- `openai` - OpenAI SDK (for Realtime API)
- `ws` - WebSocket client
-
-### Frontend
- `socket.io-client` - WebSocket client
- `lucide-vue-next` - Icons
- `vue-sonner` - Toast notifications
-
-## Support
-
-For issues or questions:
-1. Check backend logs for error details
-2. Verify tenant integrations configuration
-3. Test Twilio/OpenAI connectivity independently
-4. Review WebSocket connection in browser DevTools
-
-## License
-
-Same as project license.
--- a/docs/SOFTPHONE_QUICK_START.md
+++ b/docs/SOFTPHONE_QUICK_START.md
@@ -1,94 +0,0 @@
-# Softphone Quick Start Guide
-
-## Setup (5 minutes)
-
-### 1. Configure Twilio
-
-1. Create a Twilio account at https://www.twilio.com
-2. Get your credentials:
-   - Account SID (starts with AC...)
-   - Auth Token
-   - Purchase a phone number
-3. Configure webhook URLs in Twilio Console:
-   - Voice webhook: `https://your-domain.com/api/voice/twiml/inbound`
-   - Status callback: `https://your-domain.com/api/voice/webhook/status`
-
-### 2. Configure OpenAI (Optional for AI features)
-
-1. Get OpenAI API key from https://platform.openai.com
-2. Ensure you have access to Realtime API (beta feature)
-
-### 3. Add Credentials to Platform
-
-1. Log into your tenant
-2. Navigate to **Settings → Integrations**
-3. Fill in Twilio section:
-   - Account SID
-   - Auth Token
-   - Phone Number (format: +1234567890)
-4. Fill in OpenAI section (optional):
-   - API Key
-   - Model: `gpt-4o-realtime-preview` (default)
-   - Voice: `alloy` (default)
-5. Click **Save Configuration**
-
-## Using the Softphone
-
-### Make a Call
-
-1. Click **Softphone** button in sidebar (phone icon)
-2. Enter phone number in E.164 format: `+1234567890`
-3. Click **Call** or press Enter
-4. Wait for connection
-5. During call:
-   - Click **hash** icon for DTMF keypad
-   - Click **microphone** to mute/unmute
-   - Click **red phone** to hang up
-
-### Receive a Call
-
-1. Softphone automatically connects when logged in
-2. Incoming call notification appears with ringtone
-3. Click **Accept** (green button) or **Reject** (red button)
-4. If accepted, call controls appear
-
-### AI Features (if OpenAI configured)
-
- **Real-time Transcript**: See what's being said live
- **AI Suggestions**: Get contextual tips during calls
- **Smart Actions**: AI can search contacts, create tasks automatically
-
-## Quick Tips
-
- ✅ Phone number format: `+1234567890` (include country code)
- ✅ Close dialog: Click outside or press Escape
- ✅ Incoming calls work even if dialog is closed
- ✅ Recent calls appear for quick redial
- ❌ Don't forget to save credentials before testing
- ❌ Webhook URLs must be publicly accessible (not localhost)
-
-## Troubleshooting
-
-| Issue | Solution |
-|-------|----------|
-| "Not connected" | Check credentials in Settings → Integrations |
-| Can't make calls | Verify Twilio Account SID and Auth Token |
-| Can't receive calls | Check Twilio webhook configuration |
-| No AI features | Add OpenAI API key in settings |
-| WebSocket errors | Check browser console, verify backend URL |
-
-## Testing with Twilio Test Credentials
-
-For development, Twilio provides test credentials:
- Use Twilio test numbers
- No actual calls are made
- Simulate call flows in development
-
-## Next Steps
-
- 📞 Make your first test call
- 🎤 Try the AI transcription feature
- 📊 View call history in Softphone dialog
- ⚙️ Configure call routing (advanced)
-
-Need help? Check `/docs/SOFTPHONE_IMPLEMENTATION.md` for detailed documentation.
--- a/docs/SOFTPHONE_SUMMARY.md
+++ b/docs/SOFTPHONE_SUMMARY.md
@@ -1,232 +0,0 @@
-# Softphone Feature - Implementation Summary
-
-## ✅ What Was Implemented
-
-This PR adds complete softphone functionality to the platform with Twilio telephony and OpenAI Realtime API integration.
-
-### Backend Changes
-
-1. **WebSocket Support**
-   - Added `@fastify/websocket` to enable WebSocket in Fastify
-   - Configured `@nestjs/websockets` with Socket.IO adapter
-   - Modified `main.ts` to register WebSocket support
-
-2. **Database Schema**
-   - Added `integrationsConfig` JSON field to Tenant model (encrypted)
-   - Created `calls` table migration for tenant databases
-   - Generated Prisma client with new schema
-
-3. **VoiceModule** (`backend/src/voice/`)
-   - `voice.module.ts` - Module registration
-   - `voice.gateway.ts` - WebSocket gateway with JWT auth
-   - `voice.service.ts` - Twilio & OpenAI integration
-   - `voice.controller.ts` - REST endpoints and webhooks
-   - DTOs and interfaces for type safety
-
-4. **Tenant Management**
-   - `tenant.controller.ts` - New endpoints for integrations config
-   - Encryption/decryption helpers in `tenant-database.service.ts`
-
-### Frontend Changes
-
-1. **Composables**
-   - `useSoftphone.ts` - Global state management with WebSocket
-
-2. **Components**
-   - `SoftphoneDialog.vue` - Full softphone UI with dialer, call controls, AI features
-   - Integrated into `default.vue` layout
-   - Added button to `AppSidebar.vue` with incoming call indicator
-
-3. **Pages**
-   - `settings/integrations.vue` - Configure Twilio and OpenAI credentials
-
-4. **Dependencies**
-   - Added `socket.io-client` for WebSocket connectivity
-
-### Documentation
-
-1. `SOFTPHONE_IMPLEMENTATION.md` - Comprehensive technical documentation
-2. `SOFTPHONE_QUICK_START.md` - User-friendly setup guide
-
-## 🎯 Key Features
-
- ✅ Outbound calling with dialer
- ✅ Inbound call notifications with ringtone
- ✅ Real-time call controls (mute, DTMF, hang up)
- ✅ Call history tracking
- ✅ AI-powered transcription (OpenAI Realtime)
- ✅ AI suggestions during calls
- ✅ Tool calling for CRM actions
- ✅ Multi-tenant with encrypted credentials per tenant
- ✅ WebSocket-based real-time communication
- ✅ Responsive UI with shadcn-vue components
-
-## 📦 New Dependencies
-
-### Backend
-```json
-{
-  "@fastify/websocket": "^latest",
-  "@nestjs/websockets": "^10.x",
-  "@nestjs/platform-socket.io": "^10.x",
-  "socket.io": "^latest",
-  "twilio": "^latest",
-  "openai": "^latest",
-  "ws": "^latest"
-}
-```
-
-### Frontend
-```json
-{
-  "socket.io-client": "^latest"
-}
-```
-
-## 🚀 Quick Start
-
-### 1. Run Migrations
-```bash
-cd backend
-npx prisma generate --schema=./prisma/schema-central.prisma
-npm run migrate:all-tenants
-```
-
-### 2. Configure Tenant
-1. Log into tenant account
-2. Go to Settings → Integrations
-3. Add Twilio credentials (Account SID, Auth Token, Phone Number)
-4. Add OpenAI API key (optional, for AI features)
-5. Save configuration
-
-### 3. Use Softphone
-1. Click "Softphone" button in sidebar
-2. Enter phone number and click "Call"
-3. Or receive incoming calls automatically
-
-## 🔐 Security
-
- All credentials encrypted with AES-256-CBC
- JWT authentication for WebSocket connections
- Tenant isolation via database-per-tenant architecture
- Sensitive fields masked in API responses
-
-## 📊 Database Changes
-
-### Central Database
-```sql
-ALTER TABLE tenants ADD COLUMN integrationsConfig JSON;
-```
-
-### Tenant Databases
-```sql
-CREATE TABLE calls (
-  id VARCHAR(36) PRIMARY KEY,
-  call_sid VARCHAR(100) UNIQUE NOT NULL,
-  direction ENUM('inbound', 'outbound'),
-  from_number VARCHAR(20),
-  to_number VARCHAR(20),
-  status VARCHAR(20),
-  duration_seconds INT,
-  recording_url VARCHAR(500),
-  ai_transcript TEXT,
-  ai_summary TEXT,
-  ai_insights JSON,
-  user_id VARCHAR(36),
-  started_at TIMESTAMP,
-  ended_at TIMESTAMP,
-  created_at TIMESTAMP,
-  updated_at TIMESTAMP,
-  FOREIGN KEY (user_id) REFERENCES users(id)
-);
-```
-
-## 🎨 UI Components
-
- **SoftphoneDialog**: Main softphone interface
-  - Dialer with numeric keypad
-  - Incoming call banner with accept/reject
-  - Active call controls
-  - Real-time transcript view
-  - AI suggestions panel
-  - Recent calls list
-
- **Sidebar Integration**: Phone button with notification badge
-
-## 🔄 API Endpoints
-
-### REST
- `POST /api/voice/call` - Initiate call
- `GET /api/voice/calls` - Get call history
- `GET /api/tenant/integrations` - Get config
- `PUT /api/tenant/integrations` - Update config
-
-### WebSocket (`/voice` namespace)
- `call:initiate` - Start outbound call
- `call:accept` - Accept incoming call
- `call:reject` - Reject incoming call
- `call:end` - End active call
- `call:dtmf` - Send DTMF tone
- `ai:transcript` - Receive transcription
- `ai:suggestion` - Receive AI suggestion
-
-## ⚠️ Known Limitations
-
-1. **Media Streaming**: Twilio Media Streams WebSocket not fully implemented
-2. **Call Routing**: Basic inbound call handling (no intelligent routing yet)
-3. **RBAC**: Voice-specific permissions not yet integrated
-4. **Audio Muting**: UI present but actual audio muting not implemented
-5. **Queue System**: No call queue management (single call at a time)
-
-## 🔮 Future Enhancements
-
-1. Full Twilio Media Streams integration for audio forking
-2. Intelligent call routing (availability-based, round-robin, skills-based)
-3. Call queue management with BullMQ
-4. RBAC permissions (`voice.make_calls`, `voice.receive_calls`)
-5. WebRTC for browser-based audio
-6. Call analytics dashboard
-7. IVR (Interactive Voice Response) system
-8. Call recording download and playback
-9. Voicemail support
-
-## 🧪 Testing
-
-### Manual Testing Checklist
- [ ] Install dependencies
- [ ] Run migrations
- [ ] Configure Twilio credentials
- [ ] Make outbound call
- [ ] Receive inbound call (requires public webhook URL)
- [ ] Test call controls (mute, DTMF, hang up)
- [ ] Configure OpenAI and test AI features
- [ ] Check call history
- [ ] Test on multiple browsers
-
-### Twilio Test Mode
-Use Twilio test credentials for development without making real calls.
-
-## 📚 Documentation
-
-See `/docs/` for detailed documentation:
- `SOFTPHONE_IMPLEMENTATION.md` - Technical details
- `SOFTPHONE_QUICK_START.md` - User guide
-
-## 🐛 Troubleshooting
-
-| Issue | Solution |
-|-------|----------|
-| Build errors | Run `npm install` in both backend and frontend |
-| WebSocket connection fails | Check BACKEND_URL env variable |
-| Calls not working | Verify Twilio credentials in Settings → Integrations |
-| AI features not working | Add OpenAI API key in integrations settings |
-
-## 👥 Contributors
-
-Implemented by: GitHub Copilot (Claude Sonnet 4.5)
-
---
-
-**Status**: ✅ Ready for testing
-**Version**: 1.0.0
-**Date**: January 3, 2026
--- a/docs/TWILIO_SETUP.md
+++ b/docs/TWILIO_SETUP.md
@@ -1,65 +0,0 @@
-# Twilio Setup Guide for Softphone
-
-## Prerequisites
- Twilio account with a phone number
- Account SID and Auth Token
-
-## Basic Setup (Current - Makes calls but no browser audio)
-
-Currently, the softphone initiates calls through Twilio's REST API, but the audio doesn't flow through the browser. The calls go directly to your mobile device with a simple TwiML message.
-
-## Full Browser Audio Setup (Requires additional configuration)
-
-To enable actual softphone functionality where audio flows through your browser's microphone and speakers, you need:
-
-### Option 1: Twilio Client SDK (Recommended)
-
-1. **Create a TwiML App in Twilio Console**
-   - Go to https://console.twilio.com/us1/develop/voice/manage/twiml-apps
-   - Click "Create new TwiML App"
-   - Name it (e.g., "RouteBox Softphone")
-   - Set Voice URL to: `https://yourdomain.com/api/voice/twiml/outbound`
-   - Set Voice Method to: `POST`
-   - Save and copy the TwiML App SID
-
-2. **Create an API Key**
-   - Go to https://console.twilio.com/us1/account/keys-credentials/api-keys
-   - Click "Create API key"
-   - Give it a friendly name
-   - Copy both the SID and Secret (you won't be able to see the secret again)
-
-3. **Add credentials to Settings > Integrations**
-   - Account SID (from main dashboard)
-   - Auth Token (from main dashboard)
-   - Phone Number (your Twilio number)
-   - API Key SID (from step 2)
-   - API Secret (from step 2)
-   - TwiML App SID (from step 1)
-
-### Option 2: Twilio Media Streams (Alternative - More complex)
-
-Uses WebSocket to stream audio bidirectionally:
- Requires WebSocket server setup
- More control over audio processing
- Can integrate with OpenAI Realtime API more easily
-
-## Current Status
-
-The system works but audio doesn't flow through browser because:
-1. Calls are made via REST API only
-2. No Twilio Client SDK integration yet
-3. TwiML returns simple voice message
-
-To enable browser audio, you need to:
-1. Complete the Twilio setup above
-2. Implement the frontend Twilio Device connection
-3. Modify TwiML to dial the browser client instead of just the phone number
-
-## Quick Test (Current Setup)
-
-1. Save your Account SID, Auth Token, and Phone Number in Settings > Integrations
-2. Click the phone icon in sidebar
-3. Enter a phone number and click "Call"
-4. You should receive a call that says "This is a test call from your softphone"
-
-The call works, but audio doesn't route through your browser - it's just a regular phone call initiated by the API.
--- a/frontend/components/AppSidebar.vue
+++ b/frontend/components/AppSidebar.vue
@@ -17,12 +17,10 @@ import {
  SidebarRail,
 } from '@/components/ui/sidebar'
 import { Collapsible, CollapsibleContent, CollapsibleTrigger } from '@/components/ui/collapsible'
-import { LayoutGrid, Boxes, Settings, Home, ChevronRight, Database, Layers, LogOut, Users, Globe, Building, Phone } from 'lucide-vue-next'
-import { useSoftphone } from '~/composables/useSoftphone'
+import { LayoutGrid, Boxes, Settings, Home, ChevronRight, Database, Layers, LogOut, Users, Globe, Building } from 'lucide-vue-next'

 const { logout } = useAuth()
 const { api } = useApi()
-const softphone = useSoftphone()

 const handleLogout = async () => {
  await logout()
@@ -107,21 +105,6 @@ const staticMenuItems = [
        url: '/setup/objects',
        icon: Boxes,
      },
-      {
-        title: 'Users',
-        url: '/setup/users',
-        icon: Users,
-      },
-      {
-        title: 'Roles',
-        url: '/setup/roles',
-        icon: Layers,
-      },
-      {
-        title: 'Integrations',
-        url: '/settings/integrations',
-        icon: Settings,
-      },
    ],
  },
 ]
@@ -335,13 +318,6 @@ const centralAdminMenuItems: Array<{
    </SidebarContent>
    <SidebarFooter>
      <SidebarMenu>
-        <SidebarMenuItem v-if="!isCentralAdmin">
-          <SidebarMenuButton @click="softphone.open" class="cursor-pointer hover:bg-accent">
-            <Phone class="h-4 w-4" />
-            <span>Softphone</span>
-            <span v-if="softphone.hasIncomingCall.value" class="ml-auto h-2 w-2 rounded-full bg-red-500 animate-pulse"></span>
-          </SidebarMenuButton>
-        </SidebarMenuItem>
        <SidebarMenuItem>
          <SidebarMenuButton @click="handleLogout" class="cursor-pointer hover:bg-accent">
            <LogOut class="h-4 w-4" />
--- a/frontend/components/RecordSharing.vue
+++ b/frontend/components/RecordSharing.vue
@@ -1,348 +0,0 @@
-<template>
-  <div class="record-sharing space-y-4">
-    <div class="flex items-center justify-between">
-      <div>
-        <h3 class="text-lg font-semibold">Sharing</h3>
-        <p class="text-sm text-muted-foreground">
-          Grant access to specific users for this record
-        </p>
-      </div>
-      <Button @click="showShareDialog = true" size="sm">
-        <UserPlus class="h-4 w-4 mr-2" />
-        Share
-      </Button>
-    </div>
-
-    <!-- Loading State -->
-    <div v-if="loading" class="flex items-center justify-center py-8">
-      <div class="animate-spin rounded-full h-8 w-8 border-b-2 border-primary"></div>
-    </div>
-
-    <!-- Error State -->
-    <div v-else-if="error" class="text-sm text-destructive">
-      {{ error }}
-    </div>
-
-    <!-- Shares List -->
-    <div v-else-if="shares.length > 0" class="border rounded-lg">
-      <Table>
-        <TableHeader>
-          <TableRow>
-            <TableHead>User</TableHead>
-            <TableHead>Email</TableHead>
-            <TableHead>Access</TableHead>
-            <TableHead>Shared</TableHead>
-            <TableHead class="text-right">Actions</TableHead>
-          </TableRow>
-        </TableHeader>
-        <TableBody>
-          <TableRow v-for="share in shares" :key="share.id">
-            <TableCell class="font-medium">
-              {{ getUserName(share.granteeUser) }}
-            </TableCell>
-            <TableCell>{{ share.granteeUser.email }}</TableCell>
-            <TableCell>
-              <div class="flex gap-1">
-                <Badge v-if="share.accessLevel.canRead" variant="secondary">Read</Badge>
-                <Badge v-if="share.accessLevel.canEdit" variant="secondary">Edit</Badge>
-                <Badge v-if="share.accessLevel.canDelete" variant="secondary">Delete</Badge>
-              </div>
-            </TableCell>
-            <TableCell>{{ formatDate(share.createdAt) }}</TableCell>
-            <TableCell class="text-right">
-              <Button
-                variant="ghost"
-                size="icon"
-                @click="removeShare(share.id)"
-                :disabled="removing === share.id"
-              >
-                <Trash2 class="h-4 w-4" />
-              </Button>
-            </TableCell>
-          </TableRow>
-        </TableBody>
-      </Table>
-    </div>
-
-    <!-- Empty State -->
-    <div v-else class="text-center py-8 text-muted-foreground border rounded-lg">
-      <Users class="h-12 w-12 mx-auto mb-2 opacity-50" />
-      <p>This record is not shared with anyone</p>
-      <p class="text-sm">Click "Share" to grant access to other users</p>
-    </div>
-
-    <!-- Share Dialog -->
-    <Dialog v-model:open="showShareDialog">
-      <DialogContent>
-        <DialogHeader>
-          <DialogTitle>Share Record</DialogTitle>
-          <DialogDescription>
-            Grant access to this record to specific users
-          </DialogDescription>
-        </DialogHeader>
-        <div class="space-y-4">
-          <div class="space-y-2">
-            <Label for="user">User</Label>
-            <Select v-model="newShare.userId" @update:model-value="(value) => newShare.userId = value">
-              <SelectTrigger>
-                <SelectValue placeholder="Select user" />
-              </SelectTrigger>
-              <SelectContent>
-                <SelectItem
-                  v-for="user in availableUsers"
-                  :key="user.id"
-                  :value="user.id"
-                >
-                  {{ getUserName(user) }} ({{ user.email }})
-                </SelectItem>
-              </SelectContent>
-            </Select>
-          </div>
-
-          <div class="space-y-3">
-            <Label>Permissions</Label>
-            <div class="space-y-2">
-              <div class="flex items-center space-x-2">
-                <Checkbox
-                  id="canRead"
-                  v-model:checked="newShare.canRead"
-                  @update:checked="(value) => newShare.canRead = value"
-                />
-                <label
-                  for="canRead"
-                  class="text-sm font-medium leading-none peer-disabled:cursor-not-allowed peer-disabled:opacity-70"
-                >
-                  Can Read
-                </label>
-              </div>
-              <div class="flex items-center space-x-2">
-                <Checkbox
-                  id="canEdit"
-                  v-model:checked="newShare.canEdit"
-                  @update:checked="(value) => newShare.canEdit = value"
-                />
-                <label
-                  for="canEdit"
-                  class="text-sm font-medium leading-none peer-disabled:cursor-not-allowed peer-disabled:opacity-70"
-                >
-                  Can Edit
-                </label>
-              </div>
-              <div class="flex items-center space-x-2">
-                <Checkbox
-                  id="canDelete"
-                  v-model:checked="newShare.canDelete"
-                  @update:checked="(value) => newShare.canDelete = value"
-                />
-                <label
-                  for="canDelete"
-                  class="text-sm font-medium leading-none peer-disabled:cursor-not-allowed peer-disabled:opacity-70"
-                >
-                  Can Delete
-                </label>
-              </div>
-            </div>
-          </div>
-
-          <div class="space-y-2">
-            <Label for="expiresAt">Expires At (Optional)</Label>
-            <div class="flex gap-2">
-              <DatePicker
-                v-model="expiresDate"
-                placeholder="Select date"
-                class="flex-1"
-              />
-            </div>
-          </div>
-        </div>
-        <DialogFooter>
-          <Button variant="outline" @click="showShareDialog = false">Cancel</Button>
-          <Button
-            @click="createShare"
-            :disabled="!newShare.userId || (!newShare.canRead && !newShare.canEdit && !newShare.canDelete) || sharing"
-          >
-            {{ sharing ? 'Sharing...' : 'Share' }}
-          </Button>
-        </DialogFooter>
-      </DialogContent>
-    </Dialog>
-  </div>
-</template>
-
-<script setup lang="ts">
-import { ref, onMounted, computed } from 'vue';
-import { Button } from '~/components/ui/button';
-import { Table, TableBody, TableCell, TableHead, TableHeader, TableRow } from '~/components/ui/table';
-import { Dialog, DialogContent, DialogDescription, DialogFooter, DialogHeader, DialogTitle } from '~/components/ui/dialog';
-import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue } from '~/components/ui/select';
-import { Input } from '~/components/ui/input';
-import { Label } from '~/components/ui/label';
-import { Badge } from '~/components/ui/badge';
-import { Checkbox } from '~/components/ui/checkbox';
-import DatePicker from '~/components/ui/date-picker/DatePicker.vue';
-import { UserPlus, Trash2, Users } from 'lucide-vue-next';
-
-interface Props {
-  objectApiName: string;
-  recordId: string;
-  ownerId?: string;
-}
-
-const props = defineProps<Props>();
-
-const { api } = useApi();
-const { toast } = useToast();
-
-const loading = ref(true);
-const sharing = ref(false);
-const removing = ref<string | null>(null);
-const error = ref<string | null>(null);
-const shares = ref<any[]>([]);
-const allUsers = ref<any[]>([]);
-const showShareDialog = ref(false);
-const newShare = ref({
-  userId: '',
-  canRead: true,
-  canEdit: false,
-  canDelete: false,
-  expiresAt: '',
-});
-
-const expiresDate = ref<Date | null>(null);
-const expiresTime = ref('');
-
-// Computed property to combine date and time into ISO string
-const combinedExpiresAt = computed(() => {
-  if (!expiresDate.value) return '';
-  
-  const date = new Date(expiresDate.value);
-  if (expiresTime.value) {
-    const [hours, minutes] = expiresTime.value.split(':');
-    date.setHours(parseInt(hours), parseInt(minutes), 0, 0);
-  } else {
-    date.setHours(23, 59, 59, 999); // Default to end of day
-  }
-  
-  return date.toISOString();
-});
-
-// Filter out users who already have shares
-const availableUsers = computed(() => {
-  const sharedUserIds = new Set(shares.value.map(s => s.granteeUserId));
-  return allUsers.value.filter(u => !sharedUserIds.has(u.id));
-});
-
-const loadShares = async () => {
-  try {
-    loading.value = true;
-    error.value = null;
-    const response = await api.get(
-      `/runtime/objects/${props.objectApiName}/records/${props.recordId}/shares`
-    );
-    shares.value = response || [];
-  } catch (e: any) {
-    console.error('Failed to load shares:', e);
-    error.value = e.message || 'Failed to load shares';
-    // If user is not owner, they can't see shares
-    if (e.message?.includes('owner')) {
-      error.value = 'Only the record owner can manage sharing';
-    }
-  } finally {
-    loading.value = false;
-  }
-};
-
-const loadUsers = async () => {
-  try {
-    const response = await api.get('/setup/users');
-    allUsers.value = response || [];
-  } catch (e: any) {
-    console.error('Failed to load users:', e);
-  }
-};
-
-const createShare = async () => {
-  try {
-    sharing.value = true;
-    
-    const expiresAtValue = combinedExpiresAt.value;
-    console.log('Creating share, expiresAt value:', expiresAtValue);
-    
-    const payload: any = {
-      granteeUserId: newShare.value.userId,
-      canRead: newShare.value.canRead,
-      canEdit: newShare.value.canEdit,
-      canDelete: newShare.value.canDelete,
-    };
-    
-    // Only include expiresAt if it has a value
-    if (expiresAtValue) {
-      payload.expiresAt = expiresAtValue;
-      console.log('Including expiresAt in payload:', payload.expiresAt);
-    } else {
-      console.log('Skipping expiresAt - no date selected');
-    }
-    
-    console.log('Final payload:', payload);
-    
-    await api.post(
-      `/runtime/objects/${props.objectApiName}/records/${props.recordId}/shares`,
-      payload
-    );
-    toast.success('Record shared successfully');
-    showShareDialog.value = false;
-    newShare.value = {
-      userId: '',
-      canRead: true,
-      canEdit: false,
-      canDelete: false,
-      expiresAt: '',
-    };
-    expiresDate.value = null;
-    expiresTime.value = '';
-    await loadShares();
-  } catch (e: any) {
-    console.error('Failed to share record:', e);
-    toast.error(e.message || 'Failed to share record');
-  } finally {
-    sharing.value = false;
-  }
-};
-
-const removeShare = async (shareId: string) => {
-  try {
-    removing.value = shareId;
-    await api.delete(
-      `/runtime/objects/${props.objectApiName}/records/${props.recordId}/shares/${shareId}`
-    );
-    toast.success('Share removed successfully');
-    await loadShares();
-  } catch (e: any) {
-    console.error('Failed to remove share:', e);
-    toast.error(e.message || 'Failed to remove share');
-  } finally {
-    removing.value = null;
-  }
-};
-
-const getUserName = (user: any) => {
-  if (!user) return 'Unknown';
-  if (user.firstName || user.lastName) {
-    return [user.firstName, user.lastName].filter(Boolean).join(' ');
-  }
-  return user.email;
-};
-
-const formatDate = (date: string) => {
-  if (!date) return 'N/A';
-  return new Date(date).toLocaleDateString();
-};
-
-onMounted(async () => {
-  await Promise.all([loadShares(), loadUsers()]);
-});
-
-definePageMeta({
-  layout: 'default',
-});
-</script>
--- a/frontend/components/SoftphoneDialog.vue
+++ b/frontend/components/SoftphoneDialog.vue
@@ -1,300 +0,0 @@
-<template>
-  <Dialog v-model:open="softphone.isOpen.value">
-    <DialogContent class="sm:max-w-[500px] max-h-[80vh] overflow-hidden flex flex-col">
-      <DialogHeader>
-        <DialogTitle>Softphone</DialogTitle>
-      </DialogHeader>
-
-      <div class="flex-1 overflow-y-auto space-y-4">
-        <!-- Connection Status -->
-        <div class="flex items-center justify-between p-3 rounded-lg border" :class="{
-          'bg-green-50 border-green-200': softphone.isConnected.value,
-          'bg-red-50 border-red-200': !softphone.isConnected.value
-        }">
-          <span class="text-sm font-medium">
-            {{ softphone.isConnected.value ? 'Connected' : 'Disconnected' }}
-          </span>
-          <div class="h-2 w-2 rounded-full" :class="{
-            'bg-green-500': softphone.isConnected.value,
-            'bg-red-500': !softphone.isConnected.value
-          }"></div>
-        </div>
-
-        <!-- Incoming Call -->
-        <div v-if="softphone.incomingCall.value" class="p-4 rounded-lg border border-blue-200 bg-blue-50 animate-pulse">
-          <div class="text-center space-y-4">
-            <div>
-              <p class="text-sm text-gray-600">Incoming call from</p>
-              <p class="text-2xl font-bold">{{ formatPhoneNumber(softphone.incomingCall.value.fromNumber) }}</p>
-            </div>
-            <div class="flex gap-2 justify-center">
-              <Button @click="handleAccept" class="bg-green-500 hover:bg-green-600">
-                <PhoneIcon class="w-4 h-4 mr-2" />
-                Accept
-              </Button>
-              <Button @click="handleReject" variant="destructive">
-                <PhoneOffIcon class="w-4 h-4 mr-2" />
-                Reject
-              </Button>
-            </div>
-          </div>
-        </div>
-
-        <!-- Active Call -->
-        <div v-if="softphone.currentCall.value" class="space-y-4">
-          <div class="p-4 rounded-lg border bg-gray-50">
-            <div class="text-center space-y-2">
-              <p class="text-sm text-gray-600">
-                {{ softphone.currentCall.value.direction === 'outbound' ? 'Calling' : 'Connected with' }}
-              </p>
-              <p class="text-2xl font-bold">
-                {{ formatPhoneNumber(
-                  softphone.currentCall.value.direction === 'outbound' 
-                    ? softphone.currentCall.value.toNumber 
-                    : softphone.currentCall.value.fromNumber
-                ) }}
-              </p>
-              <p class="text-sm text-gray-500 capitalize">{{ softphone.callStatus.value }}</p>
-            </div>
-          </div>
-
-          <!-- Call Controls -->
-          <div class="grid grid-cols-3 gap-2">
-            <Button variant="outline" size="sm" @click="toggleMute">
-              <MicIcon v-if="!isMuted" class="w-4 h-4" />
-              <MicOffIcon v-else class="w-4 h-4" />
-            </Button>
-            <Button variant="outline" size="sm" @click="showDialpad = !showDialpad">
-              <Hash class="w-4 h-4" />
-            </Button>
-            <Button variant="destructive" size="sm" @click="handleEndCall">
-              <PhoneOffIcon class="w-4 h-4" />
-            </Button>
-          </div>
-
-          <!-- Dialpad -->
-          <div v-if="showDialpad" class="grid grid-cols-3 gap-2">
-            <Button
-              v-for="digit in ['1', '2', '3', '4', '5', '6', '7', '8', '9', '*', '0', '#']"
-              :key="digit"
-              variant="outline"
-              size="sm"
-              @click="handleDtmf(digit)"
-              class="h-12 text-lg font-semibold"
-            >
-              {{ digit }}
-            </Button>
-          </div>
-        </div>
-
-        <!-- AI Suggestions - Show whenever there are suggestions, not just during active call -->
-        <div v-if="softphone.aiSuggestions.value.length > 0" class="space-y-2">
-          <h3 class="text-sm font-semibold flex items-center gap-2">
-            <span>AI Assistant</span>
-            <span class="px-2 py-0.5 text-xs bg-blue-100 text-blue-700 rounded-full">
-              {{ softphone.aiSuggestions.value.length }}
-            </span>
-          </h3>
-          <div class="space-y-2 max-h-40 overflow-y-auto">
-            <div
-              v-for="(suggestion, index) in softphone.aiSuggestions.value.slice(0, 5)"
-              :key="index"
-              class="p-3 rounded-lg border text-sm transition-all"
-              :class="{
-                'bg-blue-50 border-blue-200 animate-pulse': suggestion.type === 'response' && index === 0,
-                'bg-blue-50 border-blue-200': suggestion.type === 'response' && index !== 0,
-                'bg-green-50 border-green-200 animate-pulse': suggestion.type === 'action' && index === 0,
-                'bg-green-50 border-green-200': suggestion.type === 'action' && index !== 0,
-                'bg-purple-50 border-purple-200 animate-pulse': suggestion.type === 'insight' && index === 0,
-                'bg-purple-50 border-purple-200': suggestion.type === 'insight' && index !== 0
-              }"
-            >
-              <div class="flex items-center gap-2 mb-1">
-                <span class="text-xs font-semibold uppercase" :class="{
-                  'text-blue-700': suggestion.type === 'response',
-                  'text-green-700': suggestion.type === 'action',
-                  'text-purple-700': suggestion.type === 'insight'
-                }">{{ suggestion.type }}</span>
-                <span class="text-xs text-gray-400">just now</span>
-              </div>
-              <p class="leading-relaxed">{{ suggestion.text }}</p>
-            </div>
-          </div>
-        </div>
-
-        <!-- Dialer (when no active call) -->
-        <div v-if="!softphone.currentCall.value && !softphone.incomingCall.value" class="space-y-4">
-          <div>
-            <label class="text-sm font-medium">Phone Number</label>
-            <Input
-              v-model="phoneNumber"
-              placeholder="+1234567890"
-              class="mt-1"
-              @keyup.enter="handleCall"
-            />
-          </div>
-
-          <div class="grid grid-cols-3 gap-2">
-            <Button
-              v-for="digit in ['1', '2', '3', '4', '5', '6', '7', '8', '9', '*', '0', '#']"
-              :key="digit"
-              variant="outline"
-              @click="phoneNumber += digit"
-              class="h-12 text-lg font-semibold"
-            >
-              {{ digit }}
-            </Button>
-          </div>
-
-          <div class="flex gap-2">
-            <Button @click="handleCall" class="flex-1" :disabled="!phoneNumber">
-              <PhoneIcon class="w-4 h-4 mr-2" />
-              Call
-            </Button>
-            <Button @click="phoneNumber = ''" variant="outline">
-              <XIcon class="w-4 h-4" />
-            </Button>
-          </div>
-
-          <!-- Debug: Test AI Suggestions -->
-          <Button @click="testAiSuggestion" variant="outline" size="sm" class="w-full">
-            🧪 Test AI Suggestion
-          </Button>
-
-          <!-- Recent Calls -->
-          <div v-if="softphone.callHistory.value.length > 0" class="space-y-2">
-            <h3 class="text-sm font-semibold">Recent Calls</h3>
-            <div class="space-y-1 max-h-40 overflow-y-auto">
-              <div
-                v-for="call in softphone.callHistory.value.slice(0, 5)"
-                :key="call.callSid"
-                class="flex items-center justify-between p-2 rounded hover:bg-gray-100 cursor-pointer"
-                @click="phoneNumber = call.direction === 'outbound' ? call.toNumber : call.fromNumber"
-              >
-                <div class="flex items-center gap-2">
-                  <PhoneIcon v-if="call.direction === 'outbound'" class="w-3 h-3 text-green-500" />
-                  <PhoneIncomingIcon v-else class="w-3 h-3 text-blue-500" />
-                  <span class="text-sm">
-                    {{ formatPhoneNumber(call.direction === 'outbound' ? call.toNumber : call.fromNumber) }}
-                  </span>
-                </div>
-                <span class="text-xs text-gray-500">{{ formatDuration(call.duration) }}</span>
-              </div>
-            </div>
-          </div>
-        </div>
-      </div>
-    </DialogContent>
-  </Dialog>
-</template>
-
-<script setup lang="ts">
-import { ref } from 'vue';
-import { useSoftphone } from '~/composables/useSoftphone';
-import { Dialog, DialogContent, DialogHeader, DialogTitle } from '~/components/ui/dialog';
-import { Button } from '~/components/ui/button';
-import { Input } from '~/components/ui/input';
-import { PhoneIcon, PhoneOffIcon, PhoneIncomingIcon, MicIcon, MicOffIcon, Hash, XIcon } from 'lucide-vue-next';
-import { toast } from 'vue-sonner';
-
-const softphone = useSoftphone();
-
-const phoneNumber = ref('');
-const showDialpad = ref(false);
-const isMuted = ref(false);
-
-const handleCall = async () => {
-  if (!phoneNumber.value) {
-    toast.error('Please enter a phone number');
-    return;
-  }
-
-  try {
-    await softphone.initiateCall(phoneNumber.value);
-    phoneNumber.value = '';
-    toast.success('Call initiated');
-  } catch (error: any) {
-    toast.error(error.message || 'Failed to initiate call');
-  }
-};
-
-const handleAccept = async () => {
-  if (!softphone.incomingCall.value) return;
-
-  try {
-    await softphone.acceptCall(softphone.incomingCall.value.callSid);
-  } catch (error: any) {
-    toast.error(error.message || 'Failed to accept call');
-  }
-};
-
-const handleReject = async () => {
-  if (!softphone.incomingCall.value) return;
-
-  try {
-    await softphone.rejectCall(softphone.incomingCall.value.callSid);
-  } catch (error: any) {
-    toast.error(error.message || 'Failed to reject call');
-  }
-};
-
-const handleEndCall = async () => {
-  if (!softphone.currentCall.value) return;
-
-  try {
-    await softphone.endCall(softphone.currentCall.value.callSid);
-  } catch (error: any) {
-    toast.error(error.message || 'Failed to end call');
-  }
-};
-
-// Debug: Test AI suggestions display
-const testAiSuggestion = () => {
-  console.log('🧪 Testing AI suggestion display');
-  console.log('Current suggestions:', softphone.aiSuggestions.value);
-  
-  // Add a test suggestion
-  softphone.aiSuggestions.value.unshift({
-    type: 'response',
-    text: '💡 Test suggestion: This is a test AI suggestion to verify UI display'
-  });
-  
-  console.log('After test:', softphone.aiSuggestions.value);
-  toast.success('Test suggestion added');
-};
-
-const handleDtmf = async (digit: string) => {
-  if (!softphone.currentCall.value) return;
-
-  try {
-    await softphone.sendDtmf(softphone.currentCall.value.callSid, digit);
-  } catch (error: any) {
-    console.error('Failed to send DTMF:', error);
-  }
-};
-
-const toggleMute = () => {
-  isMuted.value = !isMuted.value;
-  // TODO: Implement actual audio muting
-  toast.info(isMuted.value ? 'Muted' : 'Unmuted');
-};
-
-const formatPhoneNumber = (number: string): string => {
-  if (!number) return '';
-  // Simple US format
-  const cleaned = number.replace(/\D/g, '');
-  if (cleaned.length === 11 && cleaned[0] === '1') {
-    return `+1 (${cleaned.slice(1, 4)}) ${cleaned.slice(4, 7)}-${cleaned.slice(7)}`;
-  } else if (cleaned.length === 10) {
-    return `(${cleaned.slice(0, 3)}) ${cleaned.slice(3, 6)}-${cleaned.slice(6)}`;
-  }
-  return number;
-};
-
-const formatDuration = (seconds?: number): string => {
-  if (!seconds) return '--:--';
-  const mins = Math.floor(seconds / 60);
-  const secs = seconds % 60;
-  return `${mins}:${secs.toString().padStart(2, '0')}`;
-};
-</script>
--- a/frontend/components/fields/FieldAttributesCommon.vue
+++ b/frontend/components/fields/FieldAttributesCommon.vue
@@ -1,195 +0,0 @@
-<template>
-  <div class="space-y-6">
-    <!-- Label -->
-    <div class="grid grid-cols-4 gap-4">
-      <label class="text-sm font-medium leading-8">Label</label>
-      <div class="col-span-3">
-        <input
-          v-model="formData.label"
-          type="text"
-          placeholder="Display name for this field"
-          class="w-full px-3 py-2 border rounded-md text-sm"
-        />
-      </div>
-    </div>
-
-    <!-- API Name (Read-only if editing existing field) -->
-    <div class="grid grid-cols-4 gap-4">
-      <label class="text-sm font-medium leading-8">API Name</label>
-      <div class="col-span-3">
-        <input
-          v-model="formData.apiName"
-          type="text"
-          placeholder="e.g., accountName"
-          :disabled="isEditing"
-          class="w-full px-3 py-2 border rounded-md text-sm disabled:bg-gray-100 disabled:text-gray-600"
-        />
-        <p v-if="isEditing" class="text-xs text-gray-500 mt-1">
-          Cannot change API name on existing fields
-        </p>
-      </div>
-    </div>
-
-    <!-- Description -->
-    <div class="grid grid-cols-4 gap-4">
-      <label class="text-sm font-medium leading-8">Description</label>
-      <div class="col-span-3">
-        <textarea
-          v-model="formData.description"
-          placeholder="Describe the purpose of this field"
-          rows="3"
-          class="w-full px-3 py-2 border rounded-md text-sm"
-        />
-      </div>
-    </div>
-
-    <!-- Placeholder -->
-    <div class="grid grid-cols-4 gap-4">
-      <label class="text-sm font-medium leading-8">Placeholder</label>
-      <div class="col-span-3">
-        <input
-          v-model="formData.placeholder"
-          type="text"
-          placeholder="e.g., Enter account name"
-          class="w-full px-3 py-2 border rounded-md text-sm"
-        />
-      </div>
-    </div>
-
-    <!-- Help Text -->
-    <div class="grid grid-cols-4 gap-4">
-      <label class="text-sm font-medium leading-8">Help Text</label>
-      <div class="col-span-3">
-        <textarea
-          v-model="formData.helpText"
-          placeholder="Additional guidance for users"
-          rows="2"
-          class="w-full px-3 py-2 border rounded-md text-sm"
-        />
-      </div>
-    </div>
-
-    <!-- Display Order -->
-    <div class="grid grid-cols-4 gap-4">
-      <label class="text-sm font-medium leading-8">Display Order</label>
-      <div class="col-span-3">
-        <input
-          v-model.number="formData.displayOrder"
-          type="number"
-          class="w-full px-3 py-2 border rounded-md text-sm"
-        />
-      </div>
-    </div>
-
-    <!-- Required -->
-    <div class="grid grid-cols-4 gap-4">
-      <label class="text-sm font-medium leading-8">Required</label>
-      <div class="col-span-3 flex items-center">
-        <input
-          v-model="formData.isRequired"
-          type="checkbox"
-          class="w-4 h-4 border rounded"
-        />
-        <span class="ml-2 text-sm text-gray-600">
-          {{ formData.isRequired ? 'Yes, this field is required' : 'No, this field is optional' }}
-        </span>
-        <p v-if="hasData && !wasRequired && formData.isRequired" class="ml-2 text-xs text-red-600">
-          ⚠️ Existing records may have empty values
-        </p>
-      </div>
-    </div>
-
-    <!-- Unique -->
-    <div class="grid grid-cols-4 gap-4">
-      <label class="text-sm font-medium leading-8">Unique</label>
-      <div class="col-span-3 flex items-center">
-        <input
-          v-model="formData.isUnique"
-          type="checkbox"
-          class="w-4 h-4 border rounded"
-        />
-        <span class="ml-2 text-sm text-gray-600">
-          {{ formData.isUnique ? 'Yes, values must be unique' : 'No, duplicate values allowed' }}
-        </span>
-        <p v-if="hasData && !wasUnique && formData.isUnique" class="ml-2 text-xs text-red-600">
-          ⚠️ Existing records may have duplicate values
-        </p>
-      </div>
-    </div>
-
-    <!-- Default Value -->
-    <div class="grid grid-cols-4 gap-4">
-      <label class="text-sm font-medium leading-8">Default Value</label>
-      <div class="col-span-3">
-        <input
-          v-model="formData.defaultValue"
-          type="text"
-          placeholder="Value used when field is not provided"
-          class="w-full px-3 py-2 border rounded-md text-sm"
-        />
-      </div>
-    </div>
-  </div>
-</template>
-
-<script setup lang="ts">
-import { ref, watch, onMounted } from 'vue'
-
-interface Props {
-  label?: string
-  apiName?: string
-  description?: string
-  placeholder?: string
-  helpText?: string
-  displayOrder?: number
-  isRequired?: boolean
-  isUnique?: boolean
-  defaultValue?: string
-  isEditing?: boolean
-  hasData?: boolean
-}
-
-interface Emits {
-  (e: 'update', data: any): void
-}
-
-const props = withDefaults(defineProps<Props>(), {
-  label: '',
-  apiName: '',
-  description: '',
-  placeholder: '',
-  helpText: '',
-  displayOrder: 0,
-  isRequired: false,
-  isUnique: false,
-  defaultValue: '',
-  isEditing: false,
-  hasData: false,
-})
-
-const emit = defineEmits<Emits>()
-
-const formData = ref({
-  label: props.label,
-  apiName: props.apiName,
-  description: props.description,
-  placeholder: props.placeholder,
-  helpText: props.helpText,
-  displayOrder: props.displayOrder,
-  isRequired: props.isRequired,
-  isUnique: props.isUnique,
-  defaultValue: props.defaultValue,
-})
-
-const wasRequired = ref(props.isRequired)
-const wasUnique = ref(props.isUnique)
-
-onMounted(() => {
-  wasRequired.value = props.isRequired
-  wasUnique.value = props.isUnique
-})
-
-watch(formData, (newVal) => {
-  emit('update', newVal)
-}, { deep: true })
-</script>
--- a/frontend/components/fields/FieldAttributesType.vue
+++ b/frontend/components/fields/FieldAttributesType.vue
@@ -1,296 +0,0 @@
-<template>
-  <div class="space-y-6">
-    <!-- Text Field Attributes -->
-    <div v-if="fieldType === 'text'" class="space-y-4">
-      <div class="grid grid-cols-4 gap-4">
-        <label class="text-sm font-medium leading-8">Max Length</label>
-        <div class="col-span-3">
-          <input
-            v-model.number="attributes.maxLength"
-            type="number"
-            min="1"
-            max="65535"
-            placeholder="Maximum character length (default: 255)"
-            class="w-full px-3 py-2 border rounded-md text-sm"
-          />
-        </div>
-      </div>
-    </div>
-
-    <!-- Textarea Attributes -->
-    <div v-if="fieldType === 'textarea'" class="space-y-4">
-      <div class="grid grid-cols-4 gap-4">
-        <label class="text-sm font-medium leading-8">Default Rows</label>
-        <div class="col-span-3">
-          <input
-            v-model.number="attributes.rows"
-            type="number"
-            min="2"
-            max="20"
-            :placeholder="`Default: 4 rows`"
-            class="w-full px-3 py-2 border rounded-md text-sm"
-          />
-        </div>
-      </div>
-    </div>
-
-    <!-- Number Field Attributes -->
-    <div v-if="fieldType === 'number'" class="space-y-4">
-      <div class="grid grid-cols-4 gap-4">
-        <label class="text-sm font-medium leading-8">Decimal Places</label>
-        <div class="col-span-3">
-          <input
-            v-model.number="attributes.scale"
-            type="number"
-            min="0"
-            max="10"
-            placeholder="0 for integers, 2 for decimals"
-            class="w-full px-3 py-2 border rounded-md text-sm"
-          />
-        </div>
-      </div>
-      <div class="grid grid-cols-4 gap-4">
-        <label class="text-sm font-medium leading-8">Min Value</label>
-        <div class="col-span-3">
-          <input
-            v-model.number="attributes.min"
-            type="number"
-            placeholder="Minimum allowed value"
-            class="w-full px-3 py-2 border rounded-md text-sm"
-          />
-        </div>
-      </div>
-      <div class="grid grid-cols-4 gap-4">
-        <label class="text-sm font-medium leading-8">Max Value</label>
-        <div class="col-span-3">
-          <input
-            v-model.number="attributes.max"
-            type="number"
-            placeholder="Maximum allowed value"
-            class="w-full px-3 py-2 border rounded-md text-sm"
-          />
-        </div>
-      </div>
-    </div>
-
-    <!-- Currency Field Attributes -->
-    <div v-if="fieldType === 'currency'" class="space-y-4">
-      <div class="grid grid-cols-4 gap-4">
-        <label class="text-sm font-medium leading-8">Currency Symbol</label>
-        <div class="col-span-3">
-          <input
-            v-model="attributes.prefix"
-            type="text"
-            placeholder="e.g., $, €, ¥"
-            class="w-full px-3 py-2 border rounded-md text-sm"
-          />
-        </div>
-      </div>
-      <div class="grid grid-cols-4 gap-4">
-        <label class="text-sm font-medium leading-8">Decimal Places</label>
-        <div class="col-span-3">
-          <input
-            v-model.number="attributes.scale"
-            type="number"
-            min="0"
-            max="4"
-            placeholder="Default: 2"
-            class="w-full px-3 py-2 border rounded-md text-sm"
-          />
-        </div>
-      </div>
-      <div class="grid grid-cols-4 gap-4">
-        <label class="text-sm font-medium leading-8">Min Value</label>
-        <div class="col-span-3">
-          <input
-            v-model.number="attributes.min"
-            type="number"
-            placeholder="Minimum allowed value"
-            class="w-full px-3 py-2 border rounded-md text-sm"
-          />
-        </div>
-      </div>
-      <div class="grid grid-cols-4 gap-4">
-        <label class="text-sm font-medium leading-8">Max Value</label>
-        <div class="col-span-3">
-          <input
-            v-model.number="attributes.max"
-            type="number"
-            placeholder="Maximum allowed value"
-            class="w-full px-3 py-2 border rounded-md text-sm"
-          />
-        </div>
-      </div>
-    </div>
-
-    <!-- Select/Picklist Attributes -->
-    <div v-if="fieldType === 'select' || fieldType === 'multiSelect'" class="space-y-4">
-      <div class="border rounded-lg p-4 bg-gray-50">
-        <div class="flex items-center justify-between mb-4">
-          <label class="text-sm font-medium">Options</label>
-          <button
-            type="button"
-            @click="addOption"
-            class="text-xs px-3 py-1 bg-blue-600 text-white rounded hover:bg-blue-700"
-          >
-            Add Option
-          </button>
-        </div>
-        
-        <div class="space-y-2">
-          <div
-            v-for="(option, index) in attributes.options"
-            :key="index"
-            class="flex gap-2 items-center bg-white p-3 rounded border"
-          >
-            <input
-              v-model="option.value"
-              type="text"
-              placeholder="Value"
-              class="flex-1 px-2 py-1 border rounded text-sm"
-            />
-            <input
-              v-model="option.label"
-              type="text"
-              placeholder="Label"
-              class="flex-1 px-2 py-1 border rounded text-sm"
-            />
-            <button
-              type="button"
-              @click="removeOption(index)"
-              class="text-red-600 hover:text-red-800 text-sm font-medium"
-            >
-              Remove
-            </button>
-          </div>
-        </div>
-
-        <p v-if="!attributes.options || attributes.options.length === 0" class="text-sm text-gray-500 mt-4">
-          No options defined yet
-        </p>
-      </div>
-    </div>
-
-    <!-- Date Field Attributes -->
-    <div v-if="fieldType === 'date' || fieldType === 'datetime'" class="space-y-4">
-      <div class="grid grid-cols-4 gap-4">
-        <label class="text-sm font-medium leading-8">Include Time</label>
-        <div class="col-span-3 flex items-center">
-          <input
-            v-if="fieldType === 'datetime'"
-            :checked="true"
-            type="checkbox"
-            disabled
-            class="w-4 h-4 border rounded"
-          />
-          <span class="ml-2 text-sm text-gray-600">{{ fieldType === 'datetime' ? 'Yes' : 'No' }}</span>
-        </div>
-      </div>
-    </div>
-
-    <!-- Lookup Field Attributes -->
-    <div v-if="fieldType === 'lookup' || fieldType === 'belongsTo'" class="space-y-4">
-      <div class="grid grid-cols-4 gap-4">
-        <label class="text-sm font-medium leading-8">Related Object</label>
-        <div class="col-span-3">
-          <input
-            v-model="attributes.relationObject"
-            type="text"
-            disabled
-            placeholder="Selected during field creation"
-            class="w-full px-3 py-2 border rounded-md text-sm bg-gray-100 disabled:text-gray-600"
-          />
-          <p class="text-xs text-gray-500 mt-1">Cannot change relationship after creation</p>
-        </div>
-      </div>
-      <div class="grid grid-cols-4 gap-4">
-        <label class="text-sm font-medium leading-8">Display Field</label>
-        <div class="col-span-3">
-          <input
-            v-model="attributes.relationDisplayField"
-            type="text"
-            placeholder="e.g., name, label (field to show in lookup)"
-            class="w-full px-3 py-2 border rounded-md text-sm"
-          />
-          <p class="text-xs text-gray-500 mt-1">Which field from the related object to display</p>
-        </div>
-      </div>
-    </div>
-  </div>
-</template>
-
-<script setup lang="ts">
-import { ref, watch } from 'vue'
-
-interface FieldOption {
-  value: string | number
-  label: string
-}
-
-interface TypeAttributes {
-  maxLength?: number
-  rows?: number
-  scale?: number
-  min?: number
-  max?: number
-  prefix?: string
-  suffix?: string
-  options?: FieldOption[]
-  relationObject?: string
-  relationDisplayField?: string
-}
-
-interface Props {
-  fieldType: string
-  attributes?: TypeAttributes
-}
-
-interface Emits {
-  (e: 'update', data: TypeAttributes): void
-}
-
-const props = withDefaults(defineProps<Props>(), {
-  fieldType: 'text',
-  attributes: () => ({}),
-})
-
-const emit = defineEmits<Emits>()
-
-const attributes = ref<TypeAttributes>({
-  ...props.attributes,
-})
-
-watch(
-  () => props.fieldType,
-  (newType) => {
-    // Reset attributes when field type changes
-    attributes.value = {}
-  },
-)
-
-const addOption = () => {
-  if (!attributes.value.options) {
-    attributes.value.options = []
-  }
-  attributes.value.options.push({
-    value: '',
-    label: '',
-  })
-  emit('update', attributes.value)
-}
-
-const removeOption = (index: number) => {
-  if (attributes.value.options) {
-    attributes.value.options.splice(index, 1)
-    emit('update', attributes.value)
-  }
-}
-
-watch(
-  attributes,
-  (newVal) => {
-    emit('update', newVal)
-  },
-  { deep: true },
-)
-</script>
--- a/frontend/components/fields/FieldRenderer.vue
+++ b/frontend/components/fields/FieldRenderer.vue
@@ -21,8 +21,7 @@ interface Props {
 }

 const props = withDefaults(defineProps<Props>(), {
-  // Default to runtime objects endpoint; override when consuming central entities
-  baseUrl: '/runtime/objects',
+  baseUrl: '/central',
 })

 const emit = defineEmits<{
--- a/frontend/components/fields/FieldTypeSelector.vue
+++ b/frontend/components/fields/FieldTypeSelector.vue
@@ -1,140 +0,0 @@
-<template>
-  <div class="space-y-4">
-    <label class="text-sm font-medium">Field Type</label>
-    
-    <div class="grid grid-cols-2 gap-4">
-      <!-- Text Fields -->
-      <div class="border rounded-lg p-4 cursor-pointer hover:bg-blue-50"
-        :class="{ 'bg-blue-100 border-blue-500': modelValue === 'text' }"
-        @click="$emit('update:modelValue', 'text')">
-        <div class="font-medium text-sm">Text</div>
-        <div class="text-xs text-gray-600">Single line text input</div>
-      </div>
-
-      <div class="border rounded-lg p-4 cursor-pointer hover:bg-blue-50"
-        :class="{ 'bg-blue-100 border-blue-500': modelValue === 'textarea' }"
-        @click="$emit('update:modelValue', 'textarea')">
-        <div class="font-medium text-sm">Textarea</div>
-        <div class="text-xs text-gray-600">Multi-line text input</div>
-      </div>
-
-      <!-- Email & Phone -->
-      <div class="border rounded-lg p-4 cursor-pointer hover:bg-blue-50"
-        :class="{ 'bg-blue-100 border-blue-500': modelValue === 'email' }"
-        @click="$emit('update:modelValue', 'email')">
-        <div class="font-medium text-sm">Email</div>
-        <div class="text-xs text-gray-600">Email with validation</div>
-      </div>
-
-      <div class="border rounded-lg p-4 cursor-pointer hover:bg-blue-50"
-        :class="{ 'bg-blue-100 border-blue-500': modelValue === 'phone' }"
-        @click="$emit('update:modelValue', 'phone')">
-        <div class="font-medium text-sm">Phone</div>
-        <div class="text-xs text-gray-600">Phone number input</div>
-      </div>
-
-      <!-- Numeric Fields -->
-      <div class="border rounded-lg p-4 cursor-pointer hover:bg-blue-50"
-        :class="{ 'bg-blue-100 border-blue-500': modelValue === 'number' }"
-        @click="$emit('update:modelValue', 'number')">
-        <div class="font-medium text-sm">Number</div>
-        <div class="text-xs text-gray-600">Integer or decimal</div>
-      </div>
-
-      <div class="border rounded-lg p-4 cursor-pointer hover:bg-blue-50"
-        :class="{ 'bg-blue-100 border-blue-500': modelValue === 'currency' }"
-        @click="$emit('update:modelValue', 'currency')">
-        <div class="font-medium text-sm">Currency</div>
-        <div class="text-xs text-gray-600">Money amount with symbol</div>
-      </div>
-
-      <!-- Selection Fields -->
-      <div class="border rounded-lg p-4 cursor-pointer hover:bg-blue-50"
-        :class="{ 'bg-blue-100 border-blue-500': modelValue === 'select' }"
-        @click="$emit('update:modelValue', 'select')">
-        <div class="font-medium text-sm">Picklist</div>
-        <div class="text-xs text-gray-600">Dropdown with predefined options</div>
-      </div>
-
-      <div class="border rounded-lg p-4 cursor-pointer hover:bg-blue-50"
-        :class="{ 'bg-blue-100 border-blue-500': modelValue === 'multiSelect' }"
-        @click="$emit('update:modelValue', 'multiSelect')">
-        <div class="font-medium text-sm">Multi-select</div>
-        <div class="text-xs text-gray-600">Select multiple options</div>
-      </div>
-
-      <!-- Boolean -->
-      <div class="border rounded-lg p-4 cursor-pointer hover:bg-blue-50"
-        :class="{ 'bg-blue-100 border-blue-500': modelValue === 'boolean' }"
-        @click="$emit('update:modelValue', 'boolean')">
-        <div class="font-medium text-sm">Checkbox</div>
-        <div class="text-xs text-gray-600">True/False toggle</div>
-      </div>
-
-      <!-- Date Fields -->
-      <div class="border rounded-lg p-4 cursor-pointer hover:bg-blue-50"
-        :class="{ 'bg-blue-100 border-blue-500': modelValue === 'date' }"
-        @click="$emit('update:modelValue', 'date')">
-        <div class="font-medium text-sm">Date</div>
-        <div class="text-xs text-gray-600">Date picker without time</div>
-      </div>
-
-      <div class="border rounded-lg p-4 cursor-pointer hover:bg-blue-50"
-        :class="{ 'bg-blue-100 border-blue-500': modelValue === 'datetime' }"
-        @click="$emit('update:modelValue', 'datetime')">
-        <div class="font-medium text-sm">DateTime</div>
-        <div class="text-xs text-gray-600">Date and time picker</div>
-      </div>
-
-      <!-- Relationship Fields -->
-      <div class="border rounded-lg p-4 cursor-pointer hover:bg-blue-50"
-        :class="{ 'bg-blue-100 border-blue-500': modelValue === 'lookup' }"
-        @click="$emit('update:modelValue', 'lookup')">
-        <div class="font-medium text-sm">Lookup</div>
-        <div class="text-xs text-gray-600">Link to another object</div>
-      </div>
-
-      <!-- Rich Content -->
-      <div class="border rounded-lg p-4 cursor-pointer hover:bg-blue-50"
-        :class="{ 'bg-blue-100 border-blue-500': modelValue === 'markdown' }"
-        @click="$emit('update:modelValue', 'markdown')">
-        <div class="font-medium text-sm">Rich Text</div>
-        <div class="text-xs text-gray-600">Markdown editor</div>
-      </div>
-
-      <!-- File -->
-      <div class="border rounded-lg p-4 cursor-pointer hover:bg-blue-50"
-        :class="{ 'bg-blue-100 border-blue-500': modelValue === 'file' }"
-        @click="$emit('update:modelValue', 'file')">
-        <div class="font-medium text-sm">File</div>
-        <div class="text-xs text-gray-600">File upload</div>
-      </div>
-
-      <!-- URL -->
-      <div class="border rounded-lg p-4 cursor-pointer hover:bg-blue-50"
-        :class="{ 'bg-blue-100 border-blue-500': modelValue === 'url' }"
-        @click="$emit('update:modelValue', 'url')">
-        <div class="font-medium text-sm">URL</div>
-        <div class="text-xs text-gray-600">Web address with validation</div>
-      </div>
-
-      <!-- Color -->
-      <div class="border rounded-lg p-4 cursor-pointer hover:bg-blue-50"
-        :class="{ 'bg-blue-100 border-blue-500': modelValue === 'color' }"
-        @click="$emit('update:modelValue', 'color')">
-        <div class="font-medium text-sm">Color</div>
-        <div class="text-xs text-gray-600">Color picker</div>
-      </div>
-    </div>
-  </div>
-</template>
-
-<script setup lang="ts">
-defineProps<{
-  modelValue: string
-}>()
-
-defineEmits<{
-  'update:modelValue': [value: string]
-}>()
-</script>
--- a/frontend/components/fields/LookupField.vue
+++ b/frontend/components/fields/LookupField.vue
@@ -16,8 +16,7 @@ interface Props {
 }

 const props = withDefaults(defineProps<Props>(), {
-  // Default to runtime objects endpoint; override when consuming central entities
-  baseUrl: '/runtime/objects',
+  baseUrl: '/central',
  modelValue: null,
 })

--- a/frontend/components/views/DetailViewEnhanced.vue
+++ b/frontend/components/views/DetailViewEnhanced.vue
@@ -2,11 +2,9 @@
 import { computed, ref, onMounted } from 'vue'
 import { Card, CardContent, CardDescription, CardHeader, CardTitle } from '@/components/ui/card'
 import { Button } from '@/components/ui/button'
-import { Tabs, TabsContent, TabsList, TabsTrigger } from '@/components/ui/tabs'
 import FieldRenderer from '@/components/fields/FieldRenderer.vue'
 import PageLayoutRenderer from '@/components/PageLayoutRenderer.vue'
 import RelatedList from '@/components/RelatedList.vue'
-import RecordSharing from '@/components/RecordSharing.vue'
 import { DetailViewConfig, ViewMode, FieldSection, FieldConfig, RelatedListConfig } from '@/types/field-types'
 import { Edit, Trash2, ArrowLeft } from 'lucide-vue-next'
 import {
@@ -22,13 +20,11 @@ interface Props {
  loading?: boolean
  objectId?: string // For fetching page layout
  baseUrl?: string
-  showSharing?: boolean
 }

 const props = withDefaults(defineProps<Props>(), {
  loading: false,
  baseUrl: '/runtime/objects',
-  showSharing: true,
 })

 const emit = defineEmits<{
@@ -134,123 +130,91 @@ const usePageLayout = computed(() => {
      <div class="animate-spin rounded-full h-12 w-12 border-b-2 border-primary"></div>
    </div>

-    <!-- Tabs for Details, Related, and Sharing -->
-    <Tabs v-else default-value="details" class="space-y-6">
-      <TabsList>
-        <TabsTrigger value="details">Details</TabsTrigger>
-        <TabsTrigger v-if="config.relatedLists && config.relatedLists.length > 0" value="related">
-          Related
-        </TabsTrigger>
-        <TabsTrigger v-if="showSharing && data.id" value="sharing">
-          Sharing
-        </TabsTrigger>
-      </TabsList>
+    <!-- Content with Page Layout -->
+    <Card v-else-if="usePageLayout">
+      <CardHeader>
+        <CardTitle>Details</CardTitle>
+      </CardHeader>
+      <CardContent>
+        <PageLayoutRenderer
+          :fields="config.fields"
+          :layout="pageLayout"
+          :model-value="data"
+          :readonly="true"
+        />
+      </CardContent>
+    </Card>

-      <!-- Details Tab -->
-      <TabsContent value="details" class="space-y-6">
-        <!-- Content with Page Layout -->
-        <Card v-if="usePageLayout">
+    <!-- Traditional Section-based Layout -->
+    <div v-else class="space-y-6">
+      <Card v-for="(section, idx) in sections" :key="idx">
+        <Collapsible
+          v-if="section.collapsible"
+          :default-open="!section.defaultCollapsed"
+        >
          <CardHeader>
-            <CardTitle>Details</CardTitle>
-          </CardHeader>
-          <CardContent>
-            <PageLayoutRenderer
-              :fields="config.fields"
-              :layout="pageLayout"
-              :model-value="data"
-              :readonly="true"
-            />
-          </CardContent>
-        </Card>
-
-        <!-- Traditional Section-based Layout -->
-        <div v-else class="space-y-6">
-          <Card v-for="(section, idx) in sections" :key="idx">
-            <Collapsible
-              v-if="section.collapsible"
-              :default-open="!section.defaultCollapsed"
-            >
-              <CardHeader>
-                <CollapsibleTrigger class="flex items-center justify-between w-full hover:bg-muted/50 -m-2 p-2 rounded">
-                  <div>
-                    <CardTitle v-if="section.title">{{ section.title }}</CardTitle>
-                    <CardDescription v-if="section.description">
-                      {{ section.description }}
-                    </CardDescription>
-                  </div>
-                </CollapsibleTrigger>
-              </CardHeader>
-              <CollapsibleContent>
-                <CardContent>
-                  <div class="grid gap-6 md:grid-cols-2">
-                    <FieldRenderer
-                      v-for="field in getFieldsBySection(section)"
-                      :key="field.id"
-                      :field="field"
-                      :model-value="data[field.apiName]"
-                      :record-data="data"
-                      :mode="ViewMode.DETAIL"
-                      :base-url="baseUrl"
-                    />
-                  </div>
-                </CardContent>
-              </CollapsibleContent>
-            </Collapsible>
-
-            <template v-else>
-              <CardHeader v-if="section.title || section.description">
+            <CollapsibleTrigger class="flex items-center justify-between w-full hover:bg-muted/50 -m-2 p-2 rounded">
+              <div>
                <CardTitle v-if="section.title">{{ section.title }}</CardTitle>
                <CardDescription v-if="section.description">
                  {{ section.description }}
                </CardDescription>
-              </CardHeader>
-              <CardContent>
-                <div class="grid gap-6 md:grid-cols-2">
-                  <FieldRenderer
-                    v-for="field in getFieldsBySection(section)"
-                    :key="field?.id"
-                    :field="field"
-                    :model-value="data[field.apiName]"
-                    :record-data="data"
-                    :mode="ViewMode.DETAIL"
-                    :base-url="baseUrl"
-                  />
-                </div>
-              </CardContent>
-            </template>
-          </Card>
-        </div>
-      </TabsContent>
+              </div>
+            </CollapsibleTrigger>
+          </CardHeader>
+          <CollapsibleContent>
+            <CardContent>
+              <div class="grid gap-6 md:grid-cols-2">
+                <FieldRenderer
+                  v-for="field in getFieldsBySection(section)"
+                  :key="field.id"
+                  :field="field"
+                  :model-value="data[field.apiName]"
+                  :record-data="data"
+                  :mode="ViewMode.DETAIL"
+                  :base-url="baseUrl"
+                />
+              </div>
+            </CardContent>
+          </CollapsibleContent>
+        </Collapsible>

-      <!-- Related Lists Tab -->
-      <TabsContent value="related" class="space-y-6">
-        <div v-if="config.relatedLists && config.relatedLists.length > 0">
-          <RelatedList
-            v-for="relatedList in config.relatedLists"
-            :key="relatedList.relationName"
-            :config="relatedList"
-            :parent-id="data.id"
-            :related-records="data[relatedList.relationName]"
-            @navigate="(objectApiName, recordId) => emit('navigate', objectApiName, recordId)"
-            @create="(objectApiName, parentId) => emit('createRelated', objectApiName, parentId)"
-          />
-        </div>
-      </TabsContent>
-
-      <!-- Sharing Tab -->
-      <TabsContent value="sharing">
-        <Card>
-          <CardContent class="pt-6">
-            <RecordSharing
-              v-if="data.id && config.objectApiName"
-              :object-api-name="config.objectApiName"
-              :record-id="data.id"
-              :owner-id="data.ownerId"
-            />
+        <template v-else>
+          <CardHeader v-if="section.title || section.description">
+            <CardTitle v-if="section.title">{{ section.title }}</CardTitle>
+            <CardDescription v-if="section.description">
+              {{ section.description }}
+            </CardDescription>
+          </CardHeader>
+          <CardContent>
+            <div class="grid gap-6 md:grid-cols-2">
+              <FieldRenderer
+                v-for="field in getFieldsBySection(section)"
+                :key="field?.id"
+                :field="field"
+                :model-value="data[field.apiName]"
+                :record-data="data"
+                :mode="ViewMode.DETAIL"
+                :base-url="baseUrl"
+              />
+            </div>
          </CardContent>
-        </Card>
-      </TabsContent>
-    </Tabs>
+        </template>
+      </Card>
+    </div>
+
+    <!-- Related Lists -->
+    <div v-if="config.relatedLists && config.relatedLists.length > 0" class="space-y-6">
+      <RelatedList
+        v-for="relatedList in config.relatedLists"
+        :key="relatedList.relationName"
+        :config="relatedList"
+        :parent-id="data.id"
+        :related-records="data[relatedList.relationName]"
+        @navigate="(objectApiName, recordId) => emit('navigate', objectApiName, recordId)"
+        @create="(objectApiName, parentId) => emit('createRelated', objectApiName, parentId)"
+      />
+    </div>
  </div>
 </template>

--- a/frontend/composables/useApi.ts
+++ b/frontend/composables/useApi.ts
@@ -10,8 +10,7 @@ export const useApi = () => {
      // In browser, use current hostname but with port 3000 for API
      const currentHost = window.location.hostname
      const protocol = window.location.protocol
-      //return `${protocol}//${currentHost}:3000`
-      return `${protocol}//${currentHost}`
+      return `${protocol}//${currentHost}:3000`
    }
    // Fallback for SSR
    return config.public.apiBaseUrl
--- a/frontend/composables/useSoftphone.ts
+++ b/frontend/composables/useSoftphone.ts
@@ -1,611 +0,0 @@
-import { ref, computed, onMounted, onUnmounted, shallowRef } from 'vue';
-import { io, Socket } from 'socket.io-client';
-import { Device, Call as TwilioCall } from '@twilio/voice-sdk';
-import { useAuth } from './useAuth';
-import { toast } from 'vue-sonner';
-
-interface Call {
-  callSid: string;
-  direction: 'inbound' | 'outbound';
-  fromNumber: string;
-  toNumber: string;
-  status: string;
-  startedAt?: string;
-  duration?: number;
-}
-
-interface CallTranscript {
-  text: string;
-  isFinal: boolean;
-  timestamp: number;
-}
-
-interface AiSuggestion {
-  type: 'response' | 'action' | 'insight';
-  text: string;
-  data?: any;
-}
-
-// Module-level shared state for global access
-const socket = ref<Socket | null>(null);
-const twilioDevice = shallowRef<Device | null>(null);
-const twilioCall = shallowRef<TwilioCall | null>(null);
-const isConnected = ref(false);
-const isOpen = ref(false);
-const currentCall = ref<Call | null>(null);
-const incomingCall = ref<Call | null>(null);
-const transcript = ref<CallTranscript[]>([]);
-const aiSuggestions = ref<AiSuggestion[]>([]);
-const callHistory = ref<Call[]>([]);
-const isInitialized = ref(false);
-const isMuted = ref(false);
-const volume = ref(100);
-
-export function useSoftphone() {
-  const auth = useAuth();
-
-  // Get token and tenantId from localStorage
-  const getToken = () => {
-    if (typeof window === 'undefined') return null;
-    return localStorage.getItem('token');
-  };
-
-  const getTenantId = () => {
-    if (typeof window === 'undefined') return null;
-    return localStorage.getItem('tenantId');
-  };
-
-  // Computed properties
-  const isInCall = computed(() => currentCall.value !== null);
-  const hasIncomingCall = computed(() => incomingCall.value !== null);
-  const callStatus = computed(() => currentCall.value?.status || 'idle');
-
-  /**
-   * Request microphone permission explicitly
-   */
-  const requestMicrophonePermission = async () => {
-    try {
-      // Check if mediaDevices is supported
-      if (!navigator.mediaDevices || !navigator.mediaDevices.getUserMedia) {
-        toast.error('Microphone access requires HTTPS. Please access the app via https:// or use localhost for testing.');
-        console.error('navigator.mediaDevices not available. This typically means the page is not served over HTTPS.');
-        return false;
-      }
-
-      const stream = await navigator.mediaDevices.getUserMedia({ audio: true });
-      // Stop the stream immediately, we just wanted the permission
-      stream.getTracks().forEach(track => track.stop());
-      return true;
-    } catch (error: any) {
-      console.error('Microphone permission denied:', error);
-      if (error.name === 'NotAllowedError') {
-        toast.error('Microphone access denied. Please allow microphone access in your browser settings.');
-      } else if (error.name === 'NotFoundError') {
-        toast.error('No microphone found. Please connect a microphone and try again.');
-      } else {
-        toast.error('Microphone access is required for calls. Please ensure you are using HTTPS or localhost.');
-      }
-      return false;
-    }
-  };
-
-  /**
-   * Initialize Twilio Device
-   */
-  const initializeTwilioDevice = async () => {
-    try {
-      // First, explicitly request microphone permission
-      const hasPermission = await requestMicrophonePermission();
-      if (!hasPermission) {
-        return;
-      }
-
-      const { api } = useApi();
-      const response = await api.get('/voice/token');
-      const token = response.data.token;
-      
-      // Log the token payload to see what identity is being used
-      try {
-        const tokenPayload = JSON.parse(atob(token.split('.')[1]));
-      } catch (e) {
-        console.log('Could not parse token payload');
-      }
-
-      twilioDevice.value = new Device(token, {
-        logLevel: 3,
-        codecPreferences: ['opus', 'pcmu'],
-        enableImprovedSignalingErrorPrecision: true,
-        edge: 'ashburn',
-      });
-
-      // Device events
-      twilioDevice.value.on('registered', () => {
-        toast.success('Softphone ready');
-      });
-
-      twilioDevice.value.on('unregistered', () => {
-      });
-
-      twilioDevice.value.on('error', (error) => {
-        console.error('❌ Twilio Device error:', error);
-        toast.error('Device error: ' + error.message);
-      });
-
-      twilioDevice.value.on('incoming', (call: TwilioCall) => {
-        twilioCall.value = call;
-
-        // Update state
-        incomingCall.value = {
-          callSid: call.parameters.CallSid || '',
-          direction: 'inbound',
-          fromNumber: call.parameters.From || '',
-          toNumber: call.parameters.To || '',
-          status: 'ringing',
-        };
-
-        // Open softphone dialog
-        isOpen.value = true;
-
-        // Show notification
-        toast.info(`Incoming call from ${incomingCall.value.fromNumber}`, {
-          duration: 30000,
-        });
-
-        // Setup call handlers
-        setupCallHandlers(call);
-
-        // Twilio Device will handle ringtone automatically
-      });
-
-      // Register the device
-      await twilioDevice.value.register();
-      
-    } catch (error: any) {
-      console.error('Failed to initialize Twilio Device:', error);
-      toast.error('Failed to initialize voice device: ' + error.message);
-    }
-  };
-
-  /**
-   * Setup handlers for a Twilio call
-   */
-  const setupCallHandlers = (call: TwilioCall) => {
-    call.on('accept', () => {
-      console.log('Call accepted');
-      currentCall.value = {
-        callSid: call.parameters.CallSid || '',
-        direction: twilioCall.value === call ? 'inbound' : 'outbound',
-        fromNumber: call.parameters.From || '',
-        toNumber: call.parameters.To || '',
-        status: 'in-progress',
-        startedAt: new Date().toISOString(),
-      };
-      incomingCall.value = null;
-    });
-
-    call.on('disconnect', () => {
-      console.log('Call disconnected');
-      currentCall.value = null;
-      twilioCall.value = null;
-    });
-
-    call.on('cancel', () => {
-      console.log('Call cancelled');
-      incomingCall.value = null;
-      twilioCall.value = null;
-    });
-
-    call.on('reject', () => {
-      console.log('Call rejected');
-      incomingCall.value = null;
-      twilioCall.value = null;
-    });
-
-    call.on('error', (error) => {
-      console.error('Call error:', error);
-      toast.error('Call error: ' + error.message);
-    });
-  };
-
-  /**
-   * Initialize WebSocket connection
-   */
-  const connect = () => {
-    const token = getToken();
-    
-    if (socket.value?.connected || !token) {
-      return;
-    }
-
-    // Use same pattern as useApi to preserve subdomain for multi-tenant
-    const getBackendUrl = () => {
-      if (typeof window !== 'undefined') {
-        const currentHost = window.location.hostname;
-        const protocol = window.location.protocol;
-        return `${protocol}//${currentHost}`;
-      }
-      return 'http://localhost:3000';
-    };
-
-    // Connect to /voice namespace with proper auth header
-    socket.value = io(`${getBackendUrl()}/voice`, {
-      auth: {
-        token: token,
-      },
-      transports: ['websocket', 'polling'],
-      reconnection: true,
-      reconnectionDelay: 1000,
-      reconnectionDelayMax: 5000,
-      reconnectionAttempts: 5,
-      query: {}, // Explicitly set empty query to prevent token leaking
-    });
-
-    // Connection events
-    socket.value.on('connect', () => {
-      isConnected.value = true;
-      
-      // Initialize Twilio Device after WebSocket connects
-      // Suppress warnings by catching them before they log
-      initializeTwilioDevice().catch(err => {
-        // Device initialization errors are already shown to user via toast
-        console.debug('Device init issue (non-critical):', err.message);
-      });
-    });
-
-    socket.value.on('disconnect', () => {
-      isConnected.value = false;
-    });
-
-    socket.value.on('connect_error', (error) => {
-      toast.error('Failed to connect to voice service');
-    });
-
-    // Call events
-    socket.value.on('call:incoming', handleIncomingCall);
-    socket.value.on('call:initiated', handleCallInitiated);
-    socket.value.on('call:accepted', handleCallAccepted);
-    socket.value.on('call:rejected', handleCallRejected);
-    socket.value.on('call:ended', handleCallEnded);
-    socket.value.on('call:update', handleCallUpdate);
-    socket.value.on('call:error', handleCallError);
-    socket.value.on('call:state', handleCallState);
-
-    // AI events
-    socket.value.on('ai:transcript', handleAiTranscript);
-    socket.value.on('ai:suggestion', (data: any) => {
-      console.log('🎯 AI Suggestion received:', data.text);
-      handleAiSuggestion(data);
-    });
-    socket.value.on('ai:action', handleAiAction);
-
-    isInitialized.value = true;
-  };
-
-  /**
-   * Disconnect WebSocket
-   */
-  const disconnect = () => {
-    if (socket.value) {
-      socket.value.disconnect();
-      socket.value = null;
-      isConnected.value = false;
-      isInitialized.value = false;
-    }
-  };
-
-  /**
-   * Open softphone dialog
-   */
-  const open = () => {
-    if (!isInitialized.value) {
-      connect();
-    }
-    isOpen.value = true;
-  };
-
-  /**
-   * Close softphone dialog
-   */
-  const close = () => {
-    isOpen.value = false;
-  };
-
-  /**
-   * Initiate outbound call using Twilio Device
-   */
-  const initiateCall = async (toNumber: string) => {
-    if (!twilioDevice.value) {
-      toast.error('Voice device not initialized');
-      return;
-    }
-
-    try {
-      // Make call using Twilio Device
-      const call = await twilioDevice.value.connect({
-        params: {
-          To: toNumber,
-        }
-      });
-
-      twilioCall.value = call;
-      setupCallHandlers(call);
-
-      toast.success('Calling ' + toNumber);
-    } catch (error: any) {
-      console.error('Failed to initiate call:', error);
-      toast.error('Failed to initiate call: ' + error.message);
-      throw error;
-    }
-  };
-
-  /**
-   * Accept incoming call
-   */
-  const acceptCall = async (callSid: string) => {
-    console.log('📞 Accepting call - callSid:', callSid);
-    console.log('twilioCall.value:', twilioCall.value);
-    
-    if (!twilioCall.value) {
-      console.error('❌ No incoming call to accept - twilioCall.value is null');
-      toast.error('No incoming call');
-      return;
-    }
-
-    try {
-      console.log('Calling twilioCall.value.accept()...');
-      await twilioCall.value.accept();
-      console.log('✓ Call accepted successfully');
-      toast.success('Call accepted');
-    } catch (error: any) {
-      console.error('❌ Failed to accept call:', error);
-      toast.error('Failed to accept call: ' + error.message);
-    }
-  };
-
-  /**
-   * Reject incoming call
-   */
-  const rejectCall = async (callSid: string) => {
-    if (!twilioCall.value) {
-      toast.error('No incoming call');
-      return;
-    }
-
-    try {
-      twilioCall.value.reject();
-      incomingCall.value = null;
-      twilioCall.value = null;
-      toast.info('Call rejected');
-    } catch (error: any) {
-      console.error('Failed to reject call:', error);
-      toast.error('Failed to reject call: ' + error.message);
-    }
-  };
-
-  /**
-   * End active call
-   */
-  const endCall = async (callSid: string) => {
-    if (!twilioCall.value) {
-      toast.error('No active call');
-      return;
-    }
-
-    try {
-      twilioCall.value.disconnect();
-      currentCall.value = null;
-      twilioCall.value = null;
-      toast.info('Call ended');
-    } catch (error: any) {
-      console.error('Failed to end call:', error);
-      toast.error('Failed to end call: ' + error.message);
-    }
-  };
-
-  /**
-   * Toggle mute
-   */
-  const toggleMute = () => {
-    if (!twilioCall.value) return;
-    
-    isMuted.value = !isMuted.value;
-    twilioCall.value.mute(isMuted.value);
-  };
-
-  /**
-   * Send DTMF tone
-   */
-  const sendDtmf = async (callSid: string, digit: string) => {
-    if (!twilioCall.value) {
-      return;
-    }
-
-    twilioCall.value.sendDigits(digit);
-  };
-
-  // Event handlers
-  const handleIncomingCall = (data: Call) => {
-    // Socket.IO notification that a call is coming
-    // The actual call object will come from Twilio Device SDK's 'incoming' event
-    console.log('Socket.IO call notification:', data);
-    // Don't set incomingCall here - wait for the Device SDK incoming event
-  };
-
-  const handleCallInitiated = (data: any) => {
-    console.log('Call initiated:', data);
-    currentCall.value = {
-      callSid: data.callSid,
-      direction: 'outbound',
-      fromNumber: '',
-      toNumber: data.toNumber,
-      status: data.status,
-    };
-    transcript.value = [];
-    aiSuggestions.value = [];
-  };
-
-  const handleCallAccepted = (data: any) => {
-    console.log('Call accepted:', data);
-    if (incomingCall.value?.callSid === data.callSid) {
-      currentCall.value = incomingCall.value;
-      if (currentCall.value) {
-        currentCall.value.status = 'in-progress';
-      }
-      incomingCall.value = null;
-    }
-    stopRingtone();
-  };
-
-  const handleCallRejected = (data: any) => {
-    console.log('Call rejected:', data);
-    if (incomingCall.value?.callSid === data.callSid) {
-      incomingCall.value = null;
-    }
-    stopRingtone();
-  };
-
-  const handleCallEnded = (data: any) => {
-    console.log('Call ended:', data);
-    if (currentCall.value?.callSid === data.callSid) {
-      currentCall.value = null;
-    }
-    if (incomingCall.value?.callSid === data.callSid) {
-      incomingCall.value = null;
-    }
-    stopRingtone();
-    toast.info('Call ended');
-  };
-
-  const handleCallUpdate = (data: any) => {
-    console.log('Call update:', data);
-    if (currentCall.value?.callSid === data.callSid) {
-      currentCall.value = { ...currentCall.value, ...data };
-    }
-  };
-
-  const handleCallError = (data: any) => {
-    console.error('Call error:', data);
-    toast.error(data.message || 'Call error occurred');
-  };
-
-  const handleCallState = (data: Call) => {
-    console.log('Call state:', data);
-    if (data.status === 'in-progress') {
-      currentCall.value = data;
-    }
-  };
-
-  const handleAiTranscript = (data: { transcript: string; isFinal: boolean }) => {
-    transcript.value.push({
-      text: data.transcript,
-      isFinal: data.isFinal,
-      timestamp: Date.now(),
-    });
-
-    // Keep only last 50 transcript items
-    if (transcript.value.length > 50) {
-      transcript.value = transcript.value.slice(-50);
-    }
-  };
-
-  const handleAiSuggestion = (data: AiSuggestion) => {
-    aiSuggestions.value.unshift(data);
-
-    // Keep only last 10 suggestions
-    if (aiSuggestions.value.length > 10) {
-      aiSuggestions.value = aiSuggestions.value.slice(0, 10);
-    }
-  };
-
-  // Helper to parse JWT (for debugging)
-  const parseJwt = (token: string) => {
-    try {
-      return JSON.parse(atob(token.split('.')[1]));
-    } catch (e) {
-      return null;
-    }
-  };
-
-  const handleAiAction = (data: any) => {
-    console.log('AI action:', data);
-    toast.info(`AI: ${data.action}`);
-  };
-
-  // Ringtone management
-  let ringtoneAudio: HTMLAudioElement | null = null;
-
-  const playRingtone = () => {
-    // Play a simple beep tone using Web Audio API
-    try {
-      const audioContext = new (window.AudioContext || (window as any).webkitAudioContext)();
-      const oscillator = audioContext.createOscillator();
-      const gainNode = audioContext.createGain();
-      
-      oscillator.connect(gainNode);
-      gainNode.connect(audioContext.destination);
-      
-      // Phone ringtone frequency (440 Hz)
-      oscillator.frequency.value = 440;
-      oscillator.type = 'sine';
-      
-      const now = audioContext.currentTime;
-      gainNode.gain.setValueAtTime(0.15, now);
-      gainNode.gain.setValueAtTime(0, now + 0.5);
-      gainNode.gain.setValueAtTime(0.15, now + 1.0);
-      gainNode.gain.setValueAtTime(0, now + 1.5);
-      
-      oscillator.start(now);
-      oscillator.stop(now + 2);
-    } catch (error) {
-      // Silent fail - incoming call still works without audio
-      console.debug('Audio notification skipped:', error);
-    }
-  };
-
-  const stopRingtone = () => {
-    if (ringtoneAudio) {
-      ringtoneAudio.pause();
-      ringtoneAudio = null;
-    }
-  };
-
-  // Auto-connect on mount if token is available
-  onMounted(() => {
-    if (getToken() && !isInitialized.value) {
-      connect();
-    }
-  });
-
-  // Cleanup on unmount
-  onUnmounted(() => {
-    stopRingtone();
-  });
-
-  return {
-    // State
-    isOpen,
-    isConnected,
-    isInCall,
-    hasIncomingCall,
-    currentCall,
-    incomingCall,
-    transcript,
-    aiSuggestions,
-    callStatus,
-    callHistory,
-    isMuted,
-    volume,
-
-    // Actions
-    open,
-    close,
-    initiateCall,
-    acceptCall,
-    rejectCall,
-    endCall,
-    sendDtmf,
-    toggleMute,
-    connect,
-    disconnect,
-  };
-}
--- a/frontend/layouts/default.vue
+++ b/frontend/layouts/default.vue
@@ -2,7 +2,6 @@
 import { ref } from 'vue'
 import AppSidebar from '@/components/AppSidebar.vue'
 import AIChatBar from '@/components/AIChatBar.vue'
-import SoftphoneDialog from '@/components/SoftphoneDialog.vue'
 import {
  Breadcrumb,
  BreadcrumbItem,
@@ -76,9 +75,6 @@ const breadcrumbs = computed(() => {

      <!-- AI Chat Bar Component -->
      <AIChatBar />
-
-      <!-- Softphone Dialog (Global) -->
-      <SoftphoneDialog />
    </SidebarInset>
  </SidebarProvider>
 </template>
--- a/frontend/nuxt.config.ts
+++ b/frontend/nuxt.config.ts
@@ -58,10 +58,7 @@ export default defineNuxtConfig({
    },
    server: {
      hmr: {
-        host: 'tenant1.routebox.co',
-        port: 443,
-        protocol: 'wss',
-        // Don't use _nuxt path - HMR handles its own path
+        clientPort: 3001,
      },
      allowedHosts: ['.routebox.co', 'localhost', '127.0.0.1'],
    },
@@ -70,12 +67,4 @@ export default defineNuxtConfig({
  compatibilityDate: '2024-01-01',

  css: ['~/assets/css/main.css'],
-
-  components: [
-    {
-      path: '~/components',
-      pathPrefix: false,
-      extensions: ['.vue'],
-    },
-  ],
 })
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -17,7 +17,6 @@
  "dependencies": {
    "@internationalized/date": "^3.10.1",
    "@nuxtjs/tailwindcss": "^6.11.4",
-    "@twilio/voice-sdk": "^2.11.2",
    "@vueuse/core": "^10.11.1",
    "class-variance-authority": "^0.7.0",
    "clsx": "^2.1.0",
@@ -27,7 +26,6 @@
    "radix-vue": "^1.4.1",
    "reka-ui": "^2.6.1",
    "shadcn-nuxt": "^2.3.3",
-    "socket.io-client": "^4.8.3",
    "tailwind-merge": "^2.2.1",
    "vue": "^3.4.15",
    "vue-router": "^4.2.5",
--- a/frontend/pages/settings/integrations.vue
+++ b/frontend/pages/settings/integrations.vue
@@ -1,201 +0,0 @@
-<template>
-  <NuxtLayout name="default">
-    <main class="container mx-auto px-4 py-8">
-      <div class="flex items-center justify-between mb-8">
-        <div>
-          <h1 class="text-3xl font-bold">Integrations</h1>
-          <p class="text-muted-foreground mt-2">
-            Configure third-party service integrations for your tenant
-          </p>
-        </div>
-        <Button @click="saveConfig" :disabled="saving">
-          <Save class="mr-2 h-4 w-4" />
-          {{ saving ? 'Saving...' : 'Save Configuration' }}
-        </Button>
-      </div>
-
-      <!-- Services Grid -->
-      <div class="grid grid-cols-1 md:grid-cols-2 lg:grid-cols-3 gap-6">
-        <!-- Twilio Configuration -->
-        <Card>
-          <CardHeader>
-            <CardTitle class="flex items-center gap-2">
-              <Phone class="w-5 h-5" />
-              Twilio Voice
-            </CardTitle>
-            <CardDescription>
-              Configure Twilio for voice calling
-            </CardDescription>
-          </CardHeader>
-          <CardContent class="space-y-4">
-            <div class="space-y-2">
-              <Label for="twilio-account-sid">Account SID</Label>
-              <Input
-                id="twilio-account-sid"
-                v-model="twilioConfig.accountSid"
-                placeholder="ACxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
-              />
-            </div>
-            <div class="space-y-2">
-              <Label for="twilio-auth-token">Auth Token</Label>
-              <Input
-                id="twilio-auth-token"
-                v-model="twilioConfig.authToken"
-                type="password"
-                placeholder="Enter your Twilio auth token"
-              />
-            </div>
-            <div class="space-y-2">
-              <Label for="twilio-phone-number">Phone Number</Label>
-              <Input
-                id="twilio-phone-number"
-                v-model="twilioConfig.phoneNumber"
-                placeholder="+1234567890"
-              />
-            </div>
-            <div class="space-y-2">
-              <Label for="twilio-api-key">API Key SID (for browser calls)</Label>
-              <Input
-                id="twilio-api-key"
-                v-model="twilioConfig.apiKey"
-                placeholder="SKxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
-              />
-            </div>
-            <div class="space-y-2">
-              <Label for="twilio-api-secret">API Secret</Label>
-              <Input
-                id="twilio-api-secret"
-                v-model="twilioConfig.apiSecret"
-                type="password"
-                placeholder="Enter your API Key Secret"
-              />
-            </div>
-            <div class="space-y-2">
-              <Label for="twilio-twiml-app">TwiML App SID</Label>
-              <Input
-                id="twilio-twiml-app"
-                v-model="twilioConfig.twimlAppSid"
-                placeholder="APxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
-              />
-            </div>
-          </CardContent>
-        </Card>
-
-        <!-- OpenAI Configuration -->
-        <Card>
-          <CardHeader>
-            <CardTitle class="flex items-center gap-2">
-              <Bot class="w-5 h-5" />
-              OpenAI Realtime
-            </CardTitle>
-            <CardDescription>
-              Configure OpenAI for AI features
-            </CardDescription>
-          </CardHeader>
-          <CardContent class="space-y-4">
-            <div class="space-y-2">
-              <Label for="openai-api-key">API Key</Label>
-              <Input
-                id="openai-api-key"
-                v-model="openaiConfig.apiKey"
-                type="password"
-                placeholder="sk-..."
-              />
-            </div>
-            <div class="space-y-2">
-              <Label for="openai-model">Model</Label>
-              <Input
-                id="openai-model"
-                v-model="openaiConfig.model"
-                placeholder="gpt-4o-realtime-preview"
-              />
-            </div>
-            <div class="space-y-2">
-              <Label for="openai-voice">Voice</Label>
-              <select
-                id="openai-voice"
-                v-model="openaiConfig.voice"
-                class="w-full px-3 py-2 border rounded-md bg-background"
-              >
-                <option value="alloy">Alloy</option>
-                <option value="echo">Echo</option>
-                <option value="fable">Fable</option>
-                <option value="onyx">Onyx</option>
-                <option value="nova">Nova</option>
-                <option value="shimmer">Shimmer</option>
-              </select>
-            </div>
-          </CardContent>
-        </Card>
-      </div>
-    </main>
-  </NuxtLayout>
-</template>
-
-<script setup lang="ts">
-import { ref, onMounted } from 'vue';
-import { Card, CardContent, CardDescription, CardHeader, CardTitle } from '~/components/ui/card';
-import { Input } from '~/components/ui/input';
-import { Label } from '~/components/ui/label';
-import { Button } from '~/components/ui/button';
-import { Phone, Bot, Save } from 'lucide-vue-next';
-import { useApi } from '~/composables/useApi';
-import { toast } from 'vue-sonner';
-
-const { api } = useApi();
-
-const twilioConfig = ref({
-  accountSid: '',
-  authToken: '',
-  phoneNumber: '',
-  apiKey: '',
-  apiSecret: '',
-  twimlAppSid: '',
-});
-
-const openaiConfig = ref({
-  apiKey: '',
-  model: 'gpt-4o-realtime-preview',
-  voice: 'alloy',
-});
-
-const saving = ref(false);
-const loading = ref(true);
-
-onMounted(async () => {
-  try {
-    const response = await api.get('/tenant/integrations');
-    if (response.data) {
-      if (response.data.twilio) {
-        twilioConfig.value = { ...twilioConfig.value, ...response.data.twilio };
-      }
-      if (response.data.openai) {
-        openaiConfig.value = { ...openaiConfig.value, ...response.data.openai };
-      }
-    }
-  } catch (error: any) {
-    console.error('Failed to load configuration:', error);
-  } finally {
-    loading.value = false;
-  }
-});
-
-const saveConfig = async () => {
-  saving.value = true;
-
-  try {
-    const integrationsConfig = {
-      twilio: twilioConfig.value,
-      openai: openaiConfig.value,
-    };
-
-    await api.put('/tenant/integrations', { integrationsConfig });
-
-    toast.success('Configuration saved successfully');
-  } catch (error: any) {
-    toast.error(error.message || 'Failed to save configuration');
-  } finally {
-    saving.value = false;
-  }
-};
-</script>
--- a/frontend/pages/setup/objects/[apiName].vue
+++ b/frontend/pages/setup/objects/[apiName].vue
@@ -24,78 +24,32 @@

              <!-- Fields Tab -->
              <TabsContent value="fields" class="mt-6">
-                <div class="space-y-4">
-                  <div class="flex justify-between items-center mb-4">
-                    <h2 class="text-xl font-semibold">Fields</h2>
-                    <Button @click="openFieldDialog('create')">
-                      <Plus class="w-4 h-4 mr-2" />
-                      New Field
-                    </Button>
-                  </div>
-
-                  <div v-if="!object.fields || object.fields.length === 0" class="text-center py-8 text-muted-foreground">
-                    No fields defined yet. Create one to get started.
-                  </div>
-
-                  <div v-else class="space-y-2">
-                    <div
-                      v-for="field in object.fields"
-                      :key="field.id"
-                      class="p-4 border rounded-lg bg-card hover:border-primary transition-colors"
-                    >
-                      <div class="flex items-center justify-between">
-                        <div class="flex-1">
-                          <h3 class="font-semibold">{{ field.label }}</h3>
-                          <p class="text-sm text-muted-foreground">
-                            Type: <span class="font-medium">{{ formatFieldType(field.type) }}</span> | API Name: <span class="font-mono">{{ field.apiName }}</span>
-                          </p>
-                          <p v-if="field.description" class="text-sm text-muted-foreground mt-1">
-                            {{ field.description }}
-                          </p>
-                        </div>
-                        <div class="flex items-center gap-3">
-                          <div class="flex gap-2 text-xs">
-                            <span
-                              v-if="field.isRequired"
-                              class="px-2 py-1 bg-destructive/10 text-destructive rounded"
-                            >
-                              Required
-                            </span>
-                            <span
-                              v-if="field.isUnique"
-                              class="px-2 py-1 bg-primary/10 text-primary rounded"
-                            >
-                              Unique
-                            </span>
-                            <span
-                              v-if="field.isSystem"
-                              class="px-2 py-1 bg-gray-200 text-gray-700 rounded text-xs"
-                            >
-                              System
-                            </span>
-                          </div>
-                          <div class="flex gap-2">
-                            <Button
-                              v-if="!field.isSystem"
-                              variant="ghost"
-                              size="sm"
-                              @click="openFieldDialog('edit', field)"
-                              title="Edit field"
-                            >
-                              ✏️
-                            </Button>
-                            <Button
-                              v-if="!field.isSystem"
-                              variant="ghost"
-                              size="sm"
-                              class="text-destructive hover:text-destructive"
-                              @click="deleteField(field)"
-                              title="Delete field"
-                            >
-                              <Trash2 class="w-4 h-4" />
-                            </Button>
-                          </div>
-                        </div>
+                <div class="space-y-2">
+                  <div
+                    v-for="field in object.fields"
+                    :key="field.id"
+                    class="p-4 border rounded-lg bg-card"
+                  >
+                    <div class="flex items-center justify-between">
+                      <div>
+                        <h3 class="font-semibold">{{ field.label }}</h3>
+                        <p class="text-sm text-muted-foreground">
+                          Type: {{ field.type }} | API Name: {{ field.apiName }}
+                        </p>
+                      </div>
+                      <div class="flex gap-2 text-xs">
+                        <span
+                          v-if="field.isRequired"
+                          class="px-2 py-1 bg-destructive/10 text-destructive rounded"
+                        >
+                          Required
+                        </span>
+                        <span
+                          v-if="field.isUnique"
+                          class="px-2 py-1 bg-primary/10 text-primary rounded"
+                        >
+                          Unique
+                        </span>
                      </div>
                    </div>
                  </div>
@@ -187,107 +141,6 @@
          </div>
        </div>
      </main>
-
-      <!-- Field Management Dialog -->
-      <Teleport to="body">
-        <div
-          v-if="showFieldDialog"
-          class="fixed inset-0 bg-black/50 flex items-center justify-center z-[100]"
-        >
-          <div class="bg-white rounded-lg shadow-lg max-w-3xl w-full mx-4 max-h-[90vh] overflow-y-auto">
-            <div class="sticky top-0 bg-white border-b p-6 flex items-center justify-between">
-              <h2 class="text-2xl font-bold">
-                {{ fieldDialogMode === 'create' ? 'Create New Field' : 'Edit Field' }}
-              </h2>
-              <button
-                @click="closeFieldDialog"
-                class="text-gray-500 hover:text-gray-700 text-2xl font-bold"
-              >
-                ×
-              </button>
-            </div>
-
-            <div class="p-6 space-y-6">
-              <!-- Field Type Selection (only for creation) -->
-              <div v-if="fieldDialogMode === 'create'">
-                <FieldTypeSelector
-                  v-model="fieldForm.type"
-                />
-              </div>
-
-              <!-- Common Attributes -->
-              <div v-if="fieldForm.type">
-                <h3 class="text-lg font-semibold mb-4">Basic Properties</h3>
-                <FieldAttributesCommon
-                  :label="fieldForm.label"
-                  :api-name="fieldForm.apiName"
-                  :description="fieldForm.description"
-                  :placeholder="fieldForm.placeholder"
-                  :help-text="fieldForm.helpText"
-                  :display-order="fieldForm.displayOrder"
-                  :is-required="fieldForm.isRequired"
-                  :is-unique="fieldForm.isUnique"
-                  :default-value="fieldForm.defaultValue"
-                  :is-editing="fieldDialogMode === 'edit'"
-                  :has-data="fieldForm.hasData"
-                  @update="updateCommonAttributes"
-                />
-              </div>
-
-              <!-- Type-Specific Attributes -->
-              <div v-if="fieldForm.type">
-                <h3 class="text-lg font-semibold mb-4">Type-Specific Settings</h3>
-                <FieldAttributesType
-                  :field-type="fieldForm.type"
-                  :attributes="fieldForm.typeAttributes"
-                  @update="updateTypeAttributes"
-                />
-              </div>
-
-              <!-- Lookup Field Selection -->
-              <div v-if="(fieldForm.type === 'lookup' || fieldForm.type === 'belongsTo') && fieldDialogMode === 'create'">
-                <h3 class="text-lg font-semibold mb-4">Related Object</h3>
-                <div class="grid grid-cols-4 gap-4">
-                  <label class="text-sm font-medium leading-8">Select Object</label>
-                  <div class="col-span-3">
-                    <select
-                      v-model="fieldForm.referenceObject"
-                      class="w-full px-3 py-2 border rounded-md text-sm"
-                    >
-                      <option value="">-- Select an object --</option>
-                      <option
-                        v-for="obj in availableObjects"
-                        :key="obj.id"
-                        :value="obj.apiName"
-                      >
-                        {{ obj.label }} ({{ obj.apiName }})
-                      </option>
-                    </select>
-                  </div>
-                </div>
-              </div>
-
-              <!-- Error Message -->
-              <div v-if="fieldDialogError" class="p-3 bg-red-100 text-red-800 rounded-md text-sm">
-                {{ fieldDialogError }}
-              </div>
-
-              <!-- Action Buttons -->
-              <div class="flex gap-3 justify-end pt-4">
-                <Button variant="outline" @click="closeFieldDialog">
-                  Cancel
-                </Button>
-                <Button
-                  :disabled="!fieldForm.label || !fieldForm.apiName || !fieldForm.type"
-                  @click="saveField"
-                >
-                  {{ fieldDialogMode === 'create' ? 'Create Field' : 'Update Field' }}
-                </Button>
-              </div>
-            </div>
-          </div>
-        </div>
-      </Teleport>
    </NuxtLayout>
  </div>
 </template>
@@ -298,9 +151,6 @@ import { Button } from '@/components/ui/button'
 import { Tabs, TabsContent, TabsList, TabsTrigger } from '@/components/ui/tabs'
 import PageLayoutEditor from '@/components/PageLayoutEditor.vue'
 import ObjectAccessSettings from '@/components/ObjectAccessSettings.vue'
-import FieldTypeSelector from '@/components/fields/FieldTypeSelector.vue'
-import FieldAttributesCommon from '@/components/fields/FieldAttributesCommon.vue'
-import FieldAttributesType from '@/components/fields/FieldAttributesType.vue'
 import type { PageLayout, FieldLayoutItem } from '~/types/page-layout'

 const route = useRoute()
@@ -318,81 +168,6 @@ const layouts = ref<PageLayout[]>([])
 const loadingLayouts = ref(false)
 const selectedLayout = ref<PageLayout | null>(null)

-// Field management state
-const showFieldDialog = ref(false)
-const fieldDialogMode = ref<'create' | 'edit'>('create')
-const fieldDialogError = ref<string | null>(null)
-const availableObjects = ref<any[]>([])
-const fieldForm = ref({
-  id: '',
-  label: '',
-  apiName: '',
-  type: '',
-  description: '',
-  placeholder: '',
-  helpText: '',
-  displayOrder: 0,
-  isRequired: false,
-  isUnique: false,
-  defaultValue: '',
-  referenceObject: '',
-  typeAttributes: {},
-  hasData: false,
-})
-
-// Helper to format field type names
-const formatFieldType = (type: string): string => {
-  const typeNames: Record<string, string> = {
-    'TEXT': 'Text',
-    'LONG_TEXT': 'Textarea',
-    'EMAIL': 'Email',
-    'PHONE': 'Phone',
-    'NUMBER': 'Number',
-    'CURRENCY': 'Currency',
-    'PERCENT': 'Percent',
-    'PICKLIST': 'Picklist',
-    'MULTI_PICKLIST': 'Multi-select',
-    'BOOLEAN': 'Checkbox',
-    'DATE': 'Date',
-    'DATE_TIME': 'DateTime',
-    'TIME': 'Time',
-    'URL': 'URL',
-    'LOOKUP': 'Lookup',
-    'FILE': 'File',
-    'IMAGE': 'Image',
-    'JSON': 'JSON',
-  }
-  return typeNames[type] || type
-}
-
-const convertFrontendToBackendType = (frontendType: string): string => {
-  const typeMap: Record<string, string> = {
-    'text': 'TEXT',
-    'textarea': 'LONG_TEXT',
-    'password': 'TEXT',
-    'email': 'EMAIL',
-    'number': 'NUMBER',
-    'currency': 'CURRENCY',
-    'percent': 'PERCENT',
-    'select': 'PICKLIST',
-    'multiSelect': 'MULTI_PICKLIST',
-    'boolean': 'BOOLEAN',
-    'date': 'DATE',
-    'datetime': 'DATE_TIME',
-    'time': 'TIME',
-    'url': 'URL',
-    'color': 'TEXT',
-    'json': 'JSON',
-    'lookup': 'LOOKUP',
-    'belongsTo': 'LOOKUP',
-    'markdown': 'LONG_TEXT',
-    'code': 'LONG_TEXT',
-    'file': 'FILE',
-    'image': 'IMAGE',
-  }
-  return typeMap[frontendType] || 'TEXT'
-}
-
 const fetchObject = async () => {
  try {
    loading.value = true
@@ -405,14 +180,6 @@ const fetchObject = async () => {
  }
 }

-const fetchAvailableObjects = async () => {
-  try {
-    availableObjects.value = await api.get('/setup/objects')
-  } catch (e: any) {
-    console.error('Error fetching available objects:', e)
-  }
-}
-
 const fetchLayouts = async () => {
  if (!object.value) return
  
@@ -427,253 +194,6 @@ const fetchLayouts = async () => {
  }
 }

-const openFieldDialog = async (mode: 'create' | 'edit', field?: any) => {
-  fieldDialogMode.value = mode
-  fieldDialogError.value = null
-
-  if (mode === 'create') {
-    await fetchAvailableObjects()
-    fieldForm.value = {
-      id: '',
-      label: '',
-      apiName: '',
-      type: '',
-      description: '',
-      placeholder: '',
-      helpText: '',
-      displayOrder: (object.value?.fields?.length || 0) + 1,
-      isRequired: false,
-      isUnique: false,
-      defaultValue: '',
-      referenceObject: '',
-      typeAttributes: {},
-      hasData: false,
-    }
-  } else if (field) {
-    // Load field data for editing
-    const uiMetadata = field.ui_metadata ? JSON.parse(field.ui_metadata) : {}
-    fieldForm.value = {
-      id: field.id,
-      label: field.label,
-      apiName: field.apiName,
-      type: convertBackendToFrontendType(field.type),
-      description: field.description || '',
-      placeholder: uiMetadata.placeholder || '',
-      helpText: uiMetadata.helpText || '',
-      displayOrder: field.displayOrder || 0,
-      isRequired: field.isRequired || false,
-      isUnique: field.isUnique || false,
-      defaultValue: field.defaultValue || '',
-      referenceObject: field.referenceObject || '',
-      typeAttributes: extractTypeAttributes(field, uiMetadata),
-      hasData: false, // Would need to fetch this from backend
-    }
-  }
-
-  showFieldDialog.value = true
-}
-
-const convertBackendToFrontendType = (backendType: string): string => {
-  const typeMap: Record<string, string> = {
-    'TEXT': 'text',
-    'LONG_TEXT': 'textarea',
-    'EMAIL': 'email',
-    'PHONE': 'phone',
-    'NUMBER': 'number',
-    'CURRENCY': 'currency',
-    'PERCENT': 'percent',
-    'PICKLIST': 'select',
-    'MULTI_PICKLIST': 'multiSelect',
-    'BOOLEAN': 'boolean',
-    'DATE': 'date',
-    'DATE_TIME': 'datetime',
-    'TIME': 'time',
-    'URL': 'url',
-    'LOOKUP': 'lookup',
-    'FILE': 'file',
-    'IMAGE': 'image',
-    'JSON': 'json',
-  }
-  return typeMap[backendType] || 'text'
-}
-
-const extractTypeAttributes = (field: any, uiMetadata: any): any => {
-  const attrs: any = {}
-
-  if (field.type === 'PICKLIST' || field.type === 'MULTI_PICKLIST') {
-    attrs.options = uiMetadata.options || []
-  }
-
-  if (field.type === 'NUMBER' || field.type === 'CURRENCY') {
-    attrs.scale = field.scale || 0
-    attrs.min = uiMetadata.min
-    attrs.max = uiMetadata.max
-    if (field.type === 'CURRENCY') {
-      attrs.prefix = uiMetadata.prefix || '$'
-    }
-  }
-
-  if (field.type === 'TEXT' && field.length) {
-    attrs.maxLength = field.length
-  }
-
-  if (field.type === 'LONG_TEXT' && uiMetadata.rows) {
-    attrs.rows = uiMetadata.rows
-  }
-
-  if (field.type === 'LOOKUP') {
-    attrs.relationObject = field.referenceObject
-    attrs.relationDisplayField = uiMetadata.relationDisplayField || 'name'
-  }
-
-  return attrs
-}
-
-const closeFieldDialog = () => {
-  showFieldDialog.value = false
-  fieldDialogError.value = null
-}
-
-const updateCommonAttributes = (data: any) => {
-  Object.assign(fieldForm.value, data)
-}
-
-const updateTypeAttributes = (data: any) => {
-  fieldForm.value.typeAttributes = data
-}
-
-const saveField = async () => {
-  fieldDialogError.value = null
-
-  try {
-    // Validate
-    if (!fieldForm.value.label || !fieldForm.value.apiName || !fieldForm.value.type) {
-      fieldDialogError.value = 'Please fill in all required fields'
-      return
-    }
-
-    const apiName = route.params.apiName as string
-
-    // Prepare payload
-    const payload: any = {
-      label: fieldForm.value.label,
-      apiName: fieldForm.value.apiName,
-      type: fieldForm.value.type, // Use frontend type, backend will convert
-      description: fieldForm.value.description,
-      isRequired: fieldForm.value.isRequired,
-      isUnique: fieldForm.value.isUnique,
-      defaultValue: fieldForm.value.defaultValue,
-    }
-
-    // Extract type-specific database fields
-    const typeAttrs = fieldForm.value.typeAttributes || {}
-    
-    // For text fields
-    if (fieldForm.value.type === 'text' && typeAttrs.maxLength) {
-      payload.length = typeAttrs.maxLength
-    }
-
-    // For number and currency fields
-    if ((fieldForm.value.type === 'number' || fieldForm.value.type === 'currency') && typeAttrs.scale !== undefined) {
-      payload.scale = typeAttrs.scale
-      if (typeAttrs.scale > 0) {
-        payload.precision = 10 // Default precision for decimals
-      }
-    }
-
-    // Merge UI metadata
-    const uiMetadata: any = {
-      placeholder: fieldForm.value.placeholder,
-      helpText: fieldForm.value.helpText,
-    }
-
-    // Add type-specific attributes to UI metadata
-    if (fieldForm.value.typeAttributes) {
-      Object.assign(uiMetadata, fieldForm.value.typeAttributes)
-    }
-
-    payload.uiMetadata = uiMetadata
-
-    if (fieldForm.value.referenceObject) {
-      payload.relationObject = fieldForm.value.referenceObject
-      payload.relationDisplayField = fieldForm.value.typeAttributes.relationDisplayField || 'name'
-    }
-
-    let result
-    if (fieldDialogMode.value === 'create') {
-      result = await api.post(`/setup/objects/${apiName}/fields`, payload)
-    } else {
-      // For updates, only send fields that changed
-      const updatePayload: any = {}
-      if (fieldForm.value.label) updatePayload.label = fieldForm.value.label
-      if (fieldForm.value.description) updatePayload.description = fieldForm.value.description
-      if (fieldForm.value.placeholder) updatePayload.placeholder = fieldForm.value.placeholder
-      if (fieldForm.value.helpText) updatePayload.helpText = fieldForm.value.helpText
-      updatePayload.isRequired = fieldForm.value.isRequired
-      updatePayload.isUnique = fieldForm.value.isUnique
-      updatePayload.displayOrder = fieldForm.value.displayOrder
-      if (Object.keys(uiMetadata).length > 0) {
-        updatePayload.uiMetadata = uiMetadata
-      }
-
-      result = await api.put(
-        `/setup/objects/${apiName}/fields/${fieldForm.value.apiName}`,
-        updatePayload,
-      )
-    }
-
-    // Update the object with new field
-    if (fieldDialogMode.value === 'create') {
-      object.value.fields.push(result)
-    } else {
-      const index = object.value.fields.findIndex((f: any) => f.id === fieldForm.value.id)
-      if (index !== -1) {
-        object.value.fields[index] = result
-      }
-    }
-
-    toast.success(
-      fieldDialogMode.value === 'create'
-        ? 'Field created successfully'
-        : 'Field updated successfully',
-    )
-
-    closeFieldDialog()
-  } catch (e: any) {
-    fieldDialogError.value = e.message || 'An error occurred while saving the field'
-    console.error('Error saving field:', e)
-  }
-}
-
-const deleteField = async (field: any) => {
-  if (!confirm(`Are you sure you want to delete the field "${field.label}"? This action cannot be undone.`)) {
-    return
-  }
-
-  try {
-    const apiName = route.params.apiName as string
-    await api.delete(`/setup/objects/${apiName}/fields/${field.apiName}`)
-
-    // Remove from the list
-    object.value.fields = object.value.fields.filter((f: any) => f.id !== field.id)
-
-    // Also remove from page layouts
-    for (const layout of layouts.value) {
-      const layoutConfig = layout.layoutConfig || layout.layout_config || { fields: [] }
-      if (layoutConfig.fields) {
-        layoutConfig.fields = layoutConfig.fields.filter(
-          (f: any) => f.fieldId !== field.id,
-        )
-      }
-    }
-
-    toast.success('Field deleted successfully')
-  } catch (e: any) {
-    toast.error(`Failed to delete field: ${e.message}`)
-    console.error('Error deleting field:', e)
-  }
-}
-
 const handleCreateLayout = async () => {
  const name = prompt('Enter a name for the new layout:')
  if (!name) return
@@ -734,19 +254,17 @@ const handleDeleteLayout = async (layoutId: string) => {
  }
 }

-const handleAccessUpdate = (orgWideDefault: string) => {
-  if (object.value) {
-    object.value.orgWideDefault = orgWideDefault
-  }
-}
-
 // Watch for tab changes to load layouts
 watch(activeTab, (newTab) => {
  if (newTab === 'layouts' && layouts.value.length === 0 && !loadingLayouts.value) {
    fetchLayouts()
  }
 })
-
+const handleAccessUpdate = (orgWideDefault: string) => {
+  if (object.value) {
+    object.value.orgWideDefault = orgWideDefault
+  }
+}
 onMounted(async () => {
  await fetchObject()
  // If we start on layouts tab, load them
--- a/frontend/pages/setup/roles/[id].vue
+++ b/frontend/pages/setup/roles/[id].vue
@@ -1,231 +0,0 @@
-<template>
-  <div class="min-h-screen bg-background">
-    <NuxtLayout name="default">
-      <main class="container mx-auto px-4 py-8">
-        <div class="flex items-center justify-between">
-          <div>
-            <Button variant="ghost" size="sm" @click="navigateTo('/setup/roles')" class="mb-2">
-              ← Back to Roles
-            </Button>
-        <h1 class="text-3xl font-bold">{{ role?.name || 'Role' }}</h1>
-        <p class="text-muted-foreground">{{ role?.description || 'No description' }}</p>
-      </div>
-    </div>
-
-    <div v-if="loading" class="flex items-center justify-center py-12">
-      <div class="animate-spin rounded-full h-8 w-8 border-b-2 border-primary"></div>
-    </div>
-
-    <Tabs v-else default-value="details" class="w-full">
-      <TabsList>
-        <TabsTrigger value="details">Details</TabsTrigger>
-        <TabsTrigger value="users">Users</TabsTrigger>
-      </TabsList>
-
-      <TabsContent value="details" class="mt-6">
-        <Card>
-          <CardHeader>
-            <CardTitle>Role Information</CardTitle>
-          </CardHeader>
-          <CardContent class="space-y-4">
-            <div class="grid grid-cols-2 gap-4">
-              <div>
-                <Label class="text-muted-foreground">Name</Label>
-                <p class="font-medium">{{ role?.name }}</p>
-              </div>
-              <div>
-                <Label class="text-muted-foreground">Guard</Label>
-                <Badge variant="outline">{{ role?.guardName || 'tenant' }}</Badge>
-              </div>
-              <div class="col-span-2">
-                <Label class="text-muted-foreground">Description</Label>
-                <p class="font-medium">{{ role?.description || 'No description' }}</p>
-              </div>
-              <div>
-                <Label class="text-muted-foreground">Created At</Label>
-                <p class="font-medium">{{ formatDate(role?.createdAt) }}</p>
-              </div>
-              <div>
-                <Label class="text-muted-foreground">Updated At</Label>
-                <p class="font-medium">{{ formatDate(role?.updatedAt) }}</p>
-              </div>
-            </div>
-          </CardContent>
-        </Card>
-      </TabsContent>
-
-      <TabsContent value="users" class="mt-6">
-        <Card>
-          <CardHeader>
-            <div class="flex items-center justify-between">
-              <div>
-                <CardTitle>Assigned Users</CardTitle>
-                <CardDescription>Manage user assignments for this role</CardDescription>
-              </div>
-              <Button @click="showAddUserDialog = true" size="sm">
-                <Plus class="mr-2 h-4 w-4" />
-                Add User
-              </Button>
-            </div>
-          </CardHeader>
-          <CardContent>
-            <div v-if="roleUsers.length === 0" class="text-center py-8 text-muted-foreground">
-              No users assigned. Add users to grant them this role.
-            </div>
-            <div v-else class="space-y-2">
-              <div 
-                v-for="user in roleUsers" 
-                :key="user.id"
-                class="flex items-center justify-between p-3 border rounded-lg"
-              >
-                <div>
-                  <p class="font-medium">{{ getUserName(user) }}</p>
-                  <p class="text-sm text-muted-foreground">{{ user.email }}</p>
-                </div>
-                <Button variant="ghost" size="sm" @click="removeUser(user.id)">
-                  <X class="h-4 w-4" />
-                </Button>
-              </div>
-            </div>
-          </CardContent>
-        </Card>
-      </TabsContent>
-    </Tabs>
-
-    <!-- Add User Dialog -->
-    <Dialog v-model:open="showAddUserDialog">
-      <DialogContent>
-        <DialogHeader>
-          <DialogTitle>Add User</DialogTitle>
-          <DialogDescription>
-            Select a user to assign this role
-          </DialogDescription>
-        </DialogHeader>
-        <div class="space-y-4">
-          <div class="space-y-2">
-            <Label>Available Users</Label>
-            <Select v-model="selectedUserId" @update:model-value="(value) => selectedUserId = value">
-              <SelectTrigger>
-                <SelectValue placeholder="Choose a user" />
-              </SelectTrigger>
-              <SelectContent>
-                <SelectItem v-for="user in availableUsers" :key="user.id" :value="user.id">
-                  {{ getUserName(user) }} ({{ user.email }})
-                </SelectItem>
-              </SelectContent>
-            </Select>
-          </div>
-        </div>
-        <DialogFooter>
-          <Button variant="outline" @click="showAddUserDialog = false">Cancel</Button>
-          <Button @click="addUser" :disabled="!selectedUserId">
-            Add User
-          </Button>
-        </DialogFooter>
-      </DialogContent>
-    </Dialog>
-      </main>
-    </NuxtLayout>
-  </div>
-</template>
-
-<script setup lang="ts">
-import { ref, onMounted, computed } from 'vue';
-import { Card, CardContent, CardDescription, CardHeader, CardTitle } from '~/components/ui/card';
-import { Button } from '~/components/ui/button';
-import { Tabs, TabsContent, TabsList, TabsTrigger } from '~/components/ui/tabs';
-import { Dialog, DialogContent, DialogDescription, DialogFooter, DialogHeader, DialogTitle } from '~/components/ui/dialog';
-import { Label } from '~/components/ui/label';
-import { Badge } from '~/components/ui/badge';
-import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue } from '~/components/ui/select';
-import { Plus, X } from 'lucide-vue-next';
-
-definePageMeta({
-  layout: 'default',
-});
-
-const route = useRoute();
-const { api } = useApi();
-const { toast } = useToast();
-
-const loading = ref(true);
-const role = ref<any>(null);
-const roleUsers = ref<any[]>([]);
-const allUsers = ref<any[]>([]);
-const showAddUserDialog = ref(false);
-const selectedUserId = ref('');
-
-const availableUsers = computed(() => {
-  const assignedIds = new Set(roleUsers.value.map(u => u.id));
-  return allUsers.value.filter(u => !assignedIds.has(u.id));
-});
-
-const loadRole = async () => {
-  try {
-    loading.value = true;
-    const roleId = route.params.id;
-    const response = await api.get(`/setup/roles/${roleId}`);
-    role.value = response;
-    roleUsers.value = response.users || [];
-  } catch (error: any) {
-    console.error('Failed to load role:', error);
-    toast.error('Failed to load role');
-  } finally {
-    loading.value = false;
-  }
-};
-
-const loadAllUsers = async () => {
-  try {
-    const response = await api.get('/setup/users');
-    allUsers.value = response || [];
-  } catch (error: any) {
-    console.error('Failed to load users:', error);
-  }
-};
-
-const addUser = async () => {
-  if (!selectedUserId.value) return;
-  
-  try {
-    await api.post(`/setup/roles/${route.params.id}/users`, {
-      userId: selectedUserId.value,
-    });
-    toast.success('User added successfully');
-    showAddUserDialog.value = false;
-    selectedUserId.value = '';
-    await loadRole();
-  } catch (error: any) {
-    console.error('Failed to add user:', error);
-    toast.error(error.message || 'Failed to add user');
-  }
-};
-
-const removeUser = async (userId: string) => {
-  try {
-    await api.delete(`/setup/roles/${route.params.id}/users/${userId}`);
-    toast.success('User removed successfully');
-    await loadRole();
-  } catch (error: any) {
-    console.error('Failed to remove user:', error);
-    toast.error(error.message || 'Failed to remove user');
-  }
-};
-
-const getUserName = (user: any) => {
-  if (!user) return 'Unknown';
-  if (user.firstName || user.lastName) {
-    return [user.firstName, user.lastName].filter(Boolean).join(' ');
-  }
-  return user.email || 'Unknown';
-};
-
-const formatDate = (date: string) => {
-  if (!date) return 'N/A';
-  return new Date(date).toLocaleDateString();
-};
-
-onMounted(async () => {
-  await Promise.all([loadRole(), loadAllUsers()]);
-});
-</script>
--- a/frontend/pages/setup/roles/index.vue
+++ b/frontend/pages/setup/roles/index.vue
@@ -1,285 +0,0 @@
-<template>
-  <div class="min-h-screen bg-background">
-    <NuxtLayout name="default">
-      <main class="container mx-auto px-4 py-8">
-        <div class="flex items-center justify-between">
-          <div>
-            <h1 class="text-3xl font-bold">Roles</h1>
-            <p class="text-muted-foreground">Manage roles and permissions</p>
-          </div>
-      <Button @click="showCreateDialog = true">
-        <Plus class="mr-2 h-4 w-4" />
-        New Role
-      </Button>
-    </div>
-
-    <div class="border rounded-lg">
-      <Table>
-        <TableHeader>
-          <TableRow>
-            <TableHead>Name</TableHead>
-            <TableHead>Description</TableHead>
-            <TableHead>Guard</TableHead>
-            <TableHead>Users</TableHead>
-            <TableHead>Created</TableHead>
-            <TableHead class="text-right">Actions</TableHead>
-          </TableRow>
-        </TableHeader>
-        <TableBody>
-          <TableRow v-if="loading">
-            <TableCell :colspan="6" class="text-center py-8">
-              <div class="flex items-center justify-center">
-                <div class="animate-spin rounded-full h-8 w-8 border-b-2 border-primary"></div>
-              </div>
-            </TableCell>
-          </TableRow>
-          <TableRow v-else-if="roles.length === 0">
-            <TableCell :colspan="6" class="text-center py-8 text-muted-foreground">
-              No roles found. Create your first role to get started.
-            </TableCell>
-          </TableRow>
-          <TableRow v-else v-for="role in roles" :key="role.id" class="cursor-pointer hover:bg-muted/50" @click="navigateTo(`/setup/roles/${role.id}`)">
-            <TableCell class="font-medium">{{ role.name }}</TableCell>
-            <TableCell>{{ role.description || 'No description' }}</TableCell>
-            <TableCell>
-              <Badge variant="outline">{{ role.guardName || 'tenant' }}</Badge>
-            </TableCell>
-            <TableCell>
-              {{ role.userCount || 0 }} users
-            </TableCell>
-            <TableCell>{{ formatDate(role.createdAt) }}</TableCell>
-            <TableCell class="text-right" @click.stop>
-              <div class="flex items-center justify-end gap-1">
-                <Button variant="ghost" size="icon" @click="navigateTo(`/setup/roles/${role.id}`)">
-                  <Eye class="h-4 w-4" />
-                </Button>
-                <Button variant="ghost" size="icon" @click="openEditDialog(role)">
-                  <Edit class="h-4 w-4" />
-                </Button>
-                <Button variant="ghost" size="icon" @click="openDeleteDialog(role)">
-                  <Trash2 class="h-4 w-4" />
-                </Button>
-              </div>
-            </TableCell>
-          </TableRow>
-        </TableBody>
-      </Table>
-    </div>
-
-    <!-- Create Role Dialog -->
-    <Dialog v-model:open="showCreateDialog">
-      <DialogContent>
-        <DialogHeader>
-          <DialogTitle>Create New Role</DialogTitle>
-          <DialogDescription>
-            Add a new role to the system
-          </DialogDescription>
-        </DialogHeader>
-        <div class="space-y-4">
-          <div class="space-y-2">
-            <Label for="name">Name</Label>
-            <Input id="name" v-model="newRole.name" placeholder="Sales Manager" />
-          </div>
-          <div class="space-y-2">
-            <Label for="description">Description (Optional)</Label>
-            <Input id="description" v-model="newRole.description" placeholder="Manages sales team and deals" />
-          </div>
-          <div class="space-y-2">
-            <Label for="guardName">Guard Name</Label>
-            <Select v-model="newRole.guardName" @update:model-value="(value) => newRole.guardName = value">
-              <SelectTrigger>
-                <SelectValue placeholder="Select guard" />
-              </SelectTrigger>
-              <SelectContent>
-                <SelectItem value="tenant">Tenant</SelectItem>
-                <SelectItem value="central">Central</SelectItem>
-              </SelectContent>
-            </Select>
-          </div>
-        </div>
-        <DialogFooter>
-          <Button variant="outline" @click="showCreateDialog = false">Cancel</Button>
-          <Button @click="createRole" :disabled="!newRole.name">
-            Create Role
-          </Button>
-        </DialogFooter>
-      </DialogContent>
-    </Dialog>
-
-    <!-- Edit Role Dialog -->
-    <Dialog v-model:open="showEditDialog">
-      <DialogContent>
-        <DialogHeader>
-          <DialogTitle>Edit Role</DialogTitle>
-          <DialogDescription>
-            Update role information
-          </DialogDescription>
-        </DialogHeader>
-        <div class="space-y-4">
-          <div class="space-y-2">
-            <Label for="edit-name">Name</Label>
-            <Input id="edit-name" v-model="editRole.name" placeholder="Role name" />
-          </div>
-          <div class="space-y-2">
-            <Label for="edit-description">Description</Label>
-            <Input id="edit-description" v-model="editRole.description" placeholder="Role description" />
-          </div>
-          <div class="space-y-2">
-            <Label for="edit-guardName">Guard Name</Label>
-            <Select v-model="editRole.guardName" @update:model-value="(value) => editRole.guardName = value">
-              <SelectTrigger>
-                <SelectValue placeholder="Select guard" />
-              </SelectTrigger>
-              <SelectContent>
-                <SelectItem value="tenant">Tenant</SelectItem>
-                <SelectItem value="central">Central</SelectItem>
-              </SelectContent>
-            </Select>
-          </div>
-        </div>
-        <DialogFooter>
-          <Button variant="outline" @click="showEditDialog = false">Cancel</Button>
-          <Button @click="updateRole" :disabled="!editRole.name">
-            Update Role
-          </Button>
-        </DialogFooter>
-      </DialogContent>
-    </Dialog>
-
-    <!-- Delete Confirmation Dialog -->
-    <Dialog v-model:open="showDeleteDialog">
-      <DialogContent>
-        <DialogHeader>
-          <DialogTitle>Delete Role</DialogTitle>
-          <DialogDescription>
-            Are you sure you want to delete this role? This action cannot be undone.
-          </DialogDescription>
-        </DialogHeader>
-        <DialogFooter>
-          <Button variant="outline" @click="showDeleteDialog = false">Cancel</Button>
-          <Button variant="destructive" @click="deleteRole">
-            Delete Role
-          </Button>
-        </DialogFooter>
-      </DialogContent>
-    </Dialog>
-      </main>
-    </NuxtLayout>
-  </div>
-</template>
-
-<script setup lang="ts">
-import { ref, onMounted } from 'vue';
-import { Button } from '~/components/ui/button';
-import { Table, TableBody, TableCell, TableHead, TableHeader, TableRow } from '~/components/ui/table';
-import { Dialog, DialogContent, DialogDescription, DialogFooter, DialogHeader, DialogTitle } from '~/components/ui/dialog';
-import { Input } from '~/components/ui/input';
-import { Label } from '~/components/ui/label';
-import { Badge } from '~/components/ui/badge';
-import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue } from '~/components/ui/select';
-import { Plus, Eye, Edit, Trash2 } from 'lucide-vue-next';
-
-definePageMeta({
-  layout: 'default',
-});
-
-const { api } = useApi();
-const { toast } = useToast();
-
-const loading = ref(true);
-const roles = ref<any[]>([]);
-const showCreateDialog = ref(false);
-const showEditDialog = ref(false);
-const showDeleteDialog = ref(false);
-const newRole = ref({
-  name: '',
-  description: '',
-  guardName: 'tenant',
-});
-const editRole = ref({
-  id: '',
-  name: '',
-  description: '',
-  guardName: 'tenant',
-});
-const roleToDelete = ref<any>(null);
-
-const loadRoles = async () => {
-  try {
-    loading.value = true;
-    const response = await api.get('/setup/roles');
-    roles.value = response || [];
-  } catch (error: any) {
-    console.error('Failed to load roles:', error);
-    toast.error('Failed to load roles');
-  } finally {
-    loading.value = false;
-  }
-};
-
-const createRole = async () => {
-  try {
-    await api.post('/setup/roles', newRole.value);
-    toast.success('Role created successfully');
-    showCreateDialog.value = false;
-    newRole.value = { name: '', description: '', guardName: 'tenant' };
-    await loadRoles();
-  } catch (error: any) {
-    console.error('Failed to create role:', error);
-    toast.error(error.message || 'Failed to create role');
-  }
-};
-
-const openEditDialog = (role: any) => {
-  editRole.value = {
-    id: role.id,
-    name: role.name,
-    description: role.description || '',
-    guardName: role.guardName || 'tenant',
-  };
-  showEditDialog.value = true;
-};
-
-const updateRole = async () => {
-  try {
-    await api.patch(`/setup/roles/${editRole.value.id}`, {
-      name: editRole.value.name,
-      description: editRole.value.description,
-      guardName: editRole.value.guardName,
-    });
-    toast.success('Role updated successfully');
-    showEditDialog.value = false;
-    await loadRoles();
-  } catch (error: any) {
-    console.error('Failed to update role:', error);
-    toast.error(error.message || 'Failed to update role');
-  }
-};
-
-const openDeleteDialog = (role: any) => {
-  roleToDelete.value = role;
-  showDeleteDialog.value = true;
-};
-
-const deleteRole = async () => {
-  try {
-    await api.delete(`/setup/roles/${roleToDelete.value.id}`);
-    toast.success('Role deleted successfully');
-    showDeleteDialog.value = false;
-    roleToDelete.value = null;
-    await loadRoles();
-  } catch (error: any) {
-    console.error('Failed to delete role:', error);
-    toast.error(error.message || 'Failed to delete role');
-  }
-};
-
-const formatDate = (date: string) => {
-  if (!date) return 'N/A';
-  return new Date(date).toLocaleDateString();
-};
-
-onMounted(() => {
-  loadRoles();
-});
-</script>
--- a/frontend/pages/setup/users/[id].vue
+++ b/frontend/pages/setup/users/[id].vue
@@ -1,227 +0,0 @@
-<template>
-  <div class="min-h-screen bg-background">
-    <NuxtLayout name="default">
-        <main class="container mx-auto px-4 py-8">
-    <div class="flex items-center justify-between">
-      <div>
-        <Button variant="ghost" size="sm" @click="navigateTo('/setup/users')" class="mb-2">
-          ← Back to Users
-        </Button>
-        <h1 class="text-3xl font-bold">{{ getUserName(user) }}</h1>
-        <p class="text-muted-foreground">{{ user?.email }}</p>
-      </div>
-    </div>
-
-    <div v-if="loading" class="flex items-center justify-center py-12">
-      <div class="animate-spin rounded-full h-8 w-8 border-b-2 border-primary"></div>
-    </div>
-
-    <Tabs v-else default-value="details" class="w-full">
-      <TabsList>
-        <TabsTrigger value="details">Details</TabsTrigger>
-        <TabsTrigger value="roles">Roles</TabsTrigger>
-      </TabsList>
-
-      <TabsContent value="details" class="mt-6">
-        <Card>
-          <CardHeader>
-            <CardTitle>User Information</CardTitle>
-          </CardHeader>
-          <CardContent class="space-y-4">
-            <div class="grid grid-cols-2 gap-4">
-              <div>
-                <Label class="text-muted-foreground">Email</Label>
-                <p class="font-medium">{{ user?.email }}</p>
-              </div>
-              <div>
-                <Label class="text-muted-foreground">First Name</Label>
-                <p class="font-medium">{{ user?.firstName || 'N/A' }}</p>
-              </div>
-              <div>
-                <Label class="text-muted-foreground">Last Name</Label>
-                <p class="font-medium">{{ user?.lastName || 'N/A' }}</p>
-              </div>
-              <div>
-                <Label class="text-muted-foreground">Created At</Label>
-                <p class="font-medium">{{ formatDate(user?.createdAt) }}</p>
-              </div>
-              <div>
-                <Label class="text-muted-foreground">Updated At</Label>
-                <p class="font-medium">{{ formatDate(user?.updatedAt) }}</p>
-              </div>
-            </div>
-          </CardContent>
-        </Card>
-      </TabsContent>
-
-      <TabsContent value="roles" class="mt-6">
-        <Card>
-          <CardHeader>
-            <div class="flex items-center justify-between">
-              <div>
-                <CardTitle>Assigned Roles</CardTitle>
-                <CardDescription>Manage role assignments for this user</CardDescription>
-              </div>
-              <Button @click="showAddRoleDialog = true" size="sm">
-                <Plus class="mr-2 h-4 w-4" />
-                Add Role
-              </Button>
-            </div>
-          </CardHeader>
-          <CardContent>
-            <div v-if="userRoles.length === 0" class="text-center py-8 text-muted-foreground">
-              No roles assigned. Add roles to grant permissions.
-            </div>
-            <div v-else class="space-y-2">
-              <div 
-                v-for="role in userRoles" 
-                :key="role.id"
-                class="flex items-center justify-between p-3 border rounded-lg"
-              >
-                <div>
-                  <p class="font-medium">{{ role.name }}</p>
-                  <p class="text-sm text-muted-foreground">{{ role.description || 'No description' }}</p>
-                </div>
-                <Button variant="ghost" size="sm" @click="removeRole(role.id)">
-                  <X class="h-4 w-4" />
-                </Button>
-              </div>
-            </div>
-          </CardContent>
-        </Card>
-      </TabsContent>
-    </Tabs>
-
-    <!-- Add Role Dialog -->
-    <Dialog v-model:open="showAddRoleDialog">
-      <DialogContent>
-        <DialogHeader>
-          <DialogTitle>Add Role</DialogTitle>
-          <DialogDescription>
-            Select a role to assign to this user
-          </DialogDescription>
-        </DialogHeader>
-        <div class="space-y-4">
-          <div class="space-y-2">
-            <Label>Available Roles</Label>
-            <Select v-model="selectedRoleId" @update:model-value="(value) => selectedRoleId = value">
-              <SelectTrigger>
-                <SelectValue placeholder="Choose a role" />
-              </SelectTrigger>
-              <SelectContent>
-                <SelectItem v-for="role in availableRoles" :key="role.id" :value="role.id">
-                  {{ role.name }}
-                </SelectItem>
-              </SelectContent>
-            </Select>
-          </div>
-        </div>
-        <DialogFooter>
-          <Button variant="outline" @click="showAddRoleDialog = false">Cancel</Button>
-          <Button @click="addRole" :disabled="!selectedRoleId">
-            Add Role
-          </Button>
-        </DialogFooter>
-      </DialogContent>
-    </Dialog>
-  </main>
-    </NuxtLayout>
-    </div>
-</template>
-
-<script setup lang="ts">
-import { ref, onMounted, computed } from 'vue';
-import { Card, CardContent, CardDescription, CardHeader, CardTitle } from '~/components/ui/card';
-import { Button } from '~/components/ui/button';
-import { Tabs, TabsContent, TabsList, TabsTrigger } from '~/components/ui/tabs';
-import { Dialog, DialogContent, DialogDescription, DialogFooter, DialogHeader, DialogTitle } from '~/components/ui/dialog';
-import { Label } from '~/components/ui/label';
-import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue } from '~/components/ui/select';
-import { Plus, X } from 'lucide-vue-next';
-
-
-const route = useRoute();
-const { api } = useApi();
-const { toast } = useToast();
-
-const loading = ref(true);
-const user = ref<any>(null);
-const userRoles = ref<any[]>([]);
-const allRoles = ref<any[]>([]);
-const showAddRoleDialog = ref(false);
-const selectedRoleId = ref('');
-
-const availableRoles = computed(() => {
-  const assignedIds = new Set(userRoles.value.map(r => r.id));
-  return allRoles.value.filter(r => !assignedIds.has(r.id));
-});
-
-const loadUser = async () => {
-  try {
-    loading.value = true;
-    const userId = route.params.id;
-    const response = await api.get(`/setup/users/${userId}`);
-    user.value = response;
-    userRoles.value = response.roles || [];
-  } catch (error: any) {
-    console.error('Failed to load user:', error);
-    toast.error('Failed to load user');
-  } finally {
-    loading.value = false;
-  }
-};
-
-const loadAllRoles = async () => {
-  try {
-    const response = await api.get('/setup/roles');
-    allRoles.value = response || [];
-  } catch (error: any) {
-    console.error('Failed to load roles:', error);
-  }
-};
-
-const addRole = async () => {
-  if (!selectedRoleId.value) return;
-  
-  try {
-    await api.post(`/setup/users/${route.params.id}/roles`, {
-      roleId: selectedRoleId.value,
-    });
-    toast.success('Role added successfully');
-    showAddRoleDialog.value = false;
-    selectedRoleId.value = '';
-    await loadUser();
-  } catch (error: any) {
-    console.error('Failed to add role:', error);
-    toast.error(error.message || 'Failed to add role');
-  }
-};
-
-const removeRole = async (roleId: string) => {
-  try {
-    await api.delete(`/setup/users/${route.params.id}/roles/${roleId}`);
-    toast.success('Role removed successfully');
-    await loadUser();
-  } catch (error: any) {
-    console.error('Failed to remove role:', error);
-    toast.error(error.message || 'Failed to remove role');
-  }
-};
-
-const getUserName = (user: any) => {
-  if (!user) return 'User';
-  if (user.firstName || user.lastName) {
-    return [user.firstName, user.lastName].filter(Boolean).join(' ');
-  }
-  return user.email || 'User';
-};
-
-const formatDate = (date: string) => {
-  if (!date) return 'N/A';
-  return new Date(date).toLocaleDateString();
-};
-
-onMounted(async () => {
-  await Promise.all([loadUser(), loadAllRoles()]);
-});
-</script>
--- a/frontend/pages/setup/users/index.vue
+++ b/frontend/pages/setup/users/index.vue
@@ -1,290 +0,0 @@
-<template>
-    <div class="min-h-screen bg-background">
-    <NuxtLayout name="default">
-        <main class="container mx-auto px-4 py-8">
-            <div class="flex items-center justify-between">
-            <div>
-                <h1 class="text-3xl font-bold">Users</h1>
-                <p class="text-muted-foreground">Manage user accounts and access</p>
-            </div>
-            <Button @click="showCreateDialog = true">
-                <UserPlus class="mr-2 h-4 w-4" />
-                New User
-            </Button>
-            </div>
-
-            <div class="border rounded-lg">
-              <Table>
-                <TableHeader>
-                  <TableRow>
-                    <TableHead>Name</TableHead>
-                    <TableHead>Email</TableHead>
-                    <TableHead>Roles</TableHead>
-                    <TableHead>Created</TableHead>
-                    <TableHead class="text-right">Actions</TableHead>
-                  </TableRow>
-                </TableHeader>
-                <TableBody>
-                  <TableRow v-if="loading">
-                    <TableCell :colspan="5" class="text-center py-8">
-                      <div class="flex items-center justify-center">
-                        <div class="animate-spin rounded-full h-8 w-8 border-b-2 border-primary"></div>
-                      </div>
-                    </TableCell>
-                  </TableRow>
-                  <TableRow v-else-if="users.length === 0">
-                    <TableCell :colspan="5" class="text-center py-8 text-muted-foreground">
-                      No users found. Create your first user to get started.
-                    </TableCell>
-                  </TableRow>
-                  <TableRow v-else v-for="user in users" :key="user.id" class="cursor-pointer hover:bg-muted/50" @click="navigateTo(`/setup/users/${user.id}`)">
-                    <TableCell class="font-medium">{{ getUserName(user) }}</TableCell>
-                    <TableCell>{{ user.email }}</TableCell>
-                    <TableCell>
-                        <div class="flex gap-1 flex-wrap">
-                        <Badge v-for="role in user.roles" :key="role.id" variant="secondary">
-                            {{ role.name }}
-                        </Badge>
-                        <span v-if="!user.roles || user.roles.length === 0" class="text-muted-foreground text-sm">
-                            No roles
-                        </span>
-                        </div>
-                    </TableCell>
-                    <TableCell>{{ formatDate(user.createdAt) }}</TableCell>
-                    <TableCell class="text-right" @click.stop>
-                        <div class="flex items-center justify-end gap-1">
-                          <Button variant="ghost" size="icon" @click="navigateTo(`/setup/users/${user.id}`)">
-                            <Eye class="h-4 w-4" />
-                          </Button>
-                          <Button variant="ghost" size="icon" @click="openEditDialog(user)">
-                            <Edit class="h-4 w-4" />
-                          </Button>
-                          <Button variant="ghost" size="icon" @click="openDeleteDialog(user)">
-                            <Trash2 class="h-4 w-4" />
-                          </Button>
-                        </div>
-                    </TableCell>
-                    </TableRow>
-                </TableBody>
-              </Table>
-            </div>
-
-            <!-- Create User Dialog -->
-            <Dialog v-model:open="showCreateDialog">
-            <DialogContent>
-                <DialogHeader>
-                <DialogTitle>Create New User</DialogTitle>
-                <DialogDescription>
-                    Add a new user to the system
-                </DialogDescription>
-                </DialogHeader>
-                <div class="space-y-4">
-                <div class="space-y-2">
-                    <Label for="email">Email</Label>
-                    <Input id="email" v-model="newUser.email" type="email" placeholder="user@example.com" />
-                </div>
-                <div class="space-y-2">
-                    <Label for="password">Password</Label>
-                    <Input id="password" v-model="newUser.password" type="password" placeholder="••••••••" />
-                </div>
-                <div class="space-y-2">
-                    <Label for="firstName">First Name (Optional)</Label>
-                    <Input id="firstName" v-model="newUser.firstName" placeholder="John" />
-                </div>
-                <div class="space-y-2">
-                    <Label for="lastName">Last Name (Optional)</Label>
-                    <Input id="lastName" v-model="newUser.lastName" placeholder="Doe" />
-                </div>
-                </div>
-                <DialogFooter>
-                <Button variant="outline" @click="showCreateDialog = false">Cancel</Button>
-                <Button @click="createUser" :disabled="!newUser.email || !newUser.password">
-                    Create User
-                </Button>
-                </DialogFooter>
-            </DialogContent>
-            </Dialog>
-
-            <!-- Edit User Dialog -->
-            <Dialog v-model:open="showEditDialog">
-            <DialogContent>
-                <DialogHeader>
-                <DialogTitle>Edit User</DialogTitle>
-                <DialogDescription>
-                    Update user information
-                </DialogDescription>
-                </DialogHeader>
-                <div class="space-y-4">
-                <div class="space-y-2">
-                    <Label for="edit-email">Email</Label>
-                    <Input id="edit-email" v-model="editUser.email" type="email" placeholder="user@example.com" />
-                </div>
-                <div class="space-y-2">
-                    <Label for="edit-password">Password (leave blank to keep current)</Label>
-                    <Input id="edit-password" v-model="editUser.password" type="password" placeholder="••••••••" />
-                </div>
-                <div class="space-y-2">
-                    <Label for="edit-firstName">First Name</Label>
-                    <Input id="edit-firstName" v-model="editUser.firstName" placeholder="John" />
-                </div>
-                <div class="space-y-2">
-                    <Label for="edit-lastName">Last Name</Label>
-                    <Input id="edit-lastName" v-model="editUser.lastName" placeholder="Doe" />
-                </div>
-                </div>
-                <DialogFooter>
-                <Button variant="outline" @click="showEditDialog = false">Cancel</Button>
-                <Button @click="updateUser" :disabled="!editUser.email">
-                    Update User
-                </Button>
-                </DialogFooter>
-            </DialogContent>
-            </Dialog>
-
-            <!-- Delete Confirmation Dialog -->
-            <Dialog v-model:open="showDeleteDialog">
-            <DialogContent>
-                <DialogHeader>
-                <DialogTitle>Delete User</DialogTitle>
-                <DialogDescription>
-                    Are you sure you want to delete this user? This action cannot be undone.
-                </DialogDescription>
-                </DialogHeader>
-                <DialogFooter>
-                <Button variant="outline" @click="showDeleteDialog = false">Cancel</Button>
-                <Button variant="destructive" @click="deleteUser">
-                    Delete User
-                </Button>
-                </DialogFooter>
-            </DialogContent>
-            </Dialog>
-        </main>
-    </NuxtLayout>
-    </div>
-</template>
-
-<script setup lang="ts">
-import { ref, onMounted } from 'vue';
-import { Button } from '~/components/ui/button';
-import { Table, TableBody, TableCell, TableHead, TableHeader, TableRow } from '~/components/ui/table';
-import { Dialog, DialogContent, DialogDescription, DialogFooter, DialogHeader, DialogTitle } from '~/components/ui/dialog';
-import { Input } from '~/components/ui/input';
-import { Label } from '~/components/ui/label';
-import { Badge } from '~/components/ui/badge';
-import { UserPlus, Eye, Edit, Trash2 } from 'lucide-vue-next';
-
-
-const { api } = useApi();
-const { toast } = useToast();
-
-const loading = ref(true);
-const users = ref<any[]>([]);
-const showCreateDialog = ref(false);
-const showEditDialog = ref(false);
-const showDeleteDialog = ref(false);
-const newUser = ref({
-  email: '',
-  password: '',
-  firstName: '',
-  lastName: '',
-});
-const editUser = ref({
-  id: '',
-  email: '',
-  password: '',
-  firstName: '',
-  lastName: '',
-});
-const userToDelete = ref<any>(null);
-
-const loadUsers = async () => {
-  try {
-    loading.value = true;
-    const response = await api.get('/setup/users');
-    users.value = response || [];
-  } catch (error: any) {
-    console.error('Failed to load users:', error);
-    toast.error('Failed to load users');
-  } finally {
-    loading.value = false;
-  }
-};
-
-const createUser = async () => {
-  try {
-    await api.post('/setup/users', newUser.value);
-    toast.success('User created successfully');
-    showCreateDialog.value = false;
-    newUser.value = { email: '', password: '', firstName: '', lastName: '' };
-    await loadUsers();
-  } catch (error: any) {
-    console.error('Failed to create user:', error);
-    toast.error(error.message || 'Failed to create user');
-  }
-};
-
-const openEditDialog = (user: any) => {
-  editUser.value = {
-    id: user.id,
-    email: user.email,
-    password: '',
-    firstName: user.firstName || '',
-    lastName: user.lastName || '',
-  };
-  showEditDialog.value = true;
-};
-
-const updateUser = async () => {
-  try {
-    const payload: any = {
-      email: editUser.value.email,
-      firstName: editUser.value.firstName,
-      lastName: editUser.value.lastName,
-    };
-    if (editUser.value.password) {
-      payload.password = editUser.value.password;
-    }
-    await api.patch(`/setup/users/${editUser.value.id}`, payload);
-    toast.success('User updated successfully');
-    showEditDialog.value = false;
-    await loadUsers();
-  } catch (error: any) {
-    console.error('Failed to update user:', error);
-    toast.error(error.message || 'Failed to update user');
-  }
-};
-
-const openDeleteDialog = (user: any) => {
-  userToDelete.value = user;
-  showDeleteDialog.value = true;
-};
-
-const deleteUser = async () => {
-  try {
-    await api.delete(`/setup/users/${userToDelete.value.id}`);
-    toast.success('User deleted successfully');
-    showDeleteDialog.value = false;
-    userToDelete.value = null;
-    await loadUsers();
-  } catch (error: any) {
-    console.error('Failed to delete user:', error);
-    toast.error(error.message || 'Failed to delete user');
-  }
-};
-
-const getUserName = (user: any) => {
-  if (user.firstName || user.lastName) {
-    return [user.firstName, user.lastName].filter(Boolean).join(' ');
-  }
-  return user.email;
-};
-
-const formatDate = (date: string) => {
-  if (!date) return 'N/A';
-  return new Date(date).toLocaleDateString();
-};
-
-onMounted(() => {
-  loadUsers();
-});
-</script>
--- a/infra/.env.api
+++ b/infra/.env.api
--- a/infra/docker-compose.yml
+++ b/infra/docker-compose.yml
@@ -49,8 +49,8 @@ services:
      MYSQL_PASSWORD: platform
    ports:
      - "3306:3306"
-    volumes:
-      - percona-data:/var/lib/mysql
+    ##volumes:
+    ##- percona-data:/var/lib/mysql
    networks:
      - platform-network

--- a/validate-softphone.sh
+++ b/validate-softphone.sh
@@ -1,116 +0,0 @@
-#!/bin/bash
-
-# Softphone Incoming Call System Validation Script
-# This script verifies that all components are properly configured and running
-
-echo "╔════════════════════════════════════════════════════════════════╗"
-echo "║  SOFTPHONE INCOMING CALL SYSTEM VALIDATION                    ║"
-echo "╚════════════════════════════════════════════════════════════════╝"
-echo ""
-
-# Colors for output
-GREEN='\033[0;32m'
-RED='\033[0;31m'
-YELLOW='\033[1;33m'
-NC='\033[0m' # No Color
-
-PASS=0
-FAIL=0
-
-check() {
-    local name=$1
-    local command=$2
-    local expected=$3
-    
-    if eval "$command" > /dev/null 2>&1; then
-        if [ -z "$expected" ] || eval "$command" | grep -q "$expected"; then
-            echo -e "${GREEN}✓${NC} $name"
-            ((PASS++))
-            return 0
-        fi
-    fi
-    echo -e "${RED}✗${NC} $name"
-    ((FAIL++))
-    return 1
-}
-
-echo "🔍 Checking Services..."
-echo ""
-
-# Check backend is running
-check "Backend running on port 3000" "netstat -tuln | grep ':3000'" "3000"
-
-# Check frontend is running
-check "Frontend running on port 3001" "netstat -tuln | grep ':3001'" "3001"
-
-echo ""
-echo "🔍 Checking Backend Configuration..."
-echo ""
-
-# Check backend files exist
-check "Voice controller exists" "test -f /root/neo/backend/src/voice/voice.controller.ts"
-check "Voice gateway exists" "test -f /root/neo/backend/src/voice/voice.gateway.ts"
-
-# Check for inbound TwiML handler
-check "inboundTwiml handler defined" "grep -q '@Post.*twiml/inbound' /root/neo/backend/src/voice/voice.controller.ts"
-
-# Check for notifyIncomingCall method
-check "notifyIncomingCall method exists" "grep -q 'notifyIncomingCall' /root/neo/backend/src/voice/voice.gateway.ts"
-
-# Check for Socket.IO emit in notifyIncomingCall
-check "notifyIncomingCall emits call:incoming" "grep -A3 'notifyIncomingCall' /root/neo/backend/src/voice/voice.gateway.ts | grep -q \"call:incoming\""
-
-echo ""
-echo "🔍 Checking Frontend Configuration..."
-echo ""
-
-# Check frontend files exist
-check "Softphone composable exists" "test -f /root/neo/frontend/composables/useSoftphone.ts"
-check "Softphone dialog component exists" "test -f /root/neo/frontend/components/SoftphoneDialog.vue"
-
-# Check for Socket.IO listener
-check "call:incoming event listener registered" "grep -q \"'call:incoming'\" /root/neo/frontend/composables/useSoftphone.ts"
-
-# Check for handler function
-check "handleIncomingCall function defined" "grep -q 'const handleIncomingCall' /root/neo/frontend/composables/useSoftphone.ts"
-
-# Check that handler updates incomingCall ref
-check "Handler updates incomingCall.value" "grep -A5 'const handleIncomingCall' /root/neo/frontend/composables/useSoftphone.ts | grep -q 'incomingCall.value = data'"
-
-echo ""
-echo "🔍 Checking End-to-End Flow..."
-echo ""
-
-# Check that backend calls notifyIncomingCall in handler
-check "inboundTwiml calls notifyIncomingCall" "grep -A50 '@Post.*twiml/inbound' /root/neo/backend/src/voice/voice.controller.ts | grep -q 'notifyIncomingCall'"
-
-# Check TwiML generation includes Dial
-check "TwiML includes Dial element" "grep -A50 '@Post.*twiml/inbound' /root/neo/backend/src/voice/voice.controller.ts | grep -q '<Dial'"
-
-# Check TwiML includes Client elements
-check "TwiML includes Client dial targets" "grep -A50 '@Post.*twiml/inbound' /root/neo/backend/src/voice/voice.controller.ts | grep -q '<Client>'"
-
-echo ""
-echo "╔════════════════════════════════════════════════════════════════╗"
-echo "║  VALIDATION SUMMARY                                            ║"
-echo "╠════════════════════════════════════════════════════════════════╣"
-printf "║  %-50s  %s  ║\n" "Tests Passed" "${GREEN}${PASS}${NC}"
-printf "║  %-50s  %s  ║\n" "Tests Failed" "${RED}${FAIL}${NC}"
-echo "╚════════════════════════════════════════════════════════════════╝"
-
-if [ $FAIL -eq 0 ]; then
-    echo ""
-    echo -e "${GREEN}✓ All checks passed! System is properly configured.${NC}"
-    echo ""
-    echo "Next Steps:"
-    echo "1. Connect to softphone at http://localhost:3001"
-    echo "2. Open softphone dialog and verify it shows 'Connected' status"
-    echo "3. Make an inbound call to your Twilio number"
-    echo "4. Verify incoming call dialog appears in softphone UI"
-    echo "5. Test accepting/rejecting the call"
-    exit 0
-else
-    echo ""
-    echo -e "${RED}✗ Some checks failed. Review the configuration.${NC}"
-    exit 1
-fi
Author	SHA1	Message	Date
Francisco Gaona	3086f78d34	WIp - manage role permissions per object	2025-12-30 06:16:54 +01:00
Francisco Gaona	d15fc918d1	WIP - field level permission	2025-12-30 05:54:56 +01:00
Francisco Gaona	56c0c3838d	WIP - permissions working as expected	2025-12-30 04:50:51 +01:00
Francisco Gaona	9ac69e30d0	WIP - better handling of viewAll modifyAll	2025-12-30 04:43:51 +01:00
Francisco Gaona	d37183ba45	WIp - fix displaying related model names in lookup fields	2025-12-30 04:22:56 +01:00
Francisco Gaona	b4bdeeb9f6	WIP - permissions progress	2025-12-30 03:26:50 +01:00
Francisco Gaona	f4143ab106	WIP - Fix objection and model registry	2025-12-27 06:08:25 +01:00
Francisco Gaona	516e132611	WIP - move docs	2025-12-24 21:46:05 +01:00
Francisco Gaona	c5305490c1	WIP - use objection and working lookup field to owner	2025-12-24 21:43:58 +01:00
Francisco Gaona	4520f94b69	WIP - using objection base model to handle objects operations	2025-12-24 20:18:43 +01:00
Francisco Gaona	e4f1ba96ad	WIP - custom migrations when object is created	2025-12-24 19:54:13 +01:00
Francisco Gaona	52c0849de2	WIP - manage tenant users from central	2025-12-24 12:17:22 +01:00
Francisco Gaona	b9fa3bd008	WIP - improve login to tenants by domains	2025-12-24 11:42:44 +01:00
Francisco Gaona	2bc672e4c5	WIP - some fixes	2025-12-24 10:54:19 +01:00
Francisco Gaona	962c84e6d2	WIP - fix lookup field	2025-12-24 00:05:15 +01:00
Francisco Gaona	fc1bec4de7	WIP - related lists and look up field	2025-12-23 23:59:04 +01:00
Francisco Gaona	0275b96014	WIP - central operations	2025-12-23 23:38:45 +01:00
Francisco Gaona	e4f3bad971	WIp - fix login into central	2025-12-23 22:16:58 +01:00